@fedify/fedify 2.4.0-dev.2256 → 2.4.0-dev.2260

package/dist/{builder-DvSQqk2l.mjs → builder-BK8HfSUm.mjs}

@@ -2,7 +2,7 @@ import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { i as getPortableDid, l as isPortableId, n as getCanonicalPortableId } from "./portable-key-id-Ca30-hOa.mjs";
-import { n as version, t as name } from "./deno-AmcRMq5z.mjs";
+import { n as version, t as name } from "./deno-DVP7DGJC.mjs";
 import { t as ActivityListenerSet } from "./activity-listener-C-BSbKI7.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Router, RouterError, assertPath } from "@fedify/uri-template";
@@ -55,6 +55,7 @@ var FederationBuilderImpl = class {
 	featuredTagsCallbacks;
 	inboxListeners;
 	outboxListeners;
+	inboxRequestFinishedHandler;
 	inboxErrorHandler;
 	outboxListenerErrorHandler;
 	outboxAuthorizePredicate;
@@ -90,7 +91,7 @@ var FederationBuilderImpl = class {
 	* specified.
 	*/
 	async build(options) {
-		const { FederationImpl } = await import("./middleware-Cne_jMZo.mjs");
+		const { FederationImpl } = await import("./middleware-CE1X7-UM.mjs");
 		const f = new FederationImpl(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();
@@ -116,6 +117,7 @@ var FederationBuilderImpl = class {
 		f.featuredTagsCallbacks = this.featuredTagsCallbacks == null ? void 0 : { ...this.featuredTagsCallbacks };
 		f.inboxListeners = this.inboxListeners?.clone();
 		f.outboxListeners = this.outboxListeners?.clone();
+		f.inboxRequestFinishedHandler = this.inboxRequestFinishedHandler;
 		f.inboxErrorHandler = this.inboxErrorHandler;
 		f.outboxListenerErrorHandler = this.outboxListenerErrorHandler;
 		f.outboxAuthorizePredicate = this.outboxAuthorizePredicate;
@@ -596,6 +598,10 @@ var FederationBuilderImpl = class {
 				this.inboxErrorHandler = handler;
 				return setters;
 			},
+			onRequestFinished: (handler) => {
+				this.inboxRequestFinishedHandler = handler;
+				return setters;
+			},
 			onUnverifiedActivity: (handler) => {
 				this.unverifiedActivityHandler = handler;
 				return setters;

package/dist/compat/mod.d.cts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { en as ActivityTransformer, n as Context } from "../context-B6X-t8gI.cjs";
+import { en as ActivityTransformer, n as Context } from "../context-tsYPJ2Ew.cjs";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/mod.d.ts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { en as ActivityTransformer, n as Context } from "../context-CtI307_A.js";
+import { en as ActivityTransformer, n as Context } from "../context-7NyiqIcg.js";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/transformers.test.mjs

@@ -5,7 +5,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { O as actorDehydrator, k as autoIdAssigner, n as FederationImpl } from "../middleware-Dxn0E9ES.mjs";
+import { O as actorDehydrator, k as autoIdAssigner, n as FederationImpl } from "../middleware-DAA7wDdS.mjs";
 import { Follow, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 //#region src/compat/transformers.test.ts

package/dist/{compound-proof-5bg_j_ye.mjs → compound-proof-D--HeIbV.mjs}

@@ -2,9 +2,10 @@ import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { a as getRawCanonicalPortableId, l as isPortableId, n as getCanonicalPortableId } from "./portable-key-id-Ca30-hOa.mjs";
+import { a as verificationObservation, t as observeAttempt } from "./verification-Dpfcw8ml.mjs";
 import { n as preloadedOnlyDocumentLoader } from "./public-audience--klBIOk1.mjs";
-import { c as getNormalizationContextLoader } from "./ld-Cf4CPWN_.mjs";
-import { l as verifyPortableObjectProofPolicy, n as classifyFep2277CoreType, o as verifyMapLocalProof } from "./proof-8WiH_-Gq.mjs";
+import { c as getNormalizationContextLoader } from "./ld-BDMNyM2M.mjs";
+import { l as verifyPortableObjectProofPolicy, n as classifyFep2277CoreType, o as verifyMapLocalProof } from "./proof-nce4pf5S.mjs";
 import { parseIri, preloadedContexts } from "@fedify/vocab-runtime";
 import jsonld from "@fedify/vocab-runtime/jsonld";
 //#region src/sig/compound-proof.ts
@@ -441,6 +442,26 @@ function findUnsupportedCompoundProofShape(json) {
 	return findInJsonMaps(json, (map, path) => Object.hasOwn(map, "proof") && !isJsonMap(map.proof) ? childPath(path, "proof") : void 0) ?? null;
 }
 /**
+* Finds the first embedded map that carries a direct `proof` but not its own
+* `@context`.  The map-local compound-proof profile verifies each proof-bearing
+* map as a self-contained document, so the inbox rejects such a map with
+* `missingContext` whatever its proof.  An object embedded with its captured
+* signed representation, e.g., by {@link signObject}, always keeps its own
+* `@context`; one rebuilt under its parent's context, e.g., an object parsed
+* from a received document, never does, and its proof no longer covers what
+* it has become anyway.
+*
+* The input must be a finite, already-materialized JSON tree; see
+* {@link containsCompoundPortableObject}.
+*
+* @returns The RFC 6901 JSON Pointer to the map, or `null` if every embedded
+*          proof-bearing map has its own `@context`.
+* @internal
+*/
+function findEmbeddedProofWithoutContext(json) {
+	return findInJsonMaps(json, (map, path) => path !== "" && Object.hasOwn(map, "proof") && !Object.hasOwn(map, "@context") ? path : void 0) ?? null;
+}
+/**
 * Discovers direct literal proof-bearing maps in an immutable JSON snapshot.
 *
 * Discovery is bounded and atomic.  Unsupported proof shapes, non-JSON input,
@@ -517,7 +538,23 @@ async function verifyDiscoveredProofDocuments(discovered, options) {
 			verified: false,
 			reason: { type: "missingContext" }
 		});
-		const key = await verifyMapLocalProof(document.securedDocument, options);
+		const inherited = options[verificationObservation];
+		let subjectId = null;
+		if (inherited != null && document.id != null) try {
+			subjectId = parseIri(document.id);
+		} catch {}
+		const key = await observeAttempt({ [verificationObservation]: inherited == null ? void 0 : {
+			...inherited,
+			attempt: void 0,
+			check: void 0,
+			subject: {
+				id: subjectId,
+				pointer: document.path
+			}
+		} }, "objectIntegrity", (observation) => verifyMapLocalProof(document.securedDocument, {
+			...options,
+			[verificationObservation]: inherited == null ? void 0 : observation
+		}), (key) => key != null);
 		return key == null ? Object.freeze({
 			...metadata,
 			verified: false,
@@ -949,4 +986,4 @@ async function checkServedPortableMap({ map, contexts }, options) {
 	return UNSECURED_CORE_TYPES.has(type) ? null : "missingProof";
 }
 //#endregion
-export { verifyCompoundPortableObjectProofs as a, inspectCompoundPortableObjectApplicability as i, discoverCompoundProofDocuments as n, verifyCompoundProofDocuments as o, findUnsupportedCompoundProofShape as r, verifyServedPortableObjects as s, containsCompoundPortableObject as t };
+export { inspectCompoundPortableObjectApplicability as a, verifyServedPortableObjects as c, findUnsupportedCompoundProofShape as i, discoverCompoundProofDocuments as n, verifyCompoundPortableObjectProofs as o, findEmbeddedProofWithoutContext as r, verifyCompoundProofDocuments as s, containsCompoundPortableObject as t };

package/dist/{context-CtI307_A.d.ts → context-7NyiqIcg.d.ts}

@@ -1,6 +1,6 @@
 /// <reference lib="esnext.temporal" />
 import { o as JsonValue, s as NodeInfo, t as GetNodeInfoOptions } from "./client-D-XP_Ccb.js";
-import { o as VerifyRequestFailureReason, t as HttpMessageSignaturesSpec } from "./http-DGx0KOws.js";
+import { _ as InboxVerificationKey, d as InboxProofPolicyFailureReason, h as InboxVerificationAttempt, w as VerifyRequestFailureReason, y as HttpMessageSignaturesSpec } from "./key-C1nv7_jD.js";
 import { n as GetKeyOwnerOptions } from "./owner-BSzr5-I8.js";
 import { n as KvStore, t as KvKey } from "./kv-B2mzK5tl.js";
 import { Router } from "@fedify/uri-template";
@@ -11,6 +11,105 @@ import { Link as Link$1, LookupWebFingerOptions, ResourceDescriptor } from "@fed
 import { MeterProvider as MeterProvider$1, MetricReader } from "@opentelemetry/sdk-metrics";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 
+//#region src/federation/inbox-report.d.ts
+/**
+* A JSON value retained from the incoming request.
+* @since 2.4.0
+*/
+type InboxJsonValue = null | boolean | number | string | readonly InboxJsonValue[] | {
+  readonly [key: string]: InboxJsonValue;
+};
+/**
+* The final inbox authentication decision.
+* @since 2.4.0
+*/
+type InboxAuthentication = {
+  readonly status: "verified"; /** Direct references to the attempts that authenticated this delivery. */
+  readonly attempts: readonly Extract<InboxVerificationAttempt, {
+    status: "verified";
+  }>[];
+} | {
+  readonly status: "rejected";
+  readonly reason: {
+    readonly type: "verificationFailed";
+  } | {
+    readonly type: "actorKeyMismatch";
+    readonly key: InboxVerificationKey;
+    readonly actorIds: readonly URL[];
+  } | {
+    readonly type: "proofPolicy";
+    readonly policy: "portableActor" | "portableActivity" | "compound";
+    readonly detail?: InboxProofPolicyFailureReason;
+  } | {
+    readonly type: "invalidNonce";
+  };
+} | {
+  readonly status: "skipped";
+} | {
+  readonly status: "notDetermined";
+};
+/**
+* How an inbox request finished.
+* @since 2.4.0
+*/
+type InboxRequestOutcome = {
+  readonly type: "response";
+  readonly status: number;
+  readonly disposition: "processed" | "enqueued" | "duplicate" | "unhandled" | "customResponse";
+} | {
+  readonly type: "response";
+  readonly status: number;
+  readonly disposition: "rejected";
+  readonly reason: "recipientNotFound" | "invalidJson" | "invalidJsonLd" | "invalidActivity" | "bodyTooLarge" | "missingActor" | "authentication";
+} | {
+  readonly type: "response";
+  readonly status: number;
+  readonly disposition: "failed";
+  readonly reason: "bodyUnavailable" | "enqueueError" | "listenerError";
+  readonly error?: unknown;
+} | {
+  readonly type: "exception";
+  readonly stage: "prepare" | "parse" | "verify" | "policy" | "dispatch" | "respond"; /** The original thrown value, including null/undefined. */
+  readonly error: unknown;
+};
+/**
+* Observations of a single inbox delivery request.
+* @since 2.4.0
+*/
+interface InboxRequestReport {
+  /** The delivery route, including a portable gateway route. */
+  readonly inbox: {
+    readonly kind: "personal" | "shared" | "portable";
+    readonly recipient: string | null;
+  };
+  /** Unavailable differs from a successfully parsed JSON null. */
+  readonly payload: {
+    readonly status: "unavailable";
+  } | {
+    readonly status: "parsed";
+    readonly value: InboxJsonValue;
+  };
+  /** The Activity obtained by the normal processing flow, if any. */
+  readonly activity: Activity | null;
+  /** Logical evaluations, including unsuccessful fallback paths. */
+  readonly attempts: readonly InboxVerificationAttempt[];
+  /** Cryptographic success alone does not imply this decision is verified. */
+  readonly authentication: InboxAuthentication;
+  /** Response status snapshot or the original exception. */
+  readonly outcome: InboxRequestOutcome;
+}
+/**
+* Observes an inbox delivery after processing, before fetch resolves/rethrows.
+* The callback is awaited.  Its errors are logged and swallowed, preserving
+* the original response/exception.  The last registered callback replaces the
+* previous one.  It excludes inbox collection GETs, unmatched routes,
+* programmatic routing, and queue workers.  This is not an atomic persistence
+* guarantee.  Keys/owner/controller declarations remain untrusted unless the
+* final authentication decision verifies them.
+* @since 2.4.0
+*/
+type InboxRequestFinishedHandler<TContextData> = (context: RequestContext<TContextData>, report: InboxRequestReport) => void | Promise<void>;
+//#endregion
 //#region src/compat/types.d.ts
 /**
 * A function that transforms an activity object.
@@ -2790,6 +2889,16 @@ interface InboxListenerSetters<TContextData> {
   */
   onError(handler: InboxErrorHandler<TContextData>): InboxListenerSetters<TContextData>;
   /**
+  * Observes each configured inbox delivery once, before fetch finishes.
+  * The callback is awaited and its errors do not alter delivery processing.
+  * Calling this again replaces the previous callback.  Built federations
+  * retain the callback registered at build time.
+  * @param handler The request completion observer.
+  * @returns This setter for chaining.
+  * @since 2.4.0
+  */
+  onRequestFinished(handler: InboxRequestFinishedHandler<TContextData>): InboxListenerSetters<TContextData>;
+  /**
   * Registers a callback for incoming activities whose HTTP signatures could
   * not be verified.
   *
@@ -4716,4 +4825,4 @@ interface ActorKeyPair extends CryptoKeyPair {
   readonly multikey: Multikey;
 }
 //#endregion
-export { respondWithObject as $, digest as $t, InboxChallengePolicy as A, CustomCollectionDispatcher as At, createFederation as B, OutboxListener as Bt, FederationBenchmarkOptions as C, ActorKeyPairsDispatcher as Ct, FederationStartQueueOptions as D, CollectionDispatcher as Dt, FederationOptions as E, CollectionCursor as Et, PortableInboxForwardingOptions as F, MediaUploaderCallback as Ft, TaskEnqueueOptions as G, SharedInboxKeyDispatcher as Gt, createFederationBuilder as H, OutboxPermanentFailureHandler as Ht, Rfc6570Expression as I, NodeInfoDispatcher as It, CreateExponentialBackoffPolicyOptions as J, WebFingerLinksDispatcher as Jt, TaskHandler as K, UnverifiedActivityHandler as Kt, FederationKvPrefixes as L, ObjectAuthorizePredicate as Lt, MediaUploaderSetters as M, HashlinkMediaRequest as Mt, ObjectCallbackSetters as N, InboxErrorHandler as Nt, IdempotencyKeyCallback as O, CustomCollectionCounter as Ot, OutboxListenerSetters as P, InboxListener as Pt, RespondWithObjectOptions as Q, buildCollectionSynchronizationHeader as Qt, FederationOrigin as R, ObjectDispatcher as Rt, Federation as S, ActorHandleMapper as St, FederationFetchOptions as T, CollectionCounter as Tt, TaskDefinition as U, PortableActorIdMapper as Ut, Message as V, OutboxListenerErrorHandler as Vt, TaskDefinitionOptions as W, PortableCollectionOwnerMapper as Wt, RetryPolicy as X, SenderKeyPair as Xt, RetryContext as Y, SendActivityError as Yt, createExponentialBackoffPolicy as Z, PageItems as Zt, ActorCallbackSetters as _, NormalizedCircuitBreakerOptions as _t, GetObjectOptions as a, MessageQueueEnqueueOptions as at, CustomCollectionCallbackSetters as b, ActorAliasMapper as bt, IsSignedByAudienceOptions as c, CircuitBreaker as ct, ParseUriResult as d, CircuitBreakerCreateOptions as dt, ActivityTransformer as en, respondWithObjectIfAcceptable as et, PortableRequest as f, CircuitBreakerFailurePolicy as ft, SendActivityOptionsForCollection as g, CircuitBreakerStateChange as gt, SendActivityOptions as h, CircuitBreakerState as ht, GetActorOptions as i, MessageQueueDepth as it, InboxListenerSetters as j, HashlinkMediaDispatcher as jt, IdempotencyStrategy as k, CustomCollectionCursor as kt, OutboxContext as l, CircuitBreakerActivityDrop as lt, RouteActivityOptions as m, CircuitBreakerOptions as mt, Context as n, InProcessMessageQueueOptions as nt, GetSignedKeyOptions as o, MessageQueueListenOptions as ot, RequestContext as p, CircuitBreakerKvState as pt, TaskRegistry as q, UnverifiedActivityReason as qt, ForwardActivityOptions as r, MessageQueue as rt, InboxContext as s, ParallelMessageQueue as st, ActorKeyPair as t, InProcessMessageQueue as tt, ParseUriOptions as u, CircuitBreakerBeforeSendDecision as ut, CollectionCallbackSetters as v, normalizeCircuitBreakerOptions as vt, FederationBuilder as w, AuthorizePredicate as wt, Federatable as x, ActorDispatcher as xt, ConstructorWithTypeId as y, parseCircuitBreakerKvState as yt, FederationQueueOptions as z, OutboxErrorHandler as zt };
+export { respondWithObject as $, digest as $t, InboxChallengePolicy as A, CustomCollectionDispatcher as At, createFederation as B, OutboxListener as Bt, FederationBenchmarkOptions as C, ActorKeyPairsDispatcher as Ct, FederationStartQueueOptions as D, CollectionDispatcher as Dt, FederationOptions as E, CollectionCursor as Et, PortableInboxForwardingOptions as F, MediaUploaderCallback as Ft, TaskEnqueueOptions as G, SharedInboxKeyDispatcher as Gt, createFederationBuilder as H, OutboxPermanentFailureHandler as Ht, Rfc6570Expression as I, NodeInfoDispatcher as It, CreateExponentialBackoffPolicyOptions as J, WebFingerLinksDispatcher as Jt, TaskHandler as K, UnverifiedActivityHandler as Kt, FederationKvPrefixes as L, ObjectAuthorizePredicate as Lt, MediaUploaderSetters as M, HashlinkMediaRequest as Mt, ObjectCallbackSetters as N, InboxErrorHandler as Nt, IdempotencyKeyCallback as O, CustomCollectionCounter as Ot, OutboxListenerSetters as P, InboxListener as Pt, RespondWithObjectOptions as Q, buildCollectionSynchronizationHeader as Qt, FederationOrigin as R, ObjectDispatcher as Rt, Federation as S, ActorHandleMapper as St, FederationFetchOptions as T, CollectionCounter as Tt, TaskDefinition as U, PortableActorIdMapper as Ut, Message as V, OutboxListenerErrorHandler as Vt, TaskDefinitionOptions as W, PortableCollectionOwnerMapper as Wt, RetryPolicy as X, SenderKeyPair as Xt, RetryContext as Y, SendActivityError as Yt, createExponentialBackoffPolicy as Z, PageItems as Zt, ActorCallbackSetters as _, NormalizedCircuitBreakerOptions as _t, GetObjectOptions as a, InboxRequestReport as an, MessageQueueEnqueueOptions as at, CustomCollectionCallbackSetters as b, ActorAliasMapper as bt, IsSignedByAudienceOptions as c, CircuitBreaker as ct, ParseUriResult as d, CircuitBreakerCreateOptions as dt, ActivityTransformer as en, respondWithObjectIfAcceptable as et, PortableRequest as f, CircuitBreakerFailurePolicy as ft, SendActivityOptionsForCollection as g, CircuitBreakerStateChange as gt, SendActivityOptions as h, CircuitBreakerState as ht, GetActorOptions as i, InboxRequestOutcome as in, MessageQueueDepth as it, InboxListenerSetters as j, HashlinkMediaDispatcher as jt, IdempotencyStrategy as k, CustomCollectionCursor as kt, OutboxContext as l, CircuitBreakerActivityDrop as lt, RouteActivityOptions as m, CircuitBreakerOptions as mt, Context as n, InboxJsonValue as nn, InProcessMessageQueueOptions as nt, GetSignedKeyOptions as o, MessageQueueListenOptions as ot, RequestContext as p, CircuitBreakerKvState as pt, TaskRegistry as q, UnverifiedActivityReason as qt, ForwardActivityOptions as r, InboxRequestFinishedHandler as rn, MessageQueue as rt, InboxContext as s, ParallelMessageQueue as st, ActorKeyPair as t, InboxAuthentication as tn, InProcessMessageQueue as tt, ParseUriOptions as u, CircuitBreakerBeforeSendDecision as ut, CollectionCallbackSetters as v, normalizeCircuitBreakerOptions as vt, FederationBuilder as w, AuthorizePredicate as wt, Federatable as x, ActorDispatcher as xt, ConstructorWithTypeId as y, parseCircuitBreakerKvState as yt, FederationQueueOptions as z, OutboxErrorHandler as zt };

package/dist/{context-B6X-t8gI.d.cts → context-tsYPJ2Ew.d.cts}

@@ -1,6 +1,6 @@
 /// <reference lib="esnext.temporal" />
 import { o as JsonValue, s as NodeInfo, t as GetNodeInfoOptions } from "./client-D-XP_Ccb.cjs";
-import { o as VerifyRequestFailureReason, t as HttpMessageSignaturesSpec } from "./http-BrwKINQn.cjs";
+import { _ as InboxVerificationKey, d as InboxProofPolicyFailureReason, h as InboxVerificationAttempt, w as VerifyRequestFailureReason, y as HttpMessageSignaturesSpec } from "./key-DYxuyd-s.cjs";
 import { n as GetKeyOwnerOptions } from "./owner-BF0L9cMt.cjs";
 import { n as KvStore, t as KvKey } from "./kv-B2mzK5tl.cjs";
 import { Activity, Actor, Collection, CryptographicKey, Hashtag, Link, LookupObjectOptions, Multikey, Object as Object$1, Recipient, Tombstone, TraverseCollectionOptions } from "@fedify/vocab";
@@ -9,6 +9,105 @@ import { Link as Link$1, LookupWebFingerOptions, ResourceDescriptor } from "@fed
 import { MeterProvider, Span, Tracer, TracerProvider } from "@opentelemetry/api";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 
+//#region src/federation/inbox-report.d.ts
+/**
+* A JSON value retained from the incoming request.
+* @since 2.4.0
+*/
+type InboxJsonValue = null | boolean | number | string | readonly InboxJsonValue[] | {
+  readonly [key: string]: InboxJsonValue;
+};
+/**
+* The final inbox authentication decision.
+* @since 2.4.0
+*/
+type InboxAuthentication = {
+  readonly status: "verified"; /** Direct references to the attempts that authenticated this delivery. */
+  readonly attempts: readonly Extract<InboxVerificationAttempt, {
+    status: "verified";
+  }>[];
+} | {
+  readonly status: "rejected";
+  readonly reason: {
+    readonly type: "verificationFailed";
+  } | {
+    readonly type: "actorKeyMismatch";
+    readonly key: InboxVerificationKey;
+    readonly actorIds: readonly URL[];
+  } | {
+    readonly type: "proofPolicy";
+    readonly policy: "portableActor" | "portableActivity" | "compound";
+    readonly detail?: InboxProofPolicyFailureReason;
+  } | {
+    readonly type: "invalidNonce";
+  };
+} | {
+  readonly status: "skipped";
+} | {
+  readonly status: "notDetermined";
+};
+/**
+* How an inbox request finished.
+* @since 2.4.0
+*/
+type InboxRequestOutcome = {
+  readonly type: "response";
+  readonly status: number;
+  readonly disposition: "processed" | "enqueued" | "duplicate" | "unhandled" | "customResponse";
+} | {
+  readonly type: "response";
+  readonly status: number;
+  readonly disposition: "rejected";
+  readonly reason: "recipientNotFound" | "invalidJson" | "invalidJsonLd" | "invalidActivity" | "bodyTooLarge" | "missingActor" | "authentication";
+} | {
+  readonly type: "response";
+  readonly status: number;
+  readonly disposition: "failed";
+  readonly reason: "bodyUnavailable" | "enqueueError" | "listenerError";
+  readonly error?: unknown;
+} | {
+  readonly type: "exception";
+  readonly stage: "prepare" | "parse" | "verify" | "policy" | "dispatch" | "respond"; /** The original thrown value, including null/undefined. */
+  readonly error: unknown;
+};
+/**
+* Observations of a single inbox delivery request.
+* @since 2.4.0
+*/
+interface InboxRequestReport {
+  /** The delivery route, including a portable gateway route. */
+  readonly inbox: {
+    readonly kind: "personal" | "shared" | "portable";
+    readonly recipient: string | null;
+  };
+  /** Unavailable differs from a successfully parsed JSON null. */
+  readonly payload: {
+    readonly status: "unavailable";
+  } | {
+    readonly status: "parsed";
+    readonly value: InboxJsonValue;
+  };
+  /** The Activity obtained by the normal processing flow, if any. */
+  readonly activity: Activity | null;
+  /** Logical evaluations, including unsuccessful fallback paths. */
+  readonly attempts: readonly InboxVerificationAttempt[];
+  /** Cryptographic success alone does not imply this decision is verified. */
+  readonly authentication: InboxAuthentication;
+  /** Response status snapshot or the original exception. */
+  readonly outcome: InboxRequestOutcome;
+}
+/**
+* Observes an inbox delivery after processing, before fetch resolves/rethrows.
+* The callback is awaited.  Its errors are logged and swallowed, preserving
+* the original response/exception.  The last registered callback replaces the
+* previous one.  It excludes inbox collection GETs, unmatched routes,
+* programmatic routing, and queue workers.  This is not an atomic persistence
+* guarantee.  Keys/owner/controller declarations remain untrusted unless the
+* final authentication decision verifies them.
+* @since 2.4.0
+*/
+type InboxRequestFinishedHandler<TContextData> = (context: RequestContext<TContextData>, report: InboxRequestReport) => void | Promise<void>;
+//#endregion
 //#region src/compat/types.d.ts
 /**
 * A function that transforms an activity object.
@@ -2788,6 +2887,16 @@ interface InboxListenerSetters<TContextData> {
   */
   onError(handler: InboxErrorHandler<TContextData>): InboxListenerSetters<TContextData>;
   /**
+  * Observes each configured inbox delivery once, before fetch finishes.
+  * The callback is awaited and its errors do not alter delivery processing.
+  * Calling this again replaces the previous callback.  Built federations
+  * retain the callback registered at build time.
+  * @param handler The request completion observer.
+  * @returns This setter for chaining.
+  * @since 2.4.0
+  */
+  onRequestFinished(handler: InboxRequestFinishedHandler<TContextData>): InboxListenerSetters<TContextData>;
+  /**
   * Registers a callback for incoming activities whose HTTP signatures could
   * not be verified.
   *
@@ -4714,4 +4823,4 @@ interface ActorKeyPair extends CryptoKeyPair {
   readonly multikey: Multikey;
 }
 //#endregion
-export { respondWithObject as $, digest as $t, InboxChallengePolicy as A, CustomCollectionDispatcher as At, createFederation as B, OutboxListener as Bt, FederationBenchmarkOptions as C, ActorKeyPairsDispatcher as Ct, FederationStartQueueOptions as D, CollectionDispatcher as Dt, FederationOptions as E, CollectionCursor as Et, PortableInboxForwardingOptions as F, MediaUploaderCallback as Ft, TaskEnqueueOptions as G, SharedInboxKeyDispatcher as Gt, createFederationBuilder as H, OutboxPermanentFailureHandler as Ht, Rfc6570Expression as I, NodeInfoDispatcher as It, CreateExponentialBackoffPolicyOptions as J, WebFingerLinksDispatcher as Jt, TaskHandler as K, UnverifiedActivityHandler as Kt, FederationKvPrefixes as L, ObjectAuthorizePredicate as Lt, MediaUploaderSetters as M, HashlinkMediaRequest as Mt, ObjectCallbackSetters as N, InboxErrorHandler as Nt, IdempotencyKeyCallback as O, CustomCollectionCounter as Ot, OutboxListenerSetters as P, InboxListener as Pt, RespondWithObjectOptions as Q, buildCollectionSynchronizationHeader as Qt, FederationOrigin as R, ObjectDispatcher as Rt, Federation as S, ActorHandleMapper as St, FederationFetchOptions as T, CollectionCounter as Tt, TaskDefinition as U, PortableActorIdMapper as Ut, Message as V, OutboxListenerErrorHandler as Vt, TaskDefinitionOptions as W, PortableCollectionOwnerMapper as Wt, RetryPolicy as X, SenderKeyPair as Xt, RetryContext as Y, SendActivityError as Yt, createExponentialBackoffPolicy as Z, PageItems as Zt, ActorCallbackSetters as _, NormalizedCircuitBreakerOptions as _t, GetObjectOptions as a, MessageQueueEnqueueOptions as at, CustomCollectionCallbackSetters as b, ActorAliasMapper as bt, IsSignedByAudienceOptions as c, CircuitBreaker as ct, ParseUriResult as d, CircuitBreakerCreateOptions as dt, ActivityTransformer as en, respondWithObjectIfAcceptable as et, PortableRequest as f, CircuitBreakerFailurePolicy as ft, SendActivityOptionsForCollection as g, CircuitBreakerStateChange as gt, SendActivityOptions as h, CircuitBreakerState as ht, GetActorOptions as i, MessageQueueDepth as it, InboxListenerSetters as j, HashlinkMediaDispatcher as jt, IdempotencyStrategy as k, CustomCollectionCursor as kt, OutboxContext as l, CircuitBreakerActivityDrop as lt, RouteActivityOptions as m, CircuitBreakerOptions as mt, Context as n, InProcessMessageQueueOptions as nt, GetSignedKeyOptions as o, MessageQueueListenOptions as ot, RequestContext as p, CircuitBreakerKvState as pt, TaskRegistry as q, UnverifiedActivityReason as qt, ForwardActivityOptions as r, MessageQueue as rt, InboxContext as s, ParallelMessageQueue as st, ActorKeyPair as t, InProcessMessageQueue as tt, ParseUriOptions as u, CircuitBreakerBeforeSendDecision as ut, CollectionCallbackSetters as v, normalizeCircuitBreakerOptions as vt, FederationBuilder as w, AuthorizePredicate as wt, Federatable as x, ActorDispatcher as xt, ConstructorWithTypeId as y, parseCircuitBreakerKvState as yt, FederationQueueOptions as z, OutboxErrorHandler as zt };
+export { respondWithObject as $, digest as $t, InboxChallengePolicy as A, CustomCollectionDispatcher as At, createFederation as B, OutboxListener as Bt, FederationBenchmarkOptions as C, ActorKeyPairsDispatcher as Ct, FederationStartQueueOptions as D, CollectionDispatcher as Dt, FederationOptions as E, CollectionCursor as Et, PortableInboxForwardingOptions as F, MediaUploaderCallback as Ft, TaskEnqueueOptions as G, SharedInboxKeyDispatcher as Gt, createFederationBuilder as H, OutboxPermanentFailureHandler as Ht, Rfc6570Expression as I, NodeInfoDispatcher as It, CreateExponentialBackoffPolicyOptions as J, WebFingerLinksDispatcher as Jt, TaskHandler as K, UnverifiedActivityHandler as Kt, FederationKvPrefixes as L, ObjectAuthorizePredicate as Lt, MediaUploaderSetters as M, HashlinkMediaRequest as Mt, ObjectCallbackSetters as N, InboxErrorHandler as Nt, IdempotencyKeyCallback as O, CustomCollectionCounter as Ot, OutboxListenerSetters as P, InboxListener as Pt, RespondWithObjectOptions as Q, buildCollectionSynchronizationHeader as Qt, FederationOrigin as R, ObjectDispatcher as Rt, Federation as S, ActorHandleMapper as St, FederationFetchOptions as T, CollectionCounter as Tt, TaskDefinition as U, PortableActorIdMapper as Ut, Message as V, OutboxListenerErrorHandler as Vt, TaskDefinitionOptions as W, PortableCollectionOwnerMapper as Wt, RetryPolicy as X, SenderKeyPair as Xt, RetryContext as Y, SendActivityError as Yt, createExponentialBackoffPolicy as Z, PageItems as Zt, ActorCallbackSetters as _, NormalizedCircuitBreakerOptions as _t, GetObjectOptions as a, InboxRequestReport as an, MessageQueueEnqueueOptions as at, CustomCollectionCallbackSetters as b, ActorAliasMapper as bt, IsSignedByAudienceOptions as c, CircuitBreaker as ct, ParseUriResult as d, CircuitBreakerCreateOptions as dt, ActivityTransformer as en, respondWithObjectIfAcceptable as et, PortableRequest as f, CircuitBreakerFailurePolicy as ft, SendActivityOptionsForCollection as g, CircuitBreakerStateChange as gt, SendActivityOptions as h, CircuitBreakerState as ht, GetActorOptions as i, InboxRequestOutcome as in, MessageQueueDepth as it, InboxListenerSetters as j, HashlinkMediaDispatcher as jt, IdempotencyStrategy as k, CustomCollectionCursor as kt, OutboxContext as l, CircuitBreakerActivityDrop as lt, RouteActivityOptions as m, CircuitBreakerOptions as mt, Context as n, InboxJsonValue as nn, InProcessMessageQueueOptions as nt, GetSignedKeyOptions as o, MessageQueueListenOptions as ot, RequestContext as p, CircuitBreakerKvState as pt, TaskRegistry as q, UnverifiedActivityReason as qt, ForwardActivityOptions as r, InboxRequestFinishedHandler as rn, MessageQueue as rt, InboxContext as s, ParallelMessageQueue as st, ActorKeyPair as t, InboxAuthentication as tn, InProcessMessageQueue as tt, ParseUriOptions as u, CircuitBreakerBeforeSendDecision as ut, CollectionCallbackSetters as v, normalizeCircuitBreakerOptions as vt, FederationBuilder as w, AuthorizePredicate as wt, Federatable as x, ActorDispatcher as xt, ConstructorWithTypeId as y, parseCircuitBreakerKvState as yt, FederationQueueOptions as z, OutboxErrorHandler as zt };

package/dist/{deno-AmcRMq5z.mjs → deno-DVP7DGJC.mjs}

@@ -3,6 +3,6 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.4.0-dev.2256+683c50ba";
+var version = "2.4.0-dev.2260+42356e7d";
 //#endregion
 export { version as n, name as t };

package/dist/{docloader-CIP_SG39.mjs → docloader-Dv1JJl37.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { c as validateCryptoKey } from "./key-CEsu7oaD.mjs";
-import { n as doubleKnock } from "./http-DkqWu-sm.mjs";
+import { c as validateCryptoKey } from "./key-B7N8mNoY.mjs";
+import { n as doubleKnock } from "./http-DvpuyDJB.mjs";
 import { getLogger } from "@logtape/logtape";
 import { FetchError, UrlError, createActivityPubRequest, getRemoteDocument, logRequest, resolveDocumentLoaderTimeout, validatePublicUrl, withDocumentLoaderTimeout } from "@fedify/vocab-runtime";
 import { curry } from "es-toolkit";

package/dist/federation/builder.test.mjs

@@ -7,7 +7,7 @@ import { t as assertExists } from "../assert_exists-cffSpJ7X.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
-import { r as createFederationBuilder } from "../builder-DvSQqk2l.mjs";
+import { r as createFederationBuilder } from "../builder-BK8HfSUm.mjs";
 import { DisallowedOperatorError, DisallowedVarSpecModifierError, DuplicateRouteVariableError, RouteTemplateOptionsNotMatchedError, RouterError } from "@fedify/uri-template";
 import { Activity, Note, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";

package/dist/federation/compound-fanout.test.mjs

@@ -6,11 +6,11 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { n as exportJwk } from "../key-CEsu7oaD.mjs";
+import { n as exportJwk } from "../key-B7N8mNoY.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "../outgoing-jsonld-4IJqPYos.mjs";
-import { a as signObject, d as verifyProof } from "../proof-8WiH_-Gq.mjs";
+import { a as signObject, d as verifyProof } from "../proof-nce4pf5S.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl } from "../middleware-Dxn0E9ES.mjs";
+import { n as FederationImpl } from "../middleware-DAA7wDdS.mjs";
 import { Create, DataIntegrityProof, Note } from "@fedify/vocab";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/handler-compound-proof.test.mjs

@@ -5,10 +5,10 @@ import { r as createRequestContext, t as createInboxContext } from "../context-8
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-Cf4CPWN_.mjs";
-import { l as signRequest } from "../http-DkqWu-sm.mjs";
+import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-BDMNyM2M.mjs";
+import { l as signRequest } from "../http-DvpuyDJB.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { f as handleInbox, o as createFederation } from "../middleware-Dxn0E9ES.mjs";
+import { f as handleInbox, o as createFederation } from "../middleware-DAA7wDdS.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { t as map_local_create_note_default } from "../map-local-create-note-B0SeXJms.mjs";
 import { Create, CryptographicKey, Multikey, Person, Update } from "@fedify/vocab";

package/dist/federation/handler.test.mjs

@@ -10,12 +10,12 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as parseAcceptSignature } from "../accept-CPVqki78.mjs";
-import { o as generateCryptoKeyPair } from "../key-CEsu7oaD.mjs";
-import { a as compactJsonLd, p as signJsonLd } from "../ld-Cf4CPWN_.mjs";
-import { a as signObject } from "../proof-8WiH_-Gq.mjs";
-import { l as signRequest } from "../http-DkqWu-sm.mjs";
+import { o as generateCryptoKeyPair } from "../key-B7N8mNoY.mjs";
+import { a as compactJsonLd, p as signJsonLd } from "../ld-BDMNyM2M.mjs";
+import { a as signObject } from "../proof-nce4pf5S.mjs";
+import { l as signRequest } from "../http-DvpuyDJB.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-Dxn0E9ES.mjs";
+import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-DAA7wDdS.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { Activity, Create, CryptographicKey, Multikey, Note, Person, Tombstone } from "@fedify/vocab";
 import { FetchError, parseIri } from "@fedify/vocab-runtime";
@@ -1242,6 +1242,67 @@ test("handleCollection() records not_found collection metrics", async () => {
 	assertEquals(durations[0].attributes["activitypub.collection.result"], "not_found");
 	assertEquals(recorder.getMeasurements("activitypub.collection.page.items").length, 0);
 });
+test("handleInbox() reports dispatch context errors before a failing error hook", async () => {
+	const kv = new MemoryKvStore();
+	const federation = createFederation({ kv });
+	const request = await signRequest(new Request("https://example.com/inbox", {
+		method: "POST",
+		body: JSON.stringify(await new Create({ actor: rsaPublicKey3.ownerId }).toJsonLd({ contextLoader: mockDocumentLoader }))
+	}), rsaPrivateKey3, rsaPublicKey3.id);
+	const context = createRequestContext({
+		federation,
+		request,
+		url: new URL(request.url),
+		data: void 0,
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader
+	});
+	const error = /* @__PURE__ */ new Error("Cannot create dispatch context");
+	const reports = [];
+	const listeners = new ActivityListenerSet();
+	let listenerCalled = false;
+	listeners.add(Create, () => {
+		listenerCalled = true;
+	});
+	let errorHookCalled = false;
+	assertEquals((await handleInbox(request, {
+		context,
+		recipient: null,
+		kv,
+		kvPrefixes: {
+			activityIdempotence: ["activity"],
+			publicKey: ["key"],
+			acceptSignatureNonce: ["nonce"]
+		},
+		actorDispatcher: () => new Person({}),
+		inboxListeners: listeners,
+		inboxContextFactory: () => {
+			throw error;
+		},
+		inboxErrorHandler: (_ctx, value) => {
+			assertEquals(value, error);
+			errorHookCalled = true;
+			throw new Error("Error hook failed");
+		},
+		inboxRequestFinishedHandler: (_ctx, report) => {
+			reports.push(report);
+		},
+		onNotFound: () => new Response(null, { status: 404 }),
+		signatureTimeWindow: false,
+		skipSignatureVerification: false
+	})).status, 500);
+	assertEquals(listenerCalled, false);
+	assertEquals(errorHookCalled, true);
+	assertEquals(reports.length, 1);
+	assertEquals(reports[0].authentication.status, "verified");
+	assertEquals(reports[0].outcome, {
+		type: "response",
+		status: 500,
+		disposition: "failed",
+		reason: "listenerError",
+		error
+	});
+});
 test("handleInbox()", async () => {
 	const activity = new Create({
 		id: new URL("https://example.com/activities/1"),
@@ -4426,7 +4487,11 @@ test("handleInbox() nonce replay prevention", async () => {
 		if (identifier !== "someone") return null;
 		return new Person({ name: "Someone" });
 	};
+	let report;
 	const response = await handleInbox(signedRequest, {
+		inboxRequestFinishedHandler: (_ctx, value) => {
+			report = value;
+		},
 		recipient: "someone",
 		context,
 		inboxContextFactory(_activity) {
@@ -4454,6 +4519,12 @@ test("handleInbox() nonce replay prevention", async () => {
 		}
 	});
 	assertEquals(response.status, 401);
+	assert(report != null);
+	assertEquals(report.authentication, {
+		status: "rejected",
+		reason: { type: "invalidNonce" }
+	});
+	assertEquals(report.attempts.at(-1)?.status, "verified");
 	const acceptSig = response.headers.get("Accept-Signature");
 	assert(acceptSig != null, "Must emit fresh Accept-Signature challenge");
 	const parsed = parseAcceptSignature(acceptSig);

package/dist/federation/hashlink-media.test.mjs

@@ -10,8 +10,8 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-Dxn0E9ES.mjs";
-import { r as createFederationBuilder } from "../builder-DvSQqk2l.mjs";
+import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-DAA7wDdS.mjs";
+import { r as createFederationBuilder } from "../builder-BK8HfSUm.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { Note } from "@fedify/vocab";
 import { computeDigestMultibase, encodeMultibase, exportDidKey } from "@fedify/vocab-runtime";

package/dist/federation/idempotency.test.mjs

@@ -4,9 +4,9 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { a as signObject } from "../proof-8WiH_-Gq.mjs";
+import { a as signObject } from "../proof-nce4pf5S.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-Dxn0E9ES.mjs";
+import { o as createFederation } from "../middleware-DAA7wDdS.mjs";
 import { Create, Follow, Person } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/idempotency.test.ts

package/dist/federation/inbox-report.test.d.mts

@@ -0,0 +1,2 @@
+import { Temporal } from "temporal-polyfill";
+import { URLPattern } from "urlpattern-polyfill";