@fedify/fedify 2.4.0-dev.2212 → 2.4.0-dev.2228

package/dist/federation/outgoing-proof.test.mjs

@@ -7,14 +7,14 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { n as exportJwk } from "../key-ChfV9C3v.mjs";
-import { s as detachSignature } from "../ld-DBBVabBC.mjs";
-import { a as signObject } from "../proof-MFz2960e.mjs";
+import { n as exportJwk } from "../key-TtgqklZ1.mjs";
+import { s as detachSignature } from "../ld-CHYUee-s.mjs";
+import { a as signObject } from "../proof-B-iLzyva.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { c as assertPortableActorActivity, n as FederationImpl, o as createFederation } from "../middleware-BW7-tHAG.mjs";
-import { a as verifyCompoundPortableObjectProofs } from "../compound-proof-BP5SOdXv.mjs";
+import { C as getEmbeddedFirstGateway, S as getCompactRootId, c as assertPortableActorActivity, n as FederationImpl, o as createFederation, w as warnCompatibleIdsInJson } from "../middleware-DoAk0Q3s.mjs";
+import { a as verifyCompoundPortableObjectProofs } from "../compound-proof-B647GUyL.mjs";
 import { configure, reset } from "@logtape/logtape";
-import { Create, Note, Person } from "@fedify/vocab";
+import { Announce, Create, Note, Person } from "@fedify/vocab";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/outgoing-proof.test.ts
@@ -620,6 +620,248 @@ async function captureLogs(run) {
 	}
 	return records.filter((record) => record.category[0] === "fedify");
 }
+test("sendActivity warns for compatible IDs off the actor's first gateway", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const federation = createTestFederation();
+	let actorCalls = 0;
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => {
+		actorCalls++;
+		return identifier === "alice" ? new Person({
+			id: ownerId,
+			gateways: [new URL("https://primary.example"), new URL("https://secondary.example")]
+		}) : null;
+	});
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	const child = await signObject(new Note({
+		id: compatibleId(owner.did, "/notes/1", "https://secondary.example"),
+		attribution: ownerId,
+		content: "Hello"
+	}), owner.privateKey, owner.keyId, {
+		...options,
+		context: childContext,
+		created
+	});
+	const activity = new Create({
+		id: compatibleId(owner.did, "/activities/1", "https://secondary.example"),
+		actor: ownerId,
+		object: child
+	});
+	const records = await captureLogs(async () => {
+		const { bodies } = await capture(() => ctx.sendActivity([rsaKey, sender(owner)], recipient, activity));
+		assertEquals(bodies.length, 1);
+		assertEquals(bodies[0].id, activity.id?.href);
+	});
+	assertEquals(records.filter((r) => r.properties.kind === "activity").length, 1);
+	assertEquals(records.filter((r) => r.properties.kind === "object").length, 1);
+	assertEquals(actorCalls, 1);
+});
+test("sendActivity skips first-gateway and portable IDs", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const federation = createTestFederation();
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => identifier === "alice" ? new Person({
+		id: ownerId,
+		gateways: [new URL("https://primary.example")]
+	}) : null);
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	for (const id of [compatibleId(owner.did, "/activities/first", "https://primary.example"), parseIri(`ap://${owner.did}/activities/portable`)]) assertEquals((await captureLogs(() => capture(() => ctx.sendActivity([rsaKey, sender(owner)], recipient, new Create({
+		id,
+		actor: ownerId
+	}))))).filter((r) => r.properties.kind != null), []);
+	const plain = federation.createContext(new URL("https://example.com/"));
+	assertEquals((await captureLogs(() => capture(() => plain.sendActivity([rsaKey, sender(owner)], recipient, new Create({
+		id: compatibleId(owner.did, "/activities/unknown-gateway", "https://secondary.example"),
+		actor: ownerId
+	}))))).filter((r) => r.properties.kind != null), []);
+});
+test("fanout warns once before enqueueing a compatible activity", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const { queue, queued } = createQueue();
+	const federation = createTestFederation(queue);
+	federation.setActorDispatcher("/users/{identifier}", () => new Person({
+		id: ownerId,
+		gateways: [new URL("https://primary.example")]
+	}));
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	assertEquals((await captureLogs(() => capture(async () => {
+		await ctx.sendActivity([rsaKey, sender(owner)], recipient, new Create({
+			id: compatibleId(owner.did, "/activities/fanout", "https://secondary.example"),
+			actor: ownerId
+		}), { fanout: "force" });
+		assertEquals(queued.length, 1);
+		for (let i = 0; i < queued.length; i++) await federation.processQueuedTask(void 0, queued[i]);
+	}))).filter((r) => r.properties.kind === "activity").length, 1);
+});
+test("an embedded actor supplies gateways to a plain send context", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const ctx = new FederationImpl({
+		kv: new MemoryKvStore(),
+		contextLoaderFactory: () => mockDocumentLoader,
+		documentLoaderFactory: () => mockDocumentLoader,
+		activityTransformers: []
+	}).createContext(new URL("https://example.com/"));
+	const activity = await signObject(new Create({
+		id: compatibleId(owner.did, "/activities/embedded-actor", "https://secondary.example"),
+		actor: new Person({
+			id: ownerId,
+			gateways: [new URL("https://primary.example")]
+		})
+	}), owner.privateKey, owner.keyId, {
+		...options,
+		created
+	});
+	assertEquals(getEmbeddedFirstGateway(await activity.toJsonLd({
+		format: "compact",
+		contextLoader: mockDocumentLoader
+	}), ownerId, owner.did)?.origin, "https://primary.example");
+	assertEquals((await captureLogs(() => capture(() => ctx.sendActivity([rsaKey, sender(owner)], recipient, activity)))).filter((r) => r.properties.kind === "activity").length, 1);
+});
+test("sendActivity checks a locally owned embedded object independently", async () => {
+	const alice = await didKey();
+	const bob = await didKey();
+	const aliceId = parseIri(`ap://${alice.did}/users/alice`);
+	const bobId = parseIri(`ap://${bob.did}/users/bob`);
+	const federation = createTestFederation();
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => identifier === "alice" ? new Person({
+		id: aliceId,
+		gateways: [new URL("https://primary.example")]
+	}) : identifier === "bob" ? new Person({
+		id: bobId,
+		gateways: [new URL("https://bob.example")]
+	}) : null);
+	const child = await signObject(new Note({
+		id: compatibleId(bob.did, "/notes/1", "https://secondary.example"),
+		attribution: bobId,
+		content: "Bob's note"
+	}), bob.privateKey, bob.keyId, {
+		...options,
+		context: childContext,
+		created
+	});
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	assertEquals((await captureLogs(() => capture(() => ctx.sendActivity([rsaKey, sender(alice)], recipient, new Announce({
+		id: parseIri(`ap://${alice.did}/activities/announce`),
+		actor: aliceId,
+		object: child
+	}))))).filter((r) => r.properties.kind === "object").map((r) => r.properties.id), [child.id?.href]);
+});
+test("sendActivity in an actor dispatcher does not re-enter it", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const federation = createTestFederation();
+	let calls = 0;
+	federation.setActorDispatcher("/users/{identifier}", async (ctx) => {
+		calls++;
+		await ctx.sendActivity([rsaKey, sender(owner)], recipient, new Create({
+			id: compatibleId(owner.did, "/activities/from-dispatcher", "https://secondary.example"),
+			actor: ownerId
+		}));
+		return new Person({
+			id: ownerId,
+			gateways: [new URL("https://primary.example")]
+		});
+	});
+	await capture(async () => {
+		assertEquals((await federation.fetch(new Request("https://example.com/users/alice", { headers: { Accept: "application/activity+json" } }), { contextData: void 0 })).status, 200);
+	});
+	assertEquals(calls, 1);
+});
+test("sendActivity still delivers when the diagnostic actor lookup fails", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const federation = createTestFederation();
+	federation.setActorDispatcher("/users/{identifier}", () => {
+		throw new Error("Actor storage unavailable");
+	});
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	const id = compatibleId(owner.did, "/activities/lookup-fails", "https://secondary.example");
+	assertEquals((await captureLogs(async () => {
+		const { bodies } = await capture(() => ctx.sendActivity([rsaKey, sender(owner)], recipient, new Create({
+			id,
+			actor: ownerId
+		})));
+		assertEquals(bodies.length, 1);
+		assertEquals(bodies[0].id, id.href);
+	})).filter((r) => r.properties.kind != null), []);
+});
+test("warning checks later local actors when the first is missing", async () => {
+	const owner = await didKey();
+	const missing = parseIri(`ap://${owner.did}/users/missing`);
+	const alice = parseIri(`ap://${owner.did}/users/alice`);
+	const federation = createTestFederation();
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => identifier === "alice" ? new Person({
+		id: alice,
+		gateways: [new URL("https://primary.example")]
+	}) : null);
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	assertEquals((await captureLogs(() => warnCompatibleIdsInJson({
+		id: compatibleId(owner.did, "/activities/multi", "https://secondary.example").href,
+		type: "Create",
+		actor: [missing.href, alice.href]
+	}, ctx))).filter((r) => r.properties.kind === "activity").length, 1);
+});
+test("warning ignores an embedded gateway key", async () => {
+	const owner = await didKey();
+	const actorId = parseIri(`ap://${owner.did}/users/alice`);
+	const records = await captureLogs(() => warnCompatibleIdsInJson({
+		id: compatibleId(owner.did, "/activities/1", "https://secondary.example").href,
+		type: "Create",
+		actor: {
+			id: actorId.href,
+			type: "Person",
+			gateways: ["https://primary.example"],
+			publicKey: [{
+				id: compatibleId(owner.did, "/users/alice/keys/1", "https://secondary.example").href,
+				type: ["CryptographicKey"]
+			}, {
+				id: compatibleId(owner.did, "/users/alice/keys/2", "https://secondary.example").href,
+				type: "sec:Key"
+			}]
+		}
+	}));
+	assertEquals(records.filter((r) => r.properties.kind === "activity").length, 1);
+	assertEquals(records.filter((r) => r.properties.kind === "object"), []);
+});
+test("warning resolves a signed child's local ownership alias", async () => {
+	const alice = await didKey();
+	const bob = await didKey();
+	const aliceId = parseIri(`ap://${alice.did}/users/alice`);
+	const bobId = parseIri(`ap://${bob.did}/users/bob`);
+	const federation = createTestFederation();
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => identifier === "bob" ? new Person({
+		id: bobId,
+		gateways: [new URL("https://primary.example")]
+	}) : null);
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	assertEquals((await captureLogs(() => warnCompatibleIdsInJson({
+		id: parseIri(`ap://${alice.did}/activities/announce`).href,
+		type: "Announce",
+		actor: aliceId.href,
+		object: {
+			"@context": ["https://www.w3.org/ns/activitystreams", {
+				by: {
+					"@id": "as:attributedTo",
+					"@type": "@id"
+				},
+				identifier: "@id"
+			}],
+			identifier: compatibleId(bob.did, "/notes/1", "https://secondary.example").href,
+			type: "Note",
+			by: bobId.href
+		}
+	}, ctx))).filter((r) => r.properties.kind === "object").length, 1);
+});
+test("warning reads an inline alias of the serialized root ID", async () => {
+	const id = compatibleId((await didKey()).did, "/notes/1", "https://secondary.example");
+	assertEquals(getCompactRootId({
+		"@context": ["https://www.w3.org/ns/activitystreams", { identifier: "@id" }],
+		identifier: id.href,
+		type: "Note"
+	})?.href, id.href);
+});
 test("an activity on another gateway than its compatible-ID actor is warned about", async () => {
 	const owner = await didKey();
 	const warnings = (activity) => captureLogs(() => assertPortableActorActivity(activity)).then((records) => records.map((r) => r.properties.activityId));

package/dist/federation/portable-actor.test.mjs

@@ -8,10 +8,10 @@ import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject, c as verifyPortableObjectProof } from "../proof-MFz2960e.mjs";
-import { f as verifyRequest, l as signRequest } from "../http--IGUT1mg.mjs";
+import { a as signObject, c as verifyPortableObjectProof } from "../proof-B-iLzyva.mjs";
+import { f as verifyRequest, l as signRequest } from "../http-DysQjjJe.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-BW7-tHAG.mjs";
+import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-DoAk0Q3s.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Note, Person, Tombstone, lookupObject } from "@fedify/vocab";

package/dist/federation/portable-chain.test.mjs

@@ -7,10 +7,10 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { n as exportJwk } from "../key-ChfV9C3v.mjs";
-import { c as verifyPortableObjectProof, s as verifyObject } from "../proof-MFz2960e.mjs";
+import { n as exportJwk } from "../key-TtgqklZ1.mjs";
+import { c as verifyPortableObjectProof, s as verifyObject } from "../proof-B-iLzyva.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl } from "../middleware-BW7-tHAG.mjs";
+import { n as FederationImpl } from "../middleware-DoAk0Q3s.mjs";
 import { Create, DataIntegrityProof, Note, OrderedCollection, Person, traverseCollection } from "@fedify/vocab";
 import { FetchError, encodeMultibase, exportDidKey } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/portable-collection.test.mjs

@@ -7,11 +7,11 @@ import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject } from "../proof-MFz2960e.mjs";
+import { a as signObject } from "../proof-B-iLzyva.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-BW7-tHAG.mjs";
-import { t as verifyPortableObject } from "../portable-collection-Ct99JsBe.mjs";
-import { s as verifyServedPortableObjects } from "../compound-proof-BP5SOdXv.mjs";
+import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-DoAk0Q3s.mjs";
+import { t as verifyPortableObject } from "../portable-collection-SqxusPj7.mjs";
+import { s as verifyServedPortableObjects } from "../compound-proof-B647GUyL.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Create, Note, Object as Object$1, OrderedCollection, PUBLIC_COLLECTION, Person, Tombstone, lookupObject, traverseCollection } from "@fedify/vocab";

package/dist/federation/portable-delivery.test.mjs

@@ -4,8 +4,8 @@ globalThis.addEventListener = () => {};
 import { t as esm_default } from "../esm-BHXXx4Wx.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { i as rsaPrivateKey2, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl, r as InboxContextImpl } from "../middleware-BW7-tHAG.mjs";
-import { n as extractInboxes, t as SendActivityError } from "../send-Duj8xys1.mjs";
+import { n as FederationImpl, r as InboxContextImpl } from "../middleware-DoAk0Q3s.mjs";
+import { n as extractInboxes, t as SendActivityError } from "../send-D0nNms3Q.mjs";
 import { Create, Endpoints, Note, Person } from "@fedify/vocab";
 import { parseIri } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/portable-gateway-keys.test.mjs

@@ -8,11 +8,11 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { r as getVerifiedKeyOwnerEvidence } from "../key-owner-evidence-APB6NpSk.mjs";
-import { p as signJsonLd } from "../ld-DBBVabBC.mjs";
-import { f as verifyRequest, l as signRequest, p as verifyRequestDetailed } from "../http--IGUT1mg.mjs";
+import { p as signJsonLd } from "../ld-CHYUee-s.mjs";
+import { f as verifyRequest, l as signRequest, p as verifyRequestDetailed } from "../http-DysQjjJe.mjs";
 import { a as rsaPrivateKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { f as handleInbox, n as FederationImpl, o as createFederation } from "../middleware-BW7-tHAG.mjs";
-import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-BW5VsXG3.mjs";
+import { f as handleInbox, n as FederationImpl, o as createFederation } from "../middleware-DoAk0Q3s.mjs";
+import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-BP_ouAvi.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as KvKeyCache } from "../keycache-Da8A8mZa.mjs";
 import { Create, CryptographicKey, Person } from "@fedify/vocab";

package/dist/federation/portable-inbox.test.mjs

@@ -8,11 +8,11 @@ import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { p as signJsonLd } from "../ld-DBBVabBC.mjs";
-import { a as signObject } from "../proof-MFz2960e.mjs";
-import { l as signRequest, p as verifyRequestDetailed } from "../http--IGUT1mg.mjs";
+import { p as signJsonLd } from "../ld-CHYUee-s.mjs";
+import { a as signObject } from "../proof-B-iLzyva.mjs";
+import { l as signRequest, p as verifyRequestDetailed } from "../http-DysQjjJe.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { _ as coversDelivery, o as createFederation, v as forwardPortableInboxActivity, y as resolvePortableInboxForwardingOptions } from "../middleware-BW7-tHAG.mjs";
+import { _ as coversDelivery, o as createFederation, v as forwardPortableInboxActivity, y as resolvePortableInboxForwardingOptions } from "../middleware-DoAk0Q3s.mjs";
 import { Create, CryptographicKey, Follow, Note, Person, Tombstone } from "@fedify/vocab";
 import { exportDidKey, formatIri, parseIri } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/portable-parse-uri.test.mjs

@@ -7,7 +7,7 @@ import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-BW7-tHAG.mjs";
+import { o as createFederation } from "../middleware-DoAk0Q3s.mjs";
 import { Note, Object as Object$1, Person } from "@fedify/vocab";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";
 import { test } from "@fedify/fixture";

package/dist/federation/portable-route-activity.test.mjs

@@ -6,9 +6,9 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject } from "../proof-MFz2960e.mjs";
+import { a as signObject } from "../proof-B-iLzyva.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-BW7-tHAG.mjs";
+import { o as createFederation } from "../middleware-DoAk0Q3s.mjs";
 import { Create, Note } from "@fedify/vocab";
 import { exportDidKey, formatIri, parseIri, toCompatibleEf61Id } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/portable.test.mjs

@@ -8,10 +8,10 @@ import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject, c as verifyPortableObjectProof } from "../proof-MFz2960e.mjs";
-import { l as signRequest } from "../http--IGUT1mg.mjs";
+import { a as signObject, c as verifyPortableObjectProof } from "../proof-B-iLzyva.mjs";
+import { l as signRequest } from "../http-DysQjjJe.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-BW7-tHAG.mjs";
+import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-DoAk0Q3s.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Collection, Create, Note, Object as Object$1, PUBLIC_COLLECTION, Person, Tombstone, lookupObject } from "@fedify/vocab";
 import { exportDidKey, formatIri, parseIri, toCompatibleEf61Id } from "@fedify/vocab-runtime";
@@ -865,6 +865,83 @@ async function captureWarnings(run) {
 	}
 	return records.filter((record) => record.category[0] === "fedify");
 }
+test("object responses warn about compatible IDs off the owner's first gateway", async () => {
+	const federation = createTestFederation();
+	const ownerId = parseIri(`ap://${did}/users/alice`);
+	const gateways = [new URL("https://primary.example"), new URL("https://secondary.example")];
+	const secondary = await sign(new Note({
+		id: toCompatibleEf61Id(parseIri(`ap://${did}/notes/secondary`), gateways[1]),
+		attribution: ownerId,
+		to: PUBLIC_COLLECTION,
+		content: "Hello"
+	}));
+	let actorCalls = 0;
+	let actorLookupFails = false;
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => {
+		actorCalls++;
+		if (actorLookupFails) throw new Error("Actor storage unavailable");
+		return identifier === "alice" ? new Person({
+			id: ownerId,
+			gateways
+		}) : null;
+	});
+	federation.setObjectDispatcher(Note, "/notes/{id}", async (_ctx, values) => {
+		if (values.id === "secondary") return secondary;
+		const note = new Note({
+			id: values.id === "portable" ? parseIri(`ap://${did}/notes/portable`) : values.id === "ordinary" ? new URL("https://example.com/notes/ordinary") : toCompatibleEf61Id(parseIri(`ap://${did}/notes/${values.id}`), values.id === "secondary" || values.id === "retained" ? gateways[1] : gateways[0]),
+			attribution: ownerId,
+			to: PUBLIC_COLLECTION,
+			content: "Hello"
+		});
+		if (values.id === "retained") {
+			const raw = await (await sign(note)).toJsonLd({
+				format: "compact",
+				contextLoader: mockDocumentLoader
+			});
+			const parsed = await Note.fromJsonLd(raw, {
+				contextLoader: mockDocumentLoader,
+				documentLoader: mockDocumentLoader
+			});
+			parsed.id.hostname = "primary.example";
+			return parsed;
+		}
+		return note;
+	});
+	federation.setObjectDispatcher(Create, "/activities/{id}", (_ctx, values) => new Create({
+		id: toCompatibleEf61Id(parseIri(`ap://${did}/activities/${values.id}`), gateways[1]),
+		actor: ownerId
+	}));
+	for (const [id, expected] of [
+		["secondary", 1],
+		["retained", 1],
+		["primary", 0],
+		["portable", 0],
+		["ordinary", 0]
+	]) assertEquals((await captureWarnings(async () => {
+		const response = await federation.fetch(new Request(`https://example.com/notes/${id}`, { headers: { Accept: ACCEPT } }), { contextData: void 0 });
+		assertEquals(response.status, 200);
+		const body = await response.json();
+		assertEquals(body.type, "Note");
+		if (id === "retained") assertEquals(body.id, `https://secondary.example/.well-known/apgateway/${did}/notes/retained`);
+	})).filter((r) => r.properties.kind === "object").length, expected, id);
+	assertEquals((await captureWarnings(async () => {
+		assertEquals((await federation.fetch(new Request("https://example.com/activities/1", { headers: { Accept: ACCEPT } }), { contextData: void 0 })).status, 200);
+	})).filter((r) => r.properties.kind === "activity").length, 1);
+	for (const id of ["secondary", "retained"]) assertEquals((await captureWarnings(async () => {
+		assertEquals((await federation.fetch(gatewayRequest(`/notes/${id}`), { contextData: void 0 })).status, 200);
+	})).filter((r) => r.properties.kind === "object").length, 1);
+	actorLookupFails = true;
+	const expectedBody = await secondary.toJsonLd({
+		format: "compact",
+		contextLoader: mockDocumentLoader
+	});
+	for (const request of [new Request("https://example.com/notes/secondary", { headers: { Accept: ACCEPT } }), gatewayRequest("/notes/secondary")]) assertEquals((await captureWarnings(async () => {
+		const response = await federation.fetch(request, { contextData: void 0 });
+		assertEquals(response.status, 200);
+		assertEquals(await response.json(), expectedBody);
+	})).filter((r) => r.properties.kind != null), []);
+	assertEquals(actorCalls, 8);
+});
 test("Federation.fetch() serves compatible-ID actors", async (t) => {
 	const federation = createTestFederation();
 	const actorGateways = {

package/dist/federation/send.test.mjs

@@ -10,10 +10,10 @@ import { t as assertNotEquals } from "../assert_not_equals-CpPK2t89.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { f as verifyRequest } from "../http--IGUT1mg.mjs";
+import { f as verifyRequest } from "../http-DysQjjJe.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { t as doesActorOwnKey } from "../owner-BW5VsXG3.mjs";
-import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-Duj8xys1.mjs";
+import { t as doesActorOwnKey } from "../owner-BP_ouAvi.mjs";
+import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-D0nNms3Q.mjs";
 import { Activity, Application, Endpoints, Group, Person, Service } from "@fedify/vocab";
 import { FetchError, UrlError } from "@fedify/vocab-runtime";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/tasks/enqueue.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
 import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-IG3pHfvZ.mjs";
 import "../../testing-t8xDeJZ5.mjs";
-import { o as createFederation } from "../../middleware-BW7-tHAG.mjs";
+import { o as createFederation } from "../../middleware-DoAk0Q3s.mjs";
 import { n as ParallelMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { delay } from "es-toolkit";

package/dist/federation/tasks/tasks.test.mjs

@@ -4,8 +4,8 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
 import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-IG3pHfvZ.mjs";
 import "../../testing-t8xDeJZ5.mjs";
-import { o as createFederation } from "../../middleware-BW7-tHAG.mjs";
-import { r as createFederationBuilder } from "../../builder-CKAVFvcH.mjs";
+import { o as createFederation } from "../../middleware-DoAk0Q3s.mjs";
+import { r as createFederationBuilder } from "../../builder-Wx64uCV2.mjs";
 import { t as TaskCodec } from "../../codec-C6rTrpIp.mjs";
 import { t as InProcessMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { W3CTraceContextPropagator } from "@opentelemetry/core";

package/dist/federation/temporal.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { t as hasMalformedKnownTemporalLiteral } from "../temporal-CVcPKB1N.mjs";
+import { t as hasMalformedKnownTemporalLiteral } from "../temporal-39Ixir8d.mjs";
 import { test } from "@fedify/fixture";
 //#region src/federation/temporal.test.ts
 test("hasMalformedKnownTemporalLiteral() detects expanded proof timestamps", async () => {

package/dist/federation/webfinger.test.mjs

@@ -6,7 +6,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertNotEquals } from "../assert_not_equals-CpPK2t89.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { o as createFederation, s as handleWebFinger } from "../middleware-BW7-tHAG.mjs";
+import { o as createFederation, s as handleWebFinger } from "../middleware-DoAk0Q3s.mjs";
 import { Image, Link, Person, Tombstone } from "@fedify/vocab";
 import { parseIri } from "@fedify/vocab-runtime";
 import { createTestMeterProvider, test } from "@fedify/fixture";