@fedify/vocab-runtime 2.4.0-dev.1618 → 2.4.0-dev.1655

package/dist/tests/digest.test.d.mts

@@ -0,0 +1 @@
+export { };

package/dist/tests/digest.test.mjs

@@ -0,0 +1,103 @@
+import { t as addMulticodecPrefix } from "./multicodec-CyFp54fI.mjs";
+import { n as encodeMultibase } from "./multibase-Cluwl8OM.mjs";
+import { a as verifyDigestMultibase, i as parseHashlink, n as createHashlink, o as verifyHashlink, r as parseDigestMultibase, t as computeDigestMultibase } from "./digest-BJlumPNJ.mjs";
+import { test } from "node:test";
+import { deepStrictEqual, equal, rejects, throws } from "node:assert/strict";
+//#region src/digest.test.ts
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+const bytes = encoder.encode("Hello World!");
+const digestMultibase = "zQmWvQxTqbG2Z9HPJgG57jjwR154cKhbtJenbyYTWkjgF3e";
+const hashlink = `hl:${digestMultibase}`;
+test("computeDigestMultibase() computes a SHA-256 multihash", async () => {
+	equal(await computeDigestMultibase(bytes), digestMultibase);
+	const parsed = parseDigestMultibase(digestMultibase);
+	equal(parsed.algorithm, "sha2-256");
+	deepStrictEqual(parsed.digest, new Uint8Array(await crypto.subtle.digest("SHA-256", bytes)));
+});
+test("digest helpers accept SharedArrayBuffer-backed bytes", async () => {
+	const sharedBytes = new Uint8Array(new SharedArrayBuffer(bytes.length));
+	sharedBytes.set(bytes);
+	Object.defineProperty(sharedBytes, "slice", { value: () => {
+		throw new Error("Shared input must not be copied with slice().");
+	} });
+	equal(await computeDigestMultibase(sharedBytes), digestMultibase);
+	equal(await verifyDigestMultibase(sharedBytes, digestMultibase), true);
+});
+test("digest helpers ignore spoofed shared buffer tags", async () => {
+	const taggedBytes = bytes.slice();
+	Object.defineProperty(taggedBytes.buffer, Symbol.toStringTag, { value: "SharedArrayBuffer" });
+	Object.defineProperty(taggedBytes, "slice", { value: () => {
+		throw new Error("ArrayBuffer input must not be copied.");
+	} });
+	equal(await computeDigestMultibase(taggedBytes), digestMultibase);
+	equal(await verifyDigestMultibase(taggedBytes, digestMultibase), true);
+});
+test("createHashlink() and parseHashlink() round-trip simple hashlinks", () => {
+	equal(createHashlink(digestMultibase), hashlink);
+	deepStrictEqual(parseHashlink(hashlink), { digestMultibase });
+	deepStrictEqual(parseHashlink(new URL(hashlink)), { digestMultibase });
+	const base64DigestMultibase = decoder.decode(encodeMultibase("base64", addMulticodecPrefix(18, addMulticodecPrefix(32, new Uint8Array(32).fill(255)))));
+	const base64Hashlink = createHashlink(base64DigestMultibase);
+	equal(base64Hashlink, "hl:mEiD//////////////////////////////////////////w");
+	deepStrictEqual(parseHashlink(base64Hashlink), { digestMultibase: base64DigestMultibase });
+	deepStrictEqual(parseHashlink(new URL(base64Hashlink)), { digestMultibase: base64DigestMultibase });
+});
+test("digest and hashlink verification accepts matching bytes", async () => {
+	equal(await verifyDigestMultibase(bytes, digestMultibase), true);
+	equal(await verifyHashlink(bytes, hashlink), true);
+	equal(await verifyHashlink(bytes, new URL(hashlink)), true);
+});
+test("digest and hashlink verification rejects non-matching bytes", async () => {
+	const different = encoder.encode("Hello World?");
+	equal(await verifyDigestMultibase(different, digestMultibase), false);
+	equal(await verifyHashlink(different, hashlink), false);
+});
+test("parseDigestMultibase() rejects unsupported algorithms", () => {
+	const sha1Multihash = addMulticodecPrefix(17, addMulticodecPrefix(20, new Uint8Array(20)));
+	const value = decoder.decode(encodeMultibase("base58btc", sha1Multihash));
+	throws(() => parseDigestMultibase(value), /* @__PURE__ */ new TypeError("Unsupported digest algorithm: 0x11"));
+});
+test("parseDigestMultibase() rejects malformed values", async () => {
+	throws(() => parseDigestMultibase("not-multibase"), /* @__PURE__ */ new TypeError("Invalid digestMultibase encoding."));
+	const missingLength = decoder.decode(encodeMultibase("base58btc", Uint8Array.of(18)));
+	throws(() => parseDigestMultibase(missingLength), /* @__PURE__ */ new TypeError("Invalid digestMultibase multihash."));
+	const multihash = addMulticodecPrefix(18, addMulticodecPrefix(32, new Uint8Array(32)));
+	const base2 = decoder.decode(encodeMultibase("base2", multihash));
+	equal(base2.length, 273);
+	deepStrictEqual(parseDigestMultibase(base2).digest, new Uint8Array(32));
+	throws(() => parseDigestMultibase(`${base2}0`), /* @__PURE__ */ new TypeError("Invalid digestMultibase encoding."));
+	const padded = decoder.decode(encodeMultibase("base64pad", multihash));
+	equal(padded.endsWith("=="), true);
+	deepStrictEqual(parseDigestMultibase(padded).digest, new Uint8Array(32));
+	throws(() => parseDigestMultibase(padded.slice(0, -1)), /* @__PURE__ */ new TypeError("Invalid digestMultibase encoding."));
+	throws(() => createHashlink(`${padded}=`), /* @__PURE__ */ new TypeError("Invalid digestMultibase encoding."));
+	const overlongAlgorithm = decoder.decode(encodeMultibase("base58btc", Uint8Array.of(146, 0, 32, ...new Uint8Array(32))));
+	throws(() => parseDigestMultibase(overlongAlgorithm), /* @__PURE__ */ new TypeError("Invalid digestMultibase multihash."));
+	const overlongLength = decoder.decode(encodeMultibase("base58btc", Uint8Array.of(18, 160, 0, ...new Uint8Array(32))));
+	throws(() => parseDigestMultibase(overlongLength), /* @__PURE__ */ new TypeError("Invalid digestMultibase multihash."));
+	const shortDigest = decoder.decode(encodeMultibase("base58btc", addMulticodecPrefix(18, addMulticodecPrefix(31, new Uint8Array(31)))));
+	throws(() => parseDigestMultibase(shortDigest), /* @__PURE__ */ new TypeError("Invalid SHA-256 digest length."));
+	await rejects(() => verifyDigestMultibase(bytes, shortDigest), /* @__PURE__ */ new TypeError("Invalid SHA-256 digest length."));
+});
+test("simple hashlink helpers reject metadata and malformed forms", async () => {
+	for (const terminator of [
+		"\n",
+		"\r",
+		"\r\n",
+		"\u2028",
+		"\u2029"
+	]) {
+		const malformedHashlink = `${hashlink}${terminator}`;
+		throws(() => parseHashlink(malformedHashlink), /* @__PURE__ */ new TypeError("Invalid simple hashlink."));
+		await rejects(() => verifyHashlink(bytes, malformedHashlink), /* @__PURE__ */ new TypeError("Invalid simple hashlink."));
+	}
+	throws(() => parseHashlink(`${hashlink}:zmetadata`), /* @__PURE__ */ new TypeError("Invalid simple hashlink."));
+	await rejects(() => verifyHashlink(bytes, `${hashlink}:zmetadata`), /* @__PURE__ */ new TypeError("Invalid simple hashlink."));
+	throws(() => parseHashlink(`https://example.com/file?hl=${digestMultibase}`), /* @__PURE__ */ new TypeError("Invalid simple hashlink."));
+	throws(() => parseHashlink("hl:not-multibase"), /* @__PURE__ */ new TypeError("Invalid digestMultibase encoding."));
+	await rejects(() => verifyHashlink(bytes, "hl:not-multibase"), /* @__PURE__ */ new TypeError("Invalid digestMultibase encoding."));
+	throws(() => createHashlink("not-multibase"), /* @__PURE__ */ new TypeError("Invalid digestMultibase encoding."));
+});
+//#endregion
+export {};

package/dist/tests/{docloader-QmR6VOqT.cjs → docloader-DVVWmXLI.cjs}

@@ -1,7 +1,7 @@
 require("./chunk-C2EiDwsr.cjs");
-const require_request = require("./request-DxSceLvB.cjs");
+const require_request = require("./request-DvEyU5Zf.cjs");
 const require_link = require("./link-FguCydMA.cjs");
-const require_url = require("./url-BvjYQdxL.cjs");
+const require_url = require("./url-CsOV_B_P.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _opentelemetry_api = require("@opentelemetry/api");
 //#endregion
@@ -460,10 +460,6 @@ const preloadedContexts = {
 		"id": "@id",
 		"type": "@type",
 		"@protected": true,
-		"digestMultibase": {
-			"@id": "https://w3id.org/security#digestMultibase",
-			"@type": "https://w3id.org/security#multibase"
-		},
 		"proof": {
 			"@id": "https://w3id.org/security#proof",
 			"@type": "@id",
@@ -4300,6 +4296,14 @@ const preloadedContexts = {
 			"@type": "@id"
 		}
 	} },
+	"https://w3id.org/fep/ef61": { "@context": {
+		"gateways": {
+			"@id": "https://w3id.org/fep/ef61/gateways",
+			"@type": "@id",
+			"@container": "@list"
+		},
+		"digestMultibase": "https://www.w3.org/ns/credentials/v2#digestMultibase"
+	} },
 	"https://join-lemmy.org/context.json": { "@context": ["https://w3id.org/security/v1", {
 		"as": "https://www.w3.org/ns/activitystreams#",
 		"lemmy": "https://join-lemmy.org/ns#",
@@ -4534,8 +4538,10 @@ async function getRemoteDocument(url, response, fetch) {
 * - <https://www.w3.org/ns/activitystreams>
 * - <https://w3id.org/security/v1>
 * - <https://w3id.org/security/data-integrity/v1>
+* - <https://w3id.org/security/data-integrity/v2>
 * - <https://www.w3.org/ns/did/v1>
 * - <https://w3id.org/security/multikey/v1>
+* - <https://w3id.org/fep/ef61>
 * - <https://purl.archive.org/socialweb/webfinger>
 * - <http://schema.org/>
 * @param options Options for the document loader.

package/dist/tests/{docloader-CBVde8Va.mjs → docloader-HbEvzi-t.mjs}

@@ -1,6 +1,6 @@
-import { a as name, i as logRequest, n as createActivityPubRequest, o as version, t as FetchError } from "./request-BHx0fCb5.mjs";
+import { a as name, i as logRequest, n as createActivityPubRequest, o as version, t as FetchError } from "./request-B6s_F7bi.mjs";
 import { t as HttpHeaderLink } from "./link-NUUWCdnK.mjs";
-import { p as validatePublicUrl, t as UrlError } from "./url-a2D8NAgh.mjs";
+import { h as validatePublicUrl, t as UrlError } from "./url-Du7RQQgP.mjs";
 import { getLogger } from "@logtape/logtape";
 import { SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
 //#endregion
@@ -459,10 +459,6 @@ const preloadedContexts = {
 		"id": "@id",
 		"type": "@type",
 		"@protected": true,
-		"digestMultibase": {
-			"@id": "https://w3id.org/security#digestMultibase",
-			"@type": "https://w3id.org/security#multibase"
-		},
 		"proof": {
 			"@id": "https://w3id.org/security#proof",
 			"@type": "@id",
@@ -4299,6 +4295,14 @@ const preloadedContexts = {
 			"@type": "@id"
 		}
 	} },
+	"https://w3id.org/fep/ef61": { "@context": {
+		"gateways": {
+			"@id": "https://w3id.org/fep/ef61/gateways",
+			"@type": "@id",
+			"@container": "@list"
+		},
+		"digestMultibase": "https://www.w3.org/ns/credentials/v2#digestMultibase"
+	} },
 	"https://join-lemmy.org/context.json": { "@context": ["https://w3id.org/security/v1", {
 		"as": "https://www.w3.org/ns/activitystreams#",
 		"lemmy": "https://join-lemmy.org/ns#",
@@ -4533,8 +4537,10 @@ async function getRemoteDocument(url, response, fetch) {
 * - <https://www.w3.org/ns/activitystreams>
 * - <https://w3id.org/security/v1>
 * - <https://w3id.org/security/data-integrity/v1>
+* - <https://w3id.org/security/data-integrity/v2>
 * - <https://www.w3.org/ns/did/v1>
 * - <https://w3id.org/security/multikey/v1>
+* - <https://w3id.org/fep/ef61>
 * - <https://purl.archive.org/socialweb/webfinger>
 * - <http://schema.org/>
 * @param options Options for the document loader.

package/dist/tests/docloader.test.cjs

@@ -1,7 +1,7 @@
 const require_chunk = require("./chunk-C2EiDwsr.cjs");
-const require_docloader = require("./docloader-QmR6VOqT.cjs");
-const require_request = require("./request-DxSceLvB.cjs");
-const require_url = require("./url-BvjYQdxL.cjs");
+const require_docloader = require("./docloader-DVVWmXLI.cjs");
+const require_request = require("./request-DvEyU5Zf.cjs");
+const require_url = require("./url-CsOV_B_P.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 //#region ../../node_modules/.pnpm/glob-to-regexp@0.4.1/node_modules/glob-to-regexp/index.js

package/dist/tests/docloader.test.mjs

@@ -1,6 +1,6 @@
-import { n as getRemoteDocument, r as preloadedContexts, t as getDocumentLoader } from "./docloader-CBVde8Va.mjs";
-import { t as FetchError } from "./request-BHx0fCb5.mjs";
-import { t as UrlError } from "./url-a2D8NAgh.mjs";
+import { n as getRemoteDocument, r as preloadedContexts, t as getDocumentLoader } from "./docloader-HbEvzi-t.mjs";
+import { t as FetchError } from "./request-B6s_F7bi.mjs";
+import { t as UrlError } from "./url-Du7RQQgP.mjs";
 import { deepStrictEqual, ok, rejects } from "node:assert";
 import { test } from "node:test";
 //#region \0rolldown/runtime.js

package/dist/tests/jsonld-cache.test.cjs

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-C2EiDwsr.cjs");
-const require_url = require("./url-BvjYQdxL.cjs");
+const require_url = require("./url-CsOV_B_P.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 let jsonld_dist_jsonld_esm_js = require("jsonld/dist/jsonld.esm.js");

package/dist/tests/jsonld-cache.test.mjs

@@ -1,4 +1,4 @@
-import { a as formatIri, c as haveSameIriOrigin, d as parseIri, s as haveSameFe34Origin } from "./url-a2D8NAgh.mjs";
+import { a as formatIri, c as haveSameIriOrigin, p as parseIri, s as haveSameFe34Origin } from "./url-Du7RQQgP.mjs";
 import { deepStrictEqual, ok, strictEqual } from "node:assert";
 import { test } from "node:test";
 import jsonld from "jsonld/dist/jsonld.esm.js";

package/dist/tests/{key-_wXwomh_.cjs → key-BcOWDLMm.cjs}

@@ -1,6 +1,6 @@
 require("./chunk-C2EiDwsr.cjs");
 const require_multicodec = require("./multicodec-CxGVGa91.cjs");
-const require_multibase = require("./multibase-Bz_UUDtL.cjs");
+const require_multibase = require("./multibase-DcDQDNnI.cjs");
 let asn1js = require("asn1js");
 let byte_encodings_base64 = require("byte-encodings/base64");
 let byte_encodings_base64url = require("byte-encodings/base64url");

package/dist/tests/{key-CDGDH_vC.mjs → key-Drbw_2tw.mjs}

@@ -1,5 +1,5 @@
 import { n as getMulticodecPrefix, r as removeMulticodecPrefix, t as addMulticodecPrefix } from "./multicodec-CyFp54fI.mjs";
-import { n as encodeMultibase, t as decodeMultibase } from "./multibase-B4bvakyA.mjs";
+import { n as encodeMultibase, t as decodeMultibase } from "./multibase-Cluwl8OM.mjs";
 import { Integer, Sequence } from "asn1js";
 import { decodeBase64, encodeBase64 } from "byte-encodings/base64";
 import { decodeBase64Url } from "byte-encodings/base64url";

package/dist/tests/key.test.cjs

@@ -1,7 +1,7 @@
 require("./chunk-C2EiDwsr.cjs");
 const require_multicodec = require("./multicodec-CxGVGa91.cjs");
-const require_key = require("./key-_wXwomh_.cjs");
-const require_multibase = require("./multibase-Bz_UUDtL.cjs");
+const require_key = require("./key-BcOWDLMm.cjs");
+const require_multibase = require("./multibase-DcDQDNnI.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 //#region src/key.test.ts

package/dist/tests/key.test.mjs

@@ -1,6 +1,6 @@
 import { t as addMulticodecPrefix } from "./multicodec-CyFp54fI.mjs";
-import { a as importMultibaseKey, c as importSpki, d as importJwk, i as importDidKey, l as parseDidKeyVerificationMethod, n as exportMultibaseKey, o as importPem, r as exportSpki, s as importPkcs1, t as exportDidKey, u as exportJwk } from "./key-CDGDH_vC.mjs";
-import { n as encodeMultibase } from "./multibase-B4bvakyA.mjs";
+import { a as importMultibaseKey, c as importSpki, d as importJwk, i as importDidKey, l as parseDidKeyVerificationMethod, n as exportMultibaseKey, o as importPem, r as exportSpki, s as importPkcs1, t as exportDidKey, u as exportJwk } from "./key-Drbw_2tw.mjs";
+import { n as encodeMultibase } from "./multibase-Cluwl8OM.mjs";
 import { deepStrictEqual, rejects } from "node:assert";
 import { test } from "node:test";
 //#region src/key.test.ts

package/dist/tests/langstr.test.cjs

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-C2EiDwsr.cjs");
-const require_langstr = require("./langstr-CbAxaeEZ.cjs");
+const require_langstr = require("./langstr-BOQHfJDr.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 let node_util = require("node:util");

package/dist/tests/langstr.test.mjs

@@ -1,4 +1,4 @@
-import { t as LanguageString } from "./langstr-Di5AvKpB.mjs";
+import { t as LanguageString } from "./langstr-DDLc4833.mjs";
 import { deepStrictEqual } from "node:assert";
 import { test } from "node:test";
 import util from "node:util";

package/dist/tests/multibase/multibase.test.cjs

@@ -1,5 +1,5 @@
 require("../chunk-C2EiDwsr.cjs");
-const require_multibase = require("../multibase-Bz_UUDtL.cjs");
+const require_multibase = require("../multibase-DcDQDNnI.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 //#region src/multibase/multibase.test.ts

package/dist/tests/multibase/multibase.test.mjs

@@ -1,4 +1,4 @@
-import { a as decodeText, i as names, n as encodeMultibase, o as encodeText, r as codes, t as decodeMultibase } from "../multibase-B4bvakyA.mjs";
+import { a as names, i as codes, n as encodeMultibase, o as decodeText, s as encodeText, t as decodeMultibase } from "../multibase-Cluwl8OM.mjs";
 import { deepStrictEqual } from "node:assert";
 import { test } from "node:test";
 //#region src/multibase/multibase.test.ts

package/dist/tests/{multibase-B4bvakyA.mjs → multibase-Cluwl8OM.mjs}

@@ -303,5 +303,16 @@ function encoding(nameOrCode) {
 	else if (Object.prototype.hasOwnProperty.call(codes, nameOrCode)) return codes[nameOrCode];
 	else throw new Error(`Unsupported encoding: ${nameOrCode}`);
 }
+/**
+* Get encoding multibase from data
+*
+* @param {string|Uint8Array} data
+* @returns {Base}
+* @throws {Error} Will throw if the encoding is not supported
+*/
+function encodingFromBaseData(data) {
+	if (data instanceof Uint8Array) data = decodeText(data);
+	return encoding(data[0]);
+}
 //#endregion
-export { decodeText as a, names as i, encodeMultibase as n, encodeText as o, codes as r, decodeMultibase as t };
+export { names as a, codes as i, encodeMultibase as n, decodeText as o, encodingFromBaseData as r, encodeText as s, decodeMultibase as t };

package/dist/tests/{multibase-Bz_UUDtL.cjs → multibase-DcDQDNnI.cjs}

@@ -305,6 +305,17 @@ function encoding(nameOrCode) {
 	else if (Object.prototype.hasOwnProperty.call(codes, nameOrCode)) return codes[nameOrCode];
 	else throw new Error(`Unsupported encoding: ${nameOrCode}`);
 }
+/**
+* Get encoding multibase from data
+*
+* @param {string|Uint8Array} data
+* @returns {Base}
+* @throws {Error} Will throw if the encoding is not supported
+*/
+function encodingFromBaseData(data) {
+	if (data instanceof Uint8Array) data = decodeText(data);
+	return encoding(data[0]);
+}
 //#endregion
 Object.defineProperty(exports, "codes", {
 	enumerable: true,
@@ -336,6 +347,12 @@ Object.defineProperty(exports, "encodeText", {
 		return encodeText;
 	}
 });
+Object.defineProperty(exports, "encodingFromBaseData", {
+	enumerable: true,
+	get: function() {
+		return encodingFromBaseData;
+	}
+});
 Object.defineProperty(exports, "names", {
 	enumerable: true,
 	get: function() {

package/dist/tests/{request-BHx0fCb5.mjs → request-B6s_F7bi.mjs}

@@ -1,7 +1,7 @@
 import process from "node:process";
 //#region deno.json
 var name = "@fedify/vocab-runtime";
-var version = "2.4.0-dev.1618+58858243";
+var version = "2.4.0-dev.1655+b8f3c3d5";
 //#endregion
 //#region src/request.ts
 /**

package/dist/tests/{request-DxSceLvB.cjs → request-DvEyU5Zf.cjs}

@@ -3,7 +3,7 @@ let node_process = require("node:process");
 node_process = require_chunk.__toESM(node_process, 1);
 //#region deno.json
 var name = "@fedify/vocab-runtime";
-var version = "2.4.0-dev.1618+58858243";
+var version = "2.4.0-dev.1655+b8f3c3d5";
 //#endregion
 //#region src/request.ts
 /**

package/dist/tests/request.test.cjs

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-C2EiDwsr.cjs");
-const require_request = require("./request-DxSceLvB.cjs");
+const require_request = require("./request-DvEyU5Zf.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 let node_process = require("node:process");

package/dist/tests/request.test.mjs

@@ -1,4 +1,4 @@
-import { o as version, r as getUserAgent } from "./request-BHx0fCb5.mjs";
+import { o as version, r as getUserAgent } from "./request-B6s_F7bi.mjs";
 import { deepStrictEqual } from "node:assert";
 import { test } from "node:test";
 import process from "node:process";

package/dist/tests/{url-BvjYQdxL.cjs → url-CsOV_B_P.cjs}

@@ -211,6 +211,20 @@ function parseAtUri(uri) {
 	return new URL("at://" + encodeURIComponent(authority) + path);
 }
 /**
+* Checks whether the URL is an FEP-ef61 gateway base URI.
+*/
+function isGatewayUrl(url) {
+	return (url.protocol === "http:" || url.protocol === "https:") && url.username === "" && url.password === "" && url.pathname === "/" && url.search === "" && url.hash === "";
+}
+/**
+* Parses and validates an FEP-ef61 gateway base URI.
+*/
+function parseGatewayUrl(url) {
+	const parsed = parseIri(url);
+	if (!isGatewayUrl(parsed)) throw new TypeError("FEP-ef61 gateways must be HTTP(S) base URIs with no credentials, path, query, or fragment.");
+	return parsed;
+}
+/**
 * Validates a URL to prevent SSRF attacks.
 */
 async function validatePublicUrl(url) {
@@ -424,6 +438,12 @@ Object.defineProperty(exports, "haveSameIriOrigin", {
 		return haveSameIriOrigin;
 	}
 });
+Object.defineProperty(exports, "isGatewayUrl", {
+	enumerable: true,
+	get: function() {
+		return isGatewayUrl;
+	}
+});
 Object.defineProperty(exports, "isValidPublicIPv4Address", {
 	enumerable: true,
 	get: function() {
@@ -436,6 +456,12 @@ Object.defineProperty(exports, "isValidPublicIPv6Address", {
 		return isValidPublicIPv6Address;
 	}
 });
+Object.defineProperty(exports, "parseGatewayUrl", {
+	enumerable: true,
+	get: function() {
+		return parseGatewayUrl;
+	}
+});
 Object.defineProperty(exports, "parseIri", {
 	enumerable: true,
 	get: function() {

package/dist/tests/{url-a2D8NAgh.mjs → url-Du7RQQgP.mjs}

@@ -210,6 +210,20 @@ function parseAtUri(uri) {
 	return new URL("at://" + encodeURIComponent(authority) + path);
 }
 /**
+* Checks whether the URL is an FEP-ef61 gateway base URI.
+*/
+function isGatewayUrl(url) {
+	return (url.protocol === "http:" || url.protocol === "https:") && url.username === "" && url.password === "" && url.pathname === "/" && url.search === "" && url.hash === "";
+}
+/**
+* Parses and validates an FEP-ef61 gateway base URI.
+*/
+function parseGatewayUrl(url) {
+	const parsed = parseIri(url);
+	if (!isGatewayUrl(parsed)) throw new TypeError("FEP-ef61 gateways must be HTTP(S) base URIs with no credentials, path, query, or fragment.");
+	return parsed;
+}
+/**
 * Validates a URL to prevent SSRF attacks.
 */
 async function validatePublicUrl(url) {
@@ -375,4 +389,4 @@ function matchesIPv6Prefix(address, prefixWords, prefixLength) {
 	return true;
 }
 //#endregion
-export { formatIri as a, haveSameIriOrigin as c, parseIri as d, parseJsonLdId as f, expandIPv6Address as i, isValidPublicIPv4Address as l, arePortableUrisEqual as n, getFe34Origin as o, validatePublicUrl as p, canonicalizePortableUri as r, haveSameFe34Origin as s, UrlError as t, isValidPublicIPv6Address as u };
+export { formatIri as a, haveSameIriOrigin as c, isValidPublicIPv6Address as d, parseGatewayUrl as f, validatePublicUrl as h, expandIPv6Address as i, isGatewayUrl as l, parseJsonLdId as m, arePortableUrisEqual as n, getFe34Origin as o, parseIri as p, canonicalizePortableUri as r, haveSameFe34Origin as s, UrlError as t, isValidPublicIPv4Address as u };

package/dist/tests/url.test.cjs

@@ -1,5 +1,5 @@
 require("./chunk-C2EiDwsr.cjs");
-const require_url = require("./url-BvjYQdxL.cjs");
+const require_url = require("./url-CsOV_B_P.cjs");
 let node_assert = require("node:assert");
 let node_test = require("node:test");
 //#region src/url.test.ts
@@ -228,6 +228,23 @@ let node_test = require("node:test");
 	(0, node_assert.deepStrictEqual)(parsed, new URL("ap+ef61://did%3Aweb%3Aexample.com%2500/u/1"));
 	(0, node_assert.deepStrictEqual)(require_url.formatIri(parsed), "ap+ef61://did:web:example.com%00/u/1");
 });
+(0, node_test.test)("parseGatewayUrl() accepts only HTTP(S) base URIs", () => {
+	for (const url of ["https://server.example/", "http://server.example/"]) {
+		(0, node_assert.deepStrictEqual)(require_url.parseGatewayUrl(url), new URL(url));
+		(0, node_assert.ok)(require_url.isGatewayUrl(new URL(url)));
+	}
+	for (const url of [
+		"ftp://server.example/",
+		"https://user:pass@server.example/",
+		"https://user@server.example/",
+		"https://server.example/path",
+		"https://server.example/?x=1",
+		"https://server.example/#fragment"
+	]) {
+		(0, node_assert.throws)(() => require_url.parseGatewayUrl(url), TypeError);
+		(0, node_assert.ok)(!require_url.isGatewayUrl(new URL(url)));
+	}
+});
 (0, node_test.test)("validatePublicUrl()", async () => {
 	await (0, node_assert.rejects)(() => require_url.validatePublicUrl("ftp://localhost"), require_url.UrlError);
 	await (0, node_assert.rejects)(() => require_url.validatePublicUrl("data:text/plain;base64,SGVsbG8sIFdvcmxkIQ=="), require_url.UrlError);

package/dist/tests/url.test.mjs

@@ -1,4 +1,4 @@
-import { a as formatIri, c as haveSameIriOrigin, d as parseIri, f as parseJsonLdId, i as expandIPv6Address, l as isValidPublicIPv4Address, n as arePortableUrisEqual, o as getFe34Origin, p as validatePublicUrl, r as canonicalizePortableUri, s as haveSameFe34Origin, t as UrlError, u as isValidPublicIPv6Address } from "./url-a2D8NAgh.mjs";
+import { a as formatIri, c as haveSameIriOrigin, d as isValidPublicIPv6Address, f as parseGatewayUrl, h as validatePublicUrl, i as expandIPv6Address, l as isGatewayUrl, m as parseJsonLdId, n as arePortableUrisEqual, o as getFe34Origin, p as parseIri, r as canonicalizePortableUri, s as haveSameFe34Origin, t as UrlError, u as isValidPublicIPv4Address } from "./url-Du7RQQgP.mjs";
 import { deepStrictEqual, ok, rejects, throws } from "node:assert";
 import { test } from "node:test";
 //#region src/url.test.ts
@@ -227,6 +227,23 @@ test("parseIri() preserves encoded percent signs while decoding delimiters", ()
 	deepStrictEqual(parsed, new URL("ap+ef61://did%3Aweb%3Aexample.com%2500/u/1"));
 	deepStrictEqual(formatIri(parsed), "ap+ef61://did:web:example.com%00/u/1");
 });
+test("parseGatewayUrl() accepts only HTTP(S) base URIs", () => {
+	for (const url of ["https://server.example/", "http://server.example/"]) {
+		deepStrictEqual(parseGatewayUrl(url), new URL(url));
+		ok(isGatewayUrl(new URL(url)));
+	}
+	for (const url of [
+		"ftp://server.example/",
+		"https://user:pass@server.example/",
+		"https://user@server.example/",
+		"https://server.example/path",
+		"https://server.example/?x=1",
+		"https://server.example/#fragment"
+	]) {
+		throws(() => parseGatewayUrl(url), TypeError);
+		ok(!isGatewayUrl(new URL(url)));
+	}
+});
 test("validatePublicUrl()", async () => {
 	await rejects(() => validatePublicUrl("ftp://localhost"), UrlError);
 	await rejects(() => validatePublicUrl("data:text/plain;base64,SGVsbG8sIFdvcmxkIQ=="), UrlError);

package/dist/{url-Ck3dGEwH.cjs → url-DD4F0ULf.cjs}

@@ -212,6 +212,20 @@ function parseAtUri(uri) {
 	return new URL("at://" + encodeURIComponent(authority) + path);
 }
 /**
+* Checks whether the URL is an FEP-ef61 gateway base URI.
+*/
+function isGatewayUrl(url) {
+	return (url.protocol === "http:" || url.protocol === "https:") && url.username === "" && url.password === "" && url.pathname === "/" && url.search === "" && url.hash === "";
+}
+/**
+* Parses and validates an FEP-ef61 gateway base URI.
+*/
+function parseGatewayUrl(url) {
+	const parsed = parseIri(url);
+	if (!isGatewayUrl(parsed)) throw new TypeError("FEP-ef61 gateways must be HTTP(S) base URIs with no credentials, path, query, or fragment.");
+	return parsed;
+}
+/**
 * Validates a URL to prevent SSRF attacks.
 */
 async function validatePublicUrl(url) {
@@ -425,6 +439,12 @@ Object.defineProperty(exports, "haveSameIriOrigin", {
 		return haveSameIriOrigin;
 	}
 });
+Object.defineProperty(exports, "isGatewayUrl", {
+	enumerable: true,
+	get: function() {
+		return isGatewayUrl;
+	}
+});
 Object.defineProperty(exports, "isValidPublicIPv4Address", {
 	enumerable: true,
 	get: function() {
@@ -437,6 +457,12 @@ Object.defineProperty(exports, "isValidPublicIPv6Address", {
 		return isValidPublicIPv6Address;
 	}
 });
+Object.defineProperty(exports, "parseGatewayUrl", {
+	enumerable: true,
+	get: function() {
+		return parseGatewayUrl;
+	}
+});
 Object.defineProperty(exports, "parseIri", {
 	enumerable: true,
 	get: function() {

package/dist/{url-m1YxGNZ0.js → url-DGVbSVVi.js}

@@ -211,6 +211,20 @@ function parseAtUri(uri) {
 	return new URL("at://" + encodeURIComponent(authority) + path);
 }
 /**
+* Checks whether the URL is an FEP-ef61 gateway base URI.
+*/
+function isGatewayUrl(url) {
+	return (url.protocol === "http:" || url.protocol === "https:") && url.username === "" && url.password === "" && url.pathname === "/" && url.search === "" && url.hash === "";
+}
+/**
+* Parses and validates an FEP-ef61 gateway base URI.
+*/
+function parseGatewayUrl(url) {
+	const parsed = parseIri(url);
+	if (!isGatewayUrl(parsed)) throw new TypeError("FEP-ef61 gateways must be HTTP(S) base URIs with no credentials, path, query, or fragment.");
+	return parsed;
+}
+/**
 * Validates a URL to prevent SSRF attacks.
 */
 async function validatePublicUrl(url) {
@@ -376,4 +390,4 @@ function matchesIPv6Prefix(address, prefixWords, prefixLength) {
 	return true;
 }
 //#endregion
-export { formatIri as a, haveSameIriOrigin as c, parseIri as d, parseJsonLdId as f, expandIPv6Address as i, isValidPublicIPv4Address as l, arePortableUrisEqual as n, getFe34Origin as o, validatePublicUrl as p, canonicalizePortableUri as r, haveSameFe34Origin as s, UrlError as t, isValidPublicIPv6Address as u };
+export { formatIri as a, haveSameIriOrigin as c, isValidPublicIPv6Address as d, parseGatewayUrl as f, validatePublicUrl as h, expandIPv6Address as i, isGatewayUrl as l, parseJsonLdId as m, arePortableUrisEqual as n, getFe34Origin as o, parseIri as p, canonicalizePortableUri as r, haveSameFe34Origin as s, UrlError as t, isValidPublicIPv4Address as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fedify/vocab-runtime",
-  "version": "2.4.0-dev.1618+58858243",
+  "version": "2.4.0-dev.1655+b8f3c3d5",
   "homepage": "https://fedify.dev/",
   "repository": {
     "type": "git",

package/src/contexts/fep-ef61.json

@@ -0,0 +1,10 @@
+{
+  "@context": {
+    "gateways": {
+      "@id": "https://w3id.org/fep/ef61/gateways",
+      "@type": "@id",
+      "@container": "@list"
+    },
+    "digestMultibase": "https://www.w3.org/ns/credentials/v2#digestMultibase"
+  }
+}