@fedify/vocab-runtime 2.4.0-dev.2256 → 2.4.0-dev.2260

package/dist/tests/{docloader-CZ-W5dIM.cjs → docloader-DVikRN3s.cjs}

@@ -1,8 +1,8 @@
-const require_request = require("./request-BE3wHjK4.cjs");
-const require_body = require("./body-ILOzDJe-.cjs");
+const require_request = require("./request-kRkxuOkZ.cjs");
+const require_body = require("./body-edyRdC9n.cjs");
 const require_contexts = require("./contexts-DizzBjz4.cjs");
 const require_link = require("./link-DlKm8bEr.cjs");
-const require_url = require("./url-Ddeuv0sE.cjs");
+const require_url = require("./url-BNakuZ8k.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 let _opentelemetry_api = require("@opentelemetry/api");
 //#region src/docloader.ts

package/dist/tests/docloader.test.cjs

@@ -1,8 +1,8 @@
 const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");
-const require_request = require("./request-BE3wHjK4.cjs");
+const require_request = require("./request-kRkxuOkZ.cjs");
 const require_contexts = require("./contexts-DizzBjz4.cjs");
-const require_url = require("./url-Ddeuv0sE.cjs");
-const require_docloader = require("./docloader-CZ-W5dIM.cjs");
+const require_url = require("./url-BNakuZ8k.cjs");
+const require_docloader = require("./docloader-DVikRN3s.cjs");
 let node_zlib = require("node:zlib");
 let _logtape_logtape = require("@logtape/logtape");
 let node_assert = require("node:assert");

package/dist/tests/docloader.test.mjs

@@ -1,7 +1,7 @@
-import { t as FetchError } from "./request-DkiHcgVt.mjs";
+import { t as FetchError } from "./request-D-SOvXf_.mjs";
 import { n as cid_v1_default, t as preloadedContexts } from "./contexts-CIKsin4e.mjs";
-import { n as UrlError } from "./url-ClVBNQup.mjs";
-import { i as withDocumentLoaderTimeout, n as getRemoteDocument, r as resolveDocumentLoaderTimeout, t as getDocumentLoader } from "./docloader-PCF1uReU.mjs";
+import { n as UrlError } from "./url-DMxmp7ZG.mjs";
+import { i as withDocumentLoaderTimeout, n as getRemoteDocument, r as resolveDocumentLoaderTimeout, t as getDocumentLoader } from "./docloader-DS598-E-.mjs";
 import { gzipSync } from "node:zlib";
 import { configure, reset } from "@logtape/logtape";
 import { deepStrictEqual, ok, rejects, throws } from "node:assert";

package/dist/tests/internal/portable-dereference.test.cjs

@@ -1,6 +1,6 @@
-const require_url = require("../url-Ddeuv0sE.cjs");
-const require_jsonld_cache = require("../jsonld-cache-CMzevnnN.cjs");
-const require_portable_dereference = require("../portable-dereference-BCfSQoXP.cjs");
+const require_url = require("../url-BNakuZ8k.cjs");
+const require_jsonld_cache = require("../jsonld-cache-C07AyNOY.cjs");
+const require_portable_dereference = require("../portable-dereference-BNXtgg5U.cjs");
 let node_assert_strict = require("node:assert/strict");
 let node_test = require("node:test");
 //#region src/internal/portable-dereference.test.ts
@@ -56,6 +56,34 @@ const hrefs = (urls) => urls.map((url) => url.href);
 		4
 	].map((i) => `https://g${i}.example/`));
 });
+(0, node_test.test)("getReferrerGateways() takes gateways from the owner", () => {
+	const actor = {
+		id: require_url.parseIri("ap://did:key:z6Mkabc/actor"),
+		gateways: [
+			new URL("https://a.example"),
+			new URL("https://a.example/"),
+			new URL("https://b.example/path"),
+			new URL("https://c.example")
+		]
+	};
+	const outbox = { id: require_url.parseIri("ap://did:key:z6Mkabc/actor/outbox") };
+	require_portable_dereference.recordPortableReferrer(actor, outbox, "outbox");
+	const page = require_url.parseIri("ap://did:key:z6Mkabc/actor/outbox?cursor=1");
+	(0, node_assert_strict.deepStrictEqual)(hrefs(require_portable_dereference.getReferrerGateways(actor, outbox.id) ?? []), ["https://a.example/", "https://c.example/"]);
+	(0, node_assert_strict.deepStrictEqual)(hrefs(require_portable_dereference.getReferrerGateways(outbox, page) ?? []), ["https://a.example/", "https://c.example/"]);
+	(0, node_assert_strict.deepStrictEqual)(require_portable_dereference.getReferrerGateways(outbox, require_url.withGatewayHints(page, [new URL("https://hint.example")])), void 0);
+	(0, node_assert_strict.deepStrictEqual)(require_portable_dereference.getReferrerGateways(outbox, require_url.parseIri("ap://did:key:z6Mkdef/notes/1")), void 0);
+	const compatible = {
+		id: new URL("https://a.example/.well-known/apgateway/did:key:z6Mkabc/actor"),
+		gateways: [new URL("https://a.example")]
+	};
+	(0, node_assert_strict.deepStrictEqual)(hrefs(require_portable_dereference.getReferrerGateways(compatible, outbox.id) ?? []), ["https://a.example/"]);
+	(0, node_assert_strict.deepStrictEqual)(require_portable_dereference.getReferrerGateways({}, page), void 0);
+	(0, node_assert_strict.deepStrictEqual)(require_portable_dereference.getReferrerGateways({
+		id: actor.id,
+		gateways: []
+	}, page), void 0);
+});
 (0, node_test.test)("createSnapshotContextLoader() does not nest released snapshots", async () => {
 	const calls = [];
 	const base = (url) => {

package/dist/tests/internal/portable-dereference.test.mjs

@@ -1,6 +1,6 @@
-import { S as withGatewayHints, _ as parseIri } from "../url-ClVBNQup.mjs";
-import { n as createScopedContextLoader } from "../jsonld-cache-DCh2kTs6.mjs";
-import { n as getPortableGatewayCandidates, r as isPortableIri, t as createSnapshotContextLoader } from "../portable-dereference-EAbEhAJ4.mjs";
+import { S as withGatewayHints, _ as parseIri } from "../url-DMxmp7ZG.mjs";
+import { n as createScopedContextLoader } from "../jsonld-cache-BPQmOZWD.mjs";
+import { a as recordPortableReferrer, i as isPortableIri, n as getPortableGatewayCandidates, r as getReferrerGateways, t as createSnapshotContextLoader } from "../portable-dereference-DRE5bz-l.mjs";
 import { deepStrictEqual, ok, throws } from "node:assert/strict";
 import { test } from "node:test";
 //#region src/internal/portable-dereference.test.ts
@@ -56,6 +56,34 @@ test("getPortableGatewayCandidates() reads hints from withGatewayHints()", () =>
 		4
 	].map((i) => `https://g${i}.example/`));
 });
+test("getReferrerGateways() takes gateways from the owner", () => {
+	const actor = {
+		id: parseIri("ap://did:key:z6Mkabc/actor"),
+		gateways: [
+			new URL("https://a.example"),
+			new URL("https://a.example/"),
+			new URL("https://b.example/path"),
+			new URL("https://c.example")
+		]
+	};
+	const outbox = { id: parseIri("ap://did:key:z6Mkabc/actor/outbox") };
+	recordPortableReferrer(actor, outbox, "outbox");
+	const page = parseIri("ap://did:key:z6Mkabc/actor/outbox?cursor=1");
+	deepStrictEqual(hrefs(getReferrerGateways(actor, outbox.id) ?? []), ["https://a.example/", "https://c.example/"]);
+	deepStrictEqual(hrefs(getReferrerGateways(outbox, page) ?? []), ["https://a.example/", "https://c.example/"]);
+	deepStrictEqual(getReferrerGateways(outbox, withGatewayHints(page, [new URL("https://hint.example")])), void 0);
+	deepStrictEqual(getReferrerGateways(outbox, parseIri("ap://did:key:z6Mkdef/notes/1")), void 0);
+	const compatible = {
+		id: new URL("https://a.example/.well-known/apgateway/did:key:z6Mkabc/actor"),
+		gateways: [new URL("https://a.example")]
+	};
+	deepStrictEqual(hrefs(getReferrerGateways(compatible, outbox.id) ?? []), ["https://a.example/"]);
+	deepStrictEqual(getReferrerGateways({}, page), void 0);
+	deepStrictEqual(getReferrerGateways({
+		id: actor.id,
+		gateways: []
+	}, page), void 0);
+});
 test("createSnapshotContextLoader() does not nest released snapshots", async () => {
 	const calls = [];
 	const base = (url) => {

package/dist/tests/{jsonld-cache-DCh2kTs6.mjs → jsonld-cache-BPQmOZWD.mjs}

@@ -1,4 +1,4 @@
-import { _ as parseIri, c as getFe34Origin, d as haveSameIriOrigin, o as formatIri, s as fromCompatibleEf61Id, u as haveSameFe34Origin } from "./url-ClVBNQup.mjs";
+import { _ as parseIri, c as getFe34Origin, d as haveSameIriOrigin, o as formatIri, s as fromCompatibleEf61Id, u as haveSameFe34Origin } from "./url-DMxmp7ZG.mjs";
 import jsonld from "jsonld/dist/jsonld.esm.js";
 //#region src/jsonld.ts
 var jsonld_default = jsonld;

package/dist/tests/{jsonld-cache-CMzevnnN.cjs → jsonld-cache-C07AyNOY.cjs}

@@ -1,5 +1,5 @@
 const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");
-const require_url = require("./url-Ddeuv0sE.cjs");
+const require_url = require("./url-BNakuZ8k.cjs");
 let jsonld_dist_jsonld_esm_js = require("jsonld/dist/jsonld.esm.js");
 jsonld_dist_jsonld_esm_js = require_rolldown_runtime.__toESM(jsonld_dist_jsonld_esm_js, 1);
 //#region src/jsonld.ts

package/dist/tests/jsonld-cache.test.cjs

@@ -1,5 +1,5 @@
-const require_url = require("./url-Ddeuv0sE.cjs");
-const require_jsonld_cache = require("./jsonld-cache-CMzevnnN.cjs");
+const require_url = require("./url-BNakuZ8k.cjs");
+const require_jsonld_cache = require("./jsonld-cache-C07AyNOY.cjs");
 let node_test = require("node:test");
 let node_assert = require("node:assert");
 //#region src/jsonld-cache.test.ts

package/dist/tests/jsonld-cache.test.mjs

@@ -1,5 +1,5 @@
-import { _ as parseIri } from "./url-ClVBNQup.mjs";
-import { a as isTrustedIriOrigin, i as getPortableActorGateways, l as jsonld_default, o as normalizeJsonLdIris, r as getJsonLdContext, t as compactJsonLdCache } from "./jsonld-cache-DCh2kTs6.mjs";
+import { _ as parseIri } from "./url-DMxmp7ZG.mjs";
+import { a as isTrustedIriOrigin, i as getPortableActorGateways, l as jsonld_default, o as normalizeJsonLdIris, r as getJsonLdContext, t as compactJsonLdCache } from "./jsonld-cache-BPQmOZWD.mjs";
 import { test } from "node:test";
 import { deepStrictEqual, ok, strictEqual } from "node:assert";
 //#region src/jsonld-cache.test.ts

package/dist/tests/portable-dereference-BNXtgg5U.cjs

@@ -0,0 +1,278 @@
+const require_contexts = require("./contexts-DizzBjz4.cjs");
+const require_url = require("./url-BNakuZ8k.cjs");
+const require_jsonld_cache = require("./jsonld-cache-C07AyNOY.cjs");
+let _logtape_logtape = require("@logtape/logtape");
+require("@opentelemetry/api");
+//#region src/internal/portable-dereference.ts
+const logger = (0, _logtape_logtape.getLogger)([
+	"fedify",
+	"vocab",
+	"gateway"
+]);
+/**
+* The maximum number of `@gateway` location hints to try for one reference.
+* Hints come from possibly untrusted documents, so they are bounded to keep
+* a single accessor call from fanning out to many servers.
+*/
+const MAX_GATEWAY_HINTS = 5;
+const BASELINE_CONTEXT_URLS = /* @__PURE__ */ new Set([
+	"https://w3id.org/identity/v1",
+	"https://www.w3.org/ns/activitystreams",
+	"https://w3id.org/security/v1",
+	"https://w3id.org/security/data-integrity/v1"
+]);
+const provenances = /* @__PURE__ */ new WeakMap();
+function getObjectId(object) {
+	if (object == null || typeof object !== "object" || !("id" in object)) return null;
+	const id = object.id;
+	return id instanceof URL ? id : null;
+}
+/**
+* Checks whether a vocabulary object is part of a chain of portable objects,
+* i.e., whether it has a portable ID, has an FEP-ef61 compatible identifier
+* as its ID (even a malformed one, so that it fails closed), or was obtained
+* from a portable object.  Accessors of such objects dereference references
+* as portable objects.
+*
+* Being part of a chain does not mean that the object itself is verified:
+* an object parsed from arbitrary JSON-LD is in a chain just because of its
+* ID.  Only {@link dereferencePortableIri} records that an object was
+* accepted by a verifier.
+*
+* @internal Technically exported for generated vocabulary classes, but not
+* part of the public API contract.  This is not considered public API for
+* Semantic Versioning decisions.
+*/
+function isInPortableChain(object) {
+	if (provenances.has(object)) return true;
+	const id = getObjectId(object);
+	return id != null && (isPortableIri(id) || isCompatibleEf61Iri(id));
+}
+/**
+* Checks whether a URL is an FEP-ef61 compatible identifier, i.e., an HTTP(S)
+* URL under a gateway's `/.well-known/apgateway/` path that stands for
+* a portable object.  Malformed compatible identifiers count as compatible
+* identifiers too.
+*
+* @internal Technically exported for generated vocabulary classes, but not
+* part of the public API contract.  This is not considered public API for
+* Semantic Versioning decisions.
+*/
+function isCompatibleEf61Iri(url) {
+	try {
+		return require_url.fromCompatibleEf61Id(url) != null;
+	} catch (error) {
+		if (error instanceof TypeError) return true;
+		throw error;
+	}
+}
+/**
+* Records that a vocabulary object returned by a property accessor was
+* obtained through the given property of a portable object, so that later
+* dereferences from it can tell where it came from.  Nothing is recorded if
+* the parent is not in a portable chain, or if the child already has its
+* provenance.
+*
+* @internal Technically exported for generated vocabulary classes, but not
+* part of the public API contract.  This is not considered public API for
+* Semantic Versioning decisions.
+*/
+function recordPortableReferrer(parent, child, property) {
+	if (child == null || typeof child !== "object") return;
+	if (provenances.has(child) || !isInPortableChain(parent)) return;
+	provenances.set(child, { referrer: {
+		object: parent,
+		property
+	} });
+}
+/**
+* Checks whether a URL is an FEP-ef61 portable ActivityPub IRI.
+*
+* @internal Technically exported for generated vocabulary classes, but not
+* part of the public API contract.  This is not considered public API for
+* Semantic Versioning decisions.
+*/
+function isPortableIri(url) {
+	return url.protocol === "ap+ef61:" || url.protocol === "ap:";
+}
+/**
+* Picks the ordered list of FEP-ef61 gateways to fetch a portable IRI from.
+*
+* If `gateways` is given, it is used as is (even when empty), and `@gateway`
+* location hints in the IRI are ignored.  Otherwise, up to
+* {@link MAX_GATEWAY_HINTS} valid `@gateway` hints are used.  Duplicate
+* gateways are dropped in both cases.
+*
+* @throws {TypeError} If an explicit gateway is not an HTTP(S) origin.
+* @internal
+*/
+function getPortableGatewayCandidates(url, gateways) {
+	const candidates = [];
+	const seen = /* @__PURE__ */ new Set();
+	const add = (gateway) => {
+		if (seen.has(gateway.href)) return;
+		seen.add(gateway.href);
+		candidates.push(gateway);
+	};
+	if (gateways != null) {
+		for (const gateway of gateways) {
+			const parsed = require_url.parseGatewayOrigin(gateway);
+			if (parsed == null) throw new TypeError("FEP-ef61 gateways must be HTTP(S) origins with no credentials, path, query, or fragment: " + String(gateway));
+			add(parsed);
+		}
+		return candidates;
+	}
+	for (const hint of new URLSearchParams(url.search).getAll(require_url.GATEWAY_HINT_PARAMETER)) {
+		if (candidates.length >= MAX_GATEWAY_HINTS) break;
+		const parsed = require_url.parseGatewayOrigin(hint);
+		if (parsed == null) {
+			logger.debug("Ignoring an invalid FEP-ef61 gateway hint {hint} in {url}.", {
+				hint,
+				url: require_url.formatIri(url)
+			});
+			continue;
+		}
+		add(parsed);
+	}
+	return candidates;
+}
+/**
+* Gets the gateways through which a portable reference without location hints
+* can be dereferenced, from the portable actor that the reference belongs to.
+*
+* The references in a portable actor's own document, such as its `outbox`,
+* usually have no `@gateway` hints, as they are not needed there, since
+* the actor's `gateways` already tells where to retrieve them.  So this walks
+* from the object whose property is being dereferenced up through the objects
+* it was obtained from, e.g., from a collection page to the collection and
+* then to the actor, and returns the `gateways` of the first object that has
+* any, but only if that object has the same DID as the reference.  The
+* gateways only tell where to look; whatever they serve is still verified.
+*
+* @param object The object whose property is being dereferenced.
+* @param url The portable IRI to dereference.
+* @returns Up to {@link MAX_GATEWAY_HINTS} valid gateways, or `undefined` if
+*          the IRI has valid `@gateway` hints or no such object is found.
+* @internal Technically exported for generated vocabulary classes, but not
+* part of the public API contract.  This is not considered public API for
+* Semantic Versioning decisions.
+*/
+function getReferrerGateways(object, url) {
+	if (getPortableGatewayCandidates(url).length > 0) return void 0;
+	const visited = /* @__PURE__ */ new Set();
+	let current = object;
+	while (current != null && !visited.has(current)) {
+		visited.add(current);
+		const gateways = "gateways" in current ? current.gateways : void 0;
+		if (Array.isArray(gateways) && gateways.length > 0) {
+			const id = getObjectId(current);
+			const portableId = id == null ? null : isPortableIri(id) ? id : getCompatibleEf61Target(id);
+			if (portableId == null || !require_url.haveSameFe34Origin(portableId, url)) return;
+			const candidates = [];
+			for (const gateway of gateways) {
+				if (candidates.length >= MAX_GATEWAY_HINTS) break;
+				if (typeof gateway !== "string" && !(gateway instanceof URL)) continue;
+				const parsed = require_url.parseGatewayOrigin(gateway);
+				if (parsed == null) continue;
+				if (candidates.some((c) => c.href === parsed.href)) continue;
+				candidates.push(parsed);
+			}
+			return candidates.length > 0 ? candidates : void 0;
+		}
+		current = provenances.get(current)?.referrer?.object;
+	}
+}
+function getCompatibleEf61Target(id) {
+	try {
+		return require_url.fromCompatibleEf61Id(id);
+	} catch {
+		return null;
+	}
+}
+/**
+* Creates a context loader that returns the same context documents for the
+* whole dereference operation, so that the identity check, the proof
+* verifier, and the parser interpret the fetched document identically even
+* if the underlying loader is nondeterministic.  Failed loads are not
+* remembered, so a transient failure does not affect the next gateway.
+*
+* The parsed object keeps the loader for its own later dereferences, so
+* `release()` turns it into a plain pass-through to the underlying loader
+* once the operation is over.
+*
+* @internal Technically exported for generated vocabulary classes, but not
+* part of the public API contract.  This is not considered public API for
+* Semantic Versioning decisions.
+*/
+function createSnapshotContextLoader(contextLoader, suppressError) {
+	contextLoader = require_jsonld_cache.unwrapReleasedDocumentLoader(contextLoader);
+	const cache = /* @__PURE__ */ new Map();
+	let released = false;
+	const release = () => {
+		released = true;
+		state.released = true;
+		cache.clear();
+	};
+	const loader = async (url, options) => {
+		if (released) return await contextLoader(url, options);
+		const key = URL.canParse(url) ? new URL(url).href : url;
+		if (BASELINE_CONTEXT_URLS.has(key)) return {
+			contextUrl: null,
+			document: structuredClone(require_contexts.preloadedContexts[key]),
+			documentUrl: key
+		};
+		let promise = cache.get(key);
+		if (promise == null) {
+			const loading = contextLoader(url, suppressError ? {
+				...options,
+				suppressError: true
+			} : options).then((document) => structuredClone(document));
+			promise = loading;
+			cache.set(key, loading);
+			loading.catch(() => {
+				if (cache.get(key) === loading) cache.delete(key);
+			});
+		}
+		return structuredClone(await promise);
+	};
+	const state = {
+		base: contextLoader,
+		released: false
+	};
+	require_jsonld_cache.registerDocumentLoaderWrapper(loader, state);
+	return {
+		loader,
+		release
+	};
+}
+//#endregion
+Object.defineProperty(exports, "createSnapshotContextLoader", {
+	enumerable: true,
+	get: function() {
+		return createSnapshotContextLoader;
+	}
+});
+Object.defineProperty(exports, "getPortableGatewayCandidates", {
+	enumerable: true,
+	get: function() {
+		return getPortableGatewayCandidates;
+	}
+});
+Object.defineProperty(exports, "getReferrerGateways", {
+	enumerable: true,
+	get: function() {
+		return getReferrerGateways;
+	}
+});
+Object.defineProperty(exports, "isPortableIri", {
+	enumerable: true,
+	get: function() {
+		return isPortableIri;
+	}
+});
+Object.defineProperty(exports, "recordPortableReferrer", {
+	enumerable: true,
+	get: function() {
+		return recordPortableReferrer;
+	}
+});