@fedify/fedify 2.4.0-dev.2071 → 2.4.0-dev.2077

package/dist/{builder-DVQ0yhKJ.mjs → builder-i3jxVe9m.mjs}

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-B-NtYZVW.mjs";
+import { n as version, t as name } from "./deno-Djkzd-G_.mjs";
 import { t as ActivityListenerSet } from "./activity-listener-C-BSbKI7.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Router, RouterError, assertPath } from "@fedify/uri-template";
@@ -86,7 +86,7 @@ var FederationBuilderImpl = class {
 	* specified.
 	*/
 	async build(options) {
-		const { FederationImpl } = await import("./middleware-CdVnCDXD.mjs");
+		const { FederationImpl } = await import("./middleware-BDjCUHMS.mjs");
 		const f = new FederationImpl(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();

package/dist/compat/mod.d.cts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { Yt as ActivityTransformer, n as Context } from "../context-DijrgHDe.cjs";
+import { Xt as ActivityTransformer, n as Context } from "../context-CZjZYXFC.cjs";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/mod.d.ts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { Yt as ActivityTransformer, n as Context } from "../context-DsB9kF6q.js";
+import { Xt as ActivityTransformer, n as Context } from "../context-BSywYspi.js";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/transformers.test.mjs

@@ -5,7 +5,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { S as autoIdAssigner, n as FederationImpl, x as actorDehydrator } from "../middleware-CPx4ZWwt.mjs";
+import { C as actorDehydrator, n as FederationImpl, w as autoIdAssigner } from "../middleware-BMgzqBtr.mjs";
 import { Follow, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 //#region src/compat/transformers.test.ts

package/dist/{compound-proof-KmXDfWFp.mjs → compound-proof-Cayy-ECj.mjs}

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { i as verifyMapLocalProof, s as verifyPortableObjectProofPolicy } from "./proof-B6gwdhN5.mjs";
+import { i as verifyMapLocalProof, s as verifyPortableObjectProofPolicy } from "./proof-CVL7JnZd.mjs";
 //#region src/sig/compound-proof.ts
 const textEncoder = new TextEncoder();
 const PORTABLE_OBJECT_ID_PATTERN = /^ap(?:\+ef61)?:\/\//i;

package/dist/{context-DsB9kF6q.d.ts → context-BSywYspi.d.ts}

@@ -1424,6 +1424,16 @@ interface FederationKvPrefixes {
   * @since 2.4.0
   */
   readonly taskDeduplication: KvKey;
+  /**
+  * The key prefix used for remembering which activities received in
+  * [FEP-ef61] portable inboxes have been forwarded to which gateways, so that
+  * each activity is forwarded at most once.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  * @default `["_fedify", "portableInboxForwarding"]`
+  * @since 2.4.0
+  */
+  readonly portableInboxForwarding: KvKey;
 }
 /**
 * Options for {@link FederationOptions.origin} when it is not a string.
@@ -2030,6 +2040,44 @@ interface FederationBuilder<TContextData> extends Federatable<TContextData> {
   build(options: FederationOptions<TContextData>): Promise<Federation<TContextData>>;
 }
 /**
+* Options for forwarding activities received in [FEP-ef61] portable inboxes to
+* the other gateways of their actors.  See
+* {@link FederationOptions.portableInboxForwarding}.
+*
+* [FEP-ef61]: https://w3id.org/fep/ef61
+* @since 2.4.0
+*/
+interface PortableInboxForwardingOptions {
+  /**
+  * The maximum number of other gateways that a single delivery is forwarded
+  * to.  Gateways beyond it are skipped with a warning.  `0` turns off
+  * forwarding.
+  * @default `10`
+  */
+  maxTargets?: number;
+  /**
+  * How long Fedify remembers that it has forwarded an activity from
+  * a portable inbox to a gateway, under
+  * {@link FederationKvPrefixes.portableInboxForwarding}.  Within it, the same
+  * activity is never forwarded to the same gateway again; once it expires,
+  * a redelivery of the activity may be forwarded again.  It cannot have
+  * calendar units, i.e., weeks, months, or years.
+  * @default `{ days: 30 }`
+  */
+  ttl?: Temporal.DurationLike;
+  /**
+  * How long a delivery waits for forwarding requests made immediately, i.e.,
+  * when no outbox queue is configured, before Fedify responds to it.
+  * Requests still running afterwards continue in the background.  It does
+  * not apply when forwarding is queued.  It cannot have calendar units,
+  * i.e., weeks, months, or years, and cannot be longer than
+  * 2,147,483,647 milliseconds (about 24.8 days), the longest delay timers
+  * support.
+  * @default `{ seconds: 10 }`
+  */
+  deadline?: Temporal.DurationLike;
+}
+/**
 * Policy for emitting `Accept-Signature` challenges on inbox `401`
 * responses, as defined in
 * [RFC 9421 §5](https://www.rfc-editor.org/rfc/rfc9421#section-5).
@@ -2124,6 +2172,14 @@ interface FederationOptions<TContextData> {
   */
   httpMessageSignaturesSpecTtl?: Temporal.DurationLike;
   /**
+  * Options for forwarding activities received in [FEP-ef61] portable inboxes
+  * to the other gateways of their actors.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  * @since 2.4.0
+  */
+  portableInboxForwarding?: PortableInboxForwardingOptions;
+  /**
   * The message queue for sending and receiving activities.  If not provided,
   * activities will not be queued and will be processed immediately.
   *
@@ -2907,6 +2963,35 @@ interface Context<TContextData> {
   */
   getPortableObjectUri<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, authority: string): URL;
   /**
+  * Builds the [FEP-ef61] portable ID of an actor's inbox with the given
+  * identifier under the given DID authority.
+  *
+  * The path is the same as the one {@link Context.getInboxUri} builds from
+  * the inbox path, but the result is an `ap+ef61:` URI whose authority is
+  * the DID, e.g., `ap+ef61://did:key:z6Mk.../users/alice/inbox`.  If
+  * a portable actor has it as its `inbox` and lists this server in its
+  * `gateways`, this server accepts deliveries to the inbox through
+  * the FEP-ef61 gateway endpoint, e.g.,
+  * `POST /.well-known/apgateway/did:key:z6Mk.../users/alice/inbox`, and
+  * dispatches them to the inbox listeners.
+  *
+  * The returned `URL` keeps the DID authority percent-encoded, because
+  * the `URL` class cannot represent the canonical form.  Use `formatIri()`
+  * from `@fedify/vocab-runtime` to get the canonical string.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  *
+  * @param identifier The actor's identifier.
+  * @param authority The DID that controls the actor, e.g.,
+  *                  `did:key:z6Mk...`.  It must be a bare DID, without
+  *                  a path, query, or fragment.
+  * @returns The inbox's portable ID.
+  * @throws {RouterError} If no inbox path is registered.
+  * @throws {TypeError} If the authority is not a DID.
+  * @since 2.4.0
+  */
+  getPortableInboxUri(identifier: string, authority: string): URL;
+  /**
   * Builds the URI of an actor's outbox with the given identifier.
   * @param identifier The actor's identifier.
   * @returns The actor's outbox URI.
@@ -3321,6 +3406,29 @@ interface RequestContext<TContextData> extends Context<TContextData> {
   */
   getPortableObjectUri<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, authority?: string): URL;
   /**
+  * Builds the [FEP-ef61] portable ID of an actor's inbox with the given
+  * identifier.  It works the same as {@link Context.getPortableInboxUri},
+  * except that the authority can be omitted while handling a portable object
+  * request, i.e., when {@link RequestContext.portableRequest} is set.  In
+  * that case, its DID is used.  Deliveries to portable inboxes do not set
+  * {@link RequestContext.portableRequest}, so pass the authority explicitly
+  * while handling them.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  *
+  * @param identifier The actor's identifier.
+  * @param authority The DID that controls the actor, e.g.,
+  *                  `did:key:z6Mk...`.  It must be a bare DID, without
+  *                  a path, query, or fragment.  Defaults to the DID of
+  *                  the requested portable object, if any.
+  * @returns The inbox's portable ID.
+  * @throws {RouterError} If no inbox path is registered.
+  * @throws {TypeError} If the authority is not a DID, or the authority is
+  *                     omitted outside a portable gateway request.
+  * @since 2.4.0
+  */
+  getPortableInboxUri(identifier: string, authority?: string): URL;
+  /**
   * Creates a new context with the same properties as this one,
   * but with the given data.
   * @param data The new data to associate with the context.
@@ -3795,4 +3903,4 @@ interface ActorKeyPair extends CryptoKeyPair {
   readonly multikey: Multikey;
 }
 //#endregion
-export { MessageQueue as $, ObjectCallbackSetters as A, InboxListener as At, TaskDefinitionOptions as B, SharedInboxKeyDispatcher as Bt, FederationOptions as C, CollectionDispatcher as Ct, InboxChallengePolicy as D, HashlinkMediaDispatcher as Dt, IdempotencyStrategy as E, CustomCollectionDispatcher as Et, FederationQueueOptions as F, OutboxErrorHandler as Ft, RetryContext as G, SenderKeyPair as Gt, TaskHandler as H, UnverifiedActivityReason as Ht, createFederation as I, OutboxListener as It, RespondWithObjectOptions as J, digest as Jt, RetryPolicy as K, PageItems as Kt, Message as L, OutboxListenerErrorHandler as Lt, Rfc6570Expression as M, NodeInfoDispatcher as Mt, FederationKvPrefixes as N, ObjectAuthorizePredicate as Nt, InboxListenerSetters as O, HashlinkMediaRequest as Ot, FederationOrigin as P, ObjectDispatcher as Pt, InProcessMessageQueueOptions as Q, createFederationBuilder as R, OutboxPermanentFailureHandler as Rt, FederationFetchOptions as S, CollectionCursor as St, IdempotencyKeyCallback as T, CustomCollectionCursor as Tt, TaskRegistry as U, WebFingerLinksDispatcher as Ut, TaskEnqueueOptions as V, UnverifiedActivityHandler as Vt, CreateExponentialBackoffPolicyOptions as W, SendActivityError as Wt, respondWithObjectIfAcceptable as X, respondWithObject as Y, ActivityTransformer as Yt, InProcessMessageQueue as Z, CustomCollectionCallbackSetters as _, ActorDispatcher as _t, GetSignedKeyOptions as a, CircuitBreakerActivityDrop as at, FederationBenchmarkOptions as b, AuthorizePredicate as bt, ParseUriResult as c, CircuitBreakerFailurePolicy as ct, RouteActivityOptions as d, CircuitBreakerState as dt, MessageQueueDepth as et, SendActivityOptions as f, CircuitBreakerStateChange as ft, ConstructorWithTypeId as g, ActorAliasMapper as gt, CollectionCallbackSetters as h, parseCircuitBreakerKvState as ht, GetActorOptions as i, CircuitBreaker as it, OutboxListenerSetters as j, MediaUploaderCallback as jt, MediaUploaderSetters as k, InboxErrorHandler as kt, PortableRequest as l, CircuitBreakerKvState as lt, ActorCallbackSetters as m, normalizeCircuitBreakerOptions as mt, Context as n, MessageQueueListenOptions as nt, InboxContext as o, CircuitBreakerBeforeSendDecision as ot, SendActivityOptionsForCollection as p, NormalizedCircuitBreakerOptions as pt, createExponentialBackoffPolicy as q, buildCollectionSynchronizationHeader as qt, ForwardActivityOptions as r, ParallelMessageQueue as rt, OutboxContext as s, CircuitBreakerCreateOptions as st, ActorKeyPair as t, MessageQueueEnqueueOptions as tt, RequestContext as u, CircuitBreakerOptions as ut, Federatable as v, ActorHandleMapper as vt, FederationStartQueueOptions as w, CustomCollectionCounter as wt, FederationBuilder as x, CollectionCounter as xt, Federation as y, ActorKeyPairsDispatcher as yt, TaskDefinition as z, PortableActorIdMapper as zt };
+export { InProcessMessageQueueOptions as $, ObjectCallbackSetters as A, InboxErrorHandler as At, TaskDefinition as B, PortableActorIdMapper as Bt, FederationOptions as C, CollectionCursor as Ct, InboxChallengePolicy as D, CustomCollectionDispatcher as Dt, IdempotencyStrategy as E, CustomCollectionCursor as Et, FederationOrigin as F, ObjectDispatcher as Ft, CreateExponentialBackoffPolicyOptions as G, SendActivityError as Gt, TaskEnqueueOptions as H, UnverifiedActivityHandler as Ht, FederationQueueOptions as I, OutboxErrorHandler as It, createExponentialBackoffPolicy as J, buildCollectionSynchronizationHeader as Jt, RetryContext as K, SenderKeyPair as Kt, createFederation as L, OutboxListener as Lt, PortableInboxForwardingOptions as M, MediaUploaderCallback as Mt, Rfc6570Expression as N, NodeInfoDispatcher as Nt, InboxListenerSetters as O, HashlinkMediaDispatcher as Ot, FederationKvPrefixes as P, ObjectAuthorizePredicate as Pt, InProcessMessageQueue as Q, Message as R, OutboxListenerErrorHandler as Rt, FederationFetchOptions as S, CollectionCounter as St, IdempotencyKeyCallback as T, CustomCollectionCounter as Tt, TaskHandler as U, UnverifiedActivityReason as Ut, TaskDefinitionOptions as V, SharedInboxKeyDispatcher as Vt, TaskRegistry as W, WebFingerLinksDispatcher as Wt, respondWithObject as X, ActivityTransformer as Xt, RespondWithObjectOptions as Y, digest as Yt, respondWithObjectIfAcceptable as Z, CustomCollectionCallbackSetters as _, ActorAliasMapper as _t, GetSignedKeyOptions as a, CircuitBreaker as at, FederationBenchmarkOptions as b, ActorKeyPairsDispatcher as bt, ParseUriResult as c, CircuitBreakerCreateOptions as ct, RouteActivityOptions as d, CircuitBreakerOptions as dt, MessageQueue as et, SendActivityOptions as f, CircuitBreakerState as ft, ConstructorWithTypeId as g, parseCircuitBreakerKvState as gt, CollectionCallbackSetters as h, normalizeCircuitBreakerOptions as ht, GetActorOptions as i, ParallelMessageQueue as it, OutboxListenerSetters as j, InboxListener as jt, MediaUploaderSetters as k, HashlinkMediaRequest as kt, PortableRequest as l, CircuitBreakerFailurePolicy as lt, ActorCallbackSetters as m, NormalizedCircuitBreakerOptions as mt, Context as n, MessageQueueEnqueueOptions as nt, InboxContext as o, CircuitBreakerActivityDrop as ot, SendActivityOptionsForCollection as p, CircuitBreakerStateChange as pt, RetryPolicy as q, PageItems as qt, ForwardActivityOptions as r, MessageQueueListenOptions as rt, OutboxContext as s, CircuitBreakerBeforeSendDecision as st, ActorKeyPair as t, MessageQueueDepth as tt, RequestContext as u, CircuitBreakerKvState as ut, Federatable as v, ActorDispatcher as vt, FederationStartQueueOptions as w, CollectionDispatcher as wt, FederationBuilder as x, AuthorizePredicate as xt, Federation as y, ActorHandleMapper as yt, createFederationBuilder as z, OutboxPermanentFailureHandler as zt };

package/dist/{context-DijrgHDe.d.cts → context-CZjZYXFC.d.cts}

@@ -1422,6 +1422,16 @@ interface FederationKvPrefixes {
   * @since 2.4.0
   */
   readonly taskDeduplication: KvKey;
+  /**
+  * The key prefix used for remembering which activities received in
+  * [FEP-ef61] portable inboxes have been forwarded to which gateways, so that
+  * each activity is forwarded at most once.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  * @default `["_fedify", "portableInboxForwarding"]`
+  * @since 2.4.0
+  */
+  readonly portableInboxForwarding: KvKey;
 }
 /**
 * Options for {@link FederationOptions.origin} when it is not a string.
@@ -2028,6 +2038,44 @@ interface FederationBuilder<TContextData> extends Federatable<TContextData> {
   build(options: FederationOptions<TContextData>): Promise<Federation<TContextData>>;
 }
 /**
+* Options for forwarding activities received in [FEP-ef61] portable inboxes to
+* the other gateways of their actors.  See
+* {@link FederationOptions.portableInboxForwarding}.
+*
+* [FEP-ef61]: https://w3id.org/fep/ef61
+* @since 2.4.0
+*/
+interface PortableInboxForwardingOptions {
+  /**
+  * The maximum number of other gateways that a single delivery is forwarded
+  * to.  Gateways beyond it are skipped with a warning.  `0` turns off
+  * forwarding.
+  * @default `10`
+  */
+  maxTargets?: number;
+  /**
+  * How long Fedify remembers that it has forwarded an activity from
+  * a portable inbox to a gateway, under
+  * {@link FederationKvPrefixes.portableInboxForwarding}.  Within it, the same
+  * activity is never forwarded to the same gateway again; once it expires,
+  * a redelivery of the activity may be forwarded again.  It cannot have
+  * calendar units, i.e., weeks, months, or years.
+  * @default `{ days: 30 }`
+  */
+  ttl?: Temporal.DurationLike;
+  /**
+  * How long a delivery waits for forwarding requests made immediately, i.e.,
+  * when no outbox queue is configured, before Fedify responds to it.
+  * Requests still running afterwards continue in the background.  It does
+  * not apply when forwarding is queued.  It cannot have calendar units,
+  * i.e., weeks, months, or years, and cannot be longer than
+  * 2,147,483,647 milliseconds (about 24.8 days), the longest delay timers
+  * support.
+  * @default `{ seconds: 10 }`
+  */
+  deadline?: Temporal.DurationLike;
+}
+/**
 * Policy for emitting `Accept-Signature` challenges on inbox `401`
 * responses, as defined in
 * [RFC 9421 §5](https://www.rfc-editor.org/rfc/rfc9421#section-5).
@@ -2122,6 +2170,14 @@ interface FederationOptions<TContextData> {
   */
   httpMessageSignaturesSpecTtl?: Temporal.DurationLike;
   /**
+  * Options for forwarding activities received in [FEP-ef61] portable inboxes
+  * to the other gateways of their actors.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  * @since 2.4.0
+  */
+  portableInboxForwarding?: PortableInboxForwardingOptions;
+  /**
   * The message queue for sending and receiving activities.  If not provided,
   * activities will not be queued and will be processed immediately.
   *
@@ -2905,6 +2961,35 @@ interface Context<TContextData> {
   */
   getPortableObjectUri<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, authority: string): URL;
   /**
+  * Builds the [FEP-ef61] portable ID of an actor's inbox with the given
+  * identifier under the given DID authority.
+  *
+  * The path is the same as the one {@link Context.getInboxUri} builds from
+  * the inbox path, but the result is an `ap+ef61:` URI whose authority is
+  * the DID, e.g., `ap+ef61://did:key:z6Mk.../users/alice/inbox`.  If
+  * a portable actor has it as its `inbox` and lists this server in its
+  * `gateways`, this server accepts deliveries to the inbox through
+  * the FEP-ef61 gateway endpoint, e.g.,
+  * `POST /.well-known/apgateway/did:key:z6Mk.../users/alice/inbox`, and
+  * dispatches them to the inbox listeners.
+  *
+  * The returned `URL` keeps the DID authority percent-encoded, because
+  * the `URL` class cannot represent the canonical form.  Use `formatIri()`
+  * from `@fedify/vocab-runtime` to get the canonical string.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  *
+  * @param identifier The actor's identifier.
+  * @param authority The DID that controls the actor, e.g.,
+  *                  `did:key:z6Mk...`.  It must be a bare DID, without
+  *                  a path, query, or fragment.
+  * @returns The inbox's portable ID.
+  * @throws {RouterError} If no inbox path is registered.
+  * @throws {TypeError} If the authority is not a DID.
+  * @since 2.4.0
+  */
+  getPortableInboxUri(identifier: string, authority: string): URL;
+  /**
   * Builds the URI of an actor's outbox with the given identifier.
   * @param identifier The actor's identifier.
   * @returns The actor's outbox URI.
@@ -3319,6 +3404,29 @@ interface RequestContext<TContextData> extends Context<TContextData> {
   */
   getPortableObjectUri<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, authority?: string): URL;
   /**
+  * Builds the [FEP-ef61] portable ID of an actor's inbox with the given
+  * identifier.  It works the same as {@link Context.getPortableInboxUri},
+  * except that the authority can be omitted while handling a portable object
+  * request, i.e., when {@link RequestContext.portableRequest} is set.  In
+  * that case, its DID is used.  Deliveries to portable inboxes do not set
+  * {@link RequestContext.portableRequest}, so pass the authority explicitly
+  * while handling them.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  *
+  * @param identifier The actor's identifier.
+  * @param authority The DID that controls the actor, e.g.,
+  *                  `did:key:z6Mk...`.  It must be a bare DID, without
+  *                  a path, query, or fragment.  Defaults to the DID of
+  *                  the requested portable object, if any.
+  * @returns The inbox's portable ID.
+  * @throws {RouterError} If no inbox path is registered.
+  * @throws {TypeError} If the authority is not a DID, or the authority is
+  *                     omitted outside a portable gateway request.
+  * @since 2.4.0
+  */
+  getPortableInboxUri(identifier: string, authority?: string): URL;
+  /**
   * Creates a new context with the same properties as this one,
   * but with the given data.
   * @param data The new data to associate with the context.
@@ -3793,4 +3901,4 @@ interface ActorKeyPair extends CryptoKeyPair {
   readonly multikey: Multikey;
 }
 //#endregion
-export { MessageQueue as $, ObjectCallbackSetters as A, InboxListener as At, TaskDefinitionOptions as B, SharedInboxKeyDispatcher as Bt, FederationOptions as C, CollectionDispatcher as Ct, InboxChallengePolicy as D, HashlinkMediaDispatcher as Dt, IdempotencyStrategy as E, CustomCollectionDispatcher as Et, FederationQueueOptions as F, OutboxErrorHandler as Ft, RetryContext as G, SenderKeyPair as Gt, TaskHandler as H, UnverifiedActivityReason as Ht, createFederation as I, OutboxListener as It, RespondWithObjectOptions as J, digest as Jt, RetryPolicy as K, PageItems as Kt, Message as L, OutboxListenerErrorHandler as Lt, Rfc6570Expression as M, NodeInfoDispatcher as Mt, FederationKvPrefixes as N, ObjectAuthorizePredicate as Nt, InboxListenerSetters as O, HashlinkMediaRequest as Ot, FederationOrigin as P, ObjectDispatcher as Pt, InProcessMessageQueueOptions as Q, createFederationBuilder as R, OutboxPermanentFailureHandler as Rt, FederationFetchOptions as S, CollectionCursor as St, IdempotencyKeyCallback as T, CustomCollectionCursor as Tt, TaskRegistry as U, WebFingerLinksDispatcher as Ut, TaskEnqueueOptions as V, UnverifiedActivityHandler as Vt, CreateExponentialBackoffPolicyOptions as W, SendActivityError as Wt, respondWithObjectIfAcceptable as X, respondWithObject as Y, ActivityTransformer as Yt, InProcessMessageQueue as Z, CustomCollectionCallbackSetters as _, ActorDispatcher as _t, GetSignedKeyOptions as a, CircuitBreakerActivityDrop as at, FederationBenchmarkOptions as b, AuthorizePredicate as bt, ParseUriResult as c, CircuitBreakerFailurePolicy as ct, RouteActivityOptions as d, CircuitBreakerState as dt, MessageQueueDepth as et, SendActivityOptions as f, CircuitBreakerStateChange as ft, ConstructorWithTypeId as g, ActorAliasMapper as gt, CollectionCallbackSetters as h, parseCircuitBreakerKvState as ht, GetActorOptions as i, CircuitBreaker as it, OutboxListenerSetters as j, MediaUploaderCallback as jt, MediaUploaderSetters as k, InboxErrorHandler as kt, PortableRequest as l, CircuitBreakerKvState as lt, ActorCallbackSetters as m, normalizeCircuitBreakerOptions as mt, Context as n, MessageQueueListenOptions as nt, InboxContext as o, CircuitBreakerBeforeSendDecision as ot, SendActivityOptionsForCollection as p, NormalizedCircuitBreakerOptions as pt, createExponentialBackoffPolicy as q, buildCollectionSynchronizationHeader as qt, ForwardActivityOptions as r, ParallelMessageQueue as rt, OutboxContext as s, CircuitBreakerCreateOptions as st, ActorKeyPair as t, MessageQueueEnqueueOptions as tt, RequestContext as u, CircuitBreakerOptions as ut, Federatable as v, ActorHandleMapper as vt, FederationStartQueueOptions as w, CustomCollectionCounter as wt, FederationBuilder as x, CollectionCounter as xt, Federation as y, ActorKeyPairsDispatcher as yt, TaskDefinition as z, PortableActorIdMapper as zt };
+export { InProcessMessageQueueOptions as $, ObjectCallbackSetters as A, InboxErrorHandler as At, TaskDefinition as B, PortableActorIdMapper as Bt, FederationOptions as C, CollectionCursor as Ct, InboxChallengePolicy as D, CustomCollectionDispatcher as Dt, IdempotencyStrategy as E, CustomCollectionCursor as Et, FederationOrigin as F, ObjectDispatcher as Ft, CreateExponentialBackoffPolicyOptions as G, SendActivityError as Gt, TaskEnqueueOptions as H, UnverifiedActivityHandler as Ht, FederationQueueOptions as I, OutboxErrorHandler as It, createExponentialBackoffPolicy as J, buildCollectionSynchronizationHeader as Jt, RetryContext as K, SenderKeyPair as Kt, createFederation as L, OutboxListener as Lt, PortableInboxForwardingOptions as M, MediaUploaderCallback as Mt, Rfc6570Expression as N, NodeInfoDispatcher as Nt, InboxListenerSetters as O, HashlinkMediaDispatcher as Ot, FederationKvPrefixes as P, ObjectAuthorizePredicate as Pt, InProcessMessageQueue as Q, Message as R, OutboxListenerErrorHandler as Rt, FederationFetchOptions as S, CollectionCounter as St, IdempotencyKeyCallback as T, CustomCollectionCounter as Tt, TaskHandler as U, UnverifiedActivityReason as Ut, TaskDefinitionOptions as V, SharedInboxKeyDispatcher as Vt, TaskRegistry as W, WebFingerLinksDispatcher as Wt, respondWithObject as X, ActivityTransformer as Xt, RespondWithObjectOptions as Y, digest as Yt, respondWithObjectIfAcceptable as Z, CustomCollectionCallbackSetters as _, ActorAliasMapper as _t, GetSignedKeyOptions as a, CircuitBreaker as at, FederationBenchmarkOptions as b, ActorKeyPairsDispatcher as bt, ParseUriResult as c, CircuitBreakerCreateOptions as ct, RouteActivityOptions as d, CircuitBreakerOptions as dt, MessageQueue as et, SendActivityOptions as f, CircuitBreakerState as ft, ConstructorWithTypeId as g, parseCircuitBreakerKvState as gt, CollectionCallbackSetters as h, normalizeCircuitBreakerOptions as ht, GetActorOptions as i, ParallelMessageQueue as it, OutboxListenerSetters as j, InboxListener as jt, MediaUploaderSetters as k, HashlinkMediaRequest as kt, PortableRequest as l, CircuitBreakerFailurePolicy as lt, ActorCallbackSetters as m, NormalizedCircuitBreakerOptions as mt, Context as n, MessageQueueEnqueueOptions as nt, InboxContext as o, CircuitBreakerActivityDrop as ot, SendActivityOptionsForCollection as p, CircuitBreakerStateChange as pt, RetryPolicy as q, PageItems as qt, ForwardActivityOptions as r, MessageQueueListenOptions as rt, OutboxContext as s, CircuitBreakerBeforeSendDecision as st, ActorKeyPair as t, MessageQueueDepth as tt, RequestContext as u, CircuitBreakerKvState as ut, Federatable as v, ActorDispatcher as vt, FederationStartQueueOptions as w, CollectionDispatcher as wt, FederationBuilder as x, AuthorizePredicate as xt, Federation as y, ActorHandleMapper as yt, createFederationBuilder as z, OutboxPermanentFailureHandler as zt };

package/dist/{context-DG5QeQ8W.mjs → context-DlZhxdFT.mjs}

@@ -8,7 +8,7 @@ import { lookupWebFinger } from "@fedify/webfinger";
 import { metrics, trace } from "@opentelemetry/api";
 //#region src/testing/context.ts
 function createContext(values) {
-	const { federation, url = new URL("http://example.com/"), canonicalOrigin, data, documentLoader, contextLoader, meterProvider, tracerProvider, clone, getNodeInfoUri, getActorUri, getObjectUri, getPortableObjectUri, getCollectionUri, getOutboxUri, getMediaUploaderUri, getInboxUri, getFollowingUri, getFollowersUri, getLikedUri, getFeaturedUri, getFeaturedTagsUri, parseUri, getActorKeyPairs, getDocumentLoader, lookupObject: lookupObject$1, traverseCollection: traverseCollection$1, lookupNodeInfo, lookupWebFinger: lookupWebFinger$1, sendActivity, routeActivity, enqueueTask, enqueueTaskMany } = values;
+	const { federation, url = new URL("http://example.com/"), canonicalOrigin, data, documentLoader, contextLoader, meterProvider, tracerProvider, clone, getNodeInfoUri, getActorUri, getObjectUri, getPortableObjectUri, getPortableInboxUri, getCollectionUri, getOutboxUri, getMediaUploaderUri, getInboxUri, getFollowingUri, getFollowersUri, getLikedUri, getFeaturedUri, getFeaturedTagsUri, parseUri, getActorKeyPairs, getDocumentLoader, lookupObject: lookupObject$1, traverseCollection: traverseCollection$1, lookupNodeInfo, lookupWebFinger: lookupWebFinger$1, sendActivity, routeActivity, enqueueTask, enqueueTaskMany } = values;
 	function throwRouterError() {
 		throw new RouterError("Not implemented");
 	}
@@ -31,6 +31,7 @@ function createContext(values) {
 		getActorUri: getActorUri ?? throwRouterError,
 		getObjectUri: getObjectUri ?? throwRouterError,
 		getPortableObjectUri: getPortableObjectUri ?? throwRouterError,
+		getPortableInboxUri: getPortableInboxUri ?? throwRouterError,
 		getCollectionUri: getCollectionUri ?? throwRouterError,
 		getOutboxUri: getOutboxUri ?? throwRouterError,
 		getMediaUploaderUri: getMediaUploaderUri ?? throwRouterError,

package/dist/{deno-B-NtYZVW.mjs → deno-Djkzd-G_.mjs}

@@ -3,6 +3,6 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2071+8b9dccb9";
+var version = "2.4.0-dev.2077+c29a03d4";
 //#endregion
 export { version as n, name as t };

package/dist/{docloader-C6yOVoaF.mjs → docloader-dA0RswUV.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { s as validateCryptoKey } from "./key-lfcx_NaE.mjs";
-import { n as doubleKnock } from "./http-DKWi8RjI.mjs";
+import { s as validateCryptoKey } from "./key-IxTTC8Yf.mjs";
+import { n as doubleKnock } from "./http-CCJ97Jql.mjs";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, validatePublicUrl } from "@fedify/vocab-runtime";

package/dist/federation/builder.test.mjs

@@ -6,7 +6,7 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertExists } from "../assert_exists-cffSpJ7X.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { r as createFederationBuilder } from "../builder-DVQ0yhKJ.mjs";
+import { r as createFederationBuilder } from "../builder-i3jxVe9m.mjs";
 import { DisallowedOperatorError, DisallowedVarSpecModifierError, DuplicateRouteVariableError, RouteTemplateOptionsNotMatchedError, RouterError } from "@fedify/uri-template";
 import { Activity, Note, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";

package/dist/federation/compound-fanout.test.mjs

@@ -6,11 +6,11 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { t as exportJwk } from "../key-lfcx_NaE.mjs";
+import { t as exportJwk } from "../key-IxTTC8Yf.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "../outgoing-jsonld-4IJqPYos.mjs";
-import { l as verifyProof, r as signObject } from "../proof-B6gwdhN5.mjs";
+import { l as verifyProof, r as signObject } from "../proof-CVL7JnZd.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl } from "../middleware-CPx4ZWwt.mjs";
+import { n as FederationImpl } from "../middleware-BMgzqBtr.mjs";
 import { Create, DataIntegrityProof, Note } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/handler-compound-proof.test.mjs

@@ -1,14 +1,14 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { r as createRequestContext, t as createInboxContext } from "../context-DG5QeQ8W.mjs";
+import { r as createRequestContext, t as createInboxContext } from "../context-DlZhxdFT.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { p as signJsonLd } from "../ld-jyjdrWjG.mjs";
-import { s as signRequest } from "../http-DKWi8RjI.mjs";
-import { a as rsaPrivateKey3, c as rsaPublicKey3 } from "../keys-DIJNHW-Y.mjs";
-import { d as handleInbox, o as createFederation } from "../middleware-CPx4ZWwt.mjs";
+import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-l0B9nREb.mjs";
+import { s as signRequest } from "../http-CCJ97Jql.mjs";
+import { a as rsaPrivateKey3, c as rsaPublicKey3, n as ed25519PrivateKey, r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
+import { o as createFederation, p as handleInbox } from "../middleware-BMgzqBtr.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as map_local_create_note_default } from "../map-local-create-note-B0SeXJms.mjs";
 import { Create } from "@fedify/vocab";
@@ -100,12 +100,7 @@ test("handleInbox() enforces portable compound proofs atomically", async () => {
 	tamperedInner.object.content = "Tampered";
 	assertEquals((await handle(await secureDocument(tamperedInner, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod))).status, 401);
 	const changedAfterSigning = structuredClone(valid);
-	changedAfterSigning.signature = {
-		type: "RsaSignature2017",
-		creator: "https://example.com/keys/1",
-		created: "2023-02-24T23:36:38Z",
-		signatureValue: "not-a-signature"
-	};
+	changedAfterSigning.summary = "Added after signing";
 	assertEquals((await handle(changedAfterSigning)).status, 401);
 });
 test("handleInbox() enforces compounds after alternate outer auth", async () => {
@@ -148,5 +143,137 @@ test("handleInbox() preserves ordinary top-level proof behavior", async () => {
 		}
 	}, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod))).status, 202);
 });
+async function signLd(document) {
+	return await signJsonLd(document, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader });
+}
+async function isLdSignatureVerified(document) {
+	return await verifyCompactJsonLd(await compactJsonLd(document, mockDocumentLoader), {
+		contextLoader: mockDocumentLoader,
+		documentLoader: mockDocumentLoader
+	});
+}
+async function handleDispatched(body) {
+	const dispatched = { count: 0 };
+	const response = await handle(body, dispatched);
+	return [
+		response.status,
+		await response.text(),
+		dispatched.count
+	];
+}
+const COMPOUND_FAILURE = "Failed to verify compound portable Object Integrity Proofs.";
+test("handleInbox() ignores a portable activity's Linked Data Signature", async () => {
+	const signed = await signLd(structuredClone(map_local_create_note_default.documents.finalSecuredCompound));
+	assertEquals(await isLdSignatureVerified(signed), false);
+	assertEquals(await handleDispatched(signed), [
+		202,
+		"",
+		1
+	]);
+	const bogus = structuredClone(map_local_create_note_default.documents.finalSecuredCompound);
+	bogus.signature = {
+		type: "RsaSignature2017",
+		creator: "https://example.com/keys/1",
+		created: "2023-02-24T23:36:38Z",
+		signatureValue: "not-a-signature"
+	};
+	assertEquals(await handleDispatched(bogus), [
+		202,
+		"",
+		1
+	]);
+	const tampered = structuredClone(map_local_create_note_default.documents.finalSecuredCompound);
+	tampered.object = {
+		...tampered.object,
+		content: "Tampered"
+	};
+	assertEquals((await handleDispatched(await signLd(tampered)))[0], 401);
+	const invalidInner = structuredClone(map_local_create_note_default.documents.outerUnsecuredDocument);
+	invalidInner.object.content = "Tampered";
+	assertEquals(await handleDispatched(await signLd(await secureDocument(invalidInner, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod))), [
+		401,
+		COMPOUND_FAILURE,
+		0
+	]);
+});
+test("handleInbox() verifies compounds with verified Linked Data Signatures", async () => {
+	const createBody = (object) => ({
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: "https://example.com/activities/compound-ld",
+		type: "Create",
+		actor: rsaPublicKey3.ownerId.href,
+		object
+	});
+	const privateJwk = await crypto.subtle.exportKey("jwk", ed25519PrivateKey);
+	const sign = async (object) => await signLd(await secureDocument(createBody(object), privateJwk, ed25519PublicKey.id.href));
+	const valid = await sign(structuredClone(map_local_create_note_default.documents.securedInner));
+	assertEquals(await isLdSignatureVerified(valid), true);
+	assertEquals(await handleDispatched(valid), [
+		202,
+		"",
+		1
+	]);
+	const invalidInner = structuredClone(map_local_create_note_default.documents.securedInner);
+	invalidInner.content = "Tampered";
+	const invalid = await sign(invalidInner);
+	assertEquals(await isLdSignatureVerified(invalid), true);
+	assertEquals(await handleDispatched(invalid), [
+		401,
+		COMPOUND_FAILURE,
+		0
+	]);
+});
+test("handleInbox() keeps embedded signature properties in proof inputs", async () => {
+	const innerWithSignature = await secureDocument({
+		...map_local_create_note_default.documents.innerUnsecuredDocument,
+		"@context": ["https://w3id.org/security/v1", ...map_local_create_note_default.documents.innerUnsecuredDocument["@context"]],
+		signature: {
+			type: "https://example.com/ns#ExampleSignature",
+			signatureValue: "covered by the inner proof"
+		}
+	}, map_local_create_note_default.keys.inner.testPrivateKeyJwk, map_local_create_note_default.keys.inner.verificationMethod);
+	const sign = async (object) => await signLd(await secureDocument({
+		...map_local_create_note_default.documents.outerUnsecuredDocument,
+		object
+	}, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod));
+	assertEquals(await handleDispatched(await sign(structuredClone(innerWithSignature))), [
+		202,
+		"",
+		1
+	]);
+	const innerWithoutSignature = structuredClone(innerWithSignature);
+	delete innerWithoutSignature.signature;
+	assertEquals(await handleDispatched(await sign(innerWithoutSignature)), [
+		401,
+		COMPOUND_FAILURE,
+		0
+	]);
+});
+test("handleInbox() inspects compounds without the Linked Data Signature", async () => {
+	const activity = await secureDocument({
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: "https://example.com/activities/ordinary-ld",
+		type: "Create",
+		actor: map_local_create_note_default.keys.outer.controller,
+		object: {
+			id: "https://example.com/notes/ordinary-ld",
+			type: "Note",
+			attributedTo: map_local_create_note_default.keys.outer.controller,
+			content: "An ordinary note"
+		}
+	}, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod);
+	activity.signature = {
+		id: map_local_create_note_default.documents.innerUnsecuredDocument.id,
+		type: "RsaSignature2017",
+		creator: "https://example.com/keys/1",
+		created: "2023-02-24T23:36:38Z",
+		signatureValue: "not-a-signature"
+	};
+	assertEquals(await handleDispatched(activity), [
+		202,
+		"",
+		1
+	]);
+});
 //#endregion
 export {};

package/dist/federation/handler.test.mjs

@@ -1,7 +1,7 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-DG5QeQ8W.mjs";
+import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-DlZhxdFT.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertGreaterOrEqual } from "../assert_greater_or_equal-BlafOF4-.mjs";
@@ -10,12 +10,12 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as parseAcceptSignature } from "../accept-CPVqki78.mjs";
-import { a as generateCryptoKeyPair } from "../key-lfcx_NaE.mjs";
-import { a as compactJsonLd, p as signJsonLd } from "../ld-jyjdrWjG.mjs";
-import { r as signObject } from "../proof-B6gwdhN5.mjs";
-import { s as signRequest } from "../http-DKWi8RjI.mjs";
+import { a as generateCryptoKeyPair } from "../key-IxTTC8Yf.mjs";
+import { a as compactJsonLd, p as signJsonLd } from "../ld-l0B9nREb.mjs";
+import { r as signObject } from "../proof-CVL7JnZd.mjs";
+import { s as signRequest } from "../http-CCJ97Jql.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { c as handleActor, d as handleInbox, f as handleObject, h as respondWithObjectIfAcceptable, l as handleCollection, m as respondWithObject, o as createFederation, p as handleOutbox, u as handleCustomCollection } from "../middleware-CPx4ZWwt.mjs";
+import { _ as respondWithObjectIfAcceptable, d as handleCollection, f as handleCustomCollection, g as respondWithObject, h as handleOutbox, m as handleObject, o as createFederation, p as handleInbox, u as handleActor } from "../middleware-BMgzqBtr.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { Activity, Create, CryptographicKey, Multikey, Note, Person, Tombstone } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";