@fedify/fedify 2.4.0-dev.1583 → 2.4.0-dev.1618

package/dist/{middleware-DszmUorL.cjs → middleware-nmfhGFtV.cjs}

@@ -1,11 +1,11 @@
-const { Temporal } = require("@js-temporal/polyfill");
 const { URLPattern } = require("urlpattern-polyfill");
-const require_chunk = require("./chunk-DDcVe30Y.cjs");
-const require_transformers = require("./transformers-NeAONrAq.cjs");
-const require_http = require("./http-jCq51U37.cjs");
-const require_proof = require("./proof-DkeR_Fsm.cjs");
-const require_types = require("./types-KC4QAoxe.cjs");
-const require_kv_cache = require("./kv-cache-B9Zvq4xB.cjs");
+const require_chunk = require("./chunk-Czpeue4M.cjs");
+const require_transformers = require("./transformers-DGwl-hD1.cjs");
+const require_http = require("./http-D5ylizT7.cjs");
+const require_temporal_polyfill = require("./temporal-polyfill-BCdTHexd.cjs");
+const require_proof = require("./proof-DcOiiLDF.cjs");
+const require_types = require("./types-CPym83zc.cjs");
+const require_kv_cache = require("./kv-cache-DbFdquuM.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _fedify_uri_template = require("@fedify/uri-template");
 let _fedify_vocab = require("@fedify/vocab");
@@ -103,6 +103,9 @@ var FederationBuilderImpl = class {
 	inboxErrorHandler;
 	outboxListenerErrorHandler;
 	outboxAuthorizePredicate;
+	mediaUploaderPath;
+	mediaUploaderCallback;
+	mediaUploaderAuthorizePredicate;
 	sharedInboxKeyDispatcher;
 	unverifiedActivityHandler;
 	outboxPermanentFailureHandler;
@@ -155,6 +158,9 @@ var FederationBuilderImpl = class {
 		f.inboxErrorHandler = this.inboxErrorHandler;
 		f.outboxListenerErrorHandler = this.outboxListenerErrorHandler;
 		f.outboxAuthorizePredicate = this.outboxAuthorizePredicate;
+		f.mediaUploaderPath = this.mediaUploaderPath;
+		f.mediaUploaderCallback = this.mediaUploaderCallback;
+		f.mediaUploaderAuthorizePredicate = this.mediaUploaderAuthorizePredicate;
 		f.sharedInboxKeyDispatcher = this.sharedInboxKeyDispatcher;
 		f.unverifiedActivityHandler = this.unverifiedActivityHandler;
 		f.outboxPermanentFailureHandler = this.outboxPermanentFailureHandler;
@@ -233,6 +239,10 @@ var FederationBuilderImpl = class {
 				if (actor.publicKeyId == null) logger.warn("You configured a key pairs dispatcher, but the actor does not have a publicKey property.  Set the property with Context.getActorKeyPairs(identifier).");
 				if (actor.assertionMethodId == null) logger.warn("You configured a key pairs dispatcher, but the actor does not have an assertionMethod property.  Set the property with Context.getActorKeyPairs(identifier).");
 			}
+			if (this.mediaUploaderCallback != null) {
+				if (actor.endpoints == null || actor.endpoints.uploadMedia == null) logger.warn("You configured a media uploader, but the actor does not have a endpoints.uploadMedia property.  Set the property with Context.getMediaUploaderUri(identifier).");
+				else if (actor.endpoints.uploadMedia.href != context.getMediaUploaderUri(identifier).href) logger.warn("You configured a media uploader, but the actor's endpoints.uploadMedia property does not match the media upload endpoint URI.  Set the property with Context.getMediaUploaderUri(identifier).");
+			}
 			return actor;
 		} };
 		this.actorCallbacks = callbacks;
@@ -445,6 +455,18 @@ var FederationBuilderImpl = class {
 		};
 		return setters;
 	}
+	setMediaUploader(path, callback) {
+		if (this.mediaUploaderCallback != null) throw new _fedify_uri_template.RouterError("Media uploader already set.");
+		(0, _fedify_uri_template.assertPath)(path);
+		this.router.add(path, "mediaUploader", identifierSingular);
+		this.mediaUploaderPath = path;
+		this.mediaUploaderCallback = callback;
+		const setters = { authorize: (predicate) => {
+			this.mediaUploaderAuthorizePredicate = predicate;
+			return setters;
+		} };
+		return setters;
+	}
 	setFollowingDispatcher(path, dispatcher) {
 		if (this.router.has("following")) throw new _fedify_uri_template.RouterError("Following collection dispatcher already set.");
 		(0, _fedify_uri_template.assertPath)(path);
@@ -701,6 +723,7 @@ function createFederationBuilder() {
 }
 //#endregion
 //#region src/federation/circuit-breaker.ts
+const Temporal$8 = require_temporal_polyfill.Temporal;
 const MAX_CUSTOM_FAILURE_HISTORY = 100;
 /**
 * Tracks reachability state for remote outbox delivery hosts.
@@ -716,7 +739,7 @@ var CircuitBreaker = class {
 		this.#kv = options.kv;
 		this.#prefix = options.prefix;
 		this.#options = normalizeCircuitBreakerOptions(options.options ?? {});
-		this.#now = options.now ?? (() => Temporal.Now.instant());
+		this.#now = options.now ?? (() => Temporal$8.Now.instant());
 		this.#stateChangeObserver = options.stateChangeObserver;
 	}
 	get options() {
@@ -729,7 +752,7 @@ var CircuitBreaker = class {
 	async beforeSend(remoteHost, message) {
 		const heldSince = parseHeldSince(message.circuitHeldSince);
 		const now = this.#now();
-		if (heldSince != null && Temporal.Instant.compare(heldSince.add(this.#options.heldActivityTtl), now) <= 0) return {
+		if (heldSince != null && Temporal$8.Instant.compare(heldSince.add(this.#options.heldActivityTtl), now) <= 0) return {
 			type: "drop",
 			heldSince
 		};
@@ -741,12 +764,12 @@ var CircuitBreaker = class {
 				probe: false
 			};
 			if (oldState.state === "half-open") {
-				const halfOpened = oldState.halfOpened == null ? void 0 : Temporal.Instant.from(oldState.halfOpened);
+				const halfOpened = oldState.halfOpened == null ? void 0 : Temporal$8.Instant.from(oldState.halfOpened);
 				if (halfOpened != null) {
 					const staleAt = halfOpened.add(this.#options.recoveryDelay);
-					if (Temporal.Instant.compare(now, staleAt) < 0) {
+					if (Temporal$8.Instant.compare(now, staleAt) < 0) {
 						const releaseAt = now.add(this.#options.releaseInterval);
-						const retryAt = Temporal.Instant.compare(releaseAt, staleAt) < 0 ? releaseAt : staleAt;
+						const retryAt = Temporal$8.Instant.compare(releaseAt, staleAt) < 0 ? releaseAt : staleAt;
 						const cappedRetryAt = this.#capHeldRetryAt(now, heldSince, retryAt);
 						return {
 							type: "hold",
@@ -768,8 +791,8 @@ var CircuitBreaker = class {
 				lastConflictingState = "half-open";
 				continue;
 			}
-			const probeAt = (oldState.opened == null ? now : Temporal.Instant.from(oldState.opened)).add(this.#options.recoveryDelay);
-			if (Temporal.Instant.compare(now, probeAt) < 0) {
+			const probeAt = (oldState.opened == null ? now : Temporal$8.Instant.from(oldState.opened)).add(this.#options.recoveryDelay);
+			if (Temporal$8.Instant.compare(now, probeAt) < 0) {
 				const retryAt = this.#capHeldRetryAt(now, heldSince, probeAt);
 				return {
 					type: "hold",
@@ -832,7 +855,7 @@ var CircuitBreaker = class {
 		for (let attempt = 0; attempt < 10; attempt++) {
 			const oldState = await this.#get(remoteHost);
 			if (oldState?.state === "open") return void 0;
-			const oldFailures = oldState?.failures.map(Temporal.Instant.from) ?? [];
+			const oldFailures = oldState?.failures.map(Temporal$8.Instant.from) ?? [];
 			const failures = this.#options.pruneFailures([...oldFailures, now], now);
 			let newState;
 			let transition;
@@ -882,7 +905,7 @@ var CircuitBreaker = class {
 	}
 	#capHeldRetryAt(now, heldSince, retryAt) {
 		const expiresAt = (heldSince ?? now).add(this.#options.heldActivityTtl);
-		return Temporal.Instant.compare(expiresAt, retryAt) < 0 ? expiresAt : retryAt;
+		return Temporal$8.Instant.compare(expiresAt, retryAt) < 0 ? expiresAt : retryAt;
 	}
 	async #get(remoteHost) {
 		return parseCircuitBreakerKvState(await this.#kv.get(this.#key(remoteHost)));
@@ -953,13 +976,13 @@ function normalizeCircuitBreakerOptions(options) {
 		assertPositiveDuration(failureWindow, "failureWindow");
 		pruneFailures = (timestamps, now) => {
 			const earliest = now.subtract(failureWindow);
-			return timestamps.filter((timestamp) => Temporal.Instant.compare(timestamp, earliest) >= 0).slice(-failureThreshold);
+			return timestamps.filter((timestamp) => Temporal$8.Instant.compare(timestamp, earliest) >= 0).slice(-failureThreshold);
 		};
 		failure = (timestamps) => {
 			if (timestamps.length < failureThreshold) return false;
 			const first = timestamps[timestamps.length - failureThreshold];
 			const last = timestamps[timestamps.length - 1];
-			return Temporal.Duration.compare(first.until(last), failureWindow) <= 0;
+			return Temporal$8.Duration.compare(first.until(last), failureWindow) <= 0;
 		};
 	} else {
 		failure = options.failure;
@@ -976,19 +999,19 @@ function normalizeCircuitBreakerOptions(options) {
 	};
 }
 function toInstantDuration(duration) {
-	const parsed = Temporal.Duration.from(duration);
-	return Temporal.Duration.from({ milliseconds: Math.trunc(parsed.total({
+	const parsed = Temporal$8.Duration.from(duration);
+	return Temporal$8.Duration.from({ milliseconds: Math.trunc(parsed.total({
 		unit: "millisecond",
-		relativeTo: Temporal.PlainDateTime.from("2026-01-01T00:00:00")
+		relativeTo: Temporal$8.PlainDateTime.from("2026-01-01T00:00:00")
 	})) });
 }
 function assertPositiveDuration(duration, name) {
-	if (Temporal.Duration.compare(duration, { seconds: 0 }) <= 0) throw new RangeError(`${name} must be a positive duration.`);
+	if (Temporal$8.Duration.compare(duration, { seconds: 0 }) <= 0) throw new RangeError(`${name} must be a positive duration.`);
 }
 function parseHeldSince(value) {
 	if (value == null) return void 0;
 	try {
-		return Temporal.Instant.from(value);
+		return Temporal$8.Instant.from(value);
 	} catch (error) {
 		(0, _logtape_logtape.getLogger)([
 			"fedify",
@@ -1012,7 +1035,7 @@ function parseCircuitBreakerKvState(value) {
 	const isInstantString = (v) => {
 		if (typeof v !== "string") return false;
 		try {
-			Temporal.Instant.from(v);
+			Temporal$8.Instant.from(v);
 			return true;
 		} catch {
 			return false;
@@ -1072,6 +1095,7 @@ async function buildCollectionSynchronizationHeader(collectionId, actorIds) {
 }
 //#endregion
 //#region src/federation/inbox.ts
+const Temporal$7 = require_temporal_polyfill.Temporal;
 async function routeActivity({ context: ctx, json, originalJson, normalizedActivity, ldSignatureVerified, activity, recipient, inboxListeners, inboxContextFactory, listenerInboxContextFactory, inboxErrorHandler, kv, kvPrefixes, queue, span, meterProvider, tracerProvider, idempotencyStrategy }) {
 	const logger = (0, _logtape_logtape.getLogger)([
 		"fedify",
@@ -1218,7 +1242,7 @@ async function routeActivity({ context: ctx, json, originalJson, normalizedActiv
 			return "error";
 		}
 		require_http.recordInboxActivity(meterProvider, "processed", (0, _fedify_vocab.getTypeId)(activity).href);
-		if (cacheKey != null) await kv.set(cacheKey, true, { ttl: Temporal.Duration.from({ days: 1 }) });
+		if (cacheKey != null) await kv.set(cacheKey, true, { ttl: Temporal$7.Duration.from({ days: 1 }) });
 		logger.info("Activity {activityId} has been processed.", {
 			activityId: activity.id?.href,
 			activity: json,
@@ -1230,6 +1254,7 @@ async function routeActivity({ context: ctx, json, originalJson, normalizedActiv
 }
 //#endregion
 //#region src/federation/keycache.ts
+const Temporal$6 = require_temporal_polyfill.Temporal;
 var KvKeyCache = class {
 	kv;
 	prefix;
@@ -1240,7 +1265,7 @@ var KvKeyCache = class {
 		this.kv = kv;
 		this.prefix = prefix;
 		this.options = options;
-		this.unavailableKeyTtl = options.unavailableKeyTtl ?? Temporal.Duration.from({ minutes: 10 });
+		this.unavailableKeyTtl = options.unavailableKeyTtl ?? Temporal$6.Duration.from({ minutes: 10 });
 		this.nullKeys = /* @__PURE__ */ new Map();
 	}
 	#getFetchErrorKey(keyId) {
@@ -1253,13 +1278,13 @@ var KvKeyCache = class {
 	async get(keyId) {
 		const negativeExpiration = this.nullKeys.get(keyId.href);
 		if (negativeExpiration != null) {
-			if (Temporal.Now.instant().until(negativeExpiration).sign >= 0) return null;
+			if (Temporal$6.Now.instant().until(negativeExpiration).sign >= 0) return null;
 			this.nullKeys.delete(keyId.href);
 		}
 		const serialized = await this.kv.get([...this.prefix, keyId.href]);
 		if (serialized === void 0) return void 0;
 		if (serialized === null) {
-			this.nullKeys.set(keyId.href, Temporal.Now.instant().add(this.unavailableKeyTtl));
+			this.nullKeys.set(keyId.href, Temporal$6.Now.instant().add(this.unavailableKeyTtl));
 			return null;
 		}
 		try {
@@ -1275,7 +1300,7 @@ var KvKeyCache = class {
 	}
 	async set(keyId, key) {
 		if (key == null) {
-			this.nullKeys.set(keyId.href, Temporal.Now.instant().add(this.unavailableKeyTtl));
+			this.nullKeys.set(keyId.href, Temporal$6.Now.instant().add(this.unavailableKeyTtl));
 			await this.kv.set([...this.prefix, keyId.href], null, { ttl: this.unavailableKeyTtl });
 			return;
 		}
@@ -1414,6 +1439,7 @@ function acceptsJsonLd(request) {
 }
 //#endregion
 //#region src/federation/temporal.ts
+const Temporal$5 = require_temporal_polyfill.Temporal;
 function isPlainObject$1(value) {
 	return typeof value === "object" && value != null && !Array.isArray(value);
 }
@@ -1423,7 +1449,7 @@ function normalizeDateTimeLiteral(value) {
 function isMalformedDateTimeLiteral(value) {
 	if (typeof value !== "string") return false;
 	try {
-		Temporal.Instant.from(normalizeDateTimeLiteral(value));
+		Temporal$5.Instant.from(normalizeDateTimeLiteral(value));
 		return false;
 	} catch {
 		return true;
@@ -1432,7 +1458,7 @@ function isMalformedDateTimeLiteral(value) {
 function isMalformedDurationLiteral(value) {
 	if (typeof value !== "string") return false;
 	try {
-		Temporal.Duration.from(value);
+		Temporal$5.Duration.from(value);
 		return false;
 	} catch {
 		return true;
@@ -1503,6 +1529,7 @@ async function hasMalformedKnownTemporalLiteral(value, contextLoader) {
 }
 //#endregion
 //#region src/federation/handler.ts
+const Temporal$4 = require_temporal_polyfill.Temporal;
 const rawInboxContextFactorySymbol = Symbol("fedify.rawInboxContextFactory");
 function isRemoteContextLoadingFailure$1(error) {
 	return error instanceof Error && typeof error.details === "object" && error.details != null && error.details.code === "loading remote context failed";
@@ -2015,6 +2042,193 @@ async function handleOutbox(request, { identifier, context: ctx, outboxContextFa
 		headers: { "Content-Type": "text/plain; charset=utf-8" }
 	});
 }
+const plainTextHeaders = { "Content-Type": "text/plain; charset=utf-8" };
+/**
+* Handles a media upload request (the [ActivityPub Media Upload
+* extension](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload)).
+* @template TContextData The context data to pass to the context.
+* @param request The HTTP request.
+* @param parameters The parameters for handling the request.
+* @returns A promise that resolves to an HTTP response.
+* @since 2.4.0
+*/
+async function handleMediaUpload(request, { identifier, context: ctx, mediaUploaderCallback, actorDispatcher, authorizePredicate, isRegisteredObjectUri, onUnauthorized, onNotFound }) {
+	const logger = (0, _logtape_logtape.getLogger)([
+		"fedify",
+		"federation",
+		"mediaUploader"
+	]);
+	if (request.bodyUsed) {
+		logger.error("Request body has already been read.", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	} else if (request.body?.locked) {
+		logger.error("Request body is locked.", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	const contentType = request.headers.get("content-type");
+	if (contentType == null || !contentType.toLowerCase().startsWith("multipart/form-data")) {
+		logger.error("The media upload request is not multipart/form-data (got {contentType}).", {
+			identifier,
+			contentType
+		});
+		return new Response("Unsupported media type.", {
+			status: 415,
+			headers: plainTextHeaders
+		});
+	}
+	if (actorDispatcher == null) {
+		logger.error("Actor dispatcher is not set.", { identifier });
+		return await onNotFound(request);
+	}
+	const actor = await actorDispatcher(ctx, identifier);
+	if (actor == null || actor instanceof _fedify_vocab.Tombstone) {
+		logger.error("Actor {identifier} not found.", { identifier });
+		return await onNotFound(request);
+	}
+	if (authorizePredicate != null) {
+		let body;
+		try {
+			body = await request.arrayBuffer();
+		} catch (error) {
+			logger.error("Failed to read the multipart/form-data body:\n{error}", {
+				identifier,
+				error
+			});
+			return new Response("Invalid multipart/form-data body.", {
+				status: 400,
+				headers: plainTextHeaders
+			});
+		}
+		const rebuild = () => new Request(request.url, {
+			method: request.method,
+			headers: request.headers,
+			body: body.byteLength > 0 ? body : void 0
+		});
+		const authorizeContext = ctx.clone(ctx.data);
+		authorizeContext.request = rebuild();
+		if (!await authorizePredicate(authorizeContext, identifier)) return await onUnauthorized(rebuild());
+		request = rebuild();
+	}
+	let form;
+	try {
+		form = await request.formData();
+	} catch (error) {
+		logger.error("Failed to parse the multipart/form-data body:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Invalid multipart/form-data body.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	const file = form.get("file");
+	if (!(file instanceof File)) {
+		logger.error("The media upload request has no file field.", { identifier });
+		return new Response("Missing file field.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	const objectField = form.get("object");
+	if (objectField == null) {
+		logger.error("The media upload request has no object field.", { identifier });
+		return new Response("Missing object field.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	let object;
+	try {
+		const objectText = typeof objectField === "string" ? objectField : await objectField.text();
+		object = await _fedify_vocab.Object.fromJsonLd(JSON.parse(objectText), ctx);
+	} catch (error) {
+		logger.error("Failed to parse the object field:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Invalid object field.", {
+			status: 400,
+			headers: plainTextHeaders
+		});
+	}
+	let result;
+	try {
+		result = await mediaUploaderCallback(ctx, identifier, file, object);
+	} catch (error) {
+		logger.error("Failed to process the media upload:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	if (result == null) {
+		logger.error("The media uploader callback for {identifier} returned null or undefined; it must return an object (201 Created) or a URL (202 Accepted).", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	const warnUnlessRegistered = (target) => {
+		if (isRegisteredObjectUri(target)) return;
+		logger.warn("The media uploader callback for {identifier} returned {target}, which does not point at a registered object dispatcher route; derive the returned id/URL from Context.getObjectUri().  The upload still succeeded.", {
+			identifier,
+			target: target.href
+		});
+	};
+	if (result instanceof URL) {
+		warnUnlessRegistered(result);
+		logger.info("The media upload for {identifier} is still being processed; responding 202 Accepted.", {
+			identifier,
+			location: result.href
+		});
+		return new Response(null, {
+			status: 202,
+			headers: { Location: result.href }
+		});
+	}
+	if (result.id == null) {
+		logger.error("The media uploader callback for {identifier} returned an object without an id, so a 201 Created response cannot include the required Location header.  Set the object's id with Context.getObjectUri(), or return the eventual URL to respond 202 Accepted instead.", { identifier });
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	warnUnlessRegistered(result.id);
+	let jsonLd;
+	try {
+		jsonLd = await result.toJsonLd(ctx);
+	} catch (error) {
+		logger.error("Failed to serialize the uploaded object to JSON-LD:\n{error}", {
+			identifier,
+			error
+		});
+		return new Response("Internal server error.", {
+			status: 500,
+			headers: plainTextHeaders
+		});
+	}
+	logger.info("The media upload for {identifier} is ready; responding 201 Created.", {
+		identifier,
+		location: result.id.href
+	});
+	return new Response(JSON.stringify(jsonLd), {
+		status: 201,
+		headers: {
+			"Content-Type": "application/activity+json",
+			Location: result.id.href
+		}
+	});
+}
 /**
 * Handles an inbox request for ActivityPub activities.
 * @template TContextData The context data to pass to the context.
@@ -3070,7 +3284,7 @@ async function buildAcceptSignatureHeader(policy, kv, noncePrefix) {
 }
 async function setKey(kv, key, policy) {
 	const seconds = policy.nonceTtlSeconds ?? 300;
-	const ttl = Temporal.Duration.from({ seconds });
+	const ttl = Temporal$4.Duration.from({ seconds });
 	await kv.set(key, true, { ttl });
 }
 const DEF_COMPONENTS = [
@@ -3545,6 +3759,7 @@ function serializeDataPointType(dataPointType) {
 }
 //#endregion
 //#region src/federation/retry.ts
+const Temporal$3 = require_temporal_polyfill.Temporal;
 /**
 * Creates an exponential backoff retry policy.  The delay between retries
 * starts at the `initialDelay` and is multiplied by the `factor` for each
@@ -3556,8 +3771,8 @@ function serializeDataPointType(dataPointType) {
 * @since 0.12.0
 */
 function createExponentialBackoffPolicy(options = {}) {
-	const initialDelay = Temporal.Duration.from(options.initialDelay ?? { seconds: 1 });
-	const maxDelay = Temporal.Duration.from(options.maxDelay ?? { hours: 12 });
+	const initialDelay = Temporal$3.Duration.from(options.initialDelay ?? { seconds: 1 });
+	const maxDelay = Temporal$3.Duration.from(options.maxDelay ?? { hours: 12 });
 	const maxAttempts = options.maxAttempts ?? 10;
 	const factor = options.factor ?? 2;
 	const jitter = options.jitter ?? true;
@@ -3569,8 +3784,8 @@ function createExponentialBackoffPolicy(options = {}) {
 			milliseconds *= 1 + Math.random();
 			milliseconds = Math.round(milliseconds);
 		}
-		const delay = Temporal.Duration.from({ milliseconds });
-		return Temporal.Duration.compare(delay, maxDelay) > 0 ? maxDelay : delay;
+		const delay = Temporal$3.Duration.from({ milliseconds });
+		return Temporal$3.Duration.compare(delay, maxDelay) > 0 ? maxDelay : delay;
 	};
 }
 //#endregion
@@ -3693,6 +3908,7 @@ const classReviver = (filter, init, set) => (seen, revive, node) => {
 };
 //#endregion
 //#region src/federation/mq.ts
+const Temporal$2 = require_temporal_polyfill.Temporal;
 /**
 * A message queue that processes messages in the same process.
 * Do not use this in production as it does neither persist messages nor
@@ -3727,7 +3943,7 @@ var InProcessMessageQueue = class {
 	constructor(options = {}) {
 		this.#messages = [];
 		this.#monitors = {};
-		this.#pollIntervalMs = Temporal.Duration.from(options.pollInterval ?? { seconds: 5 }).total("millisecond");
+		this.#pollIntervalMs = Temporal$2.Duration.from(options.pollInterval ?? { seconds: 5 }).total("millisecond");
 		this.#delayedMessages = 0;
 		this.#processingKeys = /* @__PURE__ */ new Set();
 	}
@@ -3973,6 +4189,7 @@ var ParallelMessageQueue = class ParallelMessageQueue {
 *
 * @module
 */
+const Temporal$1 = require_temporal_polyfill.Temporal;
 /**
 * Validates the task handle, plans deduplication, encodes every payload, then
 * dispatches the resulting messages to the queue.  A single item flows through
@@ -4018,7 +4235,7 @@ const enqueueTasks = (ctx) => async function(task, items, options) {
 		throw error;
 	}
 };
-const getDurationIfDefined = (item) => item == null ? void 0 : Temporal.Duration.from(item);
+const getDurationIfDefined = (item) => item == null ? void 0 : Temporal$1.Duration.from(item);
 /**
 * Decides how a `deduplicationKey` (if any) is honored: forwarded to a native
 * queue, claimed via `cas`, or—when neither is available—dropped or rejected
@@ -4124,7 +4341,7 @@ const encodeTaskMessage = (codec, origin, task, options) => async (data) => {
 		baseUrl: origin,
 		taskName: task.name,
 		data: encoded,
-		started: Temporal.Now.instant().toString(),
+		started: Temporal$1.Now.instant().toString(),
 		attempt: 0,
 		orderingKey: options.orderingKey,
 		traceContext: carrier
@@ -4352,6 +4569,7 @@ var middleware_exports = /* @__PURE__ */ require_chunk.__exportAll({
 	OutboxContextImpl: () => OutboxContextImpl,
 	createFederation: () => createFederation
 });
+const Temporal = require_temporal_polyfill.Temporal;
 const circuitBreakerCasWarningKvStores = /* @__PURE__ */ new WeakSet();
 let nextQueueDepthGaugeSourceId = 0;
 const retryAfterHttpDate = /* @__PURE__ */ new RegExp("^(?:(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun), \\d{2} (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) \\d{4} \\d{2}:\\d{2}:\\d{2} GMT|(?:Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|Sunday), \\d{2}-(?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)-\\d{2} \\d{2}:\\d{2}:\\d{2} GMT|(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun) (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) (?: \\d|\\d{2}) \\d{2}:\\d{2}:\\d{2} \\d{4})$");
@@ -4518,6 +4736,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 	benchmarkMode;
 	benchmarkMetricReader;
 	benchmarkTriggerOptions;
+	#mediaUploaderNoAuthWarned = false;
 	#queueDepthGaugeSourceId = `fedify-${(++nextQueueDepthGaugeSourceId).toString(36)}`;
 	#queueDepthGaugeEntries = [];
 	#queueDepthGaugeMeterProvider;
@@ -5833,6 +6052,32 @@ var FederationImpl = class extends FederationBuilderImpl {
 			});
 			case "benchmarkStats": return await handleBenchmarkStats(request, this.benchmarkMetricReader);
 			case "benchmarkTrigger": return await handleBenchmarkTrigger(request, context, this.benchmarkTriggerOptions);
+			case "mediaUploader":
+				if (request.method !== "POST" || this.mediaUploaderCallback == null) return new Response("Method not allowed.", {
+					status: 405,
+					headers: {
+						Allow: "POST",
+						"Content-Type": "text/plain; charset=utf-8"
+					}
+				});
+				if (this.mediaUploaderAuthorizePredicate == null && !this.#mediaUploaderNoAuthWarned) {
+					this.#mediaUploaderNoAuthWarned = true;
+					(0, _logtape_logtape.getLogger)([
+						"fedify",
+						"federation",
+						"mediaUploader"
+					]).warn("The media uploader is registered without an authorize() hook, so it accepts uploads from anyone who can reach the endpoint.  Protect it with .authorize() unless a public upload endpoint is intended.");
+				}
+				return await handleMediaUpload(request, {
+					identifier: route.values.identifier,
+					context,
+					mediaUploaderCallback: this.mediaUploaderCallback,
+					actorDispatcher: this.actorCallbacks?.dispatcher,
+					authorizePredicate: this.mediaUploaderAuthorizePredicate,
+					isRegisteredObjectUri: (uri) => context.parseUri(uri)?.type === "object",
+					onUnauthorized,
+					onNotFound
+				});
 		}
 		if (request.method !== "POST" && !acceptsJsonLd(request)) {
 			metricState.endpoint = "not_acceptable";
@@ -6067,6 +6312,7 @@ function getEndpointCategory(routeName) {
 		case "inbox": return "inbox";
 		case "sharedInbox": return "shared_inbox";
 		case "outbox": return "outbox";
+		case "mediaUploader": return "media_upload";
 		case "following": return "following";
 		case "followers": return "followers";
 		case "liked": return "liked";
@@ -6200,6 +6446,11 @@ var ContextImpl = class ContextImpl {
 		if (path == null) throw new _fedify_uri_template.RouterError("No outbox dispatcher registered.");
 		return new URL(path, this.canonicalOrigin);
 	}
+	getMediaUploaderUri(identifier) {
+		const path = this.federation.router.build("mediaUploader", { identifier });
+		if (path == null) throw new _fedify_uri_template.RouterError("No media uploader registered.");
+		return new URL(path, this.canonicalOrigin);
+	}
 	getInboxUri(identifier) {
 		if (identifier == null) {
 			const path = this.federation.router.build("sharedInbox", {});

package/dist/{mod-Cmr39iWq.d.ts → mod-DLc2Ot6f.d.ts}

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { At as WebFingerLinksDispatcher, ct as ActorDispatcher, l as RequestContext, lt as ActorHandleMapper, st as ActorAliasMapper } from "./context-GfQA-CqB.js";
+import { Mt as WebFingerLinksDispatcher, ct as ActorAliasMapper, l as RequestContext, lt as ActorDispatcher, ut as ActorHandleMapper } from "./context-Zii1f5xS.js";
 import { RouterError, RouterOptions, RouterRouteResult } from "@fedify/uri-template";
 import { MeterProvider, Span, Tracer } from "@opentelemetry/api";
 

package/dist/{mod-B8Efb9qp.d.cts → mod-gOlPDuT8.d.cts}

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { At as WebFingerLinksDispatcher, ct as ActorDispatcher, l as RequestContext, lt as ActorHandleMapper, st as ActorAliasMapper } from "./context-BLe0NPtZ.cjs";
+import { Mt as WebFingerLinksDispatcher, ct as ActorAliasMapper, l as RequestContext, lt as ActorDispatcher, ut as ActorHandleMapper } from "./context-lxX6I7as.cjs";
 import { MeterProvider, Span, Tracer } from "@opentelemetry/api";
 import { RouterError, RouterOptions, RouterRouteResult } from "@fedify/uri-template";
 

package/dist/mod.cjs

@@ -1,14 +1,13 @@
-const { Temporal } = require("@js-temporal/polyfill");
 const { URLPattern } = require("urlpattern-polyfill");
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("./chunk-DDcVe30Y.cjs");
-const require_transformers = require("./transformers-NeAONrAq.cjs");
+require("./chunk-Czpeue4M.cjs");
+const require_transformers = require("./transformers-DGwl-hD1.cjs");
 require("./compat/mod.cjs");
-const require_http = require("./http-jCq51U37.cjs");
-const require_middleware = require("./middleware-DszmUorL.cjs");
-const require_proof = require("./proof-DkeR_Fsm.cjs");
-const require_types = require("./types-KC4QAoxe.cjs");
-const require_kv_cache = require("./kv-cache-B9Zvq4xB.cjs");
+const require_http = require("./http-D5ylizT7.cjs");
+const require_middleware = require("./middleware-nmfhGFtV.cjs");
+const require_proof = require("./proof-DcOiiLDF.cjs");
+const require_types = require("./types-CPym83zc.cjs");
+const require_kv_cache = require("./kv-cache-DbFdquuM.cjs");
 const require_federation_mod = require("./federation/mod.cjs");
 require("./nodeinfo/mod.cjs");
 require("./runtime/mod.cjs");