@fedify/fedify 2.5.0-dev.2446 → 2.5.0-dev.2492

package/dist/federation/builder.test.mjs

@@ -7,7 +7,7 @@ import { t as assertExists } from "../assert_exists-cffSpJ7X.mjs";
 import { t as assertThrows } from "../assert_throws-BYITOvPO.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
-import { r as createFederationBuilder } from "../builder-Da8b9O6v.mjs";
+import { r as createFederationBuilder } from "../builder-DphK9v7f.mjs";
 import { DisallowedOperatorError, DisallowedVarSpecModifierError, DuplicateRouteVariableError, RouteTemplateOptionsNotMatchedError, RouterError } from "@fedify/uri-template";
 import { Activity, Note, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";

package/dist/federation/compound-fanout.test.mjs

@@ -6,11 +6,11 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { y as exportJwk } from "../ld-CD2CsPxq.mjs";
+import { x as exportJwk } from "../ld-CdvcOEXQ.mjs";
 import { r as normalizeOutgoingActivityJsonLd } from "../outgoing-jsonld-4IJqPYos.mjs";
-import { o as signObject, p as verifyProof } from "../proof-Cryb1c70.mjs";
+import { h as verifyProof, s as signObject } from "../proof-GH7Poos_.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { n as FederationImpl } from "../middleware-CzoWvrdZ.mjs";
+import { n as FederationImpl } from "../middleware-CoBLrTKX.mjs";
 import { Create, DataIntegrityProof, Note } from "@fedify/vocab";
 import { exportDidKey, parseIri } from "@fedify/vocab-runtime";
 import { mockDocumentLoader, test } from "@fedify/fixture";
@@ -68,6 +68,7 @@ test("fanout delivery keeps an embedded signed child intact", async () => {
 			kv: new MemoryKvStore(),
 			contextLoaderFactory: () => mockDocumentLoader
 		});
+		federation.allowPrivateAddress = true;
 		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox");
 		const message = {
 			type: "fanout",
@@ -139,6 +140,7 @@ test("forced fanout signs before serializing so the child survives", async () =>
 			manuallyStartQueue: true,
 			contextLoaderFactory: () => mockDocumentLoader
 		});
+		federation.allowPrivateAddress = true;
 		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox");
 		await federation.createContext(new URL("https://example.com/")).sendActivity({
 			keyId: childKeyId,
@@ -203,6 +205,7 @@ test("an already signed activity keeps its single proof through fanout", async (
 			manuallyStartQueue: true,
 			contextLoaderFactory: () => mockDocumentLoader
 		});
+		federation.allowPrivateAddress = true;
 		federation.setInboxListeners("/users/{identifier}/inbox", "/inbox");
 		await federation.createContext(new URL("https://example.com/")).sendActivity({
 			keyId: childKeyId,

package/dist/federation/handler-compound-proof.test.mjs

@@ -1,15 +1,15 @@
 import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { r as createRequestContext, t as createInboxContext } from "../context-8Tu9kea0.mjs";
+import { r as createRequestContext, t as createInboxContext } from "../context-COHd1Rsh.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { a as compactJsonLd, m as verifyCompactJsonLd, p as signJsonLd } from "../ld-CD2CsPxq.mjs";
-import { l as signRequest } from "../http-BUJ5SFh6.mjs";
+import { a as compactJsonLd, h as verifyCompactJsonLd, m as signJsonLd } from "../ld-CdvcOEXQ.mjs";
+import { u as signRequest } from "../http-BoJCMnjY.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { f as handleInbox, o as createFederation } from "../middleware-CzoWvrdZ.mjs";
-import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
+import { f as handleInbox, o as createFederation } from "../middleware-CoBLrTKX.mjs";
+import { t as ActivityListenerSet } from "../activity-listener-CELFAodc.mjs";
 import { t as map_local_create_note_default } from "../map-local-create-note-B0SeXJms.mjs";
 import { Create, CryptographicKey, Multikey, Person, Update } from "@fedify/vocab";
 import { encodeMultibase, exportDidKey, parseIri } from "@fedify/vocab-runtime";

package/dist/federation/handler.test.mjs

@@ -1,7 +1,7 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-8Tu9kea0.mjs";
+import { n as createOutboxContext, r as createRequestContext, t as createInboxContext } from "../context-COHd1Rsh.mjs";
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertGreaterOrEqual } from "../assert_greater_or_equal-BlafOF4-.mjs";
@@ -11,13 +11,13 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertRejects } from "../assert_rejects-CTptdYck.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as parseAcceptSignature } from "../accept-CPVqki78.mjs";
-import { C as generateCryptoKeyPair, a as compactJsonLd, p as signJsonLd } from "../ld-CD2CsPxq.mjs";
-import { o as signObject } from "../proof-Cryb1c70.mjs";
-import { l as signRequest } from "../http-BUJ5SFh6.mjs";
+import { T as generateCryptoKeyPair, a as compactJsonLd, m as signJsonLd } from "../ld-CdvcOEXQ.mjs";
+import { s as signObject } from "../proof-GH7Poos_.mjs";
+import { u as signRequest } from "../http-BoJCMnjY.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, n as ed25519PrivateKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-CzoWvrdZ.mjs";
-import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
-import { t as FedifySpanExporter } from "../exporter-DThFfe7P.mjs";
+import { d as handleCustomCollection, f as handleInbox, g as respondWithObjectIfAcceptable, h as respondWithObject, l as handleActor, m as handleOutbox, o as createFederation, p as handleObject, u as handleCollection } from "../middleware-CoBLrTKX.mjs";
+import { t as ActivityListenerSet } from "../activity-listener-CELFAodc.mjs";
+import { t as FedifySpanExporter } from "../exporter-DVG68ozH.mjs";
 import { configure, getLogger, reset, withContext } from "@logtape/logtape";
 import { Activity, Create, CryptographicKey, Multikey, Note, Person, Tombstone } from "@fedify/vocab";
 import { FetchError, parseIri } from "@fedify/vocab-runtime";
@@ -3246,11 +3246,26 @@ test("handleInbox() caches normalizedActivity for queued signature-bearing fallb
 		activity: unsignedBody,
 		normalizedActivity: await compactJsonLd(unsignedBody, sourceContextLoader),
 		ldSignatureVerified: false,
+		verifiedView: inboxMessage.verifiedView,
+		authentication: {
+			verified: true,
+			requestSigners: [{
+				kind: "actor",
+				id: "https://example.com/person2",
+				mechanism: "httpSignatures",
+				keyId: "https://example.com/person2#key3"
+			}],
+			documentSigners: [],
+			originAuthenticated: []
+		},
 		started: inboxMessage.started,
 		attempt: 0,
 		identifier: "someone",
 		traceContext: inboxMessage.traceContext
 	});
+	assertEquals(inboxMessage.verifiedView?.policy, "standard");
+	assertEquals(inboxMessage.verifiedView?.source, "activity");
+	assert(inboxMessage.verifiedView?.contexts.some((entry) => entry.url === "https://remote.example/contexts/ext" && "response" in entry));
 });
 test("respondWithObject()", async () => {
 	const response = await respondWithObject(new Note({

package/dist/federation/hashlink-media.test.mjs

@@ -10,8 +10,8 @@ import "../std__assert-DvMDRPes.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-CYvBmkpC.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
 import { r as ed25519PublicKey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-CzoWvrdZ.mjs";
-import { r as createFederationBuilder } from "../builder-Da8b9O6v.mjs";
+import { o as createFederation, x as parseHashlinkGatewayRequest } from "../middleware-CoBLrTKX.mjs";
+import { r as createFederationBuilder } from "../builder-DphK9v7f.mjs";
 import { n as RouterError } from "../router-u5O5KCQr.mjs";
 import { Note } from "@fedify/vocab";
 import { computeDigestMultibase, encodeMultibase, exportDidKey } from "@fedify/vocab-runtime";

package/dist/federation/idempotency.test.mjs

@@ -4,9 +4,9 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import "../std__assert-DvMDRPes.mjs";
-import { o as signObject } from "../proof-Cryb1c70.mjs";
+import { s as signObject } from "../proof-GH7Poos_.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-CzoWvrdZ.mjs";
+import { o as createFederation } from "../middleware-CoBLrTKX.mjs";
 import { Create, Follow, Person } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/idempotency.test.ts

package/dist/federation/inbox-actorless.test.d.mts

@@ -0,0 +1,2 @@
+import { Temporal } from "temporal-polyfill";
+import { URLPattern } from "urlpattern-polyfill";

package/dist/federation/inbox-actorless.test.mjs

@@ -0,0 +1,487 @@
+import "temporal-polyfill";
+import "urlpattern-polyfill";
+globalThis.addEventListener = () => {};
+import { a as isActorAuthenticated } from "../inbox-authentication-DflPYlLL.mjs";
+import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
+import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
+import { t as assertFalse } from "../assert_false-CPdRnc3E.mjs";
+import "../std__assert-DvMDRPes.mjs";
+import { t as assert } from "../assert-D1Eafmd_.mjs";
+import { m as signJsonLd } from "../ld-CdvcOEXQ.mjs";
+import { s as signObject } from "../proof-GH7Poos_.mjs";
+import { u as signRequest } from "../http-BoJCMnjY.mjs";
+import { a as rsaPrivateKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
+import { o as createFederation } from "../middleware-CoBLrTKX.mjs";
+import { c as expandDocument } from "../inbox-view-D-skypg-.mjs";
+import { Create, FeatureRequest, Person } from "@fedify/vocab";
+import { FetchError, encodeMultibase, preloadedContexts } from "@fedify/vocab-runtime";
+import { mockDocumentLoader, test } from "@fedify/fixture";
+import serialize from "json-canon";
+//#region src/federation/inbox-actorless.test.ts
+const SIGNER = new URL("https://example.com/person2");
+const RSA_KEY = new URL("https://example.com/person2#key3");
+const ED25519_KEY = new URL("https://example.com/person2#key4");
+const TARGET = new URL("https://example.com/users/alice");
+const COLLECTION = new URL("https://example.com/person2/featured/1");
+const MUTABLE_CONTEXT = "https://remote.example/contexts/mutable";
+const RELAY = new URL("https://example.com/relay");
+const RELAY_KEY = new URL("https://example.com/relay#main-key");
+const { publicKeyPem: RELAY_PEM } = await rsaPublicKey2.toJsonLd({ contextLoader: mockDocumentLoader });
+/** The document Mastodon sends, which declares no actor. */
+function featureRequestDocument(extra = {}) {
+	return {
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/fep/7aa9"],
+		id: "https://example.com/person2/featured/1/requests/1",
+		type: "FeatureRequest",
+		object: TARGET.href,
+		instrument: COLLECTION.href,
+		...extra
+	};
+}
+var CapturingQueue = class {
+	messages = [];
+	maxMessageSize;
+	constructor(maxMessageSize) {
+		this.maxMessageSize = maxMessageSize;
+	}
+	enqueue(message) {
+		this.messages.push(structuredClone(message));
+		return Promise.resolve();
+	}
+	listen() {
+		return new Promise(() => {});
+	}
+};
+function setup(options = {}) {
+	const received = [];
+	let mutableLoads = 0;
+	const loader = async (url, loaderOptions) => {
+		options.contextLoads?.push(url);
+		if (options.unavailable?.includes(url)) throw new FetchError(url, "Service unavailable", new Response(null, { status: 503 }));
+		if (url === RELAY.href || url === RELAY_KEY.href) return {
+			contextUrl: null,
+			documentUrl: RELAY.href,
+			document: {
+				"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/v1"],
+				id: RELAY.href,
+				type: "Service",
+				publicKey: {
+					id: RELAY_KEY.href,
+					type: "CryptographicKey",
+					owner: RELAY.href,
+					publicKeyPem: RELAY_PEM
+				}
+			}
+		};
+		if (url === MUTABLE_CONTEXT) {
+			mutableLoads++;
+			return {
+				contextUrl: null,
+				documentUrl: url,
+				document: { "@context": { tgt: mutableLoads % 2 === 1 ? {
+					"@id": "https://www.w3.org/ns/activitystreams#object",
+					"@type": "@id"
+				} : {
+					"@id": "https://www.w3.org/ns/activitystreams#target",
+					"@type": "@id"
+				} } }
+			};
+		}
+		return await mockDocumentLoader(url, loaderOptions);
+	};
+	const federation = createFederation({
+		kv: new MemoryKvStore(),
+		documentLoaderFactory: () => loader,
+		contextLoaderFactory: () => loader,
+		authenticatedDocumentLoaderFactory: () => loader,
+		queue: options.queue,
+		manuallyStartQueue: true
+	});
+	federation.setActorDispatcher("/users/{identifier}", (ctx, identifier) => new Person({
+		id: ctx.getActorUri(identifier),
+		inbox: ctx.getInboxUri(identifier)
+	})).setKeyPairsDispatcher(() => [{
+		privateKey: rsaPrivateKey2,
+		publicKey: rsaPublicKey2.publicKey
+	}]);
+	federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(FeatureRequest, (ctx, activity) => {
+		if (options.failOnce != null && !options.failOnce.failed) {
+			options.failOnce.failed = true;
+			throw new Error("Temporary failure.");
+		}
+		received.push({
+			activity,
+			authentication: ctx.authentication,
+			rawActivity: ctx.activity
+		});
+	}, { allowActorless: options.allowActorless ?? true }).on(Create, () => {});
+	return {
+		federation,
+		received
+	};
+}
+function post(body) {
+	return new Request("https://example.com/users/alice/inbox", {
+		method: "POST",
+		headers: { "Content-Type": "application/activity+json" },
+		body: JSON.stringify(body)
+	});
+}
+async function postSigned(body) {
+	return await signRequest(post(body), rsaPrivateKey3, RSA_KEY);
+}
+async function withLds(document) {
+	return await signJsonLd(document, rsaPrivateKey3, RSA_KEY, { contextLoader: mockDocumentLoader });
+}
+async function withProof(document) {
+	return await (await signObject(await FeatureRequest.fromJsonLd(document, {
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader
+	}), ed25519PrivateKey, ED25519_KEY, { contextLoader: mockDocumentLoader })).toJsonLd({
+		format: "compact",
+		contextLoader: mockDocumentLoader
+	});
+}
+/**
+* Signs a JSON document as is with an `eddsa-jcs-2022` proof, so that values
+* typed parsing would drop are covered by the proof as well.
+*/
+async function withRawProof(document, proofProperty = "proof") {
+	const contexts = Array.isArray(document["@context"]) ? document["@context"] : [document["@context"]];
+	const unsecured = {
+		...document,
+		"@context": [
+			...contexts,
+			"https://w3id.org/security/data-integrity/v1",
+			...proofProperty === "proof" ? [] : [{ [proofProperty]: {
+				"@id": "https://w3id.org/security#proof",
+				"@type": "@id",
+				"@container": "@graph"
+			} }]
+		]
+	};
+	const proofConfig = {
+		"@context": unsecured["@context"],
+		type: "DataIntegrityProof",
+		cryptosuite: "eddsa-jcs-2022",
+		verificationMethod: ED25519_KEY.href,
+		proofPurpose: "assertionMethod",
+		created: "2026-10-01T00:00:00Z"
+	};
+	const digest = async (value) => new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(serialize(value))));
+	const signed = new Uint8Array(await crypto.subtle.sign("Ed25519", ed25519PrivateKey, new Uint8Array([...await digest(proofConfig), ...await digest(unsecured)])));
+	const { "@context": _, ...proof } = proofConfig;
+	return {
+		...unsecured,
+		[proofProperty]: {
+			...proof,
+			proofValue: new TextDecoder().decode(encodeMultibase("base58btc", signed))
+		}
+	};
+}
+async function processQueue(federation, queue) {
+	while (queue.messages.length > 0) {
+		const message = queue.messages.shift();
+		await federation.processQueuedTask(void 0, message);
+	}
+}
+test("Actorless FeatureRequest authenticated by HTTP Signatures", async () => {
+	const { federation, received } = setup();
+	assertEquals((await federation.fetch(await postSigned(featureRequestDocument()), { contextData: void 0 })).status, 202);
+	assertEquals(received.length, 1);
+	const [{ activity, authentication, rawActivity }] = received;
+	assertEquals(activity.actorId, null);
+	assertEquals(activity.instrumentId, COLLECTION);
+	assertEquals(authentication.verified, true);
+	assertEquals(authentication.documentSigners, []);
+	assertEquals(authentication.requestSigners.map((p) => [
+		p.kind,
+		p.id.href,
+		p.mechanism
+	]), [[
+		"actor",
+		SIGNER.href,
+		"httpSignatures"
+	]]);
+	assert(isActorAuthenticated(authentication, SIGNER));
+	assertFalse(isActorAuthenticated(authentication, SIGNER, { scope: "document" }));
+	assertEquals(rawActivity, featureRequestDocument());
+});
+test("Actorless FeatureRequest authenticated by Linked Data Signatures", async () => {
+	const { federation, received } = setup();
+	const document = await withLds(featureRequestDocument());
+	assertEquals((await federation.fetch(post(document), { contextData: void 0 })).status, 202);
+	assertEquals(received.length, 1);
+	assertEquals(received[0].authentication.documentSigners.map((p) => [p.id.href, p.mechanism]), [[SIGNER.href, "linkedDataSignatures"]]);
+	assertEquals(received[0].rawActivity, document);
+});
+test("Actorless FeatureRequest authenticated by Object Integrity Proofs", async () => {
+	const { federation, received } = setup();
+	const document = await withProof(featureRequestDocument());
+	assertEquals((await federation.fetch(post(document), { contextData: void 0 })).status, 202);
+	assertEquals(received.length, 1);
+	assertEquals(received[0].authentication.documentSigners.map((p) => [
+		p.kind,
+		p.id.href,
+		p.mechanism,
+		p.keyId?.href
+	]), [[
+		"actor",
+		SIGNER.href,
+		"objectIntegrityProofs",
+		ED25519_KEY.href
+	]]);
+});
+test("Actorless activities need a listener that allows them", async () => {
+	const { federation, received } = setup({ allowActorless: false });
+	const response = await federation.fetch(await postSigned(featureRequestDocument()), { contextData: void 0 });
+	assertEquals(response.status, 400);
+	assertEquals(await response.text(), "Missing actor.");
+	assertEquals(received, []);
+});
+test("Actorless activities need an authenticated principal", async () => {
+	const { federation, received } = setup();
+	assertEquals((await federation.fetch(post(featureRequestDocument()), { contextData: void 0 })).status, 401);
+	assertEquals(received, []);
+});
+test("Actorless activities need the same origin as their signer", async () => {
+	const { federation, received } = setup();
+	assertEquals((await federation.fetch(await postSigned(featureRequestDocument({ id: "https://other.example/requests/1" })), { contextData: void 0 })).status, 401);
+	assertEquals(received, []);
+});
+for (const [label, actor] of [
+	["an anonymous actor", {
+		type: "Person",
+		name: "Anonymous"
+	}],
+	["an untyped actor", { name: "Anonymous" }],
+	["a blank node actor", { id: "_:b0" }]
+]) for (const mechanism of [
+	"http",
+	"lds",
+	"proof"
+]) test(`Activities with ${label} are not actorless (${mechanism})`, async () => {
+	const queue = new CapturingQueue();
+	const { federation, received } = setup({ queue });
+	const document = featureRequestDocument({ actor });
+	const response = await federation.fetch(mechanism === "http" ? await postSigned(document) : post(mechanism === "lds" ? await withLds(document) : await withRawProof(document)), { contextData: void 0 });
+	assert(response.status >= 400, `${response.status}`);
+	await processQueue(federation, queue);
+	assertEquals(received, []);
+});
+test("Queued actorless activities keep their interpretation and evidence", async () => {
+	const queue = new CapturingQueue();
+	const contextLoads = [];
+	const failOnce = { failed: false };
+	const { federation, received } = setup({
+		queue,
+		contextLoads,
+		failOnce
+	});
+	const document = featureRequestDocument({
+		"@context": [
+			"https://www.w3.org/ns/activitystreams",
+			"https://w3id.org/fep/7aa9",
+			MUTABLE_CONTEXT
+		],
+		object: void 0,
+		tgt: TARGET.href
+	});
+	delete document.object;
+	assertEquals((await federation.fetch(await postSigned(document), { contextData: void 0 })).status, 202);
+	assertEquals(queue.messages.length, 1);
+	const message = queue.messages[0];
+	assertEquals(message.activity, document);
+	assertEquals(message.verifiedView?.source, "activity");
+	const loadsBefore = contextLoads.filter((url) => url === MUTABLE_CONTEXT).length;
+	await processQueue(federation, queue);
+	assertEquals(contextLoads.filter((url) => url === MUTABLE_CONTEXT).length, loadsBefore);
+	assert(failOnce.failed);
+	assertEquals(received.length, 1);
+	assertEquals(received[0].activity.objectId, TARGET);
+	assertEquals(received[0].activity.targetId, null);
+	assertEquals(received[0].authentication.requestSigners.map((p) => p.id.href), [SIGNER.href]);
+	assertEquals(received[0].authentication.expandedActivity.length, 1);
+});
+test("Queued actorless activities are dropped without evidence", async () => {
+	const queue = new CapturingQueue();
+	const { federation, received } = setup({ queue });
+	assertEquals((await federation.fetch(await postSigned(featureRequestDocument()), { contextData: void 0 })).status, 202);
+	const message = queue.messages.shift();
+	const { authentication: _, verifiedView: __, ...legacy } = message;
+	await federation.processQueuedTask(void 0, legacy);
+	assertEquals(received, []);
+	await federation.processQueuedTask(void 0, {
+		...message,
+		authentication: {
+			verified: true,
+			requestSigners: [],
+			documentSigners: [],
+			originAuthenticated: []
+		}
+	});
+	assertEquals(received, []);
+	await federation.processQueuedTask(void 0, {
+		...message,
+		verifiedView: { version: 2 }
+	});
+	assertEquals(received, []);
+	await federation.processQueuedTask(void 0, message);
+	assertEquals(received.length, 1);
+});
+test("Actorless activities too large to enqueue are processed immediately", async () => {
+	const queue = new CapturingQueue(512);
+	const { federation, received } = setup({ queue });
+	assertEquals((await federation.fetch(await postSigned(featureRequestDocument()), { contextData: void 0 })).status, 202);
+	assertEquals(queue.messages, []);
+	assertEquals(received.length, 1);
+});
+test("Activities processed by older queue workers are not processed again", async () => {
+	const kv = new MemoryKvStore();
+	const document = featureRequestDocument({ actor: SIGNER.href });
+	await kv.set([
+		"_fedify",
+		"activityIdempotence",
+		"https://example.com",
+		document.id
+	], true);
+	const federation = createFederation({
+		kv,
+		documentLoaderFactory: () => mockDocumentLoader,
+		contextLoaderFactory: () => mockDocumentLoader,
+		authenticatedDocumentLoaderFactory: () => mockDocumentLoader
+	});
+	federation.setActorDispatcher("/users/{identifier}", (ctx, identifier) => new Person({ id: ctx.getActorUri(identifier) })).setKeyPairsDispatcher(() => [{
+		privateKey: rsaPrivateKey2,
+		publicKey: rsaPublicKey2.publicKey
+	}]);
+	let calls = 0;
+	federation.setInboxListeners("/users/{identifier}/inbox", "/inbox").on(FeatureRequest, () => {
+		calls++;
+	});
+	assertEquals((await federation.fetch(await postSigned(document), { contextData: void 0 })).status, 202);
+	assertEquals(calls, 0);
+});
+test("Activities with an actor expose their evidence", async () => {
+	const { federation, received } = setup();
+	assertEquals((await federation.fetch(await postSigned(featureRequestDocument({ actor: SIGNER.href })), { contextData: void 0 })).status, 202);
+	assertEquals(received.length, 1);
+	assertEquals(received[0].authentication.requestSigners.map((p) => [
+		p.id.href,
+		p.mechanism,
+		p.keyId?.href
+	]), [[
+		SIGNER.href,
+		"httpSignatures",
+		RSA_KEY.href
+	]]);
+});
+test("An author's proof is preferred to a relay's Linked Data Signature", async () => {
+	const { federation, received } = setup();
+	const relayKey = RELAY_KEY;
+	const document = await signJsonLd(await withRawProof(featureRequestDocument()), rsaPrivateKey2, relayKey, { contextLoader: mockDocumentLoader });
+	assertEquals((await federation.fetch(post(document), { contextData: void 0 })).status, 202);
+	assertEquals(received.length, 1);
+	assertEquals(received[0].authentication.documentSigners.map((p) => [p.id.href, p.mechanism]), [[SIGNER.href, "objectIntegrityProofs"]]);
+});
+test("A proof that cannot be verified for now is not superseded", async () => {
+	const { federation, received } = setup({ unavailable: ["https://example.com/person2", "https://example.com/person2#key4"] });
+	const relayKey = RELAY_KEY;
+	const document = await signJsonLd(await withRawProof(featureRequestDocument()), rsaPrivateKey2, relayKey, { contextLoader: mockDocumentLoader });
+	let status;
+	try {
+		status = (await federation.fetch(post(document), { contextData: void 0 })).status;
+	} catch {}
+	assert(status == null || status >= 500, `${status}`);
+	assertEquals(received, []);
+});
+test("Context.routeActivity() exposes the evidence of verified proofs", async () => {
+	const { federation, received } = setup();
+	const document = await withRawProof(featureRequestDocument({ actor: SIGNER.href }));
+	const activity = await FeatureRequest.fromJsonLd(document, {
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader
+	});
+	assert(await federation.createContext(new URL("https://example.com/"), void 0).routeActivity("alice", activity));
+	assertEquals(received.length, 1);
+	assertEquals(received[0].authentication.documentSigners.map((p) => [p.id.href, p.mechanism]), [[SIGNER.href, "objectIntegrityProofs"]]);
+	assertEquals(received[0].authentication.originAuthenticated, []);
+});
+test("An author's aliased proof is preferred to a relay's signature", async () => {
+	const { federation, received } = setup();
+	const document = await signJsonLd(await withRawProof(featureRequestDocument(), "integrity"), rsaPrivateKey2, RELAY_KEY, { contextLoader: mockDocumentLoader });
+	assertEquals((await federation.fetch(post(document), { contextData: void 0 })).status, 202);
+	assertEquals(received.length, 1);
+	assertEquals(received[0].authentication.documentSigners.map((p) => [p.id.href, p.mechanism]), [[SIGNER.href, "objectIntegrityProofs"]]);
+});
+for (const queued of [false, true]) test(`Context.routeActivity() keeps the fetched interpretation (queued: ${queued})`, async () => {
+	const queue = queued ? new CapturingQueue() : void 0;
+	const { federation, received } = setup({ queue });
+	const activityId = "https://example.com/person2/activities/fetched";
+	const fetchedDocument = {
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/fep/7aa9"],
+		id: activityId,
+		type: "FeatureRequest",
+		actor: SIGNER.href,
+		object: TARGET.href,
+		instrument: COLLECTION.href
+	};
+	const overriding = async (url, options) => {
+		if (url === "https://www.w3.org/ns/activitystreams") return {
+			contextUrl: null,
+			documentUrl: url,
+			document: { "@context": {
+				...preloadedContexts[url]["@context"],
+				object: {
+					"@id": "https://www.w3.org/ns/activitystreams#target",
+					"@type": "@id"
+				}
+			} }
+		};
+		return await mockDocumentLoader(url, options);
+	};
+	const context = federation.createContext(new URL("https://example.com/"), void 0);
+	const activity = await FeatureRequest.fromJsonLd(fetchedDocument, {
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader
+	});
+	assert(await context.routeActivity("alice", activity, {
+		contextLoader: overriding,
+		documentLoader: async (url, options) => url === activityId ? {
+			contextUrl: null,
+			documentUrl: url,
+			document: structuredClone(fetchedDocument)
+		} : await mockDocumentLoader(url, options)
+	}));
+	if (queue != null) await processQueue(federation, queue);
+	assertEquals(received.length, 1);
+	const [{ activity: dispatched, authentication }] = received;
+	const root = authentication.expandedActivity[0];
+	assertEquals(root["https://www.w3.org/ns/activitystreams#object"]?.[0]?.["@id"], dispatched.objectId?.href);
+	assertEquals(dispatched.objectId, TARGET);
+	assertEquals(authentication.originAuthenticated.map((p) => p.id.href), [SIGNER.href]);
+});
+test("Activities whose contexts cannot be kept are processed immediately", async () => {
+	const queue = new CapturingQueue();
+	const { federation, received } = setup({ queue });
+	const cached = "https://remote.example/contexts/static-shared";
+	await expandDocument({
+		"@context": cached,
+		"z": "z"
+	}, (url, options) => url === cached ? Promise.resolve({
+		contextUrl: null,
+		documentUrl: url,
+		document: { "@context": { z: "https://example.com/z" } },
+		tag: "static"
+	}) : mockDocumentLoader(url, options));
+	const document = featureRequestDocument({ "@context": [
+		"https://www.w3.org/ns/activitystreams",
+		"https://w3id.org/fep/7aa9",
+		cached
+	] });
+	assertEquals((await federation.fetch(await postSigned(document), { contextData: void 0 })).status, 202);
+	assertEquals(queue.messages, []);
+	assertEquals(received.length, 1);
+});
+//#endregion
+export {};

package/dist/federation/inbox-authentication.test.d.mts

@@ -0,0 +1,2 @@
+import { Temporal } from "temporal-polyfill";
+import { URLPattern } from "urlpattern-polyfill";