@fedify/testing 2.4.0-dev.2193 → 2.4.0-dev.2212

package/dist/mod.cjs

@@ -143,11 +143,54 @@ function createRequestContext(args) {
 		getObject: args.getObject ?? (() => Promise.resolve(null)),
 		getSignedKey: args.getSignedKey ?? (() => Promise.resolve(null)),
 		getSignedKeyOwner: args.getSignedKeyOwner ?? (() => Promise.resolve(null)),
+		isSignedByAudience: args.isSignedByAudience ?? ((object, options) => isSignedByAudience(() => args.getSignedKeyOwner == null ? Promise.resolve(null) : args.getSignedKeyOwner(options ?? {}), object, options?.isMember)),
 		sendActivity: args.sendActivity ?? ((_params) => {
 			throw new Error("Not implemented");
 		})
 	};
 }
+const PUBLIC_IDS = /* @__PURE__ */ new Set([
+	_fedify_vocab.PUBLIC_COLLECTION.href,
+	"as:Public",
+	"Public"
+]);
+function getPortableIri(id) {
+	try {
+		if (id.protocol === "ap:" || id.protocol === "ap+ef61:") return (0, _fedify_vocab_runtime.formatIri)(id);
+		const portable = (0, _fedify_vocab_runtime.fromCompatibleEf61Id)(id);
+		return portable == null ? null : (0, _fedify_vocab_runtime.formatIri)(portable);
+	} catch (error) {
+		if (error instanceof TypeError) return null;
+		throw error;
+	}
+}
+function isSameActorId(a, b) {
+	const portableA = getPortableIri(a);
+	const portableB = getPortableIri(b);
+	if (portableA != null || portableB != null) return portableA != null && portableB != null && (0, _fedify_vocab_runtime.arePortableUrisEqual)(portableA, portableB);
+	return a.href === b.href;
+}
+/**
+* The default implementation of `RequestContext.isSignedByAudience()` for
+* testing, which checks the audience against `getSignedKeyOwner()`.
+*/
+async function isSignedByAudience(getSignedKeyOwner, object, isMember) {
+	const addressees = [
+		...object.toIds,
+		...object.ccIds,
+		...object.btoIds,
+		...object.bccIds,
+		...object.audienceIds
+	];
+	if (addressees.some((id) => PUBLIC_IDS.has(id.href))) return true;
+	const actor = await getSignedKeyOwner();
+	const actorId = actor?.id;
+	if (actor == null || actorId == null) return false;
+	if (addressees.some((id) => isSameActorId(id, actorId))) return true;
+	if (isMember == null) return false;
+	for (const addressee of addressees) if (await isMember(addressee, actor)) return true;
+	return false;
+}
 /**
 * Creates an InboxContext for testing purposes.
 * Not exported - used internally only. Public API is in mock.ts
@@ -868,6 +911,9 @@ var MockContext = class MockContext {
 	getSignedKeyOwner() {
 		return Promise.resolve(null);
 	}
+	isSignedByAudience(object, options) {
+		return isSignedByAudience(() => this.getSignedKeyOwner(), object, options?.isMember);
+	}
 	#resolveTaskDefinition(task) {
 		if (!(this.federation instanceof MockFederation)) throw new TypeError("No task definitions are available.");
 		const def = this.federation.taskDefinitions.get(task.name);

package/dist/mod.d.cts

@@ -22,6 +22,10 @@ declare function createRequestContext<TContextData>(args: Partial<RequestContext
   federation: Federation<TContextData>;
 }): RequestContext<TContextData>;
 /**
+* The default implementation of `RequestContext.isSignedByAudience()` for
+* testing, which checks the audience against `getSignedKeyOwner()`.
+*/
+/**
 * Test-specific InboxContext type alias.
 * This indirection helps avoid JSR type analyzer issues.
 * @since 1.9.1
@@ -82,7 +86,7 @@ interface SentActivity {
 * Extends the standard Context interface with additional testing utilities.
 * @since 1.9.1
 */
-interface TestContext<TContextData> extends Omit<Context<TContextData>, "clone">, Pick<RequestContext<TContextData>, "request" | "url" | "getActor" | "getObject" | "getSignedKey" | "getSignedKeyOwner" | "sendActivity" | "routeActivity"> {
+interface TestContext<TContextData> extends Omit<Context<TContextData>, "clone">, Pick<RequestContext<TContextData>, "request" | "url" | "getActor" | "getObject" | "getSignedKey" | "getSignedKeyOwner" | "isSignedByAudience" | "sendActivity" | "routeActivity"> {
   clone(data: TContextData): TestContext<TContextData>;
   getSentActivities(): Array<{
     sender: any;

package/dist/mod.d.ts

@@ -22,6 +22,10 @@ declare function createRequestContext<TContextData>(args: Partial<RequestContext
   federation: Federation<TContextData>;
 }): RequestContext<TContextData>;
 /**
+* The default implementation of `RequestContext.isSignedByAudience()` for
+* testing, which checks the audience against `getSignedKeyOwner()`.
+*/
+/**
 * Test-specific InboxContext type alias.
 * This indirection helps avoid JSR type analyzer issues.
 * @since 1.9.1
@@ -82,7 +86,7 @@ interface SentActivity {
 * Extends the standard Context interface with additional testing utilities.
 * @since 1.9.1
 */
-interface TestContext<TContextData> extends Omit<Context<TContextData>, "clone">, Pick<RequestContext<TContextData>, "request" | "url" | "getActor" | "getObject" | "getSignedKey" | "getSignedKeyOwner" | "sendActivity" | "routeActivity"> {
+interface TestContext<TContextData> extends Omit<Context<TContextData>, "clone">, Pick<RequestContext<TContextData>, "request" | "url" | "getActor" | "getObject" | "getSignedKey" | "getSignedKeyOwner" | "isSignedByAudience" | "sendActivity" | "routeActivity"> {
   clone(data: TContextData): TestContext<TContextData>;
   getSentActivities(): Array<{
     sender: any;

package/dist/mod.js

@@ -1,7 +1,7 @@
 import { Temporal } from "temporal-polyfill";
 import { hasProofLike, hasSignatureLike } from "@fedify/fedify/sig";
-import { Activity, CryptographicKey, Multikey, Tombstone, lookupObject, traverseCollection } from "@fedify/vocab";
-import { canonicalizePortableUri, formatIri, fromCompatibleEf61Id, getFe34Origin, parseIri } from "@fedify/vocab-runtime";
+import { Activity, CryptographicKey, Multikey, PUBLIC_COLLECTION, Tombstone, lookupObject, traverseCollection } from "@fedify/vocab";
+import { arePortableUrisEqual, canonicalizePortableUri, formatIri, fromCompatibleEf61Id, getFe34Origin, parseIri } from "@fedify/vocab-runtime";
 import { RouterError } from "@fedify/fedify/federation";
 import { delay } from "es-toolkit";
 import { deepStrictEqual, ok, strictEqual } from "node:assert/strict";
@@ -142,11 +142,54 @@ function createRequestContext(args) {
 		getObject: args.getObject ?? (() => Promise.resolve(null)),
 		getSignedKey: args.getSignedKey ?? (() => Promise.resolve(null)),
 		getSignedKeyOwner: args.getSignedKeyOwner ?? (() => Promise.resolve(null)),
+		isSignedByAudience: args.isSignedByAudience ?? ((object, options) => isSignedByAudience(() => args.getSignedKeyOwner == null ? Promise.resolve(null) : args.getSignedKeyOwner(options ?? {}), object, options?.isMember)),
 		sendActivity: args.sendActivity ?? ((_params) => {
 			throw new Error("Not implemented");
 		})
 	};
 }
+const PUBLIC_IDS = /* @__PURE__ */ new Set([
+	PUBLIC_COLLECTION.href,
+	"as:Public",
+	"Public"
+]);
+function getPortableIri(id) {
+	try {
+		if (id.protocol === "ap:" || id.protocol === "ap+ef61:") return formatIri(id);
+		const portable = fromCompatibleEf61Id(id);
+		return portable == null ? null : formatIri(portable);
+	} catch (error) {
+		if (error instanceof TypeError) return null;
+		throw error;
+	}
+}
+function isSameActorId(a, b) {
+	const portableA = getPortableIri(a);
+	const portableB = getPortableIri(b);
+	if (portableA != null || portableB != null) return portableA != null && portableB != null && arePortableUrisEqual(portableA, portableB);
+	return a.href === b.href;
+}
+/**
+* The default implementation of `RequestContext.isSignedByAudience()` for
+* testing, which checks the audience against `getSignedKeyOwner()`.
+*/
+async function isSignedByAudience(getSignedKeyOwner, object, isMember) {
+	const addressees = [
+		...object.toIds,
+		...object.ccIds,
+		...object.btoIds,
+		...object.bccIds,
+		...object.audienceIds
+	];
+	if (addressees.some((id) => PUBLIC_IDS.has(id.href))) return true;
+	const actor = await getSignedKeyOwner();
+	const actorId = actor?.id;
+	if (actor == null || actorId == null) return false;
+	if (addressees.some((id) => isSameActorId(id, actorId))) return true;
+	if (isMember == null) return false;
+	for (const addressee of addressees) if (await isMember(addressee, actor)) return true;
+	return false;
+}
 /**
 * Creates an InboxContext for testing purposes.
 * Not exported - used internally only. Public API is in mock.ts
@@ -867,6 +910,9 @@ var MockContext = class MockContext {
 	getSignedKeyOwner() {
 		return Promise.resolve(null);
 	}
+	isSignedByAudience(object, options) {
+		return isSignedByAudience(() => this.getSignedKeyOwner(), object, options?.isMember);
+	}
 	#resolveTaskDefinition(task) {
 		if (!(this.federation instanceof MockFederation)) throw new TypeError("No task definitions are available.");
 		const def = this.federation.taskDefinitions.get(task.name);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fedify/testing",
-  "version": "2.4.0-dev.2193+402149b5",
+  "version": "2.4.0-dev.2212+26ce9858",
   "description": "Testing utilities for Fedify applications",
   "keywords": [
     "fedify",
@@ -47,13 +47,13 @@
     "package.json"
   ],
   "peerDependencies": {
-    "@fedify/fedify": "^2.4.0-dev.2193+402149b5"
+    "@fedify/fedify": "^2.4.0-dev.2212+26ce9858"
   },
   "dependencies": {
     "es-toolkit": "1.46.1",
     "temporal-polyfill": "^1.0.1",
-    "@fedify/vocab": "2.4.0-dev.2193+402149b5",
-    "@fedify/vocab-runtime": "^2.4.0-dev.2193+402149b5"
+    "@fedify/vocab-runtime": "^2.4.0-dev.2212+26ce9858",
+    "@fedify/vocab": "2.4.0-dev.2212+26ce9858"
   },
   "devDependencies": {
     "@standard-schema/spec": "^1.1.0",