@fedify/fedify 2.4.0-dev.2155 → 2.4.0-dev.2159

package/dist/federation/portable-collection.test.mjs

@@ -7,11 +7,11 @@ import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject } from "../proof-vZ04IAjq.mjs";
+import { a as signObject } from "../proof-BdO3BbLh.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-DDa8pCUa.mjs";
-import { t as verifyPortableObject } from "../portable-collection-DAV7Ho3m.mjs";
-import { s as verifyServedPortableObjects } from "../compound-proof-nhrXTRQO.mjs";
+import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-Bdwd_Gg8.mjs";
+import { t as verifyPortableObject } from "../portable-collection-uWj3hfzv.mjs";
+import { s as verifyServedPortableObjects } from "../compound-proof-B02Os8h2.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Create, Note, Object as Object$1, OrderedCollection, Person, Tombstone, lookupObject, traverseCollection } from "@fedify/vocab";

package/dist/federation/portable-gateway-keys.test.mjs

@@ -2,15 +2,15 @@ import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { t as esm_default } from "../esm-BHXXx4Wx.mjs";
-import { r as createRequestContext, t as createInboxContext } from "../context-OrnjnuMq.mjs";
+import { r as createRequestContext, t as createInboxContext } from "../context-B2rlkkyJ.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
-import { p as signJsonLd } from "../ld-Djxsq6JR.mjs";
-import { l as signRequest } from "../http-CXnNbRe_.mjs";
+import { p as signJsonLd } from "../ld-ya2C1Xip.mjs";
+import { l as signRequest } from "../http-DV_yW4dv.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { f as handleInbox, n as FederationImpl, o as createFederation } from "../middleware-DDa8pCUa.mjs";
+import { f as handleInbox, n as FederationImpl, o as createFederation } from "../middleware-Bdwd_Gg8.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as KvKeyCache } from "../keycache-BInaECGj.mjs";
 import { Create, CryptographicKey, Person } from "@fedify/vocab";

package/dist/federation/portable-inbox.test.mjs

@@ -8,11 +8,11 @@ import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { p as signJsonLd } from "../ld-Djxsq6JR.mjs";
-import { a as signObject } from "../proof-vZ04IAjq.mjs";
-import { f as verifyRequestDetailed, l as signRequest } from "../http-CXnNbRe_.mjs";
+import { p as signJsonLd } from "../ld-ya2C1Xip.mjs";
+import { a as signObject } from "../proof-BdO3BbLh.mjs";
+import { f as verifyRequestDetailed, l as signRequest } from "../http-DV_yW4dv.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { _ as coversDelivery, o as createFederation, v as forwardPortableInboxActivity, y as resolvePortableInboxForwardingOptions } from "../middleware-DDa8pCUa.mjs";
+import { _ as coversDelivery, o as createFederation, v as forwardPortableInboxActivity, y as resolvePortableInboxForwardingOptions } from "../middleware-Bdwd_Gg8.mjs";
 import { Create, CryptographicKey, Follow, Note, Person, Tombstone } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { exportDidKey, formatIri, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/portable-parse-uri.test.d.mts

@@ -0,0 +1,2 @@
+import { Temporal } from "temporal-polyfill";
+import { URLPattern } from "urlpattern-polyfill";

package/dist/federation/portable-parse-uri.test.mjs

@@ -0,0 +1,348 @@
+import "temporal-polyfill";
+import "urlpattern-polyfill";
+globalThis.addEventListener = () => {};
+import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
+import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
+import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
+import "../std__assert-DvMDRPes.mjs";
+import { t as assert } from "../assert-D1Eafmd_.mjs";
+import { r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
+import { o as createFederation } from "../middleware-Bdwd_Gg8.mjs";
+import { Note, Object as Object$1, Person } from "@fedify/vocab";
+import { test } from "@fedify/fixture";
+import { exportDidKey, parseIri } from "@fedify/vocab-runtime";
+//#region src/federation/portable-parse-uri.test.ts
+const did = await exportDidKey(ed25519PublicKey.publicKey);
+const otherDid = await exportDidKey((await crypto.subtle.generateKey("Ed25519", true, ["sign", "verify"])).publicKey);
+const encodedDid = encodeURIComponent(did);
+const ORIGIN = "https://example.com";
+const NOTE_TYPE_ID = new URL("https://www.w3.org/ns/activitystreams#Note");
+const OBJECT_TYPE_ID = new URL("https://www.w3.org/ns/activitystreams#Object");
+function createTestFederation() {
+	const calls = [];
+	const federation = createFederation({ kv: new MemoryKvStore() });
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => {
+		calls.push(`actor:${identifier}`);
+		return new Person({});
+	}).mapActorAlias("/bot", "bot").mapPortableActorId((_ctx, identifier) => {
+		calls.push(`portableActorId:${identifier}`);
+		return null;
+	});
+	federation.setObjectDispatcher(Note, "/users/{identifier}/notes/{id}", () => {
+		calls.push("object");
+		return null;
+	});
+	federation.setInboxListeners("/users/{identifier}/inbox", "/inbox");
+	federation.setOutboxDispatcher("/users/{identifier}/outbox", () => null);
+	federation.setFollowingDispatcher("/users/{identifier}/following", () => null);
+	federation.setFollowersDispatcher("/users/{identifier}/followers", () => null);
+	federation.setLikedDispatcher("/users/{identifier}/liked", () => null);
+	federation.setFeaturedDispatcher("/users/{identifier}/featured", () => null);
+	federation.setFeaturedTagsDispatcher("/users/{identifier}/tags", () => null);
+	federation.setCollectionDispatcher("bookmarks", Object$1, "/users/{identifier}/bookmarks", () => null).mapPortableOwner((_ctx, values) => {
+		calls.push(`portableOwner:${values.identifier}`);
+		return values.identifier;
+	});
+	federation.setOrderedCollectionDispatcher("pins", Note, "/users/{identifier}/pins", () => null);
+	return {
+		federation,
+		ctx: federation.createContext(new URL(ORIGIN)),
+		calls
+	};
+}
+function portableId(path, authority = did) {
+	return parseIri(`ap+ef61://${authority}${path}`);
+}
+function compatibleId(path, origin = ORIGIN, authority = did) {
+	return new URL(`${origin}/.well-known/apgateway/${authority}${path}`);
+}
+function parsePortable(ctx, uri) {
+	return ctx.parseUri(uri, { portable: true });
+}
+test("Context.parseUri() does not recognize portable IDs by default", () => {
+	const { ctx } = createTestFederation();
+	for (const uri of [
+		portableId("/users/alice"),
+		parseIri(`ap://${did}/users/alice`),
+		compatibleId("/users/alice"),
+		compatibleId("/users/alice", "https://gateway.example")
+	]) {
+		assertEquals(ctx.parseUri(uri), null, uri.href);
+		assertEquals(ctx.parseUri(uri, {}), null, uri.href);
+		assertEquals(ctx.parseUri(uri, { portable: false }), null, uri.href);
+	}
+});
+test("Context.parseUri() keeps the results of ordinary URIs", () => {
+	const { ctx } = createTestFederation();
+	for (const path of [
+		"/users/alice",
+		"/bot",
+		"/users/alice/notes/123",
+		"/inbox",
+		"/users/alice/inbox",
+		"/users/alice/outbox",
+		"/users/alice/following",
+		"/users/alice/followers",
+		"/users/alice/liked",
+		"/users/alice/featured",
+		"/users/alice/tags",
+		"/users/alice/bookmarks",
+		"/users/alice/pins",
+		"/nowhere"
+	]) {
+		const uri = new URL(path, ORIGIN);
+		const result = ctx.parseUri(uri);
+		assertEquals(parsePortable(ctx, uri), result, path);
+		if (result != null) assertFalse("authority" in result, path);
+	}
+	assertEquals(parsePortable(ctx, new URL("https://other.example/users/alice")), null);
+	assertEquals(ctx.parseUri(null, { portable: true }), null);
+});
+test("Context.parseUri() recognizes portable IDs", () => {
+	const { ctx, calls } = createTestFederation();
+	const identifier = "alice";
+	const cases = [
+		["/users/alice", {
+			type: "actor",
+			identifier,
+			authority: did
+		}],
+		["/bot", {
+			type: "actor",
+			identifier: "bot",
+			authority: did
+		}],
+		["/users/alice/notes/123", {
+			type: "object",
+			class: Note,
+			typeId: NOTE_TYPE_ID,
+			values: {
+				identifier,
+				id: "123"
+			},
+			authority: did
+		}],
+		["/users/alice/inbox", {
+			type: "inbox",
+			identifier,
+			authority: did
+		}],
+		["/users/alice/outbox", {
+			type: "outbox",
+			identifier,
+			authority: did
+		}],
+		["/users/alice/following", {
+			type: "following",
+			identifier,
+			authority: did
+		}],
+		["/users/alice/followers", {
+			type: "followers",
+			identifier,
+			authority: did
+		}],
+		["/users/alice/liked", {
+			type: "liked",
+			identifier,
+			authority: did
+		}],
+		["/users/alice/featured", {
+			type: "featured",
+			identifier,
+			authority: did
+		}],
+		["/users/alice/tags", {
+			type: "featuredTags",
+			identifier,
+			authority: did
+		}],
+		["/users/alice/bookmarks", {
+			type: "collection",
+			name: "bookmarks",
+			class: Object$1,
+			typeId: OBJECT_TYPE_ID,
+			values: { identifier },
+			authority: did
+		}],
+		["/users/alice/pins", {
+			type: "orderedCollection",
+			name: "pins",
+			class: Note,
+			typeId: NOTE_TYPE_ID,
+			values: { identifier },
+			authority: did
+		}]
+	];
+	for (const [path, expected] of cases) for (const uri of [
+		portableId(path),
+		parseIri(`ap://${did}${path}`),
+		new URL(`ap+ef61://${encodedDid}${path}`),
+		new URL(`ap://${encodedDid}${path}`),
+		compatibleId(path),
+		compatibleId(path, "https://gateway.example"),
+		compatibleId(path, "http://localhost:8000")
+	]) assertEquals(parsePortable(ctx, uri), expected, uri.href);
+	assertEquals(calls, []);
+});
+test("Context.parseUri() round-trips the portable ID helpers", () => {
+	const { ctx } = createTestFederation();
+	const uris = [
+		[ctx.getPortableActorUri("alice", did), "actor"],
+		[ctx.getPortableObjectUri(Note, {
+			identifier: "alice",
+			id: "1"
+		}, did), "object"],
+		[ctx.getPortableInboxUri("alice", did), "inbox"],
+		[ctx.getPortableOutboxUri("alice", did), "outbox"],
+		[ctx.getPortableFollowingUri("alice", did), "following"],
+		[ctx.getPortableFollowersUri("alice", did), "followers"],
+		[ctx.getPortableLikedUri("alice", did), "liked"],
+		[ctx.getPortableFeaturedUri("alice", did), "featured"],
+		[ctx.getPortableFeaturedTagsUri("alice", did), "featuredTags"],
+		[ctx.getPortableCollectionUri("bookmarks", { identifier: "alice" }, did), "collection"],
+		[ctx.getPortableCollectionUri("pins", { identifier: "alice" }, did), "orderedCollection"]
+	];
+	for (const [uri, type] of uris) {
+		const result = parsePortable(ctx, uri);
+		assertEquals(result?.type, type, uri.href);
+		assertEquals(result?.authority, did, uri.href);
+	}
+});
+test("Context.parseUri() returns any DID for the caller to check", () => {
+	const { ctx } = createTestFederation();
+	assertEquals(parsePortable(ctx, portableId("/users/alice", otherDid)), {
+		type: "actor",
+		identifier: "alice",
+		authority: otherDid
+	});
+	assertEquals(parsePortable(ctx, compatibleId("/users/alice", "https://gateway.example", otherDid)), {
+		type: "actor",
+		identifier: "alice",
+		authority: otherDid
+	});
+	assertEquals(parsePortable(ctx, portableId("/users/alice", "did:web:example.com")), {
+		type: "actor",
+		identifier: "alice",
+		authority: "did:web:example.com"
+	});
+	assertEquals(parsePortable(ctx, parseIri(`ap://DID:KEY:${did.slice(8)}/users/alice`)), {
+		type: "actor",
+		identifier: "alice",
+		authority: did
+	});
+	assertEquals(parsePortable(ctx, new URL(`ap://DID%3Akey%3A${did.slice(8)}/users/alice`)), {
+		type: "actor",
+		identifier: "alice",
+		authority: did
+	});
+});
+test("Context.parseUri() ignores the query and fragment of portable IDs", () => {
+	const { ctx } = createTestFederation();
+	const expected = {
+		type: "actor",
+		identifier: "alice",
+		authority: did
+	};
+	const hint = "@gateway=https%3A%2F%2Fgateway.example";
+	for (const uri of [
+		parseIri(`ap://${did}/users/alice?${hint}`),
+		portableId("/users/alice#main-key"),
+		new URL(`${compatibleId("/users/alice").href}?${hint}`),
+		new URL(`${compatibleId("/users/alice").href}#main-key`)
+	]) assertEquals(parsePortable(ctx, uri), expected, uri.href);
+});
+test("Context.parseUri() routes portable paths like ordinary ones", () => {
+	const { ctx } = createTestFederation();
+	for (const path of [
+		"/users/alice/",
+		"/users/alice/notes/",
+		"/users"
+	]) {
+		const ordinary = ctx.parseUri(new URL(path, ORIGIN));
+		const expected = ordinary == null ? null : {
+			...ordinary,
+			authority: did
+		};
+		assertEquals(parsePortable(ctx, portableId(path)), expected, path);
+		assertEquals(parsePortable(ctx, compatibleId(path)), expected, path);
+	}
+});
+test("Context.parseUri() does not recognize unroutable portable IDs", () => {
+	const { ctx } = createTestFederation();
+	for (const uri of [
+		portableId("/nowhere"),
+		compatibleId("/nowhere"),
+		portableId("/inbox"),
+		compatibleId("/inbox"),
+		compatibleId("/inbox", "https://gateway.example"),
+		new URL(`${ORIGIN}/.well-known/apgateway`),
+		new URL(`${ORIGIN}/.well-known/apgateway/users/alice`),
+		new URL(`${ORIGIN}/.well-known/apgateway/hl:zQmdfTbBqBPQ7VNxZEYEj14VmRuZBkqFbiwReogJgS1zR1n`)
+	]) assertEquals(parsePortable(ctx, uri), null, uri.href);
+});
+test("Context.parseUri() does not recognize malformed portable IDs", () => {
+	const { ctx } = createTestFederation();
+	const base64UrlDid = `did:key:u${did.slice(8).slice(1)}`;
+	for (const uri of [
+		new URL(`ap+ef61://${encodeURIComponent(base64UrlDid)}/users/alice`),
+		compatibleId("/users/alice", ORIGIN, base64UrlDid),
+		new URL("ap+ef61://did%3Akey/users/alice"),
+		new URL("ap+ef61://example.com/users/alice"),
+		compatibleId("/users/alice", ORIGIN, "did:"),
+		compatibleId("/users/alice", "https://gateway.example", "did:key"),
+		new URL(`ap+ef61://${encodedDid}/users/%ZZ`),
+		new URL(`${compatibleId("/users/").href}%ZZ`),
+		new URL(`ap+ef61://user:pass@${encodedDid}/users/alice`),
+		new URL(`https://user:pass@gateway.example/.well-known/apgateway/${did}/users/alice`)
+	]) assertEquals(parsePortable(ctx, uri), null, uri.href);
+});
+test("Context.parseUri() prefers the application's routes", () => {
+	const federation = createFederation({ kv: new MemoryKvStore() });
+	federation.setActorDispatcher("/users/{identifier}", () => null);
+	federation.setObjectDispatcher(Note, "/.well-known/apgateway/{+did}/users/{identifier}/notes/{id}", () => null);
+	federation.setNodeInfoDispatcher(`/.well-known/apgateway/${did}/users/alice`, () => ({
+		software: {
+			name: "test",
+			version: "1.0.0"
+		},
+		protocols: ["activitypub"],
+		usage: {
+			users: {},
+			localPosts: 0,
+			localComments: 0
+		}
+	}));
+	const ctx = federation.createContext(new URL(ORIGIN));
+	assertEquals(parsePortable(ctx, compatibleId("/users/alice")), null);
+	assertEquals(parsePortable(ctx, compatibleId("/users/alice", "https://gateway.example")), {
+		type: "actor",
+		identifier: "alice",
+		authority: did
+	});
+	const note = parsePortable(ctx, compatibleId("/users/alice/notes/1"));
+	assert(note?.type === "object");
+	assertEquals(note.values, {
+		did,
+		identifier: "alice",
+		id: "1"
+	});
+	assertFalse("authority" in note);
+	assertEquals(parsePortable(ctx, portableId("/users/alice")), {
+		type: "actor",
+		identifier: "alice",
+		authority: did
+	});
+});
+test("RequestContext.parseUri() recognizes portable IDs", () => {
+	const { federation } = createTestFederation();
+	const ctx = federation.createContext(new Request(compatibleId("/users/alice")), void 0);
+	assertEquals(ctx.parseUri(portableId("/users/alice")), null);
+	assertEquals(ctx.parseUri(portableId("/users/alice", otherDid), { portable: true }), {
+		type: "actor",
+		identifier: "alice",
+		authority: otherDid
+	});
+});
+//#endregion
+export {};

package/dist/federation/portable.test.mjs

@@ -8,10 +8,10 @@ import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject, c as verifyPortableObjectProof } from "../proof-vZ04IAjq.mjs";
-import { l as signRequest } from "../http-CXnNbRe_.mjs";
+import { a as signObject, c as verifyPortableObjectProof } from "../proof-BdO3BbLh.mjs";
+import { l as signRequest } from "../http-DV_yW4dv.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-DDa8pCUa.mjs";
+import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-Bdwd_Gg8.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Collection, Create, Note, Object as Object$1, Person, Tombstone, lookupObject } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/send.test.mjs

@@ -10,13 +10,14 @@ import { t as assertNotEquals } from "../assert_not_equals-CpPK2t89.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { d as verifyRequest } from "../http-CXnNbRe_.mjs";
+import { d as verifyRequest } from "../http-DV_yW4dv.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { t as doesActorOwnKey } from "../owner-OdWSE8am.mjs";
-import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-ylV8KCLx.mjs";
+import { t as doesActorOwnKey } from "../owner-C6Nv5yyw.mjs";
+import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-BwANxryy.mjs";
 import { Activity, Application, Endpoints, Group, Person, Service } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { FetchError, UrlError } from "@fedify/vocab-runtime";
+import dns from "node:dns/promises";
 import { AggregationTemporality, InMemoryMetricExporter, MeterProvider, PeriodicExportingMetricReader } from "@opentelemetry/sdk-metrics";
 //#region src/federation/send.test.ts
 test("extractInboxes()", () => {
@@ -690,5 +691,85 @@ for (const signed of [false, true]) {
 		});
 	});
 }
+for (const signed of [false, true]) test({
+	name: `sendActivity() classifies DNS failures (signed: ${signed})`,
+	ignore: "Deno" in globalThis && (await Deno.permissions.query({ name: "net" })).state !== "granted",
+	async fn(t) {
+		const activity = {
+			type: "Create",
+			id: "https://example.com/activity"
+		};
+		const destination = "https://delivery.invalid/inbox";
+		const publicInbox = "https://8.8.8.8/inbox";
+		const keys = signed ? [{
+			privateKey: rsaPrivateKey2,
+			keyId: rsaPublicKey2.id
+		}] : [];
+		for (const result of [
+			"throws",
+			"empty",
+			"cname",
+			"private"
+		]) for (const redirected of [false, true]) await t.step(`${result}, redirected: ${redirected}`, async () => {
+			const [meterProvider, recorder] = createTestMeterProvider();
+			const originalLookup = dns.lookup;
+			const resolverError = /* @__PURE__ */ new Error("Resolver unavailable");
+			const lookups = [];
+			dns.lookup = ((hostname, options) => {
+				lookups.push(hostname);
+				assertEquals(hostname, "delivery.invalid");
+				assertEquals(options, { all: true });
+				if (result === "throws") return Promise.reject(resolverError);
+				return Promise.resolve(result === "empty" ? [] : [{
+					address: result === "private" ? "127.0.0.1" : "alias.invalid.",
+					family: 4
+				}]);
+			});
+			try {
+				esm_default.mockGlobal().catch(202);
+				if (redirected) esm_default.route(publicInbox, {
+					status: 307,
+					headers: { Location: destination }
+				});
+				const send = () => sendActivity({
+					activity,
+					activityType: "https://www.w3.org/ns/activitystreams#Create",
+					meterProvider,
+					keys,
+					inbox: new URL(redirected ? publicInbox : destination)
+				});
+				if (result === "private") assertEquals((await assertRejects(send, UrlError)).reason, "disallowed");
+				else {
+					const error = await assertRejects(send, FetchError);
+					assertEquals(error.url.href, destination);
+					assertInstanceOf(error.cause, UrlError);
+					assertEquals(error.cause.reason, "dns");
+					assertEquals(error.cause.cause, result === "throws" ? resolverError : void 0);
+				}
+				const expectedCount = result === "private" && !redirected ? 0 : 1;
+				const sent = recorder.getMeasurements("activitypub.delivery.sent");
+				const durations = recorder.getMeasurements("activitypub.delivery.duration");
+				assertEquals(sent.length, expectedCount);
+				assertEquals(durations.length, expectedCount);
+				if (expectedCount === 1) {
+					assertEquals(sent[0].value, 1);
+					assertEquals(sent[0].attributes, {
+						"activitypub.remote.host": redirected ? "8.8.8.8" : "delivery.invalid",
+						"activitypub.activity.type": "https://www.w3.org/ns/activitystreams#Create",
+						"activitypub.delivery.success": false
+					});
+					assertEquals(durations[0].attributes, sent[0].attributes);
+					assertGreaterOrEqual(durations[0].value, 0);
+				}
+				assertEquals(lookups, ["delivery.invalid"]);
+				assertEquals(esm_default.callHistory.calls(destination).length, 0);
+				assertEquals(esm_default.callHistory.calls().length, redirected ? 1 : 0);
+			} finally {
+				dns.lookup = originalLookup;
+				esm_default.hardReset();
+			}
+		});
+	}
+});
 //#endregion
 export {};

package/dist/federation/tasks/enqueue.test.mjs

@@ -2,9 +2,9 @@ import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
-import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-dbCShlCb.mjs";
-import "../../testing-CKaJhcA0.mjs";
-import { o as createFederation } from "../../middleware-DDa8pCUa.mjs";
+import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-IG3pHfvZ.mjs";
+import "../../testing-C1itIjqW.mjs";
+import { o as createFederation } from "../../middleware-Bdwd_Gg8.mjs";
 import { n as ParallelMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { delay } from "es-toolkit";

package/dist/federation/tasks/tasks.test.mjs

@@ -2,10 +2,10 @@ import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
-import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-dbCShlCb.mjs";
-import "../../testing-CKaJhcA0.mjs";
-import { o as createFederation } from "../../middleware-DDa8pCUa.mjs";
-import { r as createFederationBuilder } from "../../builder-CxHALSwA.mjs";
+import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-IG3pHfvZ.mjs";
+import "../../testing-C1itIjqW.mjs";
+import { o as createFederation } from "../../middleware-Bdwd_Gg8.mjs";
+import { r as createFederationBuilder } from "../../builder-D89oOfHC.mjs";
 import { t as TaskCodec } from "../../codec-C6rTrpIp.mjs";
 import { t as InProcessMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { W3CTraceContextPropagator } from "@opentelemetry/core";

package/dist/federation/temporal.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { t as hasMalformedKnownTemporalLiteral } from "../temporal-BTD4f_mZ.mjs";
+import { t as hasMalformedKnownTemporalLiteral } from "../temporal-CbPfRGZq.mjs";
 import { test } from "@fedify/fixture";
 //#region src/federation/temporal.test.ts
 test("hasMalformedKnownTemporalLiteral() detects expanded proof timestamps", async () => {

package/dist/federation/webfinger.test.mjs

@@ -1,12 +1,12 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { r as createRequestContext } from "../context-OrnjnuMq.mjs";
+import { r as createRequestContext } from "../context-B2rlkkyJ.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertNotEquals } from "../assert_not_equals-CpPK2t89.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { o as createFederation, s as handleWebFinger } from "../middleware-DDa8pCUa.mjs";
+import { o as createFederation, s as handleWebFinger } from "../middleware-Bdwd_Gg8.mjs";
 import { Image, Link, Person, Tombstone } from "@fedify/vocab";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { parseIri } from "@fedify/vocab-runtime";