@fedify/fedify 2.5.0-dev.2609 → 2.5.0-dev.2618

package/dist/{builder-BLCvt0zp.mjs → builder-C-zhu1PC.mjs}

@@ -2,7 +2,9 @@ import "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { i as getPortableDid, l as isPortableId, n as getCanonicalPortableId } from "./portable-key-id-Ca30-hOa.mjs";
-import { n as version, t as name } from "./deno-DYkYmKp0.mjs";
+import { n as version, t as name } from "./deno-CaPDSXDl.mjs";
+import { n as snapshotSenderPayloadOption } from "./outbound-document-BMgwLXTY.mjs";
+import { n as snapshotBodyCapture } from "./outbound-capture-DVgnRzlf.mjs";
 import { t as ActivityListenerSet } from "./activity-listener-CELFAodc.mjs";
 import { getLogger } from "@logtape/logtape";
 import { Router, RouterError, assertPath } from "@fedify/uri-template";
@@ -10,6 +12,68 @@ import { Tombstone, getTypeId } from "@fedify/vocab";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 import { fromCompatibleEf61Id, isGatewayUrl } from "@fedify/vocab-runtime";
 import { isCompatibleEf61Iri } from "@fedify/vocab-runtime/internal/portable-dereference";
+//#region src/federation/outbound-headers.ts
+const protectedHeaders = /* @__PURE__ */ new Set([
+	"authorization",
+	"proxy-authorization",
+	"cookie",
+	"set-cookie",
+	"signature",
+	"signature-input",
+	"authentication-info",
+	"proxy-authentication-info",
+	"x-api-key",
+	"x-auth-token"
+]);
+function snapshotNames(names) {
+	if (!Array.isArray(names)) throw new TypeError("Outbound header names must be an array.");
+	const normalized = /* @__PURE__ */ new Set();
+	for (const name of names) {
+		if (typeof name !== "string" || !/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name) || name.includes("*")) throw new TypeError("Outbound header names must be literal HTTP tokens.");
+		normalized.add(name.toLowerCase());
+	}
+	return Object.freeze([...normalized].sort());
+}
+/** Validate/copy policy before registration replaces the selected observers. */
+function snapshotHeaderPolicy(policy) {
+	if (policy === void 0) return void 0;
+	if (policy == null || typeof policy !== "object") throw new TypeError("Outbound header policy must be an object.");
+	const { allow, redact, maxBytes } = policy;
+	if (typeof maxBytes !== "number") throw new TypeError("Outbound header maxBytes must be a number.");
+	if (!Number.isSafeInteger(maxBytes) || maxBytes <= 0) throw new RangeError("Outbound header maxBytes must be a positive safe integer.");
+	return Object.freeze({
+		allow: snapshotNames(allow),
+		...redact === void 0 ? {} : { redact: snapshotNames(redact) },
+		maxBytes
+	});
+}
+/** Copy only selected/redacted entries; budgets never truncate a header value. */
+function snapshotHeaders(headers, policy) {
+	const redact = /* @__PURE__ */ new Set([...protectedHeaders, ...policy.redact ?? []]);
+	const entries = [];
+	const encoder = new TextEncoder();
+	let bytes = 0;
+	let limitReached = false;
+	for (const name of policy.allow) {
+		if (!headers.has(name)) continue;
+		for (const [key, rawValue] of headers) {
+			if (key !== name) continue;
+			const value = redact.has(name) ? "[redacted]" : rawValue;
+			const size = encoder.encode(`${name}: ${value}\r\n`).byteLength;
+			if (size > policy.maxBytes - bytes) {
+				limitReached = true;
+				continue;
+			}
+			entries.push(Object.freeze([name, value]));
+			bytes += size;
+		}
+	}
+	return Object.freeze({
+		entries: Object.freeze(entries),
+		limitReached
+	});
+}
+//#endregion
 //#region src/federation/builder.ts
 const ACTOR_ALIAS_PREFIX = "actorAlias:";
 /**
@@ -56,6 +120,7 @@ var FederationBuilderImpl = class {
 	inboxListeners;
 	outboxListeners;
 	inboxRequestFinishedHandler;
+	outboundObservers = globalThis.Object.freeze({});
 	inboxErrorHandler;
 	outboxListenerErrorHandler;
 	outboxAuthorizePredicate;
@@ -91,7 +156,7 @@ var FederationBuilderImpl = class {
 	* specified.
 	*/
 	async build(options) {
-		const { FederationImpl } = await import("./middleware-C1coPz8l.mjs");
+		const { FederationImpl } = await import("./middleware-BPZ9KhAd.mjs");
 		const f = new FederationImpl(options);
 		const trailingSlashInsensitiveValue = f.router.trailingSlashInsensitive;
 		f.router = this.router.clone();
@@ -118,6 +183,7 @@ var FederationBuilderImpl = class {
 		f.inboxListeners = this.inboxListeners?.clone();
 		f.outboxListeners = this.outboxListeners?.clone();
 		f.inboxRequestFinishedHandler = this.inboxRequestFinishedHandler;
+		f.setOutboundObservers(this.outboundObservers);
 		f.inboxErrorHandler = this.inboxErrorHandler;
 		f.outboxListenerErrorHandler = this.outboxListenerErrorHandler;
 		f.outboxAuthorizePredicate = this.outboxAuthorizePredicate;
@@ -265,6 +331,19 @@ var FederationBuilderImpl = class {
 		};
 		return setters;
 	}
+	setOutboundObservers(observers) {
+		this.outboundObservers = globalThis.Object.freeze({
+			senderPayload: snapshotSenderPayloadOption(observers.senderPayload),
+			responseBodyCapture: snapshotBodyCapture(observers.responseBodyCapture),
+			requestHeaders: snapshotHeaderPolicy(observers.requestHeaders),
+			responseHeaders: snapshotHeaderPolicy(observers.responseHeaders),
+			onBroadcast: observers.onBroadcast,
+			onDelivery: observers.onDelivery,
+			onAttempt: observers.onAttempt,
+			onHttpExchange: observers.onHttpExchange,
+			onWorker: observers.onWorker
+		});
+	}
 	setNodeInfoDispatcher(path, dispatcher) {
 		if (this.router.has("nodeInfo")) throw new RouterError("NodeInfo dispatcher already set.");
 		if (Router.variables(path).size !== 0) throw new RouterError("Path for NodeInfo dispatcher must have no variables.");
@@ -829,4 +908,4 @@ function warnCompatibleActorId(actorId, gateway) {
 	});
 }
 //#endregion
-export { FederationBuilderImpl as n, createFederationBuilder as r, ACTOR_ALIAS_PREFIX as t };
+export { snapshotHeaders as a, snapshotHeaderPolicy as i, FederationBuilderImpl as n, createFederationBuilder as r, ACTOR_ALIAS_PREFIX as t };

package/dist/compat/mod.d.cts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { in as ActivityTransformer, n as Context } from "../context-ByflxsY9.cjs";
+import { in as ActivityTransformer, n as Context } from "../context-C1NqcIct.cjs";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/mod.d.ts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { in as ActivityTransformer, n as Context } from "../context-uQUY5fQT.js";
+import { in as ActivityTransformer, n as Context } from "../context-xrqq4Hrq.js";
 import { Activity } from "@fedify/vocab";
 
 //#region src/compat/transformers.d.ts

package/dist/compat/transformers.test.mjs

@@ -5,7 +5,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
 import { t as assertInstanceOf } from "../assert_instance_of-mrXWWNY-.mjs";
 import { t as assert } from "../assert-D1Eafmd_.mjs";
-import { O as actorDehydrator, k as autoIdAssigner, n as FederationImpl } from "../middleware-CIRoIVSU.mjs";
+import { O as actorDehydrator, k as autoIdAssigner, n as FederationImpl } from "../middleware-DMrpt2wD.mjs";
 import { Follow, Person } from "@fedify/vocab";
 import { test } from "@fedify/fixture";
 //#region src/compat/transformers.test.ts

package/dist/{compound-proof-DNhLvscb.mjs → compound-proof-B6Mz3pzt.mjs}

@@ -3,9 +3,9 @@ import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
 import { a as getRawCanonicalPortableId, l as isPortableId, n as getCanonicalPortableId } from "./portable-key-id-Ca30-hOa.mjs";
 import { a as verificationObservation, t as observeAttempt } from "./verification-Dpfcw8ml.mjs";
-import { c as getNormalizationContextLoader } from "./ld-CZsMAfOw.mjs";
+import { c as getNormalizationContextLoader } from "./ld-CEOS8Pho.mjs";
 import { n as preloadedOnlyDocumentLoader } from "./public-audience--klBIOk1.mjs";
-import { c as verifyMapLocalProof, f as verifyPortableObjectProofPolicy, m as verifyPreparedPortableObjectProofPolicy, n as classifyFep2277CoreType, o as preparePortableObjectProofPolicy } from "./proof-D6Kb0Qq9.mjs";
+import { c as verifyMapLocalProof, f as verifyPortableObjectProofPolicy, m as verifyPreparedPortableObjectProofPolicy, n as classifyFep2277CoreType, o as preparePortableObjectProofPolicy } from "./proof-VrE-GaGv.mjs";
 import { parseIri, preloadedContexts } from "@fedify/vocab-runtime";
 import jsonld from "@fedify/vocab-runtime/jsonld";
 //#region src/sig/compound-proof.ts