@fedify/fedify 2.4.0-dev.2219 → 2.4.0-dev.2228

package/dist/federation/portable.test.mjs

@@ -8,10 +8,10 @@ import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject, c as verifyPortableObjectProof } from "../proof-z6Prgi5I.mjs";
-import { l as signRequest } from "../http-D-DpP4sd.mjs";
+import { a as signObject, c as verifyPortableObjectProof } from "../proof-B-iLzyva.mjs";
+import { l as signRequest } from "../http-DysQjjJe.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-C2_LcbL3.mjs";
+import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-DoAk0Q3s.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Collection, Create, Note, Object as Object$1, PUBLIC_COLLECTION, Person, Tombstone, lookupObject } from "@fedify/vocab";
 import { exportDidKey, formatIri, parseIri, toCompatibleEf61Id } from "@fedify/vocab-runtime";
@@ -865,6 +865,83 @@ async function captureWarnings(run) {
 	}
 	return records.filter((record) => record.category[0] === "fedify");
 }
+test("object responses warn about compatible IDs off the owner's first gateway", async () => {
+	const federation = createTestFederation();
+	const ownerId = parseIri(`ap://${did}/users/alice`);
+	const gateways = [new URL("https://primary.example"), new URL("https://secondary.example")];
+	const secondary = await sign(new Note({
+		id: toCompatibleEf61Id(parseIri(`ap://${did}/notes/secondary`), gateways[1]),
+		attribution: ownerId,
+		to: PUBLIC_COLLECTION,
+		content: "Hello"
+	}));
+	let actorCalls = 0;
+	let actorLookupFails = false;
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => {
+		actorCalls++;
+		if (actorLookupFails) throw new Error("Actor storage unavailable");
+		return identifier === "alice" ? new Person({
+			id: ownerId,
+			gateways
+		}) : null;
+	});
+	federation.setObjectDispatcher(Note, "/notes/{id}", async (_ctx, values) => {
+		if (values.id === "secondary") return secondary;
+		const note = new Note({
+			id: values.id === "portable" ? parseIri(`ap://${did}/notes/portable`) : values.id === "ordinary" ? new URL("https://example.com/notes/ordinary") : toCompatibleEf61Id(parseIri(`ap://${did}/notes/${values.id}`), values.id === "secondary" || values.id === "retained" ? gateways[1] : gateways[0]),
+			attribution: ownerId,
+			to: PUBLIC_COLLECTION,
+			content: "Hello"
+		});
+		if (values.id === "retained") {
+			const raw = await (await sign(note)).toJsonLd({
+				format: "compact",
+				contextLoader: mockDocumentLoader
+			});
+			const parsed = await Note.fromJsonLd(raw, {
+				contextLoader: mockDocumentLoader,
+				documentLoader: mockDocumentLoader
+			});
+			parsed.id.hostname = "primary.example";
+			return parsed;
+		}
+		return note;
+	});
+	federation.setObjectDispatcher(Create, "/activities/{id}", (_ctx, values) => new Create({
+		id: toCompatibleEf61Id(parseIri(`ap://${did}/activities/${values.id}`), gateways[1]),
+		actor: ownerId
+	}));
+	for (const [id, expected] of [
+		["secondary", 1],
+		["retained", 1],
+		["primary", 0],
+		["portable", 0],
+		["ordinary", 0]
+	]) assertEquals((await captureWarnings(async () => {
+		const response = await federation.fetch(new Request(`https://example.com/notes/${id}`, { headers: { Accept: ACCEPT } }), { contextData: void 0 });
+		assertEquals(response.status, 200);
+		const body = await response.json();
+		assertEquals(body.type, "Note");
+		if (id === "retained") assertEquals(body.id, `https://secondary.example/.well-known/apgateway/${did}/notes/retained`);
+	})).filter((r) => r.properties.kind === "object").length, expected, id);
+	assertEquals((await captureWarnings(async () => {
+		assertEquals((await federation.fetch(new Request("https://example.com/activities/1", { headers: { Accept: ACCEPT } }), { contextData: void 0 })).status, 200);
+	})).filter((r) => r.properties.kind === "activity").length, 1);
+	for (const id of ["secondary", "retained"]) assertEquals((await captureWarnings(async () => {
+		assertEquals((await federation.fetch(gatewayRequest(`/notes/${id}`), { contextData: void 0 })).status, 200);
+	})).filter((r) => r.properties.kind === "object").length, 1);
+	actorLookupFails = true;
+	const expectedBody = await secondary.toJsonLd({
+		format: "compact",
+		contextLoader: mockDocumentLoader
+	});
+	for (const request of [new Request("https://example.com/notes/secondary", { headers: { Accept: ACCEPT } }), gatewayRequest("/notes/secondary")]) assertEquals((await captureWarnings(async () => {
+		const response = await federation.fetch(request, { contextData: void 0 });
+		assertEquals(response.status, 200);
+		assertEquals(await response.json(), expectedBody);
+	})).filter((r) => r.properties.kind != null), []);
+	assertEquals(actorCalls, 8);
+});
 test("Federation.fetch() serves compatible-ID actors", async (t) => {
 	const federation = createTestFederation();
 	const actorGateways = {

package/dist/federation/send.test.mjs

@@ -10,10 +10,10 @@ import { t as assertNotEquals } from "../assert_not_equals-CpPK2t89.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { f as verifyRequest } from "../http-D-DpP4sd.mjs";
+import { f as verifyRequest } from "../http-DysQjjJe.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { t as doesActorOwnKey } from "../owner-D_BDPwm2.mjs";
-import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-Cw545L_2.mjs";
+import { t as doesActorOwnKey } from "../owner-BP_ouAvi.mjs";
+import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-D0nNms3Q.mjs";
 import { Activity, Application, Endpoints, Group, Person, Service } from "@fedify/vocab";
 import { FetchError, UrlError } from "@fedify/vocab-runtime";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/tasks/enqueue.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
 import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-IG3pHfvZ.mjs";
 import "../../testing-t8xDeJZ5.mjs";
-import { o as createFederation } from "../../middleware-C2_LcbL3.mjs";
+import { o as createFederation } from "../../middleware-DoAk0Q3s.mjs";
 import { n as ParallelMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { delay } from "es-toolkit";

package/dist/federation/tasks/tasks.test.mjs

@@ -4,8 +4,8 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
 import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-IG3pHfvZ.mjs";
 import "../../testing-t8xDeJZ5.mjs";
-import { o as createFederation } from "../../middleware-C2_LcbL3.mjs";
-import { r as createFederationBuilder } from "../../builder-C5rYBZ16.mjs";
+import { o as createFederation } from "../../middleware-DoAk0Q3s.mjs";
+import { r as createFederationBuilder } from "../../builder-Wx64uCV2.mjs";
 import { t as TaskCodec } from "../../codec-C6rTrpIp.mjs";
 import { t as InProcessMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { W3CTraceContextPropagator } from "@opentelemetry/core";

package/dist/federation/temporal.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { t as hasMalformedKnownTemporalLiteral } from "../temporal-Cy-8WCod.mjs";
+import { t as hasMalformedKnownTemporalLiteral } from "../temporal-39Ixir8d.mjs";
 import { test } from "@fedify/fixture";
 //#region src/federation/temporal.test.ts
 test("hasMalformedKnownTemporalLiteral() detects expanded proof timestamps", async () => {

package/dist/federation/webfinger.test.mjs

@@ -6,7 +6,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertNotEquals } from "../assert_not_equals-CpPK2t89.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { o as createFederation, s as handleWebFinger } from "../middleware-C2_LcbL3.mjs";
+import { o as createFederation, s as handleWebFinger } from "../middleware-DoAk0Q3s.mjs";
 import { Image, Link, Person, Tombstone } from "@fedify/vocab";
 import { parseIri } from "@fedify/vocab-runtime";
 import { createTestMeterProvider, test } from "@fedify/fixture";

package/dist/{federation-DC1yfb-8.cjs → federation-DiycMKQx.cjs}

@@ -1,10 +1,10 @@
 const { URLPattern } = require("urlpattern-polyfill");
 const require_rolldown_runtime = require("./rolldown-runtime-Dmm3t92W.cjs");
 const require_transformers = require("./transformers-BalCrSsr.cjs");
-const require_http = require("./http-Cuk0w0rp.cjs");
+const require_http = require("./http-DC5DyShJ.cjs");
 const require_types = require("./types-poIao40f.cjs");
-const require_portable_collection = require("./portable-collection-DwJ8YJP2.cjs");
-const require_kv_cache = require("./kv-cache-BmLTVLXc.cjs");
+const require_portable_collection = require("./portable-collection-Cz9K1Tas.cjs");
+const require_kv_cache = require("./kv-cache-CsNDrjVT.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _fedify_uri_template = require("@fedify/uri-template");
 let _fedify_vocab = require("@fedify/vocab");
@@ -1457,7 +1457,7 @@ const textEncoder = new TextEncoder();
 function isPortableIdValue(value) {
 	return typeof value === "string" && require_http.isPortableId(value);
 }
-function isJsonMap(value) {
+function isJsonMap$1(value) {
 	return typeof value === "object" && value != null && !Array.isArray(value);
 }
 function isCompoundProofJsonObject(value) {
@@ -1523,7 +1523,7 @@ function addBytes(statistics, bytes, limits, path) {
 	if (statistics.byteLength > limits.maxBytes) return limitExceeded("bytes", limits.maxBytes, statistics.byteLength, path);
 }
 function inspectJsonTree(root, limits) {
-	if (!isJsonMap(root)) return {
+	if (!isJsonMap$1(root)) return {
 		status: "unsupported",
 		reason: {
 			type: "invalidJsonTree",
@@ -1586,7 +1586,7 @@ function inspectJsonTree(root, limits) {
 				insideProof: current.insideProof,
 				insideContext: current.insideContext
 			});
-		} else if (isJsonMap(value)) {
+		} else if (isJsonMap$1(value)) {
 			const prototype = Object.getPrototypeOf(value);
 			if (seen.has(value) || !hasOnlyDataProperties(value) || prototype !== Object.prototype && prototype !== null) return {
 				status: "unsupported",
@@ -1607,7 +1607,7 @@ function inspectJsonTree(root, limits) {
 			if (hasDirectProof) {
 				statistics.proofCount++;
 				if (statistics.proofCount > limits.maxProofs) return limitExceeded("proofs", limits.maxProofs, statistics.proofCount, childPath(current.path, "proof"));
-				if (!isJsonMap(value.proof)) return {
+				if (!isJsonMap$1(value.proof)) return {
 					status: "unsupported",
 					reason: {
 						type: "unsupportedProofShape",
@@ -1782,7 +1782,7 @@ function inspectCompoundPortableObjectApplicability(json, limits) {
 				iterator: value.values(),
 				depth: frame.depth + 1
 			});
-		} else if (isJsonMap(value)) {
+		} else if (isJsonMap$1(value)) {
 			mapCount++;
 			if (mapCount > limits.maxMaps) return "indeterminate";
 			if ([value.id, value["@id"]].some(isPortableIdValue)) return "present";
@@ -1878,7 +1878,7 @@ function containsCompoundPortableObject(json) {
 * @internal
 */
 function findUnsupportedCompoundProofShape(json) {
-	return findInJsonMaps(json, (map, path) => Object.hasOwn(map, "proof") && !isJsonMap(map.proof) ? childPath(path, "proof") : void 0) ?? null;
+	return findInJsonMaps(json, (map, path) => Object.hasOwn(map, "proof") && !isJsonMap$1(map.proof) ? childPath(path, "proof") : void 0) ?? null;
 }
 /**
 * Discovers direct literal proof-bearing maps in an immutable JSON snapshot.
@@ -2080,13 +2080,13 @@ async function isEmbeddedPortableKey(parent, member, key, parentId) {
 	}
 	if (expanded.length !== 1 || hasGraphKeyword(expanded)) return false;
 	const node = expanded[0];
-	if (!isJsonMap(node) || typeof node["@id"] !== "string" || getCanonicalPortableIdOf(node["@id"]) !== parentPortableId) return false;
+	if (!isJsonMap$1(node) || typeof node["@id"] !== "string" || getCanonicalPortableIdOf(node["@id"]) !== parentPortableId) return false;
 	const properties = Object.keys(node).filter((property) => property !== "@id" && property !== "@type");
 	if (properties.length !== 1 || properties[0] !== `${SECURITY}${member}`) return false;
 	const values = node[properties[0]];
 	if (!Array.isArray(values) || values.length !== 1) return false;
 	const expandedKey = values[0];
-	if (!isJsonMap(expandedKey) || expandedKey["@id"] !== literalIds[0] || Object.keys(expandedKey).some((property) => !KEY_PROPERTIES.has(property))) return false;
+	if (!isJsonMap$1(expandedKey) || expandedKey["@id"] !== literalIds[0] || Object.keys(expandedKey).some((property) => !KEY_PROPERTIES.has(property))) return false;
 	const types = expandedKey["@type"];
 	if (types !== void 0 && (!Array.isArray(types) || types.some((type) => typeof type !== "string" || !KEY_TYPES.has(type)))) return false;
 	const pem = expandedKey[`${SECURITY}publicKeyPem`];
@@ -2097,7 +2097,7 @@ async function isEmbeddedPortableKey(parent, member, key, parentId) {
 	for (const property of [`${SECURITY}owner`, `${SECURITY}controller`]) {
 		const owners = expandedKey[property];
 		if (owners === void 0) continue;
-		if (!Array.isArray(owners) || owners.length !== 1 || !isJsonMap(owners[0]) || Object.keys(owners[0]).length !== 1 || typeof owners[0]["@id"] !== "string" || getCanonicalPortableIdOf(owners[0]["@id"]) !== parentPortableId) return false;
+		if (!Array.isArray(owners) || owners.length !== 1 || !isJsonMap$1(owners[0]) || Object.keys(owners[0]).length !== 1 || typeof owners[0]["@id"] !== "string" || getCanonicalPortableIdOf(owners[0]["@id"]) !== parentPortableId) return false;
 	}
 	return true;
 }
@@ -2140,7 +2140,7 @@ function isSimpleContext(context) {
 }
 function hasGraphKeyword(value) {
 	if (Array.isArray(value)) return value.some(hasGraphKeyword);
-	if (!isJsonMap(value)) return false;
+	if (!isJsonMap$1(value)) return false;
 	return Object.entries(value).some(([key, child]) => key === "@graph" || key === "@included" || key === "@reverse" || hasGraphKeyword(child));
 }
 /**
@@ -2150,7 +2150,7 @@ function hasGraphKeyword(value) {
 function isSingleStringValue(values, datatype) {
 	if (!Array.isArray(values) || values.length !== 1) return false;
 	const value = values[0];
-	if (!isJsonMap(value) || typeof value["@value"] !== "string") return false;
+	if (!isJsonMap$1(value) || typeof value["@value"] !== "string") return false;
 	const keys = Object.keys(value);
 	return keys.length === 1 || datatype != null && keys.length === 2 && value["@type"] === datatype;
 }
@@ -2205,7 +2205,7 @@ async function verifyServedPortableObjects(json, options = {}) {
 	const maps = collected.maps;
 	const discovered = /* @__PURE__ */ new Map();
 	const ids = maps.map((candidate) => candidate.id);
-	const rootId = isJsonMap(json) ? [json.id, json["@id"]].find(isPortableIdValue) : void 0;
+	const rootId = isJsonMap$1(json) ? [json.id, json["@id"]].find(isPortableIdValue) : void 0;
 	if (rootId != null) ids.push(rootId);
 	for (const id of ids) discovered.set(id, (discovered.get(id) ?? 0) + 1);
 	let hidden;
@@ -2250,7 +2250,7 @@ function findHiddenPortableObject(expanded, discovered) {
 			pending.push(...value);
 			continue;
 		}
-		if (!isJsonMap(value)) continue;
+		if (!isJsonMap$1(value)) continue;
 		const id = value["@id"];
 		if (isPortableIdValue(id) && Object.keys(value).some((key) => key !== "@id")) {
 			const count = remaining.get(id) ?? 0;
@@ -2341,7 +2341,7 @@ function collectServedPortableMaps(json) {
 }
 async function checkServedPortableMap({ map, contexts }, options) {
 	if (Object.hasOwn(map, "proof")) {
-		if (!isJsonMap(map.proof)) return "unsupportedProofShape";
+		if (!isJsonMap$1(map.proof)) return "unsupportedProofShape";
 		if (!Object.hasOwn(map, "@context")) return "missingContext";
 		try {
 			const policy = await require_http.verifyPortableObjectProofPolicy(map, await require_http.verifyMapLocalProof(map, options), options);
@@ -2362,11 +2362,185 @@ async function checkServedPortableMap({ map, contexts }, options) {
 	} catch {
 		return "unsupportedContext";
 	}
-	if (expanded.length !== 1 || !isJsonMap(expanded[0])) return "invalidPortableObject";
+	if (expanded.length !== 1 || !isJsonMap$1(expanded[0])) return "invalidPortableObject";
 	const type = require_http.classifyFep2277CoreType(expanded[0]);
 	return UNSECURED_CORE_TYPES.has(type) ? null : "missingProof";
 }
 //#endregion
+//#region src/federation/compatible-id-warning.ts
+/** Returns a verified first gateway, without dereferencing the actor. */
+async function getLocalFirstGateway(context, ownerId, did) {
+	try {
+		const parsed = context.parseUri(ownerId, { portable: true });
+		if (parsed?.type !== "actor" || parsed.authority !== did) return null;
+		return firstGateway(await context.getActor(parsed.identifier), did);
+	} catch (error) {
+		(0, _logtape_logtape.getLogger)([
+			"fedify",
+			"federation",
+			"object"
+		]).debug("Could not check the first gateway of {ownerId}: {error}", {
+			ownerId: ownerId.href,
+			error
+		});
+		return null;
+	}
+}
+function firstGateway(actor, did) {
+	if (actor?.id == null || require_http.getPortableDid(actor.id) !== did) return null;
+	const gateway = actor.gateway;
+	return gateway != null && (0, _fedify_vocab_runtime.isGatewayUrl)(gateway) ? gateway : null;
+}
+/** Looks for an actor already embedded in the document being published. */
+function getEmbeddedFirstGateway(json, ownerId, did) {
+	const owner = require_http.getCanonicalPortableId(ownerId);
+	if (owner == null) return null;
+	return visitJsonMaps(json, (map) => {
+		const id = parseMapId(map, isJsonMap(json) ? json : null);
+		if (id == null || require_http.getCanonicalPortableId(id) !== owner) return;
+		const gateways = map.gateways ?? map["https://w3id.org/fep/ef61/gateways"];
+		const first = Array.isArray(gateways) ? gateways[0] : isJsonMap(gateways) && Array.isArray(gateways["@list"]) ? gateways["@list"][0] : null;
+		const address = typeof first === "string" ? first : isJsonMap(first) ? first.id ?? first["@id"] : null;
+		if (typeof address !== "string") return;
+		try {
+			const gateway = new URL(address);
+			if (require_http.getPortableDid(id) === did && (0, _fedify_vocab_runtime.isGatewayUrl)(gateway)) return gateway;
+		} catch (error) {
+			if (!(error instanceof TypeError)) throw error;
+		}
+	}) ?? null;
+}
+function isJsonMap(value) {
+	return value != null && typeof value === "object" && !Array.isArray(value);
+}
+/** Warns only when the publisher's actual first gateway is known. */
+function warnCompatibleId(id, did, gateway, kind) {
+	if (!(0, _fedify_vocab_runtime_internal_portable_dereference.isCompatibleEf61Iri)(id) || require_http.getPortableDid(id) !== did || id.origin === gateway.origin) return;
+	(0, _logtape_logtape.getLogger)([
+		"fedify",
+		"federation",
+		kind === "activity" ? "outbox" : "object"
+	]).warn("The {kind} {id} has an FEP-ef61 compatible identifier on another gateway than its owner's first gateway, {gateway}.  FEP-ef61 requires publishers to use the first gateway in the actor's gateways.", {
+		kind,
+		id: id.href,
+		gateway: gateway.origin
+	});
+}
+/** Reads the root ID without dereferencing or expanding the document. */
+function getCompactRootId(json) {
+	return isJsonMap(json) ? parseMapId(json, json) : null;
+}
+/** Checks an activity and its embedded objects against each one's owner. */
+async function warnCompatibleIdsInJson(json, context) {
+	const root = isJsonMap(json) ? json : null;
+	const rootOwners = root == null ? [] : ownerIds(root, "actor", root);
+	const gateways = /* @__PURE__ */ new Map();
+	const maps = [];
+	visitJsonMaps(json, (map, path) => {
+		maps.push({
+			map,
+			path
+		});
+	});
+	for (const { map, path } of maps) {
+		const id = parseMapId(map, root);
+		if (id == null || !(0, _fedify_vocab_runtime_internal_portable_dereference.isCompatibleEf61Iri)(id)) continue;
+		const type = map.type ?? map["@type"];
+		if ((Array.isArray(type) ? type : [type]).some((t) => typeof t === "string" && /(?:^|[#/:])(CryptographicKey|Multikey|JsonWebKey|Key)$/.test(t))) continue;
+		const did = require_http.getPortableDid(id);
+		if (did == null) continue;
+		const owners = path === "" ? rootOwners : [
+			...ownerIds(map, "actor", root),
+			...ownerIds(map, "attributedTo", root),
+			...rootOwners
+		];
+		for (const ownerId of owners) {
+			if (require_http.getPortableDid(ownerId) !== did) continue;
+			const key = require_http.getCanonicalPortableId(ownerId);
+			if (key == null) continue;
+			let gateway = gateways.get(key);
+			if (gateway === void 0) {
+				gateway = getEmbeddedFirstGateway(json, ownerId, did) ?? (context == null ? null : await getLocalFirstGateway(context, ownerId, did));
+				gateways.set(key, gateway);
+			}
+			if (gateway != null) {
+				warnCompatibleId(id, did, gateway, path === "" ? "activity" : "object");
+				break;
+			}
+		}
+	}
+}
+function ownerIds(map, term, root) {
+	const iri = `https://www.w3.org/ns/activitystreams#${term}`;
+	const values = [map[term], map[iri]];
+	for (const context of [map["@context"], root?.["@context"]]) for (const [alias, definition] of localContextEntries(context)) {
+		const mapped = typeof definition === "string" ? definition : isJsonMap(definition) ? definition["@id"] : null;
+		if (mapped === iri || mapped === `as:${term}`) values.push(map[alias]);
+	}
+	return values.flatMap((value) => parseOwnerIds(value, root));
+}
+function localContextEntries(context) {
+	if (Array.isArray(context)) return context.flatMap(localContextEntries);
+	return isJsonMap(context) ? Object.entries(context) : [];
+}
+function parseOwnerIds(value, root) {
+	if (Array.isArray(value)) return value.flatMap((item) => parseOwnerIds(item, root));
+	if (isJsonMap(value)) {
+		const id = parseMapId(value, root);
+		return id == null ? [] : [id];
+	}
+	if (typeof value !== "string") return [];
+	try {
+		return [(0, _fedify_vocab_runtime.parseIri)(value)];
+	} catch (error) {
+		if (error instanceof TypeError) return [];
+		throw error;
+	}
+}
+function parseMapId(map, root) {
+	let raw = map["@id"] ?? map.id;
+	for (const context of [map["@context"], root?.["@context"]]) for (const [alias, definition] of localContextEntries(context)) if ((typeof definition === "string" ? definition : isJsonMap(definition) ? definition["@id"] : null) === "@id" && typeof map[alias] === "string") {
+		raw = map[alias];
+		break;
+	}
+	if (typeof raw !== "string") return null;
+	try {
+		return (0, _fedify_vocab_runtime.parseIri)(raw);
+	} catch (error) {
+		if (error instanceof TypeError) return null;
+		throw error;
+	}
+}
+function visitJsonMaps(json, visit) {
+	const seen = /* @__PURE__ */ new Set();
+	const pending = [{
+		value: json,
+		path: ""
+	}];
+	while (pending.length > 0) {
+		const { value, path } = pending.pop();
+		if (value == null || typeof value !== "object" || seen.has(value)) continue;
+		seen.add(value);
+		if (Array.isArray(value)) {
+			for (let i = value.length - 1; i >= 0; i--) pending.push({
+				value: value[i],
+				path: `${path}/${i}`
+			});
+			continue;
+		}
+		const map = value;
+		const result = visit(map, path);
+		if (result !== void 0) return result;
+		for (const key of Object.keys(map).reverse()) {
+			if (key === "proof" || key === "@context") continue;
+			pending.push({
+				value: map[key],
+				path: `${path}/${key}`
+			});
+		}
+	}
+}
+//#endregion
 //#region src/federation/audience.ts
 const AS_NAMESPACE = "https://www.w3.org/ns/activitystreams#";
 /**
@@ -4161,6 +4335,7 @@ async function handleObject(request, { values, context, objectDispatcher, author
 			Vary: "Accept"
 		}
 	});
+	await warnServedCompatibleObject(context, object, getCompactRootId(jsonLd));
 	return new Response(JSON.stringify(jsonLd), { headers: {
 		"Content-Type": "application/activity+json",
 		Vary: "Accept"
@@ -4264,6 +4439,7 @@ async function handlePortableObject(request, { values, context, objectDispatcher
 			return portableObjectInternalServerError(request);
 		}
 	}
+	if (!tombstone) await warnServedCompatibleObject(context, object, servedId);
 	const headers = new Headers({
 		"Content-Type": PORTABLE_OBJECT_CONTENT_TYPE,
 		Vary: "Accept"
@@ -4274,6 +4450,32 @@ async function handlePortableObject(request, { values, context, objectDispatcher
 		headers
 	});
 }
+async function warnServedCompatibleObject(context, object, serializedId) {
+	try {
+		if ((0, _fedify_vocab.isActor)(object)) return;
+		const id = typeof serializedId === "string" ? (0, _fedify_vocab_runtime.parseIri)(serializedId) : serializedId ?? object.id;
+		if (id == null || !(0, _fedify_vocab_runtime_internal_portable_dereference.isCompatibleEf61Iri)(id)) return;
+		const did = require_http.getPortableDid(id);
+		if (did == null) return;
+		const ownerIds = object instanceof _fedify_vocab.Activity ? object.actorIds : object.attributionIds;
+		for (const ownerId of ownerIds) {
+			if (require_http.getPortableDid(ownerId) !== did) continue;
+			const gateway = await getLocalFirstGateway(context, ownerId, did);
+			if (gateway == null) continue;
+			warnCompatibleId(id, did, gateway, object instanceof _fedify_vocab.Activity ? "activity" : "object");
+			break;
+		}
+	} catch (error) {
+		(0, _logtape_logtape.getLogger)([
+			"fedify",
+			"federation",
+			"object"
+		]).debug("Could not check the first gateway of {objectId}: {error}", {
+			objectId: object.id?.href,
+			error
+		});
+	}
+}
 function isRequestedPortableObject(object, canonicalId) {
 	return object.id != null && require_http.getCanonicalPortableId(object.id) === canonicalId;
 }
@@ -4377,13 +4579,13 @@ function recordCollectionMetrics(meterProvider, base, result, options = {}) {
 * @param parameters The parameters for handling the collection.
 * @returns A promise that resolves to an HTTP response.
 */
-async function handleCollection(request, { name: name$2, identifier, uriGetter, filter, filterPredicate, context, collectionCallbacks, portable, tracerProvider, meterProvider, onUnauthorized, onNotFound }) {
-	const spanName = name$2.trim().replace(/\s+/g, "_");
+async function handleCollection(request, { name: name$1, identifier, uriGetter, filter, filterPredicate, context, collectionCallbacks, portable, tracerProvider, meterProvider, onUnauthorized, onNotFound }) {
+	const spanName = name$1.trim().replace(/\s+/g, "_");
 	tracerProvider = tracerProvider ?? _opentelemetry_api.trace.getTracerProvider();
 	const tracer = tracerProvider.getTracer(require_http.name, require_http.version);
 	const cursor = new URL(request.url).searchParams.get("cursor");
 	const metricBase = {
-		kind: getCollectionMetricKind(name$2),
+		kind: getCollectionMetricKind(name$1),
 		page: cursor != null,
 		dispatcher: "built_in"
 	};
@@ -4429,7 +4631,7 @@ async function handleCollection(request, { name: name$2, identifier, uriGetter,
 							span.setStatus({ code: _opentelemetry_api.SpanStatusCode.ERROR });
 							return await onNotFound(request);
 						}
-						const items = filterCollectionItems(page.items, name$2, filterPredicate);
+						const items = filterCollectionItems(page.items, name$1, filterPredicate);
 						itemCount = items.length;
 						span.setAttribute("fedify.collection.items", itemCount);
 						return items;
@@ -4471,7 +4673,7 @@ async function handleCollection(request, { name: name$2, identifier, uriGetter,
 		} else {
 			const uri = new URL(portable == null ? baseUri : pageBase);
 			uri.searchParams.set("cursor", cursor);
-			const pageOrResponse = await tracer.startActiveSpan(`activitypub.dispatch_collection_page ${name$2}`, {
+			const pageOrResponse = await tracer.startActiveSpan(`activitypub.dispatch_collection_page ${name$1}`, {
 				kind: _opentelemetry_api.SpanKind.SERVER,
 				attributes: {
 					"activitypub.collection.id": uri.href,
@@ -4487,7 +4689,7 @@ async function handleCollection(request, { name: name$2, identifier, uriGetter,
 						span.setStatus({ code: _opentelemetry_api.SpanStatusCode.ERROR });
 						return await onNotFound(request);
 					}
-					const items = filterCollectionItems(page.items, name$2, filterPredicate);
+					const items = filterCollectionItems(page.items, name$1, filterPredicate);
 					itemCount = items.length;
 					span.setAttribute("fedify.collection.items", itemCount);
 					return {
@@ -5678,8 +5880,8 @@ var CustomCollectionHandler = class {
 	* @param CollectionPage The CollectionPage constructor.
 	* @param filterPredicate Optional filter predicate for items.
 	*/
-	constructor(name$1, values, context, callbacks, tracerProvider = _opentelemetry_api.trace.getTracerProvider(), meterProvider, Collection, CollectionPage, filterPredicate, portable) {
-		this.name = name$1;
+	constructor(name$2, values, context, callbacks, tracerProvider = _opentelemetry_api.trace.getTracerProvider(), meterProvider, Collection, CollectionPage, filterPredicate, portable) {
+		this.name = name$2;
 		this.values = values;
 		this.context = context;
 		this.callbacks = callbacks;
@@ -10603,17 +10805,26 @@ var ContextImpl = class ContextImpl {
 			activityId: activity.id?.href,
 			activity
 		});
+		const activityJsonLd = await activity.toJsonLd({
+			format: "compact",
+			contextLoader: this.contextLoader
+		});
+		try {
+			await warnCompatibleIdsInJson(activityJsonLd, this instanceof RequestContextImpl && !this.isInActorDispatcher() ? this : void 0);
+		} catch (error) {
+			logger.debug("Could not check the first gateway of activity {activityId}: {error}", {
+				activityId: activity.id?.href,
+				error
+			});
+		}
 		if (this.federation.fanoutQueue == null || options.immediate || options.fanout === "skip" || (options.fanout ?? "auto") === "auto" && globalThis.Object.keys(inboxes).length < FANOUT_THRESHOLD) {
 			await this.federation.sendActivity(keys, inboxes, activity, {
 				...opts,
+				activityJsonLd,
 				normalizeExistingProofs: proofCreated || options.normalizeExistingProofs
 			});
 			return true;
 		}
-		const activityJsonLd = await activity.toJsonLd({
-			format: "compact",
-			contextLoader: this.contextLoader
-		});
 		assertSupportedCompoundProofShape(activityJsonLd, activity.id?.href);
 		const keyJwkPairs = await Promise.all(keys.map(async ({ keyId, privateKey }) => ({
 			keyId: keyId.href,
@@ -10796,6 +11007,10 @@ var RequestContextImpl = class RequestContextImpl extends ContextImpl {
 	#invokedFromActorDispatcher;
 	#invokedFromObjectDispatcher;
 	request;
+	/** Whether a diagnostic actor lookup would re-enter the actor dispatcher. */
+	isInActorDispatcher() {
+		return this.#invokedFromActorDispatcher != null;
+	}
 	url = void 0;
 	portableRequest;
 	constructor(options) {

package/dist/{http-Dx7yMmfw.js → http-CHqz_Jp6.js}

@@ -14,7 +14,7 @@ import serialize from "json-canon";
 import { ATTR_HTTP_REQUEST_HEADER, ATTR_HTTP_REQUEST_METHOD, ATTR_URL_FULL } from "@opentelemetry/semantic-conventions";
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2219+eb70f060";
+var version = "2.4.0-dev.2228+6d017d55";
 //#endregion
 //#region src/sig/portable-key-id.ts
 const COMPATIBLE_KEY_ID_PATH_PATTERN = /^\/\.well-known\/apgateway\/did(?::|%3A)/i;

package/dist/{http-Cuk0w0rp.cjs → http-DC5DyShJ.cjs}

@@ -16,7 +16,7 @@ json_canon = require_rolldown_runtime.__toESM(json_canon, 1);
 let _opentelemetry_semantic_conventions = require("@opentelemetry/semantic-conventions");
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2219+eb70f060";
+var version = "2.4.0-dev.2228+6d017d55";
 //#endregion
 //#region src/sig/portable-key-id.ts
 const COMPATIBLE_KEY_ID_PATH_PATTERN = /^\/\.well-known\/apgateway\/did(?::|%3A)/i;

package/dist/{http-D-DpP4sd.mjs → http-DysQjjJe.mjs}

@@ -2,12 +2,12 @@ import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { m as parseKeyIdString } from "./portable-key-id-Ca30-hOa.mjs";
-import { n as version, t as name } from "./deno-Dj1TFhf4.mjs";
-import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-BnYleVpg.mjs";
+import { n as version, t as name } from "./deno-9flirCWb.mjs";
+import { n as getDurationMs, r as getFederationMetrics, s as measureSignatureKeyFetch } from "./metrics-X1lpKWRK.mjs";
 import { i as validateAcceptSignature, n as fulfillAcceptSignature, r as parseAcceptSignature } from "./accept-CPVqki78.mjs";
 import { a as promoteKeyOwnerEvidence } from "./key-owner-evidence-APB6NpSk.mjs";
-import { a as fetchKeyDetailed, c as validateCryptoKey, t as bypassKeyCacheReads } from "./key-Djyt1BFx.mjs";
-import { n as resolvePortableActorKey, r as verifyPortableGatewayKeyDocument } from "./portable-key-B880yVlC.mjs";
+import { a as fetchKeyDetailed, c as validateCryptoKey, t as bypassKeyCacheReads } from "./key-TtgqklZ1.mjs";
+import { n as resolvePortableActorKey, r as verifyPortableGatewayKeyDocument } from "./portable-key-DYr6MZUl.mjs";
 import { getLogger } from "@logtape/logtape";
 import { CryptographicKey } from "@fedify/vocab";
 import { SpanStatusCode, trace } from "@opentelemetry/api";