@fedify/vocab-runtime 2.4.0-dev.1964 → 2.4.0-dev.1988

package/dist/tests/body.test.mjs

@@ -0,0 +1,90 @@
+import { r as readBoundedText, t as BodyTooLargeError } from "./body-DRVriaJO.mjs";
+import { deepStrictEqual, ok, rejects } from "node:assert/strict";
+import { test } from "node:test";
+import { gunzipSync, gzipSync } from "node:zlib";
+//#region src/body.test.ts
+const url = "https://example.com/document";
+test("readBoundedText handles empty bodies and flushes incomplete UTF-8", async () => {
+	deepStrictEqual(await readBoundedText(new Response(null), 1, url), "");
+	deepStrictEqual(await readBoundedText(new Response(""), 1, url), "");
+	deepStrictEqual(await readBoundedText(new Response(new Uint8Array([226, 130])), 2, url), "�");
+});
+test("readBoundedText counts bytes and preserves split UTF-8", async () => {
+	const bytes = new TextEncoder().encode("\"안녕\"");
+	const stream = new ReadableStream({ start(controller) {
+		for (const byte of bytes) controller.enqueue(new Uint8Array([byte]));
+		controller.close();
+	} });
+	deepStrictEqual(await readBoundedText(new Response(stream), bytes.length, url), "\"안녕\"");
+	await rejects(readBoundedText(new Response(bytes), bytes.length - 1, url), BodyTooLargeError);
+});
+test("readBoundedText rejects a declared oversized body without pulling", async () => {
+	let pulled = false;
+	let canceled = false;
+	const response = new Response(new ReadableStream({
+		pull() {
+			pulled = true;
+		},
+		cancel() {
+			canceled = true;
+		}
+	}, { highWaterMark: 0 }), { headers: { "Content-Length": "100" } });
+	await rejects(readBoundedText(response, 10, url), BodyTooLargeError);
+	deepStrictEqual(pulled, false);
+	deepStrictEqual(canceled, true);
+	deepStrictEqual(response.body?.locked, false);
+});
+test("readBoundedText cancels chunked bodies despite absent or false lengths", async () => {
+	for (const length of [
+		void 0,
+		"1",
+		"invalid"
+	]) {
+		let pulls = 0;
+		let canceled = false;
+		const stream = new ReadableStream({
+			pull(controller) {
+				pulls++;
+				controller.enqueue(/* @__PURE__ */ new Uint8Array(4));
+			},
+			cancel() {
+				canceled = true;
+			}
+		}, { highWaterMark: 0 });
+		const response = new Response(stream, { headers: length == null ? {} : { "Content-Length": length } });
+		await rejects(readBoundedText(response, 8, url), BodyTooLargeError);
+		deepStrictEqual(pulls, 3);
+		deepStrictEqual(canceled, true);
+		deepStrictEqual(response.body?.locked, false);
+	}
+});
+test("readBoundedText limits decoded gzip bytes, not the compressed length", async () => {
+	const compressed = gzipSync("\"" + "a".repeat(4096) + "\"");
+	ok(compressed.length < 128);
+	const decoded = gunzipSync(compressed);
+	await rejects(readBoundedText(new Response(decoded, { headers: {
+		"Content-Encoding": "gzip",
+		"Content-Length": String(compressed.length)
+	} }), 128, url), BodyTooLargeError);
+	deepStrictEqual(await readBoundedText(new Response("{}", { headers: {
+		"Content-Encoding": "gzip",
+		"Content-Length": "22"
+	} }), 2, url), "{}");
+});
+test("readBoundedText rejects invalid limits and releases failed streams", async () => {
+	for (const limit of [
+		0,
+		-1,
+		NaN,
+		Infinity,
+		1.5
+	]) await rejects(readBoundedText(new Response("{}"), limit, url), RangeError);
+	const failure = /* @__PURE__ */ new Error("broken stream");
+	const response = new Response(new ReadableStream({ pull(controller) {
+		controller.error(failure);
+	} }));
+	await rejects(readBoundedText(response, 10, url), (error) => error === failure);
+	deepStrictEqual(response.body?.locked, false);
+});
+//#endregion
+export {};

package/dist/tests/decimal.test.cjs

@@ -1,11 +1,11 @@
-require("./docloader-B3auVdRI.cjs");
+require("./docloader-j_N6ZEZx.cjs");
 require("./url-CPfMatUL.cjs");
 require("./key-8Qg2SbZi.cjs");
 require("./multibase-B5Mea7Ip.cjs");
 require("./digest-3FeH2Y-Q.cjs");
 require("./langstr-C4Fl80ae.cjs");
-let node_assert = require("node:assert");
 let node_test = require("node:test");
+let node_assert = require("node:assert");
 //#region src/decimal.ts
 const DECIMAL_PATTERN = /^(\+|-)?([0-9]+(\.[0-9]*)?|\.[0-9]+)$/;
 const XML_SCHEMA_WHITESPACE_PATTERN = /[\t\n\r ]+/g;

package/dist/tests/decimal.test.mjs

@@ -1,11 +1,11 @@
-import "./docloader-BexVAGvr.mjs";
+import "./docloader-ZSduXDDg.mjs";
 import "./url-Basm1L_c.mjs";
 import "./key-C7MNhlkO.mjs";
 import "./multibase-BPnF_L4e.mjs";
 import "./digest-COC7xDiQ.mjs";
 import "./langstr-CQ26J_L7.mjs";
-import { deepStrictEqual, throws } from "node:assert";
 import { test } from "node:test";
+import { deepStrictEqual, throws } from "node:assert";
 //#region src/decimal.ts
 const DECIMAL_PATTERN = /^(\+|-)?([0-9]+(\.[0-9]*)?|\.[0-9]+)$/;
 const XML_SCHEMA_WHITESPACE_PATTERN = /[\t\n\r ]+/g;

package/dist/tests/digest.test.cjs

@@ -1,8 +1,8 @@
 const require_multicodec = require("./multicodec-CLRPeW4N.cjs");
 const require_multibase = require("./multibase-B5Mea7Ip.cjs");
 const require_digest = require("./digest-3FeH2Y-Q.cjs");
-let node_test = require("node:test");
 let node_assert_strict = require("node:assert/strict");
+let node_test = require("node:test");
 //#region src/digest.test.ts
 const encoder = new TextEncoder();
 const decoder = new TextDecoder();

package/dist/tests/digest.test.mjs

@@ -1,8 +1,8 @@
 import { t as addMulticodecPrefix } from "./multicodec-CRIj_05H.mjs";
 import { n as encodeMultibase } from "./multibase-BPnF_L4e.mjs";
 import { a as verifyDigestMultibase, i as parseHashlink, n as createHashlink, o as verifyHashlink, r as parseDigestMultibase, t as computeDigestMultibase } from "./digest-COC7xDiQ.mjs";
-import { test } from "node:test";
 import { deepStrictEqual, equal, rejects, throws } from "node:assert/strict";
+import { test } from "node:test";
 //#region src/digest.test.ts
 const encoder = new TextEncoder();
 const decoder = new TextDecoder();

package/dist/tests/{docloader-BexVAGvr.mjs → docloader-ZSduXDDg.mjs}

@@ -1,4 +1,5 @@
-import { a as name, i as logRequest, n as createActivityPubRequest, o as version, t as FetchError } from "./request-C8BUtPj4.mjs";
+import { a as name, i as logRequest, n as createActivityPubRequest, o as version, t as FetchError } from "./request-Bo1iqGDW.mjs";
+import { n as MAX_BODY_SIZE, r as readBoundedText, t as BodyTooLargeError } from "./body-DRVriaJO.mjs";
 import { t as HttpHeaderLink } from "./link-Cevmc87v.mjs";
 import { g as validatePublicUrl, t as UrlError } from "./url-Basm1L_c.mjs";
 import { getLogger } from "@logtape/logtape";
@@ -4529,58 +4530,6 @@ function createResponseMetadata(response) {
 		statusText: response.statusText
 	});
 }
-async function cancelResponseBody(response) {
-	if (response.body != null) await response.body.cancel();
-}
-async function readBoundedText(response, maxBytes) {
-	const contentLength = response.headers.get("Content-Length");
-	if (contentLength != null) {
-		const size = Number(contentLength);
-		if (size > maxBytes) {
-			await cancelResponseBody(response);
-			return {
-				text: "",
-				size,
-				tooLarge: true
-			};
-		}
-	}
-	if (response.body == null) return {
-		text: "",
-		size: 0,
-		tooLarge: false
-	};
-	const reader = response.body.getReader();
-	const decoder = new TextDecoder();
-	let text = "";
-	let size = 0;
-	try {
-		while (true) {
-			const result = await reader.read();
-			if (result.done) break;
-			const chunkSize = result.value.byteLength;
-			if (size + chunkSize > maxBytes) {
-				size += chunkSize;
-				await reader.cancel();
-				return {
-					text: "",
-					size,
-					tooLarge: true
-				};
-			}
-			size += chunkSize;
-			text += decoder.decode(result.value, { stream: true });
-		}
-		text += decoder.decode();
-		return {
-			text,
-			size,
-			tooLarge: false
-		};
-	} finally {
-		reader.releaseLock();
-	}
-}
 /**
 * Gets a {@link RemoteDocument} from the given response.
 * @param url The URL of the document to load.
@@ -4636,42 +4585,44 @@ async function getRemoteDocument(url, response, fetch) {
 	let document;
 	if (!jsonLd && (contentType === "text/html" || contentType?.startsWith("text/html;") || contentType === "application/xhtml+xml" || contentType?.startsWith("application/xhtml+xml;"))) {
 		const errorResponse = createResponseMetadata(response);
-		const html = await readBoundedText(response, MAX_HTML_SIZE);
-		if (html.tooLarge) {
+		let html;
+		try {
+			html = await readBoundedText(response, MAX_HTML_SIZE, documentUrl);
+		} catch (error) {
+			if (!(error instanceof BodyTooLargeError)) throw error;
 			logger.warn("HTML response too large, skipping alternate link discovery: {url}", {
 				url: documentUrl,
-				size: html.size
+				maxBytes: MAX_HTML_SIZE
 			});
 			throw new FetchError(documentUrl, `HTML document is too large to scan for an ActivityPub alternate link (Content-Type: ${contentType})`, errorResponse);
-		} else {
-			const tagPattern = /<(a|link)\s+([^>]*?)\s*\/?>/gi;
-			const attrPattern = /([a-z][a-z:_-]*)=(?:"([^"]*)"|'([^']*)'|([^\s>]+))/gi;
-			let tagMatch;
-			while ((tagMatch = tagPattern.exec(html.text)) !== null) {
-				const tagContent = tagMatch[2];
-				let attrMatch;
-				const attribs = {};
-				attrPattern.lastIndex = 0;
-				while ((attrMatch = attrPattern.exec(tagContent)) !== null) {
-					const key = attrMatch[1].toLowerCase();
-					attribs[key] = attrMatch[2] ?? attrMatch[3] ?? attrMatch[4] ?? "";
-				}
-				if (attribs.rel === "alternate" && "type" in attribs && (attribs.type === "application/activity+json" || attribs.type === "application/ld+json" || attribs.type.startsWith("application/ld+json;")) && "href" in attribs && new URL(attribs.href, docUrl).href !== docUrl.href) {
-					logger.debug("Found alternate document: {alternateUrl} from {url}", {
-						alternateUrl: attribs.href,
-						url: documentUrl
-					});
-					return await fetch(new URL(attribs.href, docUrl).href);
-				}
+		}
+		const tagPattern = /<(a|link)\s+([^>]*?)\s*\/?>/gi;
+		const attrPattern = /([a-z][a-z:_-]*)=(?:"([^"]*)"|'([^']*)'|([^\s>]+))/gi;
+		let tagMatch;
+		while ((tagMatch = tagPattern.exec(html)) !== null) {
+			const tagContent = tagMatch[2];
+			let attrMatch;
+			const attribs = {};
+			attrPattern.lastIndex = 0;
+			while ((attrMatch = attrPattern.exec(tagContent)) !== null) {
+				const key = attrMatch[1].toLowerCase();
+				attribs[key] = attrMatch[2] ?? attrMatch[3] ?? attrMatch[4] ?? "";
 			}
-			try {
-				document = JSON.parse(html.text);
-			} catch (error) {
-				if (!(error instanceof SyntaxError)) throw error;
-				throw new FetchError(documentUrl, `HTML document has no ActivityPub alternate link (Content-Type: ${contentType})`, errorResponse);
+			if (attribs.rel === "alternate" && "type" in attribs && (attribs.type === "application/activity+json" || attribs.type === "application/ld+json" || attribs.type.startsWith("application/ld+json;")) && "href" in attribs && new URL(attribs.href, docUrl).href !== docUrl.href) {
+				logger.debug("Found alternate document: {alternateUrl} from {url}", {
+					alternateUrl: attribs.href,
+					url: documentUrl
+				});
+				return await fetch(new URL(attribs.href, docUrl).href);
 			}
 		}
-	} else document = await response.json();
+		try {
+			document = JSON.parse(html);
+		} catch (error) {
+			if (!(error instanceof SyntaxError)) throw error;
+			throw new FetchError(documentUrl, `HTML document has no ActivityPub alternate link (Content-Type: ${contentType})`, errorResponse);
+		}
+	} else document = JSON.parse(await readBoundedText(response, MAX_BODY_SIZE, documentUrl));
 	logger.debug("Fetched document: {status} {url} {headers}", {
 		status: response.status,
 		url: documentUrl,

package/dist/tests/{docloader-B3auVdRI.cjs → docloader-j_N6ZEZx.cjs}

@@ -1,4 +1,5 @@
-const require_request = require("./request-CRO9h2AO.cjs");
+const require_request = require("./request-B3YkikPO.cjs");
+const require_body = require("./body-Cg5W_IdS.cjs");
 const require_link = require("./link-DlKm8bEr.cjs");
 const require_url = require("./url-CPfMatUL.cjs");
 let _logtape_logtape = require("@logtape/logtape");
@@ -4529,58 +4530,6 @@ function createResponseMetadata(response) {
 		statusText: response.statusText
 	});
 }
-async function cancelResponseBody(response) {
-	if (response.body != null) await response.body.cancel();
-}
-async function readBoundedText(response, maxBytes) {
-	const contentLength = response.headers.get("Content-Length");
-	if (contentLength != null) {
-		const size = Number(contentLength);
-		if (size > maxBytes) {
-			await cancelResponseBody(response);
-			return {
-				text: "",
-				size,
-				tooLarge: true
-			};
-		}
-	}
-	if (response.body == null) return {
-		text: "",
-		size: 0,
-		tooLarge: false
-	};
-	const reader = response.body.getReader();
-	const decoder = new TextDecoder();
-	let text = "";
-	let size = 0;
-	try {
-		while (true) {
-			const result = await reader.read();
-			if (result.done) break;
-			const chunkSize = result.value.byteLength;
-			if (size + chunkSize > maxBytes) {
-				size += chunkSize;
-				await reader.cancel();
-				return {
-					text: "",
-					size,
-					tooLarge: true
-				};
-			}
-			size += chunkSize;
-			text += decoder.decode(result.value, { stream: true });
-		}
-		text += decoder.decode();
-		return {
-			text,
-			size,
-			tooLarge: false
-		};
-	} finally {
-		reader.releaseLock();
-	}
-}
 /**
 * Gets a {@link RemoteDocument} from the given response.
 * @param url The URL of the document to load.
@@ -4636,42 +4585,44 @@ async function getRemoteDocument(url, response, fetch) {
 	let document;
 	if (!jsonLd && (contentType === "text/html" || contentType?.startsWith("text/html;") || contentType === "application/xhtml+xml" || contentType?.startsWith("application/xhtml+xml;"))) {
 		const errorResponse = createResponseMetadata(response);
-		const html = await readBoundedText(response, MAX_HTML_SIZE);
-		if (html.tooLarge) {
+		let html;
+		try {
+			html = await require_body.readBoundedText(response, MAX_HTML_SIZE, documentUrl);
+		} catch (error) {
+			if (!(error instanceof require_body.BodyTooLargeError)) throw error;
 			logger.warn("HTML response too large, skipping alternate link discovery: {url}", {
 				url: documentUrl,
-				size: html.size
+				maxBytes: MAX_HTML_SIZE
 			});
 			throw new require_request.FetchError(documentUrl, `HTML document is too large to scan for an ActivityPub alternate link (Content-Type: ${contentType})`, errorResponse);
-		} else {
-			const tagPattern = /<(a|link)\s+([^>]*?)\s*\/?>/gi;
-			const attrPattern = /([a-z][a-z:_-]*)=(?:"([^"]*)"|'([^']*)'|([^\s>]+))/gi;
-			let tagMatch;
-			while ((tagMatch = tagPattern.exec(html.text)) !== null) {
-				const tagContent = tagMatch[2];
-				let attrMatch;
-				const attribs = {};
-				attrPattern.lastIndex = 0;
-				while ((attrMatch = attrPattern.exec(tagContent)) !== null) {
-					const key = attrMatch[1].toLowerCase();
-					attribs[key] = attrMatch[2] ?? attrMatch[3] ?? attrMatch[4] ?? "";
-				}
-				if (attribs.rel === "alternate" && "type" in attribs && (attribs.type === "application/activity+json" || attribs.type === "application/ld+json" || attribs.type.startsWith("application/ld+json;")) && "href" in attribs && new URL(attribs.href, docUrl).href !== docUrl.href) {
-					logger.debug("Found alternate document: {alternateUrl} from {url}", {
-						alternateUrl: attribs.href,
-						url: documentUrl
-					});
-					return await fetch(new URL(attribs.href, docUrl).href);
-				}
+		}
+		const tagPattern = /<(a|link)\s+([^>]*?)\s*\/?>/gi;
+		const attrPattern = /([a-z][a-z:_-]*)=(?:"([^"]*)"|'([^']*)'|([^\s>]+))/gi;
+		let tagMatch;
+		while ((tagMatch = tagPattern.exec(html)) !== null) {
+			const tagContent = tagMatch[2];
+			let attrMatch;
+			const attribs = {};
+			attrPattern.lastIndex = 0;
+			while ((attrMatch = attrPattern.exec(tagContent)) !== null) {
+				const key = attrMatch[1].toLowerCase();
+				attribs[key] = attrMatch[2] ?? attrMatch[3] ?? attrMatch[4] ?? "";
 			}
-			try {
-				document = JSON.parse(html.text);
-			} catch (error) {
-				if (!(error instanceof SyntaxError)) throw error;
-				throw new require_request.FetchError(documentUrl, `HTML document has no ActivityPub alternate link (Content-Type: ${contentType})`, errorResponse);
+			if (attribs.rel === "alternate" && "type" in attribs && (attribs.type === "application/activity+json" || attribs.type === "application/ld+json" || attribs.type.startsWith("application/ld+json;")) && "href" in attribs && new URL(attribs.href, docUrl).href !== docUrl.href) {
+				logger.debug("Found alternate document: {alternateUrl} from {url}", {
+					alternateUrl: attribs.href,
+					url: documentUrl
+				});
+				return await fetch(new URL(attribs.href, docUrl).href);
 			}
 		}
-	} else document = await response.json();
+		try {
+			document = JSON.parse(html);
+		} catch (error) {
+			if (!(error instanceof SyntaxError)) throw error;
+			throw new require_request.FetchError(documentUrl, `HTML document has no ActivityPub alternate link (Content-Type: ${contentType})`, errorResponse);
+		}
+	} else document = JSON.parse(await require_body.readBoundedText(response, require_body.MAX_BODY_SIZE, documentUrl));
 	logger.debug("Fetched document: {status} {url} {headers}", {
 		status: response.status,
 		url: documentUrl,

package/dist/tests/docloader.test.cjs

@@ -1,9 +1,11 @@
 const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");
-const require_docloader = require("./docloader-B3auVdRI.cjs");
-const require_request = require("./request-CRO9h2AO.cjs");
+const require_request = require("./request-B3YkikPO.cjs");
+const require_docloader = require("./docloader-j_N6ZEZx.cjs");
 const require_url = require("./url-CPfMatUL.cjs");
-let node_assert = require("node:assert");
 let node_test = require("node:test");
+let node_zlib = require("node:zlib");
+let node_assert = require("node:assert");
+let node_http = require("node:http");
 //#region ../../node_modules/.pnpm/glob-to-regexp@0.4.1/node_modules/glob-to-regexp/index.js
 var require_glob_to_regexp = /* @__PURE__ */ require_rolldown_runtime.__commonJSMin(((exports, module) => {
 	module.exports = function(glob, opts) {
@@ -1471,9 +1473,9 @@ var esm_default = new class FetchMock {
 			"Content-Length": String(1048577),
 			"Content-Type": "text/html; charset=utf-8"
 		} });
-		Object.defineProperty(response, "body", { value: { cancel: () => {
+		Object.defineProperty(response, "body", { value: new ReadableStream({ cancel() {
 			canceled = true;
-		} } });
+		} }) });
 		await (0, node_assert.rejects)(() => require_docloader.getRemoteDocument("https://example.com/large-html-cancel", response, () => {
 			throw new Error("unexpected alternate fetch");
 		}), require_request.FetchError);
@@ -1626,4 +1628,81 @@ var esm_default = new class FetchMock {
 	});
 	esm_default.hardReset();
 });
+(0, node_test.test)("getDocumentLoader() bounds JSON, HTML, and alternate documents", async () => {
+	const url = "https://example.com/bounded";
+	esm_default.mockGlobal();
+	let oversized = true;
+	try {
+		esm_default.get(url, () => new Response("{\"name\":\"hello\"}", { headers: {
+			"Content-Type": "application/activity+json",
+			...oversized ? { "Content-Length": String(16777217) } : {}
+		} }));
+		const loader = require_docloader.getDocumentLoader({ allowPrivateAddress: true });
+		await (0, node_assert.rejects)(loader(url), require_request.FetchError);
+		oversized = false;
+		(0, node_assert.deepStrictEqual)((await loader(url)).document, { name: "hello" });
+		oversized = true;
+		esm_default.get(`${url}/html`, () => new Response(" ".repeat(1048577), { headers: { "Content-Type": "text/html" } }));
+		await (0, node_assert.rejects)(require_docloader.getDocumentLoader({ allowPrivateAddress: true })(`${url}/html`), require_request.FetchError);
+		esm_default.get(`${url}/alternate`, () => new Response("", { headers: {
+			"Content-Type": "text/html",
+			Link: `<${url}>; rel="alternate"; type="application/activity+json"`
+		} }));
+		await (0, node_assert.rejects)(loader(`${url}/alternate`), require_request.FetchError);
+		esm_default.get(`${url}/redirect`, {
+			status: 302,
+			headers: { Location: url }
+		});
+		await (0, node_assert.rejects)(loader(`${url}/redirect`), require_request.FetchError);
+	} finally {
+		esm_default.hardReset();
+	}
+});
+(0, node_test.test)("getDocumentLoader() rejects oversized gzip responses from fetch", async () => {
+	const document = { name: "a".repeat(16 * 1024 * 1024) };
+	const compressed = (0, node_zlib.gzipSync)(JSON.stringify(document));
+	(0, node_assert.ok)(compressed.byteLength < 64 * 1024);
+	const server = (0, node_http.createServer)((request, response) => {
+		const body = request.url === "/small" ? (0, node_zlib.gzipSync)("{\"name\":\"hello\"}") : compressed;
+		response.writeHead(200, {
+			"Content-Type": "application/activity+json",
+			"Content-Encoding": "gzip",
+			"Content-Length": body.byteLength
+		});
+		response.end(body);
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(0, "127.0.0.1", resolve);
+	});
+	try {
+		const address = server.address();
+		(0, node_assert.ok)(address != null && typeof address !== "string");
+		const url = `http://127.0.0.1:${address.port}/document`;
+		await (0, node_assert.rejects)(require_docloader.getDocumentLoader({ allowPrivateAddress: true })(url), require_request.FetchError);
+		(0, node_assert.deepStrictEqual)((await require_docloader.getDocumentLoader({ allowPrivateAddress: true })(new URL("/small", url).href)).document, { name: "hello" });
+	} finally {
+		await new Promise((resolve, reject) => {
+			server.close((error) => error == null ? resolve() : reject(error));
+			server.closeAllConnections();
+		});
+	}
+});
+(0, node_test.test)("getRemoteDocument() bounds JSON by default", async () => {
+	let canceled = false;
+	let pulls = 0;
+	await (0, node_assert.rejects)(require_docloader.getRemoteDocument("https://example.com/document", new Response(new ReadableStream({
+		pull(controller) {
+			pulls++;
+			controller.enqueue(new Uint8Array(64 * 1024).fill(32));
+		},
+		cancel() {
+			canceled = true;
+		}
+	}, { highWaterMark: 0 })), () => {
+		throw new Error("Unexpected alternate document");
+	}), require_request.FetchError);
+	(0, node_assert.deepStrictEqual)(canceled, true);
+	(0, node_assert.deepStrictEqual)(pulls, 257);
+});
 //#endregion

package/dist/tests/docloader.test.mjs

@@ -1,8 +1,10 @@
-import { i as cid_v1_default, n as getRemoteDocument, r as preloadedContexts, t as getDocumentLoader } from "./docloader-BexVAGvr.mjs";
-import { t as FetchError } from "./request-C8BUtPj4.mjs";
+import { t as FetchError } from "./request-Bo1iqGDW.mjs";
+import { i as cid_v1_default, n as getRemoteDocument, r as preloadedContexts, t as getDocumentLoader } from "./docloader-ZSduXDDg.mjs";
 import { t as UrlError } from "./url-Basm1L_c.mjs";
-import { deepStrictEqual, ok, rejects } from "node:assert";
 import { test } from "node:test";
+import { gzipSync } from "node:zlib";
+import { deepStrictEqual, ok, rejects } from "node:assert";
+import { createServer } from "node:http";
 //#region \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -1490,9 +1492,9 @@ test("getDocumentLoader()", async (t) => {
 			"Content-Length": String(1048577),
 			"Content-Type": "text/html; charset=utf-8"
 		} });
-		Object.defineProperty(response, "body", { value: { cancel: () => {
+		Object.defineProperty(response, "body", { value: new ReadableStream({ cancel() {
 			canceled = true;
-		} } });
+		} }) });
 		await rejects(() => getRemoteDocument("https://example.com/large-html-cancel", response, () => {
 			throw new Error("unexpected alternate fetch");
 		}), FetchError);
@@ -1645,5 +1647,82 @@ test("getDocumentLoader()", async (t) => {
 	});
 	esm_default.hardReset();
 });
+test("getDocumentLoader() bounds JSON, HTML, and alternate documents", async () => {
+	const url = "https://example.com/bounded";
+	esm_default.mockGlobal();
+	let oversized = true;
+	try {
+		esm_default.get(url, () => new Response("{\"name\":\"hello\"}", { headers: {
+			"Content-Type": "application/activity+json",
+			...oversized ? { "Content-Length": String(16777217) } : {}
+		} }));
+		const loader = getDocumentLoader({ allowPrivateAddress: true });
+		await rejects(loader(url), FetchError);
+		oversized = false;
+		deepStrictEqual((await loader(url)).document, { name: "hello" });
+		oversized = true;
+		esm_default.get(`${url}/html`, () => new Response(" ".repeat(1048577), { headers: { "Content-Type": "text/html" } }));
+		await rejects(getDocumentLoader({ allowPrivateAddress: true })(`${url}/html`), FetchError);
+		esm_default.get(`${url}/alternate`, () => new Response("", { headers: {
+			"Content-Type": "text/html",
+			Link: `<${url}>; rel="alternate"; type="application/activity+json"`
+		} }));
+		await rejects(loader(`${url}/alternate`), FetchError);
+		esm_default.get(`${url}/redirect`, {
+			status: 302,
+			headers: { Location: url }
+		});
+		await rejects(loader(`${url}/redirect`), FetchError);
+	} finally {
+		esm_default.hardReset();
+	}
+});
+test("getDocumentLoader() rejects oversized gzip responses from fetch", async () => {
+	const document = { name: "a".repeat(16 * 1024 * 1024) };
+	const compressed = gzipSync(JSON.stringify(document));
+	ok(compressed.byteLength < 64 * 1024);
+	const server = createServer((request, response) => {
+		const body = request.url === "/small" ? gzipSync("{\"name\":\"hello\"}") : compressed;
+		response.writeHead(200, {
+			"Content-Type": "application/activity+json",
+			"Content-Encoding": "gzip",
+			"Content-Length": body.byteLength
+		});
+		response.end(body);
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(0, "127.0.0.1", resolve);
+	});
+	try {
+		const address = server.address();
+		ok(address != null && typeof address !== "string");
+		const url = `http://127.0.0.1:${address.port}/document`;
+		await rejects(getDocumentLoader({ allowPrivateAddress: true })(url), FetchError);
+		deepStrictEqual((await getDocumentLoader({ allowPrivateAddress: true })(new URL("/small", url).href)).document, { name: "hello" });
+	} finally {
+		await new Promise((resolve, reject) => {
+			server.close((error) => error == null ? resolve() : reject(error));
+			server.closeAllConnections();
+		});
+	}
+});
+test("getRemoteDocument() bounds JSON by default", async () => {
+	let canceled = false;
+	let pulls = 0;
+	await rejects(getRemoteDocument("https://example.com/document", new Response(new ReadableStream({
+		pull(controller) {
+			pulls++;
+			controller.enqueue(new Uint8Array(64 * 1024).fill(32));
+		},
+		cancel() {
+			canceled = true;
+		}
+	}, { highWaterMark: 0 })), () => {
+		throw new Error("Unexpected alternate document");
+	}), FetchError);
+	deepStrictEqual(canceled, true);
+	deepStrictEqual(pulls, 257);
+});
 //#endregion
 export {};

package/dist/tests/internal/multicodec.test.cjs

@@ -1,6 +1,6 @@
 const require_multicodec = require("../multicodec-CLRPeW4N.cjs");
-let node_assert = require("node:assert");
 let node_test = require("node:test");
+let node_assert = require("node:assert");
 //#region src/internal/multicodec.test.ts
 (0, node_test.test)("getMulticodecPrefix() decodes supported multicodec prefixes", () => {
 	(0, node_assert.deepStrictEqual)(require_multicodec.getMulticodecPrefix(Uint8Array.from([

package/dist/tests/internal/multicodec.test.mjs

@@ -1,6 +1,6 @@
 import { n as getMulticodecPrefix, r as removeMulticodecPrefix, t as addMulticodecPrefix } from "../multicodec-CRIj_05H.mjs";
-import { deepStrictEqual, throws } from "node:assert";
 import { test } from "node:test";
+import { deepStrictEqual, throws } from "node:assert";
 //#region src/internal/multicodec.test.ts
 test("getMulticodecPrefix() decodes supported multicodec prefixes", () => {
 	deepStrictEqual(getMulticodecPrefix(Uint8Array.from([

package/dist/tests/jsonld-cache.test.cjs

@@ -1,7 +1,7 @@
 const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");
 const require_url = require("./url-CPfMatUL.cjs");
-let node_assert = require("node:assert");
 let node_test = require("node:test");
+let node_assert = require("node:assert");
 let jsonld_dist_jsonld_esm_js = require("jsonld/dist/jsonld.esm.js");
 jsonld_dist_jsonld_esm_js = require_rolldown_runtime.__toESM(jsonld_dist_jsonld_esm_js, 1);
 //#region src/jsonld.ts