@fedify/fedify 2.4.0-dev.2190 → 2.4.0-dev.2200

package/dist/{builder-CFF0YNTp.mjs → builder-BGSNMnVH.mjs}

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as version, t as name } from "./deno-EopndaNb.mjs";
+import { n as version, t as name } from "./deno-CxoV48e0.mjs";
 import { i as getPortableDid, l as isPortableId, n as getCanonicalPortableId } from "./portable-key-id-Ca30-hOa.mjs";
 import { t as ActivityListenerSet } from "./activity-listener-C-BSbKI7.mjs";
 import { getLogger } from "@logtape/logtape";
@@ -89,7 +89,7 @@ var FederationBuilderImpl = class {
 	* specified.
 	*/
 	async build(options) {
-		const { FederationImpl } = await import("./middleware-Ck9yghxs.mjs");
+		const { FederationImpl } = await import("./middleware-rpYJG85a.mjs");
 		const f = new FederationImpl(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();
@@ -165,6 +165,7 @@ var FederationBuilderImpl = class {
 			if (actor.id == null) logger.warn("Actor dispatcher returned an actor without an id property.  Set the property with Context.getActorUri(identifier).");
 			else if (!portable && actor.id.href != context.getActorUri(identifier).href) logger.warn("Actor dispatcher returned an actor with an id property that does not match the actor URI.  Set the property with Context.getActorUri(identifier).");
 			if (actor instanceof Tombstone) return actor;
+			if (portable && actor.id != null) warnPortableActorGateways(actor.id, actor.gateways);
 			if (actor.id != null && isCompatibleEf61Iri(actor.id)) warnCompatibleActorId(actor.id, actor.gateway);
 			if (portable) this.#warnPortableCollectionIds(context, identifier, actor);
 			if (this.followingCallbacks != null && this.followingCallbacks.dispatcher != null) {
@@ -768,9 +769,28 @@ function warnMismatchedTombstoneId(context, cls, values, tombstone) {
 	});
 }
 /**
+* Warns about an FEP-ef61 portable actor whose `gateways` is empty or has
+* an item that is not an HTTP(S) origin, which FEP-ef61 does not allow.
+* Every item is checked, since the list and its URLs can be mutated after
+* the actor is constructed.
+*/
+function warnPortableActorGateways(actorId, gateways) {
+	if (gateways.length > 0 && gateways.every(isGatewayUrl)) return;
+	getLogger([
+		"fedify",
+		"federation",
+		"actor"
+	]).warn("Actor dispatcher returned an FEP-ef61 portable actor, {actorId}, whose gateways property is empty or has an item that is not an HTTP(S) origin.  FEP-ef61 requires a portable actor to have at least one gateway, and every gateway to be an HTTP(S) URI with an empty path, query, and fragment.  Set the gateways property.", {
+		actorId: actorId.href,
+		gateways: gateways.map((g) => g.href)
+	});
+}
+/**
 * Warns about an FEP-ef61 portable actor identified by a compatible identifier
 * that is malformed, or is not on the actor's first gateway, where FEP-ef61
-* requires publishers to construct compatible identifiers.
+* requires publishers to construct compatible identifiers.  A missing or
+* invalid first gateway is reported by {@link warnPortableActorGateways}
+* instead.
 */
 function warnCompatibleActorId(actorId, gateway) {
 	const logger = getLogger([
@@ -788,8 +808,8 @@ function warnCompatibleActorId(actorId, gateway) {
 		});
 		return;
 	}
-	if (gateway == null || !isGatewayUrl(gateway)) logger.warn("Actor dispatcher returned an actor whose id property, {actorId}, is an FEP-ef61 compatible identifier, but whose first gateway is not an HTTP(S) origin.  Set the gateways property, and construct the compatible identifier with its first gateway.", { actorId: actorId.href });
-	else if (actorId.origin !== gateway.origin) logger.warn("Actor dispatcher returned an actor whose id property, {actorId}, is an FEP-ef61 compatible identifier on another gateway than its first gateway, {gateway}.  FEP-ef61 requires publishers to construct compatible identifiers with the first gateway in the actor's gateways.", {
+	if (gateway == null || !isGatewayUrl(gateway)) return;
+	if (actorId.origin !== gateway.origin) logger.warn("Actor dispatcher returned an actor whose id property, {actorId}, is an FEP-ef61 compatible identifier on another gateway than its first gateway, {gateway}.  FEP-ef61 requires publishers to construct compatible identifiers with the first gateway in the actor's gateways.", {
 		actorId: actorId.href,
 		gateway: gateway.origin
 	});

package/dist/compat/transformers.test.mjs

@@ -5,7 +5,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { E as autoIdAssigner, T as actorDehydrator, n as FederationImpl } from "../middleware-Bdu2-OPD.mjs";
+import { E as autoIdAssigner, T as actorDehydrator, n as FederationImpl } from "../middleware-BbTJ6C1-.mjs";
 import { Follow, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 //#region src/compat/transformers.test.ts

package/dist/{compound-proof-F2jjkrt0.mjs → compound-proof-Zpg7Fbk9.mjs}

@@ -3,8 +3,8 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { a as getRawCanonicalPortableId, l as isPortableId, n as getCanonicalPortableId } from "./portable-key-id-Ca30-hOa.mjs";
 import { n as preloadedOnlyDocumentLoader } from "./public-audience--klBIOk1.mjs";
-import { c as getNormalizationContextLoader } from "./ld-oQj6j_hP.mjs";
-import { l as verifyPortableObjectProofPolicy, n as classifyFep2277CoreType, o as verifyMapLocalProof } from "./proof-C9115DX_.mjs";
+import { c as getNormalizationContextLoader } from "./ld-eIekvNtm.mjs";
+import { l as verifyPortableObjectProofPolicy, n as classifyFep2277CoreType, o as verifyMapLocalProof } from "./proof-B9DEHHiO.mjs";
 import { parseIri, preloadedContexts } from "@fedify/vocab-runtime";
 import jsonld from "@fedify/vocab-runtime/jsonld";
 //#region src/sig/compound-proof.ts

package/dist/{deno-EopndaNb.mjs → deno-CxoV48e0.mjs}

@@ -3,6 +3,6 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2190+be3a8be0";
+var version = "2.4.0-dev.2200+e588a43c";
 //#endregion
 export { version as n, name as t };

package/dist/{docloader-u6zzOExF.mjs → docloader-U141HKIl.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { c as validateCryptoKey } from "./key-DyXf88bq.mjs";
-import { n as doubleKnock } from "./http-Y1ObT1A8.mjs";
+import { c as validateCryptoKey } from "./key-DYgoirTo.mjs";
+import { n as doubleKnock } from "./http-BQq1Uldg.mjs";
 import { getLogger } from "@logtape/logtape";
 import { curry } from "es-toolkit";
 import { FetchError, UrlError, createActivityPubRequest, getRemoteDocument, logRequest, resolveDocumentLoaderTimeout, validatePublicUrl, withDocumentLoaderTimeout } from "@fedify/vocab-runtime";

package/dist/federation/builder.test.mjs

@@ -6,7 +6,7 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertExists } from "../assert_exists-cffSpJ7X.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { r as createFederationBuilder } from "../builder-CFF0YNTp.mjs";
+import { r as createFederationBuilder } from "../builder-BGSNMnVH.mjs";
 import { DisallowedOperatorError, DisallowedVarSpecModifierError, DuplicateRouteVariableError, RouteTemplateOptionsNotMatchedError, RouterError } from "@fedify/uri-template";
 import { Activity, Note, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";

package/dist/federation/compound-fanout.test.mjs

@@ -6,11 +6,11 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { n as exportJwk } from "../key-DyXf88bq.mjs";
+import { n as exportJwk } from "../key-DYgoirTo.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "../outgoing-jsonld-4IJqPYos.mjs";
-import { a as signObject, d as verifyProof } from "../proof-C9115DX_.mjs";
+import { a as signObject, d as verifyProof } from "../proof-B9DEHHiO.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl } from "../middleware-Bdu2-OPD.mjs";
+import { n as FederationImpl } from "../middleware-BbTJ6C1-.mjs";
 import { Create, DataIntegrityProof, Note } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/handler-compound-proof.test.mjs

@@ -5,10 +5,10 @@ import { r as createRequestContext, t as createInboxContext } from "../context-B
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-oQj6j_hP.mjs";
-import { l as signRequest } from "../http-Y1ObT1A8.mjs";
+import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-eIekvNtm.mjs";
+import { l as signRequest } from "../http-BQq1Uldg.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { f as handleInbox, o as createFederation } from "../middleware-Bdu2-OPD.mjs";
+import { f as handleInbox, o as createFederation } from "../middleware-BbTJ6C1-.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as map_local_create_note_default } from "../map-local-create-note-B0SeXJms.mjs";
 import { Create, CryptographicKey, Multikey, Person, Update } from "@fedify/vocab";
@@ -331,5 +331,54 @@ test("handleInbox() accepts portable actors with keys at ap: URIs", async () =>
 	const dispatched = { count: 0 };
 	assertEquals([(await handle(await update("ap://did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK/actor"), dispatched)).status, dispatched.count], [401, 0]);
 });
+test("handleInbox() rejects embedded portable actors without valid gateways", async () => {
+	const did = await exportDidKey(ed25519PublicKey.publicKey);
+	const verificationMethod = `${did}#${did.slice(8)}`;
+	const privateJwk = await crypto.subtle.exportKey("jwk", ed25519PrivateKey);
+	const actorId = `ap://${did}/actor`;
+	const update = async (gateways) => await secureDocument({
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: `ap://${did}/activities/update`,
+		type: "Update",
+		actor: actorId,
+		object: await secureDocument({
+			"@context": [
+				"https://www.w3.org/ns/activitystreams",
+				"https://w3id.org/security/data-integrity/v1",
+				"https://w3id.org/fep/ef61"
+			],
+			id: actorId,
+			type: "Person",
+			inbox: `${actorId}/inbox`,
+			outbox: `${actorId}/outbox`,
+			...gateways
+		}, privateJwk, verificationMethod)
+	}, privateJwk, verificationMethod);
+	for (const [gateways, status, count] of [
+		[
+			{ gateways: ["https://gw.example"] },
+			202,
+			1
+		],
+		[
+			{},
+			401,
+			0
+		],
+		[
+			{ gateways: [] },
+			401,
+			0
+		],
+		[
+			{ gateways: ["https://gw.example/path"] },
+			400,
+			0
+		]
+	]) {
+		const dispatched = { count: 0 };
+		assertEquals([(await handle(await update(gateways), dispatched)).status, dispatched.count], [status, count], JSON.stringify(gateways));
+	}
+});
 //#endregion
 export {};

package/dist/federation/handler.test.mjs

@@ -10,12 +10,12 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as parseAcceptSignature } from "../accept-CPVqki78.mjs";
-import { o as generateCryptoKeyPair } from "../key-DyXf88bq.mjs";
-import { a as compactJsonLd, p as signJsonLd } from "../ld-oQj6j_hP.mjs";
-import { a as signObject } from "../proof-C9115DX_.mjs";
-import { l as signRequest } from "../http-Y1ObT1A8.mjs";
+import { o as generateCryptoKeyPair } from "../key-DYgoirTo.mjs";
+import { a as compactJsonLd, p as signJsonLd } from "../ld-eIekvNtm.mjs";
+import { a as signObject } from "../proof-B9DEHHiO.mjs";
+import { l as signRequest } from "../http-BQq1Uldg.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-Bdu2-OPD.mjs";
+import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-BbTJ6C1-.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { Activity, Create, CryptographicKey, Multikey, Note, Person, Tombstone } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/hashlink-media.test.mjs

@@ -10,8 +10,8 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-Bdu2-OPD.mjs";
-import { r as createFederationBuilder } from "../builder-CFF0YNTp.mjs";
+import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-BbTJ6C1-.mjs";
+import { r as createFederationBuilder } from "../builder-BGSNMnVH.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { Note } from "@fedify/vocab";
 import { createTestMeterProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/idempotency.test.mjs

@@ -4,9 +4,9 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { a as signObject } from "../proof-C9115DX_.mjs";
+import { a as signObject } from "../proof-B9DEHHiO.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-Bdu2-OPD.mjs";
+import { o as createFederation } from "../middleware-BbTJ6C1-.mjs";
 import { Create, Follow, Person } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/idempotency.test.ts

package/dist/federation/metrics.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
-import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-zMe834ID.mjs";
+import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-BVpdjsaR.mjs";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { FetchError } from "@fedify/vocab-runtime";
 import { DataPointType, MeterProvider, MetricReader } from "@opentelemetry/sdk-metrics";

package/dist/federation/middleware.test.mjs

@@ -16,14 +16,14 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { g as recordInboxActivity } from "../metrics-zMe834ID.mjs";
-import { a as compactJsonLd, h as verifyJsonLd, p as signJsonLd, s as detachSignature } from "../ld-oQj6j_hP.mjs";
-import { a as signObject, s as verifyObject } from "../proof-C9115DX_.mjs";
-import { f as verifyRequest, l as signRequest } from "../http-Y1ObT1A8.mjs";
+import { g as recordInboxActivity } from "../metrics-BVpdjsaR.mjs";
+import { a as compactJsonLd, h as verifyJsonLd, p as signJsonLd, s as detachSignature } from "../ld-eIekvNtm.mjs";
+import { a as signObject, s as verifyObject } from "../proof-B9DEHHiO.mjs";
+import { f as verifyRequest, l as signRequest } from "../http-BQq1Uldg.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { t as getAuthenticatedDocumentLoader } from "../docloader-u6zzOExF.mjs";
-import { S as handleBenchmarkTrigger, i as KvSpecDeterminer, n as FederationImpl, o as createFederation, r as InboxContextImpl, t as ContextImpl } from "../middleware-Bdu2-OPD.mjs";
-import { t as doesActorOwnKey } from "../owner-Dem4fbwc.mjs";
+import { t as getAuthenticatedDocumentLoader } from "../docloader-U141HKIl.mjs";
+import { S as handleBenchmarkTrigger, i as KvSpecDeterminer, n as FederationImpl, o as createFederation, r as InboxContextImpl, t as ContextImpl } from "../middleware-BbTJ6C1-.mjs";
+import { t as doesActorOwnKey } from "../owner-DpxyMeo9.mjs";
 import { t as CircuitBreaker } from "../circuit-breaker-XJ53md4S.mjs";
 import { t as TaskCodec } from "../codec-C6rTrpIp.mjs";
 import { t as markCircuitBreakerLegacySweepDone } from "../circuit-breaker-test-utils-DW6YC_Pe.mjs";
@@ -4318,6 +4318,51 @@ test("FederationImpl.processQueuedTask()", async (t) => {
 		assertEquals(errorCount, 1);
 		assertEquals(queuedMessages, []);
 	});
+	await t.step("malformed FEP-ef61 gateways are permanent queued inbox parse errors", async () => {
+		const queuedMessages = [];
+		const queue = {
+			enqueue(message, _options) {
+				queuedMessages.push(message);
+				return Promise.resolve();
+			},
+			listen(_handler, _options) {
+				return Promise.resolve();
+			}
+		};
+		const kv = new MemoryKvStore();
+		let errorCount = 0;
+		const federation = new FederationImpl({
+			kv,
+			queue
+		});
+		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(Create, () => {
+			throw new Error("listener should not run");
+		}).onError(() => {
+			errorCount++;
+		});
+		await federation.processQueuedTask(void 0, {
+			type: "inbox",
+			id: crypto.randomUUID(),
+			baseUrl: "https://example.com",
+			activity: {
+				"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/fep/ef61"],
+				id: "https://remote.example/activities/invalid-gateway",
+				type: "Create",
+				actor: "https://remote.example/users/alice",
+				object: {
+					id: "https://remote.example/users/bob",
+					type: "Person",
+					gateways: ["https://gw.example/path"]
+				}
+			},
+			started: (/* @__PURE__ */ new Date()).toISOString(),
+			attempt: 0,
+			identifier: null,
+			traceContext: {}
+		});
+		assertEquals(errorCount, 1);
+		assertEquals(queuedMessages, []);
+	});
 	await t.step("legacy raw LDS inbox messages with network-path context ids retry", async () => {
 		const queue = {
 			enqueue(message, _options) {

package/dist/federation/mod.cjs

@@ -1,6 +1,6 @@
 const { URLPattern } = require("urlpattern-polyfill");
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_federation = require("../federation-BSS2dUO7.cjs");
+const require_federation = require("../federation-Ij8VLHpy.cjs");
 exports.CircuitBreaker = require_federation.CircuitBreaker;
 exports.InProcessMessageQueue = require_federation.InProcessMessageQueue;
 exports.MemoryKvStore = require_federation.MemoryKvStore;

package/dist/federation/mod.js

@@ -1,6 +1,6 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { a as respondWithObjectIfAcceptable, c as digest, d as parseCircuitBreakerKvState, f as createFederationBuilder, i as respondWithObject, l as CircuitBreaker, n as handleWebFinger, o as SendActivityError, r as createExponentialBackoffPolicy, s as buildCollectionSynchronizationHeader, t as createFederation, u as normalizeCircuitBreakerOptions } from "../middleware-CaR2MRWY.js";
+import { a as respondWithObjectIfAcceptable, c as digest, d as parseCircuitBreakerKvState, f as createFederationBuilder, i as respondWithObject, l as CircuitBreaker, n as handleWebFinger, o as SendActivityError, r as createExponentialBackoffPolicy, s as buildCollectionSynchronizationHeader, t as createFederation, u as normalizeCircuitBreakerOptions } from "../middleware-CS3H_4tQ.js";
 import { getLogger } from "@logtape/logtape";
 import { Router as Router$1, RouterError as RouterError$1, assertPath, isPath } from "@fedify/uri-template";
 import { isEqual } from "es-toolkit";

package/dist/federation/outgoing-proof.test.mjs

@@ -7,12 +7,12 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { n as exportJwk } from "../key-DyXf88bq.mjs";
-import { s as detachSignature } from "../ld-oQj6j_hP.mjs";
-import { a as signObject } from "../proof-C9115DX_.mjs";
+import { n as exportJwk } from "../key-DYgoirTo.mjs";
+import { s as detachSignature } from "../ld-eIekvNtm.mjs";
+import { a as signObject } from "../proof-B9DEHHiO.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { c as assertPortableActorActivity, n as FederationImpl, o as createFederation } from "../middleware-Bdu2-OPD.mjs";
-import { a as verifyCompoundPortableObjectProofs } from "../compound-proof-F2jjkrt0.mjs";
+import { c as assertPortableActorActivity, n as FederationImpl, o as createFederation } from "../middleware-BbTJ6C1-.mjs";
+import { a as verifyCompoundPortableObjectProofs } from "../compound-proof-Zpg7Fbk9.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Create, Note, Person } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/portable-actor.test.mjs

@@ -8,10 +8,10 @@ import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject, c as verifyPortableObjectProof } from "../proof-C9115DX_.mjs";
-import { f as verifyRequest, l as signRequest } from "../http-Y1ObT1A8.mjs";
+import { a as signObject, c as verifyPortableObjectProof } from "../proof-B9DEHHiO.mjs";
+import { f as verifyRequest, l as signRequest } from "../http-BQq1Uldg.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-Bdu2-OPD.mjs";
+import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-BbTJ6C1-.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Note, Person, Tombstone, lookupObject } from "@fedify/vocab";

package/dist/federation/portable-chain.test.mjs

@@ -7,10 +7,10 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { n as exportJwk } from "../key-DyXf88bq.mjs";
-import { c as verifyPortableObjectProof, s as verifyObject } from "../proof-C9115DX_.mjs";
+import { n as exportJwk } from "../key-DYgoirTo.mjs";
+import { c as verifyPortableObjectProof, s as verifyObject } from "../proof-B9DEHHiO.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl } from "../middleware-Bdu2-OPD.mjs";
+import { n as FederationImpl } from "../middleware-BbTJ6C1-.mjs";
 import { Create, DataIntegrityProof, Note, OrderedCollection, Person, traverseCollection } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { FetchError, encodeMultibase, exportDidKey } from "@fedify/vocab-runtime";

package/dist/federation/portable-collection.test.mjs

@@ -7,11 +7,11 @@ import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject } from "../proof-C9115DX_.mjs";
+import { a as signObject } from "../proof-B9DEHHiO.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-Bdu2-OPD.mjs";
-import { t as verifyPortableObject } from "../portable-collection-BL6aZlQ0.mjs";
-import { s as verifyServedPortableObjects } from "../compound-proof-F2jjkrt0.mjs";
+import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-BbTJ6C1-.mjs";
+import { t as verifyPortableObject } from "../portable-collection-DOL3l2C9.mjs";
+import { s as verifyServedPortableObjects } from "../compound-proof-Zpg7Fbk9.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Create, Note, Object as Object$1, OrderedCollection, Person, Tombstone, lookupObject, traverseCollection } from "@fedify/vocab";

package/dist/federation/portable-gateway-keys.test.mjs

@@ -8,11 +8,11 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { r as getVerifiedKeyOwnerEvidence } from "../key-owner-evidence-APB6NpSk.mjs";
-import { p as signJsonLd } from "../ld-oQj6j_hP.mjs";
-import { f as verifyRequest, l as signRequest, p as verifyRequestDetailed } from "../http-Y1ObT1A8.mjs";
+import { p as signJsonLd } from "../ld-eIekvNtm.mjs";
+import { f as verifyRequest, l as signRequest, p as verifyRequestDetailed } from "../http-BQq1Uldg.mjs";
 import { a as rsaPrivateKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { f as handleInbox, n as FederationImpl, o as createFederation } from "../middleware-Bdu2-OPD.mjs";
-import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-Dem4fbwc.mjs";
+import { f as handleInbox, n as FederationImpl, o as createFederation } from "../middleware-BbTJ6C1-.mjs";
+import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-DpxyMeo9.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as KvKeyCache } from "../keycache-Da8A8mZa.mjs";
 import { Create, CryptographicKey, Person } from "@fedify/vocab";

package/dist/federation/portable-inbox.test.mjs

@@ -8,11 +8,11 @@ import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { p as signJsonLd } from "../ld-oQj6j_hP.mjs";
-import { a as signObject } from "../proof-C9115DX_.mjs";
-import { l as signRequest, p as verifyRequestDetailed } from "../http-Y1ObT1A8.mjs";
+import { p as signJsonLd } from "../ld-eIekvNtm.mjs";
+import { a as signObject } from "../proof-B9DEHHiO.mjs";
+import { l as signRequest, p as verifyRequestDetailed } from "../http-BQq1Uldg.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { _ as coversDelivery, o as createFederation, v as forwardPortableInboxActivity, y as resolvePortableInboxForwardingOptions } from "../middleware-Bdu2-OPD.mjs";
+import { _ as coversDelivery, o as createFederation, v as forwardPortableInboxActivity, y as resolvePortableInboxForwardingOptions } from "../middleware-BbTJ6C1-.mjs";
 import { Create, CryptographicKey, Follow, Note, Person, Tombstone } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { exportDidKey, formatIri, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/portable-parse-uri.test.mjs

@@ -7,7 +7,7 @@ import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-Bdu2-OPD.mjs";
+import { o as createFederation } from "../middleware-BbTJ6C1-.mjs";
 import { Note, Object as Object$1, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/portable-route-activity.test.mjs

@@ -6,9 +6,9 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject } from "../proof-C9115DX_.mjs";
+import { a as signObject } from "../proof-B9DEHHiO.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-Bdu2-OPD.mjs";
+import { o as createFederation } from "../middleware-BbTJ6C1-.mjs";
 import { Create, Note } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 import { exportDidKey, formatIri, parseIri, toCompatibleEf61Id } from "@fedify/vocab-runtime";

package/dist/federation/portable.test.mjs

@@ -8,10 +8,10 @@ import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject, c as verifyPortableObjectProof } from "../proof-C9115DX_.mjs";
-import { l as signRequest } from "../http-Y1ObT1A8.mjs";
+import { a as signObject, c as verifyPortableObjectProof } from "../proof-B9DEHHiO.mjs";
+import { l as signRequest } from "../http-BQq1Uldg.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-Bdu2-OPD.mjs";
+import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-BbTJ6C1-.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Collection, Create, Note, Object as Object$1, Person, Tombstone, lookupObject } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
@@ -215,6 +215,11 @@ test("Federation.fetch() applies the FEP-ef61 proof policy to portable objects",
 			object.id.pathname = "/objects/mutated-id";
 			return object;
 		},
+		"actor-without-gateways": () => sign(new Person({
+			id: parseIri(`ap+ef61://${did}/objects/actor-without-gateways`),
+			inbox: parseIri(`ap+ef61://${did}/objects/actor-without-gateways/inbox`),
+			outbox: parseIri(`ap+ef61://${did}/objects/actor-without-gateways/outbox`)
+		})),
 		"unsigned-actor": () => Promise.resolve(new Person({
 			id: parseIri(`ap+ef61://${did}/objects/unsigned-actor`),
 			inbox: parseIri(`ap+ef61://${did}/objects/unsigned-actor/inbox`),
@@ -234,6 +239,7 @@ test("Federation.fetch() applies the FEP-ef61 proof policy to portable objects",
 		"activity": 200,
 		"actor": 200,
 		"mutated-id": 404,
+		"actor-without-gateways": 500,
 		"unsigned-actor": 500
 	})) await t.step(`${id} → ${status}`, async () => {
 		const response = await federation.fetch(gatewayRequest(`/objects/${id}`), { contextData: void 0 });
@@ -716,9 +722,11 @@ test("Federation.fetch() serves compatible-ID actors", async (t) => {
 		})).map((r) => r.properties.gateway), ["https://primary.example"]);
 	});
 	await t.step("warns if the actor has no gateways", async () => {
-		assertEquals((await captureWarnings(async () => {
+		const records = await captureWarnings(async () => {
 			assertEquals((await federation.fetch(new Request("https://example.com/users/nogateway", { headers: { Accept: ACCEPT } }), { contextData: void 0 })).status, 200);
-		})).map((r) => r.properties.actorId), [gatewayUrl("/actors/nogateway")]);
+		});
+		assertEquals(records.map((r) => r.properties.actorId), [gatewayUrl("/actors/nogateway")]);
+		assert(String(records[0].rawMessage).includes("gateways property"));
 	});
 	await t.step("warns if the ID is a malformed compatible identifier", async () => {
 		const records = await captureWarnings(async () => {
@@ -728,5 +736,41 @@ test("Federation.fetch() serves compatible-ID actors", async (t) => {
 		assert(String(records[0].rawMessage).includes("malformed"));
 	});
 });
+test("Federation.fetch() warns about portable actors without valid gateways", async (t) => {
+	const federation = createTestFederation();
+	const actors = {
+		valid: (ctx) => new Person({
+			id: ctx.getPortableObjectUri(Person, { name: "valid" }, did),
+			gateways: [new URL("https://example.com"), new URL("https://other.example/")]
+		}),
+		empty: (ctx) => new Person({ id: ctx.getPortableObjectUri(Person, { name: "empty" }, did) }),
+		mutated: (ctx) => {
+			const actor = new Person({
+				id: ctx.getPortableObjectUri(Person, { name: "mutated" }, did),
+				gateways: [new URL("https://example.com"), new URL("https://other.example/")]
+			});
+			actor.gateways[1].pathname = "/gateway";
+			return actor;
+		},
+		https: (ctx) => new Person({ id: ctx.getActorUri("https") }),
+		tombstone: (ctx) => new Tombstone({ id: ctx.getPortableObjectUri(Person, { name: "tombstone" }, did) })
+	};
+	federation.setActorDispatcher("/users/{identifier}", (ctx, identifier) => actors[identifier]?.(ctx) ?? null);
+	federation.setObjectDispatcher(Person, "/actors/{name}", () => null);
+	const expected = {
+		valid: [],
+		empty: [`ap+ef61://${did}/actors/empty`],
+		mutated: [`ap+ef61://${did}/actors/mutated`],
+		https: [],
+		tombstone: []
+	};
+	for (const [identifier, actorIds] of globalThis.Object.entries(expected)) await t.step(identifier, async () => {
+		const actorRecords = (await captureWarnings(async () => {
+			await federation.fetch(new Request(`https://example.com/users/${identifier}`, { headers: { Accept: ACCEPT } }), { contextData: void 0 });
+		})).filter((r) => r.category.join(".") === "fedify.federation.actor");
+		assertEquals(actorRecords.map((r) => r.properties.actorId), actorIds.map((id) => parseIri(id).href));
+		for (const record of actorRecords) assert(String(record.rawMessage).includes("gateways property"));
+	});
+});
 //#endregion
 export {};

package/dist/federation/send.test.mjs

@@ -10,10 +10,10 @@ import { t as assertNotEquals } from "../assert_not_equals-CpPK2t89.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { f as verifyRequest } from "../http-Y1ObT1A8.mjs";
+import { f as verifyRequest } from "../http-BQq1Uldg.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { t as doesActorOwnKey } from "../owner-Dem4fbwc.mjs";
-import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-D0hxFFRB.mjs";
+import { t as doesActorOwnKey } from "../owner-DpxyMeo9.mjs";
+import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-CZckda2X.mjs";
 import { Activity, Application, Endpoints, Group, Person, Service } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { FetchError, UrlError } from "@fedify/vocab-runtime";

package/dist/federation/tasks/enqueue.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
 import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-IG3pHfvZ.mjs";
 import "../../testing-C1itIjqW.mjs";
-import { o as createFederation } from "../../middleware-Bdu2-OPD.mjs";
+import { o as createFederation } from "../../middleware-BbTJ6C1-.mjs";
 import { n as ParallelMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { delay } from "es-toolkit";

package/dist/federation/tasks/tasks.test.mjs

@@ -4,8 +4,8 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
 import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-IG3pHfvZ.mjs";
 import "../../testing-C1itIjqW.mjs";
-import { o as createFederation } from "../../middleware-Bdu2-OPD.mjs";
-import { r as createFederationBuilder } from "../../builder-CFF0YNTp.mjs";
+import { o as createFederation } from "../../middleware-BbTJ6C1-.mjs";
+import { r as createFederationBuilder } from "../../builder-BGSNMnVH.mjs";
 import { t as TaskCodec } from "../../codec-C6rTrpIp.mjs";
 import { t as InProcessMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { W3CTraceContextPropagator } from "@opentelemetry/core";