@fedify/fedify 2.4.0-dev.2093 → 2.4.0-dev.2103

package/dist/{http-B2ftY0Ha.mjs → http-BU-8fUrz.mjs}

@@ -1,11 +1,11 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-8t8k_6Yv.mjs";
-import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-B7YwKTFr.mjs";
+import { n as version, t as name } from "./deno-CkjiYK_Z.mjs";
+import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-BCAa5-kE.mjs";
 import { i as validateAcceptSignature, n as fulfillAcceptSignature, r as parseAcceptSignature } from "./accept-CPVqki78.mjs";
-import { i as fetchKeyDetailed, s as validateCryptoKey } from "./key-Dwm4VswT.mjs";
-import { n as verifyPortableGatewayKeyDocument } from "./portable-key-Cn1WJSN1.mjs";
+import { i as fetchKeyDetailed, s as validateCryptoKey } from "./key-I8gLBkcf.mjs";
+import { n as verifyPortableGatewayKeyDocument } from "./portable-key-B5oKE_wZ.mjs";
 import { getLogger } from "@logtape/logtape";
 import { CryptographicKey } from "@fedify/vocab";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
@@ -13,7 +13,7 @@ import { FetchError } from "@fedify/vocab-runtime";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
 import { encodeHex } from "byte-encodings/hex";
-import { Item, decodeDict, encodeItem } from "structured-field-values";
+import { Item, decodeDict, encodeDict, encodeItem } from "structured-field-values";
 //#region src/sig/http.ts
 const DEFAULT_MAX_REDIRECTION = 20;
 const DOUBLE_KNOCK_TRANSPORT_RETRY_DELAY_MS = 100;
@@ -202,6 +202,81 @@ function parseRfc9421Signature(signature) {
 	for (const [key, value] of Object.entries(dict)) if (value.value instanceof Uint8Array) result[key] = value.value;
 	return result;
 }
+/**
+* Parses the `Signature` header of draft-cavage HTTP Signatures into its
+* fields, e.g., `keyId` and `headers`.
+*/
+function parseDraftSignature(signature) {
+	return Object.fromEntries(signature.split(",").map((pair) => pair.match(/^\s*([A-Za-z]+)=(?:"([^"]*)"|(\d+))\s*$/)).filter((m) => m != null).map((m) => [m[1], m[2] ?? m[3]]));
+}
+/**
+* Lists the HTTP Signatures that a request claims to carry, without verifying
+* any of them.  Signatures whose key IDs are not URLs are left out.
+* @param request The request.
+* @returns The signatures; RFC 9421 ones if the request has
+*          a `Signature-Input` header, or a draft-cavage one otherwise.
+* @internal
+*/
+function listRequestSignatures(request) {
+	const signatureInput = request.headers.get("Signature-Input");
+	if (signatureInput != null) {
+		const signatures = [];
+		const inputs = parseRfc9421SignatureInput(signatureInput);
+		for (const [label, input] of Object.entries(inputs)) {
+			const keyId = parseKeyId(input.keyId);
+			if (keyId == null) continue;
+			signatures.push({
+				keyId,
+				label,
+				components: input.components
+			});
+		}
+		return signatures;
+	}
+	const signature = request.headers.get("Signature");
+	if (signature == null) return [];
+	const values = parseDraftSignature(signature);
+	const keyId = parseKeyId(values.keyId);
+	if (keyId == null) return [];
+	return [{
+		keyId,
+		label: null,
+		components: (values.headers ?? "").split(/\s+/g).filter((name) => name !== "").map((name) => ({
+			value: name,
+			params: {}
+		}))
+	}];
+}
+/**
+* Makes a copy of a request that carries only one of its RFC 9421 signatures,
+* so that verifying the copy verifies that signature and no other.
+* A draft-cavage signature is the only one in its request, so the request is
+* just copied.
+* @param request The request, whose body must not be consumed.
+* @param signature One of the signatures that {@link listRequestSignatures}
+*                  lists for the request.
+* @returns The copy of the request.
+* @internal
+*/
+function selectRequestSignature(request, signature) {
+	const copy = request.clone();
+	if (signature.label == null) return copy;
+	const { label } = signature;
+	const pick = (header) => {
+		if (header == null) return "";
+		let dict;
+		try {
+			dict = decodeDict(header);
+		} catch {
+			return "";
+		}
+		return Object.hasOwn(dict, label) ? encodeDict({ [label]: dict[label] }) : "";
+	};
+	const headers = new Headers(copy.headers);
+	headers.set("Signature-Input", pick(headers.get("Signature-Input")));
+	headers.set("Signature", pick(headers.get("Signature")));
+	return new Request(copy, { headers });
+}
 async function signRequestRfc9421(request, privateKey, keyId, span, currentTime, bodyBuffer, rfc9421Options) {
 	if (privateKey.algorithm.name !== "RSASSA-PKCS1-v1_5") throw new TypeError("Unsupported algorithm: " + privateKey.algorithm.name);
 	const url = new URL(request.url);
@@ -433,7 +508,7 @@ async function verifyRequestDraft(request, span, metricsContext, { documentLoade
 		logger.debug("Failed to verify; no Signature header found.", { headers: Object.fromEntries(request.headers.entries()) });
 		return noSignatureResult();
 	}
-	const sigValues = Object.fromEntries(sigHeader.split(",").map((pair) => pair.match(/^\s*([A-Za-z]+)=(?:"([^"]*)"|(\d+))\s*$/)).filter((m) => m != null).map((m) => [m[1], m[2] ?? m[3]]));
+	const sigValues = parseDraftSignature(sigHeader);
 	const parsedKeyId = parseKeyId(sigValues.keyId);
 	const dateHeader = request.headers.get("Date");
 	if (dateHeader == null) {
@@ -1106,4 +1181,4 @@ function timingSafeEqual(a, b) {
 	return result === 0;
 }
 //#endregion
-export { parseRfc9421Signature as a, timingSafeEqual as c, formatRfc9421SignatureParameters as i, verifyRequest as l, doubleKnock as n, parseRfc9421SignatureInput as o, formatRfc9421Signature as r, signRequest as s, createRfc9421SignatureBase as t, verifyRequestDetailed as u };
+export { listRequestSignatures as a, selectRequestSignature as c, verifyRequest as d, verifyRequestDetailed as f, formatRfc9421SignatureParameters as i, signRequest as l, doubleKnock as n, parseRfc9421Signature as o, formatRfc9421Signature as r, parseRfc9421SignatureInput as s, createRfc9421SignatureBase as t, timingSafeEqual as u };

package/dist/{http-DSaSAN7X.cjs → http-Cala2Grs.cjs}

@@ -16,7 +16,7 @@ json_canon = require_rolldown_runtime.__toESM(json_canon, 1);
 let _opentelemetry_semantic_conventions = require("@opentelemetry/semantic-conventions");
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2093+e9706a54";
+var version = "2.4.0-dev.2103+3be829c0";
 //#endregion
 //#region src/sig/portable-key-id.ts
 const COMPATIBLE_KEY_ID_PATH_PATTERN = /^\/\.well-known\/apgateway\/did(?::|%3A)/i;
@@ -7876,6 +7876,81 @@ function parseRfc9421Signature(signature) {
 	for (const [key, value] of Object.entries(dict)) if (value.value instanceof Uint8Array) result[key] = value.value;
 	return result;
 }
+/**
+* Parses the `Signature` header of draft-cavage HTTP Signatures into its
+* fields, e.g., `keyId` and `headers`.
+*/
+function parseDraftSignature(signature) {
+	return Object.fromEntries(signature.split(",").map((pair) => pair.match(/^\s*([A-Za-z]+)=(?:"([^"]*)"|(\d+))\s*$/)).filter((m) => m != null).map((m) => [m[1], m[2] ?? m[3]]));
+}
+/**
+* Lists the HTTP Signatures that a request claims to carry, without verifying
+* any of them.  Signatures whose key IDs are not URLs are left out.
+* @param request The request.
+* @returns The signatures; RFC 9421 ones if the request has
+*          a `Signature-Input` header, or a draft-cavage one otherwise.
+* @internal
+*/
+function listRequestSignatures(request) {
+	const signatureInput = request.headers.get("Signature-Input");
+	if (signatureInput != null) {
+		const signatures = [];
+		const inputs = parseRfc9421SignatureInput(signatureInput);
+		for (const [label, input] of Object.entries(inputs)) {
+			const keyId = parseKeyId(input.keyId);
+			if (keyId == null) continue;
+			signatures.push({
+				keyId,
+				label,
+				components: input.components
+			});
+		}
+		return signatures;
+	}
+	const signature = request.headers.get("Signature");
+	if (signature == null) return [];
+	const values = parseDraftSignature(signature);
+	const keyId = parseKeyId(values.keyId);
+	if (keyId == null) return [];
+	return [{
+		keyId,
+		label: null,
+		components: (values.headers ?? "").split(/\s+/g).filter((name) => name !== "").map((name) => ({
+			value: name,
+			params: {}
+		}))
+	}];
+}
+/**
+* Makes a copy of a request that carries only one of its RFC 9421 signatures,
+* so that verifying the copy verifies that signature and no other.
+* A draft-cavage signature is the only one in its request, so the request is
+* just copied.
+* @param request The request, whose body must not be consumed.
+* @param signature One of the signatures that {@link listRequestSignatures}
+*                  lists for the request.
+* @returns The copy of the request.
+* @internal
+*/
+function selectRequestSignature(request, signature) {
+	const copy = request.clone();
+	if (signature.label == null) return copy;
+	const { label } = signature;
+	const pick = (header) => {
+		if (header == null) return "";
+		let dict;
+		try {
+			dict = (0, structured_field_values.decodeDict)(header);
+		} catch {
+			return "";
+		}
+		return Object.hasOwn(dict, label) ? (0, structured_field_values.encodeDict)({ [label]: dict[label] }) : "";
+	};
+	const headers = new Headers(copy.headers);
+	headers.set("Signature-Input", pick(headers.get("Signature-Input")));
+	headers.set("Signature", pick(headers.get("Signature")));
+	return new Request(copy, { headers });
+}
 async function signRequestRfc9421(request, privateKey, keyId, span, currentTime, bodyBuffer, rfc9421Options) {
 	if (privateKey.algorithm.name !== "RSASSA-PKCS1-v1_5") throw new TypeError("Unsupported algorithm: " + privateKey.algorithm.name);
 	const url = new URL(request.url);
@@ -8107,7 +8182,7 @@ async function verifyRequestDraft(request, span, metricsContext, { documentLoade
 		logger.debug("Failed to verify; no Signature header found.", { headers: Object.fromEntries(request.headers.entries()) });
 		return noSignatureResult();
 	}
-	const sigValues = Object.fromEntries(sigHeader.split(",").map((pair) => pair.match(/^\s*([A-Za-z]+)=(?:"([^"]*)"|(\d+))\s*$/)).filter((m) => m != null).map((m) => [m[1], m[2] ?? m[3]]));
+	const sigValues = parseDraftSignature(sigHeader);
 	const parsedKeyId = parseKeyId(sigValues.keyId);
 	const dateHeader = request.headers.get("Date");
 	if (dateHeader == null) {
@@ -9008,6 +9083,12 @@ Object.defineProperty(exports, "isSamePublicKey", {
 		return isSamePublicKey;
 	}
 });
+Object.defineProperty(exports, "listRequestSignatures", {
+	enumerable: true,
+	get: function() {
+		return listRequestSignatures;
+	}
+});
 Object.defineProperty(exports, "name", {
 	enumerable: true,
 	get: function() {
@@ -9110,6 +9191,12 @@ Object.defineProperty(exports, "registerQueueDepthGauge", {
 		return registerQueueDepthGauge;
 	}
 });
+Object.defineProperty(exports, "selectRequestSignature", {
+	enumerable: true,
+	get: function() {
+		return selectRequestSignature;
+	}
+});
 Object.defineProperty(exports, "signJsonLd", {
 	enumerable: true,
 	get: function() {

package/dist/{http-DyT7DP1Y.js → http-tTlTeFa0.js}

@@ -14,7 +14,7 @@ import serialize from "json-canon";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2093+e9706a54";
+var version = "2.4.0-dev.2103+3be829c0";
 //#endregion
 //#region src/sig/portable-key-id.ts
 const COMPATIBLE_KEY_ID_PATH_PATTERN = /^\/\.well-known\/apgateway\/did(?::|%3A)/i;
@@ -4308,6 +4308,81 @@ function parseRfc9421Signature(signature) {
 	for (const [key, value] of Object.entries(dict)) if (value.value instanceof Uint8Array) result[key] = value.value;
 	return result;
 }
+/**
+* Parses the `Signature` header of draft-cavage HTTP Signatures into its
+* fields, e.g., `keyId` and `headers`.
+*/
+function parseDraftSignature(signature) {
+	return Object.fromEntries(signature.split(",").map((pair) => pair.match(/^\s*([A-Za-z]+)=(?:"([^"]*)"|(\d+))\s*$/)).filter((m) => m != null).map((m) => [m[1], m[2] ?? m[3]]));
+}
+/**
+* Lists the HTTP Signatures that a request claims to carry, without verifying
+* any of them.  Signatures whose key IDs are not URLs are left out.
+* @param request The request.
+* @returns The signatures; RFC 9421 ones if the request has
+*          a `Signature-Input` header, or a draft-cavage one otherwise.
+* @internal
+*/
+function listRequestSignatures(request) {
+	const signatureInput = request.headers.get("Signature-Input");
+	if (signatureInput != null) {
+		const signatures = [];
+		const inputs = parseRfc9421SignatureInput(signatureInput);
+		for (const [label, input] of Object.entries(inputs)) {
+			const keyId = parseKeyId(input.keyId);
+			if (keyId == null) continue;
+			signatures.push({
+				keyId,
+				label,
+				components: input.components
+			});
+		}
+		return signatures;
+	}
+	const signature = request.headers.get("Signature");
+	if (signature == null) return [];
+	const values = parseDraftSignature(signature);
+	const keyId = parseKeyId(values.keyId);
+	if (keyId == null) return [];
+	return [{
+		keyId,
+		label: null,
+		components: (values.headers ?? "").split(/\s+/g).filter((name) => name !== "").map((name) => ({
+			value: name,
+			params: {}
+		}))
+	}];
+}
+/**
+* Makes a copy of a request that carries only one of its RFC 9421 signatures,
+* so that verifying the copy verifies that signature and no other.
+* A draft-cavage signature is the only one in its request, so the request is
+* just copied.
+* @param request The request, whose body must not be consumed.
+* @param signature One of the signatures that {@link listRequestSignatures}
+*                  lists for the request.
+* @returns The copy of the request.
+* @internal
+*/
+function selectRequestSignature(request, signature) {
+	const copy = request.clone();
+	if (signature.label == null) return copy;
+	const { label } = signature;
+	const pick = (header) => {
+		if (header == null) return "";
+		let dict;
+		try {
+			dict = decodeDict(header);
+		} catch {
+			return "";
+		}
+		return Object.hasOwn(dict, label) ? encodeDict({ [label]: dict[label] }) : "";
+	};
+	const headers = new Headers(copy.headers);
+	headers.set("Signature-Input", pick(headers.get("Signature-Input")));
+	headers.set("Signature", pick(headers.get("Signature")));
+	return new Request(copy, { headers });
+}
 async function signRequestRfc9421(request, privateKey, keyId, span, currentTime, bodyBuffer, rfc9421Options) {
 	if (privateKey.algorithm.name !== "RSASSA-PKCS1-v1_5") throw new TypeError("Unsupported algorithm: " + privateKey.algorithm.name);
 	const url = new URL(request.url);
@@ -4539,7 +4614,7 @@ async function verifyRequestDraft(request, span, metricsContext, { documentLoade
 		logger.debug("Failed to verify; no Signature header found.", { headers: Object.fromEntries(request.headers.entries()) });
 		return noSignatureResult();
 	}
-	const sigValues = Object.fromEntries(sigHeader.split(",").map((pair) => pair.match(/^\s*([A-Za-z]+)=(?:"([^"]*)"|(\d+))\s*$/)).filter((m) => m != null).map((m) => [m[1], m[2] ?? m[3]]));
+	const sigValues = parseDraftSignature(sigHeader);
 	const parsedKeyId = parseKeyId(sigValues.keyId);
 	const dateHeader = request.headers.get("Date");
 	if (dateHeader == null) {
@@ -5212,4 +5287,4 @@ function timingSafeEqual(a, b) {
 	return result === 0;
 }
 //#endregion
-export { recordFanoutRecipients as $, verifyCompactJsonLd as A, validateCryptoKey as B, detachSignature as C, isClearlyMalformedContextReference as D, hasSignatureLike as E, fetchActorDocument as F, instrumentDocumentLoader as G, getDurationMs as H, fetchKey as I, recordCollectionDispatchDuration as J, isAbortError$1 as K, fetchKeyDetailed as L, verifySignature as M, wrapContextLoaderForJsonLd as N, isInvalidUrlTypeError as O, exportJwk as P, recordDocumentCache as Q, generateCryptoKeyPair as R, createSignature as S, hasSignature as T, getFederationMetrics as U, verifyKeyOwnership as V, getRemoteHost as W, recordCollectionRequest as X, recordCollectionPageItems as Y, recordCollectionTotalItems as Z, normalizeOutgoingActivityJsonLd as _, isSamePublicKey as _t, verifyRequestDetailed as a, preloadedOnlyDocumentLoader as at, attachSignature as b, createProof as c, parseAcceptSignature as ct, verifyMapLocalProof as d, getGatewayKeyBase as dt, recordInboxActivity as et, verifyObject as f, getPortableDid as ft, verifyProof as g, isPortableUri as gt, verifyPortableObjectProofWithRoot as h, isPortableId as ht, verifyRequest as i, registerQueueDepthGauge as it, verifyJsonLd as j, signJsonLd as k, hasProofLike as l, validateAcceptSignature as lt, verifyPortableObjectProofPolicy as m, isCompatibleKeyId as mt, parseRfc9421SignatureInput as n, recordOutboxEnqueue as nt, fetchPortableGatewayKey as o, formatAcceptSignature as ot, verifyPortableObjectProof as p, hasPortableActor as pt, recordCircuitBreakerStateChange as q, signRequest as r, recordWebFingerHandle as rt, InvalidPortableObjectIdError as s, fulfillAcceptSignature as st, doubleKnock as t, recordOutboxActivity as tt, signObject as u, getCanonicalPortableId as ut, InvalidContextReferenceError as v, name as vt, getNormalizationContextLoader as w, compactJsonLd as x, assertSafeJsonLd as y, version as yt, importJwk as z };
+export { recordCollectionTotalItems as $, isInvalidUrlTypeError as A, generateCryptoKeyPair as B, compactJsonLd as C, hasSignature as D, getNormalizationContextLoader as E, wrapContextLoaderForJsonLd as F, getFederationMetrics as G, validateCryptoKey as H, exportJwk as I, isAbortError$1 as J, getRemoteHost as K, fetchActorDocument as L, verifyCompactJsonLd as M, verifyJsonLd as N, hasSignatureLike as O, verifySignature as P, recordCollectionRequest as Q, fetchKey as R, attachSignature as S, detachSignature as T, verifyKeyOwnership as U, importJwk as V, getDurationMs as W, recordCollectionDispatchDuration as X, recordCircuitBreakerStateChange as Y, recordCollectionPageItems as Z, verifyPortableObjectProofWithRoot as _, isPortableId as _t, signRequest as a, recordWebFingerHandle as at, InvalidContextReferenceError as b, name as bt, fetchPortableGatewayKey as c, formatAcceptSignature as ct, hasProofLike as d, validateAcceptSignature as dt, recordDocumentCache as et, signObject as f, getCanonicalPortableId as ft, verifyPortableObjectProofPolicy as g, isCompatibleKeyId as gt, verifyPortableObjectProof as h, hasPortableActor as ht, selectRequestSignature as i, recordOutboxEnqueue as it, signJsonLd as j, isClearlyMalformedContextReference as k, InvalidPortableObjectIdError as l, fulfillAcceptSignature as lt, verifyObject as m, getPortableDid as mt, listRequestSignatures as n, recordInboxActivity as nt, verifyRequest as o, registerQueueDepthGauge as ot, verifyMapLocalProof as p, getGatewayKeyBase as pt, instrumentDocumentLoader as q, parseRfc9421SignatureInput as r, recordOutboxActivity as rt, verifyRequestDetailed as s, preloadedOnlyDocumentLoader as st, doubleKnock as t, recordFanoutRecipients as tt, createProof as u, parseAcceptSignature as ut, verifyProof as v, isPortableUri as vt, createSignature as w, assertSafeJsonLd as x, version as xt, normalizeOutgoingActivityJsonLd as y, isSamePublicKey as yt, fetchKeyDetailed as z };

package/dist/{key-Dwm4VswT.mjs → key-I8gLBkcf.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-8t8k_6Yv.mjs";
-import { _ as recordKeyLookup, n as getDurationMs, t as classifyFetchError } from "./metrics-B7YwKTFr.mjs";
+import { n as version, t as name } from "./deno-CkjiYK_Z.mjs";
+import { _ as recordKeyLookup, n as getDurationMs, t as classifyFetchError } from "./metrics-BCAa5-kE.mjs";
 import { a as isCompatibleKeyId, o as isPortableActorDocument, s as isPortableId } from "./portable-key-id-Bva5iT3W.mjs";
 import { getLogger } from "@logtape/logtape";
 import { CryptographicKey, Multikey, Object as Object$1, isActor } from "@fedify/vocab";

package/dist/{kv-cache-BSJAlP4C.cjs → kv-cache-Bl5EBFrU.cjs}

@@ -1,5 +1,5 @@
 const { URLPattern } = require("urlpattern-polyfill");
-const require_http = require("./http-DSaSAN7X.cjs");
+const require_http = require("./http-Cala2Grs.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _fedify_vocab_runtime = require("@fedify/vocab-runtime");
 let es_toolkit = require("es-toolkit");

package/dist/{kv-cache-DmroAz3M.js → kv-cache-CxQu_cd4.js}

@@ -1,6 +1,6 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { B as validateCryptoKey, Q as recordDocumentCache, t as doubleKnock } from "./http-DyT7DP1Y.js";
+import { H as validateCryptoKey, et as recordDocumentCache, t as doubleKnock } from "./http-tTlTeFa0.js";
 import { getLogger } from "@logtape/logtape";
 import { UrlError, createActivityPubRequest, getRemoteDocument, logRequest, preloadedContexts, validatePublicUrl } from "@fedify/vocab-runtime";
 import { curry } from "es-toolkit";

package/dist/{kv-cache-D0yYukqk.mjs → kv-cache-DJFoGRWQ.mjs}

@@ -1,7 +1,7 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { p as recordDocumentCache } from "./metrics-B7YwKTFr.mjs";
+import { p as recordDocumentCache } from "./metrics-BCAa5-kE.mjs";
 import { getLogger } from "@logtape/logtape";
 import { preloadedContexts } from "@fedify/vocab-runtime";
 //#region src/utils/kv-cache.ts

package/dist/{ld-BYZOoDzZ.mjs → ld-wiJbqJHa.mjs}

@@ -1,9 +1,9 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-8t8k_6Yv.mjs";
-import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-B7YwKTFr.mjs";
-import { r as fetchKey, s as validateCryptoKey } from "./key-Dwm4VswT.mjs";
+import { n as version, t as name } from "./deno-CkjiYK_Z.mjs";
+import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-BCAa5-kE.mjs";
+import { r as fetchKey, s as validateCryptoKey } from "./key-I8gLBkcf.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Activity, CryptographicKey, Object as Object$1, getTypeId } from "@fedify/vocab";
 import { SpanStatusCode, trace } from "@opentelemetry/api";

package/dist/{metrics-B7YwKTFr.mjs → metrics-BCAa5-kE.mjs}

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-8t8k_6Yv.mjs";
+import { n as version, t as name } from "./deno-CkjiYK_Z.mjs";
 import { metrics } from "@opentelemetry/api";
 import { FetchError } from "@fedify/vocab-runtime";
 //#region src/federation/metrics.ts

package/dist/{middleware-BNeqKSsL.mjs → middleware-6p2dYEVA.mjs}

@@ -1,5 +1,5 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as FederationImpl } from "./middleware-E_0IH72m.mjs";
+import { n as FederationImpl } from "./middleware-FnITXhtz.mjs";
 export { FederationImpl };