@fedify/fedify 2.4.0-dev.2073 → 2.4.0-dev.2077

package/dist/{builder-CVHpPAjK.mjs → builder-i3jxVe9m.mjs}

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-LYTbBhYV.mjs";
+import { n as version, t as name } from "./deno-Djkzd-G_.mjs";
 import { t as ActivityListenerSet } from "./activity-listener-C-BSbKI7.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Router, RouterError, assertPath } from "@fedify/uri-template";
@@ -86,7 +86,7 @@ var FederationBuilderImpl = class {
 	* specified.
 	*/
 	async build(options) {
-		const { FederationImpl } = await import("./middleware-BJcez_E3.mjs");
+		const { FederationImpl } = await import("./middleware-BDjCUHMS.mjs");
 		const f = new FederationImpl(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();

package/dist/compat/transformers.test.mjs

@@ -5,7 +5,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { C as actorDehydrator, n as FederationImpl, w as autoIdAssigner } from "../middleware-CpyCNOW_.mjs";
+import { C as actorDehydrator, n as FederationImpl, w as autoIdAssigner } from "../middleware-BMgzqBtr.mjs";
 import { Follow, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 //#region src/compat/transformers.test.ts

package/dist/{compound-proof-B5Skp-vE.mjs → compound-proof-Cayy-ECj.mjs}

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { i as verifyMapLocalProof, s as verifyPortableObjectProofPolicy } from "./proof-CxsVG6vM.mjs";
+import { i as verifyMapLocalProof, s as verifyPortableObjectProofPolicy } from "./proof-CVL7JnZd.mjs";
 //#region src/sig/compound-proof.ts
 const textEncoder = new TextEncoder();
 const PORTABLE_OBJECT_ID_PATTERN = /^ap(?:\+ef61)?:\/\//i;

package/dist/{deno-LYTbBhYV.mjs → deno-Djkzd-G_.mjs}

@@ -3,6 +3,6 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2073+2152dfc6";
+var version = "2.4.0-dev.2077+c29a03d4";
 //#endregion
 export { version as n, name as t };

package/dist/{docloader-C0SWQylk.mjs → docloader-dA0RswUV.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { s as validateCryptoKey } from "./key-BYXnTGro.mjs";
-import { n as doubleKnock } from "./http-C7qHlv-b.mjs";
+import { s as validateCryptoKey } from "./key-IxTTC8Yf.mjs";
+import { n as doubleKnock } from "./http-CCJ97Jql.mjs";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, validatePublicUrl } from "@fedify/vocab-runtime";

package/dist/federation/builder.test.mjs

@@ -6,7 +6,7 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertExists } from "../assert_exists-cffSpJ7X.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { r as createFederationBuilder } from "../builder-CVHpPAjK.mjs";
+import { r as createFederationBuilder } from "../builder-i3jxVe9m.mjs";
 import { DisallowedOperatorError, DisallowedVarSpecModifierError, DuplicateRouteVariableError, RouteTemplateOptionsNotMatchedError, RouterError } from "@fedify/uri-template";
 import { Activity, Note, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";

package/dist/federation/compound-fanout.test.mjs

@@ -6,11 +6,11 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { t as exportJwk } from "../key-BYXnTGro.mjs";
+import { t as exportJwk } from "../key-IxTTC8Yf.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "../outgoing-jsonld-4IJqPYos.mjs";
-import { l as verifyProof, r as signObject } from "../proof-CxsVG6vM.mjs";
+import { l as verifyProof, r as signObject } from "../proof-CVL7JnZd.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl } from "../middleware-CpyCNOW_.mjs";
+import { n as FederationImpl } from "../middleware-BMgzqBtr.mjs";
 import { Create, DataIntegrityProof, Note } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/handler-compound-proof.test.mjs

@@ -5,10 +5,10 @@ import { r as createRequestContext, t as createInboxContext } from "../context-D
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { p as signJsonLd } from "../ld-DT3e2hOv.mjs";
-import { s as signRequest } from "../http-C7qHlv-b.mjs";
-import { a as rsaPrivateKey3, c as rsaPublicKey3 } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation, p as handleInbox } from "../middleware-CpyCNOW_.mjs";
+import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-l0B9nREb.mjs";
+import { s as signRequest } from "../http-CCJ97Jql.mjs";
+import { a as rsaPrivateKey3, c as rsaPublicKey3, n as ed25519PrivateKey, r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
+import { o as createFederation, p as handleInbox } from "../middleware-BMgzqBtr.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as map_local_create_note_default } from "../map-local-create-note-B0SeXJms.mjs";
 import { Create } from "@fedify/vocab";
@@ -100,12 +100,7 @@ test("handleInbox() enforces portable compound proofs atomically", async () => {
 	tamperedInner.object.content = "Tampered";
 	assertEquals((await handle(await secureDocument(tamperedInner, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod))).status, 401);
 	const changedAfterSigning = structuredClone(valid);
-	changedAfterSigning.signature = {
-		type: "RsaSignature2017",
-		creator: "https://example.com/keys/1",
-		created: "2023-02-24T23:36:38Z",
-		signatureValue: "not-a-signature"
-	};
+	changedAfterSigning.summary = "Added after signing";
 	assertEquals((await handle(changedAfterSigning)).status, 401);
 });
 test("handleInbox() enforces compounds after alternate outer auth", async () => {
@@ -148,5 +143,137 @@ test("handleInbox() preserves ordinary top-level proof behavior", async () => {
 		}
 	}, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod))).status, 202);
 });
+async function signLd(document) {
+	return await signJsonLd(document, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader });
+}
+async function isLdSignatureVerified(document) {
+	return await verifyCompactJsonLd(await compactJsonLd(document, mockDocumentLoader), {
+		contextLoader: mockDocumentLoader,
+		documentLoader: mockDocumentLoader
+	});
+}
+async function handleDispatched(body) {
+	const dispatched = { count: 0 };
+	const response = await handle(body, dispatched);
+	return [
+		response.status,
+		await response.text(),
+		dispatched.count
+	];
+}
+const COMPOUND_FAILURE = "Failed to verify compound portable Object Integrity Proofs.";
+test("handleInbox() ignores a portable activity's Linked Data Signature", async () => {
+	const signed = await signLd(structuredClone(map_local_create_note_default.documents.finalSecuredCompound));
+	assertEquals(await isLdSignatureVerified(signed), false);
+	assertEquals(await handleDispatched(signed), [
+		202,
+		"",
+		1
+	]);
+	const bogus = structuredClone(map_local_create_note_default.documents.finalSecuredCompound);
+	bogus.signature = {
+		type: "RsaSignature2017",
+		creator: "https://example.com/keys/1",
+		created: "2023-02-24T23:36:38Z",
+		signatureValue: "not-a-signature"
+	};
+	assertEquals(await handleDispatched(bogus), [
+		202,
+		"",
+		1
+	]);
+	const tampered = structuredClone(map_local_create_note_default.documents.finalSecuredCompound);
+	tampered.object = {
+		...tampered.object,
+		content: "Tampered"
+	};
+	assertEquals((await handleDispatched(await signLd(tampered)))[0], 401);
+	const invalidInner = structuredClone(map_local_create_note_default.documents.outerUnsecuredDocument);
+	invalidInner.object.content = "Tampered";
+	assertEquals(await handleDispatched(await signLd(await secureDocument(invalidInner, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod))), [
+		401,
+		COMPOUND_FAILURE,
+		0
+	]);
+});
+test("handleInbox() verifies compounds with verified Linked Data Signatures", async () => {
+	const createBody = (object) => ({
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: "https://example.com/activities/compound-ld",
+		type: "Create",
+		actor: rsaPublicKey3.ownerId.href,
+		object
+	});
+	const privateJwk = await crypto.subtle.exportKey("jwk", ed25519PrivateKey);
+	const sign = async (object) => await signLd(await secureDocument(createBody(object), privateJwk, ed25519PublicKey.id.href));
+	const valid = await sign(structuredClone(map_local_create_note_default.documents.securedInner));
+	assertEquals(await isLdSignatureVerified(valid), true);
+	assertEquals(await handleDispatched(valid), [
+		202,
+		"",
+		1
+	]);
+	const invalidInner = structuredClone(map_local_create_note_default.documents.securedInner);
+	invalidInner.content = "Tampered";
+	const invalid = await sign(invalidInner);
+	assertEquals(await isLdSignatureVerified(invalid), true);
+	assertEquals(await handleDispatched(invalid), [
+		401,
+		COMPOUND_FAILURE,
+		0
+	]);
+});
+test("handleInbox() keeps embedded signature properties in proof inputs", async () => {
+	const innerWithSignature = await secureDocument({
+		...map_local_create_note_default.documents.innerUnsecuredDocument,
+		"@context": ["https://w3id.org/security/v1", ...map_local_create_note_default.documents.innerUnsecuredDocument["@context"]],
+		signature: {
+			type: "https://example.com/ns#ExampleSignature",
+			signatureValue: "covered by the inner proof"
+		}
+	}, map_local_create_note_default.keys.inner.testPrivateKeyJwk, map_local_create_note_default.keys.inner.verificationMethod);
+	const sign = async (object) => await signLd(await secureDocument({
+		...map_local_create_note_default.documents.outerUnsecuredDocument,
+		object
+	}, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod));
+	assertEquals(await handleDispatched(await sign(structuredClone(innerWithSignature))), [
+		202,
+		"",
+		1
+	]);
+	const innerWithoutSignature = structuredClone(innerWithSignature);
+	delete innerWithoutSignature.signature;
+	assertEquals(await handleDispatched(await sign(innerWithoutSignature)), [
+		401,
+		COMPOUND_FAILURE,
+		0
+	]);
+});
+test("handleInbox() inspects compounds without the Linked Data Signature", async () => {
+	const activity = await secureDocument({
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: "https://example.com/activities/ordinary-ld",
+		type: "Create",
+		actor: map_local_create_note_default.keys.outer.controller,
+		object: {
+			id: "https://example.com/notes/ordinary-ld",
+			type: "Note",
+			attributedTo: map_local_create_note_default.keys.outer.controller,
+			content: "An ordinary note"
+		}
+	}, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod);
+	activity.signature = {
+		id: map_local_create_note_default.documents.innerUnsecuredDocument.id,
+		type: "RsaSignature2017",
+		creator: "https://example.com/keys/1",
+		created: "2023-02-24T23:36:38Z",
+		signatureValue: "not-a-signature"
+	};
+	assertEquals(await handleDispatched(activity), [
+		202,
+		"",
+		1
+	]);
+});
 //#endregion
 export {};

package/dist/federation/handler.test.mjs

@@ -10,12 +10,12 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as parseAcceptSignature } from "../accept-CPVqki78.mjs";
-import { a as generateCryptoKeyPair } from "../key-BYXnTGro.mjs";
-import { a as compactJsonLd, p as signJsonLd } from "../ld-DT3e2hOv.mjs";
-import { r as signObject } from "../proof-CxsVG6vM.mjs";
-import { s as signRequest } from "../http-C7qHlv-b.mjs";
+import { a as generateCryptoKeyPair } from "../key-IxTTC8Yf.mjs";
+import { a as compactJsonLd, p as signJsonLd } from "../ld-l0B9nREb.mjs";
+import { r as signObject } from "../proof-CVL7JnZd.mjs";
+import { s as signRequest } from "../http-CCJ97Jql.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { _ as respondWithObjectIfAcceptable, d as handleCollection, f as handleCustomCollection, g as respondWithObject, h as handleOutbox, m as handleObject, o as createFederation, p as handleInbox, u as handleActor } from "../middleware-CpyCNOW_.mjs";
+import { _ as respondWithObjectIfAcceptable, d as handleCollection, f as handleCustomCollection, g as respondWithObject, h as handleOutbox, m as handleObject, o as createFederation, p as handleInbox, u as handleActor } from "../middleware-BMgzqBtr.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { Activity, Create, CryptographicKey, Multikey, Note, Person, Tombstone } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/hashlink-media.test.mjs

@@ -10,8 +10,8 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation, y as parseHashlinkGatewayRequest } from "../middleware-CpyCNOW_.mjs";
-import { r as createFederationBuilder } from "../builder-CVHpPAjK.mjs";
+import { o as createFederation, y as parseHashlinkGatewayRequest } from "../middleware-BMgzqBtr.mjs";
+import { r as createFederationBuilder } from "../builder-i3jxVe9m.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { Note } from "@fedify/vocab";
 import { createTestMeterProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/idempotency.test.mjs

@@ -4,9 +4,9 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { r as signObject } from "../proof-CxsVG6vM.mjs";
+import { r as signObject } from "../proof-CVL7JnZd.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-CpyCNOW_.mjs";
+import { o as createFederation } from "../middleware-BMgzqBtr.mjs";
 import { Create, Follow, Person } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/idempotency.test.ts

package/dist/federation/metrics.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
-import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-DvlvYpq_.mjs";
+import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-D1p6hv4z.mjs";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { FetchError } from "@fedify/vocab-runtime";
 import { DataPointType, MeterProvider, MetricReader } from "@opentelemetry/sdk-metrics";

package/dist/federation/middleware.test.mjs

@@ -16,14 +16,14 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { g as recordInboxActivity } from "../metrics-DvlvYpq_.mjs";
-import { a as compactJsonLd, h as verifyJsonLd, p as signJsonLd, s as detachSignature } from "../ld-DT3e2hOv.mjs";
-import { a as verifyObject, r as signObject } from "../proof-CxsVG6vM.mjs";
-import { l as verifyRequest, s as signRequest } from "../http-C7qHlv-b.mjs";
+import { g as recordInboxActivity } from "../metrics-D1p6hv4z.mjs";
+import { a as compactJsonLd, h as verifyJsonLd, p as signJsonLd, s as detachSignature } from "../ld-l0B9nREb.mjs";
+import { a as verifyObject, r as signObject } from "../proof-CVL7JnZd.mjs";
+import { l as verifyRequest, s as signRequest } from "../http-CCJ97Jql.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { t as getAuthenticatedDocumentLoader } from "../docloader-C0SWQylk.mjs";
-import { b as handleBenchmarkTrigger, i as KvSpecDeterminer, n as FederationImpl, o as createFederation, r as InboxContextImpl, t as ContextImpl } from "../middleware-CpyCNOW_.mjs";
-import { t as doesActorOwnKey } from "../owner-CDsVeZI7.mjs";
+import { t as getAuthenticatedDocumentLoader } from "../docloader-dA0RswUV.mjs";
+import { b as handleBenchmarkTrigger, i as KvSpecDeterminer, n as FederationImpl, o as createFederation, r as InboxContextImpl, t as ContextImpl } from "../middleware-BMgzqBtr.mjs";
+import { t as doesActorOwnKey } from "../owner-DGbYmXqU.mjs";
 import { t as CircuitBreaker } from "../circuit-breaker-C5NqoLBJ.mjs";
 import { t as TaskCodec } from "../codec-C6rTrpIp.mjs";
 import { t as markCircuitBreakerLegacySweepDone } from "../circuit-breaker-test-utils-DW6YC_Pe.mjs";

package/dist/federation/mod.cjs

@@ -1,6 +1,6 @@
 const { URLPattern } = require("urlpattern-polyfill");
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_federation = require("../federation-B1aeTKKN.cjs");
+const require_federation = require("../federation-CFd0Jhhv.cjs");
 exports.CircuitBreaker = require_federation.CircuitBreaker;
 exports.InProcessMessageQueue = require_federation.InProcessMessageQueue;
 exports.MemoryKvStore = require_federation.MemoryKvStore;

package/dist/federation/mod.js

@@ -1,6 +1,6 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { a as respondWithObject, c as digest, d as parseCircuitBreakerKvState, f as createFederationBuilder, i as SendActivityError, l as CircuitBreaker, n as handleWebFinger, o as respondWithObjectIfAcceptable, r as createExponentialBackoffPolicy, s as buildCollectionSynchronizationHeader, t as createFederation, u as normalizeCircuitBreakerOptions } from "../middleware-CCbyUF4c.js";
+import { a as respondWithObject, c as digest, d as parseCircuitBreakerKvState, f as createFederationBuilder, i as SendActivityError, l as CircuitBreaker, n as handleWebFinger, o as respondWithObjectIfAcceptable, r as createExponentialBackoffPolicy, s as buildCollectionSynchronizationHeader, t as createFederation, u as normalizeCircuitBreakerOptions } from "../middleware-SSfryVzY.js";
 import { getLogger } from "@logtape/logtape";
 import { Router as Router$1, RouterError as RouterError$1, assertPath, isPath } from "@fedify/uri-template";
 import { isEqual } from "es-toolkit";

package/dist/federation/outgoing-proof.test.mjs

@@ -7,12 +7,12 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { t as exportJwk } from "../key-BYXnTGro.mjs";
-import { s as detachSignature } from "../ld-DT3e2hOv.mjs";
-import { r as signObject } from "../proof-CxsVG6vM.mjs";
+import { t as exportJwk } from "../key-IxTTC8Yf.mjs";
+import { s as detachSignature } from "../ld-l0B9nREb.mjs";
+import { r as signObject } from "../proof-CVL7JnZd.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl, o as createFederation } from "../middleware-CpyCNOW_.mjs";
-import { a as verifyCompoundPortableObjectProofs } from "../compound-proof-B5Skp-vE.mjs";
+import { n as FederationImpl, o as createFederation } from "../middleware-BMgzqBtr.mjs";
+import { a as verifyCompoundPortableObjectProofs } from "../compound-proof-Cayy-ECj.mjs";
 import { Create, Note, Person } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/portable-gateway-keys.test.mjs

@@ -7,10 +7,10 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
-import { p as signJsonLd } from "../ld-DT3e2hOv.mjs";
-import { s as signRequest } from "../http-C7qHlv-b.mjs";
+import { p as signJsonLd } from "../ld-l0B9nREb.mjs";
+import { s as signRequest } from "../http-CCJ97Jql.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl, o as createFederation, p as handleInbox } from "../middleware-CpyCNOW_.mjs";
+import { n as FederationImpl, o as createFederation, p as handleInbox } from "../middleware-BMgzqBtr.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as KvKeyCache } from "../keycache-BUDHB5rY.mjs";
 import { Create, CryptographicKey, Person } from "@fedify/vocab";

package/dist/federation/portable-inbox.test.mjs

@@ -8,11 +8,11 @@ import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { p as signJsonLd } from "../ld-DT3e2hOv.mjs";
-import { r as signObject } from "../proof-CxsVG6vM.mjs";
-import { s as signRequest } from "../http-C7qHlv-b.mjs";
+import { p as signJsonLd } from "../ld-l0B9nREb.mjs";
+import { r as signObject } from "../proof-CVL7JnZd.mjs";
+import { s as signRequest } from "../http-CCJ97Jql.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { c as forwardPortableInboxActivity, l as resolvePortableInboxForwardingOptions, o as createFederation } from "../middleware-CpyCNOW_.mjs";
+import { c as forwardPortableInboxActivity, l as resolvePortableInboxForwardingOptions, o as createFederation } from "../middleware-BMgzqBtr.mjs";
 import { Create, Follow, Note, Person, Tombstone } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { exportDidKey, formatIri, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/portable.test.mjs

@@ -7,10 +7,10 @@ import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
-import { o as verifyPortableObjectProof, r as signObject } from "../proof-CxsVG6vM.mjs";
-import { s as signRequest } from "../http-C7qHlv-b.mjs";
+import { o as verifyPortableObjectProof, r as signObject } from "../proof-CVL7JnZd.mjs";
+import { s as signRequest } from "../http-CCJ97Jql.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation, v as PORTABLE_OBJECT_CONTENT_TYPE } from "../middleware-CpyCNOW_.mjs";
+import { o as createFederation, v as PORTABLE_OBJECT_CONTENT_TYPE } from "../middleware-BMgzqBtr.mjs";
 import { Collection, Create, Note, Object as Object$1, Person, Tombstone, lookupObject } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { exportDidKey, formatIri, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/send.test.mjs

@@ -10,10 +10,10 @@ import { t as assertNotEquals } from "../assert_not_equals-CpPK2t89.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { l as verifyRequest } from "../http-C7qHlv-b.mjs";
+import { l as verifyRequest } from "../http-CCJ97Jql.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { t as doesActorOwnKey } from "../owner-CDsVeZI7.mjs";
-import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-BZJ7NsVV.mjs";
+import { t as doesActorOwnKey } from "../owner-DGbYmXqU.mjs";
+import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-Ejy1jOz9.mjs";
 import { Activity, Application, Endpoints, Group, Person, Service } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { FetchError, UrlError } from "@fedify/vocab-runtime";

package/dist/federation/tasks/enqueue.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
 import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-dbCShlCb.mjs";
 import "../../testing-CO_cEvQc.mjs";
-import { o as createFederation } from "../../middleware-CpyCNOW_.mjs";
+import { o as createFederation } from "../../middleware-BMgzqBtr.mjs";
 import { n as ParallelMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { delay } from "es-toolkit";

package/dist/federation/tasks/tasks.test.mjs

@@ -4,8 +4,8 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
 import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-dbCShlCb.mjs";
 import "../../testing-CO_cEvQc.mjs";
-import { o as createFederation } from "../../middleware-CpyCNOW_.mjs";
-import { r as createFederationBuilder } from "../../builder-CVHpPAjK.mjs";
+import { o as createFederation } from "../../middleware-BMgzqBtr.mjs";
+import { r as createFederationBuilder } from "../../builder-i3jxVe9m.mjs";
 import { t as TaskCodec } from "../../codec-C6rTrpIp.mjs";
 import { t as InProcessMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { W3CTraceContextPropagator } from "@opentelemetry/core";

package/dist/federation/temporal.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { t as hasMalformedKnownTemporalLiteral } from "../temporal-CLzSfIOV.mjs";
+import { t as hasMalformedKnownTemporalLiteral } from "../temporal-DNJ1cNpr.mjs";
 import { test } from "@fedify/fixture";
 //#region src/federation/temporal.test.ts
 test("hasMalformedKnownTemporalLiteral() detects expanded proof timestamps", async () => {

package/dist/federation/webfinger.test.mjs

@@ -6,7 +6,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertNotEquals } from "../assert_not_equals-CpPK2t89.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { o as createFederation, s as handleWebFinger } from "../middleware-CpyCNOW_.mjs";
+import { o as createFederation, s as handleWebFinger } from "../middleware-BMgzqBtr.mjs";
 import { Image, Link, Person, Tombstone } from "@fedify/vocab";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { parseIri } from "@fedify/vocab-runtime";

package/dist/{federation-B1aeTKKN.cjs → federation-CFd0Jhhv.cjs}

@@ -1,10 +1,10 @@
 const { URLPattern } = require("urlpattern-polyfill");
 const require_rolldown_runtime = require("./rolldown-runtime-Dmm3t92W.cjs");
 const require_transformers = require("./transformers-BalCrSsr.cjs");
-const require_http = require("./http-DGk8XI38.cjs");
+const require_http = require("./http-Dvy_IwRa.cjs");
 const require_types = require("./types-Be2zbyeG.cjs");
-const require_owner = require("./owner-DCIH7Iq0.cjs");
-const require_kv_cache = require("./kv-cache-DvqkKNIj.cjs");
+const require_owner = require("./owner-BpOxL5PG.cjs");
+const require_kv_cache = require("./kv-cache-BP69NV0P.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _fedify_uri_template = require("@fedify/uri-template");
 let _fedify_vocab = require("@fedify/vocab");
@@ -2638,13 +2638,13 @@ function recordCollectionMetrics(meterProvider, base, result, options = {}) {
 * @param parameters The parameters for handling the collection.
 * @returns A promise that resolves to an HTTP response.
 */
-async function handleCollection(request, { name: name$2, identifier, uriGetter, filter, filterPredicate, context, collectionCallbacks, tracerProvider, meterProvider, onUnauthorized, onNotFound }) {
-	const spanName = name$2.trim().replace(/\s+/g, "_");
+async function handleCollection(request, { name: name$1, identifier, uriGetter, filter, filterPredicate, context, collectionCallbacks, tracerProvider, meterProvider, onUnauthorized, onNotFound }) {
+	const spanName = name$1.trim().replace(/\s+/g, "_");
 	tracerProvider = tracerProvider ?? _opentelemetry_api.trace.getTracerProvider();
 	const tracer = tracerProvider.getTracer(require_http.name, require_http.version);
 	const cursor = new URL(request.url).searchParams.get("cursor");
 	const metricBase = {
-		kind: getCollectionMetricKind(name$2),
+		kind: getCollectionMetricKind(name$1),
 		page: cursor != null,
 		dispatcher: "built_in"
 	};
@@ -2685,7 +2685,7 @@ async function handleCollection(request, { name: name$2, identifier, uriGetter,
 							span.setStatus({ code: _opentelemetry_api.SpanStatusCode.ERROR });
 							return await onNotFound(request);
 						}
-						const items = filterCollectionItems(page.items, name$2, filterPredicate);
+						const items = filterCollectionItems(page.items, name$1, filterPredicate);
 						itemCount = items.length;
 						span.setAttribute("fedify.collection.items", itemCount);
 						return items;
@@ -2725,7 +2725,7 @@ async function handleCollection(request, { name: name$2, identifier, uriGetter,
 		} else {
 			const uri = new URL(baseUri);
 			uri.searchParams.set("cursor", cursor);
-			const pageOrResponse = await tracer.startActiveSpan(`activitypub.dispatch_collection_page ${name$2}`, {
+			const pageOrResponse = await tracer.startActiveSpan(`activitypub.dispatch_collection_page ${name$1}`, {
 				kind: _opentelemetry_api.SpanKind.SERVER,
 				attributes: {
 					"activitypub.collection.id": uri.href,
@@ -2741,7 +2741,7 @@ async function handleCollection(request, { name: name$2, identifier, uriGetter,
 						span.setStatus({ code: _opentelemetry_api.SpanStatusCode.ERROR });
 						return await onNotFound(request);
 					}
-					const items = filterCollectionItems(page.items, name$2, filterPredicate);
+					const items = filterCollectionItems(page.items, name$1, filterPredicate);
 					itemCount = items.length;
 					span.setAttribute("fedify.collection.items", itemCount);
 					return {
@@ -3671,8 +3671,9 @@ async function handleInboxInternal(request, parameters, span) {
 		});
 	}
 	if (!skipSignatureVerification) {
-		if (inspectCompoundPortableObjectApplicability(json, INBOX_COMPOUND_PROOF_LIMITS) !== "absent") {
-			const compoundProof = await verifyCompoundPortableObjectProofs(json, INBOX_COMPOUND_PROOF_LIMITS, {
+		const compoundJson = Array.isArray(json) ? json : jsonWithoutSig;
+		if (inspectCompoundPortableObjectApplicability(compoundJson, INBOX_COMPOUND_PROOF_LIMITS) !== "absent") {
+			const compoundProof = await verifyCompoundPortableObjectProofs(compoundJson, INBOX_COMPOUND_PROOF_LIMITS, {
 				documentLoader: ctx.documentLoader,
 				keyCache,
 				meterProvider,
@@ -3888,8 +3889,8 @@ var CustomCollectionHandler = class {
 	* @param CollectionPage The CollectionPage constructor.
 	* @param filterPredicate Optional filter predicate for items.
 	*/
-	constructor(name$1, values, context, callbacks, tracerProvider = _opentelemetry_api.trace.getTracerProvider(), meterProvider, Collection, CollectionPage, filterPredicate) {
-		this.name = name$1;
+	constructor(name$2, values, context, callbacks, tracerProvider = _opentelemetry_api.trace.getTracerProvider(), meterProvider, Collection, CollectionPage, filterPredicate) {
+		this.name = name$2;
 		this.values = values;
 		this.context = context;
 		this.callbacks = callbacks;

package/dist/{http-C7qHlv-b.mjs → http-CCJ97Jql.mjs}

@@ -1,11 +1,11 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-LYTbBhYV.mjs";
-import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-DvlvYpq_.mjs";
+import { n as version, t as name } from "./deno-Djkzd-G_.mjs";
+import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-D1p6hv4z.mjs";
 import { i as validateAcceptSignature, n as fulfillAcceptSignature, r as parseAcceptSignature } from "./accept-CPVqki78.mjs";
-import { i as fetchKeyDetailed, s as validateCryptoKey } from "./key-BYXnTGro.mjs";
-import { n as verifyPortableGatewayKeyDocument } from "./portable-key-DCyKGCQd.mjs";
+import { i as fetchKeyDetailed, s as validateCryptoKey } from "./key-IxTTC8Yf.mjs";
+import { n as verifyPortableGatewayKeyDocument } from "./portable-key-CCwJGSsU.mjs";
 import { getLogger } from "@logtape/logtape";
 import { CryptographicKey } from "@fedify/vocab";
 import { SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/{http-DGk8XI38.cjs → http-Dvy_IwRa.cjs}

@@ -15,7 +15,7 @@ let byte_encodings_base64 = require("byte-encodings/base64");
 let _opentelemetry_semantic_conventions = require("@opentelemetry/semantic-conventions");
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2073+2152dfc6";
+var version = "2.4.0-dev.2077+c29a03d4";
 //#endregion
 //#region ../../node_modules/.pnpm/temporal-polyfill@1.0.1/node_modules/temporal-polyfill/chunks/root.js
 const NativeTemporal = globalThis.Temporal;

package/dist/{http-vfTpzGEq.js → http-aqh3yFdM.js}

@@ -13,7 +13,7 @@ import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2073+2152dfc6";
+var version = "2.4.0-dev.2077+c29a03d4";
 //#endregion
 //#region src/sig/accept.ts
 /**

package/dist/{key-BYXnTGro.mjs → key-IxTTC8Yf.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-LYTbBhYV.mjs";
-import { _ as recordKeyLookup, n as getDurationMs, t as classifyFetchError } from "./metrics-DvlvYpq_.mjs";
+import { n as version, t as name } from "./deno-Djkzd-G_.mjs";
+import { _ as recordKeyLookup, n as getDurationMs, t as classifyFetchError } from "./metrics-D1p6hv4z.mjs";
 import { getLogger } from "@logtape/logtape";
 import { CryptographicKey, Multikey, Object as Object$1, isActor } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";