@fedify/fedify 2.4.0-dev.2099 → 2.4.0-dev.2108

package/dist/sig/http.test.mjs

@@ -11,8 +11,8 @@ import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { t as exportJwk } from "../key-DYfmjnmp.mjs";
-import { a as listRequestSignatures, c as selectRequestSignature, d as verifyRequest, f as verifyRequestDetailed, i as formatRfc9421SignatureParameters, l as signRequest, n as doubleKnock, o as parseRfc9421Signature, r as formatRfc9421Signature, s as parseRfc9421SignatureInput, t as createRfc9421SignatureBase, u as timingSafeEqual } from "../http-DsgawTd8.mjs";
+import { t as exportJwk } from "../key-B8u1vdvF.mjs";
+import { a as listRequestSignatures, c as selectRequestSignature, d as verifyRequest, f as verifyRequestDetailed, i as formatRfc9421SignatureParameters, l as signRequest, n as doubleKnock, o as parseRfc9421Signature, r as formatRfc9421Signature, s as parseRfc9421SignatureInput, t as createRfc9421SignatureBase, u as timingSafeEqual } from "../http-CHEYA5fH.mjs";
 import { i as rsaPrivateKey2, l as rsaPublicKey5, o as rsaPublicKey1, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { FetchError, exportSpki } from "@fedify/vocab-runtime";

package/dist/sig/key.test.mjs

@@ -6,7 +6,7 @@ import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as generateCryptoKeyPair, i as fetchKeyDetailed, o as importJwk, r as fetchKey, s as validateCryptoKey, t as exportJwk } from "../key-DYfmjnmp.mjs";
+import { a as generateCryptoKeyPair, i as fetchKeyDetailed, o as importJwk, r as fetchKey, s as validateCryptoKey, t as exportJwk } from "../key-B8u1vdvF.mjs";
 import { c as rsaPublicKey3, i as rsaPrivateKey2, o as rsaPublicKey1, r as ed25519PublicKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
 import { CryptographicKey, Multikey } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/sig/ld.test.mjs

@@ -8,8 +8,8 @@ import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as generateCryptoKeyPair } from "../key-DYfmjnmp.mjs";
-import { a as compactJsonLd, f as isInvalidUrlTypeError, g as verifySignature, h as verifyJsonLd, i as attachSignature, n as UnsafeJsonLdError, o as createSignature, p as signJsonLd, s as detachSignature, u as hasSignatureLike } from "../ld-B00wWHzc.mjs";
+import { a as generateCryptoKeyPair } from "../key-B8u1vdvF.mjs";
+import { a as compactJsonLd, f as isInvalidUrlTypeError, g as verifySignature, h as verifyJsonLd, i as attachSignature, n as UnsafeJsonLdError, o as createSignature, p as signJsonLd, s as detachSignature, u as hasSignatureLike } from "../ld-BTMJHEGV.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
 import { CryptographicKey } from "@fedify/vocab";
 import { createTestMeterProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/sig/mod.cjs

@@ -1,8 +1,8 @@
 const { URLPattern } = require("urlpattern-polyfill");
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_http = require("../http-C8cZTE3Y.cjs");
-const require_owner = require("../owner-DSzH7wro.cjs");
-const require_sig = require("../sig-B689Nj7y.cjs");
+const require_http = require("../http-B7wEqv49.cjs");
+const require_owner = require("../owner-CGnHPl4k.cjs");
+const require_sig = require("../sig-C2CORtvg.cjs");
 exports.attachSignature = require_http.attachSignature;
 exports.createProof = require_http.createProof;
 exports.createSignature = require_http.createSignature;

package/dist/sig/mod.js

@@ -1,6 +1,6 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { B as generateCryptoKeyPair, I as exportJwk, N as verifyJsonLd, O as hasSignatureLike, P as verifySignature, R as fetchKey, S as attachSignature, T as detachSignature, V as importJwk, a as signRequest, ct as formatAcceptSignature, d as hasProofLike, dt as validateAcceptSignature, f as signObject, h as verifyPortableObjectProof, j as signJsonLd, lt as fulfillAcceptSignature, m as verifyObject, o as verifyRequest, s as verifyRequestDetailed, u as createProof, ut as parseAcceptSignature, v as verifyProof, w as createSignature, z as fetchKeyDetailed } from "../http-D-rbr_Sy.js";
-import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-U12fDpQW.js";
-import { t as verifyPortableObject } from "../sig-C85KqAcx.js";
+import { B as generateCryptoKeyPair, I as exportJwk, N as verifyJsonLd, O as hasSignatureLike, P as verifySignature, R as fetchKey, S as attachSignature, T as detachSignature, V as importJwk, a as signRequest, ct as formatAcceptSignature, d as hasProofLike, dt as validateAcceptSignature, f as signObject, h as verifyPortableObjectProof, j as signJsonLd, lt as fulfillAcceptSignature, m as verifyObject, o as verifyRequest, s as verifyRequestDetailed, u as createProof, ut as parseAcceptSignature, v as verifyProof, w as createSignature, z as fetchKeyDetailed } from "../http-CaUBCHYJ.js";
+import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-M8dOKEl6.js";
+import { t as verifyPortableObject } from "../sig-fycq7sOr.js";
 export { attachSignature, createProof, createSignature, detachSignature, doesActorOwnKey, exportJwk, fetchKey, fetchKeyDetailed, formatAcceptSignature, fulfillAcceptSignature, generateCryptoKeyPair, getKeyOwner, hasProofLike, hasSignatureLike, importJwk, parseAcceptSignature, signJsonLd, signObject, signRequest, validateAcceptSignature, verifyJsonLd, verifyObject, verifyPortableObject, verifyPortableObjectProof, verifyProof, verifyRequest, verifyRequestDetailed, verifySignature };

package/dist/sig/owner.test.mjs

@@ -6,7 +6,7 @@ import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { o as rsaPublicKey1, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-BJPDRDRq.mjs";
+import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-CY--JSqO.mjs";
 import { Create, CryptographicKey, lookupObject } from "@fedify/vocab";
 import { createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/sig/owner.test.ts

package/dist/sig/portable-collection.test.mjs

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "../deno-dxdvl2XZ.mjs";
-import { l as verifyPortableObjectProofWithRoot, s as verifyPortableObjectProof } from "../proof-ChjBwnep.mjs";
+import { n as version, t as name } from "../deno-CC4RKEEp.mjs";
+import { l as verifyPortableObjectProofWithRoot, s as verifyPortableObjectProof } from "../proof-DDw0i9b1.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Collection, CollectionPage, Note, Object as Object$1, OrderedCollection, Person, isActor, traverseCollection } from "@fedify/vocab";

package/dist/sig/portable-key.test.mjs

@@ -1,10 +1,10 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { r as fetchKey } from "../key-DYfmjnmp.mjs";
-import { d as verifyRequest, l as signRequest } from "../http-DsgawTd8.mjs";
+import { r as fetchKey } from "../key-B8u1vdvF.mjs";
+import { d as verifyRequest, l as signRequest } from "../http-CHEYA5fH.mjs";
 import { c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-BJPDRDRq.mjs";
+import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-CY--JSqO.mjs";
 import { Create, CryptographicKey, Multikey, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 import { FetchError, encodeMultibase, exportDidKey, exportSpki, parseIri, preloadedContexts } from "@fedify/vocab-runtime";

package/dist/sig/proof.test.mjs

@@ -10,10 +10,10 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "../outgoing-jsonld-4IJqPYos.mjs";
-import { i as signObject, n as createProof, o as verifyObject, r as hasProofLike, s as verifyPortableObjectProof, u as verifyProof } from "../proof-ChjBwnep.mjs";
-import { d as verifyRequest } from "../http-DsgawTd8.mjs";
+import { i as signObject, n as createProof, o as verifyObject, r as hasProofLike, s as verifyPortableObjectProof, u as verifyProof } from "../proof-DDw0i9b1.mjs";
+import { d as verifyRequest } from "../http-CHEYA5fH.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { t as getAuthenticatedDocumentLoader } from "../docloader-eBxQDsk9.mjs";
+import { t as getAuthenticatedDocumentLoader } from "../docloader-D3_m98fe.mjs";
 import { Create, DataIntegrityProof, Document, Multikey, Note, PUBLIC_COLLECTION, Place, Translation } from "@fedify/vocab";
 import { createTestMeterProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { decodeMultibase, encodeMultibase, exportDidKey, exportMultibaseKey, formatIri, importMultibaseKey, parseIri } from "@fedify/vocab-runtime";

package/dist/{sig-B689Nj7y.cjs → sig-C2CORtvg.cjs}

@@ -1,6 +1,6 @@
 const { URLPattern } = require("urlpattern-polyfill");
-const require_http = require("./http-C8cZTE3Y.cjs");
-require("./owner-DSzH7wro.cjs");
+const require_http = require("./http-B7wEqv49.cjs");
+require("./owner-CGnHPl4k.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _fedify_vocab = require("@fedify/vocab");
 let _opentelemetry_api = require("@opentelemetry/api");

package/dist/{sig-C85KqAcx.js → sig-fycq7sOr.js}

@@ -1,7 +1,7 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { _ as verifyPortableObjectProofWithRoot, bt as name, h as verifyPortableObjectProof, xt as version } from "./http-D-rbr_Sy.js";
-import "./owner-U12fDpQW.js";
+import { _ as verifyPortableObjectProofWithRoot, bt as name, h as verifyPortableObjectProof, xt as version } from "./http-CaUBCHYJ.js";
+import "./owner-M8dOKEl6.js";
 import { getLogger } from "@logtape/logtape";
 import { CollectionPage, Object as Object$1, isActor } from "@fedify/vocab";
 import { trace } from "@opentelemetry/api";

package/dist/{temporal-Dl9x-Qw4.mjs → temporal-NHiSpGcW.mjs}

@@ -1,7 +1,7 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { c as getNormalizationContextLoader } from "./ld-B00wWHzc.mjs";
+import { c as getNormalizationContextLoader } from "./ld-BTMJHEGV.mjs";
 import jsonld from "@fedify/vocab-runtime/jsonld";
 //#region src/federation/temporal.ts
 function isPlainObject(value) {

package/dist/testing/kv.test.mjs

@@ -6,7 +6,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as ManualClockKvStore } from "../kv-DBRWVx3Q.mjs";
 import { n as baseOptions, o as stringSchema, t as MockQueue } from "../tasks-dbCShlCb.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
-import { o as createFederation } from "../middleware-Br1_d-Ga.mjs";
+import { o as createFederation } from "../middleware-B-rZ7oE-.mjs";
 //#region src/testing/kv.test.ts
 test("ManualClockKvStore keeps an entry at its exact expiration instant", async () => {
 	const kv = new ManualClockKvStore();

package/dist/testing/mod.d.mts

@@ -387,14 +387,18 @@ type ActorAliasMapper<TContextData> = (context: RequestContext<TContextData>, re
   username: string;
 } | null>;
 /**
- * A callback that dispatches an object.
+ * A callback that dispatches an object or a {@link Tombstone}.
+ *
+ * Return a {@link Tombstone} if the object has been deleted; Fedify then
+ * responds with `410 Gone` and the serialized tombstone.  Return `null` if
+ * the object is not found.
  *
  * @template TContextData The context data to pass to the {@link Context}.
  * @template TObject The type of object to dispatch.
  * @template TParam The parameter names of the requested URL.
  * @since 0.7.0
  */
-type ObjectDispatcher<TContextData, TObject extends Object$1, TParam extends string> = (context: RequestContext<TContextData>, values: Record<TParam, string>) => TObject | null | Promise<TObject | null>;
+type ObjectDispatcher<TContextData, TObject extends Object$1, TParam extends string> = (context: RequestContext<TContextData>, values: Record<TParam, string>) => TObject | Tombstone | null | Promise<TObject | Tombstone | null>;
 /**
  * A callback that dispatches a collection.
  *
@@ -1525,7 +1529,9 @@ interface Federatable<TContextData> extends TaskRegistry<TContextData> {
    *             based on URI Template
    *             ([RFC 6570](https://tools.ietf.org/html/rfc6570)).  The path
    *             must have one or more variables.
-   * @param dispatcher An object dispatcher callback to register.
+   * @param dispatcher An object dispatcher callback to register.  It may
+   *                   return an object, a `Tombstone` if the object has been
+   *                   deleted, or `null` if the object is not found.
    */
   setObjectDispatcher<TObject extends Object$1, TParam extends string>(cls: ConstructorWithTypeId<TObject>, path: `${string}{${TParam}}${string}{${TParam}}${string}{${TParam}}${string}{${TParam}}${string}{${TParam}}${string}{${TParam}}${string}`, dispatcher: ObjectDispatcher<TContextData, TObject, TParam>): ObjectCallbackSetters<TContextData, TObject, TParam>;
   /**
@@ -1539,7 +1545,9 @@ interface Federatable<TContextData> extends TaskRegistry<TContextData> {
    *             based on URI Template
    *             ([RFC 6570](https://tools.ietf.org/html/rfc6570)).  The path
    *             must have one or more variables.
-   * @param dispatcher An object dispatcher callback to register.
+   * @param dispatcher An object dispatcher callback to register.  It may
+   *                   return an object, a `Tombstone` if the object has been
+   *                   deleted, or `null` if the object is not found.
    */
   setObjectDispatcher<TObject extends Object$1, TParam extends string>(cls: ConstructorWithTypeId<TObject>, path: `${string}{${TParam}}${string}{${TParam}}${string}{${TParam}}${string}{${TParam}}${string}{${TParam}}${string}`, dispatcher: ObjectDispatcher<TContextData, TObject, TParam>): ObjectCallbackSetters<TContextData, TObject, TParam>;
   /**
@@ -1553,7 +1561,9 @@ interface Federatable<TContextData> extends TaskRegistry<TContextData> {
    *             based on URI Template
    *             ([RFC 6570](https://tools.ietf.org/html/rfc6570)).  The path
    *             must have one or more variables.
-   * @param dispatcher An object dispatcher callback to register.
+   * @param dispatcher An object dispatcher callback to register.  It may
+   *                   return an object, a `Tombstone` if the object has been
+   *                   deleted, or `null` if the object is not found.
    */
   setObjectDispatcher<TObject extends Object$1, TParam extends string>(cls: ConstructorWithTypeId<TObject>, path: `${string}{${TParam}}${string}{${TParam}}${string}{${TParam}}${string}{${TParam}}${string}`, dispatcher: ObjectDispatcher<TContextData, TObject, TParam>): ObjectCallbackSetters<TContextData, TObject, TParam>;
   /**
@@ -1567,7 +1577,9 @@ interface Federatable<TContextData> extends TaskRegistry<TContextData> {
    *             based on URI Template
    *             ([RFC 6570](https://tools.ietf.org/html/rfc6570)).  The path
    *             must have one or more variables.
-   * @param dispatcher An object dispatcher callback to register.
+   * @param dispatcher An object dispatcher callback to register.  It may
+   *                   return an object, a `Tombstone` if the object has been
+   *                   deleted, or `null` if the object is not found.
    */
   setObjectDispatcher<TObject extends Object$1, TParam extends string>(cls: ConstructorWithTypeId<TObject>, path: `${string}${Rfc6570Expression<TParam>}${string}${Rfc6570Expression<TParam>}${string}${Rfc6570Expression<TParam>}${string}`, dispatcher: ObjectDispatcher<TContextData, TObject, TParam>): ObjectCallbackSetters<TContextData, TObject, TParam>;
   /**
@@ -1581,7 +1593,9 @@ interface Federatable<TContextData> extends TaskRegistry<TContextData> {
    *             based on URI Template
    *             ([RFC 6570](https://tools.ietf.org/html/rfc6570)).  The path
    *             must have one or more variables.
-   * @param dispatcher An object dispatcher callback to register.
+   * @param dispatcher An object dispatcher callback to register.  It may
+   *                   return an object, a `Tombstone` if the object has been
+   *                   deleted, or `null` if the object is not found.
    */
   setObjectDispatcher<TObject extends Object$1, TParam extends string>(cls: ConstructorWithTypeId<TObject>, path: `${string}${Rfc6570Expression<TParam>}${string}${Rfc6570Expression<TParam>}${string}`, dispatcher: ObjectDispatcher<TContextData, TObject, TParam>): ObjectCallbackSetters<TContextData, TObject, TParam>;
   /**
@@ -1595,7 +1609,9 @@ interface Federatable<TContextData> extends TaskRegistry<TContextData> {
    *             based on URI Template
    *             ([RFC 6570](https://tools.ietf.org/html/rfc6570)).  The path
    *             must have one or more variables.
-   * @param dispatcher An object dispatcher callback to register.
+   * @param dispatcher An object dispatcher callback to register.  It may
+   *                   return an object, a `Tombstone` if the object has been
+   *                   deleted, or `null` if the object is not found.
    */
   setObjectDispatcher<TObject extends Object$1, TParam extends string>(cls: ConstructorWithTypeId<TObject>, path: `${string}${Rfc6570Expression<TParam>}${string}`, dispatcher: ObjectDispatcher<TContextData, TObject, TParam>): ObjectCallbackSetters<TContextData, TObject, TParam>;
   /**
@@ -2893,6 +2909,37 @@ interface Context<TContextData> {
    * @throws {RouterError} If no actor dispatcher is available.
    */
   getActorUri(identifier: string): URL;
+  /**
+   * Builds the [FEP-ef61] portable ID of an actor with the given identifier
+   * under the given DID authority.
+   *
+   * The path is the same as the one {@link Context.getActorUri} builds, but
+   * the result is an `ap+ef61:` URI whose authority is the DID, e.g.,
+   * `ap+ef61://did:key:z6Mk.../users/alice`.  Such an actor can be served
+   * through the FEP-ef61 gateway endpoint,
+   * `/.well-known/apgateway/did:key:z6Mk.../users/alice`, by the same actor
+   * dispatcher.
+   *
+   * The returned `URL` keeps the DID authority percent-encoded, because
+   * the `URL` class cannot represent the canonical form.  Use `formatIri()`
+   * from `@fedify/vocab-runtime` to get the canonical string, e.g.,
+   * `ap+ef61://did:key:z6Mk.../users/alice`.
+   *
+   * [FEP-ef61]: https://w3id.org/fep/ef61
+   *
+   * @param identifier The actor's identifier.
+   * @param authority The DID that controls the actor, e.g.,
+   *                  `did:key:z6Mk...`.  It must be a bare DID, without
+   *                  a path, query, or fragment.  A `did:key` DID must be
+   *                  encoded in base58-btc, as FEP-ef61 requires; see
+   *                  `exportDidKey()` from `@fedify/vocab-runtime`.
+   * @returns The actor's portable ID.
+   * @throws {RouterError} If no actor dispatcher is available.
+   * @throws {TypeError} If the authority is not a DID, or it is a `did:key`
+   *                     DID that is not encoded in base58-btc.
+   * @since 2.4.0
+   */
+  getPortableActorUri(identifier: string, authority: string): URL;
   /**
    * Builds the URI of an object with the given class and values.
    * @param cls The class of the object.
@@ -2928,7 +2975,9 @@ interface Context<TContextData> {
    *                  a path, query, or fragment.
    * @returns The object's portable ID.
    * @throws {RouterError} If no object dispatcher is available for the class.
-   * @throws {TypeError} If values are invalid or the authority is not a DID.
+   * @throws {TypeError} If values are invalid, or the authority is not a DID
+   *                     or is a `did:key` DID that is not encoded in
+   *                     base58-btc.
    * @since 2.4.0
    */
   getPortableObjectUri<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, authority: string): URL;
@@ -2957,7 +3006,8 @@ interface Context<TContextData> {
    *                  a path, query, or fragment.
    * @returns The inbox's portable ID.
    * @throws {RouterError} If no inbox path is registered.
-   * @throws {TypeError} If the authority is not a DID.
+   * @throws {TypeError} If the authority is not a DID, or it is a `did:key`
+   *                     DID that is not encoded in base58-btc.
    * @since 2.4.0
    */
   getPortableInboxUri(identifier: string, authority: string): URL;
@@ -3323,6 +3373,23 @@ interface GetActorOptions {
    */
   readonly tombstone?: "suppress" | "passthrough";
 }
+/**
+ * Options for {@link RequestContext.getObject}.
+ * @since 2.4.0
+ */
+interface GetObjectOptions {
+  /**
+   * Controls how tombstoned objects are returned.
+   *
+   * By default, or if set to `"suppress"`, a {@link Tombstone} is returned as
+   * `null`, unless it is an instance of the requested class, e.g., when
+   * the requested class is `Object` or `Tombstone` itself.  In that case,
+   * the tombstone is returned as is, as it is an object of the requested
+   * class.  Set this to `"passthrough"` to always receive a {@link Tombstone}
+   * result instead of `null`.
+   */
+  readonly tombstone?: "suppress" | "passthrough";
+}
 /**
  * A context for a request.
  */
@@ -3338,12 +3405,13 @@ interface RequestContext<TContextData> extends Context<TContextData> {
   /**
    * Information about the [FEP-ef61] portable object requested through
    * the gateway endpoint, e.g.,
-   * `GET /.well-known/apgateway/did:key:z6Mk.../notes/123`.  It is
-   * `undefined` for ordinary requests.
+   * `GET /.well-known/apgateway/did:key:z6Mk.../notes/123`, which is served
+   * by an object dispatcher or the actor dispatcher.  It is `undefined` for
+   * ordinary requests.
    *
    * The authority comes from the request path, so it is not evidence that
-   * this server hosts objects for the DID.  An object dispatcher has to check
-   * that by itself.
+   * this server hosts objects for the DID.  An object dispatcher or the actor
+   * dispatcher has to check that by itself.
    *
    * It describes the incoming request, so it stays the same in contexts
    * derived from this one, e.g., by {@link RequestContext.getObject}.
@@ -3352,6 +3420,31 @@ interface RequestContext<TContextData> extends Context<TContextData> {
    * @since 2.4.0
    */
   readonly portableRequest?: PortableRequest;
+  /**
+   * Builds the [FEP-ef61] portable ID of an actor with the given identifier.
+   * It works the same as {@link Context.getPortableActorUri}, except that
+   * the authority can be omitted while handling a portable gateway request.
+   * In that case, the DID in {@link RequestContext.portableRequest} is used.
+   *
+   * The DID in the request comes from the request path, so the default is
+   * only a convenience for building IDs; it is not evidence that this server
+   * hosts the actor for the DID.
+   *
+   * [FEP-ef61]: https://w3id.org/fep/ef61
+   *
+   * @param identifier The actor's identifier.
+   * @param authority The DID that controls the actor, e.g.,
+   *                  `did:key:z6Mk...`.  It must be a bare DID, without
+   *                  a path, query, or fragment.  Defaults to the DID of
+   *                  the requested portable object.
+   * @returns The actor's portable ID.
+   * @throws {RouterError} If no actor dispatcher is available.
+   * @throws {TypeError} If the authority is not a DID, it is a `did:key` DID
+   *                     that is not encoded in base58-btc, or the authority
+   *                     is omitted outside a portable gateway request.
+   * @since 2.4.0
+   */
+  getPortableActorUri(identifier: string, authority?: string): URL;
   /**
    * Builds the [FEP-ef61] portable ID of an object with the given class and
    * values.  It works the same as {@link Context.getPortableObjectUri}, except
@@ -3369,9 +3462,10 @@ interface RequestContext<TContextData> extends Context<TContextData> {
    *                  the requested portable object.
    * @returns The object's portable ID.
    * @throws {RouterError} If no object dispatcher is available for the class.
-   * @throws {TypeError} If values are invalid, the authority is not a DID, or
-   *                     the authority is omitted outside a portable gateway
-   *                     request.
+   * @throws {TypeError} If values are invalid, the authority is not a DID,
+   *                     it is a `did:key` DID that is not encoded in
+   *                     base58-btc, or the authority is omitted outside
+   *                     a portable gateway request.
    * @since 2.4.0
    */
   getPortableObjectUri<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, authority?: string): URL;
@@ -3393,8 +3487,9 @@ interface RequestContext<TContextData> extends Context<TContextData> {
    *                  the requested portable object, if any.
    * @returns The inbox's portable ID.
    * @throws {RouterError} If no inbox path is registered.
-   * @throws {TypeError} If the authority is not a DID, or the authority is
-   *                     omitted outside a portable gateway request.
+   * @throws {TypeError} If the authority is not a DID, it is a `did:key` DID
+   *                     that is not encoded in base58-btc, or the authority
+   *                     is omitted outside a portable gateway request.
    * @since 2.4.0
    */
   getPortableInboxUri(identifier: string, authority?: string): URL;
@@ -3460,12 +3555,61 @@ interface RequestContext<TContextData> extends Context<TContextData> {
    * @param cls The class to instantiate.
    * @param values The values to pass to the object dispatcher.
    * @returns The object of the given class with the given values, or `null`
-   *          if the object is not found.
+   *          if the object is not found.  Tombstoned objects are suppressed
+   *          unless the tombstone is an instance of `cls`.
    * @throws {Error} If no object dispatcher is available for the class.
    * @throws {TypeError} If values are invalid.
    * @since 0.7.0
    */
   getObject<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>): Promise<TObject | null>;
+  /**
+   * Gets an object of the given class, or a {@link Tombstone}, with the given
+   * values.
+   * @param cls The class to instantiate.
+   * @param values The values to pass to the object dispatcher.
+   * @param options Options for getting the object.  Set `options.tombstone`
+   *                to `"passthrough"` to receive tombstoned objects instead
+   *                of `null`.
+   * @returns The object of the given class with the given values,
+   *          a tombstone, or `null` if the object is not found.
+   * @throws {Error} If no object dispatcher is available for the class.
+   * @throws {TypeError} If values are invalid.
+   * @since 2.4.0
+   */
+  getObject<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, options: GetObjectOptions & {
+    readonly tombstone: "passthrough";
+  }): Promise<TObject | Tombstone | null>;
+  /**
+   * Gets an object of the given class with the given values.
+   * @param cls The class to instantiate.
+   * @param values The values to pass to the object dispatcher.
+   * @param options Options for getting the object.
+   * @returns The object of the given class with the given values, or `null`
+   *          if the object is not found.  Tombstoned objects are suppressed
+   *          unless `options.tombstone` is `"passthrough"` or the tombstone
+   *          is an instance of `cls`.
+   * @throws {Error} If no object dispatcher is available for the class.
+   * @throws {TypeError} If values are invalid.
+   * @since 2.4.0
+   */
+  getObject<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, options: GetObjectOptions & {
+    readonly tombstone?: "suppress" | undefined;
+  }): Promise<TObject | null>;
+  /**
+   * Gets an object of the given class, or a {@link Tombstone}, with the given
+   * values.
+   * @param cls The class to instantiate.
+   * @param values The values to pass to the object dispatcher.
+   * @param options Options for getting the object.
+   * @returns The object of the given class with the given values,
+   *          a tombstone, or `null` if the object is not found.  This broad
+   *          overload is used when the caller passes an options value whose
+   *          `tombstone` mode is not known statically.
+   * @throws {Error} If no object dispatcher is available for the class.
+   * @throws {TypeError} If values are invalid.
+   * @since 2.4.0
+   */
+  getObject<TObject extends Object$1>(cls: ConstructorWithTypeId<TObject>, values: Record<string, string>, options: GetObjectOptions): Promise<TObject | Tombstone | null>;
   /**
    * Gets the public key of the sender, if any exists and it is verified.
    * Otherwise, `null` is returned.

package/dist/testing/mod.mjs

@@ -2,8 +2,8 @@ import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { r as testDefinitions } from "../dist-BQvArojP.mjs";
-import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-DlZhxdFT.mjs";
+import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-CoNRxGYp.mjs";
 import { t as ManualClockKvStore } from "../kv-DBRWVx3Q.mjs";
 import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, r as envelopeSchema, t as MockQueue } from "../tasks-dbCShlCb.mjs";
-import "../testing-CO_cEvQc.mjs";
+import "../testing-BWq1dCzx.mjs";
 export { ManualClockKvStore, MockQueue, baseOptions, createInboxContext, createOutboxContext, createRequestContext, envelopeSchema, makeSchema, numberSchema, stringSchema, testDefinitions };

package/dist/{testing-CO_cEvQc.mjs → testing-BWq1dCzx.mjs}

@@ -2,7 +2,7 @@ import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import "./dist-BQvArojP.mjs";
-import "./context-DlZhxdFT.mjs";
+import "./context-CoNRxGYp.mjs";
 import "./kv-DBRWVx3Q.mjs";
 import "./tasks-dbCShlCb.mjs";
 export {};

package/dist/utils/docloader.test.mjs

@@ -5,9 +5,9 @@ import { t as esm_default } from "../esm-BHXXx4Wx.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
-import { d as verifyRequest } from "../http-DsgawTd8.mjs";
+import { d as verifyRequest } from "../http-CHEYA5fH.mjs";
 import { i as rsaPrivateKey2 } from "../keys-DIJNHW-Y.mjs";
-import { t as getAuthenticatedDocumentLoader } from "../docloader-eBxQDsk9.mjs";
+import { t as getAuthenticatedDocumentLoader } from "../docloader-D3_m98fe.mjs";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { FetchError, UrlError } from "@fedify/vocab-runtime";
 //#region src/utils/docloader.test.ts

package/dist/utils/kv-cache.test.mjs

@@ -1,7 +1,7 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as kvCache, t as MockKvStore } from "../kv-cache-EvOgrFsS.mjs";
+import { n as kvCache, t as MockKvStore } from "../kv-cache-CTdvf_Iq.mjs";
 import { deepStrictEqual, throws } from "node:assert";
 import { createTestMeterProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { preloadedContexts } from "@fedify/vocab-runtime";

package/dist/utils/mod.cjs

@@ -1,5 +1,5 @@
 const { URLPattern } = require("urlpattern-polyfill");
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_kv_cache = require("../kv-cache-Dvd-Q-E2.cjs");
+const require_kv_cache = require("../kv-cache-0pYMPrkL.cjs");
 exports.getAuthenticatedDocumentLoader = require_kv_cache.getAuthenticatedDocumentLoader;
 exports.kvCache = require_kv_cache.kvCache;

package/dist/utils/mod.js

@@ -1,4 +1,4 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { n as getAuthenticatedDocumentLoader, t as kvCache } from "../kv-cache-DIxwMeNi.js";
+import { n as getAuthenticatedDocumentLoader, t as kvCache } from "../kv-cache-ibncHN1D.js";
 export { getAuthenticatedDocumentLoader, kvCache };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fedify/fedify",
-  "version": "2.4.0-dev.2099+cd074fe2",
+  "version": "2.4.0-dev.2108+159ea471",
   "description": "An ActivityPub server framework",
   "keywords": [
     "ActivityPub",
@@ -151,10 +151,10 @@
     "structured-field-values": "^2.0.4",
     "temporal-polyfill": "^1.0.1",
     "urlpattern-polyfill": "^10.1.0",
-    "@fedify/uri-template": "2.4.0-dev.2099+cd074fe2",
-    "@fedify/vocab": "2.4.0-dev.2099+cd074fe2",
-    "@fedify/vocab-runtime": "2.4.0-dev.2099+cd074fe2",
-    "@fedify/webfinger": "2.4.0-dev.2099+cd074fe2"
+    "@fedify/uri-template": "2.4.0-dev.2108+159ea471",
+    "@fedify/vocab-runtime": "2.4.0-dev.2108+159ea471",
+    "@fedify/vocab": "2.4.0-dev.2108+159ea471",
+    "@fedify/webfinger": "2.4.0-dev.2108+159ea471"
   },
   "devDependencies": {
     "@std/assert": "npm:@jsr/std__assert@^0.226.0",
@@ -167,7 +167,7 @@
     "typescript": "^6.0.0",
     "wrangler": "^4.17.0",
     "@fedify/fixture": "2.0.0",
-    "@fedify/vocab-tools": "^2.4.0-dev.2099+cd074fe2"
+    "@fedify/vocab-tools": "^2.4.0-dev.2108+159ea471"
   },
   "scripts": {
     "build:self": "tsdown",