@fedify/fedify 2.4.0-dev.2253 → 2.4.0-dev.2259

package/dist/{middleware-BNhF-Ayx.mjs → middleware-DHn2q0L1.mjs}

@@ -1,5 +1,5 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as FederationImpl } from "./middleware-B0RRI88k.mjs";
+import { n as FederationImpl } from "./middleware-CkjwiEBd.mjs";
 export { FederationImpl };

package/dist/{mod-C7_2j7VT.d.cts → mod-BojP2Bw3.d.cts}

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { Jt as WebFingerLinksDispatcher, St as ActorHandleMapper, bt as ActorAliasMapper, p as RequestContext, xt as ActorDispatcher } from "./context-B6X-t8gI.cjs";
+import { Jt as WebFingerLinksDispatcher, St as ActorHandleMapper, bt as ActorAliasMapper, p as RequestContext, xt as ActorDispatcher } from "./context-tsYPJ2Ew.cjs";
 import { MeterProvider, Span, Tracer } from "@opentelemetry/api";
 import { RouterError, RouterOptions, RouterRouteResult } from "@fedify/uri-template";
 

package/dist/{mod-Cy9VNHVw.d.ts → mod-CavhAgLw.d.cts}

@@ -1,8 +1,8 @@
 /// <reference lib="esnext.temporal" />
-import { S as KeyCache } from "./http-DGx0KOws.js";
-import { CryptographicKey, DataIntegrityProof, Multikey, Object as Object$1 } from "@fedify/vocab";
+import { B as VerifyPortableObjectProofOptions, a as KeyCache, v as VerificationObservationOptions, z as VerifyPortableObjectProofFailureReason } from "./key-DYxuyd-s.cjs";
+import { CryptographicKey, Multikey } from "@fedify/vocab";
+import { DocumentLoader, PortableObjectVerifierOptions } from "@fedify/vocab-runtime";
 import { MeterProvider, TracerProvider } from "@opentelemetry/api";
-import { DocumentLoader, PortableObjectVerifier, PortableObjectVerifierOptions } from "@fedify/vocab-runtime";
 
 //#region src/sig/ld.d.ts
 /**
@@ -108,7 +108,7 @@ declare function detachSignature(jsonLd: unknown): unknown;
 * Options for verifying Linked Data Signatures.
 * @since 1.0.0
 */
-interface VerifySignatureOptions {
+interface VerifySignatureOptions extends VerificationObservationOptions {
   /**
   * The document loader to use for fetching the public key.
   */
@@ -169,254 +169,6 @@ interface VerifyJsonLdOptions extends VerifySignatureOptions {}
 */
 declare function verifyJsonLd(jsonLd: unknown, options?: VerifyJsonLdOptions): Promise<boolean>;
 //#endregion
-//#region src/sig/proof.d.ts
-/**
-* Checks if the given JSON-LD document has a DataIntegrityProof-like object,
-* without fully deserializing it into vocabulary classes.
-* @param jsonLd The JSON-LD document to check.
-* @returns `true` if the document has a proof-like object; `false` otherwise.
-* @since 2.2.0
-*/
-declare function hasProofLike(jsonLd: unknown): boolean;
-/**
-* Options for {@link createProof}.
-* @since 0.10.0
-*/
-interface CreateProofOptions {
-  /**
-  * The context loader for loading remote JSON-LD contexts.
-  */
-  contextLoader?: DocumentLoader;
-  /**
-  * The JSON-LD context to use for serializing the object to sign.
-  */
-  context?: string | Record<string, string> | (string | Record<string, string>)[];
-  /**
-  * The time when the proof was created.  If not specified, the current time
-  * will be used.
-  */
-  created?: Temporal.Instant;
-}
-/**
-* Creates a proof for the given object.
-* @param object The object to create a proof for.
-* @param privateKey The private key to sign the proof with.
-* @param keyId The key ID to use in the proof. It will be used by the verifier.
-* @param options Additional options.  See also {@link CreateProofOptions}.
-* @returns The created proof.
-* @throws {TypeError} If the private key is invalid or unsupported.
-* @since 0.10.0
-*/
-declare function createProof(object: Object$1, privateKey: CryptoKey, keyId: URL, options?: CreateProofOptions): Promise<DataIntegrityProof>;
-/**
-* Options for {@link signObject}.
-* @since 0.10.0
-*/
-interface SignObjectOptions extends CreateProofOptions {
-  /**
-  * The document loader for loading remote JSON-LD documents.
-  */
-  documentLoader?: DocumentLoader;
-  /**
-  * The OpenTelemetry tracer provider.  If omitted, the global tracer provider
-  * is used.
-  * @since 1.3.0
-  */
-  tracerProvider?: TracerProvider;
-}
-/**
-* Signs the given object with the private key and returns the signed object.
-* @param object The object to create a proof for.
-* @param privateKey The private key to sign the proof with.
-* @param keyId The key ID to use in the proof. It will be used by the verifier.
-* @param options Additional options.  See also {@link SignObjectOptions}.
-* @returns The signed object.
-* @throws {TypeError} If the private key is invalid or unsupported.
-* @since 0.10.0
-*/
-declare function signObject<T extends Object$1>(object: T, privateKey: CryptoKey, keyId: URL, options?: SignObjectOptions): Promise<T>;
-/**
-* Options for {@link verifyProof}.
-* @since 0.10.0
-*/
-interface VerifyProofOptions {
-  /**
-  * The security domain expected by the verifier.  When specified, it must
-  * contain the same strings as the proof's `domain` option.
-  * @since 2.4.0
-  */
-  domain?: string | readonly string[];
-  /**
-  * The challenge expected by the verifier.  When specified, it must exactly
-  * match the proof's `challenge` option.
-  * @since 2.4.0
-  */
-  challenge?: string;
-  /**
-  * The context loader for loading remote JSON-LD contexts.
-  */
-  contextLoader?: DocumentLoader;
-  /**
-  * The document loader for loading remote JSON-LD documents.
-  */
-  documentLoader?: DocumentLoader;
-  /**
-  * The key cache to use for caching public keys.
-  * @since 0.12.0
-  */
-  keyCache?: KeyCache;
-  /**
-  * The OpenTelemetry tracer provider.  If omitted, the global tracer provider
-  * is used.
-  * @since 1.3.0
-  */
-  tracerProvider?: TracerProvider;
-  /**
-  * The OpenTelemetry meter provider.  If omitted, the global meter provider
-  * is used.
-  * @since 2.3.0
-  */
-  meterProvider?: MeterProvider;
-}
-/**
-* Options for {@link verifyPortableObjectProof}.
-* @since 2.4.0
-*/
-interface VerifyPortableObjectProofOptions extends VerifyProofOptions {}
-/**
-* The reason why {@link verifyPortableObjectProof} could not verify a portable
-* object proof.
-* @since 2.4.0
-*/
-type VerifyPortableObjectProofFailureReason = {
-  /**
-  * The document has neither a portable `ap:` or `ap+ef61:` ID nor an
-  * FEP-ef61 compatible identifier.
-  */
-  readonly type: "notPortableObject";
-} | {
-  /**
-  * The document is a portable collection without an Object Integrity
-  * Proof.  Its trust policy is outside this verifier.
-  */
-  readonly type: "unsecuredCollection";
-} | {
-  /** The portable document is a core type outside FEP-ef61 proof policy. */readonly type: "unsupportedObjectType"; /** The FEP-2277 core type of the document. */
-  readonly objectType: "verificationMethod" | "publicKey" | "link";
-} | {
-  /** A portable actor, activity, or object has no proof. */readonly type: "missingProof";
-} | {
-  /**
-  * A portable actor's `gateways` is missing or empty, or has an item that
-  * is not an HTTP(S) URI with an empty path, query, and fragment.
-  * The document is rejected before its proofs are verified, so this
-  * reason does not mean that the proofs are valid.
-  */
-  readonly type: "invalidGateways";
-} | {
-  /** The proof is malformed, unsupported, or cryptographically invalid. */readonly type: "invalidProof"; /** The zero-based index of the invalid proof. */
-  readonly proofIndex: number;
-} | {
-  /** The proof's verification method is not a valid DID URL. */readonly type: "unsupportedVerificationMethod"; /** The zero-based index of the proof. */
-  readonly proofIndex: number; /** The unsupported verification method. */
-  readonly verificationMethod: URL;
-} | {
-  /** The verification method DID does not match the portable ID authority. */readonly type: "verificationMethodMismatch"; /** The zero-based index of the proof. */
-  readonly proofIndex: number; /** The portable object ID. */
-  readonly objectId: URL; /** The mismatching verification method. */
-  readonly verificationMethod: URL;
-};
-/**
-* The detailed result of {@link verifyPortableObjectProof}.
-* @since 2.4.0
-*/
-type VerifyPortableObjectProofResult = {
-  /** Whether every Object Integrity Proof was verified. */readonly verified: true; /** The public keys used by the verified proofs, in proof order. */
-  readonly keys: readonly Multikey[];
-} | {
-  /** Whether every Object Integrity Proof was verified. */readonly verified: false; /** Why portable proof verification did not succeed. */
-  readonly reason: VerifyPortableObjectProofFailureReason;
-};
-/**
-* Verifies the given proof for the object.
-* @param jsonLd The JSON-LD object to verify the proof for.  Its proof
-*               properties are excluded from the message, but matching proof
-*               occurrences are used to authenticate the received proof
-*               configuration.
-* @param proof The proof to verify.
-* @param options Additional options.  See also {@link VerifyProofOptions}.
-* @returns The public key that was used to sign the proof, or `null` if the
-*          proof is invalid.
-* @since 0.10.0
-* @since 2.4.0 Matching proof configurations are authenticated.
-*/
-declare function verifyProof(jsonLd: unknown, proof: DataIntegrityProof, options?: VerifyProofOptions): Promise<Multikey | null>;
-/**
-* Verifies the FEP-ef61 Object Integrity Proof policy for a portable object.
-*
-* This applies the FEP-2277 core-type classification to the top-level JSON-LD
-* node.  Portable actors, activities, and objects require proofs.  A portable
-* collection without a proof is reported separately so a caller can apply a
-* gateway trust policy.  Embedded portable objects are not traversed.
-*
-* A portable object is a document whose ID is an `ap:` or `ap+ef61:` URI, or
-* an [FEP-ef61] compatible identifier such as
-* `https://gw.example/.well-known/apgateway/did:key:z6Mk…/actor`, which
-* stands for the portable ID `ap+ef61://did:key:z6Mk…/actor`.
-*
-* Every proof must use a DID URL whose DID matches the portable object's
-* authority, i.e., the DID of its canonical portable ID, and every proof must
-* pass {@link verifyProof}.  A portable actor must also have a non-empty
-* `gateways` list whose items are all HTTP(S) URIs with an empty path, query,
-* and fragment; otherwise, it is rejected with the `invalidGateways` reason
-* before its proofs are verified.  The proofs are verified over the document as
-* given; a compatible identifier is never rewritten into a portable ID.
-*
-* [FEP-ef61]: https://w3id.org/fep/ef61
-*
-* @param jsonLd The JSON-LD document to verify.
-* @param options Additional options.  See also
-*                {@link VerifyPortableObjectProofOptions}.
-* @returns The detailed portable proof-policy result.
-* @throws {TypeError} If the input is not a single JSON-LD object or has a
-*                     malformed portable ID or compatible identifier.
-* @since 2.4.0
-*/
-declare function verifyPortableObjectProof(jsonLd: unknown, options?: VerifyPortableObjectProofOptions): Promise<VerifyPortableObjectProofResult>;
-/**
-* Options for {@link verifyObject}.
-* @since 0.10.0
-*/
-interface VerifyObjectOptions extends VerifyProofOptions {
-  /**
-  * The default [FEP-ef61] portable object verifier for the property
-  * accessors of the returned object and the objects obtained from it, e.g.,
-  * `Context.verifyPortableObject`.  It is not used to verify the given
-  * object itself.
-  *
-  * [FEP-ef61]: https://w3id.org/fep/ef61
-  * @since 2.4.0
-  */
-  verifyPortableObject?: PortableObjectVerifier;
-}
-/**
-* Verifies the given object.  It will verify all the proofs in the object,
-* and succeed only if all the proofs are valid and all attributions and
-* actors are authenticated by the proofs.
-* @template T The type of the object to verify.
-* @param cls The class of the object to verify.  It must be a subclass of
-*            the {@link Object}.
-* @param jsonLd The JSON-LD object to verify.  It's assumed that the object
-*               is a compacted JSON-LD representation of a `T` with `@context`.
-* @param options Additional options.  See also {@link VerifyObjectOptions}.
-* @returns The object if it's verified, or `null` if it's not.
-* @throws {TypeError} If the object is invalid or unsupported.
-* @since 0.10.0
-*/
-declare function verifyObject<T extends Object$1>(cls: (new (...args: any[]) => T) & {
-  fromJsonLd(jsonLd: unknown, options: VerifyObjectOptions): Promise<T>;
-}, jsonLd: unknown, options?: VerifyObjectOptions): Promise<T | null>;
-//#endregion
 //#region src/sig/portable-collection.d.ts
 /**
 * Options for {@link verifyPortableObject}.
@@ -565,4 +317,4 @@ type VerifyPortableObjectResult = {
 */
 declare function verifyPortableObject(jsonLd: unknown, options?: VerifyPortableObjectOptions): Promise<VerifyPortableObjectResult>;
 //#endregion
-export { createSignature as C, verifyJsonLd as D, signJsonLd as E, verifySignature as O, attachSignature as S, hasSignatureLike as T, verifyProof as _, CreateProofOptions as a, VerifyJsonLdOptions as b, VerifyPortableObjectProofFailureReason as c, VerifyProofOptions as d, createProof as f, verifyPortableObjectProof as g, verifyObject as h, verifyPortableObject as i, VerifyPortableObjectProofOptions as l, signObject as m, VerifyPortableObjectOptions as n, SignObjectOptions as o, hasProofLike as p, VerifyPortableObjectResult as r, VerifyObjectOptions as s, VerifyPortableObjectFailureReason as t, VerifyPortableObjectProofResult as u, CreateSignatureOptions as v, detachSignature as w, VerifySignatureOptions as x, SignJsonLdOptions as y };
+export { CreateSignatureOptions as a, VerifySignatureOptions as c, detachSignature as d, hasSignatureLike as f, verifySignature as h, verifyPortableObject as i, attachSignature as l, verifyJsonLd as m, VerifyPortableObjectOptions as n, SignJsonLdOptions as o, signJsonLd as p, VerifyPortableObjectResult as r, VerifyJsonLdOptions as s, VerifyPortableObjectFailureReason as t, createSignature as u };

package/dist/{mod-DoTWIc7F.d.cts → mod-CtpF2BU5.d.ts}

@@ -1,8 +1,8 @@
 /// <reference lib="esnext.temporal" />
-import { S as KeyCache } from "./http-BrwKINQn.cjs";
-import { CryptographicKey, DataIntegrityProof, Multikey, Object as Object$1 } from "@fedify/vocab";
-import { DocumentLoader, PortableObjectVerifier, PortableObjectVerifierOptions } from "@fedify/vocab-runtime";
+import { B as VerifyPortableObjectProofOptions, a as KeyCache, v as VerificationObservationOptions, z as VerifyPortableObjectProofFailureReason } from "./key-C1nv7_jD.js";
+import { CryptographicKey, Multikey } from "@fedify/vocab";
 import { MeterProvider, TracerProvider } from "@opentelemetry/api";
+import { DocumentLoader, PortableObjectVerifierOptions } from "@fedify/vocab-runtime";
 
 //#region src/sig/ld.d.ts
 /**
@@ -108,7 +108,7 @@ declare function detachSignature(jsonLd: unknown): unknown;
 * Options for verifying Linked Data Signatures.
 * @since 1.0.0
 */
-interface VerifySignatureOptions {
+interface VerifySignatureOptions extends VerificationObservationOptions {
   /**
   * The document loader to use for fetching the public key.
   */
@@ -169,254 +169,6 @@ interface VerifyJsonLdOptions extends VerifySignatureOptions {}
 */
 declare function verifyJsonLd(jsonLd: unknown, options?: VerifyJsonLdOptions): Promise<boolean>;
 //#endregion
-//#region src/sig/proof.d.ts
-/**
-* Checks if the given JSON-LD document has a DataIntegrityProof-like object,
-* without fully deserializing it into vocabulary classes.
-* @param jsonLd The JSON-LD document to check.
-* @returns `true` if the document has a proof-like object; `false` otherwise.
-* @since 2.2.0
-*/
-declare function hasProofLike(jsonLd: unknown): boolean;
-/**
-* Options for {@link createProof}.
-* @since 0.10.0
-*/
-interface CreateProofOptions {
-  /**
-  * The context loader for loading remote JSON-LD contexts.
-  */
-  contextLoader?: DocumentLoader;
-  /**
-  * The JSON-LD context to use for serializing the object to sign.
-  */
-  context?: string | Record<string, string> | (string | Record<string, string>)[];
-  /**
-  * The time when the proof was created.  If not specified, the current time
-  * will be used.
-  */
-  created?: Temporal.Instant;
-}
-/**
-* Creates a proof for the given object.
-* @param object The object to create a proof for.
-* @param privateKey The private key to sign the proof with.
-* @param keyId The key ID to use in the proof. It will be used by the verifier.
-* @param options Additional options.  See also {@link CreateProofOptions}.
-* @returns The created proof.
-* @throws {TypeError} If the private key is invalid or unsupported.
-* @since 0.10.0
-*/
-declare function createProof(object: Object$1, privateKey: CryptoKey, keyId: URL, options?: CreateProofOptions): Promise<DataIntegrityProof>;
-/**
-* Options for {@link signObject}.
-* @since 0.10.0
-*/
-interface SignObjectOptions extends CreateProofOptions {
-  /**
-  * The document loader for loading remote JSON-LD documents.
-  */
-  documentLoader?: DocumentLoader;
-  /**
-  * The OpenTelemetry tracer provider.  If omitted, the global tracer provider
-  * is used.
-  * @since 1.3.0
-  */
-  tracerProvider?: TracerProvider;
-}
-/**
-* Signs the given object with the private key and returns the signed object.
-* @param object The object to create a proof for.
-* @param privateKey The private key to sign the proof with.
-* @param keyId The key ID to use in the proof. It will be used by the verifier.
-* @param options Additional options.  See also {@link SignObjectOptions}.
-* @returns The signed object.
-* @throws {TypeError} If the private key is invalid or unsupported.
-* @since 0.10.0
-*/
-declare function signObject<T extends Object$1>(object: T, privateKey: CryptoKey, keyId: URL, options?: SignObjectOptions): Promise<T>;
-/**
-* Options for {@link verifyProof}.
-* @since 0.10.0
-*/
-interface VerifyProofOptions {
-  /**
-  * The security domain expected by the verifier.  When specified, it must
-  * contain the same strings as the proof's `domain` option.
-  * @since 2.4.0
-  */
-  domain?: string | readonly string[];
-  /**
-  * The challenge expected by the verifier.  When specified, it must exactly
-  * match the proof's `challenge` option.
-  * @since 2.4.0
-  */
-  challenge?: string;
-  /**
-  * The context loader for loading remote JSON-LD contexts.
-  */
-  contextLoader?: DocumentLoader;
-  /**
-  * The document loader for loading remote JSON-LD documents.
-  */
-  documentLoader?: DocumentLoader;
-  /**
-  * The key cache to use for caching public keys.
-  * @since 0.12.0
-  */
-  keyCache?: KeyCache;
-  /**
-  * The OpenTelemetry tracer provider.  If omitted, the global tracer provider
-  * is used.
-  * @since 1.3.0
-  */
-  tracerProvider?: TracerProvider;
-  /**
-  * The OpenTelemetry meter provider.  If omitted, the global meter provider
-  * is used.
-  * @since 2.3.0
-  */
-  meterProvider?: MeterProvider;
-}
-/**
-* Options for {@link verifyPortableObjectProof}.
-* @since 2.4.0
-*/
-interface VerifyPortableObjectProofOptions extends VerifyProofOptions {}
-/**
-* The reason why {@link verifyPortableObjectProof} could not verify a portable
-* object proof.
-* @since 2.4.0
-*/
-type VerifyPortableObjectProofFailureReason = {
-  /**
-  * The document has neither a portable `ap:` or `ap+ef61:` ID nor an
-  * FEP-ef61 compatible identifier.
-  */
-  readonly type: "notPortableObject";
-} | {
-  /**
-  * The document is a portable collection without an Object Integrity
-  * Proof.  Its trust policy is outside this verifier.
-  */
-  readonly type: "unsecuredCollection";
-} | {
-  /** The portable document is a core type outside FEP-ef61 proof policy. */readonly type: "unsupportedObjectType"; /** The FEP-2277 core type of the document. */
-  readonly objectType: "verificationMethod" | "publicKey" | "link";
-} | {
-  /** A portable actor, activity, or object has no proof. */readonly type: "missingProof";
-} | {
-  /**
-  * A portable actor's `gateways` is missing or empty, or has an item that
-  * is not an HTTP(S) URI with an empty path, query, and fragment.
-  * The document is rejected before its proofs are verified, so this
-  * reason does not mean that the proofs are valid.
-  */
-  readonly type: "invalidGateways";
-} | {
-  /** The proof is malformed, unsupported, or cryptographically invalid. */readonly type: "invalidProof"; /** The zero-based index of the invalid proof. */
-  readonly proofIndex: number;
-} | {
-  /** The proof's verification method is not a valid DID URL. */readonly type: "unsupportedVerificationMethod"; /** The zero-based index of the proof. */
-  readonly proofIndex: number; /** The unsupported verification method. */
-  readonly verificationMethod: URL;
-} | {
-  /** The verification method DID does not match the portable ID authority. */readonly type: "verificationMethodMismatch"; /** The zero-based index of the proof. */
-  readonly proofIndex: number; /** The portable object ID. */
-  readonly objectId: URL; /** The mismatching verification method. */
-  readonly verificationMethod: URL;
-};
-/**
-* The detailed result of {@link verifyPortableObjectProof}.
-* @since 2.4.0
-*/
-type VerifyPortableObjectProofResult = {
-  /** Whether every Object Integrity Proof was verified. */readonly verified: true; /** The public keys used by the verified proofs, in proof order. */
-  readonly keys: readonly Multikey[];
-} | {
-  /** Whether every Object Integrity Proof was verified. */readonly verified: false; /** Why portable proof verification did not succeed. */
-  readonly reason: VerifyPortableObjectProofFailureReason;
-};
-/**
-* Verifies the given proof for the object.
-* @param jsonLd The JSON-LD object to verify the proof for.  Its proof
-*               properties are excluded from the message, but matching proof
-*               occurrences are used to authenticate the received proof
-*               configuration.
-* @param proof The proof to verify.
-* @param options Additional options.  See also {@link VerifyProofOptions}.
-* @returns The public key that was used to sign the proof, or `null` if the
-*          proof is invalid.
-* @since 0.10.0
-* @since 2.4.0 Matching proof configurations are authenticated.
-*/
-declare function verifyProof(jsonLd: unknown, proof: DataIntegrityProof, options?: VerifyProofOptions): Promise<Multikey | null>;
-/**
-* Verifies the FEP-ef61 Object Integrity Proof policy for a portable object.
-*
-* This applies the FEP-2277 core-type classification to the top-level JSON-LD
-* node.  Portable actors, activities, and objects require proofs.  A portable
-* collection without a proof is reported separately so a caller can apply a
-* gateway trust policy.  Embedded portable objects are not traversed.
-*
-* A portable object is a document whose ID is an `ap:` or `ap+ef61:` URI, or
-* an [FEP-ef61] compatible identifier such as
-* `https://gw.example/.well-known/apgateway/did:key:z6Mk…/actor`, which
-* stands for the portable ID `ap+ef61://did:key:z6Mk…/actor`.
-*
-* Every proof must use a DID URL whose DID matches the portable object's
-* authority, i.e., the DID of its canonical portable ID, and every proof must
-* pass {@link verifyProof}.  A portable actor must also have a non-empty
-* `gateways` list whose items are all HTTP(S) URIs with an empty path, query,
-* and fragment; otherwise, it is rejected with the `invalidGateways` reason
-* before its proofs are verified.  The proofs are verified over the document as
-* given; a compatible identifier is never rewritten into a portable ID.
-*
-* [FEP-ef61]: https://w3id.org/fep/ef61
-*
-* @param jsonLd The JSON-LD document to verify.
-* @param options Additional options.  See also
-*                {@link VerifyPortableObjectProofOptions}.
-* @returns The detailed portable proof-policy result.
-* @throws {TypeError} If the input is not a single JSON-LD object or has a
-*                     malformed portable ID or compatible identifier.
-* @since 2.4.0
-*/
-declare function verifyPortableObjectProof(jsonLd: unknown, options?: VerifyPortableObjectProofOptions): Promise<VerifyPortableObjectProofResult>;
-/**
-* Options for {@link verifyObject}.
-* @since 0.10.0
-*/
-interface VerifyObjectOptions extends VerifyProofOptions {
-  /**
-  * The default [FEP-ef61] portable object verifier for the property
-  * accessors of the returned object and the objects obtained from it, e.g.,
-  * `Context.verifyPortableObject`.  It is not used to verify the given
-  * object itself.
-  *
-  * [FEP-ef61]: https://w3id.org/fep/ef61
-  * @since 2.4.0
-  */
-  verifyPortableObject?: PortableObjectVerifier;
-}
-/**
-* Verifies the given object.  It will verify all the proofs in the object,
-* and succeed only if all the proofs are valid and all attributions and
-* actors are authenticated by the proofs.
-* @template T The type of the object to verify.
-* @param cls The class of the object to verify.  It must be a subclass of
-*            the {@link Object}.
-* @param jsonLd The JSON-LD object to verify.  It's assumed that the object
-*               is a compacted JSON-LD representation of a `T` with `@context`.
-* @param options Additional options.  See also {@link VerifyObjectOptions}.
-* @returns The object if it's verified, or `null` if it's not.
-* @throws {TypeError} If the object is invalid or unsupported.
-* @since 0.10.0
-*/
-declare function verifyObject<T extends Object$1>(cls: (new (...args: any[]) => T) & {
-  fromJsonLd(jsonLd: unknown, options: VerifyObjectOptions): Promise<T>;
-}, jsonLd: unknown, options?: VerifyObjectOptions): Promise<T | null>;
-//#endregion
 //#region src/sig/portable-collection.d.ts
 /**
 * Options for {@link verifyPortableObject}.
@@ -565,4 +317,4 @@ type VerifyPortableObjectResult = {
 */
 declare function verifyPortableObject(jsonLd: unknown, options?: VerifyPortableObjectOptions): Promise<VerifyPortableObjectResult>;
 //#endregion
-export { createSignature as C, verifyJsonLd as D, signJsonLd as E, verifySignature as O, attachSignature as S, hasSignatureLike as T, verifyProof as _, CreateProofOptions as a, VerifyJsonLdOptions as b, VerifyPortableObjectProofFailureReason as c, VerifyProofOptions as d, createProof as f, verifyPortableObjectProof as g, verifyObject as h, verifyPortableObject as i, VerifyPortableObjectProofOptions as l, signObject as m, VerifyPortableObjectOptions as n, SignObjectOptions as o, hasProofLike as p, VerifyPortableObjectResult as r, VerifyObjectOptions as s, VerifyPortableObjectFailureReason as t, VerifyPortableObjectProofResult as u, CreateSignatureOptions as v, detachSignature as w, VerifySignatureOptions as x, SignJsonLdOptions as y };
+export { CreateSignatureOptions as a, VerifySignatureOptions as c, detachSignature as d, hasSignatureLike as f, verifySignature as h, verifyPortableObject as i, attachSignature as l, verifyJsonLd as m, VerifyPortableObjectOptions as n, SignJsonLdOptions as o, signJsonLd as p, VerifyPortableObjectResult as r, VerifyJsonLdOptions as s, VerifyPortableObjectFailureReason as t, createSignature as u };

package/dist/{mod-B8MI1mpi.d.ts → mod-DEZXwV6J.d.ts}

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { n as HttpMessageSignaturesSpecDeterminer } from "./http-DGx0KOws.js";
+import { b as HttpMessageSignaturesSpecDeterminer } from "./key-C1nv7_jD.js";
 import { n as KvStore, t as KvKey } from "./kv-B2mzK5tl.js";
 import { t as DocumentFetchKind } from "./metrics-DoRtI0qU.js";
 import { MeterProvider, TracerProvider } from "@opentelemetry/api";

package/dist/{mod-DFL6IxYQ.d.cts → mod-Dw-nPxQh.d.cts}

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { n as HttpMessageSignaturesSpecDeterminer } from "./http-BrwKINQn.cjs";
+import { b as HttpMessageSignaturesSpecDeterminer } from "./key-DYxuyd-s.cjs";
 import { n as KvStore, t as KvKey } from "./kv-B2mzK5tl.cjs";
 import { t as DocumentFetchKind } from "./metrics-DVKYY6K1.cjs";
 import { DocumentLoader, DocumentLoaderFactoryOptions } from "@fedify/vocab-runtime";

package/dist/{mod-BhTaDR5H.d.ts → mod-Xj5P4s4d.d.ts}

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { Jt as WebFingerLinksDispatcher, St as ActorHandleMapper, bt as ActorAliasMapper, p as RequestContext, xt as ActorDispatcher } from "./context-CtI307_A.js";
+import { Jt as WebFingerLinksDispatcher, St as ActorHandleMapper, bt as ActorAliasMapper, p as RequestContext, xt as ActorDispatcher } from "./context-7NyiqIcg.js";
 import { RouterError, RouterOptions, RouterRouteResult } from "@fedify/uri-template";
 import { MeterProvider, Span, Tracer } from "@opentelemetry/api";
 

package/dist/mod.cjs

@@ -3,11 +3,11 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("./rolldown-runtime-Dmm3t92W.cjs");
 const require_transformers = require("./transformers-BalCrSsr.cjs");
 require("./compat/mod.cjs");
-const require_http = require("./http-Bp0MKAK3.cjs");
-const require_federation = require("./federation-B858-Ylk.cjs");
+const require_http = require("./http-Cki-npuA.cjs");
+const require_federation = require("./federation-D6giSGUT.cjs");
 const require_types = require("./types-poIao40f.cjs");
-const require_portable_collection = require("./portable-collection-DhEA_nWT.cjs");
-const require_kv_cache = require("./kv-cache-BnWemxH2.cjs");
+const require_portable_collection = require("./portable-collection-DqTUBKY7.cjs");
+const require_kv_cache = require("./kv-cache-D73yVcE5.cjs");
 require("./nodeinfo/mod.cjs");
 require("./runtime/mod.cjs");
 require("./sig/mod.cjs");