@fedify/fedify 2.4.0-dev.1959 → 2.4.0-pr.1006.44

package/dist/{federation-BNJgxgH6.cjs → federation-BzLBT04I.cjs}

@@ -1,10 +1,10 @@
 const { URLPattern } = require("urlpattern-polyfill");
 const require_rolldown_runtime = require("./rolldown-runtime-Dmm3t92W.cjs");
 const require_transformers = require("./transformers-BalCrSsr.cjs");
-const require_http = require("./http-BuOvqNbW.cjs");
-const require_proof = require("./proof-BVpjHUMS.cjs");
+const require_http = require("./http-DBbZNv2i.cjs");
+const require_proof = require("./proof-DSohcbCt.cjs");
 const require_types = require("./types-RXm5YxpC.cjs");
-const require_kv_cache = require("./kv-cache-Btl0s7i7.cjs");
+const require_kv_cache = require("./kv-cache-B-JFZafn.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _fedify_uri_template = require("@fedify/uri-template");
 let _fedify_vocab = require("@fedify/vocab");
@@ -1463,14 +1463,12 @@ var KvKeyCache = class {
 	prefix;
 	options;
 	unavailableKeyTtl;
-	keyTtl;
 	nullKeys;
 	constructor(kv, prefix, options = {}) {
 		this.kv = kv;
 		this.prefix = prefix;
 		this.options = options;
 		this.unavailableKeyTtl = options.unavailableKeyTtl ?? Temporal$8.Duration.from({ minutes: 10 });
-		this.keyTtl = options.keyTtl ?? Temporal$8.Duration.from({ days: 30 });
 		this.nullKeys = /* @__PURE__ */ new Map();
 	}
 	#getFetchErrorKey(keyId) {
@@ -1511,7 +1509,7 @@ var KvKeyCache = class {
 		}
 		this.nullKeys.delete(keyId.href);
 		const serialized = await key.toJsonLd(this.options);
-		await this.kv.set([...this.prefix, keyId.href], serialized, { ttl: this.keyTtl });
+		await this.kv.set([...this.prefix, keyId.href], serialized);
 	}
 	async getFetchError(keyId) {
 		const cached = await this.kv.get(this.#getFetchErrorKey(keyId));
@@ -2469,7 +2467,7 @@ async function handleInbox(request, options) {
 * @returns A promise that resolves to an HTTP response.
 */
 async function handleInboxInternal(request, parameters, span) {
-	const { recipient, context: ctx, inboxContextFactory, kv, kvPrefixes, publicKeyTtl, queue, actorDispatcher, inboxListeners, inboxErrorHandler, unverifiedActivityHandler, onNotFound, signatureTimeWindow, skipSignatureVerification, inboxChallengePolicy, meterProvider, tracerProvider } = parameters;
+	const { recipient, context: ctx, inboxContextFactory, kv, kvPrefixes, queue, actorDispatcher, inboxListeners, inboxErrorHandler, unverifiedActivityHandler, onNotFound, signatureTimeWindow, skipSignatureVerification, inboxChallengePolicy, meterProvider, tracerProvider } = parameters;
 	const logger = (0, _logtape_logtape.getLogger)([
 		"fedify",
 		"federation",
@@ -2540,12 +2538,7 @@ async function handleInboxInternal(request, parameters, span) {
 			headers: { "Content-Type": "text/plain; charset=utf-8" }
 		});
 	}
-	const keyCache = new KvKeyCache(kv, kvPrefixes.publicKey, {
-		documentLoader: ctx.documentLoader,
-		contextLoader: ctx.contextLoader,
-		tracerProvider,
-		keyTtl: publicKeyTtl
-	});
+	const keyCache = new KvKeyCache(kv, kvPrefixes.publicKey, ctx);
 	const jsonWithoutSig = require_proof.detachSignature(json);
 	const hasLdSignature = require_proof.hasSignature(json);
 	const canAttemptAlternateAuthAfterLdSignatureFailure = skipSignatureVerification || hasHttpSignatureHeaders(request) || hasObjectIntegrityProof(jsonWithoutSig);
@@ -4770,8 +4763,6 @@ function createFederation(options) {
 var FederationImpl = class extends FederationBuilderImpl {
 	kv;
 	kvPrefixes;
-	publicKeyTtl;
-	httpMessageSignaturesSpecTtl;
 	inboxQueue;
 	outboxQueue;
 	fanoutQueue;
@@ -4837,8 +4828,6 @@ var FederationImpl = class extends FederationBuilderImpl {
 			taskDeduplication: ["_fedify", "taskDeduplication"],
 			...options.kvPrefixes ?? {}
 		};
-		this.publicKeyTtl = Temporal$2.Duration.from(options.publicKeyTtl ?? { days: 30 });
-		this.httpMessageSignaturesSpecTtl = Temporal$2.Duration.from(options.httpMessageSignaturesSpecTtl ?? { days: 90 });
 		if (options.queue == null) {
 			this.inboxQueue = void 0;
 			this.outboxQueue = void 0;
@@ -4941,7 +4930,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 		this.authenticatedDocumentLoaderFactory = (identity, factoryOpts) => require_http.instrumentDocumentLoader(userAuthFactory != null ? userAuthFactory(identity, factoryOpts) : require_kv_cache.getAuthenticatedDocumentLoader(identity, {
 			allowPrivateAddress: factoryOpts?.allowPrivateAddress ?? allowPrivateAddress,
 			userAgent: factoryOpts?.userAgent ?? userAgent,
-			specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, options.firstKnock, { specTtl: this.httpMessageSignaturesSpecTtl }),
+			specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, options.firstKnock),
 			tracerProvider: this.tracerProvider
 		}), {
 			meterProvider: this._meterProvider,
@@ -5316,7 +5305,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				inbox,
 				sharedInbox: message.sharedInbox,
 				headers: new Headers(message.headers),
-				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock, { specTtl: this.httpMessageSignaturesSpecTtl }),
+				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock),
 				meterProvider: this.meterProvider,
 				tracerProvider: this.tracerProvider
 			});
@@ -5937,7 +5926,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				inbox: new URL(inbox),
 				sharedInbox: inboxes[inbox].sharedInbox,
 				headers: collectionSync == null ? void 0 : new Headers({ "Collection-Synchronization": await buildCollectionSynchronizationHeader(collectionSync, inboxes[inbox].actorIds) }),
-				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock, { specTtl: this.httpMessageSignaturesSpecTtl }),
+				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock),
 				meterProvider: this.meterProvider,
 				tracerProvider: this.tracerProvider
 			}));
@@ -6250,7 +6239,6 @@ var FederationImpl = class extends FederationBuilderImpl {
 					inboxContextFactory,
 					kv: this.kv,
 					kvPrefixes: this.kvPrefixes,
-					publicKeyTtl: this.publicKeyTtl,
 					queue: this.inboxQueue,
 					actorDispatcher: this.actorCallbacks?.dispatcher,
 					inboxListeners: this.inboxListeners,
@@ -6992,12 +6980,7 @@ var ContextImpl = class ContextImpl {
 		]);
 		const contextLoader = options.contextLoader ?? this.contextLoader;
 		const json = await activity.toJsonLd({ contextLoader });
-		const keyCache = new KvKeyCache(this.federation.kv, this.federation.kvPrefixes.publicKey, {
-			documentLoader: this.documentLoader,
-			contextLoader: this.contextLoader,
-			tracerProvider: this.tracerProvider,
-			keyTtl: this.federation.publicKeyTtl
-		});
+		const keyCache = new KvKeyCache(this.federation.kv, this.federation.kvPrefixes.publicKey, this);
 		if (await require_proof.verifyObject(_fedify_vocab.Activity, json, {
 			contextLoader,
 			documentLoader: options.documentLoader ?? this.documentLoader,
@@ -7272,7 +7255,7 @@ async function forwardActivityInternal(ctx, loggerCategory, forwarder, recipient
 			sharedInbox: inboxes[inbox].sharedInbox,
 			meterProvider: ctx.meterProvider,
 			tracerProvider: ctx.tracerProvider,
-			specDeterminer: new KvSpecDeterminer(ctx.federation.kv, ctx.federation.kvPrefixes.httpMessageSignaturesSpec, ctx.federation.firstKnock, { specTtl: ctx.federation.httpMessageSignaturesSpecTtl })
+			specDeterminer: new KvSpecDeterminer(ctx.federation.kv, ctx.federation.kvPrefixes.httpMessageSignaturesSpec, ctx.federation.firstKnock)
 		}));
 		await Promise.all(promises);
 		return true;
@@ -7443,18 +7426,16 @@ var KvSpecDeterminer = class {
 	kv;
 	prefix;
 	defaultSpec;
-	specTtl;
-	constructor(kv, prefix, defaultSpec = "rfc9421", options = {}) {
+	constructor(kv, prefix, defaultSpec = "rfc9421") {
 		this.kv = kv;
 		this.prefix = prefix;
 		this.defaultSpec = defaultSpec;
-		this.specTtl = options.specTtl ?? Temporal$2.Duration.from({ days: 90 });
 	}
 	async determineSpec(origin) {
 		return await this.kv.get([...this.prefix, origin]) ?? this.defaultSpec;
 	}
 	async rememberSpec(origin, spec) {
-		await this.kv.set([...this.prefix, origin], spec, { ttl: this.specTtl });
+		await this.kv.set([...this.prefix, origin], spec);
 	}
 };
 function notFound(_request) {

package/dist/{http-Bh37_81O.js → http-CcFURGbR.js}

@@ -10,7 +10,7 @@ import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } fro
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.1959+0da7be03";
+var version = "2.4.0-pr.1006.44+7feb05c5";
 //#endregion
 //#region src/sig/accept.ts
 /**

package/dist/{http-DyXZdUng.mjs → http-Cp_Byhf8.mjs}

@@ -1,10 +1,10 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-Xg7DR4LS.mjs";
-import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-B7-JxJSv.mjs";
+import { n as version, t as name } from "./deno-tSRHKXbU.mjs";
+import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-CIK7ZY_B.mjs";
 import { i as validateAcceptSignature, n as fulfillAcceptSignature, r as parseAcceptSignature } from "./accept-CPVqki78.mjs";
-import { o as validateCryptoKey, r as fetchKeyDetailed } from "./key-CXsAkAt6.mjs";
+import { o as validateCryptoKey, r as fetchKeyDetailed } from "./key-CEDlSMK7.mjs";
 import { getLogger } from "@logtape/logtape";
 import { CryptographicKey } from "@fedify/vocab";
 import { SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/{http-BuOvqNbW.cjs → http-DBbZNv2i.cjs}

@@ -9,7 +9,7 @@ let _opentelemetry_semantic_conventions = require("@opentelemetry/semantic-conve
 let byte_encodings_base64 = require("byte-encodings/base64");
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.1959+0da7be03";
+var version = "2.4.0-pr.1006.44+7feb05c5";
 //#endregion
 //#region ../../node_modules/.pnpm/temporal-polyfill@1.0.1/node_modules/temporal-polyfill/chunks/root.js
 const NativeTemporal = globalThis.Temporal;

package/dist/{key-CXsAkAt6.mjs → key-CEDlSMK7.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-Xg7DR4LS.mjs";
-import { _ as recordKeyLookup, n as getDurationMs, t as classifyFetchError } from "./metrics-B7-JxJSv.mjs";
+import { n as version, t as name } from "./deno-tSRHKXbU.mjs";
+import { _ as recordKeyLookup, n as getDurationMs, t as classifyFetchError } from "./metrics-CIK7ZY_B.mjs";
 import { getLogger } from "@logtape/logtape";
 import { CryptographicKey, Multikey, Object as Object$1, isActor } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/{keycache-ZLqIfrkL.mjs → keycache-0Jk78XmB.mjs}

@@ -8,14 +8,12 @@ var KvKeyCache = class {
 	prefix;
 	options;
 	unavailableKeyTtl;
-	keyTtl;
 	nullKeys;
 	constructor(kv, prefix, options = {}) {
 		this.kv = kv;
 		this.prefix = prefix;
 		this.options = options;
 		this.unavailableKeyTtl = options.unavailableKeyTtl ?? Temporal.Duration.from({ minutes: 10 });
-		this.keyTtl = options.keyTtl ?? Temporal.Duration.from({ days: 30 });
 		this.nullKeys = /* @__PURE__ */ new Map();
 	}
 	#getFetchErrorKey(keyId) {
@@ -56,7 +54,7 @@ var KvKeyCache = class {
 		}
 		this.nullKeys.delete(keyId.href);
 		const serialized = await key.toJsonLd(this.options);
-		await this.kv.set([...this.prefix, keyId.href], serialized, { ttl: this.keyTtl });
+		await this.kv.set([...this.prefix, keyId.href], serialized);
 	}
 	async getFetchError(keyId) {
 		const cached = await this.kv.get(this.#getFetchErrorKey(keyId));

package/dist/{kv-cache-Btl0s7i7.cjs → kv-cache-B-JFZafn.cjs}

@@ -1,5 +1,5 @@
 const { URLPattern } = require("urlpattern-polyfill");
-const require_http = require("./http-BuOvqNbW.cjs");
+const require_http = require("./http-DBbZNv2i.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let es_toolkit = require("es-toolkit");
 let _fedify_vocab_runtime = require("@fedify/vocab-runtime");

package/dist/{kv-cache-BubmP7z9.mjs → kv-cache-C7qYJ4To.mjs}

@@ -1,7 +1,7 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { p as recordDocumentCache } from "./metrics-B7-JxJSv.mjs";
+import { p as recordDocumentCache } from "./metrics-CIK7ZY_B.mjs";
 import { getLogger } from "@logtape/logtape";
 import { preloadedContexts } from "@fedify/vocab-runtime";
 //#region src/utils/kv-cache.ts

package/dist/{kv-cache-DjFxdXjk.js → kv-cache-CocB_ME8.js}

@@ -1,6 +1,6 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { C as recordDocumentCache, d as validateCryptoKey, t as doubleKnock } from "./http-Bh37_81O.js";
+import { C as recordDocumentCache, d as validateCryptoKey, t as doubleKnock } from "./http-CcFURGbR.js";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, preloadedContexts, validatePublicUrl } from "@fedify/vocab-runtime";

package/dist/{ld-C5Qv0_xn.mjs → ld-B8k-089e.mjs}

@@ -1,9 +1,9 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-Xg7DR4LS.mjs";
-import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-B7-JxJSv.mjs";
-import { n as fetchKey, o as validateCryptoKey } from "./key-CXsAkAt6.mjs";
+import { n as version, t as name } from "./deno-tSRHKXbU.mjs";
+import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-CIK7ZY_B.mjs";
+import { n as fetchKey, o as validateCryptoKey } from "./key-CEDlSMK7.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Activity, CryptographicKey, Object as Object$1, getTypeId } from "@fedify/vocab";
 import { SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/{metrics-B7-JxJSv.mjs → metrics-CIK7ZY_B.mjs}

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-Xg7DR4LS.mjs";
+import { n as version, t as name } from "./deno-tSRHKXbU.mjs";
 import { metrics } from "@opentelemetry/api";
 import { FetchError } from "@fedify/vocab-runtime";
 //#region src/federation/metrics.ts

package/dist/{middleware-DB_evWhA.mjs → middleware--nGmJXXx.mjs}

@@ -1,26 +1,26 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-Xg7DR4LS.mjs";
-import { a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, n as getDurationMs, o as isAbortError, r as getFederationMetrics, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "./metrics-B7-JxJSv.mjs";
+import { n as version, t as name } from "./deno-tSRHKXbU.mjs";
+import { a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, n as getDurationMs, o as isAbortError, r as getFederationMetrics, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "./metrics-CIK7ZY_B.mjs";
 import { t as formatAcceptSignature } from "./accept-CPVqki78.mjs";
-import { a as importJwk, o as validateCryptoKey, t as exportJwk } from "./key-CXsAkAt6.mjs";
-import { l as verifyRequest, o as parseRfc9421SignatureInput, u as verifyRequestDetailed } from "./http-DyXZdUng.mjs";
-import { t as getAuthenticatedDocumentLoader } from "./docloader-4YqMWBpt.mjs";
-import { n as kvCache } from "./kv-cache-BubmP7z9.mjs";
+import { a as importJwk, o as validateCryptoKey, t as exportJwk } from "./key-CEDlSMK7.mjs";
+import { l as verifyRequest, o as parseRfc9421SignatureInput, u as verifyRequestDetailed } from "./http-Cp_Byhf8.mjs";
+import { t as getAuthenticatedDocumentLoader } from "./docloader-BAO-cgto.mjs";
+import { n as kvCache } from "./kv-cache-C7qYJ4To.mjs";
+import { _ as wrapContextLoaderForJsonLd, a as compactJsonLd, c as getNormalizationContextLoader, d as isClearlyMalformedContextReference, f as isInvalidUrlTypeError, l as hasSignature, m as verifyCompactJsonLd, p as signJsonLd, r as assertSafeJsonLd, s as detachSignature, t as InvalidContextReferenceError, u as hasSignatureLike } from "./ld-B8k-089e.mjs";
+import { n as getKeyOwner, t as doesActorOwnKey } from "./owner-Cf55GD32.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "./outgoing-jsonld-B5Ne7JoL.mjs";
+import { i as verifyObject, n as hasProofLike, r as signObject } from "./proof-BAVwiUPt.mjs";
 import { t as getNodeInfo } from "./client-CtxvmazV.mjs";
 import { t as nodeInfoToJson } from "./types-DE_LV1JB.mjs";
-import { _ as wrapContextLoaderForJsonLd, a as compactJsonLd, c as getNormalizationContextLoader, d as isClearlyMalformedContextReference, f as isInvalidUrlTypeError, l as hasSignature, m as verifyCompactJsonLd, p as signJsonLd, r as assertSafeJsonLd, s as detachSignature, t as InvalidContextReferenceError, u as hasSignatureLike } from "./ld-C5Qv0_xn.mjs";
-import { n as getKeyOwner, t as doesActorOwnKey } from "./owner-DFzwGoyv.mjs";
-import { i as verifyObject, n as hasProofLike, r as signObject } from "./proof-DJGBYtRT.mjs";
-import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "./send-BOXP7DyW.mjs";
-import { n as FederationBuilderImpl, t as ACTOR_ALIAS_PREFIX } from "./builder-sMkz-MdT.mjs";
+import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "./send-DL5nBv54.mjs";
+import { n as FederationBuilderImpl, t as ACTOR_ALIAS_PREFIX } from "./builder-BdcA_1Rt.mjs";
 import { t as CircuitBreaker } from "./circuit-breaker-C5NqoLBJ.mjs";
 import { t as buildCollectionSynchronizationHeader } from "./collection-CnnP1UAv.mjs";
-import { t as KvKeyCache } from "./keycache-ZLqIfrkL.mjs";
+import { t as KvKeyCache } from "./keycache-0Jk78XmB.mjs";
 import { t as acceptsJsonLd } from "./negotiation-CCocWT_N.mjs";
-import { t as hasMalformedKnownTemporalLiteral } from "./temporal-D6yzxQ23.mjs";
+import { t as hasMalformedKnownTemporalLiteral } from "./temporal-C_3AI99D.mjs";
 import { t as createExponentialBackoffPolicy } from "./retry-zX5xw5e0.mjs";
 import { t as TaskCodec } from "./codec-C6rTrpIp.mjs";
 import { getLogger, withContext } from "@logtape/logtape";
@@ -1246,7 +1246,7 @@ async function handleInbox(request, options) {
 * @returns A promise that resolves to an HTTP response.
 */
 async function handleInboxInternal(request, parameters, span) {
-	const { recipient, context: ctx, inboxContextFactory, kv, kvPrefixes, publicKeyTtl, queue, actorDispatcher, inboxListeners, inboxErrorHandler, unverifiedActivityHandler, onNotFound, signatureTimeWindow, skipSignatureVerification, inboxChallengePolicy, meterProvider, tracerProvider } = parameters;
+	const { recipient, context: ctx, inboxContextFactory, kv, kvPrefixes, queue, actorDispatcher, inboxListeners, inboxErrorHandler, unverifiedActivityHandler, onNotFound, signatureTimeWindow, skipSignatureVerification, inboxChallengePolicy, meterProvider, tracerProvider } = parameters;
 	const logger = getLogger([
 		"fedify",
 		"federation",
@@ -1317,12 +1317,7 @@ async function handleInboxInternal(request, parameters, span) {
 			headers: { "Content-Type": "text/plain; charset=utf-8" }
 		});
 	}
-	const keyCache = new KvKeyCache(kv, kvPrefixes.publicKey, {
-		documentLoader: ctx.documentLoader,
-		contextLoader: ctx.contextLoader,
-		tracerProvider,
-		keyTtl: publicKeyTtl
-	});
+	const keyCache = new KvKeyCache(kv, kvPrefixes.publicKey, ctx);
 	const jsonWithoutSig = detachSignature(json);
 	const hasLdSignature = hasSignature(json);
 	const canAttemptAlternateAuthAfterLdSignatureFailure = skipSignatureVerification || hasHttpSignatureHeaders(request) || hasObjectIntegrityProof(jsonWithoutSig);
@@ -2818,8 +2813,6 @@ function createFederation(options) {
 var FederationImpl = class extends FederationBuilderImpl {
 	kv;
 	kvPrefixes;
-	publicKeyTtl;
-	httpMessageSignaturesSpecTtl;
 	inboxQueue;
 	outboxQueue;
 	fanoutQueue;
@@ -2885,8 +2878,6 @@ var FederationImpl = class extends FederationBuilderImpl {
 			taskDeduplication: ["_fedify", "taskDeduplication"],
 			...options.kvPrefixes ?? {}
 		};
-		this.publicKeyTtl = Temporal.Duration.from(options.publicKeyTtl ?? { days: 30 });
-		this.httpMessageSignaturesSpecTtl = Temporal.Duration.from(options.httpMessageSignaturesSpecTtl ?? { days: 90 });
 		if (options.queue == null) {
 			this.inboxQueue = void 0;
 			this.outboxQueue = void 0;
@@ -2989,7 +2980,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 		this.authenticatedDocumentLoaderFactory = (identity, factoryOpts) => instrumentDocumentLoader(userAuthFactory != null ? userAuthFactory(identity, factoryOpts) : getAuthenticatedDocumentLoader(identity, {
 			allowPrivateAddress: factoryOpts?.allowPrivateAddress ?? allowPrivateAddress,
 			userAgent: factoryOpts?.userAgent ?? userAgent,
-			specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, options.firstKnock, { specTtl: this.httpMessageSignaturesSpecTtl }),
+			specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, options.firstKnock),
 			tracerProvider: this.tracerProvider
 		}), {
 			meterProvider: this._meterProvider,
@@ -3364,7 +3355,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				inbox,
 				sharedInbox: message.sharedInbox,
 				headers: new Headers(message.headers),
-				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock, { specTtl: this.httpMessageSignaturesSpecTtl }),
+				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock),
 				meterProvider: this.meterProvider,
 				tracerProvider: this.tracerProvider
 			});
@@ -3985,7 +3976,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				inbox: new URL(inbox),
 				sharedInbox: inboxes[inbox].sharedInbox,
 				headers: collectionSync == null ? void 0 : new Headers({ "Collection-Synchronization": await buildCollectionSynchronizationHeader(collectionSync, inboxes[inbox].actorIds) }),
-				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock, { specTtl: this.httpMessageSignaturesSpecTtl }),
+				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock),
 				meterProvider: this.meterProvider,
 				tracerProvider: this.tracerProvider
 			}));
@@ -4298,7 +4289,6 @@ var FederationImpl = class extends FederationBuilderImpl {
 					inboxContextFactory,
 					kv: this.kv,
 					kvPrefixes: this.kvPrefixes,
-					publicKeyTtl: this.publicKeyTtl,
 					queue: this.inboxQueue,
 					actorDispatcher: this.actorCallbacks?.dispatcher,
 					inboxListeners: this.inboxListeners,
@@ -5040,12 +5030,7 @@ var ContextImpl = class ContextImpl {
 		]);
 		const contextLoader = options.contextLoader ?? this.contextLoader;
 		const json = await activity.toJsonLd({ contextLoader });
-		const keyCache = new KvKeyCache(this.federation.kv, this.federation.kvPrefixes.publicKey, {
-			documentLoader: this.documentLoader,
-			contextLoader: this.contextLoader,
-			tracerProvider: this.tracerProvider,
-			keyTtl: this.federation.publicKeyTtl
-		});
+		const keyCache = new KvKeyCache(this.federation.kv, this.federation.kvPrefixes.publicKey, this);
 		if (await verifyObject(Activity, json, {
 			contextLoader,
 			documentLoader: options.documentLoader ?? this.documentLoader,
@@ -5320,7 +5305,7 @@ async function forwardActivityInternal(ctx, loggerCategory, forwarder, recipient
 			sharedInbox: inboxes[inbox].sharedInbox,
 			meterProvider: ctx.meterProvider,
 			tracerProvider: ctx.tracerProvider,
-			specDeterminer: new KvSpecDeterminer(ctx.federation.kv, ctx.federation.kvPrefixes.httpMessageSignaturesSpec, ctx.federation.firstKnock, { specTtl: ctx.federation.httpMessageSignaturesSpecTtl })
+			specDeterminer: new KvSpecDeterminer(ctx.federation.kv, ctx.federation.kvPrefixes.httpMessageSignaturesSpec, ctx.federation.firstKnock)
 		}));
 		await Promise.all(promises);
 		return true;
@@ -5491,18 +5476,16 @@ var KvSpecDeterminer = class {
 	kv;
 	prefix;
 	defaultSpec;
-	specTtl;
-	constructor(kv, prefix, defaultSpec = "rfc9421", options = {}) {
+	constructor(kv, prefix, defaultSpec = "rfc9421") {
 		this.kv = kv;
 		this.prefix = prefix;
 		this.defaultSpec = defaultSpec;
-		this.specTtl = options.specTtl ?? Temporal.Duration.from({ days: 90 });
 	}
 	async determineSpec(origin) {
 		return await this.kv.get([...this.prefix, origin]) ?? this.defaultSpec;
 	}
 	async rememberSpec(origin, spec) {
-		await this.kv.set([...this.prefix, origin], spec, { ttl: this.specTtl });
+		await this.kv.set([...this.prefix, origin], spec);
 	}
 };
 function notFound(_request) {

package/dist/{middleware-CF539vn2.js → middleware-CBO16r56.js}

@@ -2,10 +2,10 @@ import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
 import { t as __exportAll } from "./rolldown-runtime-BC-Eo5Mj.js";
 import { r as getDefaultActivityTransformers } from "./transformers-DAtXl_Kc.js";
-import { A as formatAcceptSignature, D as recordOutboxEnqueue, E as recordOutboxActivity, F as version, O as recordWebFingerHandle, P as name, S as recordCollectionTotalItems, T as recordInboxActivity, a as verifyRequestDetailed, b as recordCollectionPageItems, d as validateCryptoKey, f as getDurationMs, g as isAbortError, h as instrumentDocumentLoader, i as verifyRequest, k as registerQueueDepthGauge, m as getRemoteHost, n as parseRfc9421SignatureInput, o as exportJwk, p as getFederationMetrics, t as doubleKnock, u as importJwk, v as recordCircuitBreakerStateChange, w as recordFanoutRecipients, x as recordCollectionRequest, y as recordCollectionDispatchDuration } from "./http-Bh37_81O.js";
-import { S as verifyCompactJsonLd, T as wrapContextLoaderForJsonLd, _ as hasSignature, b as isInvalidUrlTypeError, c as doesActorOwnKey, d as assertSafeJsonLd, g as getNormalizationContextLoader, h as detachSignature, i as verifyObject, l as getKeyOwner, n as hasProofLike, p as compactJsonLd, r as signObject, s as normalizeOutgoingActivityJsonLd, u as InvalidContextReferenceError, v as hasSignatureLike, x as signJsonLd, y as isClearlyMalformedContextReference } from "./proof-3rlJfM0Z.js";
+import { A as formatAcceptSignature, D as recordOutboxEnqueue, E as recordOutboxActivity, F as version, O as recordWebFingerHandle, P as name, S as recordCollectionTotalItems, T as recordInboxActivity, a as verifyRequestDetailed, b as recordCollectionPageItems, d as validateCryptoKey, f as getDurationMs, g as isAbortError, h as instrumentDocumentLoader, i as verifyRequest, k as registerQueueDepthGauge, m as getRemoteHost, n as parseRfc9421SignatureInput, o as exportJwk, p as getFederationMetrics, t as doubleKnock, u as importJwk, v as recordCircuitBreakerStateChange, w as recordFanoutRecipients, x as recordCollectionRequest, y as recordCollectionDispatchDuration } from "./http-CcFURGbR.js";
+import { S as verifyCompactJsonLd, T as wrapContextLoaderForJsonLd, _ as hasSignature, b as isInvalidUrlTypeError, c as doesActorOwnKey, d as assertSafeJsonLd, g as getNormalizationContextLoader, h as detachSignature, i as verifyObject, l as getKeyOwner, n as hasProofLike, p as compactJsonLd, r as signObject, s as normalizeOutgoingActivityJsonLd, u as InvalidContextReferenceError, v as hasSignatureLike, x as signJsonLd, y as isClearlyMalformedContextReference } from "./proof-CqV_aPhu.js";
 import { n as getNodeInfo, t as nodeInfoToJson } from "./types-Dtyf8lVj.js";
-import { n as getAuthenticatedDocumentLoader, t as kvCache } from "./kv-cache-DjFxdXjk.js";
+import { n as getAuthenticatedDocumentLoader, t as kvCache } from "./kv-cache-CocB_ME8.js";
 import { getLogger, withContext } from "@logtape/logtape";
 import { Router, RouterError, assertPath } from "@fedify/uri-template";
 import { Activity, Collection, CollectionPage, CryptographicKey, Link, Multikey, Object as Object$1, OrderedCollection, OrderedCollectionPage, Tombstone, getTypeId, lookupObject, traverseCollection } from "@fedify/vocab";
@@ -1460,14 +1460,12 @@ var KvKeyCache = class {
 	prefix;
 	options;
 	unavailableKeyTtl;
-	keyTtl;
 	nullKeys;
 	constructor(kv, prefix, options = {}) {
 		this.kv = kv;
 		this.prefix = prefix;
 		this.options = options;
 		this.unavailableKeyTtl = options.unavailableKeyTtl ?? Temporal.Duration.from({ minutes: 10 });
-		this.keyTtl = options.keyTtl ?? Temporal.Duration.from({ days: 30 });
 		this.nullKeys = /* @__PURE__ */ new Map();
 	}
 	#getFetchErrorKey(keyId) {
@@ -1508,7 +1506,7 @@ var KvKeyCache = class {
 		}
 		this.nullKeys.delete(keyId.href);
 		const serialized = await key.toJsonLd(this.options);
-		await this.kv.set([...this.prefix, keyId.href], serialized, { ttl: this.keyTtl });
+		await this.kv.set([...this.prefix, keyId.href], serialized);
 	}
 	async getFetchError(keyId) {
 		const cached = await this.kv.get(this.#getFetchErrorKey(keyId));
@@ -2464,7 +2462,7 @@ async function handleInbox(request, options) {
 * @returns A promise that resolves to an HTTP response.
 */
 async function handleInboxInternal(request, parameters, span) {
-	const { recipient, context: ctx, inboxContextFactory, kv, kvPrefixes, publicKeyTtl, queue, actorDispatcher, inboxListeners, inboxErrorHandler, unverifiedActivityHandler, onNotFound, signatureTimeWindow, skipSignatureVerification, inboxChallengePolicy, meterProvider, tracerProvider } = parameters;
+	const { recipient, context: ctx, inboxContextFactory, kv, kvPrefixes, queue, actorDispatcher, inboxListeners, inboxErrorHandler, unverifiedActivityHandler, onNotFound, signatureTimeWindow, skipSignatureVerification, inboxChallengePolicy, meterProvider, tracerProvider } = parameters;
 	const logger = getLogger([
 		"fedify",
 		"federation",
@@ -2535,12 +2533,7 @@ async function handleInboxInternal(request, parameters, span) {
 			headers: { "Content-Type": "text/plain; charset=utf-8" }
 		});
 	}
-	const keyCache = new KvKeyCache(kv, kvPrefixes.publicKey, {
-		documentLoader: ctx.documentLoader,
-		contextLoader: ctx.contextLoader,
-		tracerProvider,
-		keyTtl: publicKeyTtl
-	});
+	const keyCache = new KvKeyCache(kv, kvPrefixes.publicKey, ctx);
 	const jsonWithoutSig = detachSignature(json);
 	const hasLdSignature = hasSignature(json);
 	const canAttemptAlternateAuthAfterLdSignatureFailure = skipSignatureVerification || hasHttpSignatureHeaders(request) || hasObjectIntegrityProof(jsonWithoutSig);
@@ -4674,8 +4667,6 @@ function createFederation(options) {
 var FederationImpl = class extends FederationBuilderImpl {
 	kv;
 	kvPrefixes;
-	publicKeyTtl;
-	httpMessageSignaturesSpecTtl;
 	inboxQueue;
 	outboxQueue;
 	fanoutQueue;
@@ -4741,8 +4732,6 @@ var FederationImpl = class extends FederationBuilderImpl {
 			taskDeduplication: ["_fedify", "taskDeduplication"],
 			...options.kvPrefixes ?? {}
 		};
-		this.publicKeyTtl = Temporal.Duration.from(options.publicKeyTtl ?? { days: 30 });
-		this.httpMessageSignaturesSpecTtl = Temporal.Duration.from(options.httpMessageSignaturesSpecTtl ?? { days: 90 });
 		if (options.queue == null) {
 			this.inboxQueue = void 0;
 			this.outboxQueue = void 0;
@@ -4845,7 +4834,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 		this.authenticatedDocumentLoaderFactory = (identity, factoryOpts) => instrumentDocumentLoader(userAuthFactory != null ? userAuthFactory(identity, factoryOpts) : getAuthenticatedDocumentLoader(identity, {
 			allowPrivateAddress: factoryOpts?.allowPrivateAddress ?? allowPrivateAddress,
 			userAgent: factoryOpts?.userAgent ?? userAgent,
-			specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, options.firstKnock, { specTtl: this.httpMessageSignaturesSpecTtl }),
+			specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, options.firstKnock),
 			tracerProvider: this.tracerProvider
 		}), {
 			meterProvider: this._meterProvider,
@@ -5220,7 +5209,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				inbox,
 				sharedInbox: message.sharedInbox,
 				headers: new Headers(message.headers),
-				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock, { specTtl: this.httpMessageSignaturesSpecTtl }),
+				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock),
 				meterProvider: this.meterProvider,
 				tracerProvider: this.tracerProvider
 			});
@@ -5841,7 +5830,7 @@ var FederationImpl = class extends FederationBuilderImpl {
 				inbox: new URL(inbox),
 				sharedInbox: inboxes[inbox].sharedInbox,
 				headers: collectionSync == null ? void 0 : new Headers({ "Collection-Synchronization": await buildCollectionSynchronizationHeader(collectionSync, inboxes[inbox].actorIds) }),
-				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock, { specTtl: this.httpMessageSignaturesSpecTtl }),
+				specDeterminer: new KvSpecDeterminer(this.kv, this.kvPrefixes.httpMessageSignaturesSpec, this.firstKnock),
 				meterProvider: this.meterProvider,
 				tracerProvider: this.tracerProvider
 			}));
@@ -6154,7 +6143,6 @@ var FederationImpl = class extends FederationBuilderImpl {
 					inboxContextFactory,
 					kv: this.kv,
 					kvPrefixes: this.kvPrefixes,
-					publicKeyTtl: this.publicKeyTtl,
 					queue: this.inboxQueue,
 					actorDispatcher: this.actorCallbacks?.dispatcher,
 					inboxListeners: this.inboxListeners,
@@ -6896,12 +6884,7 @@ var ContextImpl = class ContextImpl {
 		]);
 		const contextLoader = options.contextLoader ?? this.contextLoader;
 		const json = await activity.toJsonLd({ contextLoader });
-		const keyCache = new KvKeyCache(this.federation.kv, this.federation.kvPrefixes.publicKey, {
-			documentLoader: this.documentLoader,
-			contextLoader: this.contextLoader,
-			tracerProvider: this.tracerProvider,
-			keyTtl: this.federation.publicKeyTtl
-		});
+		const keyCache = new KvKeyCache(this.federation.kv, this.federation.kvPrefixes.publicKey, this);
 		if (await verifyObject(Activity, json, {
 			contextLoader,
 			documentLoader: options.documentLoader ?? this.documentLoader,
@@ -7176,7 +7159,7 @@ async function forwardActivityInternal(ctx, loggerCategory, forwarder, recipient
 			sharedInbox: inboxes[inbox].sharedInbox,
 			meterProvider: ctx.meterProvider,
 			tracerProvider: ctx.tracerProvider,
-			specDeterminer: new KvSpecDeterminer(ctx.federation.kv, ctx.federation.kvPrefixes.httpMessageSignaturesSpec, ctx.federation.firstKnock, { specTtl: ctx.federation.httpMessageSignaturesSpecTtl })
+			specDeterminer: new KvSpecDeterminer(ctx.federation.kv, ctx.federation.kvPrefixes.httpMessageSignaturesSpec, ctx.federation.firstKnock)
 		}));
 		await Promise.all(promises);
 		return true;
@@ -7347,18 +7330,16 @@ var KvSpecDeterminer = class {
 	kv;
 	prefix;
 	defaultSpec;
-	specTtl;
-	constructor(kv, prefix, defaultSpec = "rfc9421", options = {}) {
+	constructor(kv, prefix, defaultSpec = "rfc9421") {
 		this.kv = kv;
 		this.prefix = prefix;
 		this.defaultSpec = defaultSpec;
-		this.specTtl = options.specTtl ?? Temporal.Duration.from({ days: 90 });
 	}
 	async determineSpec(origin) {
 		return await this.kv.get([...this.prefix, origin]) ?? this.defaultSpec;
 	}
 	async rememberSpec(origin, spec) {
-		await this.kv.set([...this.prefix, origin], spec, { ttl: this.specTtl });
+		await this.kv.set([...this.prefix, origin], spec);
 	}
 };
 function notFound(_request) {

package/dist/{middleware-BfRUvR8e.mjs → middleware-Dx9byvw-.mjs}

@@ -1,5 +1,5 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as FederationImpl } from "./middleware-DB_evWhA.mjs";
+import { n as FederationImpl } from "./middleware--nGmJXXx.mjs";
 export { FederationImpl };

package/dist/{mod-CSH1Ee-I.d.ts → mod-BYuZ0WXt.d.ts}

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { _t as ActorHandleMapper, gt as ActorDispatcher, ht as ActorAliasMapper, l as RequestContext, zt as WebFingerLinksDispatcher } from "./context-DiiCt4S7.js";
+import { _t as ActorHandleMapper, gt as ActorDispatcher, ht as ActorAliasMapper, l as RequestContext, zt as WebFingerLinksDispatcher } from "./context-CmjP-cgJ.js";
 import { RouterError, RouterOptions, RouterRouteResult } from "@fedify/uri-template";
 import { MeterProvider, Span, Tracer } from "@opentelemetry/api";
 

package/dist/{mod-BZldCEU0.d.cts → mod-kUSY5n3f.d.cts}

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { _t as ActorHandleMapper, gt as ActorDispatcher, ht as ActorAliasMapper, l as RequestContext, zt as WebFingerLinksDispatcher } from "./context-COLwHogJ.cjs";
+import { _t as ActorHandleMapper, gt as ActorDispatcher, ht as ActorAliasMapper, l as RequestContext, zt as WebFingerLinksDispatcher } from "./context-BOnn653X.cjs";
 import { MeterProvider, Span, Tracer } from "@opentelemetry/api";
 import { RouterError, RouterOptions, RouterRouteResult } from "@fedify/uri-template";
 

package/dist/mod.cjs

@@ -3,11 +3,11 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("./rolldown-runtime-Dmm3t92W.cjs");
 const require_transformers = require("./transformers-BalCrSsr.cjs");
 require("./compat/mod.cjs");
-const require_http = require("./http-BuOvqNbW.cjs");
-const require_federation = require("./federation-BNJgxgH6.cjs");
-const require_proof = require("./proof-BVpjHUMS.cjs");
+const require_http = require("./http-DBbZNv2i.cjs");
+const require_federation = require("./federation-BzLBT04I.cjs");
+const require_proof = require("./proof-DSohcbCt.cjs");
 const require_types = require("./types-RXm5YxpC.cjs");
-const require_kv_cache = require("./kv-cache-Btl0s7i7.cjs");
+const require_kv_cache = require("./kv-cache-B-JFZafn.cjs");
 require("./nodeinfo/mod.cjs");
 require("./runtime/mod.cjs");
 require("./sig/mod.cjs");