@fedify/fedify 2.4.0-dev.2065 → 2.4.0-dev.2073

package/dist/{builder-CMkrnYbY.mjs → builder-CVHpPAjK.mjs}

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-BuRFI7wk.mjs";
+import { n as version, t as name } from "./deno-LYTbBhYV.mjs";
 import { t as ActivityListenerSet } from "./activity-listener-C-BSbKI7.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Router, RouterError, assertPath } from "@fedify/uri-template";
@@ -86,7 +86,7 @@ var FederationBuilderImpl = class {
 	* specified.
 	*/
 	async build(options) {
-		const { FederationImpl } = await import("./middleware-VOCZN3SO.mjs");
+		const { FederationImpl } = await import("./middleware-BJcez_E3.mjs");
 		const f = new FederationImpl(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();
@@ -234,6 +234,10 @@ var FederationBuilderImpl = class {
 				callbacks.aliasMapper = mapper;
 				return setters;
 			},
+			mapPortableActorId(mapper) {
+				callbacks.portableActorIdMapper = mapper;
+				return setters;
+			},
 			mapActorAlias: (path, identifier) => {
 				if (identifier === "") throw new RouterError("Identifier cannot be empty.");
 				if (this.router.has(`actorAlias:${identifier}`)) throw new RouterError(`Actor alias for "${identifier}" already set.`);

package/dist/compat/mod.d.cts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { Jt as ActivityTransformer, n as Context } from "../context-b36TpPoG.cjs";
+import { Xt as ActivityTransformer, n as Context } from "../context-CZjZYXFC.cjs";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/mod.d.ts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { Jt as ActivityTransformer, n as Context } from "../context-D_gg4M0n.js";
+import { Xt as ActivityTransformer, n as Context } from "../context-BSywYspi.js";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/transformers.test.mjs

@@ -5,7 +5,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { S as autoIdAssigner, n as FederationImpl, x as actorDehydrator } from "../middleware-s-AZzx4r.mjs";
+import { C as actorDehydrator, n as FederationImpl, w as autoIdAssigner } from "../middleware-CpyCNOW_.mjs";
 import { Follow, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 //#region src/compat/transformers.test.ts

package/dist/{compound-proof-Dj3DCsoj.mjs → compound-proof-B5Skp-vE.mjs}

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { i as verifyMapLocalProof, s as verifyPortableObjectProofPolicy } from "./proof-B03JXhrk.mjs";
+import { i as verifyMapLocalProof, s as verifyPortableObjectProofPolicy } from "./proof-CxsVG6vM.mjs";
 //#region src/sig/compound-proof.ts
 const textEncoder = new TextEncoder();
 const PORTABLE_OBJECT_ID_PATTERN = /^ap(?:\+ef61)?:\/\//i;

package/dist/{context-D_gg4M0n.d.ts → context-BSywYspi.d.ts}

@@ -1,6 +1,6 @@
 /// <reference lib="esnext.temporal" />
 import { o as JsonValue, s as NodeInfo, t as GetNodeInfoOptions } from "./client-D-XP_Ccb.js";
-import { o as VerifyRequestFailureReason, t as HttpMessageSignaturesSpec } from "./http-65PYi9jY.js";
+import { o as VerifyRequestFailureReason, t as HttpMessageSignaturesSpec } from "./http-n2v6DPxu.js";
 import { n as GetKeyOwnerOptions } from "./owner-BSzr5-I8.js";
 import { n as KvStore, t as KvKey } from "./kv-BhNbN8Ed.js";
 import { Router } from "@fedify/uri-template";
@@ -144,6 +144,25 @@ type ActorKeyPairsDispatcher<TContextData> = (context: Context<TContextData>, id
 */
 type ActorHandleMapper<TContextData> = (context: Context<TContextData>, username: string) => string | null | Promise<string | null>;
 /**
+* A callback that maps an actor's internal identifier to the ID of the
+* [FEP-ef61] portable actor it dispatches, or `null` if the actor is not
+* portable.
+*
+* The returned ID is an `ap:` or `ap+ef61:` URI, e.g.,
+* `ap+ef61://did:key:z6Mk.../actors/alice`, or its compatible identifier.
+* It must be the same ID that the actor dispatcher puts in the actor's `id`,
+* and must not have a fragment.
+*
+* [FEP-ef61]: https://w3id.org/fep/ef61
+*
+* @template TContextData The context data to pass to the {@link Context}.
+* @param context The context.
+* @param identifier The actor's internal identifier.
+* @returns The portable actor's ID, or `null` if the actor is not portable.
+* @since 2.4.0
+*/
+type PortableActorIdMapper<TContextData> = (context: Context<TContextData>, identifier: string) => URL | null | Promise<URL | null>;
+/**
 * A callback that maps a WebFinger query to the corresponding actor's
 * internal identifier or username, or `null` if the query is not found.
 * @template TContextData The context data to pass to the {@link Context}.
@@ -1405,6 +1424,16 @@ interface FederationKvPrefixes {
   * @since 2.4.0
   */
   readonly taskDeduplication: KvKey;
+  /**
+  * The key prefix used for remembering which activities received in
+  * [FEP-ef61] portable inboxes have been forwarded to which gateways, so that
+  * each activity is forwarded at most once.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  * @default `["_fedify", "portableInboxForwarding"]`
+  * @since 2.4.0
+  */
+  readonly portableInboxForwarding: KvKey;
 }
 /**
 * Options for {@link FederationOptions.origin} when it is not a string.
@@ -2011,6 +2040,44 @@ interface FederationBuilder<TContextData> extends Federatable<TContextData> {
   build(options: FederationOptions<TContextData>): Promise<Federation<TContextData>>;
 }
 /**
+* Options for forwarding activities received in [FEP-ef61] portable inboxes to
+* the other gateways of their actors.  See
+* {@link FederationOptions.portableInboxForwarding}.
+*
+* [FEP-ef61]: https://w3id.org/fep/ef61
+* @since 2.4.0
+*/
+interface PortableInboxForwardingOptions {
+  /**
+  * The maximum number of other gateways that a single delivery is forwarded
+  * to.  Gateways beyond it are skipped with a warning.  `0` turns off
+  * forwarding.
+  * @default `10`
+  */
+  maxTargets?: number;
+  /**
+  * How long Fedify remembers that it has forwarded an activity from
+  * a portable inbox to a gateway, under
+  * {@link FederationKvPrefixes.portableInboxForwarding}.  Within it, the same
+  * activity is never forwarded to the same gateway again; once it expires,
+  * a redelivery of the activity may be forwarded again.  It cannot have
+  * calendar units, i.e., weeks, months, or years.
+  * @default `{ days: 30 }`
+  */
+  ttl?: Temporal.DurationLike;
+  /**
+  * How long a delivery waits for forwarding requests made immediately, i.e.,
+  * when no outbox queue is configured, before Fedify responds to it.
+  * Requests still running afterwards continue in the background.  It does
+  * not apply when forwarding is queued.  It cannot have calendar units,
+  * i.e., weeks, months, or years, and cannot be longer than
+  * 2,147,483,647 milliseconds (about 24.8 days), the longest delay timers
+  * support.
+  * @default `{ seconds: 10 }`
+  */
+  deadline?: Temporal.DurationLike;
+}
+/**
 * Policy for emitting `Accept-Signature` challenges on inbox `401`
 * responses, as defined in
 * [RFC 9421 §5](https://www.rfc-editor.org/rfc/rfc9421#section-5).
@@ -2105,6 +2172,14 @@ interface FederationOptions<TContextData> {
   */
   httpMessageSignaturesSpecTtl?: Temporal.DurationLike;
   /**
+  * Options for forwarding activities received in [FEP-ef61] portable inboxes
+  * to the other gateways of their actors.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  * @since 2.4.0
+  */
+  portableInboxForwarding?: PortableInboxForwardingOptions;
+  /**
   * The message queue for sending and receiving activities.  If not provided,
   * activities will not be queued and will be processed immediately.
   *
@@ -2399,6 +2474,30 @@ interface ActorCallbackSetters<TContextData> {
   */
   mapAlias(mapper: ActorAliasMapper<TContextData>): ActorCallbackSetters<TContextData>;
   /**
+  * Sets the callback function that maps an actor's identifier to the ID of
+  * the [FEP-ef61] portable actor it dispatches.  If the callback returns
+  * a portable ID for an identifier, the key pairs of that actor are treated
+  * as this server's *gateway keys* for the portable actor:
+  * {@link Context.getActorKeyPairs} derives their key IDs from the actor's
+  * compatible identifier on this server, e.g.,
+  * `https://example.com/.well-known/apgateway/did:key:z6Mk.../actors/alice#main-key`,
+  * and makes the portable actor their owner, so that requests this server
+  * makes on behalf of the actor, such as activity deliveries and signed
+  * fetches, are signed with them.  Gateway keys are only used for HTTP
+  * Signatures; they never make Object Integrity Proofs or Linked Data
+  * Signatures.
+  *
+  * If it's omitted, or it returns `null`, the actor's keys are derived from
+  * {@link Context.getActorUri} as usual.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  * @param mapper A callback that maps an actor's identifier to its portable
+  *               ID, or `null` if the actor is not portable.
+  * @returns The setters object so that settings can be chained.
+  * @since 2.4.0
+  */
+  mapPortableActorId(mapper: PortableActorIdMapper<TContextData>): ActorCallbackSetters<TContextData>;
+  /**
   * Maps a fixed path to a sentinel identifier.  It is useful for exposing
   * a single, instance-level actor at a fixed path, such as `/actor` for
   * a relay or `/bot` for a bot.
@@ -2864,6 +2963,35 @@ interface Context<TContextData> {
   */
   getPortableObjectUri<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, authority: string): URL;
   /**
+  * Builds the [FEP-ef61] portable ID of an actor's inbox with the given
+  * identifier under the given DID authority.
+  *
+  * The path is the same as the one {@link Context.getInboxUri} builds from
+  * the inbox path, but the result is an `ap+ef61:` URI whose authority is
+  * the DID, e.g., `ap+ef61://did:key:z6Mk.../users/alice/inbox`.  If
+  * a portable actor has it as its `inbox` and lists this server in its
+  * `gateways`, this server accepts deliveries to the inbox through
+  * the FEP-ef61 gateway endpoint, e.g.,
+  * `POST /.well-known/apgateway/did:key:z6Mk.../users/alice/inbox`, and
+  * dispatches them to the inbox listeners.
+  *
+  * The returned `URL` keeps the DID authority percent-encoded, because
+  * the `URL` class cannot represent the canonical form.  Use `formatIri()`
+  * from `@fedify/vocab-runtime` to get the canonical string.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  *
+  * @param identifier The actor's identifier.
+  * @param authority The DID that controls the actor, e.g.,
+  *                  `did:key:z6Mk...`.  It must be a bare DID, without
+  *                  a path, query, or fragment.
+  * @returns The inbox's portable ID.
+  * @throws {RouterError} If no inbox path is registered.
+  * @throws {TypeError} If the authority is not a DID.
+  * @since 2.4.0
+  */
+  getPortableInboxUri(identifier: string, authority: string): URL;
+  /**
   * Builds the URI of an actor's outbox with the given identifier.
   * @param identifier The actor's identifier.
   * @returns The actor's outbox URI.
@@ -3278,6 +3406,29 @@ interface RequestContext<TContextData> extends Context<TContextData> {
   */
   getPortableObjectUri<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, authority?: string): URL;
   /**
+  * Builds the [FEP-ef61] portable ID of an actor's inbox with the given
+  * identifier.  It works the same as {@link Context.getPortableInboxUri},
+  * except that the authority can be omitted while handling a portable object
+  * request, i.e., when {@link RequestContext.portableRequest} is set.  In
+  * that case, its DID is used.  Deliveries to portable inboxes do not set
+  * {@link RequestContext.portableRequest}, so pass the authority explicitly
+  * while handling them.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  *
+  * @param identifier The actor's identifier.
+  * @param authority The DID that controls the actor, e.g.,
+  *                  `did:key:z6Mk...`.  It must be a bare DID, without
+  *                  a path, query, or fragment.  Defaults to the DID of
+  *                  the requested portable object, if any.
+  * @returns The inbox's portable ID.
+  * @throws {RouterError} If no inbox path is registered.
+  * @throws {TypeError} If the authority is not a DID, or the authority is
+  *                     omitted outside a portable gateway request.
+  * @since 2.4.0
+  */
+  getPortableInboxUri(identifier: string, authority?: string): URL;
+  /**
   * Creates a new context with the same properties as this one,
   * but with the given data.
   * @param data The new data to associate with the context.
@@ -3752,4 +3903,4 @@ interface ActorKeyPair extends CryptoKeyPair {
   readonly multikey: Multikey;
 }
 //#endregion
-export { MessageQueue as $, ObjectCallbackSetters as A, InboxListener as At, TaskDefinitionOptions as B, UnverifiedActivityHandler as Bt, FederationOptions as C, CollectionDispatcher as Ct, InboxChallengePolicy as D, HashlinkMediaDispatcher as Dt, IdempotencyStrategy as E, CustomCollectionDispatcher as Et, FederationQueueOptions as F, OutboxErrorHandler as Ft, RetryContext as G, PageItems as Gt, TaskHandler as H, WebFingerLinksDispatcher as Ht, createFederation as I, OutboxListener as It, RespondWithObjectOptions as J, ActivityTransformer as Jt, RetryPolicy as K, buildCollectionSynchronizationHeader as Kt, Message as L, OutboxListenerErrorHandler as Lt, Rfc6570Expression as M, NodeInfoDispatcher as Mt, FederationKvPrefixes as N, ObjectAuthorizePredicate as Nt, InboxListenerSetters as O, HashlinkMediaRequest as Ot, FederationOrigin as P, ObjectDispatcher as Pt, InProcessMessageQueueOptions as Q, createFederationBuilder as R, OutboxPermanentFailureHandler as Rt, FederationFetchOptions as S, CollectionCursor as St, IdempotencyKeyCallback as T, CustomCollectionCursor as Tt, TaskRegistry as U, SendActivityError as Ut, TaskEnqueueOptions as V, UnverifiedActivityReason as Vt, CreateExponentialBackoffPolicyOptions as W, SenderKeyPair as Wt, respondWithObjectIfAcceptable as X, respondWithObject as Y, InProcessMessageQueue as Z, CustomCollectionCallbackSetters as _, ActorDispatcher as _t, GetSignedKeyOptions as a, CircuitBreakerActivityDrop as at, FederationBenchmarkOptions as b, AuthorizePredicate as bt, ParseUriResult as c, CircuitBreakerFailurePolicy as ct, RouteActivityOptions as d, CircuitBreakerState as dt, MessageQueueDepth as et, SendActivityOptions as f, CircuitBreakerStateChange as ft, ConstructorWithTypeId as g, ActorAliasMapper as gt, CollectionCallbackSetters as h, parseCircuitBreakerKvState as ht, GetActorOptions as i, CircuitBreaker as it, OutboxListenerSetters as j, MediaUploaderCallback as jt, MediaUploaderSetters as k, InboxErrorHandler as kt, PortableRequest as l, CircuitBreakerKvState as lt, ActorCallbackSetters as m, normalizeCircuitBreakerOptions as mt, Context as n, MessageQueueListenOptions as nt, InboxContext as o, CircuitBreakerBeforeSendDecision as ot, SendActivityOptionsForCollection as p, NormalizedCircuitBreakerOptions as pt, createExponentialBackoffPolicy as q, digest as qt, ForwardActivityOptions as r, ParallelMessageQueue as rt, OutboxContext as s, CircuitBreakerCreateOptions as st, ActorKeyPair as t, MessageQueueEnqueueOptions as tt, RequestContext as u, CircuitBreakerOptions as ut, Federatable as v, ActorHandleMapper as vt, FederationStartQueueOptions as w, CustomCollectionCounter as wt, FederationBuilder as x, CollectionCounter as xt, Federation as y, ActorKeyPairsDispatcher as yt, TaskDefinition as z, SharedInboxKeyDispatcher as zt };
+export { InProcessMessageQueueOptions as $, ObjectCallbackSetters as A, InboxErrorHandler as At, TaskDefinition as B, PortableActorIdMapper as Bt, FederationOptions as C, CollectionCursor as Ct, InboxChallengePolicy as D, CustomCollectionDispatcher as Dt, IdempotencyStrategy as E, CustomCollectionCursor as Et, FederationOrigin as F, ObjectDispatcher as Ft, CreateExponentialBackoffPolicyOptions as G, SendActivityError as Gt, TaskEnqueueOptions as H, UnverifiedActivityHandler as Ht, FederationQueueOptions as I, OutboxErrorHandler as It, createExponentialBackoffPolicy as J, buildCollectionSynchronizationHeader as Jt, RetryContext as K, SenderKeyPair as Kt, createFederation as L, OutboxListener as Lt, PortableInboxForwardingOptions as M, MediaUploaderCallback as Mt, Rfc6570Expression as N, NodeInfoDispatcher as Nt, InboxListenerSetters as O, HashlinkMediaDispatcher as Ot, FederationKvPrefixes as P, ObjectAuthorizePredicate as Pt, InProcessMessageQueue as Q, Message as R, OutboxListenerErrorHandler as Rt, FederationFetchOptions as S, CollectionCounter as St, IdempotencyKeyCallback as T, CustomCollectionCounter as Tt, TaskHandler as U, UnverifiedActivityReason as Ut, TaskDefinitionOptions as V, SharedInboxKeyDispatcher as Vt, TaskRegistry as W, WebFingerLinksDispatcher as Wt, respondWithObject as X, ActivityTransformer as Xt, RespondWithObjectOptions as Y, digest as Yt, respondWithObjectIfAcceptable as Z, CustomCollectionCallbackSetters as _, ActorAliasMapper as _t, GetSignedKeyOptions as a, CircuitBreaker as at, FederationBenchmarkOptions as b, ActorKeyPairsDispatcher as bt, ParseUriResult as c, CircuitBreakerCreateOptions as ct, RouteActivityOptions as d, CircuitBreakerOptions as dt, MessageQueue as et, SendActivityOptions as f, CircuitBreakerState as ft, ConstructorWithTypeId as g, parseCircuitBreakerKvState as gt, CollectionCallbackSetters as h, normalizeCircuitBreakerOptions as ht, GetActorOptions as i, ParallelMessageQueue as it, OutboxListenerSetters as j, InboxListener as jt, MediaUploaderSetters as k, HashlinkMediaRequest as kt, PortableRequest as l, CircuitBreakerFailurePolicy as lt, ActorCallbackSetters as m, NormalizedCircuitBreakerOptions as mt, Context as n, MessageQueueEnqueueOptions as nt, InboxContext as o, CircuitBreakerActivityDrop as ot, SendActivityOptionsForCollection as p, CircuitBreakerStateChange as pt, RetryPolicy as q, PageItems as qt, ForwardActivityOptions as r, MessageQueueListenOptions as rt, OutboxContext as s, CircuitBreakerBeforeSendDecision as st, ActorKeyPair as t, MessageQueueDepth as tt, RequestContext as u, CircuitBreakerKvState as ut, Federatable as v, ActorDispatcher as vt, FederationStartQueueOptions as w, CollectionDispatcher as wt, FederationBuilder as x, AuthorizePredicate as xt, Federation as y, ActorHandleMapper as yt, createFederationBuilder as z, OutboxPermanentFailureHandler as zt };

package/dist/{context-b36TpPoG.d.cts → context-CZjZYXFC.d.cts}

@@ -1,6 +1,6 @@
 /// <reference lib="esnext.temporal" />
 import { o as JsonValue, s as NodeInfo, t as GetNodeInfoOptions } from "./client-D-XP_Ccb.cjs";
-import { o as VerifyRequestFailureReason, t as HttpMessageSignaturesSpec } from "./http-CP-7OdSq.cjs";
+import { o as VerifyRequestFailureReason, t as HttpMessageSignaturesSpec } from "./http-xlG-jRdB.cjs";
 import { n as GetKeyOwnerOptions } from "./owner-BF0L9cMt.cjs";
 import { n as KvStore, t as KvKey } from "./kv-BhNbN8Ed.cjs";
 import { Activity, Actor, Collection, CryptographicKey, Hashtag, Link, LookupObjectOptions, Multikey, Object as Object$1, Recipient, Tombstone, TraverseCollectionOptions } from "@fedify/vocab";
@@ -142,6 +142,25 @@ type ActorKeyPairsDispatcher<TContextData> = (context: Context<TContextData>, id
 */
 type ActorHandleMapper<TContextData> = (context: Context<TContextData>, username: string) => string | null | Promise<string | null>;
 /**
+* A callback that maps an actor's internal identifier to the ID of the
+* [FEP-ef61] portable actor it dispatches, or `null` if the actor is not
+* portable.
+*
+* The returned ID is an `ap:` or `ap+ef61:` URI, e.g.,
+* `ap+ef61://did:key:z6Mk.../actors/alice`, or its compatible identifier.
+* It must be the same ID that the actor dispatcher puts in the actor's `id`,
+* and must not have a fragment.
+*
+* [FEP-ef61]: https://w3id.org/fep/ef61
+*
+* @template TContextData The context data to pass to the {@link Context}.
+* @param context The context.
+* @param identifier The actor's internal identifier.
+* @returns The portable actor's ID, or `null` if the actor is not portable.
+* @since 2.4.0
+*/
+type PortableActorIdMapper<TContextData> = (context: Context<TContextData>, identifier: string) => URL | null | Promise<URL | null>;
+/**
 * A callback that maps a WebFinger query to the corresponding actor's
 * internal identifier or username, or `null` if the query is not found.
 * @template TContextData The context data to pass to the {@link Context}.
@@ -1403,6 +1422,16 @@ interface FederationKvPrefixes {
   * @since 2.4.0
   */
   readonly taskDeduplication: KvKey;
+  /**
+  * The key prefix used for remembering which activities received in
+  * [FEP-ef61] portable inboxes have been forwarded to which gateways, so that
+  * each activity is forwarded at most once.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  * @default `["_fedify", "portableInboxForwarding"]`
+  * @since 2.4.0
+  */
+  readonly portableInboxForwarding: KvKey;
 }
 /**
 * Options for {@link FederationOptions.origin} when it is not a string.
@@ -2009,6 +2038,44 @@ interface FederationBuilder<TContextData> extends Federatable<TContextData> {
   build(options: FederationOptions<TContextData>): Promise<Federation<TContextData>>;
 }
 /**
+* Options for forwarding activities received in [FEP-ef61] portable inboxes to
+* the other gateways of their actors.  See
+* {@link FederationOptions.portableInboxForwarding}.
+*
+* [FEP-ef61]: https://w3id.org/fep/ef61
+* @since 2.4.0
+*/
+interface PortableInboxForwardingOptions {
+  /**
+  * The maximum number of other gateways that a single delivery is forwarded
+  * to.  Gateways beyond it are skipped with a warning.  `0` turns off
+  * forwarding.
+  * @default `10`
+  */
+  maxTargets?: number;
+  /**
+  * How long Fedify remembers that it has forwarded an activity from
+  * a portable inbox to a gateway, under
+  * {@link FederationKvPrefixes.portableInboxForwarding}.  Within it, the same
+  * activity is never forwarded to the same gateway again; once it expires,
+  * a redelivery of the activity may be forwarded again.  It cannot have
+  * calendar units, i.e., weeks, months, or years.
+  * @default `{ days: 30 }`
+  */
+  ttl?: Temporal.DurationLike;
+  /**
+  * How long a delivery waits for forwarding requests made immediately, i.e.,
+  * when no outbox queue is configured, before Fedify responds to it.
+  * Requests still running afterwards continue in the background.  It does
+  * not apply when forwarding is queued.  It cannot have calendar units,
+  * i.e., weeks, months, or years, and cannot be longer than
+  * 2,147,483,647 milliseconds (about 24.8 days), the longest delay timers
+  * support.
+  * @default `{ seconds: 10 }`
+  */
+  deadline?: Temporal.DurationLike;
+}
+/**
 * Policy for emitting `Accept-Signature` challenges on inbox `401`
 * responses, as defined in
 * [RFC 9421 §5](https://www.rfc-editor.org/rfc/rfc9421#section-5).
@@ -2103,6 +2170,14 @@ interface FederationOptions<TContextData> {
   */
   httpMessageSignaturesSpecTtl?: Temporal.DurationLike;
   /**
+  * Options for forwarding activities received in [FEP-ef61] portable inboxes
+  * to the other gateways of their actors.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  * @since 2.4.0
+  */
+  portableInboxForwarding?: PortableInboxForwardingOptions;
+  /**
   * The message queue for sending and receiving activities.  If not provided,
   * activities will not be queued and will be processed immediately.
   *
@@ -2397,6 +2472,30 @@ interface ActorCallbackSetters<TContextData> {
   */
   mapAlias(mapper: ActorAliasMapper<TContextData>): ActorCallbackSetters<TContextData>;
   /**
+  * Sets the callback function that maps an actor's identifier to the ID of
+  * the [FEP-ef61] portable actor it dispatches.  If the callback returns
+  * a portable ID for an identifier, the key pairs of that actor are treated
+  * as this server's *gateway keys* for the portable actor:
+  * {@link Context.getActorKeyPairs} derives their key IDs from the actor's
+  * compatible identifier on this server, e.g.,
+  * `https://example.com/.well-known/apgateway/did:key:z6Mk.../actors/alice#main-key`,
+  * and makes the portable actor their owner, so that requests this server
+  * makes on behalf of the actor, such as activity deliveries and signed
+  * fetches, are signed with them.  Gateway keys are only used for HTTP
+  * Signatures; they never make Object Integrity Proofs or Linked Data
+  * Signatures.
+  *
+  * If it's omitted, or it returns `null`, the actor's keys are derived from
+  * {@link Context.getActorUri} as usual.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  * @param mapper A callback that maps an actor's identifier to its portable
+  *               ID, or `null` if the actor is not portable.
+  * @returns The setters object so that settings can be chained.
+  * @since 2.4.0
+  */
+  mapPortableActorId(mapper: PortableActorIdMapper<TContextData>): ActorCallbackSetters<TContextData>;
+  /**
   * Maps a fixed path to a sentinel identifier.  It is useful for exposing
   * a single, instance-level actor at a fixed path, such as `/actor` for
   * a relay or `/bot` for a bot.
@@ -2862,6 +2961,35 @@ interface Context<TContextData> {
   */
   getPortableObjectUri<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, authority: string): URL;
   /**
+  * Builds the [FEP-ef61] portable ID of an actor's inbox with the given
+  * identifier under the given DID authority.
+  *
+  * The path is the same as the one {@link Context.getInboxUri} builds from
+  * the inbox path, but the result is an `ap+ef61:` URI whose authority is
+  * the DID, e.g., `ap+ef61://did:key:z6Mk.../users/alice/inbox`.  If
+  * a portable actor has it as its `inbox` and lists this server in its
+  * `gateways`, this server accepts deliveries to the inbox through
+  * the FEP-ef61 gateway endpoint, e.g.,
+  * `POST /.well-known/apgateway/did:key:z6Mk.../users/alice/inbox`, and
+  * dispatches them to the inbox listeners.
+  *
+  * The returned `URL` keeps the DID authority percent-encoded, because
+  * the `URL` class cannot represent the canonical form.  Use `formatIri()`
+  * from `@fedify/vocab-runtime` to get the canonical string.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  *
+  * @param identifier The actor's identifier.
+  * @param authority The DID that controls the actor, e.g.,
+  *                  `did:key:z6Mk...`.  It must be a bare DID, without
+  *                  a path, query, or fragment.
+  * @returns The inbox's portable ID.
+  * @throws {RouterError} If no inbox path is registered.
+  * @throws {TypeError} If the authority is not a DID.
+  * @since 2.4.0
+  */
+  getPortableInboxUri(identifier: string, authority: string): URL;
+  /**
   * Builds the URI of an actor's outbox with the given identifier.
   * @param identifier The actor's identifier.
   * @returns The actor's outbox URI.
@@ -3276,6 +3404,29 @@ interface RequestContext<TContextData> extends Context<TContextData> {
   */
   getPortableObjectUri<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, authority?: string): URL;
   /**
+  * Builds the [FEP-ef61] portable ID of an actor's inbox with the given
+  * identifier.  It works the same as {@link Context.getPortableInboxUri},
+  * except that the authority can be omitted while handling a portable object
+  * request, i.e., when {@link RequestContext.portableRequest} is set.  In
+  * that case, its DID is used.  Deliveries to portable inboxes do not set
+  * {@link RequestContext.portableRequest}, so pass the authority explicitly
+  * while handling them.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  *
+  * @param identifier The actor's identifier.
+  * @param authority The DID that controls the actor, e.g.,
+  *                  `did:key:z6Mk...`.  It must be a bare DID, without
+  *                  a path, query, or fragment.  Defaults to the DID of
+  *                  the requested portable object, if any.
+  * @returns The inbox's portable ID.
+  * @throws {RouterError} If no inbox path is registered.
+  * @throws {TypeError} If the authority is not a DID, or the authority is
+  *                     omitted outside a portable gateway request.
+  * @since 2.4.0
+  */
+  getPortableInboxUri(identifier: string, authority?: string): URL;
+  /**
   * Creates a new context with the same properties as this one,
   * but with the given data.
   * @param data The new data to associate with the context.
@@ -3750,4 +3901,4 @@ interface ActorKeyPair extends CryptoKeyPair {
   readonly multikey: Multikey;
 }
 //#endregion
-export { MessageQueue as $, ObjectCallbackSetters as A, InboxListener as At, TaskDefinitionOptions as B, UnverifiedActivityHandler as Bt, FederationOptions as C, CollectionDispatcher as Ct, InboxChallengePolicy as D, HashlinkMediaDispatcher as Dt, IdempotencyStrategy as E, CustomCollectionDispatcher as Et, FederationQueueOptions as F, OutboxErrorHandler as Ft, RetryContext as G, PageItems as Gt, TaskHandler as H, WebFingerLinksDispatcher as Ht, createFederation as I, OutboxListener as It, RespondWithObjectOptions as J, ActivityTransformer as Jt, RetryPolicy as K, buildCollectionSynchronizationHeader as Kt, Message as L, OutboxListenerErrorHandler as Lt, Rfc6570Expression as M, NodeInfoDispatcher as Mt, FederationKvPrefixes as N, ObjectAuthorizePredicate as Nt, InboxListenerSetters as O, HashlinkMediaRequest as Ot, FederationOrigin as P, ObjectDispatcher as Pt, InProcessMessageQueueOptions as Q, createFederationBuilder as R, OutboxPermanentFailureHandler as Rt, FederationFetchOptions as S, CollectionCursor as St, IdempotencyKeyCallback as T, CustomCollectionCursor as Tt, TaskRegistry as U, SendActivityError as Ut, TaskEnqueueOptions as V, UnverifiedActivityReason as Vt, CreateExponentialBackoffPolicyOptions as W, SenderKeyPair as Wt, respondWithObjectIfAcceptable as X, respondWithObject as Y, InProcessMessageQueue as Z, CustomCollectionCallbackSetters as _, ActorDispatcher as _t, GetSignedKeyOptions as a, CircuitBreakerActivityDrop as at, FederationBenchmarkOptions as b, AuthorizePredicate as bt, ParseUriResult as c, CircuitBreakerFailurePolicy as ct, RouteActivityOptions as d, CircuitBreakerState as dt, MessageQueueDepth as et, SendActivityOptions as f, CircuitBreakerStateChange as ft, ConstructorWithTypeId as g, ActorAliasMapper as gt, CollectionCallbackSetters as h, parseCircuitBreakerKvState as ht, GetActorOptions as i, CircuitBreaker as it, OutboxListenerSetters as j, MediaUploaderCallback as jt, MediaUploaderSetters as k, InboxErrorHandler as kt, PortableRequest as l, CircuitBreakerKvState as lt, ActorCallbackSetters as m, normalizeCircuitBreakerOptions as mt, Context as n, MessageQueueListenOptions as nt, InboxContext as o, CircuitBreakerBeforeSendDecision as ot, SendActivityOptionsForCollection as p, NormalizedCircuitBreakerOptions as pt, createExponentialBackoffPolicy as q, digest as qt, ForwardActivityOptions as r, ParallelMessageQueue as rt, OutboxContext as s, CircuitBreakerCreateOptions as st, ActorKeyPair as t, MessageQueueEnqueueOptions as tt, RequestContext as u, CircuitBreakerOptions as ut, Federatable as v, ActorHandleMapper as vt, FederationStartQueueOptions as w, CustomCollectionCounter as wt, FederationBuilder as x, CollectionCounter as xt, Federation as y, ActorKeyPairsDispatcher as yt, TaskDefinition as z, SharedInboxKeyDispatcher as zt };
+export { InProcessMessageQueueOptions as $, ObjectCallbackSetters as A, InboxErrorHandler as At, TaskDefinition as B, PortableActorIdMapper as Bt, FederationOptions as C, CollectionCursor as Ct, InboxChallengePolicy as D, CustomCollectionDispatcher as Dt, IdempotencyStrategy as E, CustomCollectionCursor as Et, FederationOrigin as F, ObjectDispatcher as Ft, CreateExponentialBackoffPolicyOptions as G, SendActivityError as Gt, TaskEnqueueOptions as H, UnverifiedActivityHandler as Ht, FederationQueueOptions as I, OutboxErrorHandler as It, createExponentialBackoffPolicy as J, buildCollectionSynchronizationHeader as Jt, RetryContext as K, SenderKeyPair as Kt, createFederation as L, OutboxListener as Lt, PortableInboxForwardingOptions as M, MediaUploaderCallback as Mt, Rfc6570Expression as N, NodeInfoDispatcher as Nt, InboxListenerSetters as O, HashlinkMediaDispatcher as Ot, FederationKvPrefixes as P, ObjectAuthorizePredicate as Pt, InProcessMessageQueue as Q, Message as R, OutboxListenerErrorHandler as Rt, FederationFetchOptions as S, CollectionCounter as St, IdempotencyKeyCallback as T, CustomCollectionCounter as Tt, TaskHandler as U, UnverifiedActivityReason as Ut, TaskDefinitionOptions as V, SharedInboxKeyDispatcher as Vt, TaskRegistry as W, WebFingerLinksDispatcher as Wt, respondWithObject as X, ActivityTransformer as Xt, RespondWithObjectOptions as Y, digest as Yt, respondWithObjectIfAcceptable as Z, CustomCollectionCallbackSetters as _, ActorAliasMapper as _t, GetSignedKeyOptions as a, CircuitBreaker as at, FederationBenchmarkOptions as b, ActorKeyPairsDispatcher as bt, ParseUriResult as c, CircuitBreakerCreateOptions as ct, RouteActivityOptions as d, CircuitBreakerOptions as dt, MessageQueue as et, SendActivityOptions as f, CircuitBreakerState as ft, ConstructorWithTypeId as g, parseCircuitBreakerKvState as gt, CollectionCallbackSetters as h, normalizeCircuitBreakerOptions as ht, GetActorOptions as i, ParallelMessageQueue as it, OutboxListenerSetters as j, InboxListener as jt, MediaUploaderSetters as k, HashlinkMediaRequest as kt, PortableRequest as l, CircuitBreakerFailurePolicy as lt, ActorCallbackSetters as m, NormalizedCircuitBreakerOptions as mt, Context as n, MessageQueueEnqueueOptions as nt, InboxContext as o, CircuitBreakerActivityDrop as ot, SendActivityOptionsForCollection as p, CircuitBreakerStateChange as pt, RetryPolicy as q, PageItems as qt, ForwardActivityOptions as r, MessageQueueListenOptions as rt, OutboxContext as s, CircuitBreakerBeforeSendDecision as st, ActorKeyPair as t, MessageQueueDepth as tt, RequestContext as u, CircuitBreakerKvState as ut, Federatable as v, ActorDispatcher as vt, FederationStartQueueOptions as w, CollectionDispatcher as wt, FederationBuilder as x, AuthorizePredicate as xt, Federation as y, ActorHandleMapper as yt, createFederationBuilder as z, OutboxPermanentFailureHandler as zt };

package/dist/{context-DG5QeQ8W.mjs → context-DlZhxdFT.mjs}

@@ -8,7 +8,7 @@ import { lookupWebFinger } from "@fedify/webfinger";
 import { metrics, trace } from "@opentelemetry/api";
 //#region src/testing/context.ts
 function createContext(values) {
-	const { federation, url = new URL("http://example.com/"), canonicalOrigin, data, documentLoader, contextLoader, meterProvider, tracerProvider, clone, getNodeInfoUri, getActorUri, getObjectUri, getPortableObjectUri, getCollectionUri, getOutboxUri, getMediaUploaderUri, getInboxUri, getFollowingUri, getFollowersUri, getLikedUri, getFeaturedUri, getFeaturedTagsUri, parseUri, getActorKeyPairs, getDocumentLoader, lookupObject: lookupObject$1, traverseCollection: traverseCollection$1, lookupNodeInfo, lookupWebFinger: lookupWebFinger$1, sendActivity, routeActivity, enqueueTask, enqueueTaskMany } = values;
+	const { federation, url = new URL("http://example.com/"), canonicalOrigin, data, documentLoader, contextLoader, meterProvider, tracerProvider, clone, getNodeInfoUri, getActorUri, getObjectUri, getPortableObjectUri, getPortableInboxUri, getCollectionUri, getOutboxUri, getMediaUploaderUri, getInboxUri, getFollowingUri, getFollowersUri, getLikedUri, getFeaturedUri, getFeaturedTagsUri, parseUri, getActorKeyPairs, getDocumentLoader, lookupObject: lookupObject$1, traverseCollection: traverseCollection$1, lookupNodeInfo, lookupWebFinger: lookupWebFinger$1, sendActivity, routeActivity, enqueueTask, enqueueTaskMany } = values;
 	function throwRouterError() {
 		throw new RouterError("Not implemented");
 	}
@@ -31,6 +31,7 @@ function createContext(values) {
 		getActorUri: getActorUri ?? throwRouterError,
 		getObjectUri: getObjectUri ?? throwRouterError,
 		getPortableObjectUri: getPortableObjectUri ?? throwRouterError,
+		getPortableInboxUri: getPortableInboxUri ?? throwRouterError,
 		getCollectionUri: getCollectionUri ?? throwRouterError,
 		getOutboxUri: getOutboxUri ?? throwRouterError,
 		getMediaUploaderUri: getMediaUploaderUri ?? throwRouterError,

package/dist/{deno-BuRFI7wk.mjs → deno-LYTbBhYV.mjs}

@@ -3,6 +3,6 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2065+b09fdd33";
+var version = "2.4.0-dev.2073+2152dfc6";
 //#endregion
 export { version as n, name as t };

package/dist/{docloader-_aSNLA90.mjs → docloader-C0SWQylk.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { s as validateCryptoKey } from "./key-BxHsA1s9.mjs";
-import { n as doubleKnock } from "./http-f1qaBtOh.mjs";
+import { s as validateCryptoKey } from "./key-BYXnTGro.mjs";
+import { n as doubleKnock } from "./http-C7qHlv-b.mjs";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, validatePublicUrl } from "@fedify/vocab-runtime";

package/dist/federation/builder.test.mjs

@@ -6,7 +6,7 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertExists } from "../assert_exists-cffSpJ7X.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { r as createFederationBuilder } from "../builder-CMkrnYbY.mjs";
+import { r as createFederationBuilder } from "../builder-CVHpPAjK.mjs";
 import { DisallowedOperatorError, DisallowedVarSpecModifierError, DuplicateRouteVariableError, RouteTemplateOptionsNotMatchedError, RouterError } from "@fedify/uri-template";
 import { Activity, Note, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";

package/dist/federation/compound-fanout.test.mjs

@@ -6,11 +6,11 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { t as exportJwk } from "../key-BxHsA1s9.mjs";
-import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
+import { t as exportJwk } from "../key-BYXnTGro.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "../outgoing-jsonld-4IJqPYos.mjs";
-import { n as FederationImpl } from "../middleware-s-AZzx4r.mjs";
-import { l as verifyProof, r as signObject } from "../proof-B03JXhrk.mjs";
+import { l as verifyProof, r as signObject } from "../proof-CxsVG6vM.mjs";
+import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
+import { n as FederationImpl } from "../middleware-CpyCNOW_.mjs";
 import { Create, DataIntegrityProof, Note } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/handler-compound-proof.test.mjs

@@ -1,14 +1,14 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { r as createRequestContext, t as createInboxContext } from "../context-DG5QeQ8W.mjs";
+import { r as createRequestContext, t as createInboxContext } from "../context-DlZhxdFT.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { s as signRequest } from "../http-f1qaBtOh.mjs";
+import { p as signJsonLd } from "../ld-DT3e2hOv.mjs";
+import { s as signRequest } from "../http-C7qHlv-b.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3 } from "../keys-DIJNHW-Y.mjs";
-import { d as handleInbox, o as createFederation } from "../middleware-s-AZzx4r.mjs";
-import { p as signJsonLd } from "../ld-CqJq5erX.mjs";
+import { o as createFederation, p as handleInbox } from "../middleware-CpyCNOW_.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as map_local_create_note_default } from "../map-local-create-note-B0SeXJms.mjs";
 import { Create } from "@fedify/vocab";

package/dist/federation/handler.test.mjs

@@ -1,7 +1,7 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-DG5QeQ8W.mjs";
+import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-DlZhxdFT.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertGreaterOrEqual } from "../assert_greater_or_equal-BlafOF4-.mjs";
@@ -10,12 +10,12 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as parseAcceptSignature } from "../accept-CPVqki78.mjs";
-import { a as generateCryptoKeyPair } from "../key-BxHsA1s9.mjs";
-import { s as signRequest } from "../http-f1qaBtOh.mjs";
+import { a as generateCryptoKeyPair } from "../key-BYXnTGro.mjs";
+import { a as compactJsonLd, p as signJsonLd } from "../ld-DT3e2hOv.mjs";
+import { r as signObject } from "../proof-CxsVG6vM.mjs";
+import { s as signRequest } from "../http-C7qHlv-b.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { c as handleActor, d as handleInbox, f as handleObject, h as respondWithObjectIfAcceptable, l as handleCollection, m as respondWithObject, o as createFederation, p as handleOutbox, u as handleCustomCollection } from "../middleware-s-AZzx4r.mjs";
-import { a as compactJsonLd, p as signJsonLd } from "../ld-CqJq5erX.mjs";
-import { r as signObject } from "../proof-B03JXhrk.mjs";
+import { _ as respondWithObjectIfAcceptable, d as handleCollection, f as handleCustomCollection, g as respondWithObject, h as handleOutbox, m as handleObject, o as createFederation, p as handleInbox, u as handleActor } from "../middleware-CpyCNOW_.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { Activity, Create, CryptographicKey, Multikey, Note, Person, Tombstone } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/hashlink-media.test.mjs

@@ -10,8 +10,8 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { _ as parseHashlinkGatewayRequest, o as createFederation } from "../middleware-s-AZzx4r.mjs";
-import { r as createFederationBuilder } from "../builder-CMkrnYbY.mjs";
+import { o as createFederation, y as parseHashlinkGatewayRequest } from "../middleware-CpyCNOW_.mjs";
+import { r as createFederationBuilder } from "../builder-CVHpPAjK.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { Note } from "@fedify/vocab";
 import { createTestMeterProvider, mockDocumentLoader, test } from "@fedify/fixture";