@fedify/vocab-runtime 2.4.0-dev.1618 → 2.4.0-dev.1655

package/deno.json

@@ -1,6 +1,6 @@
 {
   "name": "@fedify/vocab-runtime",
-  "version": "2.4.0-dev.1618+58858243",
+  "version": "2.4.0-dev.1655+b8f3c3d5",
   "license": "MIT",
   "exports": {
     ".": "./src/mod.ts",

package/dist/{docloader-DnUMWHaJ.d.cts → docloader-C_dir7Xb.d.ts}

@@ -184,8 +184,10 @@ interface GetDocumentLoaderOptions extends DocumentLoaderFactoryOptions {
 * - <https://www.w3.org/ns/activitystreams>
 * - <https://w3id.org/security/v1>
 * - <https://w3id.org/security/data-integrity/v1>
+* - <https://w3id.org/security/data-integrity/v2>
 * - <https://www.w3.org/ns/did/v1>
 * - <https://w3id.org/security/multikey/v1>
+* - <https://w3id.org/fep/ef61>
 * - <https://purl.archive.org/socialweb/webfinger>
 * - <http://schema.org/>
 * @param options Options for the document loader.

package/dist/{docloader-xRGn1azD.d.ts → docloader-D2DTRiyA.d.cts}

@@ -184,8 +184,10 @@ interface GetDocumentLoaderOptions extends DocumentLoaderFactoryOptions {
 * - <https://www.w3.org/ns/activitystreams>
 * - <https://w3id.org/security/v1>
 * - <https://w3id.org/security/data-integrity/v1>
+* - <https://w3id.org/security/data-integrity/v2>
 * - <https://www.w3.org/ns/did/v1>
 * - <https://w3id.org/security/multikey/v1>
+* - <https://w3id.org/fep/ef61>
 * - <https://purl.archive.org/socialweb/webfinger>
 * - <http://schema.org/>
 * @param options Options for the document loader.

package/dist/internal/jsonld-cache.cjs

@@ -1,6 +1,6 @@
 
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_url = require("../url-Ck3dGEwH.cjs");
+const require_url = require("../url-DD4F0ULf.cjs");
 const require_jsonld = require("../jsonld.cjs");
 //#region src/internal/jsonld-cache.ts
 const noJsonLdContext = Symbol("noJsonLdContext");

package/dist/internal/jsonld-cache.d.cts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { n as DocumentLoader } from "../docloader-DnUMWHaJ.cjs";
+import { n as DocumentLoader } from "../docloader-D2DTRiyA.cjs";
 
 //#region src/internal/jsonld-cache.d.ts
 /**

package/dist/internal/jsonld-cache.d.ts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { n as DocumentLoader } from "../docloader-xRGn1azD.js";
+import { n as DocumentLoader } from "../docloader-C_dir7Xb.js";
 
 //#region src/internal/jsonld-cache.d.ts
 /**

package/dist/internal/jsonld-cache.js

@@ -1,5 +1,5 @@
 
-import { a as formatIri, c as haveSameIriOrigin, s as haveSameFe34Origin } from "../url-m1YxGNZ0.js";
+import { a as formatIri, c as haveSameIriOrigin, s as haveSameFe34Origin } from "../url-DGVbSVVi.js";
 import jsonld_default from "../jsonld.js";
 //#region src/internal/jsonld-cache.ts
 const noJsonLdContext = Symbol("noJsonLdContext");

package/dist/mod.cjs

@@ -1,7 +1,7 @@
 
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-M78iaK0I.cjs");
-const require_url = require("./url-Ck3dGEwH.cjs");
+const require_url = require("./url-DD4F0ULf.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _opentelemetry_api = require("@opentelemetry/api");
 let node_process = require("node:process");
@@ -469,10 +469,6 @@ const preloadedContexts = {
 		"id": "@id",
 		"type": "@type",
 		"@protected": true,
-		"digestMultibase": {
-			"@id": "https://w3id.org/security#digestMultibase",
-			"@type": "https://w3id.org/security#multibase"
-		},
 		"proof": {
 			"@id": "https://w3id.org/security#proof",
 			"@type": "@id",
@@ -4309,6 +4305,14 @@ const preloadedContexts = {
 			"@type": "@id"
 		}
 	} },
+	"https://w3id.org/fep/ef61": { "@context": {
+		"gateways": {
+			"@id": "https://w3id.org/fep/ef61/gateways",
+			"@type": "@id",
+			"@container": "@list"
+		},
+		"digestMultibase": "https://www.w3.org/ns/credentials/v2#digestMultibase"
+	} },
 	"https://join-lemmy.org/context.json": { "@context": ["https://w3id.org/security/v1", {
 		"as": "https://www.w3.org/ns/activitystreams#",
 		"lemmy": "https://join-lemmy.org/ns#",
@@ -4367,7 +4371,7 @@ const preloadedContexts = {
 //#endregion
 //#region deno.json
 var name = "@fedify/vocab-runtime";
-var version = "2.4.0-dev.1618+58858243";
+var version = "2.4.0-dev.1655+b8f3c3d5";
 //#endregion
 //#region src/link.ts
 const parametersNeedLowerCase = ["rel", "type"];
@@ -4798,8 +4802,10 @@ async function getRemoteDocument(url, response, fetch) {
 * - <https://www.w3.org/ns/activitystreams>
 * - <https://w3id.org/security/v1>
 * - <https://w3id.org/security/data-integrity/v1>
+* - <https://w3id.org/security/data-integrity/v2>
 * - <https://www.w3.org/ns/did/v1>
 * - <https://w3id.org/security/multikey/v1>
+* - <https://w3id.org/fep/ef61>
 * - <https://purl.archive.org/socialweb/webfinger>
 * - <http://schema.org/>
 * @param options Options for the document loader.
@@ -4930,8 +4936,8 @@ function validateCryptoKey(key, type) {
 }
 //#endregion
 //#region src/multibase/util.ts
-const textDecoder = new TextDecoder();
-const decodeText = (bytes) => textDecoder.decode(bytes);
+const textDecoder$1 = new TextDecoder();
+const decodeText = (bytes) => textDecoder$1.decode(bytes);
 const textEncoder = new TextEncoder();
 const encodeText = (text) => textEncoder.encode(text);
 function concat(arrs, length) {
@@ -5520,6 +5526,143 @@ function parseDecimal(value) {
 	return normalized;
 }
 //#endregion
+//#region src/digest.ts
+const SHA2_256_MULTIHASH_CODE = 18;
+const SHA2_256_DIGEST_LENGTH = 32;
+const MAX_DIGEST_MULTIBASE_LENGTH = 1 + (SHA2_256_DIGEST_LENGTH + 2) * 8;
+const textDecoder = new TextDecoder();
+const getArrayBufferByteLength = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength")?.get;
+function isCanonicalVarintPrefix(data, prefix) {
+	const canonical = addMulticodecPrefix(prefix.code, new Uint8Array());
+	if (canonical.length !== prefix.prefixLength) return false;
+	for (let i = 0; i < canonical.length; i++) if (data[i] !== canonical[i]) return false;
+	return true;
+}
+function toWebCryptoBytes(bytes) {
+	if (getArrayBufferByteLength != null) try {
+		getArrayBufferByteLength.call(bytes.buffer);
+		return bytes;
+	} catch {}
+	return new Uint8Array(bytes);
+}
+/**
+* Computes the SHA-256 digest of a byte sequence and encodes it as a
+* base58-btc multibase multihash suitable for FEP-ef61's
+* `digestMultibase` property.
+*
+* @param bytes The bytes to digest.
+* @returns The base58-btc multibase-encoded SHA-256 multihash.
+* @since 2.4.0
+*/
+async function computeDigestMultibase(bytes) {
+	const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", toWebCryptoBytes(bytes)));
+	const multihash = addMulticodecPrefix(SHA2_256_MULTIHASH_CODE, addMulticodecPrefix(digest.length, digest));
+	return textDecoder.decode(encodeMultibase("base58btc", multihash));
+}
+/**
+* Parses and validates a SHA-256 `digestMultibase` value.
+*
+* @param value The multibase-encoded multihash to parse.
+* @returns The digest algorithm and raw digest bytes.
+* @throws {TypeError} If the value is malformed or uses an unsupported hash
+*                      algorithm.
+* @since 2.4.0
+*/
+function parseDigestMultibase(value) {
+	if (value.length > MAX_DIGEST_MULTIBASE_LENGTH) throw new TypeError("Invalid digestMultibase encoding.");
+	let multihash;
+	try {
+		multihash = decodeMultibase(value);
+	} catch (error) {
+		throw new TypeError("Invalid digestMultibase encoding.", { cause: error });
+	}
+	const encoding = encodingFromBaseData(value);
+	if (value !== textDecoder.decode(encodeMultibase(encoding.name, multihash))) throw new TypeError("Invalid digestMultibase encoding.");
+	let algorithmPrefix;
+	try {
+		algorithmPrefix = getMulticodecPrefix(multihash);
+	} catch (error) {
+		throw new TypeError("Invalid digestMultibase multihash.", { cause: error });
+	}
+	if (!isCanonicalVarintPrefix(multihash, algorithmPrefix)) throw new TypeError("Invalid digestMultibase multihash.");
+	if (algorithmPrefix.code !== SHA2_256_MULTIHASH_CODE) throw new TypeError(`Unsupported digest algorithm: 0x${algorithmPrefix.code.toString(16)}`);
+	const lengthAndDigest = multihash.subarray(algorithmPrefix.prefixLength);
+	let lengthPrefix;
+	try {
+		lengthPrefix = getMulticodecPrefix(lengthAndDigest);
+	} catch (error) {
+		throw new TypeError("Invalid digestMultibase multihash.", { cause: error });
+	}
+	if (!isCanonicalVarintPrefix(lengthAndDigest, lengthPrefix)) throw new TypeError("Invalid digestMultibase multihash.");
+	const digest = lengthAndDigest.slice(lengthPrefix.prefixLength);
+	if (lengthPrefix.code !== SHA2_256_DIGEST_LENGTH || digest.length !== SHA2_256_DIGEST_LENGTH) throw new TypeError("Invalid SHA-256 digest length.");
+	return {
+		algorithm: "sha2-256",
+		digest
+	};
+}
+function extractDigestMultibase(value) {
+	const hashlink = typeof value === "string" ? value : value.href;
+	const match = /^hl:([^:\r\n\u2028\u2029]+)$/i.exec(hashlink);
+	if (match == null || match[0].length !== hashlink.length) throw new TypeError("Invalid simple hashlink.");
+	return match[1];
+}
+/**
+* Parses a metadata-free `hl:` hashlink and validates its resource digest.
+*
+* @param value The simple hashlink to parse.
+* @returns The `digestMultibase` value carried by the hashlink.
+* @throws {TypeError} If the hashlink is malformed, contains metadata, or
+*                      carries an invalid or unsupported digest.
+* @since 2.4.0
+*/
+function parseHashlink(value) {
+	const digestMultibase = extractDigestMultibase(value);
+	parseDigestMultibase(digestMultibase);
+	return { digestMultibase };
+}
+/**
+* Creates a metadata-free `hl:` hashlink from a `digestMultibase` value.
+*
+* @param digestMultibase The SHA-256 multibase multihash to embed.
+* @returns The simple hashlink.
+* @throws {TypeError} If the digest is malformed or unsupported.
+* @since 2.4.0
+*/
+function createHashlink(digestMultibase) {
+	parseDigestMultibase(digestMultibase);
+	return `hl:${digestMultibase}`;
+}
+/**
+* Verifies that bytes match a SHA-256 `digestMultibase` value.
+*
+* @param bytes The bytes to verify.
+* @param digestMultibase The expected digest.
+* @returns Whether the bytes match the digest.
+* @throws {TypeError} If the digest is malformed or unsupported.
+* @since 2.4.0
+*/
+async function verifyDigestMultibase(bytes, digestMultibase) {
+	const expected = parseDigestMultibase(digestMultibase).digest;
+	const actual = new Uint8Array(await crypto.subtle.digest("SHA-256", toWebCryptoBytes(bytes)));
+	if (expected.length !== actual.length) return false;
+	let difference = 0;
+	for (let i = 0; i < expected.length; i++) difference |= expected[i] ^ actual[i];
+	return difference === 0;
+}
+/**
+* Verifies that bytes match the resource digest in a simple hashlink.
+*
+* @param bytes The bytes to verify.
+* @param hashlink The simple hashlink containing the expected digest.
+* @returns Whether the bytes match the hashlink digest.
+* @throws {TypeError} If the hashlink or digest is malformed or unsupported.
+* @since 2.4.0
+*/
+async function verifyHashlink(bytes, hashlink) {
+	return await verifyDigestMultibase(bytes, extractDigestMultibase(hashlink));
+}
+//#endregion
 //#region src/langstr.ts
 /**
 * A language-tagged string which corresponds to the `rdf:langString` type.
@@ -5554,7 +5697,9 @@ exports.UrlError = require_url.UrlError;
 exports.arePortableUrisEqual = require_url.arePortableUrisEqual;
 exports.canParseDecimal = canParseDecimal;
 exports.canonicalizePortableUri = require_url.canonicalizePortableUri;
+exports.computeDigestMultibase = computeDigestMultibase;
 exports.createActivityPubRequest = createActivityPubRequest;
+exports.createHashlink = createHashlink;
 exports.decodeMultibase = decodeMultibase;
 exports.encodeMultibase = encodeMultibase;
 exports.encodingFromBaseData = encodingFromBaseData;
@@ -5575,12 +5720,18 @@ exports.importPem = importPem;
 exports.importPkcs1 = importPkcs1;
 exports.importSpki = importSpki;
 exports.isDecimal = isDecimal;
+exports.isGatewayUrl = require_url.isGatewayUrl;
 exports.isValidPublicIPv4Address = require_url.isValidPublicIPv4Address;
 exports.isValidPublicIPv6Address = require_url.isValidPublicIPv6Address;
 exports.logRequest = logRequest;
 exports.parseDecimal = parseDecimal;
 exports.parseDidKeyVerificationMethod = parseDidKeyVerificationMethod;
+exports.parseDigestMultibase = parseDigestMultibase;
+exports.parseGatewayUrl = require_url.parseGatewayUrl;
+exports.parseHashlink = parseHashlink;
 exports.parseIri = require_url.parseIri;
 exports.parseJsonLdId = require_url.parseJsonLdId;
 exports.preloadedContexts = preloadedContexts;
 exports.validatePublicUrl = require_url.validatePublicUrl;
+exports.verifyDigestMultibase = verifyDigestMultibase;
+exports.verifyHashlink = verifyHashlink;

package/dist/mod.d.cts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { a as DocumentLoaderOptions, c as getDocumentLoader, d as FetchError, f as GetUserAgentOptions, h as logRequest, i as DocumentLoaderFactoryOptions, l as getRemoteDocument, m as getUserAgent, n as DocumentLoader, o as GetDocumentLoaderOptions, p as createActivityPubRequest, r as DocumentLoaderFactory, s as RemoteDocument, t as AuthenticatedDocumentLoaderFactory, u as CreateRequestOptions } from "./docloader-DnUMWHaJ.cjs";
+import { a as DocumentLoaderOptions, c as getDocumentLoader, d as FetchError, f as GetUserAgentOptions, h as logRequest, i as DocumentLoaderFactoryOptions, l as getRemoteDocument, m as getUserAgent, n as DocumentLoader, o as GetDocumentLoaderOptions, p as createActivityPubRequest, r as DocumentLoaderFactory, s as RemoteDocument, t as AuthenticatedDocumentLoaderFactory, u as CreateRequestOptions } from "./docloader-D2DTRiyA.cjs";
 import { TracerProvider } from "@opentelemetry/api";
 
 //#region src/contexts.d.ts
@@ -204,6 +204,87 @@ declare function canParseDecimal(value: string): boolean;
 */
 declare function parseDecimal(value: string): Decimal;
 //#endregion
+//#region src/digest.d.ts
+/**
+* A parsed SHA-256 resource digest.
+*
+* @since 2.4.0
+*/
+interface ParsedDigestMultibase {
+  /** The multihash algorithm represented by the digest. */
+  readonly algorithm: "sha2-256";
+  /** The raw 32-byte SHA-256 digest. */
+  readonly digest: Uint8Array;
+}
+/**
+* A parsed simple hashlink.
+*
+* @since 2.4.0
+*/
+interface ParsedHashlink {
+  /** The multibase-encoded multihash carried by the hashlink. */
+  readonly digestMultibase: string;
+}
+/**
+* Computes the SHA-256 digest of a byte sequence and encodes it as a
+* base58-btc multibase multihash suitable for FEP-ef61's
+* `digestMultibase` property.
+*
+* @param bytes The bytes to digest.
+* @returns The base58-btc multibase-encoded SHA-256 multihash.
+* @since 2.4.0
+*/
+declare function computeDigestMultibase(bytes: Uint8Array): Promise<string>;
+/**
+* Parses and validates a SHA-256 `digestMultibase` value.
+*
+* @param value The multibase-encoded multihash to parse.
+* @returns The digest algorithm and raw digest bytes.
+* @throws {TypeError} If the value is malformed or uses an unsupported hash
+*                      algorithm.
+* @since 2.4.0
+*/
+declare function parseDigestMultibase(value: string): ParsedDigestMultibase;
+/**
+* Parses a metadata-free `hl:` hashlink and validates its resource digest.
+*
+* @param value The simple hashlink to parse.
+* @returns The `digestMultibase` value carried by the hashlink.
+* @throws {TypeError} If the hashlink is malformed, contains metadata, or
+*                      carries an invalid or unsupported digest.
+* @since 2.4.0
+*/
+declare function parseHashlink(value: string | URL): ParsedHashlink;
+/**
+* Creates a metadata-free `hl:` hashlink from a `digestMultibase` value.
+*
+* @param digestMultibase The SHA-256 multibase multihash to embed.
+* @returns The simple hashlink.
+* @throws {TypeError} If the digest is malformed or unsupported.
+* @since 2.4.0
+*/
+declare function createHashlink(digestMultibase: string): string;
+/**
+* Verifies that bytes match a SHA-256 `digestMultibase` value.
+*
+* @param bytes The bytes to verify.
+* @param digestMultibase The expected digest.
+* @returns Whether the bytes match the digest.
+* @throws {TypeError} If the digest is malformed or unsupported.
+* @since 2.4.0
+*/
+declare function verifyDigestMultibase(bytes: Uint8Array, digestMultibase: string): Promise<boolean>;
+/**
+* Verifies that bytes match the resource digest in a simple hashlink.
+*
+* @param bytes The bytes to verify.
+* @param hashlink The simple hashlink containing the expected digest.
+* @returns Whether the bytes match the hashlink digest.
+* @throws {TypeError} If the hashlink or digest is malformed or unsupported.
+* @since 2.4.0
+*/
+declare function verifyHashlink(bytes: Uint8Array, hashlink: string | URL): Promise<boolean>;
+//#endregion
 //#region src/langstr.d.ts
 /**
 * A language-tagged string which corresponds to the `rdf:langString` type.
@@ -375,6 +456,14 @@ declare function haveSameFe34Origin(left: string | URL, right: string | URL): bo
 */
 declare function haveSameIriOrigin(left: URL, right: URL): boolean;
 /**
+* Checks whether the URL is an FEP-ef61 gateway base URI.
+*/
+declare function isGatewayUrl(url: URL): boolean;
+/**
+* Parses and validates an FEP-ef61 gateway base URI.
+*/
+declare function parseGatewayUrl(url: string): URL;
+/**
 * Validates a URL to prevent SSRF attacks.
 */
 declare function validatePublicUrl(url: string): Promise<void>;
@@ -382,4 +471,4 @@ declare function isValidPublicIPv4Address(address: string): boolean;
 declare function isValidPublicIPv6Address(address: string): boolean;
 declare function expandIPv6Address(address: string): string;
 //#endregion
-export { type AuthenticatedDocumentLoaderFactory, type CreateRequestOptions, type Decimal, type DidKeyVerificationMethod, type DocumentLoader, type DocumentLoaderFactory, type DocumentLoaderFactoryOptions, type DocumentLoaderOptions, FetchError, type GetDocumentLoaderOptions, type GetUserAgentOptions, type Json, LanguageString, type PropertyPreprocessor, type PropertyPreprocessorContext, type RemoteDocument, UrlError, arePortableUrisEqual, canParseDecimal, canonicalizePortableUri, createActivityPubRequest, decodeMultibase, encodeMultibase, encodingFromBaseData, expandIPv6Address, exportDidKey, exportMultibaseKey, exportSpki, formatIri, getDocumentLoader, getFe34Origin, getRemoteDocument, getUserAgent, haveSameFe34Origin, haveSameIriOrigin, importDidKey, importMultibaseKey, importPem, importPkcs1, importSpki, isDecimal, isValidPublicIPv4Address, isValidPublicIPv6Address, logRequest, parseDecimal, parseDidKeyVerificationMethod, parseIri, parseJsonLdId, preloadedContexts, validatePublicUrl };
+export { type AuthenticatedDocumentLoaderFactory, type CreateRequestOptions, type Decimal, type DidKeyVerificationMethod, type DocumentLoader, type DocumentLoaderFactory, type DocumentLoaderFactoryOptions, type DocumentLoaderOptions, FetchError, type GetDocumentLoaderOptions, type GetUserAgentOptions, type Json, LanguageString, type ParsedDigestMultibase, type ParsedHashlink, type PropertyPreprocessor, type PropertyPreprocessorContext, type RemoteDocument, UrlError, arePortableUrisEqual, canParseDecimal, canonicalizePortableUri, computeDigestMultibase, createActivityPubRequest, createHashlink, decodeMultibase, encodeMultibase, encodingFromBaseData, expandIPv6Address, exportDidKey, exportMultibaseKey, exportSpki, formatIri, getDocumentLoader, getFe34Origin, getRemoteDocument, getUserAgent, haveSameFe34Origin, haveSameIriOrigin, importDidKey, importMultibaseKey, importPem, importPkcs1, importSpki, isDecimal, isGatewayUrl, isValidPublicIPv4Address, isValidPublicIPv6Address, logRequest, parseDecimal, parseDidKeyVerificationMethod, parseDigestMultibase, parseGatewayUrl, parseHashlink, parseIri, parseJsonLdId, preloadedContexts, validatePublicUrl, verifyDigestMultibase, verifyHashlink };

package/dist/mod.d.ts

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { a as DocumentLoaderOptions, c as getDocumentLoader, d as FetchError, f as GetUserAgentOptions, h as logRequest, i as DocumentLoaderFactoryOptions, l as getRemoteDocument, m as getUserAgent, n as DocumentLoader, o as GetDocumentLoaderOptions, p as createActivityPubRequest, r as DocumentLoaderFactory, s as RemoteDocument, t as AuthenticatedDocumentLoaderFactory, u as CreateRequestOptions } from "./docloader-xRGn1azD.js";
+import { a as DocumentLoaderOptions, c as getDocumentLoader, d as FetchError, f as GetUserAgentOptions, h as logRequest, i as DocumentLoaderFactoryOptions, l as getRemoteDocument, m as getUserAgent, n as DocumentLoader, o as GetDocumentLoaderOptions, p as createActivityPubRequest, r as DocumentLoaderFactory, s as RemoteDocument, t as AuthenticatedDocumentLoaderFactory, u as CreateRequestOptions } from "./docloader-C_dir7Xb.js";
 import { TracerProvider } from "@opentelemetry/api";
 
 //#region src/contexts.d.ts
@@ -204,6 +204,87 @@ declare function canParseDecimal(value: string): boolean;
 */
 declare function parseDecimal(value: string): Decimal;
 //#endregion
+//#region src/digest.d.ts
+/**
+* A parsed SHA-256 resource digest.
+*
+* @since 2.4.0
+*/
+interface ParsedDigestMultibase {
+  /** The multihash algorithm represented by the digest. */
+  readonly algorithm: "sha2-256";
+  /** The raw 32-byte SHA-256 digest. */
+  readonly digest: Uint8Array;
+}
+/**
+* A parsed simple hashlink.
+*
+* @since 2.4.0
+*/
+interface ParsedHashlink {
+  /** The multibase-encoded multihash carried by the hashlink. */
+  readonly digestMultibase: string;
+}
+/**
+* Computes the SHA-256 digest of a byte sequence and encodes it as a
+* base58-btc multibase multihash suitable for FEP-ef61's
+* `digestMultibase` property.
+*
+* @param bytes The bytes to digest.
+* @returns The base58-btc multibase-encoded SHA-256 multihash.
+* @since 2.4.0
+*/
+declare function computeDigestMultibase(bytes: Uint8Array): Promise<string>;
+/**
+* Parses and validates a SHA-256 `digestMultibase` value.
+*
+* @param value The multibase-encoded multihash to parse.
+* @returns The digest algorithm and raw digest bytes.
+* @throws {TypeError} If the value is malformed or uses an unsupported hash
+*                      algorithm.
+* @since 2.4.0
+*/
+declare function parseDigestMultibase(value: string): ParsedDigestMultibase;
+/**
+* Parses a metadata-free `hl:` hashlink and validates its resource digest.
+*
+* @param value The simple hashlink to parse.
+* @returns The `digestMultibase` value carried by the hashlink.
+* @throws {TypeError} If the hashlink is malformed, contains metadata, or
+*                      carries an invalid or unsupported digest.
+* @since 2.4.0
+*/
+declare function parseHashlink(value: string | URL): ParsedHashlink;
+/**
+* Creates a metadata-free `hl:` hashlink from a `digestMultibase` value.
+*
+* @param digestMultibase The SHA-256 multibase multihash to embed.
+* @returns The simple hashlink.
+* @throws {TypeError} If the digest is malformed or unsupported.
+* @since 2.4.0
+*/
+declare function createHashlink(digestMultibase: string): string;
+/**
+* Verifies that bytes match a SHA-256 `digestMultibase` value.
+*
+* @param bytes The bytes to verify.
+* @param digestMultibase The expected digest.
+* @returns Whether the bytes match the digest.
+* @throws {TypeError} If the digest is malformed or unsupported.
+* @since 2.4.0
+*/
+declare function verifyDigestMultibase(bytes: Uint8Array, digestMultibase: string): Promise<boolean>;
+/**
+* Verifies that bytes match the resource digest in a simple hashlink.
+*
+* @param bytes The bytes to verify.
+* @param hashlink The simple hashlink containing the expected digest.
+* @returns Whether the bytes match the hashlink digest.
+* @throws {TypeError} If the hashlink or digest is malformed or unsupported.
+* @since 2.4.0
+*/
+declare function verifyHashlink(bytes: Uint8Array, hashlink: string | URL): Promise<boolean>;
+//#endregion
 //#region src/langstr.d.ts
 /**
 * A language-tagged string which corresponds to the `rdf:langString` type.
@@ -375,6 +456,14 @@ declare function haveSameFe34Origin(left: string | URL, right: string | URL): bo
 */
 declare function haveSameIriOrigin(left: URL, right: URL): boolean;
 /**
+* Checks whether the URL is an FEP-ef61 gateway base URI.
+*/
+declare function isGatewayUrl(url: URL): boolean;
+/**
+* Parses and validates an FEP-ef61 gateway base URI.
+*/
+declare function parseGatewayUrl(url: string): URL;
+/**
 * Validates a URL to prevent SSRF attacks.
 */
 declare function validatePublicUrl(url: string): Promise<void>;
@@ -382,4 +471,4 @@ declare function isValidPublicIPv4Address(address: string): boolean;
 declare function isValidPublicIPv6Address(address: string): boolean;
 declare function expandIPv6Address(address: string): string;
 //#endregion
-export { type AuthenticatedDocumentLoaderFactory, type CreateRequestOptions, type Decimal, type DidKeyVerificationMethod, type DocumentLoader, type DocumentLoaderFactory, type DocumentLoaderFactoryOptions, type DocumentLoaderOptions, FetchError, type GetDocumentLoaderOptions, type GetUserAgentOptions, type Json, LanguageString, type PropertyPreprocessor, type PropertyPreprocessorContext, type RemoteDocument, UrlError, arePortableUrisEqual, canParseDecimal, canonicalizePortableUri, createActivityPubRequest, decodeMultibase, encodeMultibase, encodingFromBaseData, expandIPv6Address, exportDidKey, exportMultibaseKey, exportSpki, formatIri, getDocumentLoader, getFe34Origin, getRemoteDocument, getUserAgent, haveSameFe34Origin, haveSameIriOrigin, importDidKey, importMultibaseKey, importPem, importPkcs1, importSpki, isDecimal, isValidPublicIPv4Address, isValidPublicIPv6Address, logRequest, parseDecimal, parseDidKeyVerificationMethod, parseIri, parseJsonLdId, preloadedContexts, validatePublicUrl };
+export { type AuthenticatedDocumentLoaderFactory, type CreateRequestOptions, type Decimal, type DidKeyVerificationMethod, type DocumentLoader, type DocumentLoaderFactory, type DocumentLoaderFactoryOptions, type DocumentLoaderOptions, FetchError, type GetDocumentLoaderOptions, type GetUserAgentOptions, type Json, LanguageString, type ParsedDigestMultibase, type ParsedHashlink, type PropertyPreprocessor, type PropertyPreprocessorContext, type RemoteDocument, UrlError, arePortableUrisEqual, canParseDecimal, canonicalizePortableUri, computeDigestMultibase, createActivityPubRequest, createHashlink, decodeMultibase, encodeMultibase, encodingFromBaseData, expandIPv6Address, exportDidKey, exportMultibaseKey, exportSpki, formatIri, getDocumentLoader, getFe34Origin, getRemoteDocument, getUserAgent, haveSameFe34Origin, haveSameIriOrigin, importDidKey, importMultibaseKey, importPem, importPkcs1, importSpki, isDecimal, isGatewayUrl, isValidPublicIPv4Address, isValidPublicIPv6Address, logRequest, parseDecimal, parseDidKeyVerificationMethod, parseDigestMultibase, parseGatewayUrl, parseHashlink, parseIri, parseJsonLdId, preloadedContexts, validatePublicUrl, verifyDigestMultibase, verifyHashlink };