@fedify/fedify 2.4.0-dev.2219 → 2.4.0-dev.2233

package/dist/{builder-C5rYBZ16.mjs → builder-BmoDmjWk.mjs}

@@ -2,7 +2,7 @@ import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { i as getPortableDid, l as isPortableId, n as getCanonicalPortableId } from "./portable-key-id-Ca30-hOa.mjs";
-import { n as version, t as name } from "./deno-Dj1TFhf4.mjs";
+import { n as version, t as name } from "./deno-62DcBMwc.mjs";
 import { t as ActivityListenerSet } from "./activity-listener-C-BSbKI7.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Router, RouterError, assertPath } from "@fedify/uri-template";
@@ -90,7 +90,7 @@ var FederationBuilderImpl = class {
 	* specified.
 	*/
 	async build(options) {
-		const { FederationImpl } = await import("./middleware-Bh592bk8.mjs");
+		const { FederationImpl } = await import("./middleware-BWhRFmO0.mjs");
 		const f = new FederationImpl(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();

package/dist/compat/transformers.test.mjs

@@ -5,7 +5,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { E as autoIdAssigner, T as actorDehydrator, n as FederationImpl } from "../middleware-C2_LcbL3.mjs";
+import { O as actorDehydrator, k as autoIdAssigner, n as FederationImpl } from "../middleware-BhtaUtlt.mjs";
 import { Follow, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 //#region src/compat/transformers.test.ts

package/dist/{compound-proof-D0xY7MBs.mjs → compound-proof-Pn8766TV.mjs}

@@ -3,8 +3,8 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { a as getRawCanonicalPortableId, l as isPortableId, n as getCanonicalPortableId } from "./portable-key-id-Ca30-hOa.mjs";
 import { n as preloadedOnlyDocumentLoader } from "./public-audience--klBIOk1.mjs";
-import { c as getNormalizationContextLoader } from "./ld-CNVWdooi.mjs";
-import { l as verifyPortableObjectProofPolicy, n as classifyFep2277CoreType, o as verifyMapLocalProof } from "./proof-z6Prgi5I.mjs";
+import { c as getNormalizationContextLoader } from "./ld-BuI0RakW.mjs";
+import { l as verifyPortableObjectProofPolicy, n as classifyFep2277CoreType, o as verifyMapLocalProof } from "./proof-Bhsb_KYD.mjs";
 import { parseIri, preloadedContexts } from "@fedify/vocab-runtime";
 import jsonld from "@fedify/vocab-runtime/jsonld";
 //#region src/sig/compound-proof.ts

package/dist/{deno-Dj1TFhf4.mjs → deno-62DcBMwc.mjs}

@@ -3,6 +3,6 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2219+eb70f060";
+var version = "2.4.0-dev.2233+abb4a6b2";
 //#endregion
 export { version as n, name as t };

package/dist/{docloader-CzyJe90o.mjs → docloader-Be9TaKa_.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { c as validateCryptoKey } from "./key-Djyt1BFx.mjs";
-import { n as doubleKnock } from "./http-D-DpP4sd.mjs";
+import { c as validateCryptoKey } from "./key-CtAhsSFI.mjs";
+import { n as doubleKnock } from "./http-SIEv_YGW.mjs";
 import { getLogger } from "@logtape/logtape";
 import { FetchError, UrlError, createActivityPubRequest, getRemoteDocument, logRequest, resolveDocumentLoaderTimeout, validatePublicUrl, withDocumentLoaderTimeout } from "@fedify/vocab-runtime";
 import { curry } from "es-toolkit";

package/dist/federation/builder.test.mjs

@@ -7,7 +7,7 @@ import { t as assertExists } from "../assert_exists-cffSpJ7X.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
-import { r as createFederationBuilder } from "../builder-C5rYBZ16.mjs";
+import { r as createFederationBuilder } from "../builder-BmoDmjWk.mjs";
 import { DisallowedOperatorError, DisallowedVarSpecModifierError, DuplicateRouteVariableError, RouteTemplateOptionsNotMatchedError, RouterError } from "@fedify/uri-template";
 import { Activity, Note, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";

package/dist/federation/compound-fanout.test.mjs

@@ -6,11 +6,11 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { n as exportJwk } from "../key-Djyt1BFx.mjs";
+import { n as exportJwk } from "../key-CtAhsSFI.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "../outgoing-jsonld-4IJqPYos.mjs";
-import { a as signObject, d as verifyProof } from "../proof-z6Prgi5I.mjs";
+import { a as signObject, d as verifyProof } from "../proof-Bhsb_KYD.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl } from "../middleware-C2_LcbL3.mjs";
+import { n as FederationImpl } from "../middleware-BhtaUtlt.mjs";
 import { Create, DataIntegrityProof, Note } from "@fedify/vocab";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/handler-compound-proof.test.mjs

@@ -5,10 +5,10 @@ import { r as createRequestContext, t as createInboxContext } from "../context-8
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-CNVWdooi.mjs";
-import { l as signRequest } from "../http-D-DpP4sd.mjs";
+import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-BuI0RakW.mjs";
+import { l as signRequest } from "../http-SIEv_YGW.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { f as handleInbox, o as createFederation } from "../middleware-C2_LcbL3.mjs";
+import { f as handleInbox, o as createFederation } from "../middleware-BhtaUtlt.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as map_local_create_note_default } from "../map-local-create-note-B0SeXJms.mjs";
 import { Create, CryptographicKey, Multikey, Person, Update } from "@fedify/vocab";

package/dist/federation/handler.test.mjs

@@ -10,15 +10,15 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as parseAcceptSignature } from "../accept-CPVqki78.mjs";
-import { o as generateCryptoKeyPair } from "../key-Djyt1BFx.mjs";
-import { a as compactJsonLd, p as signJsonLd } from "../ld-CNVWdooi.mjs";
-import { a as signObject } from "../proof-z6Prgi5I.mjs";
-import { l as signRequest } from "../http-D-DpP4sd.mjs";
+import { o as generateCryptoKeyPair } from "../key-CtAhsSFI.mjs";
+import { a as compactJsonLd, p as signJsonLd } from "../ld-BuI0RakW.mjs";
+import { a as signObject } from "../proof-Bhsb_KYD.mjs";
+import { l as signRequest } from "../http-SIEv_YGW.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-C2_LcbL3.mjs";
+import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-BhtaUtlt.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { Activity, Create, CryptographicKey, Multikey, Note, Person, Tombstone } from "@fedify/vocab";
-import { FetchError } from "@fedify/vocab-runtime";
+import { FetchError, parseIri } from "@fedify/vocab-runtime";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/handler.test.ts
 const QUOTE_CONTEXT_TERMS = {
@@ -2864,6 +2864,73 @@ test("handleOutbox()", async () => {
 	assertEquals(response.status, 500);
 	assertEquals(onErrorCalled, true);
 });
+test("handleOutbox() matches portable actors by their canonical IDs", async () => {
+	const federation = createFederation({ kv: new MemoryKvStore() });
+	const actorId = "ap+ef61://did:key:z6MkAlice/users/someone";
+	const actorDispatcher = (_ctx, identifier) => {
+		if (identifier !== "someone") return null;
+		return new Person({
+			id: parseIri(actorId),
+			name: "Someone"
+		});
+	};
+	const post = async (actor) => {
+		const request = new Request("https://example.com/users/someone/outbox", {
+			method: "POST",
+			body: JSON.stringify({
+				"@context": "https://www.w3.org/ns/activitystreams",
+				type: "Create",
+				id: "https://example.com/activities/1",
+				actor,
+				object: {
+					type: "Note",
+					content: "Hello, world!"
+				}
+			})
+		});
+		const context = createRequestContext({
+			federation,
+			request,
+			url: new URL(request.url),
+			data: void 0
+		});
+		const seen = [];
+		const listeners = new ActivityListenerSet();
+		listeners.add(Activity, (_ctx, activity) => {
+			seen.push(activity.id.href);
+		});
+		return [(await handleOutbox(request, {
+			identifier: "someone",
+			context,
+			outboxContextFactory(identifier) {
+				return createOutboxContext({
+					...context,
+					clone: void 0,
+					identifier
+				});
+			},
+			actorDispatcher,
+			outboxListeners: listeners,
+			onNotFound: () => new Response("Not found", { status: 404 }),
+			onUnauthorized: () => new Response("Unauthorized", { status: 401 })
+		})).status, seen.length];
+	};
+	for (const actor of [
+		actorId,
+		"ap://did:key:z6MkAlice/users/someone",
+		"ap+ef61://did%3Akey%3Az6MkAlice/users/someone",
+		"ap://did:key:z6MkAlice/users/someone?@gateway=https%3A%2F%2Fserver1.example&@gateway=https%3A%2F%2Fserver2.example",
+		"https://server2.example/.well-known/apgateway/did:key:z6MkAlice/users/someone"
+	]) assertEquals(await post(actor), [202, 1], actor);
+	for (const actor of [
+		"ap://did:key:z6MkBob/users/someone",
+		"ap://did:key:z6MkAlice/users/other?@gateway=https%3A%2F%2Fserver1.example",
+		"ap://did:key:z6MkAlice/users/someone#main-key",
+		"https://server1.example/.well-known/apgateway/did:key:z6MkAlice/users/someone?@gateway=https%3A%2F%2Fserver1.example",
+		"https://example.com/users/someone",
+		[actorId, "ap://did:key:z6MkAlice/users/other"]
+	]) assertEquals(await post(actor), [400, 0], String(actor));
+});
 test("handleInbox() preserves the raw signed payload for inboxContextFactory", async () => {
 	const federation = createFederation({ kv: new MemoryKvStore() });
 	const remoteContextUrl = "https://remote.example/contexts/ext";

package/dist/federation/hashlink-media.test.mjs

@@ -10,8 +10,8 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-C2_LcbL3.mjs";
-import { r as createFederationBuilder } from "../builder-C5rYBZ16.mjs";
+import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-BhtaUtlt.mjs";
+import { r as createFederationBuilder } from "../builder-BmoDmjWk.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { Note } from "@fedify/vocab";
 import { computeDigestMultibase, encodeMultibase, exportDidKey } from "@fedify/vocab-runtime";

package/dist/federation/idempotency.test.mjs

@@ -4,9 +4,9 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { a as signObject } from "../proof-z6Prgi5I.mjs";
+import { a as signObject } from "../proof-Bhsb_KYD.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-C2_LcbL3.mjs";
+import { o as createFederation } from "../middleware-BhtaUtlt.mjs";
 import { Create, Follow, Person } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/idempotency.test.ts

package/dist/federation/metrics.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
-import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-BnYleVpg.mjs";
+import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-jr7IbGjd.mjs";
 import { FetchError } from "@fedify/vocab-runtime";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { DataPointType, MeterProvider, MetricReader } from "@opentelemetry/sdk-metrics";

package/dist/federation/middleware.test.mjs

@@ -16,14 +16,14 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { g as recordInboxActivity } from "../metrics-BnYleVpg.mjs";
-import { a as compactJsonLd, h as verifyJsonLd, p as signJsonLd, s as detachSignature } from "../ld-CNVWdooi.mjs";
-import { a as signObject, s as verifyObject } from "../proof-z6Prgi5I.mjs";
-import { f as verifyRequest, l as signRequest } from "../http-D-DpP4sd.mjs";
+import { g as recordInboxActivity } from "../metrics-jr7IbGjd.mjs";
+import { a as compactJsonLd, h as verifyJsonLd, p as signJsonLd, s as detachSignature } from "../ld-BuI0RakW.mjs";
+import { a as signObject, s as verifyObject } from "../proof-Bhsb_KYD.mjs";
+import { f as verifyRequest, l as signRequest } from "../http-SIEv_YGW.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { t as getAuthenticatedDocumentLoader } from "../docloader-CzyJe90o.mjs";
-import { S as handleBenchmarkTrigger, i as KvSpecDeterminer, n as FederationImpl, o as createFederation, r as InboxContextImpl, t as ContextImpl } from "../middleware-C2_LcbL3.mjs";
-import { t as doesActorOwnKey } from "../owner-D_BDPwm2.mjs";
+import { t as getAuthenticatedDocumentLoader } from "../docloader-Be9TaKa_.mjs";
+import { T as handleBenchmarkTrigger, i as KvSpecDeterminer, n as FederationImpl, o as createFederation, r as InboxContextImpl, t as ContextImpl } from "../middleware-BhtaUtlt.mjs";
+import { t as doesActorOwnKey } from "../owner-CoNYVTQp.mjs";
 import { t as CircuitBreaker } from "../circuit-breaker-XJ53md4S.mjs";
 import { t as TaskCodec } from "../codec-C6rTrpIp.mjs";
 import { t as markCircuitBreakerLegacySweepDone } from "../circuit-breaker-test-utils-DW6YC_Pe.mjs";

package/dist/federation/mod.cjs

@@ -1,6 +1,6 @@
 const { URLPattern } = require("urlpattern-polyfill");
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_federation = require("../federation-DC1yfb-8.cjs");
+const require_federation = require("../federation-BVkPF8vF.cjs");
 exports.CircuitBreaker = require_federation.CircuitBreaker;
 exports.InProcessMessageQueue = require_federation.InProcessMessageQueue;
 exports.MemoryKvStore = require_federation.MemoryKvStore;

package/dist/federation/mod.js

@@ -1,6 +1,6 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { a as respondWithObjectIfAcceptable, c as digest, d as parseCircuitBreakerKvState, f as createFederationBuilder, i as respondWithObject, l as CircuitBreaker, n as handleWebFinger, o as SendActivityError, r as createExponentialBackoffPolicy, s as buildCollectionSynchronizationHeader, t as createFederation, u as normalizeCircuitBreakerOptions } from "../middleware-BdzcazaN.js";
+import { a as respondWithObjectIfAcceptable, c as digest, d as parseCircuitBreakerKvState, f as createFederationBuilder, i as respondWithObject, l as CircuitBreaker, n as handleWebFinger, o as SendActivityError, r as createExponentialBackoffPolicy, s as buildCollectionSynchronizationHeader, t as createFederation, u as normalizeCircuitBreakerOptions } from "../middleware-D0t1NBIE.js";
 import { getLogger } from "@logtape/logtape";
 import { Router as Router$1, RouterError as RouterError$1, assertPath, isPath } from "@fedify/uri-template";
 import { isEqual } from "es-toolkit";

package/dist/federation/outgoing-proof.test.mjs

@@ -7,14 +7,14 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { n as exportJwk } from "../key-Djyt1BFx.mjs";
-import { s as detachSignature } from "../ld-CNVWdooi.mjs";
-import { a as signObject } from "../proof-z6Prgi5I.mjs";
+import { n as exportJwk } from "../key-CtAhsSFI.mjs";
+import { s as detachSignature } from "../ld-BuI0RakW.mjs";
+import { a as signObject } from "../proof-Bhsb_KYD.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { c as assertPortableActorActivity, n as FederationImpl, o as createFederation } from "../middleware-C2_LcbL3.mjs";
-import { a as verifyCompoundPortableObjectProofs } from "../compound-proof-D0xY7MBs.mjs";
+import { C as getEmbeddedFirstGateway, S as getCompactRootId, c as assertPortableActorActivity, n as FederationImpl, o as createFederation, w as warnCompatibleIdsInJson } from "../middleware-BhtaUtlt.mjs";
+import { a as verifyCompoundPortableObjectProofs } from "../compound-proof-Pn8766TV.mjs";
 import { configure, reset } from "@logtape/logtape";
-import { Create, Note, Person } from "@fedify/vocab";
+import { Announce, Create, Note, Person } from "@fedify/vocab";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/outgoing-proof.test.ts
@@ -620,6 +620,248 @@ async function captureLogs(run) {
 	}
 	return records.filter((record) => record.category[0] === "fedify");
 }
+test("sendActivity warns for compatible IDs off the actor's first gateway", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const federation = createTestFederation();
+	let actorCalls = 0;
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => {
+		actorCalls++;
+		return identifier === "alice" ? new Person({
+			id: ownerId,
+			gateways: [new URL("https://primary.example"), new URL("https://secondary.example")]
+		}) : null;
+	});
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	const child = await signObject(new Note({
+		id: compatibleId(owner.did, "/notes/1", "https://secondary.example"),
+		attribution: ownerId,
+		content: "Hello"
+	}), owner.privateKey, owner.keyId, {
+		...options,
+		context: childContext,
+		created
+	});
+	const activity = new Create({
+		id: compatibleId(owner.did, "/activities/1", "https://secondary.example"),
+		actor: ownerId,
+		object: child
+	});
+	const records = await captureLogs(async () => {
+		const { bodies } = await capture(() => ctx.sendActivity([rsaKey, sender(owner)], recipient, activity));
+		assertEquals(bodies.length, 1);
+		assertEquals(bodies[0].id, activity.id?.href);
+	});
+	assertEquals(records.filter((r) => r.properties.kind === "activity").length, 1);
+	assertEquals(records.filter((r) => r.properties.kind === "object").length, 1);
+	assertEquals(actorCalls, 1);
+});
+test("sendActivity skips first-gateway and portable IDs", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const federation = createTestFederation();
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => identifier === "alice" ? new Person({
+		id: ownerId,
+		gateways: [new URL("https://primary.example")]
+	}) : null);
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	for (const id of [compatibleId(owner.did, "/activities/first", "https://primary.example"), parseIri(`ap://${owner.did}/activities/portable`)]) assertEquals((await captureLogs(() => capture(() => ctx.sendActivity([rsaKey, sender(owner)], recipient, new Create({
+		id,
+		actor: ownerId
+	}))))).filter((r) => r.properties.kind != null), []);
+	const plain = federation.createContext(new URL("https://example.com/"));
+	assertEquals((await captureLogs(() => capture(() => plain.sendActivity([rsaKey, sender(owner)], recipient, new Create({
+		id: compatibleId(owner.did, "/activities/unknown-gateway", "https://secondary.example"),
+		actor: ownerId
+	}))))).filter((r) => r.properties.kind != null), []);
+});
+test("fanout warns once before enqueueing a compatible activity", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const { queue, queued } = createQueue();
+	const federation = createTestFederation(queue);
+	federation.setActorDispatcher("/users/{identifier}", () => new Person({
+		id: ownerId,
+		gateways: [new URL("https://primary.example")]
+	}));
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	assertEquals((await captureLogs(() => capture(async () => {
+		await ctx.sendActivity([rsaKey, sender(owner)], recipient, new Create({
+			id: compatibleId(owner.did, "/activities/fanout", "https://secondary.example"),
+			actor: ownerId
+		}), { fanout: "force" });
+		assertEquals(queued.length, 1);
+		for (let i = 0; i < queued.length; i++) await federation.processQueuedTask(void 0, queued[i]);
+	}))).filter((r) => r.properties.kind === "activity").length, 1);
+});
+test("an embedded actor supplies gateways to a plain send context", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const ctx = new FederationImpl({
+		kv: new MemoryKvStore(),
+		contextLoaderFactory: () => mockDocumentLoader,
+		documentLoaderFactory: () => mockDocumentLoader,
+		activityTransformers: []
+	}).createContext(new URL("https://example.com/"));
+	const activity = await signObject(new Create({
+		id: compatibleId(owner.did, "/activities/embedded-actor", "https://secondary.example"),
+		actor: new Person({
+			id: ownerId,
+			gateways: [new URL("https://primary.example")]
+		})
+	}), owner.privateKey, owner.keyId, {
+		...options,
+		created
+	});
+	assertEquals(getEmbeddedFirstGateway(await activity.toJsonLd({
+		format: "compact",
+		contextLoader: mockDocumentLoader
+	}), ownerId, owner.did)?.origin, "https://primary.example");
+	assertEquals((await captureLogs(() => capture(() => ctx.sendActivity([rsaKey, sender(owner)], recipient, activity)))).filter((r) => r.properties.kind === "activity").length, 1);
+});
+test("sendActivity checks a locally owned embedded object independently", async () => {
+	const alice = await didKey();
+	const bob = await didKey();
+	const aliceId = parseIri(`ap://${alice.did}/users/alice`);
+	const bobId = parseIri(`ap://${bob.did}/users/bob`);
+	const federation = createTestFederation();
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => identifier === "alice" ? new Person({
+		id: aliceId,
+		gateways: [new URL("https://primary.example")]
+	}) : identifier === "bob" ? new Person({
+		id: bobId,
+		gateways: [new URL("https://bob.example")]
+	}) : null);
+	const child = await signObject(new Note({
+		id: compatibleId(bob.did, "/notes/1", "https://secondary.example"),
+		attribution: bobId,
+		content: "Bob's note"
+	}), bob.privateKey, bob.keyId, {
+		...options,
+		context: childContext,
+		created
+	});
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	assertEquals((await captureLogs(() => capture(() => ctx.sendActivity([rsaKey, sender(alice)], recipient, new Announce({
+		id: parseIri(`ap://${alice.did}/activities/announce`),
+		actor: aliceId,
+		object: child
+	}))))).filter((r) => r.properties.kind === "object").map((r) => r.properties.id), [child.id?.href]);
+});
+test("sendActivity in an actor dispatcher does not re-enter it", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const federation = createTestFederation();
+	let calls = 0;
+	federation.setActorDispatcher("/users/{identifier}", async (ctx) => {
+		calls++;
+		await ctx.sendActivity([rsaKey, sender(owner)], recipient, new Create({
+			id: compatibleId(owner.did, "/activities/from-dispatcher", "https://secondary.example"),
+			actor: ownerId
+		}));
+		return new Person({
+			id: ownerId,
+			gateways: [new URL("https://primary.example")]
+		});
+	});
+	await capture(async () => {
+		assertEquals((await federation.fetch(new Request("https://example.com/users/alice", { headers: { Accept: "application/activity+json" } }), { contextData: void 0 })).status, 200);
+	});
+	assertEquals(calls, 1);
+});
+test("sendActivity still delivers when the diagnostic actor lookup fails", async () => {
+	const owner = await didKey();
+	const ownerId = parseIri(`ap://${owner.did}/users/alice`);
+	const federation = createTestFederation();
+	federation.setActorDispatcher("/users/{identifier}", () => {
+		throw new Error("Actor storage unavailable");
+	});
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	const id = compatibleId(owner.did, "/activities/lookup-fails", "https://secondary.example");
+	assertEquals((await captureLogs(async () => {
+		const { bodies } = await capture(() => ctx.sendActivity([rsaKey, sender(owner)], recipient, new Create({
+			id,
+			actor: ownerId
+		})));
+		assertEquals(bodies.length, 1);
+		assertEquals(bodies[0].id, id.href);
+	})).filter((r) => r.properties.kind != null), []);
+});
+test("warning checks later local actors when the first is missing", async () => {
+	const owner = await didKey();
+	const missing = parseIri(`ap://${owner.did}/users/missing`);
+	const alice = parseIri(`ap://${owner.did}/users/alice`);
+	const federation = createTestFederation();
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => identifier === "alice" ? new Person({
+		id: alice,
+		gateways: [new URL("https://primary.example")]
+	}) : null);
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	assertEquals((await captureLogs(() => warnCompatibleIdsInJson({
+		id: compatibleId(owner.did, "/activities/multi", "https://secondary.example").href,
+		type: "Create",
+		actor: [missing.href, alice.href]
+	}, ctx))).filter((r) => r.properties.kind === "activity").length, 1);
+});
+test("warning ignores an embedded gateway key", async () => {
+	const owner = await didKey();
+	const actorId = parseIri(`ap://${owner.did}/users/alice`);
+	const records = await captureLogs(() => warnCompatibleIdsInJson({
+		id: compatibleId(owner.did, "/activities/1", "https://secondary.example").href,
+		type: "Create",
+		actor: {
+			id: actorId.href,
+			type: "Person",
+			gateways: ["https://primary.example"],
+			publicKey: [{
+				id: compatibleId(owner.did, "/users/alice/keys/1", "https://secondary.example").href,
+				type: ["CryptographicKey"]
+			}, {
+				id: compatibleId(owner.did, "/users/alice/keys/2", "https://secondary.example").href,
+				type: "sec:Key"
+			}]
+		}
+	}));
+	assertEquals(records.filter((r) => r.properties.kind === "activity").length, 1);
+	assertEquals(records.filter((r) => r.properties.kind === "object"), []);
+});
+test("warning resolves a signed child's local ownership alias", async () => {
+	const alice = await didKey();
+	const bob = await didKey();
+	const aliceId = parseIri(`ap://${alice.did}/users/alice`);
+	const bobId = parseIri(`ap://${bob.did}/users/bob`);
+	const federation = createTestFederation();
+	federation.setActorDispatcher("/users/{identifier}", (_ctx, identifier) => identifier === "bob" ? new Person({
+		id: bobId,
+		gateways: [new URL("https://primary.example")]
+	}) : null);
+	const ctx = federation.createContext(new Request("https://example.com/"), void 0);
+	assertEquals((await captureLogs(() => warnCompatibleIdsInJson({
+		id: parseIri(`ap://${alice.did}/activities/announce`).href,
+		type: "Announce",
+		actor: aliceId.href,
+		object: {
+			"@context": ["https://www.w3.org/ns/activitystreams", {
+				by: {
+					"@id": "as:attributedTo",
+					"@type": "@id"
+				},
+				identifier: "@id"
+			}],
+			identifier: compatibleId(bob.did, "/notes/1", "https://secondary.example").href,
+			type: "Note",
+			by: bobId.href
+		}
+	}, ctx))).filter((r) => r.properties.kind === "object").length, 1);
+});
+test("warning reads an inline alias of the serialized root ID", async () => {
+	const id = compatibleId((await didKey()).did, "/notes/1", "https://secondary.example");
+	assertEquals(getCompactRootId({
+		"@context": ["https://www.w3.org/ns/activitystreams", { identifier: "@id" }],
+		identifier: id.href,
+		type: "Note"
+	})?.href, id.href);
+});
 test("an activity on another gateway than its compatible-ID actor is warned about", async () => {
 	const owner = await didKey();
 	const warnings = (activity) => captureLogs(() => assertPortableActorActivity(activity)).then((records) => records.map((r) => r.properties.activityId));

package/dist/federation/portable-actor.test.mjs

@@ -8,10 +8,10 @@ import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject, c as verifyPortableObjectProof } from "../proof-z6Prgi5I.mjs";
-import { f as verifyRequest, l as signRequest } from "../http-D-DpP4sd.mjs";
+import { a as signObject, c as verifyPortableObjectProof } from "../proof-Bhsb_KYD.mjs";
+import { f as verifyRequest, l as signRequest } from "../http-SIEv_YGW.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-C2_LcbL3.mjs";
+import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-BhtaUtlt.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Note, Person, Tombstone, lookupObject } from "@fedify/vocab";

package/dist/federation/portable-chain.test.mjs

@@ -7,10 +7,10 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { n as exportJwk } from "../key-Djyt1BFx.mjs";
-import { c as verifyPortableObjectProof, s as verifyObject } from "../proof-z6Prgi5I.mjs";
+import { n as exportJwk } from "../key-CtAhsSFI.mjs";
+import { c as verifyPortableObjectProof, s as verifyObject } from "../proof-Bhsb_KYD.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl } from "../middleware-C2_LcbL3.mjs";
+import { n as FederationImpl } from "../middleware-BhtaUtlt.mjs";
 import { Create, DataIntegrityProof, Note, OrderedCollection, Person, traverseCollection } from "@fedify/vocab";
 import { FetchError, encodeMultibase, exportDidKey } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/portable-collection.test.mjs

@@ -7,11 +7,11 @@ import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { a as signObject } from "../proof-z6Prgi5I.mjs";
+import { a as signObject } from "../proof-Bhsb_KYD.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-C2_LcbL3.mjs";
-import { t as verifyPortableObject } from "../portable-collection-hcONGyUs.mjs";
-import { s as verifyServedPortableObjects } from "../compound-proof-D0xY7MBs.mjs";
+import { b as PORTABLE_OBJECT_CONTENT_TYPE, o as createFederation } from "../middleware-BhtaUtlt.mjs";
+import { t as verifyPortableObject } from "../portable-collection-CxP30PWK.mjs";
+import { s as verifyServedPortableObjects } from "../compound-proof-Pn8766TV.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { Create, Note, Object as Object$1, OrderedCollection, PUBLIC_COLLECTION, Person, Tombstone, lookupObject, traverseCollection } from "@fedify/vocab";

package/dist/federation/portable-delivery.test.mjs

@@ -4,8 +4,8 @@ globalThis.addEventListener = () => {};
 import { t as esm_default } from "../esm-BHXXx4Wx.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { i as rsaPrivateKey2, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl, r as InboxContextImpl } from "../middleware-C2_LcbL3.mjs";
-import { n as extractInboxes, t as SendActivityError } from "../send-Cw545L_2.mjs";
+import { n as FederationImpl, r as InboxContextImpl } from "../middleware-BhtaUtlt.mjs";
+import { n as extractInboxes, t as SendActivityError } from "../send-CdRJj10a.mjs";
 import { Create, Endpoints, Note, Person } from "@fedify/vocab";
 import { parseIri } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/portable-gateway-keys.test.mjs

@@ -8,11 +8,11 @@ import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { r as getVerifiedKeyOwnerEvidence } from "../key-owner-evidence-APB6NpSk.mjs";
-import { p as signJsonLd } from "../ld-CNVWdooi.mjs";
-import { f as verifyRequest, l as signRequest, p as verifyRequestDetailed } from "../http-D-DpP4sd.mjs";
+import { p as signJsonLd } from "../ld-BuI0RakW.mjs";
+import { f as verifyRequest, l as signRequest, p as verifyRequestDetailed } from "../http-SIEv_YGW.mjs";
 import { a as rsaPrivateKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { f as handleInbox, n as FederationImpl, o as createFederation } from "../middleware-C2_LcbL3.mjs";
-import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-D_BDPwm2.mjs";
+import { f as handleInbox, n as FederationImpl, o as createFederation } from "../middleware-BhtaUtlt.mjs";
+import { n as getKeyOwner, t as doesActorOwnKey } from "../owner-CoNYVTQp.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as KvKeyCache } from "../keycache-Da8A8mZa.mjs";
 import { Create, CryptographicKey, Person } from "@fedify/vocab";