@fedify/fedify 2.5.0-dev.2440 → 2.5.0-dev.2448

package/dist/{context-2wLkQrjb.d.ts → context-GlHrzdSP.d.ts}

@@ -1,16 +1,45 @@
 /// <reference lib="esnext.temporal" />
 import { o as JsonValue, s as NodeInfo, t as GetNodeInfoOptions } from "./client-D-XP_Ccb.js";
 import { _ as InboxVerificationKey, d as InboxProofPolicyFailureReason, h as InboxVerificationAttempt, w as VerifyRequestFailureReason, y as HttpMessageSignaturesSpec } from "./key-DhsBxxZN.js";
-import { n as GetKeyOwnerOptions } from "./owner-BSzr5-I8.js";
+import { m as GetKeyOwnerOptions, n as EffectiveContextLoaderPolicy } from "./ld-CcuZ4NZa.js";
 import { n as KvStore, t as KvKey } from "./kv-B2mzK5tl.js";
 import { Router } from "@fedify/uri-template";
 import { Activity, Actor, Collection, CryptographicKey, Hashtag, Link, LookupObjectOptions, Multikey, Object as Object$1, Recipient, Tombstone, TraverseCollectionOptions } from "@fedify/vocab";
 import { MeterProvider, Span, Tracer, TracerProvider } from "@opentelemetry/api";
-import { AuthenticatedDocumentLoaderFactory, DocumentLoader, DocumentLoaderFactory, GetUserAgentOptions, PortableObjectVerifier } from "@fedify/vocab-runtime";
+import { AuthenticatedDocumentLoaderFactory, DocumentLoader, DocumentLoaderFactory, GetUserAgentOptions, PortableObjectVerifier, RemoteDocument } from "@fedify/vocab-runtime";
 import { Link as Link$1, LookupWebFingerOptions, ResourceDescriptor } from "@fedify/webfinger";
 import { MeterProvider as MeterProvider$1, MetricReader } from "@opentelemetry/sdk-metrics";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 
+//#region src/federation/activity-listener.d.ts
+/**
+* Options for an inbox listener.
+* @since 2.5.0
+*/
+interface InboxListenerOptions {
+  /**
+  * Whether activities that declare no `actor` at all may reach the listener.
+  *
+  * Some protocols identify the requester without an `actor`; for example,
+  * Mastodon sends [FEP-7aa9] `FeatureRequest` activities without one.  When
+  * this is `true`, such an activity is dispatched to the listener if Fedify
+  * authenticated at least one principal for it, i.e., the signer of its
+  * Object Integrity Proofs or Linked Data Signature, or otherwise the signer
+  * of the HTTP request, and its `id`, if any, has the same origin as that
+  * principal.  The listener is then responsible for authorizing the request
+  * with {@link InboxContext.authentication}, e.g., with
+  * `featureInteraction.verifyRequest()` from
+  * `@fedify/interaction-controls`.
+  *
+  * An activity that declares an `actor` is never affected by this option;
+  * its actor must be authenticated as usual.
+  *
+  * [FEP-7aa9]: https://w3id.org/fep/7aa9
+  * @default `false`
+  */
+  readonly allowActorless?: boolean;
+}
+//#endregion
 //#region src/federation/inbox-report.d.ts
 /**
 * A JSON value retained from the incoming request.
@@ -53,6 +82,13 @@ type InboxAuthentication = {
     readonly type: "activityOriginMismatch";
     readonly activityId: URL;
     readonly actorIds: readonly URL[];
+  } | {
+    /**
+    * The activity declares no actor, and no principal was authenticated
+    * for it, although its listener allows activities without an actor.
+    * @since 2.5.0
+    */
+    readonly type: "noAuthenticatedPrincipal";
   };
 } | {
   readonly status: "skipped";
@@ -951,6 +987,18 @@ interface MessageQueue {
   */
   readonly atomicEnqueueMany?: boolean;
   /**
+  * The largest message, in bytes, that the backend can hold.  Fedify compares
+  * it with a conservative estimate of a message's serialized size: the
+  * length of its JSON serialization encoded in UTF-8, plus 8 bytes for each
+  * JSON value in it, plus what encoding strings beyond Latin-1 as UTF-16
+  * adds, which also bounds binary serialization formats.  When an
+  * incoming activity would make a larger inbox message, Fedify processes the
+  * activity right away instead of enqueueing it, as if there were no inbox
+  * queue.  When omitted, messages are enqueued regardless of their size.
+  * @since 2.5.0
+  */
+  readonly maxMessageSize?: number;
+  /**
   * Enqueues a message in the queue.
   * @param message The message to enqueue.
   * @param options Additional options for enqueuing the message.
@@ -1076,6 +1124,11 @@ declare class ParallelMessageQueue implements MessageQueue {
   * @since 2.4.0
   */
   readonly atomicEnqueueMany?: boolean;
+  /**
+  * Inherits the message size limit from the wrapped queue.
+  * @since 2.5.0
+  */
+  readonly maxMessageSize?: number;
   readonly getDepth?: () => Promise<MessageQueueDepth>;
   /**
   * Constructs a new {@link ParallelMessageQueue} with the given queue and
@@ -1092,6 +1145,211 @@ declare class ParallelMessageQueue implements MessageQueue {
   listen(handler: (message: any) => Promise<void> | void, options?: MessageQueueListenOptions): Promise<void>;
 }
 //#endregion
+//#region src/federation/inbox-authentication.d.ts
+/**
+* A party that Fedify authenticated for an incoming activity, independently
+* of the activity's declared `actor`.
+* @since 2.5.0
+*/
+interface InboxPrincipal {
+  /**
+  * What {@link InboxPrincipal.id} is:
+  *
+  *  -  `"actor"`: an actor whose ownership of the verifying key Fedify
+  *     confirmed with the actor's own document.
+  *  -  `"portableAuthority"`: a DID whose verification method made a valid
+  *     Object Integrity Proof.  It authenticates the [FEP-ef61] portable
+  *     actors of that DID, and nothing else.
+  *
+  * [FEP-ef61]: https://w3id.org/fep/ef61
+  */
+  readonly kind: "actor" | "portableAuthority";
+  /** The actor ID, or the DID if {@link kind} is `"portableAuthority"`. */
+  readonly id: URL;
+  /**
+  * How the principal was authenticated:
+  *
+  *  -  `"httpSignatures"`: it signed the HTTP request.
+  *  -  `"linkedDataSignatures"`: it made the Linked Data Signature of the
+  *     activity.
+  *  -  `"objectIntegrityProofs"`: it made an Object Integrity Proof of the
+  *     activity.
+  *  -  `"origin"`: the activity was fetched again from the actor's own web
+  *     origin, which happens only for `Context.routeActivity()`.
+  */
+  readonly mechanism: "httpSignatures" | "linkedDataSignatures" | "objectIntegrityProofs" | "origin";
+  /** The key or verification method that authenticated the principal. */
+  readonly keyId: URL | null;
+}
+/**
+* Who Fedify authenticated for an incoming activity, and the interpretation of
+* the activity it authenticated.  Inbox listeners receive it as
+* {@link InboxContext.authentication}.
+*
+* Authenticated principals are independent of the activity's declared
+* `actor`: an activity forwarded by a relay is signed by the relay in its
+* HTTP request, but its document may be signed by its author, and some
+* activities, such as [FEP-7aa9] `FeatureRequest`s sent by Mastodon, declare
+* no `actor` at all.  A valid signature alone does not authorize anything;
+* use {@link isActorAuthenticated} to check whether a specific actor was
+* authenticated.
+*
+* [FEP-7aa9]: https://w3id.org/fep/7aa9
+* @since 2.5.0
+*/
+interface InboxAuthenticationEvidence {
+  /**
+  * Whether signatures were verified at all.  It is `false` only when
+  * signature verification is skipped, or when there is no evidence, e.g.,
+  * for an activity queued by an older version of Fedify.  In that case all
+  * the principal lists are empty.
+  */
+  readonly verified: boolean;
+  /**
+  * The principals that signed the HTTP request, i.e., the server that
+  * delivered the activity, which may have forwarded it.  It is empty when
+  * the activity document was authenticated by its own signatures, so that
+  * HTTP Signatures did not need to be verified.
+  */
+  readonly requestSigners: readonly InboxPrincipal[];
+  /**
+  * The principals that made the verified Linked Data Signature or Object
+  * Integrity Proofs of the activity document.  All of them are listed when
+  * there are several proofs.
+  */
+  readonly documentSigners: readonly InboxPrincipal[];
+  /**
+  * The actors authenticated because `Context.routeActivity()` fetched the
+  * activity again from their own web origin.  It is always empty for
+  * activities delivered to an inbox.
+  */
+  readonly originAuthenticated: readonly InboxPrincipal[];
+  /**
+  * The activity as Fedify interpreted it while authenticating it, in
+  * expanded JSON-LD.  Typed vocabulary objects omit some values, such as
+  * blank node references and values they cannot decode, so authorization
+  * that has to count every value of a property, e.g., that a property has
+  * exactly one value, should inspect this instead.  It is deeply frozen.
+  * It is empty when there is no evidence.
+  */
+  readonly expandedActivity: readonly Record<string, unknown>[];
+  /**
+  * The base URL the activity was decoded with, e.g., the URL an activity
+  * fetched by `Context.routeActivity()` was finally retrieved from, or
+  * `null` if none was given.  Relative IRIs left in
+  * {@link expandedActivity} resolve against it, or against the activity's
+  * own `@id` if it is `null`, as the decoder resolves them.
+  */
+  readonly baseUrl: URL | null;
+}
+/**
+* Options for {@link isActorAuthenticated}.
+* @since 2.5.0
+*/
+interface IsActorAuthenticatedOptions {
+  /**
+  * Which principals to consider:
+  *
+  *  -  `"effective"` (default): the document signers if there are any,
+  *     otherwise the request signers if there are any, otherwise the actors
+  *     authenticated by their origin.
+  *  -  `"document"`: the document signers only.
+  */
+  readonly scope?: "effective" | "document";
+}
+/**
+* Checks whether the given evidence authenticates the given actor.
+*
+* Actor IDs are compared exactly, except that [FEP-ef61] portable IDs and
+* compatible identifiers are compared by their canonical portable IDs, and
+* a portable authority (a DID) authenticates the portable actors of that DID.
+*
+* @example
+* ``` typescript
+* federation
+*   .setInboxListeners("/users/{identifier}/inbox", "/inbox")
+*   .on(Follow, async (ctx, follow) => {
+*     if (follow.actorId == null) return;
+*     // The actor is always authenticated for activities that declare one,
+*     // but the same check works for any actor an activity names:
+*     isActorAuthenticated(ctx.authentication, follow.actorId);
+*   });
+* ```
+*
+* [FEP-ef61]: https://w3id.org/fep/ef61
+* @param evidence The authentication evidence, usually
+*                 {@link InboxContext.authentication}.
+* @param actorId The actor ID to check.
+* @param options Options.
+* @returns `true` if the actor is authenticated.
+* @since 2.5.0
+*/
+declare function isActorAuthenticated(evidence: InboxAuthenticationEvidence, actorId: URL, options?: IsActorAuthenticatedOptions): boolean;
+/**
+* A {@link InboxPrincipal} as stored in a queued message.
+* @internal
+*/
+interface SerializedInboxPrincipal {
+  readonly kind: InboxPrincipal["kind"];
+  readonly id: string;
+  readonly mechanism: InboxPrincipal["mechanism"];
+  readonly keyId: string | null;
+}
+/**
+* The principals of an {@link InboxAuthenticationEvidence} as stored in
+* a queued message.  The expanded activity and the base URL are restored
+* from the queued verified view instead.
+* @internal
+*/
+interface SerializedInboxAuthentication {
+  readonly verified: boolean;
+  readonly requestSigners: readonly SerializedInboxPrincipal[];
+  readonly documentSigners: readonly SerializedInboxPrincipal[];
+  readonly originAuthenticated: readonly SerializedInboxPrincipal[];
+}
+//#endregion
+//#region src/federation/inbox-view.d.ts
+/**
+* A {@link ContextSnapshotEntry} as stored in a queued message.  A response
+* that equals the one Fedify bundles for the URL is stored as a reference to
+* the bundled context, along with its hash for diagnostics.
+* @internal
+*/
+type SerializedContextSnapshotEntry = {
+  readonly policy: EffectiveContextLoaderPolicy;
+  readonly url: string; /** The SHA-256 of the canonical JSON of the whole response. */
+  readonly sha256: string;
+} & ({
+  readonly bundled: true;
+} | {
+  readonly response: RemoteDocument;
+});
+/**
+* The interpretation of an incoming activity that Fedify authenticated, as
+* stored in a queued message.  The document itself is not copied; it is
+* a field of the message.
+* @internal
+*/
+interface SerializedVerifiedActivityView {
+  /** The format version. */
+  readonly version: 1;
+  /** The context loader policy the activity was parsed with. */
+  readonly policy: EffectiveContextLoaderPolicy;
+  /**
+  * Which document the activity was parsed from, with its Linked Data
+  * Signature detached: the `activity` of the message, i.e., the payload as
+  * received, or its `normalizedActivity`, i.e., the payload compacted for
+  * Linked Data Signatures.
+  */
+  readonly source: "activity" | "normalizedActivity";
+  /** The `baseUrl` option the activity was parsed with. */
+  readonly baseUrl: string | null;
+  /** The context responses the interpretation used. */
+  readonly contexts: readonly SerializedContextSnapshotEntry[];
+  /** The digest of the expanded activity. */
+  readonly expandedDigest: string;
+}
+//#endregion
 //#region src/federation/handler.d.ts
 /**
 * Options for the {@link respondWithObject} and
@@ -1506,6 +1764,21 @@ interface InboxMessage {
   * @internal
   */
   readonly ldSignatureVerified?: boolean;
+  /**
+  * The interpretation of the activity that Fedify authenticated, i.e., which
+  * document it was parsed from and every JSON-LD context response the parse
+  * used, so that the worker and its retries dispatch the very same
+  * interpretation without loading contexts again.  Absent in messages queued
+  * by older Fedify versions.
+  * @internal
+  */
+  readonly verifiedView?: SerializedVerifiedActivityView;
+  /**
+  * Who Fedify authenticated for the activity.  Absent in messages queued by
+  * older Fedify versions.
+  * @internal
+  */
+  readonly authentication?: SerializedInboxAuthentication;
   readonly started: string;
   readonly attempt: number;
   readonly identifier: string | null;
@@ -2886,11 +3159,27 @@ interface InboxListenerSetters<TContextData> {
   /**
   * Registers a listener for a specific incoming activity type.
   *
+  * @example
+  * ``` typescript
+  * federation
+  *   .setInboxListeners("/users/{identifier}/inbox", "/inbox")
+  *   // Mastodon sends FeatureRequest activities without an actor:
+  *   .on(FeatureRequest, async (ctx, request) => {
+  *     const verification = await featureInteraction.verifyRequest(ctx, {
+  *       request,
+  *       authentication: ctx.authentication,
+  *     });
+  *     // ...
+  *   }, { allowActorless: true });
+  * ```
+  *
   * @param type A subclass of {@link Activity} to listen to.
   * @param listener A callback to handle an incoming activity.
+  * @param options Options for the listener.  See
+  *                {@link InboxListenerOptions}.  (Since 2.5.0.)
   * @returns The setters object so that settings can be chained.
   */
-  on<TActivity extends Activity>(type: new (...args: any[]) => TActivity, listener: InboxListener<TContextData, TActivity>): InboxListenerSetters<TContextData>;
+  on<TActivity extends Activity>(type: new (...args: any[]) => TActivity, listener: InboxListener<TContextData, TActivity>, options?: InboxListenerOptions): InboxListenerSetters<TContextData>;
   /**
   * Registers an error handler for inbox listeners.  Any exceptions thrown
   * from the listeners are caught and passed to this handler.
@@ -3732,7 +4021,9 @@ interface Context<TContextData> {
   * Looks up a WebFinger resource.
   *
   * It's almost the same as the {@link lookupWebFinger} function, but it uses
-  * the context's configuration by default.
+  * the context's configuration by default.  Unlike {@link lookupWebFinger},
+  * it does not support the `withDiagnostics` option; it always returns the
+  * resource descriptor or `null`.
   *
   * @param resource The resource URL to look up.
   * @param options Extra options for looking up the resource.
@@ -4417,6 +4708,17 @@ interface InboxContext<TContextData> extends Context<TContextData> {
   */
   readonly recipient: string | null;
   /**
+  * Who Fedify authenticated for the incoming activity, independently of its
+  * declared `actor`, and the interpretation of the activity that was
+  * authenticated.  It is preserved through the inbox queue and its retries.
+  *
+  * Use it with {@link isActorAuthenticated} to authorize requests that do
+  * not declare an `actor`, which reach a listener only if it is registered
+  * with the `allowActorless` option.
+  * @since 2.5.0
+  */
+  readonly authentication: InboxAuthenticationEvidence;
+  /**
   * Creates a new context with the same properties as this one,
   * but with the given data.
   * @param data The new data to associate with the context.
@@ -4836,4 +5138,4 @@ interface ActorKeyPair extends CryptoKeyPair {
   readonly multikey: Multikey;
 }
 //#endregion
-export { respondWithObject as $, digest as $t, InboxChallengePolicy as A, CustomCollectionDispatcher as At, createFederation as B, OutboxListener as Bt, FederationBenchmarkOptions as C, ActorKeyPairsDispatcher as Ct, FederationStartQueueOptions as D, CollectionDispatcher as Dt, FederationOptions as E, CollectionCursor as Et, PortableInboxForwardingOptions as F, MediaUploaderCallback as Ft, TaskEnqueueOptions as G, SharedInboxKeyDispatcher as Gt, createFederationBuilder as H, OutboxPermanentFailureHandler as Ht, Rfc6570Expression as I, NodeInfoDispatcher as It, CreateExponentialBackoffPolicyOptions as J, WebFingerLinksDispatcher as Jt, TaskHandler as K, UnverifiedActivityHandler as Kt, FederationKvPrefixes as L, ObjectAuthorizePredicate as Lt, MediaUploaderSetters as M, HashlinkMediaRequest as Mt, ObjectCallbackSetters as N, InboxErrorHandler as Nt, IdempotencyKeyCallback as O, CustomCollectionCounter as Ot, OutboxListenerSetters as P, InboxListener as Pt, RespondWithObjectOptions as Q, buildCollectionSynchronizationHeader as Qt, FederationOrigin as R, ObjectDispatcher as Rt, Federation as S, ActorHandleMapper as St, FederationFetchOptions as T, CollectionCounter as Tt, TaskDefinition as U, PortableActorIdMapper as Ut, Message as V, OutboxListenerErrorHandler as Vt, TaskDefinitionOptions as W, PortableCollectionOwnerMapper as Wt, RetryPolicy as X, SenderKeyPair as Xt, RetryContext as Y, SendActivityError as Yt, createExponentialBackoffPolicy as Z, PageItems as Zt, ActorCallbackSetters as _, NormalizedCircuitBreakerOptions as _t, GetObjectOptions as a, InboxRequestReport as an, MessageQueueEnqueueOptions as at, CustomCollectionCallbackSetters as b, ActorAliasMapper as bt, IsSignedByAudienceOptions as c, CircuitBreaker as ct, ParseUriResult as d, CircuitBreakerCreateOptions as dt, ActivityTransformer as en, respondWithObjectIfAcceptable as et, PortableRequest as f, CircuitBreakerFailurePolicy as ft, SendActivityOptionsForCollection as g, CircuitBreakerStateChange as gt, SendActivityOptions as h, CircuitBreakerState as ht, GetActorOptions as i, InboxRequestOutcome as in, MessageQueueDepth as it, InboxListenerSetters as j, HashlinkMediaDispatcher as jt, IdempotencyStrategy as k, CustomCollectionCursor as kt, OutboxContext as l, CircuitBreakerActivityDrop as lt, RouteActivityOptions as m, CircuitBreakerOptions as mt, Context as n, InboxJsonValue as nn, InProcessMessageQueueOptions as nt, GetSignedKeyOptions as o, MessageQueueListenOptions as ot, RequestContext as p, CircuitBreakerKvState as pt, TaskRegistry as q, UnverifiedActivityReason as qt, ForwardActivityOptions as r, InboxRequestFinishedHandler as rn, MessageQueue as rt, InboxContext as s, ParallelMessageQueue as st, ActorKeyPair as t, InboxAuthentication as tn, InProcessMessageQueue as tt, ParseUriOptions as u, CircuitBreakerBeforeSendDecision as ut, CollectionCallbackSetters as v, normalizeCircuitBreakerOptions as vt, FederationBuilder as w, AuthorizePredicate as wt, Federatable as x, ActorDispatcher as xt, ConstructorWithTypeId as y, parseCircuitBreakerKvState as yt, FederationQueueOptions as z, OutboxErrorHandler as zt };
+export { respondWithObject as $, SendActivityError as $t, InboxChallengePolicy as A, CollectionCursor as At, createFederation as B, NodeInfoDispatcher as Bt, FederationBenchmarkOptions as C, parseCircuitBreakerKvState as Ct, FederationStartQueueOptions as D, ActorKeyPairsDispatcher as Dt, FederationOptions as E, ActorHandleMapper as Et, PortableInboxForwardingOptions as F, HashlinkMediaDispatcher as Ft, TaskEnqueueOptions as G, OutboxListenerErrorHandler as Gt, createFederationBuilder as H, ObjectDispatcher as Ht, Rfc6570Expression as I, HashlinkMediaRequest as It, CreateExponentialBackoffPolicyOptions as J, PortableCollectionOwnerMapper as Jt, TaskHandler as K, OutboxPermanentFailureHandler as Kt, FederationKvPrefixes as L, InboxErrorHandler as Lt, MediaUploaderSetters as M, CustomCollectionCounter as Mt, ObjectCallbackSetters as N, CustomCollectionCursor as Nt, IdempotencyKeyCallback as O, AuthorizePredicate as Ot, OutboxListenerSetters as P, CustomCollectionDispatcher as Pt, RespondWithObjectOptions as Q, WebFingerLinksDispatcher as Qt, FederationOrigin as R, InboxListener as Rt, Federation as S, normalizeCircuitBreakerOptions as St, FederationFetchOptions as T, ActorDispatcher as Tt, TaskDefinition as U, OutboxErrorHandler as Ut, Message as V, ObjectAuthorizePredicate as Vt, TaskDefinitionOptions as W, OutboxListener as Wt, RetryPolicy as X, UnverifiedActivityHandler as Xt, RetryContext as Y, SharedInboxKeyDispatcher as Yt, createExponentialBackoffPolicy as Z, UnverifiedActivityReason as Zt, ActorCallbackSetters as _, CircuitBreakerKvState as _t, GetObjectOptions as a, InboxAuthentication as an, InProcessMessageQueue as at, CustomCollectionCallbackSetters as b, CircuitBreakerStateChange as bt, IsSignedByAudienceOptions as c, InboxRequestOutcome as cn, MessageQueueDepth as ct, ParseUriResult as d, ParallelMessageQueue as dt, SenderKeyPair as en, respondWithObjectIfAcceptable as et, PortableRequest as f, CircuitBreaker as ft, SendActivityOptionsForCollection as g, CircuitBreakerFailurePolicy as gt, SendActivityOptions as h, CircuitBreakerCreateOptions as ht, GetActorOptions as i, ActivityTransformer as in, isActorAuthenticated as it, InboxListenerSetters as j, CollectionDispatcher as jt, IdempotencyStrategy as k, CollectionCounter as kt, OutboxContext as l, InboxRequestReport as ln, MessageQueueEnqueueOptions as lt, RouteActivityOptions as m, CircuitBreakerBeforeSendDecision as mt, Context as n, buildCollectionSynchronizationHeader as nn, InboxPrincipal as nt, GetSignedKeyOptions as o, InboxJsonValue as on, InProcessMessageQueueOptions as ot, RequestContext as p, CircuitBreakerActivityDrop as pt, TaskRegistry as q, PortableActorIdMapper as qt, ForwardActivityOptions as r, digest as rn, IsActorAuthenticatedOptions as rt, InboxContext as s, InboxRequestFinishedHandler as sn, MessageQueue as st, ActorKeyPair as t, PageItems as tn, InboxAuthenticationEvidence as tt, ParseUriOptions as u, InboxListenerOptions as un, MessageQueueListenOptions as ut, CollectionCallbackSetters as v, CircuitBreakerOptions as vt, FederationBuilder as w, ActorAliasMapper as wt, Federatable as x, NormalizedCircuitBreakerOptions as xt, ConstructorWithTypeId as y, CircuitBreakerState as yt, FederationQueueOptions as z, MediaUploaderCallback as zt };

package/dist/{deno-DR1uYWpm.mjs → deno-Dpewt_jJ.mjs}

@@ -3,6 +3,6 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 //#region deno.json
 var name = "@fedify/fedify";
-var version = "2.5.0-dev.2440+635913e8";
+var version = "2.5.0-dev.2448+756933d0";
 //#endregion
 export { version as n, name as t };

package/dist/{docloader-BpCJ2dHm.mjs → docloader-CpsDyqVN.mjs}

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { T as validateCryptoKey } from "./ld-CUM16-EE.mjs";
-import { n as doubleKnock } from "./http-CRrg14tX.mjs";
+import { D as validateCryptoKey } from "./ld-CQFuiah9.mjs";
+import { n as doubleKnock } from "./http-BZkyQIkb.mjs";
 import { getLogger } from "@logtape/logtape";
 import { FetchError, UrlError, createActivityPubRequest, getRemoteDocument, logRequest, resolveDocumentLoaderTimeout, validatePublicUrl, withDocumentLoaderTimeout } from "@fedify/vocab-runtime";
 import { curry } from "es-toolkit";

package/dist/federation/builder.test.mjs

@@ -7,7 +7,7 @@ import { t as assertExists } from "../assert_exists-cffSpJ7X.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
-import { r as createFederationBuilder } from "../builder-CTasaZgj.mjs";
+import { r as createFederationBuilder } from "../builder-DbC8bn6k.mjs";
 import { DisallowedOperatorError, DisallowedVarSpecModifierError, DuplicateRouteVariableError, RouteTemplateOptionsNotMatchedError, RouterError } from "@fedify/uri-template";
 import { Activity, Note, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";

package/dist/federation/compound-fanout.test.mjs

@@ -6,11 +6,11 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { y as exportJwk } from "../ld-CUM16-EE.mjs";
+import { x as exportJwk } from "../ld-CQFuiah9.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "../outgoing-jsonld-4IJqPYos.mjs";
-import { o as signObject, p as verifyProof } from "../proof-DWpruPWs.mjs";
+import { h as verifyProof, s as signObject } from "../proof-DPoF06nz.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl } from "../middleware-CDdFG6xf.mjs";
+import { n as FederationImpl } from "../middleware-CuVa0UuS.mjs";
 import { Create, DataIntegrityProof, Note } from "@fedify/vocab";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/handler-compound-proof.test.mjs

@@ -1,15 +1,15 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { r as createRequestContext, t as createInboxContext } from "../context-8Tu9kea0.mjs";
+import { r as createRequestContext, t as createInboxContext } from "../context-COHd1Rsh.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-CUM16-EE.mjs";
-import { l as signRequest } from "../http-CRrg14tX.mjs";
+import { a as compactJsonLd, h as verifyCompactJsonLd, m as signJsonLd } from "../ld-CQFuiah9.mjs";
+import { l as signRequest } from "../http-BZkyQIkb.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { f as handleInbox, o as createFederation } from "../middleware-CDdFG6xf.mjs";
-import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
+import { f as handleInbox, o as createFederation } from "../middleware-CuVa0UuS.mjs";
+import { t as ActivityListenerSet } from "../activity-listener-CELFAodc.mjs";
 import { t as map_local_create_note_default } from "../map-local-create-note-B0SeXJms.mjs";
 import { Create, CryptographicKey, Multikey, Person, Update } from "@fedify/vocab";
 import { encodeMultibase, exportDidKey, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/handler.test.mjs

@@ -1,7 +1,7 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-8Tu9kea0.mjs";
+import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-COHd1Rsh.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertGreaterOrEqual } from "../assert_greater_or_equal-BlafOF4-.mjs";
@@ -11,12 +11,12 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as parseAcceptSignature } from "../accept-CPVqki78.mjs";
-import { C as generateCryptoKeyPair, a as compactJsonLd, p as signJsonLd } from "../ld-CUM16-EE.mjs";
-import { o as signObject } from "../proof-DWpruPWs.mjs";
-import { l as signRequest } from "../http-CRrg14tX.mjs";
+import { T as generateCryptoKeyPair, a as compactJsonLd, m as signJsonLd } from "../ld-CQFuiah9.mjs";
+import { s as signObject } from "../proof-DPoF06nz.mjs";
+import { l as signRequest } from "../http-BZkyQIkb.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, n as ed25519PrivateKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-CDdFG6xf.mjs";
-import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
+import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-CuVa0UuS.mjs";
+import { t as ActivityListenerSet } from "../activity-listener-CELFAodc.mjs";
 import { t as FedifySpanExporter } from "../exporter-DThFfe7P.mjs";
 import { configure, getLogger, reset, withContext } from "@logtape/logtape";
 import { Activity, Create, CryptographicKey, Multikey, Note, Person, Tombstone } from "@fedify/vocab";
@@ -3246,11 +3246,26 @@ test("handleInbox() caches normalizedActivity for queued signature-bearing fallb
 		activity: unsignedBody,
 		normalizedActivity: await compactJsonLd(unsignedBody, sourceContextLoader),
 		ldSignatureVerified: false,
+		verifiedView: inboxMessage.verifiedView,
+		authentication: {
+			verified: true,
+			requestSigners: [{
+				kind: "actor",
+				id: "https://example.com/person2",
+				mechanism: "httpSignatures",
+				keyId: "https://example.com/person2#key3"
+			}],
+			documentSigners: [],
+			originAuthenticated: []
+		},
 		started: inboxMessage.started,
 		attempt: 0,
 		identifier: "someone",
 		traceContext: inboxMessage.traceContext
 	});
+	assertEquals(inboxMessage.verifiedView?.policy, "standard");
+	assertEquals(inboxMessage.verifiedView?.source, "activity");
+	assert(inboxMessage.verifiedView?.contexts.some((entry) => entry.url === "https://remote.example/contexts/ext" && "response" in entry));
 });
 test("respondWithObject()", async () => {
 	const response = await respondWithObject(new Note({

package/dist/federation/hashlink-media.test.mjs

@@ -10,8 +10,8 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-CDdFG6xf.mjs";
-import { r as createFederationBuilder } from "../builder-CTasaZgj.mjs";
+import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-CuVa0UuS.mjs";
+import { r as createFederationBuilder } from "../builder-DbC8bn6k.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { Note } from "@fedify/vocab";
 import { computeDigestMultibase, encodeMultibase, exportDidKey } from "@fedify/vocab-runtime";

package/dist/federation/idempotency.test.mjs

@@ -4,9 +4,9 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { o as signObject } from "../proof-DWpruPWs.mjs";
+import { s as signObject } from "../proof-DPoF06nz.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-CDdFG6xf.mjs";
+import { o as createFederation } from "../middleware-CuVa0UuS.mjs";
 import { Create, Follow, Person } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/idempotency.test.ts

package/dist/federation/inbox-actorless.test.d.mts

@@ -0,0 +1,2 @@
+import { Temporal } from "temporal-polyfill";
+import { URLPattern } from "urlpattern-polyfill";