@fedify/interaction-controls 2.5.0-dev.2339 → 2.5.0-dev.2358

package/dist/mod.d.cts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { Accept, Activity, Actor, Announce, AnnounceAuthorization, AnnounceRequest, Article, ChatMessage, Create, Delete, FeatureAuthorization, FeatureRequest, FeaturedCollection, Like, LikeAuthorization, LikeRequest, Note, Object as Object$1, Question, QuoteAuthorization, QuoteRequest, Reject, ReplyAuthorization, ReplyRequest } from "@fedify/vocab";
+import { Accept, Activity, Actor, Announce, AnnounceAuthorization, AnnounceRequest, Article, ChatMessage, Create, Delete, FeatureAuthorization, FeatureRequest, FeaturedCollection, InteractionRule, Like, LikeAuthorization, LikeRequest, Note, Object as Object$1, Question, QuoteAuthorization, QuoteRequest, Reject, ReplyAuthorization, ReplyRequest } from "@fedify/vocab";
 import { Context } from "@fedify/fedify";
 import { DocumentLoader } from "@fedify/vocab-runtime";
 
@@ -448,12 +448,12 @@ declare namespace Intl {
 //#region src/types.d.ts
 type InteractionName = "like" | "reply" | "announce" | "quote" | "feature";
 type InteractionPolicyProperty = "canLike" | "canReply" | "canAnnounce" | "canQuote" | "canFeature";
-interface InteractionControl<TRequest extends Activity, TAuthorization extends Object$1, TInteracting extends Object$1, TTarget extends Object$1, TImpoliteSource extends Object$1> {
+interface InteractionControl<TRequest extends Activity, TAuthorization extends Object$1, TInteracting extends Object$1, TTarget extends Object$1, TImpoliteSource extends Object$1, TRequestValidationOptions extends object = Record<never, never>> {
   readonly name: InteractionName;
   readonly policyProperty: InteractionPolicyProperty;
   readonly requestTypeId: URL;
   readonly authorizationTypeId: URL;
-  readonly verifyRequest: <TContextData>(context: Context<TContextData>, options: InteractionRequestVerificationOptions<TRequest>) => Promise<InteractionRequestVerification<TRequest, TInteracting, TTarget>>;
+  readonly verifyRequest: <TContextData>(context: Context<TContextData>, options: InteractionRequestVerificationOptions<TRequest> & TRequestValidationOptions) => Promise<InteractionRequestVerification<TRequest, TInteracting, TTarget>>;
   readonly evaluatePolicy: <TContextData>(context: Context<TContextData>, options: InteractionPolicyEvaluationOptions<TContextData, TTarget>) => Promise<InteractionPolicyDecision>;
   readonly createRequest: (options: InteractionRequestCreationOptions<TInteracting, TTarget>) => TRequest;
   readonly createAuthorization: (options: InteractionAuthorizationCreationOptions<TInteracting, TTarget>) => TAuthorization;
@@ -468,6 +468,79 @@ interface InteractionControl<TRequest extends Activity, TAuthorization extends O
 interface InteractionRequestVerificationOptions<TRequest extends Activity> {
   readonly request: TRequest | URL;
   readonly documentLoader?: DocumentLoader;
+  /**
+  * The document loader for remote JSON-LD contexts.  Defaults to the
+  * document loader used for objects.
+  * @since 2.5.0
+  */
+  readonly contextLoader?: DocumentLoader;
+  /**
+  * The already resolved interaction target, used instead of dereferencing
+  * the request's `object`.  It is used only when the request references its
+  * `object` by ID; otherwise the request fails as it would without this
+  * option.  When it is used, the request itself is left untouched.
+  *
+  * The value is trusted as the resolution of the request's `object`: its ID
+  * does not have to match the reference (e.g., a share wrapper resolved to
+  * the shared post), and no origin or provenance checks are applied to it.
+  * The caller is responsible for those checks.  The target type and target
+  * binding checks still apply.
+  * @since 2.5.0
+  */
+  readonly resolvedInteractionTarget?: Object$1;
+  /**
+  * The already resolved interacting object, used instead of dereferencing
+  * the request's `instrument`.  It is used only when the request references
+  * its `instrument` by ID; otherwise the request fails as it would without
+  * this option.  When it is used, the request itself is left untouched.
+  *
+  * The value is trusted as the resolution of the request's `instrument`: its
+  * ID does not have to match the reference (e.g., after a redirect), and no
+  * origin or provenance checks are applied to it.  The caller is responsible
+  * for those checks, such as checking that the instrument comes from the
+  * requester's origin; a matching attribution alone does not authenticate
+  * it.  The instrument type, requester, and target binding checks still
+  * apply.
+  * @since 2.5.0
+  */
+  readonly resolvedInteractingObject?: Object$1;
+}
+/**
+* Options for relaxing how {@link quoteInteraction} validates a quote request.
+* The defaults apply the strictest checks.
+* @since 2.5.0
+*/
+interface QuoteRequestValidationOptions {
+  /**
+  * How the quote post's FEP-044f `quote` and compatible `quoteUrl`
+  * references are checked against the requested target:
+  *
+  *  -  `"strict"` (default): if both are present they must agree, and the
+  *     reference must equal the target.
+  *  -  `"preferQuote"`: `quote` must equal the target if present, otherwise
+  *     `quoteUrl` must; a conflicting `quoteUrl` is ignored.
+  *  -  `"any"`: either `quote` or `quoteUrl` equal to the target suffices,
+  *     even when the two disagree.
+  */
+  readonly quoteReference?: "strict" | "preferQuote" | "any";
+  /**
+  * Which `attributedTo` entries of the quote post may match the requester:
+  *
+  *  -  `"first"` (default): the first attribution must be the requester.
+  *  -  `"any"`: any attribution may be the requester.
+  */
+  readonly attribution?: "first" | "any";
+  /**
+  * What to do when the quote post has no attribution IRI, i.e., it has no
+  * `attributedTo` at all or only attributions embedded without an `id`:
+  *
+  *  -  `"reject"` (default): fail with `requesterMismatch`.
+  *  -  `"requester"`: treat the quote post as attributed to the requester.
+  *
+  * A present attribution IRI that does not match the requester always
+  * fails.
+  */
+  readonly missingAttribution?: "reject" | "requester";
 }
 type InteractionRequestVerification<TRequest extends Activity, TInteracting extends Object$1, TTarget extends Object$1> = {
   readonly verified: true;
@@ -489,14 +562,31 @@ type InteractionRequestVerificationFailure = {
   readonly type: "notDereferenceable";
   readonly url: URL;
   readonly cause?: unknown;
+  /**
+  * Whether the failure is likely transient, so that verifying again later
+  * could succeed.  Always set by the built-in helpers.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "unverifiable";
   readonly type: "unauthorizedFetchRequired";
   readonly url: URL;
+  /**
+  * Whether the failure is likely transient.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "unverifiable";
   readonly type: "invalidJsonLd";
   readonly cause?: unknown;
+  /**
+  * Whether the failure is likely transient.  Always `false` when set by
+  * the built-in helpers.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "invalid";
   readonly type: "wrongType";
@@ -531,6 +621,42 @@ interface InteractionPolicyEvaluationOptions<TContextData, TTarget extends Objec
   readonly requester: URL;
   readonly documentLoader?: DocumentLoader;
   readonly matchesApprovalCollection?: MatchesApprovalCollection<TContextData>;
+  /**
+  * The rule to evaluate when the subject has no interaction policy, no rule
+  * for this interaction, or a rule without any approval entries.  Without
+  * it, such subjects get the interaction's default decision.
+  * @since 2.5.0
+  */
+  readonly fallbackRule?: InteractionRule;
+  /**
+  * The order in which approval entries are matched:
+  *
+  *  -  `"actor"` (default): actors listed explicitly in either
+  *     `automaticApproval` or `manualApproval` first, then the public
+  *     collection and other collections, automatic before manual.  An actor
+  *     listed in `manualApproval` thus gets a manual decision even when
+  *     `automaticApproval` contains the public collection.
+  *  -  `"automatic"`: every `automaticApproval` entry first, then every
+  *     `manualApproval` entry.  If an `automaticApproval` collection cannot
+  *     be checked and no other automatic entry matches, the decision is
+  *     `denied` with an `unverifiableCollection` reason rather than a manual
+  *     decision, since the collection could have granted automatic
+  *     approval.
+  * @since 2.5.0
+  */
+  readonly precedence?: "actor" | "automatic";
+  /**
+  * What to do when {@link matchesApprovalCollection} throws:
+  *
+  *  -  `"deny"` (default): skip the collection; if nothing else decides,
+  *     the decision is `denied` with an `unverifiableCollection` reason
+  *     carrying the error as its `cause`.
+  *  -  `"throw"`: rethrow the first error immediately, without calling the
+  *     callback for later collections, so that the caller can retry later
+  *     instead of rejecting the interaction.
+  * @since 2.5.0
+  */
+  readonly collectionErrors?: "deny" | "throw";
 }
 type MatchesApprovalCollection<TContextData> = (collection: URL, actor: URL, context: Context<TContextData>) => boolean | Promise<boolean>;
 type InteractionPolicyDecision = {
@@ -566,6 +692,11 @@ type InteractionPolicyDenialReason = {
 } | {
   readonly type: "unverifiableCollection";
   readonly collection: URL;
+  /**
+  * The error thrown while checking the collection.
+  * @since 2.5.0
+  */
+  readonly cause?: unknown;
 };
 interface InteractionRequestCreationOptions<TInteracting extends Object$1, TTarget extends Object$1> {
   readonly id: URL;
@@ -587,6 +718,34 @@ interface InteractionAuthorizationVerificationOptions<TContextData, TAuthorizati
   readonly interactionTarget: TTarget | URL;
   readonly attributedTo?: URL;
   readonly documentLoader?: DocumentLoader;
+  /**
+  * The document loader for remote JSON-LD contexts.  Defaults to the
+  * document loader used for objects.
+  * @since 2.5.0
+  */
+  readonly contextLoader?: DocumentLoader;
+  /**
+  * The expected ID of the authorization.  When the authorization is given
+  * as an object, its ID must equal this, or verification fails with
+  * `idMismatch`.  When it is given as a URL, the URL must equal this.
+  *
+  * This only checks the identity of the authorization; it does not
+  * establish its authenticity.  An authorization given as an object still
+  * needs {@link verifyAuthenticity}.
+  * @since 2.5.0
+  */
+  readonly authorizationId?: URL;
+  /**
+  * Whether to accept an authorization whose ID is on a different origin
+  * than its attributed actor, if {@link verifyAuthenticity} approves it.
+  * This is for authorizations whose authenticity is established by other
+  * means, such as a signed `Accept` from the attributed actor or a locally
+  * stored grant.  Without {@link verifyAuthenticity}, such authorizations
+  * still fail with `originMismatch`.  All other checks still apply.
+  * Defaults to `false`.
+  * @since 2.5.0
+  */
+  readonly allowOffOrigin?: boolean;
   readonly getRevocation?: GetInteractionAuthorizationRevocation<TContextData>;
   readonly verifyAuthenticity?: (authorization: TAuthorization, context: Context<TContextData>) => boolean | Promise<boolean>;
 }
@@ -605,14 +764,31 @@ type InteractionAuthorizationVerificationFailure = {
   readonly type: "notDereferenceable";
   readonly url: URL;
   readonly cause?: unknown;
+  /**
+  * Whether the failure is likely transient, so that verifying again later
+  * could succeed.  Always set by the built-in helpers.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "unverifiable";
   readonly type: "unauthorizedFetchRequired";
   readonly url: URL;
+  /**
+  * Whether the failure is likely transient.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "unverifiable";
   readonly type: "invalidJsonLd";
   readonly cause?: unknown;
+  /**
+  * Whether the failure is likely transient.  Always `false` when set by
+  * the built-in helpers.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "unauthorized";
   readonly type: "wrongType";
@@ -659,44 +835,53 @@ interface InteractionAuthorizationRevocation {
 }
 type InteractionAcceptOptions<TRequest extends Activity, TAuthorization extends Object$1, TInteracting extends Object$1, TTarget extends Object$1> = {
   readonly mode: "polite";
-  readonly id: URL;
+  readonly id?: URL;
   readonly actor: URL;
   readonly request: TRequest | URL;
   readonly authorization: TAuthorization | URL;
-  readonly to: URL | readonly URL[];
+  readonly to?: URL | readonly URL[];
   readonly cc?: URL | readonly URL[];
 } | {
   readonly mode: "impolite";
-  readonly id: URL;
+  readonly id?: URL;
   readonly actor: URL;
   readonly interactingObject: TInteracting | URL;
   readonly interactionTarget: TTarget | URL;
   readonly authorization: TAuthorization | URL;
-  readonly to: URL | readonly URL[];
+  readonly to?: URL | readonly URL[];
   readonly cc?: URL | readonly URL[];
 };
 type InteractionRejectOptions<TRequest extends Activity, TInteracting extends Object$1, TTarget extends Object$1> = {
   readonly mode: "polite";
-  readonly id: URL;
+  readonly id?: URL;
   readonly actor: URL;
   readonly request: TRequest | URL;
-  readonly to: URL | readonly URL[];
+  readonly to?: URL | readonly URL[];
   readonly cc?: URL | readonly URL[];
 } | {
   readonly mode: "impolite";
-  readonly id: URL;
+  readonly id?: URL;
   readonly actor: URL;
   readonly interactingObject: TInteracting | URL;
   readonly interactionTarget: TTarget | URL;
-  readonly to: URL | readonly URL[];
+  readonly to?: URL | readonly URL[];
   readonly cc?: URL | readonly URL[];
 };
 interface InteractionRevocationCreationOptions<TAuthorization extends Object$1> {
-  readonly id: URL;
+  readonly id?: URL;
   readonly actor: URL;
   readonly authorization: TAuthorization | URL;
-  readonly to: URL | readonly URL[];
+  readonly to?: URL | readonly URL[];
   readonly cc?: URL | readonly URL[];
+  /**
+  * Whether to embed the authorization in the `Delete` activity instead of
+  * referring to it by its ID.  Applies only when the authorization is given
+  * as an object.  The embedded copy contains only the authorization's ID,
+  * attribution, and the IDs of its interacting object and interaction
+  * target, so that the revocation does not leak them.  Defaults to `false`.
+  * @since 2.5.0
+  */
+  readonly embedAuthorization?: boolean;
 }
 interface RecognizedImpoliteInteraction<TInteracting extends Object$1, TTarget extends Object$1, TImpoliteSource extends Object$1> {
   readonly requester: URL;
@@ -752,11 +937,11 @@ declare const likeInteraction: InteractionControl<LikeRequest, LikeAuthorization
 //#region src/quote.d.ts
 type QuotePost = Note | Article | Question | ChatMessage;
 type QuoteImpoliteSource = Create | QuotePost;
-declare const quoteInteraction: InteractionControl<QuoteRequest, QuoteAuthorization, QuotePost, Object$1, QuoteImpoliteSource>;
+declare const quoteInteraction: InteractionControl<QuoteRequest, QuoteAuthorization, QuotePost, Object$1, QuoteImpoliteSource, QuoteRequestValidationOptions>;
 //#endregion
 //#region src/reply.d.ts
 type ReplyPost = Note | Article | Question | ChatMessage;
 type ReplyImpoliteSource = Create | ReplyPost;
 declare const replyInteraction: InteractionControl<ReplyRequest, ReplyAuthorization, ReplyPost, Object$1, ReplyImpoliteSource>;
 //#endregion
-export { GetInteractionAuthorizationRevocation, ImpoliteInteractionEvidence, InteractionAcceptOptions, InteractionAuthorizationCreationOptions, InteractionAuthorizationKey, InteractionAuthorizationKeyInput, InteractionAuthorizationRevocation, InteractionAuthorizationVerification, InteractionAuthorizationVerificationFailure, InteractionAuthorizationVerificationOptions, InteractionControl, InteractionKey, InteractionKeyInput, InteractionName, InteractionPolicyDecision, InteractionPolicyDenialReason, InteractionPolicyEvaluationOptions, InteractionPolicyMatchReason, InteractionPolicyProperty, InteractionRejectOptions, InteractionRequestCreationOptions, InteractionRequestVerification, InteractionRequestVerificationFailure, InteractionRequestVerificationOptions, InteractionRevocationCreationOptions, MatchesApprovalCollection, type QuoteImpoliteSource, type QuotePost, RecognizedImpoliteInteraction, type ReplyImpoliteSource, type ReplyPost, announceInteraction, featureInteraction, formatAuthorizationKey, formatInteractionKey, likeInteraction, quoteInteraction, replyInteraction };
+export { GetInteractionAuthorizationRevocation, ImpoliteInteractionEvidence, InteractionAcceptOptions, InteractionAuthorizationCreationOptions, InteractionAuthorizationKey, InteractionAuthorizationKeyInput, InteractionAuthorizationRevocation, InteractionAuthorizationVerification, InteractionAuthorizationVerificationFailure, InteractionAuthorizationVerificationOptions, InteractionControl, InteractionKey, InteractionKeyInput, InteractionName, InteractionPolicyDecision, InteractionPolicyDenialReason, InteractionPolicyEvaluationOptions, InteractionPolicyMatchReason, InteractionPolicyProperty, InteractionRejectOptions, InteractionRequestCreationOptions, InteractionRequestVerification, InteractionRequestVerificationFailure, InteractionRequestVerificationOptions, InteractionRevocationCreationOptions, MatchesApprovalCollection, type QuoteImpoliteSource, type QuotePost, QuoteRequestValidationOptions, RecognizedImpoliteInteraction, type ReplyImpoliteSource, type ReplyPost, announceInteraction, featureInteraction, formatAuthorizationKey, formatInteractionKey, likeInteraction, quoteInteraction, replyInteraction };

package/dist/mod.d.ts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { Accept, Activity, Actor, Announce, AnnounceAuthorization, AnnounceRequest, Article, ChatMessage, Create, Delete, FeatureAuthorization, FeatureRequest, FeaturedCollection, Like, LikeAuthorization, LikeRequest, Note, Object as Object$1, Question, QuoteAuthorization, QuoteRequest, Reject, ReplyAuthorization, ReplyRequest } from "@fedify/vocab";
+import { Accept, Activity, Actor, Announce, AnnounceAuthorization, AnnounceRequest, Article, ChatMessage, Create, Delete, FeatureAuthorization, FeatureRequest, FeaturedCollection, InteractionRule, Like, LikeAuthorization, LikeRequest, Note, Object as Object$1, Question, QuoteAuthorization, QuoteRequest, Reject, ReplyAuthorization, ReplyRequest } from "@fedify/vocab";
 import { DocumentLoader } from "@fedify/vocab-runtime";
 import { Context } from "@fedify/fedify";
 import { Temporal } from "temporal-polyfill";
@@ -7,12 +7,12 @@ import { Temporal } from "temporal-polyfill";
 //#region src/types.d.ts
 type InteractionName = "like" | "reply" | "announce" | "quote" | "feature";
 type InteractionPolicyProperty = "canLike" | "canReply" | "canAnnounce" | "canQuote" | "canFeature";
-interface InteractionControl<TRequest extends Activity, TAuthorization extends Object$1, TInteracting extends Object$1, TTarget extends Object$1, TImpoliteSource extends Object$1> {
+interface InteractionControl<TRequest extends Activity, TAuthorization extends Object$1, TInteracting extends Object$1, TTarget extends Object$1, TImpoliteSource extends Object$1, TRequestValidationOptions extends object = Record<never, never>> {
   readonly name: InteractionName;
   readonly policyProperty: InteractionPolicyProperty;
   readonly requestTypeId: URL;
   readonly authorizationTypeId: URL;
-  readonly verifyRequest: <TContextData>(context: Context<TContextData>, options: InteractionRequestVerificationOptions<TRequest>) => Promise<InteractionRequestVerification<TRequest, TInteracting, TTarget>>;
+  readonly verifyRequest: <TContextData>(context: Context<TContextData>, options: InteractionRequestVerificationOptions<TRequest> & TRequestValidationOptions) => Promise<InteractionRequestVerification<TRequest, TInteracting, TTarget>>;
   readonly evaluatePolicy: <TContextData>(context: Context<TContextData>, options: InteractionPolicyEvaluationOptions<TContextData, TTarget>) => Promise<InteractionPolicyDecision>;
   readonly createRequest: (options: InteractionRequestCreationOptions<TInteracting, TTarget>) => TRequest;
   readonly createAuthorization: (options: InteractionAuthorizationCreationOptions<TInteracting, TTarget>) => TAuthorization;
@@ -27,6 +27,79 @@ interface InteractionControl<TRequest extends Activity, TAuthorization extends O
 interface InteractionRequestVerificationOptions<TRequest extends Activity> {
   readonly request: TRequest | URL;
   readonly documentLoader?: DocumentLoader;
+  /**
+  * The document loader for remote JSON-LD contexts.  Defaults to the
+  * document loader used for objects.
+  * @since 2.5.0
+  */
+  readonly contextLoader?: DocumentLoader;
+  /**
+  * The already resolved interaction target, used instead of dereferencing
+  * the request's `object`.  It is used only when the request references its
+  * `object` by ID; otherwise the request fails as it would without this
+  * option.  When it is used, the request itself is left untouched.
+  *
+  * The value is trusted as the resolution of the request's `object`: its ID
+  * does not have to match the reference (e.g., a share wrapper resolved to
+  * the shared post), and no origin or provenance checks are applied to it.
+  * The caller is responsible for those checks.  The target type and target
+  * binding checks still apply.
+  * @since 2.5.0
+  */
+  readonly resolvedInteractionTarget?: Object$1;
+  /**
+  * The already resolved interacting object, used instead of dereferencing
+  * the request's `instrument`.  It is used only when the request references
+  * its `instrument` by ID; otherwise the request fails as it would without
+  * this option.  When it is used, the request itself is left untouched.
+  *
+  * The value is trusted as the resolution of the request's `instrument`: its
+  * ID does not have to match the reference (e.g., after a redirect), and no
+  * origin or provenance checks are applied to it.  The caller is responsible
+  * for those checks, such as checking that the instrument comes from the
+  * requester's origin; a matching attribution alone does not authenticate
+  * it.  The instrument type, requester, and target binding checks still
+  * apply.
+  * @since 2.5.0
+  */
+  readonly resolvedInteractingObject?: Object$1;
+}
+/**
+* Options for relaxing how {@link quoteInteraction} validates a quote request.
+* The defaults apply the strictest checks.
+* @since 2.5.0
+*/
+interface QuoteRequestValidationOptions {
+  /**
+  * How the quote post's FEP-044f `quote` and compatible `quoteUrl`
+  * references are checked against the requested target:
+  *
+  *  -  `"strict"` (default): if both are present they must agree, and the
+  *     reference must equal the target.
+  *  -  `"preferQuote"`: `quote` must equal the target if present, otherwise
+  *     `quoteUrl` must; a conflicting `quoteUrl` is ignored.
+  *  -  `"any"`: either `quote` or `quoteUrl` equal to the target suffices,
+  *     even when the two disagree.
+  */
+  readonly quoteReference?: "strict" | "preferQuote" | "any";
+  /**
+  * Which `attributedTo` entries of the quote post may match the requester:
+  *
+  *  -  `"first"` (default): the first attribution must be the requester.
+  *  -  `"any"`: any attribution may be the requester.
+  */
+  readonly attribution?: "first" | "any";
+  /**
+  * What to do when the quote post has no attribution IRI, i.e., it has no
+  * `attributedTo` at all or only attributions embedded without an `id`:
+  *
+  *  -  `"reject"` (default): fail with `requesterMismatch`.
+  *  -  `"requester"`: treat the quote post as attributed to the requester.
+  *
+  * A present attribution IRI that does not match the requester always
+  * fails.
+  */
+  readonly missingAttribution?: "reject" | "requester";
 }
 type InteractionRequestVerification<TRequest extends Activity, TInteracting extends Object$1, TTarget extends Object$1> = {
   readonly verified: true;
@@ -48,14 +121,31 @@ type InteractionRequestVerificationFailure = {
   readonly type: "notDereferenceable";
   readonly url: URL;
   readonly cause?: unknown;
+  /**
+  * Whether the failure is likely transient, so that verifying again later
+  * could succeed.  Always set by the built-in helpers.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "unverifiable";
   readonly type: "unauthorizedFetchRequired";
   readonly url: URL;
+  /**
+  * Whether the failure is likely transient.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "unverifiable";
   readonly type: "invalidJsonLd";
   readonly cause?: unknown;
+  /**
+  * Whether the failure is likely transient.  Always `false` when set by
+  * the built-in helpers.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "invalid";
   readonly type: "wrongType";
@@ -90,6 +180,42 @@ interface InteractionPolicyEvaluationOptions<TContextData, TTarget extends Objec
   readonly requester: URL;
   readonly documentLoader?: DocumentLoader;
   readonly matchesApprovalCollection?: MatchesApprovalCollection<TContextData>;
+  /**
+  * The rule to evaluate when the subject has no interaction policy, no rule
+  * for this interaction, or a rule without any approval entries.  Without
+  * it, such subjects get the interaction's default decision.
+  * @since 2.5.0
+  */
+  readonly fallbackRule?: InteractionRule;
+  /**
+  * The order in which approval entries are matched:
+  *
+  *  -  `"actor"` (default): actors listed explicitly in either
+  *     `automaticApproval` or `manualApproval` first, then the public
+  *     collection and other collections, automatic before manual.  An actor
+  *     listed in `manualApproval` thus gets a manual decision even when
+  *     `automaticApproval` contains the public collection.
+  *  -  `"automatic"`: every `automaticApproval` entry first, then every
+  *     `manualApproval` entry.  If an `automaticApproval` collection cannot
+  *     be checked and no other automatic entry matches, the decision is
+  *     `denied` with an `unverifiableCollection` reason rather than a manual
+  *     decision, since the collection could have granted automatic
+  *     approval.
+  * @since 2.5.0
+  */
+  readonly precedence?: "actor" | "automatic";
+  /**
+  * What to do when {@link matchesApprovalCollection} throws:
+  *
+  *  -  `"deny"` (default): skip the collection; if nothing else decides,
+  *     the decision is `denied` with an `unverifiableCollection` reason
+  *     carrying the error as its `cause`.
+  *  -  `"throw"`: rethrow the first error immediately, without calling the
+  *     callback for later collections, so that the caller can retry later
+  *     instead of rejecting the interaction.
+  * @since 2.5.0
+  */
+  readonly collectionErrors?: "deny" | "throw";
 }
 type MatchesApprovalCollection<TContextData> = (collection: URL, actor: URL, context: Context<TContextData>) => boolean | Promise<boolean>;
 type InteractionPolicyDecision = {
@@ -125,6 +251,11 @@ type InteractionPolicyDenialReason = {
 } | {
   readonly type: "unverifiableCollection";
   readonly collection: URL;
+  /**
+  * The error thrown while checking the collection.
+  * @since 2.5.0
+  */
+  readonly cause?: unknown;
 };
 interface InteractionRequestCreationOptions<TInteracting extends Object$1, TTarget extends Object$1> {
   readonly id: URL;
@@ -146,6 +277,34 @@ interface InteractionAuthorizationVerificationOptions<TContextData, TAuthorizati
   readonly interactionTarget: TTarget | URL;
   readonly attributedTo?: URL;
   readonly documentLoader?: DocumentLoader;
+  /**
+  * The document loader for remote JSON-LD contexts.  Defaults to the
+  * document loader used for objects.
+  * @since 2.5.0
+  */
+  readonly contextLoader?: DocumentLoader;
+  /**
+  * The expected ID of the authorization.  When the authorization is given
+  * as an object, its ID must equal this, or verification fails with
+  * `idMismatch`.  When it is given as a URL, the URL must equal this.
+  *
+  * This only checks the identity of the authorization; it does not
+  * establish its authenticity.  An authorization given as an object still
+  * needs {@link verifyAuthenticity}.
+  * @since 2.5.0
+  */
+  readonly authorizationId?: URL;
+  /**
+  * Whether to accept an authorization whose ID is on a different origin
+  * than its attributed actor, if {@link verifyAuthenticity} approves it.
+  * This is for authorizations whose authenticity is established by other
+  * means, such as a signed `Accept` from the attributed actor or a locally
+  * stored grant.  Without {@link verifyAuthenticity}, such authorizations
+  * still fail with `originMismatch`.  All other checks still apply.
+  * Defaults to `false`.
+  * @since 2.5.0
+  */
+  readonly allowOffOrigin?: boolean;
   readonly getRevocation?: GetInteractionAuthorizationRevocation<TContextData>;
   readonly verifyAuthenticity?: (authorization: TAuthorization, context: Context<TContextData>) => boolean | Promise<boolean>;
 }
@@ -164,14 +323,31 @@ type InteractionAuthorizationVerificationFailure = {
   readonly type: "notDereferenceable";
   readonly url: URL;
   readonly cause?: unknown;
+  /**
+  * Whether the failure is likely transient, so that verifying again later
+  * could succeed.  Always set by the built-in helpers.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "unverifiable";
   readonly type: "unauthorizedFetchRequired";
   readonly url: URL;
+  /**
+  * Whether the failure is likely transient.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "unverifiable";
   readonly type: "invalidJsonLd";
   readonly cause?: unknown;
+  /**
+  * Whether the failure is likely transient.  Always `false` when set by
+  * the built-in helpers.
+  * @since 2.5.0
+  */
+  readonly transient?: boolean;
 } | {
   readonly category: "unauthorized";
   readonly type: "wrongType";
@@ -218,44 +394,53 @@ interface InteractionAuthorizationRevocation {
 }
 type InteractionAcceptOptions<TRequest extends Activity, TAuthorization extends Object$1, TInteracting extends Object$1, TTarget extends Object$1> = {
   readonly mode: "polite";
-  readonly id: URL;
+  readonly id?: URL;
   readonly actor: URL;
   readonly request: TRequest | URL;
   readonly authorization: TAuthorization | URL;
-  readonly to: URL | readonly URL[];
+  readonly to?: URL | readonly URL[];
   readonly cc?: URL | readonly URL[];
 } | {
   readonly mode: "impolite";
-  readonly id: URL;
+  readonly id?: URL;
   readonly actor: URL;
   readonly interactingObject: TInteracting | URL;
   readonly interactionTarget: TTarget | URL;
   readonly authorization: TAuthorization | URL;
-  readonly to: URL | readonly URL[];
+  readonly to?: URL | readonly URL[];
   readonly cc?: URL | readonly URL[];
 };
 type InteractionRejectOptions<TRequest extends Activity, TInteracting extends Object$1, TTarget extends Object$1> = {
   readonly mode: "polite";
-  readonly id: URL;
+  readonly id?: URL;
   readonly actor: URL;
   readonly request: TRequest | URL;
-  readonly to: URL | readonly URL[];
+  readonly to?: URL | readonly URL[];
   readonly cc?: URL | readonly URL[];
 } | {
   readonly mode: "impolite";
-  readonly id: URL;
+  readonly id?: URL;
   readonly actor: URL;
   readonly interactingObject: TInteracting | URL;
   readonly interactionTarget: TTarget | URL;
-  readonly to: URL | readonly URL[];
+  readonly to?: URL | readonly URL[];
   readonly cc?: URL | readonly URL[];
 };
 interface InteractionRevocationCreationOptions<TAuthorization extends Object$1> {
-  readonly id: URL;
+  readonly id?: URL;
   readonly actor: URL;
   readonly authorization: TAuthorization | URL;
-  readonly to: URL | readonly URL[];
+  readonly to?: URL | readonly URL[];
   readonly cc?: URL | readonly URL[];
+  /**
+  * Whether to embed the authorization in the `Delete` activity instead of
+  * referring to it by its ID.  Applies only when the authorization is given
+  * as an object.  The embedded copy contains only the authorization's ID,
+  * attribution, and the IDs of its interacting object and interaction
+  * target, so that the revocation does not leak them.  Defaults to `false`.
+  * @since 2.5.0
+  */
+  readonly embedAuthorization?: boolean;
 }
 interface RecognizedImpoliteInteraction<TInteracting extends Object$1, TTarget extends Object$1, TImpoliteSource extends Object$1> {
   readonly requester: URL;
@@ -311,11 +496,11 @@ declare const likeInteraction: InteractionControl<LikeRequest, LikeAuthorization
 //#region src/quote.d.ts
 type QuotePost = Note | Article | Question | ChatMessage;
 type QuoteImpoliteSource = Create | QuotePost;
-declare const quoteInteraction: InteractionControl<QuoteRequest, QuoteAuthorization, QuotePost, Object$1, QuoteImpoliteSource>;
+declare const quoteInteraction: InteractionControl<QuoteRequest, QuoteAuthorization, QuotePost, Object$1, QuoteImpoliteSource, QuoteRequestValidationOptions>;
 //#endregion
 //#region src/reply.d.ts
 type ReplyPost = Note | Article | Question | ChatMessage;
 type ReplyImpoliteSource = Create | ReplyPost;
 declare const replyInteraction: InteractionControl<ReplyRequest, ReplyAuthorization, ReplyPost, Object$1, ReplyImpoliteSource>;
 //#endregion
-export { GetInteractionAuthorizationRevocation, ImpoliteInteractionEvidence, InteractionAcceptOptions, InteractionAuthorizationCreationOptions, InteractionAuthorizationKey, InteractionAuthorizationKeyInput, InteractionAuthorizationRevocation, InteractionAuthorizationVerification, InteractionAuthorizationVerificationFailure, InteractionAuthorizationVerificationOptions, InteractionControl, InteractionKey, InteractionKeyInput, InteractionName, InteractionPolicyDecision, InteractionPolicyDenialReason, InteractionPolicyEvaluationOptions, InteractionPolicyMatchReason, InteractionPolicyProperty, InteractionRejectOptions, InteractionRequestCreationOptions, InteractionRequestVerification, InteractionRequestVerificationFailure, InteractionRequestVerificationOptions, InteractionRevocationCreationOptions, MatchesApprovalCollection, type QuoteImpoliteSource, type QuotePost, RecognizedImpoliteInteraction, type ReplyImpoliteSource, type ReplyPost, announceInteraction, featureInteraction, formatAuthorizationKey, formatInteractionKey, likeInteraction, quoteInteraction, replyInteraction };
+export { GetInteractionAuthorizationRevocation, ImpoliteInteractionEvidence, InteractionAcceptOptions, InteractionAuthorizationCreationOptions, InteractionAuthorizationKey, InteractionAuthorizationKeyInput, InteractionAuthorizationRevocation, InteractionAuthorizationVerification, InteractionAuthorizationVerificationFailure, InteractionAuthorizationVerificationOptions, InteractionControl, InteractionKey, InteractionKeyInput, InteractionName, InteractionPolicyDecision, InteractionPolicyDenialReason, InteractionPolicyEvaluationOptions, InteractionPolicyMatchReason, InteractionPolicyProperty, InteractionRejectOptions, InteractionRequestCreationOptions, InteractionRequestVerification, InteractionRequestVerificationFailure, InteractionRequestVerificationOptions, InteractionRevocationCreationOptions, MatchesApprovalCollection, type QuoteImpoliteSource, type QuotePost, QuoteRequestValidationOptions, RecognizedImpoliteInteraction, type ReplyImpoliteSource, type ReplyPost, announceInteraction, featureInteraction, formatAuthorizationKey, formatInteractionKey, likeInteraction, quoteInteraction, replyInteraction };