@fedify/fedify 2.4.0-dev.1599 → 2.4.0-dev.1634

package/dist/{builder-BvCI7Xch.mjs → builder-DYAAegyy.mjs}

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-BCt09TJn.mjs";
+import { n as version, t as name } from "./deno-C30u61BX.mjs";
 import { t as ActivityListenerSet } from "./activity-listener-BtTSxZWA.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Router, RouterError, assertPath } from "@fedify/uri-template";
@@ -55,6 +55,9 @@ var FederationBuilderImpl = class {
 	inboxErrorHandler;
 	outboxListenerErrorHandler;
 	outboxAuthorizePredicate;
+	mediaUploaderPath;
+	mediaUploaderCallback;
+	mediaUploaderAuthorizePredicate;
 	sharedInboxKeyDispatcher;
 	unverifiedActivityHandler;
 	outboxPermanentFailureHandler;
@@ -82,7 +85,7 @@ var FederationBuilderImpl = class {
 	* specified.
 	*/
 	async build(options) {
-		const { FederationImpl } = await import("./middleware-HFQkD-r8.mjs");
+		const { FederationImpl } = await import("./middleware-DloBgcWp.mjs");
 		const f = new FederationImpl(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();
@@ -107,6 +110,9 @@ var FederationBuilderImpl = class {
 		f.inboxErrorHandler = this.inboxErrorHandler;
 		f.outboxListenerErrorHandler = this.outboxListenerErrorHandler;
 		f.outboxAuthorizePredicate = this.outboxAuthorizePredicate;
+		f.mediaUploaderPath = this.mediaUploaderPath;
+		f.mediaUploaderCallback = this.mediaUploaderCallback;
+		f.mediaUploaderAuthorizePredicate = this.mediaUploaderAuthorizePredicate;
 		f.sharedInboxKeyDispatcher = this.sharedInboxKeyDispatcher;
 		f.unverifiedActivityHandler = this.unverifiedActivityHandler;
 		f.outboxPermanentFailureHandler = this.outboxPermanentFailureHandler;
@@ -185,6 +191,10 @@ var FederationBuilderImpl = class {
 				if (actor.publicKeyId == null) logger.warn("You configured a key pairs dispatcher, but the actor does not have a publicKey property.  Set the property with Context.getActorKeyPairs(identifier).");
 				if (actor.assertionMethodId == null) logger.warn("You configured a key pairs dispatcher, but the actor does not have an assertionMethod property.  Set the property with Context.getActorKeyPairs(identifier).");
 			}
+			if (this.mediaUploaderCallback != null) {
+				if (actor.endpoints == null || actor.endpoints.uploadMedia == null) logger.warn("You configured a media uploader, but the actor does not have a endpoints.uploadMedia property.  Set the property with Context.getMediaUploaderUri(identifier).");
+				else if (actor.endpoints.uploadMedia.href != context.getMediaUploaderUri(identifier).href) logger.warn("You configured a media uploader, but the actor's endpoints.uploadMedia property does not match the media upload endpoint URI.  Set the property with Context.getMediaUploaderUri(identifier).");
+			}
 			return actor;
 		} };
 		this.actorCallbacks = callbacks;
@@ -397,6 +407,18 @@ var FederationBuilderImpl = class {
 		};
 		return setters;
 	}
+	setMediaUploader(path, callback) {
+		if (this.mediaUploaderCallback != null) throw new RouterError("Media uploader already set.");
+		assertPath(path);
+		this.router.add(path, "mediaUploader", identifierSingular);
+		this.mediaUploaderPath = path;
+		this.mediaUploaderCallback = callback;
+		const setters = { authorize: (predicate) => {
+			this.mediaUploaderAuthorizePredicate = predicate;
+			return setters;
+		} };
+		return setters;
+	}
 	setFollowingDispatcher(path, dispatcher) {
 		if (this.router.has("following")) throw new RouterError("Following collection dispatcher already set.");
 		assertPath(path);

package/dist/compat/mod.d.cts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { It as ActivityTransformer, n as Context } from "../context-BLe0NPtZ.cjs";
+import { Rt as ActivityTransformer, n as Context } from "../context-lxX6I7as.cjs";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/mod.d.ts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { It as ActivityTransformer, n as Context } from "../context-GfQA-CqB.js";
+import { Rt as ActivityTransformer, n as Context } from "../context-Zii1f5xS.js";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/transformers.test.mjs

@@ -5,7 +5,7 @@ import { t as MemoryKvStore } from "../kv-CXBAok3k.mjs";
 import { t as assertEquals } from "../assert_equals-BV7oLMxm.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-Q9KTBnrf.mjs";
 import { t as assert } from "../assert-CJ1KXcvv.mjs";
-import { b as autoIdAssigner, n as FederationImpl, y as actorDehydrator } from "../middleware-DGEQ07xT.mjs";
+import { b as autoIdAssigner, n as FederationImpl, y as actorDehydrator } from "../middleware-CPlgpBML.mjs";
 import { Follow, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 //#region src/compat/transformers.test.ts

package/dist/{context-C7Sbmci2.mjs → context-BJXxPElm.mjs}

@@ -66,7 +66,7 @@ const testDefinitions = [];
 //#endregion
 //#region src/testing/context.ts
 function createContext(values) {
-	const { federation, url = new URL("http://example.com/"), canonicalOrigin, data, documentLoader, contextLoader, meterProvider, tracerProvider, clone, getNodeInfoUri, getActorUri, getObjectUri, getCollectionUri, getOutboxUri, getInboxUri, getFollowingUri, getFollowersUri, getLikedUri, getFeaturedUri, getFeaturedTagsUri, parseUri, getActorKeyPairs, getDocumentLoader, lookupObject: lookupObject$1, traverseCollection: traverseCollection$1, lookupNodeInfo, lookupWebFinger: lookupWebFinger$1, sendActivity, routeActivity, enqueueTask, enqueueTaskMany } = values;
+	const { federation, url = new URL("http://example.com/"), canonicalOrigin, data, documentLoader, contextLoader, meterProvider, tracerProvider, clone, getNodeInfoUri, getActorUri, getObjectUri, getCollectionUri, getOutboxUri, getMediaUploaderUri, getInboxUri, getFollowingUri, getFollowersUri, getLikedUri, getFeaturedUri, getFeaturedTagsUri, parseUri, getActorKeyPairs, getDocumentLoader, lookupObject: lookupObject$1, traverseCollection: traverseCollection$1, lookupNodeInfo, lookupWebFinger: lookupWebFinger$1, sendActivity, routeActivity, enqueueTask, enqueueTaskMany } = values;
 	function throwRouterError() {
 		throw new RouterError("Not implemented");
 	}
@@ -90,6 +90,7 @@ function createContext(values) {
 		getObjectUri: getObjectUri ?? throwRouterError,
 		getCollectionUri: getCollectionUri ?? throwRouterError,
 		getOutboxUri: getOutboxUri ?? throwRouterError,
+		getMediaUploaderUri: getMediaUploaderUri ?? throwRouterError,
 		getInboxUri: getInboxUri ?? throwRouterError,
 		getFollowingUri: getFollowingUri ?? throwRouterError,
 		getFollowersUri: getFollowersUri ?? throwRouterError,

package/dist/{context-GfQA-CqB.d.ts → context-Zii1f5xS.d.ts}

@@ -231,6 +231,35 @@ type InboxListener<TContextData, TActivity extends Activity> = (context: InboxCo
 */
 type OutboxListener<TContextData, TActivity extends Activity> = (context: OutboxContext<TContextData>, activity: TActivity) => void | Promise<void>;
 /**
+* A callback that finalizes a media upload posted to the media upload endpoint
+* (the [ActivityPub Media Upload
+* extension](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload)).
+*
+* The return value determines the HTTP response:
+*
+* -  Returning a {@link Object} (the resource is fetchable right away) makes the
+*    endpoint respond with `201 Created` and a `Location` header pointing at the
+*    object's `id`.
+* -  Returning a {@link URL} (the resource is still being processed, e.g.
+*    transcoding) makes the endpoint respond with `202 Accepted` and a
+*    `Location` header pointing at the returned URL.
+*
+* @template TContextData The context data to pass to the {@link Context}.
+* @param context The request context.
+* @param identifier The identifier of the actor whose media upload endpoint
+*                   received the request.
+* @param file The uploaded file.
+* @param object The parsed ActivityStreams object shell sent alongside the file.
+*               Since the client may send any subtype of {@link Object} and the
+*               shell lacks an `id`, the callback receives the base
+*               {@link Object} and narrows with `instanceof` as needed.
+* @returns The finalized object (`201 Created`) or the URL at which it will
+*          become available (`202 Accepted`).  It may be returned synchronously
+*          or wrapped in a `Promise`.
+* @since 2.4.0
+*/
+type MediaUploaderCallback<TContextData> = (context: RequestContext<TContextData>, identifier: string, file: File, object: Object$1) => Object$1 | URL | Promise<Object$1 | URL>;
+/**
 * The reason why an incoming activity could not be verified.
 *
 * Unlike inbox listeners registered through {@link InboxListenerSetters.on},
@@ -1289,6 +1318,48 @@ interface Federatable<TContextData> extends TaskRegistry<TContextData> {
   */
   setOutboxListeners(outboxPath: `${string}${Rfc6570Expression<"identifier">}${string}`): OutboxListenerSetters<TContextData>;
   /**
+  * Registers a media upload endpoint for the [ActivityPub Media Upload
+  * extension](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload).
+  * Clients `POST` a `multipart/form-data` request with a `file` part (the
+  * binary payload) and an `object` part (an ActivityStreams object shell) to
+  * this endpoint.  The actor should advertise this endpoint under
+  * `endpoints.uploadMedia` using {@link Context.getMediaUploaderUri}.
+  *
+  * @example
+  * ``` typescript
+  * federation
+  *   .setMediaUploader(
+  *     "/users/{identifier}/media",
+  *     async (ctx, identifier, file, object) => {
+  *       const stored = await uploadToStorage(file);
+  *       return new Image({
+  *         id: ctx.getObjectUri(Image, { uuid: stored.uuid }),
+  *         url: new URL(stored.publicUrl),
+  *         mediaType: file.type,
+  *         name: object.name,
+  *       });
+  *     },
+  *   )
+  *   .authorize(async (ctx, identifier) => {
+  *     return ctx.request.headers.get("authorization") === `Bearer ${identifier}`;
+  *   });
+  * ```
+  *
+  * @param path The URI path pattern for the media upload endpoint.  The syntax
+  *             is based on URI Template
+  *             ([RFC 6570](https://tools.ietf.org/html/rfc6570)).  The path
+  *             must have one variable: `{identifier}`.
+  * @param callback A callback that finalizes the uploaded media and returns
+  *                 either the created {@link Object} (`201 Created`) or the
+  *                 {@link URL} at which it will become available
+  *                 (`202 Accepted`).
+  * @returns An object to configure the media upload endpoint.
+  * @throws {RouterError} Thrown if the path pattern is invalid or a media
+  *                       uploader is already registered.
+  * @since 2.4.0
+  */
+  setMediaUploader(path: `${string}${Rfc6570Expression<"identifier">}${string}`, callback: MediaUploaderCallback<TContextData>): MediaUploaderSetters<TContextData>;
+  /**
   * Registers a following collection dispatcher.
   * @param path The URI path pattern for the following collection.  The syntax
   *             is based on URI Template
@@ -2053,6 +2124,21 @@ interface OutboxListenerSetters<TContextData> {
   authorize(predicate: AuthorizePredicate<TContextData>): OutboxListenerSetters<TContextData>;
 }
 /**
+* An object to configure the media upload endpoint registered through
+* {@link Federatable.setMediaUploader}.
+* @since 2.4.0
+*/
+interface MediaUploaderSetters<TContextData> {
+  /**
+  * Registers a callback to authorize requests to the media upload endpoint.
+  *
+  * @param predicate A callback to authorize the request.
+  * @returns The setters object so that settings can be chained.
+  * @since 2.4.0
+  */
+  authorize(predicate: AuthorizePredicate<TContextData>): MediaUploaderSetters<TContextData>;
+}
+/**
 * Registry for inbox listeners for different activity types.
 */
 interface InboxListenerSetters<TContextData> {
@@ -2352,6 +2438,16 @@ interface Context<TContextData> {
   */
   getOutboxUri(identifier: string): URL;
   /**
+  * Builds the URI of an actor's media upload endpoint with the given
+  * identifier.  This is the endpoint advertised under `endpoints.uploadMedia`
+  * in the actor document.
+  * @param identifier The actor's identifier.
+  * @returns The actor's media upload endpoint URI.
+  * @throws {RouterError} If no media uploader is registered.
+  * @since 2.4.0
+  */
+  getMediaUploaderUri(identifier: string): URL;
+  /**
   * Builds the URI of the shared inbox.
   * @returns The shared inbox URI.
   * @throws {RouterError} If no inbox listener is available.
@@ -3154,4 +3250,4 @@ interface ActorKeyPair extends CryptoKeyPair {
   readonly multikey: Multikey;
 }
 //#endregion
-export { CircuitBreakerFailurePolicy as $, Rfc6570Expression as A, WebFingerLinksDispatcher as At, TaskHandler as B, FederationStartQueueOptions as C, OutboxErrorHandler as Ct, InboxListenerSetters as D, SharedInboxKeyDispatcher as Dt, InboxChallengePolicy as E, OutboxPermanentFailureHandler as Et, Message as F, digest as Ft, createExponentialBackoffPolicy as G, CreateExponentialBackoffPolicyOptions as H, createFederationBuilder as I, ActivityTransformer as It, respondWithObjectIfAcceptable as J, RespondWithObjectOptions as K, TaskDefinition as L, FederationOrigin as M, SenderKeyPair as Mt, FederationQueueOptions as N, PageItems as Nt, ObjectCallbackSetters as O, UnverifiedActivityHandler as Ot, createFederation as P, buildCollectionSynchronizationHeader as Pt, CircuitBreakerCreateOptions as Q, TaskDefinitionOptions as R, FederationOptions as S, ObjectDispatcher as St, IdempotencyStrategy as T, OutboxListenerErrorHandler as Tt, RetryContext as U, TaskRegistry as V, RetryPolicy as W, CircuitBreakerActivityDrop as X, CircuitBreaker as Y, CircuitBreakerBeforeSendDecision as Z, Federatable as _, CustomCollectionDispatcher as _t, GetSignedKeyOptions as a, normalizeCircuitBreakerOptions as at, FederationBuilder as b, NodeInfoDispatcher as bt, ParseUriResult as c, ActorDispatcher as ct, SendActivityOptions as d, AuthorizePredicate as dt, CircuitBreakerKvState as et, SendActivityOptionsForCollection as f, CollectionCounter as ft, CustomCollectionCallbackSetters as g, CustomCollectionCursor as gt, ConstructorWithTypeId as h, CustomCollectionCounter as ht, GetActorOptions as i, NormalizedCircuitBreakerOptions as it, FederationKvPrefixes as j, SendActivityError as jt, OutboxListenerSetters as k, UnverifiedActivityReason as kt, RequestContext as l, ActorHandleMapper as lt, CollectionCallbackSetters as m, CollectionDispatcher as mt, Context as n, CircuitBreakerState as nt, InboxContext as o, parseCircuitBreakerKvState as ot, ActorCallbackSetters as p, CollectionCursor as pt, respondWithObject as q, ForwardActivityOptions as r, CircuitBreakerStateChange as rt, OutboxContext as s, ActorAliasMapper as st, ActorKeyPair as t, CircuitBreakerOptions as tt, RouteActivityOptions as u, ActorKeyPairsDispatcher as ut, Federation as v, InboxErrorHandler as vt, IdempotencyKeyCallback as w, OutboxListener as wt, FederationFetchOptions as x, ObjectAuthorizePredicate as xt, FederationBenchmarkOptions as y, InboxListener as yt, TaskEnqueueOptions as z };
+export { CircuitBreakerCreateOptions as $, OutboxListenerSetters as A, UnverifiedActivityHandler as At, TaskEnqueueOptions as B, FederationStartQueueOptions as C, ObjectAuthorizePredicate as Ct, InboxListenerSetters as D, OutboxListenerErrorHandler as Dt, InboxChallengePolicy as E, OutboxListener as Et, createFederation as F, PageItems as Ft, RetryPolicy as G, TaskRegistry as H, Message as I, buildCollectionSynchronizationHeader as It, respondWithObject as J, createExponentialBackoffPolicy as K, createFederationBuilder as L, digest as Lt, FederationKvPrefixes as M, WebFingerLinksDispatcher as Mt, FederationOrigin as N, SendActivityError as Nt, MediaUploaderSetters as O, OutboxPermanentFailureHandler as Ot, FederationQueueOptions as P, SenderKeyPair as Pt, CircuitBreakerBeforeSendDecision as Q, TaskDefinition as R, ActivityTransformer as Rt, FederationOptions as S, NodeInfoDispatcher as St, IdempotencyStrategy as T, OutboxErrorHandler as Tt, CreateExponentialBackoffPolicyOptions as U, TaskHandler as V, RetryContext as W, CircuitBreaker as X, respondWithObjectIfAcceptable as Y, CircuitBreakerActivityDrop as Z, Federatable as _, CustomCollectionCursor as _t, GetSignedKeyOptions as a, NormalizedCircuitBreakerOptions as at, FederationBuilder as b, InboxListener as bt, ParseUriResult as c, ActorAliasMapper as ct, SendActivityOptions as d, ActorKeyPairsDispatcher as dt, CircuitBreakerFailurePolicy as et, SendActivityOptionsForCollection as f, AuthorizePredicate as ft, CustomCollectionCallbackSetters as g, CustomCollectionCounter as gt, ConstructorWithTypeId as h, CollectionDispatcher as ht, GetActorOptions as i, CircuitBreakerStateChange as it, Rfc6570Expression as j, UnverifiedActivityReason as jt, ObjectCallbackSetters as k, SharedInboxKeyDispatcher as kt, RequestContext as l, ActorDispatcher as lt, CollectionCallbackSetters as m, CollectionCursor as mt, Context as n, CircuitBreakerOptions as nt, InboxContext as o, normalizeCircuitBreakerOptions as ot, ActorCallbackSetters as p, CollectionCounter as pt, RespondWithObjectOptions as q, ForwardActivityOptions as r, CircuitBreakerState as rt, OutboxContext as s, parseCircuitBreakerKvState as st, ActorKeyPair as t, CircuitBreakerKvState as tt, RouteActivityOptions as u, ActorHandleMapper as ut, Federation as v, CustomCollectionDispatcher as vt, IdempotencyKeyCallback as w, ObjectDispatcher as wt, FederationFetchOptions as x, MediaUploaderCallback as xt, FederationBenchmarkOptions as y, InboxErrorHandler as yt, TaskDefinitionOptions as z };

package/dist/{context-BLe0NPtZ.d.cts → context-lxX6I7as.d.cts}

@@ -229,6 +229,35 @@ type InboxListener<TContextData, TActivity extends Activity> = (context: InboxCo
 */
 type OutboxListener<TContextData, TActivity extends Activity> = (context: OutboxContext<TContextData>, activity: TActivity) => void | Promise<void>;
 /**
+* A callback that finalizes a media upload posted to the media upload endpoint
+* (the [ActivityPub Media Upload
+* extension](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload)).
+*
+* The return value determines the HTTP response:
+*
+* -  Returning a {@link Object} (the resource is fetchable right away) makes the
+*    endpoint respond with `201 Created` and a `Location` header pointing at the
+*    object's `id`.
+* -  Returning a {@link URL} (the resource is still being processed, e.g.
+*    transcoding) makes the endpoint respond with `202 Accepted` and a
+*    `Location` header pointing at the returned URL.
+*
+* @template TContextData The context data to pass to the {@link Context}.
+* @param context The request context.
+* @param identifier The identifier of the actor whose media upload endpoint
+*                   received the request.
+* @param file The uploaded file.
+* @param object The parsed ActivityStreams object shell sent alongside the file.
+*               Since the client may send any subtype of {@link Object} and the
+*               shell lacks an `id`, the callback receives the base
+*               {@link Object} and narrows with `instanceof` as needed.
+* @returns The finalized object (`201 Created`) or the URL at which it will
+*          become available (`202 Accepted`).  It may be returned synchronously
+*          or wrapped in a `Promise`.
+* @since 2.4.0
+*/
+type MediaUploaderCallback<TContextData> = (context: RequestContext<TContextData>, identifier: string, file: File, object: Object$1) => Object$1 | URL | Promise<Object$1 | URL>;
+/**
 * The reason why an incoming activity could not be verified.
 *
 * Unlike inbox listeners registered through {@link InboxListenerSetters.on},
@@ -1287,6 +1316,48 @@ interface Federatable<TContextData> extends TaskRegistry<TContextData> {
   */
   setOutboxListeners(outboxPath: `${string}${Rfc6570Expression<"identifier">}${string}`): OutboxListenerSetters<TContextData>;
   /**
+  * Registers a media upload endpoint for the [ActivityPub Media Upload
+  * extension](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload).
+  * Clients `POST` a `multipart/form-data` request with a `file` part (the
+  * binary payload) and an `object` part (an ActivityStreams object shell) to
+  * this endpoint.  The actor should advertise this endpoint under
+  * `endpoints.uploadMedia` using {@link Context.getMediaUploaderUri}.
+  *
+  * @example
+  * ``` typescript
+  * federation
+  *   .setMediaUploader(
+  *     "/users/{identifier}/media",
+  *     async (ctx, identifier, file, object) => {
+  *       const stored = await uploadToStorage(file);
+  *       return new Image({
+  *         id: ctx.getObjectUri(Image, { uuid: stored.uuid }),
+  *         url: new URL(stored.publicUrl),
+  *         mediaType: file.type,
+  *         name: object.name,
+  *       });
+  *     },
+  *   )
+  *   .authorize(async (ctx, identifier) => {
+  *     return ctx.request.headers.get("authorization") === `Bearer ${identifier}`;
+  *   });
+  * ```
+  *
+  * @param path The URI path pattern for the media upload endpoint.  The syntax
+  *             is based on URI Template
+  *             ([RFC 6570](https://tools.ietf.org/html/rfc6570)).  The path
+  *             must have one variable: `{identifier}`.
+  * @param callback A callback that finalizes the uploaded media and returns
+  *                 either the created {@link Object} (`201 Created`) or the
+  *                 {@link URL} at which it will become available
+  *                 (`202 Accepted`).
+  * @returns An object to configure the media upload endpoint.
+  * @throws {RouterError} Thrown if the path pattern is invalid or a media
+  *                       uploader is already registered.
+  * @since 2.4.0
+  */
+  setMediaUploader(path: `${string}${Rfc6570Expression<"identifier">}${string}`, callback: MediaUploaderCallback<TContextData>): MediaUploaderSetters<TContextData>;
+  /**
   * Registers a following collection dispatcher.
   * @param path The URI path pattern for the following collection.  The syntax
   *             is based on URI Template
@@ -2051,6 +2122,21 @@ interface OutboxListenerSetters<TContextData> {
   authorize(predicate: AuthorizePredicate<TContextData>): OutboxListenerSetters<TContextData>;
 }
 /**
+* An object to configure the media upload endpoint registered through
+* {@link Federatable.setMediaUploader}.
+* @since 2.4.0
+*/
+interface MediaUploaderSetters<TContextData> {
+  /**
+  * Registers a callback to authorize requests to the media upload endpoint.
+  *
+  * @param predicate A callback to authorize the request.
+  * @returns The setters object so that settings can be chained.
+  * @since 2.4.0
+  */
+  authorize(predicate: AuthorizePredicate<TContextData>): MediaUploaderSetters<TContextData>;
+}
+/**
 * Registry for inbox listeners for different activity types.
 */
 interface InboxListenerSetters<TContextData> {
@@ -2350,6 +2436,16 @@ interface Context<TContextData> {
   */
   getOutboxUri(identifier: string): URL;
   /**
+  * Builds the URI of an actor's media upload endpoint with the given
+  * identifier.  This is the endpoint advertised under `endpoints.uploadMedia`
+  * in the actor document.
+  * @param identifier The actor's identifier.
+  * @returns The actor's media upload endpoint URI.
+  * @throws {RouterError} If no media uploader is registered.
+  * @since 2.4.0
+  */
+  getMediaUploaderUri(identifier: string): URL;
+  /**
   * Builds the URI of the shared inbox.
   * @returns The shared inbox URI.
   * @throws {RouterError} If no inbox listener is available.
@@ -3152,4 +3248,4 @@ interface ActorKeyPair extends CryptoKeyPair {
   readonly multikey: Multikey;
 }
 //#endregion
-export { CircuitBreakerFailurePolicy as $, Rfc6570Expression as A, WebFingerLinksDispatcher as At, TaskHandler as B, FederationStartQueueOptions as C, OutboxErrorHandler as Ct, InboxListenerSetters as D, SharedInboxKeyDispatcher as Dt, InboxChallengePolicy as E, OutboxPermanentFailureHandler as Et, Message as F, digest as Ft, createExponentialBackoffPolicy as G, CreateExponentialBackoffPolicyOptions as H, createFederationBuilder as I, ActivityTransformer as It, respondWithObjectIfAcceptable as J, RespondWithObjectOptions as K, TaskDefinition as L, FederationOrigin as M, SenderKeyPair as Mt, FederationQueueOptions as N, PageItems as Nt, ObjectCallbackSetters as O, UnverifiedActivityHandler as Ot, createFederation as P, buildCollectionSynchronizationHeader as Pt, CircuitBreakerCreateOptions as Q, TaskDefinitionOptions as R, FederationOptions as S, ObjectDispatcher as St, IdempotencyStrategy as T, OutboxListenerErrorHandler as Tt, RetryContext as U, TaskRegistry as V, RetryPolicy as W, CircuitBreakerActivityDrop as X, CircuitBreaker as Y, CircuitBreakerBeforeSendDecision as Z, Federatable as _, CustomCollectionDispatcher as _t, GetSignedKeyOptions as a, normalizeCircuitBreakerOptions as at, FederationBuilder as b, NodeInfoDispatcher as bt, ParseUriResult as c, ActorDispatcher as ct, SendActivityOptions as d, AuthorizePredicate as dt, CircuitBreakerKvState as et, SendActivityOptionsForCollection as f, CollectionCounter as ft, CustomCollectionCallbackSetters as g, CustomCollectionCursor as gt, ConstructorWithTypeId as h, CustomCollectionCounter as ht, GetActorOptions as i, NormalizedCircuitBreakerOptions as it, FederationKvPrefixes as j, SendActivityError as jt, OutboxListenerSetters as k, UnverifiedActivityReason as kt, RequestContext as l, ActorHandleMapper as lt, CollectionCallbackSetters as m, CollectionDispatcher as mt, Context as n, CircuitBreakerState as nt, InboxContext as o, parseCircuitBreakerKvState as ot, ActorCallbackSetters as p, CollectionCursor as pt, respondWithObject as q, ForwardActivityOptions as r, CircuitBreakerStateChange as rt, OutboxContext as s, ActorAliasMapper as st, ActorKeyPair as t, CircuitBreakerOptions as tt, RouteActivityOptions as u, ActorKeyPairsDispatcher as ut, Federation as v, InboxErrorHandler as vt, IdempotencyKeyCallback as w, OutboxListener as wt, FederationFetchOptions as x, ObjectAuthorizePredicate as xt, FederationBenchmarkOptions as y, InboxListener as yt, TaskEnqueueOptions as z };
+export { CircuitBreakerCreateOptions as $, OutboxListenerSetters as A, UnverifiedActivityHandler as At, TaskEnqueueOptions as B, FederationStartQueueOptions as C, ObjectAuthorizePredicate as Ct, InboxListenerSetters as D, OutboxListenerErrorHandler as Dt, InboxChallengePolicy as E, OutboxListener as Et, createFederation as F, PageItems as Ft, RetryPolicy as G, TaskRegistry as H, Message as I, buildCollectionSynchronizationHeader as It, respondWithObject as J, createExponentialBackoffPolicy as K, createFederationBuilder as L, digest as Lt, FederationKvPrefixes as M, WebFingerLinksDispatcher as Mt, FederationOrigin as N, SendActivityError as Nt, MediaUploaderSetters as O, OutboxPermanentFailureHandler as Ot, FederationQueueOptions as P, SenderKeyPair as Pt, CircuitBreakerBeforeSendDecision as Q, TaskDefinition as R, ActivityTransformer as Rt, FederationOptions as S, NodeInfoDispatcher as St, IdempotencyStrategy as T, OutboxErrorHandler as Tt, CreateExponentialBackoffPolicyOptions as U, TaskHandler as V, RetryContext as W, CircuitBreaker as X, respondWithObjectIfAcceptable as Y, CircuitBreakerActivityDrop as Z, Federatable as _, CustomCollectionCursor as _t, GetSignedKeyOptions as a, NormalizedCircuitBreakerOptions as at, FederationBuilder as b, InboxListener as bt, ParseUriResult as c, ActorAliasMapper as ct, SendActivityOptions as d, ActorKeyPairsDispatcher as dt, CircuitBreakerFailurePolicy as et, SendActivityOptionsForCollection as f, AuthorizePredicate as ft, CustomCollectionCallbackSetters as g, CustomCollectionCounter as gt, ConstructorWithTypeId as h, CollectionDispatcher as ht, GetActorOptions as i, CircuitBreakerStateChange as it, Rfc6570Expression as j, UnverifiedActivityReason as jt, ObjectCallbackSetters as k, SharedInboxKeyDispatcher as kt, RequestContext as l, ActorDispatcher as lt, CollectionCallbackSetters as m, CollectionCursor as mt, Context as n, CircuitBreakerOptions as nt, InboxContext as o, normalizeCircuitBreakerOptions as ot, ActorCallbackSetters as p, CollectionCounter as pt, RespondWithObjectOptions as q, ForwardActivityOptions as r, CircuitBreakerState as rt, OutboxContext as s, parseCircuitBreakerKvState as st, ActorKeyPair as t, CircuitBreakerKvState as tt, RouteActivityOptions as u, ActorHandleMapper as ut, Federation as v, CustomCollectionDispatcher as vt, IdempotencyKeyCallback as w, ObjectDispatcher as wt, FederationFetchOptions as x, MediaUploaderCallback as xt, FederationBenchmarkOptions as y, InboxErrorHandler as yt, TaskDefinitionOptions as z };

package/dist/{deno-BCt09TJn.mjs → deno-C30u61BX.mjs}

@@ -3,6 +3,6 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.1599+7b19967f";
+var version = "2.4.0-dev.1634+3b4bfbb6";
 //#endregion
 export { version as n, name as t };

package/dist/{docloader-BrRjFwOp.mjs → docloader-C8JfZ3bD.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { o as validateCryptoKey } from "./key-DcLwG7x4.mjs";
-import { n as doubleKnock } from "./http-yainOC9t.mjs";
+import { o as validateCryptoKey } from "./key-C1tsoBAW.mjs";
+import { n as doubleKnock } from "./http-DJEaNMSB.mjs";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, validatePublicUrl } from "@fedify/vocab-runtime";

package/dist/federation/builder.test.mjs

@@ -5,7 +5,7 @@ import { t as MemoryKvStore } from "../kv-CXBAok3k.mjs";
 import { t as assertEquals } from "../assert_equals-BV7oLMxm.mjs";
 import { r as assertExists } from "../std__assert-B2NnY9bq.mjs";
 import { t as assertThrows } from "../assert_throws-NiFfqbnH.mjs";
-import { r as createFederationBuilder } from "../builder-BvCI7Xch.mjs";
+import { r as createFederationBuilder } from "../builder-DYAAegyy.mjs";
 import { DisallowedOperatorError, DisallowedVarSpecModifierError, DuplicateRouteVariableError, RouteTemplateOptionsNotMatchedError, RouterError } from "@fedify/uri-template";
 import { Activity, Note, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
@@ -142,6 +142,16 @@ test("FederationBuilder", async (t) => {
 		const builder5 = createFederationBuilder();
 		assertThrows(() => builder5.setOutboxDispatcher("/users/{identifier:3}/outbox", () => ({ items: [] })), DisallowedVarSpecModifierError);
 	});
+	await t.step("should validate media uploader paths", () => {
+		const noop = () => Promise.resolve(new URL("https://example.com/"));
+		const builder = createFederationBuilder();
+		builder.setMediaUploader("/users/{identifier}/media", noop);
+		assertThrows(() => builder.setMediaUploader("/users/{identifier}/media2", noop), RouterError);
+		assertThrows(() => createFederationBuilder().setMediaUploader("/users/media", noop), RouteTemplateOptionsNotMatchedError);
+		assertThrows(() => createFederationBuilder().setMediaUploader("/users/{identifier}/media/{extra}", noop), RouterError);
+		assertThrows(() => createFederationBuilder().setMediaUploader("/users/{identifier*}/media", noop), DisallowedVarSpecModifierError);
+		assertThrows(() => createFederationBuilder().setMediaUploader("/users{?identifier}/media", noop), DisallowedOperatorError);
+	});
 	await t.step("rejects non-segment-boundary identifier operators at registration for required-identifier routes", () => {
 		assertThrows(() => createFederationBuilder().setActorDispatcher("/users{/identifier}", () => null), DisallowedOperatorError);
 		assertThrows(() => createFederationBuilder().setActorDispatcher("{/identifier}", () => null), DisallowedOperatorError);

package/dist/federation/handler.test.mjs

@@ -1,7 +1,7 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-C7Sbmci2.mjs";
+import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-BJXxPElm.mjs";
 import { t as MemoryKvStore } from "../kv-CXBAok3k.mjs";
 import { t as assertEquals } from "../assert_equals-BV7oLMxm.mjs";
 import "../std__assert-B2NnY9bq.mjs";
@@ -9,10 +9,10 @@ import { n as assertGreaterOrEqual, t as assertRejects } from "../assert_rejects
 import { t as assertInstanceOf } from "../assert_instance_of-Q9KTBnrf.mjs";
 import { t as assert } from "../assert-CJ1KXcvv.mjs";
 import { r as parseAcceptSignature } from "../accept-8PiolDP7.mjs";
-import { s as signRequest } from "../http-yainOC9t.mjs";
+import { s as signRequest } from "../http-DJEaNMSB.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, s as rsaPublicKey2 } from "../keys-Dbyd7bhl.mjs";
-import { a as compactJsonLd, p as signJsonLd } from "../ld-B-jskR-q.mjs";
-import { c as handleActor, d as handleInbox, f as handleObject, h as respondWithObjectIfAcceptable, l as handleCollection, m as respondWithObject, o as createFederation, p as handleOutbox, u as handleCustomCollection } from "../middleware-DGEQ07xT.mjs";
+import { a as compactJsonLd, p as signJsonLd } from "../ld-CDBNQmZD.mjs";
+import { c as handleActor, d as handleInbox, f as handleObject, h as respondWithObjectIfAcceptable, l as handleCollection, m as respondWithObject, o as createFederation, p as handleOutbox, u as handleCustomCollection } from "../middleware-CPlgpBML.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-BtTSxZWA.mjs";
 import { Activity, Create, Note, Person, Tombstone } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
@@ -106,6 +106,7 @@ test("handleActor()", async () => {
 	assertEquals(await response.json(), {
 		"@context": [
 			"https://www.w3.org/ns/activitystreams",
+			"https://w3id.org/fep/ef61",
 			"https://w3id.org/security/v1",
 			"https://w3id.org/security/data-integrity/v1",
 			"https://www.w3.org/ns/did/v1",
@@ -195,6 +196,7 @@ test("handleActor()", async () => {
 	assertEquals(await response.json(), {
 		"@context": [
 			"https://www.w3.org/ns/activitystreams",
+			"https://w3id.org/fep/ef61",
 			"https://w3id.org/security/v1",
 			"https://w3id.org/security/data-integrity/v1",
 			"https://www.w3.org/ns/did/v1",

package/dist/federation/idempotency.test.mjs

@@ -5,8 +5,8 @@ import { t as MemoryKvStore } from "../kv-CXBAok3k.mjs";
 import { t as assertEquals } from "../assert_equals-BV7oLMxm.mjs";
 import "../std__assert-B2NnY9bq.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey, t as ed25519Multikey } from "../keys-Dbyd7bhl.mjs";
-import { r as signObject } from "../proof-917XYw_e.mjs";
-import { o as createFederation } from "../middleware-DGEQ07xT.mjs";
+import { r as signObject } from "../proof-BqDtIxGz.mjs";
+import { o as createFederation } from "../middleware-CPlgpBML.mjs";
 import { Create, Follow, Person } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/idempotency.test.ts

package/dist/federation/metrics.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as assertEquals } from "../assert_equals-BV7oLMxm.mjs";
 import "../std__assert-B2NnY9bq.mjs";
 import { t as assertRejects } from "../assert_rejects-EgstcQy5.mjs";
-import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-C-pKLuAU.mjs";
+import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-De7b7Hgb.mjs";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { FetchError } from "@fedify/vocab-runtime";
 import { DataPointType, MeterProvider, MetricReader } from "@opentelemetry/sdk-metrics";