@fedify/vocab-runtime 2.4.0-pr.936.41 → 2.4.0

package/dist/tests/portable-media.test.mjs

@@ -0,0 +1,223 @@
+import { n as createHashlink, t as computeDigestMultibase } from "./digest-COC7xDiQ.mjs";
+import { t as fetchPortableMedia } from "./portable-media-DRSGBORB.mjs";
+import { deepStrictEqual, equal, rejects } from "node:assert/strict";
+import { test } from "node:test";
+import { createServer } from "node:http";
+//#region src/portable-media.test.ts
+const bytes = new TextEncoder().encode("portable image");
+const digest = "zQmU2Jds4B2J83K7CrYC34CEJdB6vCLyqkM2cgBxYeaNWTA";
+const hashlink = createHashlink(digest);
+const networkTest = (name, run) => test(name, async (t) => {
+	if ("Deno" in globalThis && (await Deno.permissions.query({ name: "net" })).state !== "granted") {
+		t.skip("Requires network permission for a local test server.");
+		return;
+	}
+	await run();
+});
+async function withServers(handlers, run) {
+	const servers = handlers.map((handler) => createServer(async (request, reply) => {
+		const result = handler(request.url ?? "/");
+		if (result == null) return;
+		reply.writeHead(result.status, Object.fromEntries(result.headers));
+		reply.end(new Uint8Array(await result.arrayBuffer()));
+	}));
+	try {
+		const origins = [];
+		for (const server of servers) {
+			await new Promise((resolve, reject) => {
+				server.once("error", reject);
+				server.listen(0, "127.0.0.1", resolve);
+			});
+			const address = server.address();
+			if (address == null || typeof address === "string") throw new Error("Server did not bind a TCP port.");
+			origins.push(`http://127.0.0.1:${address.port}`);
+		}
+		await run(origins);
+	} finally {
+		await Promise.all(servers.map(async (server) => {
+			server.closeAllConnections();
+			await new Promise((resolve) => server.close(() => resolve()));
+		}));
+	}
+}
+networkTest("fetchPortableMedia() accepts Link, Image, and Document", async () => {
+	const link = {
+		href: new URL(hashlink),
+		digestMultibase: digest
+	};
+	const image = {
+		url: new URL(hashlink),
+		digestMultibase: digest
+	};
+	const document = { url: {
+		href: new URL(hashlink),
+		digestMultibase: digest
+	} };
+	const requested = [];
+	await withServers([(path) => {
+		requested.push(path);
+		return new Response(bytes);
+	}], async ([gateway]) => {
+		for (const media of [
+			link,
+			image,
+			document
+		]) equal(await (await fetchPortableMedia(media, {
+			gateways: [gateway],
+			allowPrivateAddress: true
+		})).text(), "portable image");
+	});
+	deepStrictEqual(requested, Array(3).fill(`/.well-known/apgateway/${hashlink}`));
+});
+networkTest("fetchPortableMedia() falls back on status and digest mismatch", async () => {
+	const requested = [];
+	await withServers([
+		(path) => {
+			requested.push(`first:${path}`);
+			return new Response(null, { status: 503 });
+		},
+		(path) => {
+			requested.push(`second:${path}`);
+			return new Response("wrong bytes");
+		},
+		(path) => {
+			requested.push(`third:${path}`);
+			return new Response(bytes, { headers: {
+				"Content-Type": "image/png",
+				"Set-Cookie": "secret=1"
+			} });
+		}
+	], async (gateways) => {
+		const result = await fetchPortableMedia({
+			url: new URL(hashlink),
+			digestMultibase: digest
+		}, {
+			gateways,
+			allowPrivateAddress: true
+		});
+		equal(await result.text(), "portable image");
+		equal(result.headers.get("Content-Type"), "image/png");
+		equal(result.headers.get("Set-Cookie"), null);
+	});
+	deepStrictEqual(requested.map((r) => r.split(":")[0]), [
+		"first",
+		"second",
+		"third"
+	]);
+});
+networkTest("fetchPortableMedia() verifies direct HTTP media", async () => {
+	const wrongDigest = await computeDigestMultibase(/* @__PURE__ */ new Uint8Array());
+	await withServers([() => new Response(bytes)], async ([origin]) => {
+		equal(await (await fetchPortableMedia(`${origin}/a`, {
+			digestMultibase: digest,
+			allowPrivateAddress: true
+		})).text(), "portable image");
+		await rejects(() => fetchPortableMedia(`${origin}/a`, {
+			digestMultibase: wrongDigest,
+			allowPrivateAddress: true
+		}), /digest does not match/);
+	});
+});
+test("fetchPortableMedia() rejects invalid references before fetching", async () => {
+	const wrongDigest = await computeDigestMultibase(/* @__PURE__ */ new Uint8Array());
+	await rejects(() => fetchPortableMedia({ url: new URL(hashlink) }), /requires digestMultibase/);
+	await rejects(() => fetchPortableMedia({
+		url: new URL(hashlink),
+		digestMultibase: digest
+	}), /requires at least one gateway/);
+	await rejects(() => fetchPortableMedia({
+		url: new URL(hashlink),
+		digestMultibase: wrongDigest
+	}, { gateways: ["https://example.com"] }), /disagree/);
+	await rejects(() => fetchPortableMedia({
+		url: new URL("hl:invalid"),
+		digestMultibase: digest
+	}, { gateways: ["https://example.com"] }), TypeError);
+	await rejects(() => fetchPortableMedia({
+		url: {
+			href: new URL(hashlink),
+			digestMultibase: wrongDigest
+		},
+		digestMultibase: digest
+	}, { gateways: ["https://example.com"] }), /digests disagree/);
+	await rejects(() => fetchPortableMedia("file:///tmp/media", { digestMultibase: digest }), TypeError);
+});
+networkTest("fetchPortableMedia() bounds response bytes", async () => {
+	await withServers([() => new Response(bytes)], async ([origin]) => {
+		await rejects(() => fetchPortableMedia(`${origin}/media`, {
+			digestMultibase: digest,
+			maxBytes: bytes.length - 1,
+			allowPrivateAddress: true
+		}), /exceeds the limit/);
+	});
+	await rejects(() => fetchPortableMedia("https://example.com/media", {
+		digestMultibase: digest,
+		maxBytes: 0
+	}), RangeError);
+});
+test("fetchPortableMedia() rejects private media and gateways", async () => {
+	await rejects(() => fetchPortableMedia("http://127.0.0.1/media", { digestMultibase: digest }), /private address/);
+	await rejects(() => fetchPortableMedia({
+		url: new URL(hashlink),
+		digestMultibase: digest
+	}, { gateways: ["http://127.0.0.1"] }), /No gateway returned verified portable media/);
+});
+test("fetchPortableMedia() propagates cancellation", async () => {
+	const controller = new AbortController();
+	const reason = /* @__PURE__ */ new Error("cancelled");
+	controller.abort(reason);
+	await rejects(() => fetchPortableMedia({
+		url: new URL(hashlink),
+		digestMultibase: digest
+	}, {
+		gateways: ["https://example.com"],
+		signal: controller.signal
+	}), (error) => error === reason);
+});
+networkTest("fetchPortableMedia() falls back after a gateway timeout", async () => {
+	await withServers([() => void 0, () => new Response(bytes)], async (gateways) => {
+		equal(await (await fetchPortableMedia({
+			url: new URL(hashlink),
+			digestMultibase: digest
+		}, {
+			gateways,
+			allowPrivateAddress: true,
+			gatewayTimeout: 500,
+			timeout: 5e3
+		})).text(), "portable image");
+	});
+});
+networkTest("fetchPortableMedia() applies one overall timeout", async () => {
+	await withServers([() => void 0, () => new Response(bytes)], async (gateways) => {
+		await rejects(() => fetchPortableMedia({
+			url: new URL(hashlink),
+			digestMultibase: digest
+		}, {
+			gateways,
+			allowPrivateAddress: true,
+			gatewayTimeout: 100,
+			timeout: 20
+		}), (error) => error instanceof DOMException && error.name === "TimeoutError");
+	});
+});
+networkTest("fetchPortableMedia() follows a safe redirect", async () => {
+	const requested = [];
+	await withServers([(path) => {
+		requested.push(path);
+		return path === "/media" ? new Response(bytes) : new Response(null, {
+			status: 302,
+			headers: { Location: "/media" }
+		});
+	}], async ([gateway]) => {
+		equal(await (await fetchPortableMedia({
+			url: new URL(hashlink),
+			digestMultibase: digest
+		}, {
+			gateways: [gateway],
+			allowPrivateAddress: true
+		})).text(), "portable image");
+	});
+	deepStrictEqual(requested, [`/.well-known/apgateway/${hashlink}`, "/media"]);
+});
+//#endregion
+export {};

package/dist/tests/portable-workers.test.cjs

@@ -0,0 +1,36 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_url = require("./url-BNakuZ8k.cjs");
+const require_key = require("./key-C-AYkdJJ.cjs");
+const require_digest = require("./digest-3FeH2Y-Q.cjs");
+const require_portable_dereference = require("./portable-dereference-BNXtgg5U.cjs");
+let node_assert_strict = require("node:assert/strict");
+let _fedify_fixture = require("@fedify/fixture");
+//#region src/portable-workers.test.ts
+const portableId = "ap://did:key:z6Mkabc/actor";
+(0, _fedify_fixture.test)("vocab-runtime portable URI formats on Workers", () => {
+	(0, node_assert_strict.equal)(require_url.formatIri(require_url.parseIri(portableId)), "ap+ef61://did:key:z6Mkabc/actor");
+	(0, node_assert_strict.equal)(require_url.canonicalizePortableUri(`${portableId}?@gateway=https%3A%2F%2Fa.example`), "ap+ef61://did:key:z6Mkabc/actor");
+});
+(0, _fedify_fixture.test)("vocab-runtime compatible IDs on Workers", () => {
+	const compatible = require_url.toCompatibleEf61Id(portableId, "https://gw.example");
+	(0, node_assert_strict.equal)(compatible.href, "https://gw.example/.well-known/apgateway/did:key:z6Mkabc/actor");
+	(0, node_assert_strict.equal)(require_url.formatIri(require_url.fromCompatibleEf61Id(compatible)), "ap+ef61://did:key:z6Mkabc/actor");
+});
+(0, _fedify_fixture.test)("vocab-runtime did:key on Workers", async () => {
+	const keys = await crypto.subtle.generateKey("Ed25519", true, ["sign", "verify"]);
+	const imported = await require_key.importDidKey(await require_key.exportDidKey(keys.publicKey));
+	(0, node_assert_strict.deepStrictEqual)(new Uint8Array(await crypto.subtle.exportKey("raw", imported)), new Uint8Array(await crypto.subtle.exportKey("raw", keys.publicKey)));
+});
+(0, _fedify_fixture.test)("vocab-runtime hashlink on Workers", async () => {
+	const bytes = new TextEncoder().encode("portable media");
+	const digest = await require_digest.computeDigestMultibase(bytes);
+	(0, node_assert_strict.equal)(await require_digest.verifyHashlink(bytes, require_digest.createHashlink(digest)), true);
+	(0, node_assert_strict.equal)(await require_digest.verifyHashlink(new TextEncoder().encode("tampered"), require_digest.createHashlink(digest)), false);
+});
+(0, _fedify_fixture.test)("vocab-runtime gateway candidates on Workers", () => {
+	const hinted = require_url.parseIri(`${portableId}?@gateway=https%3A%2F%2Fhint.example`);
+	(0, node_assert_strict.deepStrictEqual)(require_portable_dereference.getPortableGatewayCandidates(hinted, ["https://first.example"]).map((url) => url.href), ["https://first.example/"]);
+	(0, node_assert_strict.deepStrictEqual)(require_portable_dereference.getPortableGatewayCandidates(hinted).map((url) => url.href), ["https://hint.example/"]);
+});
+//#endregion
+exports.testDefinitions = _fedify_fixture.testDefinitions;

package/dist/tests/portable-workers.test.d.cts

@@ -0,0 +1,2 @@
+import { testDefinitions } from "@fedify/fixture";
+export { testDefinitions };

package/dist/tests/portable-workers.test.d.mts

@@ -0,0 +1,2 @@
+import { testDefinitions } from "@fedify/fixture";
+export { testDefinitions };

package/dist/tests/portable-workers.test.mjs

@@ -0,0 +1,35 @@
+import { _ as parseIri, i as canonicalizePortableUri, o as formatIri, s as fromCompatibleEf61Id, y as toCompatibleEf61Id } from "./url-DMxmp7ZG.mjs";
+import { i as importDidKey, t as exportDidKey } from "./key-C2Db_TAJ.mjs";
+import { n as createHashlink, o as verifyHashlink, t as computeDigestMultibase } from "./digest-COC7xDiQ.mjs";
+import { n as getPortableGatewayCandidates } from "./portable-dereference-DRE5bz-l.mjs";
+import { deepStrictEqual, equal } from "node:assert/strict";
+import { test, testDefinitions } from "@fedify/fixture";
+//#region src/portable-workers.test.ts
+const portableId = "ap://did:key:z6Mkabc/actor";
+test("vocab-runtime portable URI formats on Workers", () => {
+	equal(formatIri(parseIri(portableId)), "ap+ef61://did:key:z6Mkabc/actor");
+	equal(canonicalizePortableUri(`${portableId}?@gateway=https%3A%2F%2Fa.example`), "ap+ef61://did:key:z6Mkabc/actor");
+});
+test("vocab-runtime compatible IDs on Workers", () => {
+	const compatible = toCompatibleEf61Id(portableId, "https://gw.example");
+	equal(compatible.href, "https://gw.example/.well-known/apgateway/did:key:z6Mkabc/actor");
+	equal(formatIri(fromCompatibleEf61Id(compatible)), "ap+ef61://did:key:z6Mkabc/actor");
+});
+test("vocab-runtime did:key on Workers", async () => {
+	const keys = await crypto.subtle.generateKey("Ed25519", true, ["sign", "verify"]);
+	const imported = await importDidKey(await exportDidKey(keys.publicKey));
+	deepStrictEqual(new Uint8Array(await crypto.subtle.exportKey("raw", imported)), new Uint8Array(await crypto.subtle.exportKey("raw", keys.publicKey)));
+});
+test("vocab-runtime hashlink on Workers", async () => {
+	const bytes = new TextEncoder().encode("portable media");
+	const digest = await computeDigestMultibase(bytes);
+	equal(await verifyHashlink(bytes, createHashlink(digest)), true);
+	equal(await verifyHashlink(new TextEncoder().encode("tampered"), createHashlink(digest)), false);
+});
+test("vocab-runtime gateway candidates on Workers", () => {
+	const hinted = parseIri(`${portableId}?@gateway=https%3A%2F%2Fhint.example`);
+	deepStrictEqual(getPortableGatewayCandidates(hinted, ["https://first.example"]).map((url) => url.href), ["https://first.example/"]);
+	deepStrictEqual(getPortableGatewayCandidates(hinted).map((url) => url.href), ["https://hint.example/"]);
+});
+//#endregion
+export { testDefinitions };

package/dist/tests/{request-uk51rkhO.cjs → request-8vPWtV1-.cjs}

@@ -1,9 +1,9 @@
-const require_chunk = require("./chunk-C2EiDwsr.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");
 let node_process = require("node:process");
-node_process = require_chunk.__toESM(node_process, 1);
+node_process = require_rolldown_runtime.__toESM(node_process, 1);
 //#region deno.json
 var name = "@fedify/vocab-runtime";
-var version = "2.4.0-pr.936.41+59c7432c";
+var version = "2.4.0";
 //#endregion
 //#region src/request.ts
 /**
@@ -33,6 +33,12 @@ var FetchError = class extends Error {
 	}
 };
 /**
+* The `Accept` header value for fetching ActivityPub objects.  ActivityPub
+* and FEP-ef61 gateways require the ActivityStreams profile on the JSON-LD
+* media type.
+*/
+const ACTIVITYPUB_ACCEPT = "application/activity+json, application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"";
+/**
 * Creates a request for the given URL.
 * @param url The URL to create the request for.
 * @param options The options for the request.
@@ -42,7 +48,7 @@ var FetchError = class extends Error {
 function createActivityPubRequest(url, options = {}) {
 	return new Request(url, {
 		headers: {
-			Accept: "application/activity+json, application/ld+json",
+			Accept: ACTIVITYPUB_ACCEPT,
 			"User-Agent": typeof options.userAgent === "string" ? options.userAgent : getUserAgent(options.userAgent)
 		},
 		redirect: "manual"

package/dist/tests/{request-C8CaGwtt.mjs → request-DRaOaTqD.mjs}

@@ -1,7 +1,7 @@
 import process from "node:process";
 //#region deno.json
 var name = "@fedify/vocab-runtime";
-var version = "2.4.0-pr.936.41+59c7432c";
+var version = "2.4.0";
 //#endregion
 //#region src/request.ts
 /**
@@ -31,6 +31,12 @@ var FetchError = class extends Error {
 	}
 };
 /**
+* The `Accept` header value for fetching ActivityPub objects.  ActivityPub
+* and FEP-ef61 gateways require the ActivityStreams profile on the JSON-LD
+* media type.
+*/
+const ACTIVITYPUB_ACCEPT = "application/activity+json, application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"";
+/**
 * Creates a request for the given URL.
 * @param url The URL to create the request for.
 * @param options The options for the request.
@@ -40,7 +46,7 @@ var FetchError = class extends Error {
 function createActivityPubRequest(url, options = {}) {
 	return new Request(url, {
 		headers: {
-			Accept: "application/activity+json, application/ld+json",
+			Accept: ACTIVITYPUB_ACCEPT,
 			"User-Agent": typeof options.userAgent === "string" ? options.userAgent : getUserAgent(options.userAgent)
 		},
 		redirect: "manual"

package/dist/tests/request.test.cjs

@@ -1,9 +1,9 @@
-const require_chunk = require("./chunk-C2EiDwsr.cjs");
-const require_request = require("./request-uk51rkhO.cjs");
-let node_assert = require("node:assert");
+const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");
+const require_request = require("./request-8vPWtV1-.cjs");
 let node_test = require("node:test");
 let node_process = require("node:process");
-node_process = require_chunk.__toESM(node_process, 1);
+node_process = require_rolldown_runtime.__toESM(node_process, 1);
+let node_assert = require("node:assert");
 //#region src/request.test.ts
 (0, node_test.test)("getUserAgent()", () => {
 	if ("Deno" in globalThis) {
@@ -40,4 +40,7 @@ node_process = require_chunk.__toESM(node_process, 1);
 		}), `MyApp/1.0.0 (Fedify/${require_request.version}; Node.js/${node_process.default.versions.node}; +https://example.com/)`);
 	}
 });
+(0, node_test.test)("createActivityPubRequest() asks for the ActivityStreams profile", () => {
+	(0, node_assert.deepStrictEqual)(require_request.createActivityPubRequest("https://example.com/object").headers.get("Accept"), "application/activity+json, application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"");
+});
 //#endregion

package/dist/tests/request.test.mjs

@@ -1,7 +1,7 @@
-import { o as version, r as getUserAgent } from "./request-C8CaGwtt.mjs";
-import { deepStrictEqual } from "node:assert";
+import { n as createActivityPubRequest, o as version, r as getUserAgent } from "./request-DRaOaTqD.mjs";
 import { test } from "node:test";
 import process from "node:process";
+import { deepStrictEqual } from "node:assert";
 //#region src/request.test.ts
 test("getUserAgent()", () => {
 	if ("Deno" in globalThis) {
@@ -38,5 +38,8 @@ test("getUserAgent()", () => {
 		}), `MyApp/1.0.0 (Fedify/${version}; Node.js/${process.versions.node}; +https://example.com/)`);
 	}
 });
+test("createActivityPubRequest() asks for the ActivityStreams profile", () => {
+	deepStrictEqual(createActivityPubRequest("https://example.com/object").headers.get("Accept"), "application/activity+json, application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"");
+});
 //#endregion
 export {};