@fedify/fedify 2.4.0-dev.2164 → 2.4.0-dev.2190

package/dist/{builder-BqRmnx7p.mjs → builder-CFF0YNTp.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-CizGaYeG.mjs";
-import { c as isPortableId, r as getPortableDid, t as getCanonicalPortableId } from "./portable-key-id-Bg259c4Z.mjs";
+import { n as version, t as name } from "./deno-EopndaNb.mjs";
+import { i as getPortableDid, l as isPortableId, n as getCanonicalPortableId } from "./portable-key-id-Ca30-hOa.mjs";
 import { t as ActivityListenerSet } from "./activity-listener-C-BSbKI7.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Router, RouterError, assertPath } from "@fedify/uri-template";
@@ -89,7 +89,7 @@ var FederationBuilderImpl = class {
 	* specified.
 	*/
 	async build(options) {
-		const { FederationImpl } = await import("./middleware-BmqEWsWP.mjs");
+		const { FederationImpl } = await import("./middleware-Ck9yghxs.mjs");
 		const f = new FederationImpl(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();

package/dist/{circuit-breaker-C5NqoLBJ.mjs → circuit-breaker-XJ53md4S.mjs}

@@ -47,7 +47,7 @@ var CircuitBreaker = class {
 		};
 		let lastConflictingState;
 		for (let attempt = 0; attempt < 10; attempt++) {
-			const oldState = await this.#get(remoteHost);
+			const { state: oldState, raw: oldValue } = await this.#get(remoteHost);
 			if (oldState == null || oldState.state === "closed") return {
 				type: "send",
 				probe: false
@@ -73,7 +73,7 @@ var CircuitBreaker = class {
 					state: "half-open",
 					halfOpened: now.toString()
 				};
-				if (await this.#replace(remoteHost, oldState, newState)) return {
+				if (await this.#replace(remoteHost, oldValue, newState)) return {
 					type: "send",
 					probe: true
 				};
@@ -95,7 +95,7 @@ var CircuitBreaker = class {
 				state: "half-open",
 				halfOpened: now.toString()
 			};
-			if (await this.#replace(remoteHost, oldState, newState)) {
+			if (await this.#replace(remoteHost, oldValue, newState)) {
 				await this.#notifyStateChange(remoteHost, "open", "half-open");
 				return {
 					type: "send",
@@ -122,9 +122,9 @@ var CircuitBreaker = class {
 	async recordSuccess(remoteHost) {
 		this.#sweepLegacyStates();
 		for (let attempt = 0; attempt < 10; attempt++) {
-			const oldState = await this.#get(remoteHost);
+			const { state: oldState, raw: oldValue } = await this.#get(remoteHost);
 			if (oldState == null) return void 0;
-			if (await this.#replace(remoteHost, oldState, void 0)) {
+			if (await this.#replace(remoteHost, oldValue, void 0)) {
 				if (oldState.state !== "closed") {
 					await this.#notifyStateChange(remoteHost, oldState.state, "closed");
 					return {
@@ -144,7 +144,7 @@ var CircuitBreaker = class {
 		this.#sweepLegacyStates();
 		const now = this.#now();
 		for (let attempt = 0; attempt < 10; attempt++) {
-			const oldState = await this.#get(remoteHost);
+			const { state: oldState, raw: oldValue } = await this.#get(remoteHost);
 			if (oldState?.state === "open") return void 0;
 			const oldFailures = oldState?.failures.map(Temporal.Instant.from) ?? [];
 			const failures = this.#options.pruneFailures([...oldFailures, now], now);
@@ -161,7 +161,7 @@ var CircuitBreaker = class {
 				state: "closed",
 				failures: failures.map((t) => t.toString())
 			};
-			if (await this.#replace(remoteHost, oldState, newState)) {
+			if (await this.#replace(remoteHost, oldValue, newState)) {
 				if (transition != null) {
 					await this.#notifyStateChange(remoteHost, transition[0], transition[1]);
 					return {
@@ -190,7 +190,7 @@ var CircuitBreaker = class {
 	}
 	async getState(remoteHost) {
 		this.#sweepLegacyStates();
-		return stripStoredCircuitBreakerState(await this.#get(remoteHost));
+		return stripStoredCircuitBreakerState((await this.#get(remoteHost)).state);
 	}
 	/**
 	* The currently running background legacy sweep, if any.
@@ -310,9 +310,14 @@ var CircuitBreaker = class {
 		return Temporal.Instant.compare(expiresAt, retryAt) < 0 ? expiresAt : retryAt;
 	}
 	async #get(remoteHost) {
-		return parseStoredCircuitBreakerKvState(await this.#kv.get(this.#key(remoteHost)));
+		const value = await this.#kv.get(this.#key(remoteHost));
+		const state = parseStoredCircuitBreakerKvState(value);
+		return {
+			state,
+			raw: state == null ? void 0 : value
+		};
 	}
-	async #replace(remoteHost, oldState, newState) {
+	async #replace(remoteHost, oldValue, newState) {
 		const key = this.#key(remoteHost);
 		const storedState = newState == null ? void 0 : markCircuitBreakerState(newState);
 		if (this.#kv.cas == null) {
@@ -320,7 +325,7 @@ var CircuitBreaker = class {
 			else await this.#kv.set(key, storedState, this.#setOptions());
 			return true;
 		}
-		return await this.#kv.cas(key, oldState, storedState, storedState == null ? void 0 : this.#setOptions());
+		return await this.#kv.cas(key, oldValue, storedState, storedState == null ? void 0 : this.#setOptions());
 	}
 	#setOptions() {
 		return this.#options.stateTtl == null ? void 0 : { ttl: this.#options.stateTtl };

package/dist/compat/mod.d.cts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { $t as ActivityTransformer, n as Context } from "../context-L0Fnib9j.cjs";
+import { $t as ActivityTransformer, n as Context } from "../context-CDcAgm4l.cjs";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/mod.d.ts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { $t as ActivityTransformer, n as Context } from "../context-BykNUf04.js";
+import { $t as ActivityTransformer, n as Context } from "../context-9T--NSo4.js";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/transformers.test.mjs

@@ -5,7 +5,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { E as autoIdAssigner, T as actorDehydrator, n as FederationImpl } from "../middleware-B99JjvFn.mjs";
+import { E as autoIdAssigner, T as actorDehydrator, n as FederationImpl } from "../middleware-Bdu2-OPD.mjs";
 import { Follow, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 //#region src/compat/transformers.test.ts

package/dist/{compound-proof-CxDBdtNz.mjs → compound-proof-F2jjkrt0.mjs}

@@ -1,10 +1,10 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { c as isPortableId, i as getRawCanonicalPortableId, t as getCanonicalPortableId } from "./portable-key-id-Bg259c4Z.mjs";
+import { a as getRawCanonicalPortableId, l as isPortableId, n as getCanonicalPortableId } from "./portable-key-id-Ca30-hOa.mjs";
 import { n as preloadedOnlyDocumentLoader } from "./public-audience--klBIOk1.mjs";
-import { c as getNormalizationContextLoader } from "./ld-CyliEU48.mjs";
-import { l as verifyPortableObjectProofPolicy, n as classifyFep2277CoreType, o as verifyMapLocalProof } from "./proof-CRTPWbVh.mjs";
+import { c as getNormalizationContextLoader } from "./ld-oQj6j_hP.mjs";
+import { l as verifyPortableObjectProofPolicy, n as classifyFep2277CoreType, o as verifyMapLocalProof } from "./proof-C9115DX_.mjs";
 import { parseIri, preloadedContexts } from "@fedify/vocab-runtime";
 import jsonld from "@fedify/vocab-runtime/jsonld";
 //#region src/sig/compound-proof.ts

package/dist/{context-BykNUf04.d.ts → context-9T--NSo4.d.ts}

@@ -1,6 +1,6 @@
 /// <reference lib="esnext.temporal" />
 import { o as JsonValue, s as NodeInfo, t as GetNodeInfoOptions } from "./client-D-XP_Ccb.js";
-import { o as VerifyRequestFailureReason, t as HttpMessageSignaturesSpec } from "./http-Cok5-vIC.js";
+import { o as VerifyRequestFailureReason, t as HttpMessageSignaturesSpec } from "./http-DGx0KOws.js";
 import { n as GetKeyOwnerOptions } from "./owner-BSzr5-I8.js";
 import { n as KvStore, t as KvKey } from "./kv-BhNbN8Ed.js";
 import { Router } from "@fedify/uri-template";
@@ -1485,6 +1485,8 @@ interface FederationOrigin {
 * @returns A new {@link Federation} instance.
 * @throws {TypeError} If benchmark mode and `meterProvider` are both
 * specified.
+* @throws {RangeError} If {@link FederationOptions.maxHttpSignatures} is not
+* a positive integer or `Infinity`.
 * @since 0.10.0
 */
 declare function createFederation<TContextData>(options: FederationOptions<TContextData>): Federation<TContextData>;
@@ -2309,6 +2311,35 @@ interface FederationOptions<TContextData> {
   */
   userAgent?: GetUserAgentOptions | string;
   /**
+  * The timeout for each call of the built-in document loader, context
+  * loader, and authenticated document loader, e.g., when Fedify fetches
+  * a key to verify a signature.  The timeout is shared by all the steps of
+  * a call, including every redirect it follows, retries, and reading the
+  * response body.  It does not cover the time spent reading from or
+  * writing to the cache.
+  *
+  * A timed-out call throws a `FetchError` without a response, whose
+  * `cause` is a `DOMException` named `"TimeoutError"`, so that, e.g.,
+  * a key fetch that times out is reported as a `keyFetchError` and cached
+  * like other failures to fetch a key.
+  *
+  * It does not affect loaders made by
+  * {@link FederationOptions.documentLoaderFactory},
+  * {@link FederationOptions.contextLoaderFactory}, or
+  * {@link FederationOptions.authenticatedDocumentLoaderFactory}.
+  * Note that if only {@link FederationOptions.documentLoaderFactory} is
+  * set, it also makes context loaders.
+  *
+  * Set it to `null` to turn off the timeout.
+  *
+  * 10 seconds by default.
+  * @throws {RangeError} If the duration is not positive, is longer than
+  *                      about 24.8 days, or is given in calendar units
+  *                      such as months.
+  * @since 2.4.0
+  */
+  documentLoaderTimeout?: Temporal.Duration | Temporal.DurationLike | null;
+  /**
   * A callback that handles errors during outbox processing.  Note that this
   * callback can be called multiple times for the same activity, because
   * the delivery is retried according to the backoff schedule until it
@@ -2337,6 +2368,29 @@ interface FederationOptions<TContextData> {
   */
   signatureTimeWindow?: Temporal.Duration | Temporal.DurationLike | false;
   /**
+  * The maximum number of [RFC 9421] signatures of an incoming request to
+  * verify, e.g., in the inbox and in
+  * {@link RequestContext.getSignedKey}.  A request can carry several
+  * signatures, each of which may make Fedify fetch the key that it names,
+  * so only the first ones in the order of the `Signature-Input` header are
+  * verified, and the rest are ignored as if they were absent.  Every
+  * signature among the first ones counts, even if it fails before its key
+  * is fetched.  See also the `maxSignatures` option of `verifyRequest()`.
+  *
+  * It has to be a positive integer, or `Infinity` to verify every
+  * signature, which lets a single request make Fedify fetch any number of
+  * keys.  Draft-cavage HTTP Signatures carry a single signature, so this
+  * option does not affect them.
+  *
+  * Three by default.
+  *
+  * [RFC 9421]: https://www.rfc-editor.org/rfc/rfc9421
+  * @throws {RangeError} Thrown when the federation is created if the value
+  *         is not a positive integer or `Infinity`.
+  * @since 2.4.0
+  */
+  maxHttpSignatures?: number;
+  /**
   * Whether to skip HTTP Signatures verification for incoming activities.
   * This is useful for testing purposes, but should not be used in production.
   *

package/dist/{context-L0Fnib9j.d.cts → context-CDcAgm4l.d.cts}

@@ -1,6 +1,6 @@
 /// <reference lib="esnext.temporal" />
 import { o as JsonValue, s as NodeInfo, t as GetNodeInfoOptions } from "./client-D-XP_Ccb.cjs";
-import { o as VerifyRequestFailureReason, t as HttpMessageSignaturesSpec } from "./http-DC1cqAQ2.cjs";
+import { o as VerifyRequestFailureReason, t as HttpMessageSignaturesSpec } from "./http-BrwKINQn.cjs";
 import { n as GetKeyOwnerOptions } from "./owner-BF0L9cMt.cjs";
 import { n as KvStore, t as KvKey } from "./kv-BhNbN8Ed.cjs";
 import { Activity, Actor, Collection, CryptographicKey, Hashtag, Link, LookupObjectOptions, Multikey, Object as Object$1, Recipient, Tombstone, TraverseCollectionOptions } from "@fedify/vocab";
@@ -1483,6 +1483,8 @@ interface FederationOrigin {
 * @returns A new {@link Federation} instance.
 * @throws {TypeError} If benchmark mode and `meterProvider` are both
 * specified.
+* @throws {RangeError} If {@link FederationOptions.maxHttpSignatures} is not
+* a positive integer or `Infinity`.
 * @since 0.10.0
 */
 declare function createFederation<TContextData>(options: FederationOptions<TContextData>): Federation<TContextData>;
@@ -2307,6 +2309,35 @@ interface FederationOptions<TContextData> {
   */
   userAgent?: GetUserAgentOptions | string;
   /**
+  * The timeout for each call of the built-in document loader, context
+  * loader, and authenticated document loader, e.g., when Fedify fetches
+  * a key to verify a signature.  The timeout is shared by all the steps of
+  * a call, including every redirect it follows, retries, and reading the
+  * response body.  It does not cover the time spent reading from or
+  * writing to the cache.
+  *
+  * A timed-out call throws a `FetchError` without a response, whose
+  * `cause` is a `DOMException` named `"TimeoutError"`, so that, e.g.,
+  * a key fetch that times out is reported as a `keyFetchError` and cached
+  * like other failures to fetch a key.
+  *
+  * It does not affect loaders made by
+  * {@link FederationOptions.documentLoaderFactory},
+  * {@link FederationOptions.contextLoaderFactory}, or
+  * {@link FederationOptions.authenticatedDocumentLoaderFactory}.
+  * Note that if only {@link FederationOptions.documentLoaderFactory} is
+  * set, it also makes context loaders.
+  *
+  * Set it to `null` to turn off the timeout.
+  *
+  * 10 seconds by default.
+  * @throws {RangeError} If the duration is not positive, is longer than
+  *                      about 24.8 days, or is given in calendar units
+  *                      such as months.
+  * @since 2.4.0
+  */
+  documentLoaderTimeout?: Temporal.Duration | Temporal.DurationLike | null;
+  /**
   * A callback that handles errors during outbox processing.  Note that this
   * callback can be called multiple times for the same activity, because
   * the delivery is retried according to the backoff schedule until it
@@ -2335,6 +2366,29 @@ interface FederationOptions<TContextData> {
   */
   signatureTimeWindow?: Temporal.Duration | Temporal.DurationLike | false;
   /**
+  * The maximum number of [RFC 9421] signatures of an incoming request to
+  * verify, e.g., in the inbox and in
+  * {@link RequestContext.getSignedKey}.  A request can carry several
+  * signatures, each of which may make Fedify fetch the key that it names,
+  * so only the first ones in the order of the `Signature-Input` header are
+  * verified, and the rest are ignored as if they were absent.  Every
+  * signature among the first ones counts, even if it fails before its key
+  * is fetched.  See also the `maxSignatures` option of `verifyRequest()`.
+  *
+  * It has to be a positive integer, or `Infinity` to verify every
+  * signature, which lets a single request make Fedify fetch any number of
+  * keys.  Draft-cavage HTTP Signatures carry a single signature, so this
+  * option does not affect them.
+  *
+  * Three by default.
+  *
+  * [RFC 9421]: https://www.rfc-editor.org/rfc/rfc9421
+  * @throws {RangeError} Thrown when the federation is created if the value
+  *         is not a positive integer or `Infinity`.
+  * @since 2.4.0
+  */
+  maxHttpSignatures?: number;
+  /**
   * Whether to skip HTTP Signatures verification for incoming activities.
   * This is useful for testing purposes, but should not be used in production.
   *

package/dist/{deno-CizGaYeG.mjs → deno-EopndaNb.mjs}

@@ -3,6 +3,6 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2164+db2b8571";
+var version = "2.4.0-dev.2190+be3a8be0";
 //#endregion
 export { version as n, name as t };

package/dist/{docloader-BBFAItNB.mjs → docloader-u6zzOExF.mjs}

@@ -1,11 +1,11 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { c as validateCryptoKey } from "./key-D5awqp7u.mjs";
-import { n as doubleKnock } from "./http-DRH0n8TD.mjs";
+import { c as validateCryptoKey } from "./key-DyXf88bq.mjs";
+import { n as doubleKnock } from "./http-Y1ObT1A8.mjs";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
-import { FetchError, UrlError, createActivityPubRequest, getRemoteDocument, logRequest, validatePublicUrl } from "@fedify/vocab-runtime";
+import { FetchError, UrlError, createActivityPubRequest, getRemoteDocument, logRequest, resolveDocumentLoaderTimeout, validatePublicUrl, withDocumentLoaderTimeout } from "@fedify/vocab-runtime";
 //#region src/utils/docloader.ts
 const logger = getLogger([
 	"fedify",
@@ -19,15 +19,19 @@ const DEFAULT_MAX_REDIRECTION = 20;
 * the fetched documents.
 * At most 20 HTTP redirects and alternate document links are followed in total
 * per call.  Revisiting a URL within that chain throws a {@link FetchError}.
+* Each call, including its double-knocking retries, times out after
+* 10 seconds by default; see {@link DocumentLoaderFactoryOptions.timeout}.
 * @param identity The identity to get the document loader for.
 *                 The actor's key pair.
 * @param options The options for the document loader.
 * @returns The authenticated document loader.
 * @throws {TypeError} If the key is invalid or unsupported.
+* @throws {RangeError} If the `timeout` option is invalid.
 * @since 0.4.0
 */
-function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, maxRedirection, userAgent, specDeterminer, tracerProvider } = {}) {
+function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, maxRedirection, userAgent, specDeterminer, timeout, tracerProvider } = {}) {
 	validateCryptoKey(identity.privateKey);
+	const resolvedTimeout = resolveDocumentLoaderTimeout(timeout);
 	async function load(url, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
 		options?.signal?.throwIfAborted();
 		let currentUrl = new URL(url).href;
@@ -53,27 +57,31 @@ function getAuthenticatedDocumentLoader(identity, { allowPrivateAddress, maxRedi
 				currentUrl = nextUrl;
 			}
 		});
+		options?.signal?.throwIfAborted();
 		return getRemoteDocument(currentUrl, response, (alternateUrl) => {
 			follow(alternateUrl);
 			return load(alternateUrl, options, redirected, visited);
 		}, options);
 	}
 	async function validateUrl(url, options) {
-		if (!allowPrivateAddress) try {
-			await validatePublicUrl(url);
-		} catch (error) {
-			if (error instanceof UrlError) if (error.reason === "dns") logger.debug("DNS lookup failed for {url}", {
-				url,
-				error
-			});
-			else logger[options?.suppressError ? "warn" : "error"]("Disallowed private URL: {url}", {
-				url,
-				error
-			});
-			throw error;
+		if (!allowPrivateAddress) {
+			try {
+				await validatePublicUrl(url);
+			} catch (error) {
+				if (error instanceof UrlError) if (error.reason === "dns") logger.debug("DNS lookup failed for {url}", {
+					url,
+					error
+				});
+				else logger[options?.suppressError ? "warn" : "error"]("Disallowed private URL: {url}", {
+					url,
+					error
+				});
+				throw error;
+			}
+			options?.signal?.throwIfAborted();
 		}
 	}
-	return (url, options) => load(url, options);
+	return withDocumentLoaderTimeout((url, options) => load(url, options), resolvedTimeout);
 }
 //#endregion
 export { getAuthenticatedDocumentLoader as t };

package/dist/federation/builder.test.mjs

@@ -6,7 +6,7 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertExists } from "../assert_exists-cffSpJ7X.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { r as createFederationBuilder } from "../builder-BqRmnx7p.mjs";
+import { r as createFederationBuilder } from "../builder-CFF0YNTp.mjs";
 import { DisallowedOperatorError, DisallowedVarSpecModifierError, DuplicateRouteVariableError, RouteTemplateOptionsNotMatchedError, RouterError } from "@fedify/uri-template";
 import { Activity, Note, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";

package/dist/federation/circuit-breaker.test.mjs

@@ -5,7 +5,8 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { n as normalizeCircuitBreakerOptions, r as parseCircuitBreakerKvState, t as CircuitBreaker } from "../circuit-breaker-C5NqoLBJ.mjs";
+import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
+import { n as normalizeCircuitBreakerOptions, r as parseCircuitBreakerKvState, t as CircuitBreaker } from "../circuit-breaker-XJ53md4S.mjs";
 import { t as markCircuitBreakerLegacySweepDone } from "../circuit-breaker-test-utils-DW6YC_Pe.mjs";
 import { test } from "@fedify/fixture";
 //#region src/federation/circuit-breaker.test.ts
@@ -26,6 +27,54 @@ var CountingCasKvStore = class extends MemoryKvStore {
 		return super.cas(key, expectedValue, newValue, options);
 	}
 };
+var EncodedCasKvStore = class extends MemoryKvStore {
+	async cas(key, expectedValue, newValue, options) {
+		const current = await this.get(key);
+		if (JSON.stringify(current) !== JSON.stringify(expectedValue)) return false;
+		if (newValue === void 0) await this.delete(key);
+		else await this.set(key, newValue, options);
+		return true;
+	}
+};
+test("CircuitBreaker uses raw encoded CAS expectations", async () => {
+	const kv = new EncodedCasKvStore();
+	await markCircuitBreakerLegacySweepDone(kv);
+	let now = Temporal.Instant.from("2026-05-25T00:00:00Z");
+	const circuit = new CircuitBreaker({
+		kv,
+		prefix: ["_fedify", "circuit"],
+		now: () => now,
+		options: {
+			failureThreshold: 1,
+			recoveryDelay: { seconds: 30 }
+		}
+	});
+	const key = [
+		"_fedify",
+		"circuit",
+		"remote.example"
+	];
+	await circuit.recordFailure("remote.example");
+	now = now.add({ seconds: 30 });
+	assertEquals((await circuit.beforeSend("remote.example", {})).type, "send");
+	assertEquals((await circuit.recordSuccess("remote.example"))?.newState, "closed");
+	const oldOrder = {
+		state: "half-open",
+		failures: ["2026-05-25T00:00:00Z"],
+		opened: "2026-05-25T00:00:00Z",
+		__fedifyCircuitBreakerStateVersion: 1,
+		halfOpened: "2026-05-25T00:00:00Z"
+	};
+	await kv.set(key, oldOrder);
+	assertEquals((await circuit.recordFailure("remote.example"))?.newState, "open");
+	await kv.set(key, oldOrder);
+	assertEquals((await circuit.recordSuccess("remote.example"))?.newState, "closed");
+	await kv.set(key, oldOrder);
+	assertEquals((await circuit.beforeSend("remote.example", {})).type, "send");
+	await kv.set(key, { __fedifyDeletingCircuitBreakerLegacyState: true });
+	await assertRejects(() => circuit.recordFailure("remote.example"));
+	assertEquals(await kv.get(key), { __fedifyDeletingCircuitBreakerLegacyState: true });
+});
 var CountingSetKvStore = class {
 	#store = new MemoryKvStore();
 	keys = [];

package/dist/federation/compound-fanout.test.mjs

@@ -6,11 +6,11 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { n as exportJwk } from "../key-D5awqp7u.mjs";
+import { n as exportJwk } from "../key-DyXf88bq.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "../outgoing-jsonld-4IJqPYos.mjs";
-import { a as signObject, d as verifyProof } from "../proof-CRTPWbVh.mjs";
+import { a as signObject, d as verifyProof } from "../proof-C9115DX_.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl } from "../middleware-B99JjvFn.mjs";
+import { n as FederationImpl } from "../middleware-Bdu2-OPD.mjs";
 import { Create, DataIntegrityProof, Note } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/handler-compound-proof.test.mjs

@@ -5,10 +5,10 @@ import { r as createRequestContext, t as createInboxContext } from "../context-B
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-CyliEU48.mjs";
-import { l as signRequest } from "../http-DRH0n8TD.mjs";
+import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-oQj6j_hP.mjs";
+import { l as signRequest } from "../http-Y1ObT1A8.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { f as handleInbox, o as createFederation } from "../middleware-B99JjvFn.mjs";
+import { f as handleInbox, o as createFederation } from "../middleware-Bdu2-OPD.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as map_local_create_note_default } from "../map-local-create-note-B0SeXJms.mjs";
 import { Create, CryptographicKey, Multikey, Person, Update } from "@fedify/vocab";

package/dist/federation/handler.test.mjs

@@ -10,12 +10,12 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as parseAcceptSignature } from "../accept-CPVqki78.mjs";
-import { o as generateCryptoKeyPair } from "../key-D5awqp7u.mjs";
-import { a as compactJsonLd, p as signJsonLd } from "../ld-CyliEU48.mjs";
-import { a as signObject } from "../proof-CRTPWbVh.mjs";
-import { l as signRequest } from "../http-DRH0n8TD.mjs";
+import { o as generateCryptoKeyPair } from "../key-DyXf88bq.mjs";
+import { a as compactJsonLd, p as signJsonLd } from "../ld-oQj6j_hP.mjs";
+import { a as signObject } from "../proof-C9115DX_.mjs";
+import { l as signRequest } from "../http-Y1ObT1A8.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-B99JjvFn.mjs";
+import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-Bdu2-OPD.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { Activity, Create, CryptographicKey, Multikey, Note, Person, Tombstone } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/hashlink-media.test.mjs

@@ -10,8 +10,8 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-B99JjvFn.mjs";
-import { r as createFederationBuilder } from "../builder-BqRmnx7p.mjs";
+import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-Bdu2-OPD.mjs";
+import { r as createFederationBuilder } from "../builder-CFF0YNTp.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { Note } from "@fedify/vocab";
 import { createTestMeterProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/idempotency.test.mjs

@@ -4,9 +4,9 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { a as signObject } from "../proof-CRTPWbVh.mjs";
+import { a as signObject } from "../proof-C9115DX_.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-B99JjvFn.mjs";
+import { o as createFederation } from "../middleware-Bdu2-OPD.mjs";
 import { Create, Follow, Person } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/idempotency.test.ts

package/dist/federation/keycache.test.mjs

@@ -6,7 +6,7 @@ import { t as ManualClockKvStore } from "../kv-DBRWVx3Q.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { t as KvKeyCache } from "../keycache-PiOM9pM0.mjs";
+import { t as KvKeyCache } from "../keycache-Da8A8mZa.mjs";
 import { CryptographicKey, Multikey } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 //#region src/federation/keycache.test.ts

package/dist/federation/metrics.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
-import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-CFBEehTc.mjs";
+import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-zMe834ID.mjs";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { FetchError } from "@fedify/vocab-runtime";
 import { DataPointType, MeterProvider, MetricReader } from "@opentelemetry/sdk-metrics";