@fedify/vocab-runtime 2.5.0-dev.2504 → 2.5.0-dev.2516

package/deno.json

@@ -1,6 +1,6 @@
 {
   "name": "@fedify/vocab-runtime",
-  "version": "2.5.0-dev.2504+fdeb138d",
+  "version": "2.5.0-dev.2516+42d3ed0b",
   "license": "MIT",
   "exports": {
     ".": "./src/mod.ts",

package/dist/internal/portable-dereference.cjs

@@ -126,6 +126,26 @@ function copyPortableProvenance(from, to) {
 	});
 }
 /**
+* Reconnects an existing historical referrer to its independent graph copy.
+* Does not create provenance or add verification or collection-context evidence.
+* An unresolved referrer remains external history. Like the other provenance
+* helpers, this is for generated vocabulary code, not a public trust API.
+* @internal
+*/
+function retargetPortableReferrer(copy, resolve) {
+	const provenance = provenances.get(copy);
+	if (provenance?.referrer == null) return;
+	const object = resolve(provenance.referrer.object);
+	if (object == null) return;
+	provenances.set(copy, {
+		...provenance,
+		referrer: {
+			...provenance.referrer,
+			object
+		}
+	});
+}
+/**
 * Recognizes an FEP-ef61 compatible identifier to dereference as a portable
 * object.
 *
@@ -783,4 +803,5 @@ exports.mustDereferencePortableObject = mustDereferencePortableObject;
 exports.parseCompatibleEf61Reference = parseCompatibleEf61Reference;
 exports.recordPortableReferrer = recordPortableReferrer;
 exports.rejectMalformedCompatibleReference = rejectMalformedCompatibleReference;
+exports.retargetPortableReferrer = retargetPortableReferrer;
 exports.warnUnverifiableEmbeddedObject = warnUnverifiableEmbeddedObject;

package/dist/internal/portable-dereference.d.cts

@@ -77,6 +77,14 @@ declare function recordPortableReferrer(parent: object, child: unknown, property
 */
 declare function copyPortableProvenance(from: object, to: object): void;
 /**
+* Reconnects an existing historical referrer to its independent graph copy.
+* Does not create provenance or add verification or collection-context evidence.
+* An unresolved referrer remains external history. Like the other provenance
+* helpers, this is for generated vocabulary code, not a public trust API.
+* @internal
+*/
+declare function retargetPortableReferrer(copy: object, resolve: (original: object) => object | undefined): void;
+/**
 * Recognizes an FEP-ef61 compatible identifier to dereference as a portable
 * object.
 *
@@ -406,4 +414,4 @@ declare function dereferencePortableIri<T extends {
   id: URL | null;
 }>(url: URL, options: DereferencePortableIriOptions<T>): Promise<T | null>;
 //#endregion
-export { DereferenceCandidate, DereferenceFailure, DereferenceObserver, DereferencePortableIriOptions, PortableObjectRejectedError, PortableReferrerLink, PortableResponseClaim, acceptCandidate, copyPortableProvenance, createSnapshotContextLoader, dereferencePortableIri, getPortableGatewayCandidates, getPortableResponseClaim, getReferrerGateways, isCompatibleEf61Iri, isInPortableChain, isPortableIri, isPortableMode, isUnsecuredPortableObject, isUnverifiedPortableClaim, markUnverifiedPortableClaim, mustDereferencePortableObject, parseCompatibleEf61Reference, recordPortableReferrer, rejectMalformedCompatibleReference, warnUnverifiableEmbeddedObject };
+export { DereferenceCandidate, DereferenceFailure, DereferenceObserver, DereferencePortableIriOptions, PortableObjectRejectedError, PortableReferrerLink, PortableResponseClaim, acceptCandidate, copyPortableProvenance, createSnapshotContextLoader, dereferencePortableIri, getPortableGatewayCandidates, getPortableResponseClaim, getReferrerGateways, isCompatibleEf61Iri, isInPortableChain, isPortableIri, isPortableMode, isUnsecuredPortableObject, isUnverifiedPortableClaim, markUnverifiedPortableClaim, mustDereferencePortableObject, parseCompatibleEf61Reference, recordPortableReferrer, rejectMalformedCompatibleReference, retargetPortableReferrer, warnUnverifiableEmbeddedObject };

package/dist/internal/portable-dereference.d.ts

@@ -77,6 +77,14 @@ declare function recordPortableReferrer(parent: object, child: unknown, property
 */
 declare function copyPortableProvenance(from: object, to: object): void;
 /**
+* Reconnects an existing historical referrer to its independent graph copy.
+* Does not create provenance or add verification or collection-context evidence.
+* An unresolved referrer remains external history. Like the other provenance
+* helpers, this is for generated vocabulary code, not a public trust API.
+* @internal
+*/
+declare function retargetPortableReferrer(copy: object, resolve: (original: object) => object | undefined): void;
+/**
 * Recognizes an FEP-ef61 compatible identifier to dereference as a portable
 * object.
 *
@@ -406,4 +414,4 @@ declare function dereferencePortableIri<T extends {
   id: URL | null;
 }>(url: URL, options: DereferencePortableIriOptions<T>): Promise<T | null>;
 //#endregion
-export { DereferenceCandidate, DereferenceFailure, DereferenceObserver, DereferencePortableIriOptions, PortableObjectRejectedError, PortableReferrerLink, PortableResponseClaim, acceptCandidate, copyPortableProvenance, createSnapshotContextLoader, dereferencePortableIri, getPortableGatewayCandidates, getPortableResponseClaim, getReferrerGateways, isCompatibleEf61Iri, isInPortableChain, isPortableIri, isPortableMode, isUnsecuredPortableObject, isUnverifiedPortableClaim, markUnverifiedPortableClaim, mustDereferencePortableObject, parseCompatibleEf61Reference, recordPortableReferrer, rejectMalformedCompatibleReference, warnUnverifiableEmbeddedObject };
+export { DereferenceCandidate, DereferenceFailure, DereferenceObserver, DereferencePortableIriOptions, PortableObjectRejectedError, PortableReferrerLink, PortableResponseClaim, acceptCandidate, copyPortableProvenance, createSnapshotContextLoader, dereferencePortableIri, getPortableGatewayCandidates, getPortableResponseClaim, getReferrerGateways, isCompatibleEf61Iri, isInPortableChain, isPortableIri, isPortableMode, isUnsecuredPortableObject, isUnverifiedPortableClaim, markUnverifiedPortableClaim, mustDereferencePortableObject, parseCompatibleEf61Reference, recordPortableReferrer, rejectMalformedCompatibleReference, retargetPortableReferrer, warnUnverifiableEmbeddedObject };

package/dist/internal/portable-dereference.js

@@ -125,6 +125,26 @@ function copyPortableProvenance(from, to) {
 	});
 }
 /**
+* Reconnects an existing historical referrer to its independent graph copy.
+* Does not create provenance or add verification or collection-context evidence.
+* An unresolved referrer remains external history. Like the other provenance
+* helpers, this is for generated vocabulary code, not a public trust API.
+* @internal
+*/
+function retargetPortableReferrer(copy, resolve) {
+	const provenance = provenances.get(copy);
+	if (provenance?.referrer == null) return;
+	const object = resolve(provenance.referrer.object);
+	if (object == null) return;
+	provenances.set(copy, {
+		...provenance,
+		referrer: {
+			...provenance.referrer,
+			object
+		}
+	});
+}
+/**
 * Recognizes an FEP-ef61 compatible identifier to dereference as a portable
 * object.
 *
@@ -763,4 +783,4 @@ async function checkPortableObjectId(document, expectedId, contextLoader) {
 	if (actualId !== expectedId) throw new PortableObjectRejection("its @id ({objectId}) does not match the requested portable ID", { objectId: id });
 }
 //#endregion
-export { PortableObjectRejectedError, acceptCandidate, copyPortableProvenance, createSnapshotContextLoader, dereferencePortableIri, getPortableGatewayCandidates, getPortableResponseClaim, getReferrerGateways, isCompatibleEf61Iri, isInPortableChain, isPortableIri, isPortableMode, isUnsecuredPortableObject, isUnverifiedPortableClaim, markUnverifiedPortableClaim, mustDereferencePortableObject, parseCompatibleEf61Reference, recordPortableReferrer, rejectMalformedCompatibleReference, warnUnverifiableEmbeddedObject };
+export { PortableObjectRejectedError, acceptCandidate, copyPortableProvenance, createSnapshotContextLoader, dereferencePortableIri, getPortableGatewayCandidates, getPortableResponseClaim, getReferrerGateways, isCompatibleEf61Iri, isInPortableChain, isPortableIri, isPortableMode, isUnsecuredPortableObject, isUnverifiedPortableClaim, markUnverifiedPortableClaim, mustDereferencePortableObject, parseCompatibleEf61Reference, recordPortableReferrer, rejectMalformedCompatibleReference, retargetPortableReferrer, warnUnverifiableEmbeddedObject };

package/dist/mod.cjs

@@ -17,7 +17,7 @@ let _multiformats_base_x = require("@multiformats/base-x");
 _multiformats_base_x = require_rolldown_runtime.__toESM(_multiformats_base_x, 1);
 //#region deno.json
 var name = "@fedify/vocab-runtime";
-var version = "2.5.0-dev.2504+fdeb138d";
+var version = "2.5.0-dev.2516+42d3ed0b";
 //#endregion
 //#region src/request.ts
 /**

package/dist/mod.js

@@ -13,7 +13,7 @@ import { PublicKeyInfo } from "pkijs";
 import baseX from "@multiformats/base-x";
 //#region deno.json
 var name = "@fedify/vocab-runtime";
-var version = "2.5.0-dev.2504+fdeb138d";
+var version = "2.5.0-dev.2516+42d3ed0b";
 //#endregion
 //#region src/request.ts
 /**

package/dist/tests/{body-CcniBN7K.mjs → body-CctXju8j.mjs}

@@ -1,4 +1,4 @@
-import { t as FetchError } from "./request-Di6nD5PF.mjs";
+import { t as FetchError } from "./request-BhF-wf8-.mjs";
 import { getLogger } from "@logtape/logtape";
 //#region src/body.ts
 /** Decoded JSON body limit: 16 MiB.  @internal */

package/dist/tests/{body-VMwvvRA0.cjs → body-CrrCDpCd.cjs}

@@ -1,4 +1,4 @@
-const require_request = require("./request-6xMPqPD2.cjs");
+const require_request = require("./request-mwbvgtpO.cjs");
 let _logtape_logtape = require("@logtape/logtape");
 //#region src/body.ts
 /** Decoded JSON body limit: 16 MiB.  @internal */

package/dist/tests/body.test.cjs

@@ -1,4 +1,4 @@
-const require_body = require("./body-VMwvvRA0.cjs");
+const require_body = require("./body-CrrCDpCd.cjs");
 let node_assert_strict = require("node:assert/strict");
 let node_test = require("node:test");
 let node_zlib = require("node:zlib");

package/dist/tests/body.test.mjs

@@ -1,4 +1,4 @@
-import { i as readBoundedText, t as BodyTooLargeError } from "./body-CcniBN7K.mjs";
+import { i as readBoundedText, t as BodyTooLargeError } from "./body-CctXju8j.mjs";
 import { deepStrictEqual, ok, rejects } from "node:assert/strict";
 import { test } from "node:test";
 import { gunzipSync, gzipSync } from "node:zlib";

package/dist/tests/decimal.test.cjs

@@ -1,12 +1,12 @@
-require("./request-6xMPqPD2.cjs");
+require("./request-mwbvgtpO.cjs");
 require("./url-Bdj-rTcC.cjs");
-require("./docloader-5PO9t-vm.cjs");
+require("./docloader-C3uxn-K_.cjs");
 require("./key-C-AYkdJJ.cjs");
 require("./multibase-B5Mea7Ip.cjs");
 require("./digest-3FeH2Y-Q.cjs");
 require("./langtag-DASCPgl3.cjs");
 require("./langstr-h89Kjekh.cjs");
-require("./portable-media-DqDbPEAw.cjs");
+require("./portable-media-DLuaIpwD.cjs");
 let node_test = require("node:test");
 let node_assert = require("node:assert");
 //#region src/decimal.ts

package/dist/tests/decimal.test.mjs

@@ -1,12 +1,12 @@
-import "./request-Di6nD5PF.mjs";
+import "./request-BhF-wf8-.mjs";
 import "./url-COj5Q8mb.mjs";
-import "./docloader-U9w8e8Ku.mjs";
+import "./docloader-DidTL8Ep.mjs";
 import "./key-C2Db_TAJ.mjs";
 import "./multibase-BPnF_L4e.mjs";
 import "./digest-COC7xDiQ.mjs";
 import "./langtag-CD3zHKPN.mjs";
 import "./langstr-Dw8IBDZl.mjs";
-import "./portable-media-CCdoXPVr.mjs";
+import "./portable-media-BydVWZrJ.mjs";
 import { test } from "node:test";
 import { deepStrictEqual, throws } from "node:assert";
 //#region src/decimal.ts

package/dist/tests/{docloader-5PO9t-vm.cjs → docloader-C3uxn-K_.cjs}

@@ -1,6 +1,6 @@
-const require_request = require("./request-6xMPqPD2.cjs");
+const require_request = require("./request-mwbvgtpO.cjs");
 const require_url = require("./url-Bdj-rTcC.cjs");
-const require_body = require("./body-VMwvvRA0.cjs");
+const require_body = require("./body-CrrCDpCd.cjs");
 const require_contexts = require("./contexts-C9Lj11SC.cjs");
 const require_link = require("./link-DlKm8bEr.cjs");
 const require_public_fetch = require("./public-fetch-BGj5pzUD.cjs");

package/dist/tests/{docloader-U9w8e8Ku.mjs → docloader-DidTL8Ep.mjs}

@@ -1,6 +1,6 @@
-import { a as logRequest, n as createActivityPubRequest, o as name, s as version, t as FetchError } from "./request-Di6nD5PF.mjs";
+import { a as logRequest, n as createActivityPubRequest, o as name, s as version, t as FetchError } from "./request-BhF-wf8-.mjs";
 import { n as UrlError } from "./url-COj5Q8mb.mjs";
-import { i as readBoundedText, n as MAX_BODY_SIZE, r as readBoundedBytes, t as BodyTooLargeError } from "./body-CcniBN7K.mjs";
+import { i as readBoundedText, n as MAX_BODY_SIZE, r as readBoundedBytes, t as BodyTooLargeError } from "./body-CctXju8j.mjs";
 import { t as preloadedContexts } from "./contexts-duRA_dDC.mjs";
 import { t as HttpHeaderLink } from "./link-Cevmc87v.mjs";
 import { n as openDirectFetch, r as openPublicFetch } from "./public-fetch-Cxo3Yzdf.mjs";

package/dist/tests/docloader.test.cjs

@@ -1,8 +1,8 @@
-const require_request = require("./request-6xMPqPD2.cjs");
+const require_request = require("./request-mwbvgtpO.cjs");
 const require_url = require("./url-Bdj-rTcC.cjs");
 const require_contexts = require("./contexts-C9Lj11SC.cjs");
 const require_public_fetch = require("./public-fetch-BGj5pzUD.cjs");
-const require_docloader = require("./docloader-5PO9t-vm.cjs");
+const require_docloader = require("./docloader-C3uxn-K_.cjs");
 const require_esm = require("./esm-Q2tdh5f3.cjs");
 const require_jsonld = require("./jsonld-CmDhHNTx.cjs");
 let node_zlib = require("node:zlib");

package/dist/tests/docloader.test.mjs

@@ -1,9 +1,9 @@
 import { t as esm_default } from "./esm-Ds-eHTfY.mjs";
-import { t as FetchError } from "./request-Di6nD5PF.mjs";
+import { t as FetchError } from "./request-BhF-wf8-.mjs";
 import { n as UrlError } from "./url-COj5Q8mb.mjs";
 import { n as cid_v1_default, t as preloadedContexts } from "./contexts-duRA_dDC.mjs";
 import { t as createPublicFetch } from "./public-fetch-Cxo3Yzdf.mjs";
-import { a as withDocumentLoaderTimeout, i as resolveDocumentLoaderTimeout, n as getDocumentLoader, r as getRemoteDocument, t as createDocumentLoader } from "./docloader-U9w8e8Ku.mjs";
+import { a as withDocumentLoaderTimeout, i as resolveDocumentLoaderTimeout, n as getDocumentLoader, r as getRemoteDocument, t as createDocumentLoader } from "./docloader-DidTL8Ep.mjs";
 import { t as jsonld_default } from "./jsonld-DweIJ07b.mjs";
 import { gzipSync } from "node:zlib";
 import { configure, reset } from "@logtape/logtape";

package/dist/tests/internal/portable-dereference.test.cjs

@@ -1,10 +1,40 @@
 const require_url = require("../url-Bdj-rTcC.cjs");
 const require_jsonld_cache = require("../jsonld-cache-DKIWKxEX.cjs");
-const require_portable_dereference = require("../portable-dereference-BUoDzMxk.cjs");
+const require_portable_dereference = require("../portable-dereference-Cpe93KjP.cjs");
 let node_assert_strict = require("node:assert/strict");
 let node_test = require("node:test");
 //#region src/internal/portable-dereference.test.ts
 const hrefs = (urls) => urls.map((url) => url.href);
+(0, node_test.test)("retargetPortableReferrer() only reconnects existing provenance", () => {
+	const id = require_url.parseIri("ap://did:key:z6Mkabc/actor");
+	const parent = {
+		id,
+		gateways: [new URL("https://original.example")]
+	};
+	const copiedParent = {
+		id,
+		gateways: [new URL("https://copy.example")]
+	};
+	const source = {};
+	const copy = {};
+	let calls = 0;
+	require_portable_dereference.retargetPortableReferrer(copy, () => {
+		calls++;
+		return copiedParent;
+	});
+	(0, node_assert_strict.deepStrictEqual)(calls, 0);
+	(0, node_assert_strict.ok)(!require_portable_dereference.isInPortableChain(copy));
+	require_portable_dereference.recordPortableReferrer(parent, source, "https://example.com/property");
+	require_portable_dereference.copyPortableProvenance(source, copy);
+	require_portable_dereference.retargetPortableReferrer(copy, () => void 0);
+	(0, node_assert_strict.deepStrictEqual)(hrefs(require_portable_dereference.getReferrerGateways(copy, id)), ["https://original.example/"]);
+	require_portable_dereference.retargetPortableReferrer(copy, (original) => {
+		(0, node_assert_strict.ok)(original === parent);
+		return copiedParent;
+	});
+	(0, node_assert_strict.deepStrictEqual)(hrefs(require_portable_dereference.getReferrerGateways(copy, id)), ["https://copy.example/"]);
+	(0, node_assert_strict.deepStrictEqual)(hrefs(require_portable_dereference.getReferrerGateways(source, id)), ["https://original.example/"]);
+});
 (0, node_test.test)("isPortableIri()", () => {
 	(0, node_assert_strict.ok)(require_portable_dereference.isPortableIri(require_url.parseIri("ap://did:key:z6Mkabc/actor")));
 	(0, node_assert_strict.ok)(require_portable_dereference.isPortableIri(require_url.parseIri("ap+ef61://did:key:z6Mkabc/actor")));

package/dist/tests/internal/portable-dereference.test.mjs

@@ -1,10 +1,40 @@
 import { E as withGatewayHints, b as parseIri } from "../url-COj5Q8mb.mjs";
 import { n as createScopedContextLoader } from "../jsonld-cache-KH40z9_7.mjs";
-import { a as recordPortableReferrer, i as isPortableIri, n as getPortableGatewayCandidates, r as getReferrerGateways, t as createSnapshotContextLoader } from "../portable-dereference-Du2k3ngE.mjs";
+import { a as isInPortableChain, c as retargetPortableReferrer, i as getReferrerGateways, n as createSnapshotContextLoader, o as isPortableIri, r as getPortableGatewayCandidates, s as recordPortableReferrer, t as copyPortableProvenance } from "../portable-dereference-DapCH3Fb.mjs";
 import { deepStrictEqual, ok, throws } from "node:assert/strict";
 import { test } from "node:test";
 //#region src/internal/portable-dereference.test.ts
 const hrefs = (urls) => urls.map((url) => url.href);
+test("retargetPortableReferrer() only reconnects existing provenance", () => {
+	const id = parseIri("ap://did:key:z6Mkabc/actor");
+	const parent = {
+		id,
+		gateways: [new URL("https://original.example")]
+	};
+	const copiedParent = {
+		id,
+		gateways: [new URL("https://copy.example")]
+	};
+	const source = {};
+	const copy = {};
+	let calls = 0;
+	retargetPortableReferrer(copy, () => {
+		calls++;
+		return copiedParent;
+	});
+	deepStrictEqual(calls, 0);
+	ok(!isInPortableChain(copy));
+	recordPortableReferrer(parent, source, "https://example.com/property");
+	copyPortableProvenance(source, copy);
+	retargetPortableReferrer(copy, () => void 0);
+	deepStrictEqual(hrefs(getReferrerGateways(copy, id)), ["https://original.example/"]);
+	retargetPortableReferrer(copy, (original) => {
+		ok(original === parent);
+		return copiedParent;
+	});
+	deepStrictEqual(hrefs(getReferrerGateways(copy, id)), ["https://copy.example/"]);
+	deepStrictEqual(hrefs(getReferrerGateways(source, id)), ["https://original.example/"]);
+});
 test("isPortableIri()", () => {
 	ok(isPortableIri(parseIri("ap://did:key:z6Mkabc/actor")));
 	ok(isPortableIri(parseIri("ap+ef61://did:key:z6Mkabc/actor")));

package/dist/tests/{portable-dereference-BUoDzMxk.cjs → portable-dereference-Cpe93KjP.cjs}

@@ -87,6 +87,44 @@ function recordPortableReferrer(parent, child, property) {
 	} });
 }
 /**
+* Copies the provenance of a vocabulary object to its clone.  The clone
+* keeps where the original came from and the restriction on unsecured
+* objects, but not a positive verification status nor a collection context,
+* since the clone may have different property values.
+*
+* @internal Technically exported for generated vocabulary classes, but not
+* part of the public API contract.  This is not considered public API for
+* Semantic Versioning decisions.
+*/
+function copyPortableProvenance(from, to) {
+	const provenance = provenances.get(from);
+	if (provenance == null) return;
+	provenances.set(to, {
+		referrer: provenance.referrer,
+		...provenance.acceptance === "unsecured" ? { acceptance: "unsecured" } : {}
+	});
+}
+/**
+* Reconnects an existing historical referrer to its independent graph copy.
+* Does not create provenance or add verification or collection-context evidence.
+* An unresolved referrer remains external history. Like the other provenance
+* helpers, this is for generated vocabulary code, not a public trust API.
+* @internal
+*/
+function retargetPortableReferrer(copy, resolve) {
+	const provenance = provenances.get(copy);
+	if (provenance?.referrer == null) return;
+	const object = resolve(provenance.referrer.object);
+	if (object == null) return;
+	provenances.set(copy, {
+		...provenance,
+		referrer: {
+			...provenance.referrer,
+			object
+		}
+	});
+}
+/**
 * Checks whether a URL is an FEP-ef61 portable ActivityPub IRI.
 *
 * @internal Technically exported for generated vocabulary classes, but not
@@ -247,6 +285,12 @@ function createSnapshotContextLoader(contextLoader, suppressError) {
 	};
 }
 //#endregion
+Object.defineProperty(exports, "copyPortableProvenance", {
+	enumerable: true,
+	get: function() {
+		return copyPortableProvenance;
+	}
+});
 Object.defineProperty(exports, "createSnapshotContextLoader", {
 	enumerable: true,
 	get: function() {
@@ -265,6 +309,12 @@ Object.defineProperty(exports, "getReferrerGateways", {
 		return getReferrerGateways;
 	}
 });
+Object.defineProperty(exports, "isInPortableChain", {
+	enumerable: true,
+	get: function() {
+		return isInPortableChain;
+	}
+});
 Object.defineProperty(exports, "isPortableIri", {
 	enumerable: true,
 	get: function() {
@@ -277,3 +327,9 @@ Object.defineProperty(exports, "recordPortableReferrer", {
 		return recordPortableReferrer;
 	}
 });
+Object.defineProperty(exports, "retargetPortableReferrer", {
+	enumerable: true,
+	get: function() {
+		return retargetPortableReferrer;
+	}
+});

package/dist/tests/{portable-dereference-Du2k3ngE.mjs → portable-dereference-DapCH3Fb.mjs}

@@ -87,6 +87,44 @@ function recordPortableReferrer(parent, child, property) {
 	} });
 }
 /**
+* Copies the provenance of a vocabulary object to its clone.  The clone
+* keeps where the original came from and the restriction on unsecured
+* objects, but not a positive verification status nor a collection context,
+* since the clone may have different property values.
+*
+* @internal Technically exported for generated vocabulary classes, but not
+* part of the public API contract.  This is not considered public API for
+* Semantic Versioning decisions.
+*/
+function copyPortableProvenance(from, to) {
+	const provenance = provenances.get(from);
+	if (provenance == null) return;
+	provenances.set(to, {
+		referrer: provenance.referrer,
+		...provenance.acceptance === "unsecured" ? { acceptance: "unsecured" } : {}
+	});
+}
+/**
+* Reconnects an existing historical referrer to its independent graph copy.
+* Does not create provenance or add verification or collection-context evidence.
+* An unresolved referrer remains external history. Like the other provenance
+* helpers, this is for generated vocabulary code, not a public trust API.
+* @internal
+*/
+function retargetPortableReferrer(copy, resolve) {
+	const provenance = provenances.get(copy);
+	if (provenance?.referrer == null) return;
+	const object = resolve(provenance.referrer.object);
+	if (object == null) return;
+	provenances.set(copy, {
+		...provenance,
+		referrer: {
+			...provenance.referrer,
+			object
+		}
+	});
+}
+/**
 * Checks whether a URL is an FEP-ef61 portable ActivityPub IRI.
 *
 * @internal Technically exported for generated vocabulary classes, but not
@@ -247,4 +285,4 @@ function createSnapshotContextLoader(contextLoader, suppressError) {
 	};
 }
 //#endregion
-export { recordPortableReferrer as a, isPortableIri as i, getPortableGatewayCandidates as n, getReferrerGateways as r, createSnapshotContextLoader as t };
+export { isInPortableChain as a, retargetPortableReferrer as c, getReferrerGateways as i, createSnapshotContextLoader as n, isPortableIri as o, getPortableGatewayCandidates as r, recordPortableReferrer as s, copyPortableProvenance as t };

package/dist/tests/{portable-media-CCdoXPVr.mjs → portable-media-BydVWZrJ.mjs}

@@ -1,6 +1,6 @@
-import { r as getUserAgent } from "./request-Di6nD5PF.mjs";
+import { r as getUserAgent } from "./request-BhF-wf8-.mjs";
 import { T as validatePublicUrl, y as parseGatewayUrl } from "./url-COj5Q8mb.mjs";
-import { r as readBoundedBytes } from "./body-CcniBN7K.mjs";
+import { r as readBoundedBytes } from "./body-CctXju8j.mjs";
 import { a as verifyDigestMultibase, i as parseHashlink, r as parseDigestMultibase } from "./digest-COC7xDiQ.mjs";
 //#region src/portable-media.ts
 function resolveTimeout(value, fallback) {

package/dist/tests/{portable-media-DqDbPEAw.cjs → portable-media-DLuaIpwD.cjs}

@@ -1,6 +1,6 @@
-const require_request = require("./request-6xMPqPD2.cjs");
+const require_request = require("./request-mwbvgtpO.cjs");
 const require_url = require("./url-Bdj-rTcC.cjs");
-const require_body = require("./body-VMwvvRA0.cjs");
+const require_body = require("./body-CrrCDpCd.cjs");
 const require_digest = require("./digest-3FeH2Y-Q.cjs");
 //#region src/portable-media.ts
 function resolveTimeout(value, fallback) {

package/dist/tests/portable-media.test.cjs

@@ -1,5 +1,5 @@
 const require_digest = require("./digest-3FeH2Y-Q.cjs");
-const require_portable_media = require("./portable-media-DqDbPEAw.cjs");
+const require_portable_media = require("./portable-media-DLuaIpwD.cjs");
 let node_assert_strict = require("node:assert/strict");
 let node_test = require("node:test");
 let node_http = require("node:http");

package/dist/tests/portable-media.test.mjs

@@ -1,5 +1,5 @@
 import { n as createHashlink, t as computeDigestMultibase } from "./digest-COC7xDiQ.mjs";
-import { t as fetchPortableMedia } from "./portable-media-CCdoXPVr.mjs";
+import { t as fetchPortableMedia } from "./portable-media-BydVWZrJ.mjs";
 import { deepStrictEqual, equal, rejects } from "node:assert/strict";
 import { test } from "node:test";
 import { createServer } from "node:http";

package/dist/tests/portable-workers.test.cjs

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_url = require("./url-Bdj-rTcC.cjs");
 const require_key = require("./key-C-AYkdJJ.cjs");
 const require_digest = require("./digest-3FeH2Y-Q.cjs");
-const require_portable_dereference = require("./portable-dereference-BUoDzMxk.cjs");
+const require_portable_dereference = require("./portable-dereference-Cpe93KjP.cjs");
 let node_assert_strict = require("node:assert/strict");
 let _fedify_fixture = require("@fedify/fixture");
 //#region src/portable-workers.test.ts

package/dist/tests/portable-workers.test.mjs

@@ -1,7 +1,7 @@
 import { C as toCompatibleEf61Id, a as canonicalizePortableUri, b as parseIri, c as fromCompatibleEf61Id, s as formatIri } from "./url-COj5Q8mb.mjs";
 import { i as importDidKey, t as exportDidKey } from "./key-C2Db_TAJ.mjs";
 import { n as createHashlink, o as verifyHashlink, t as computeDigestMultibase } from "./digest-COC7xDiQ.mjs";
-import { n as getPortableGatewayCandidates } from "./portable-dereference-Du2k3ngE.mjs";
+import { r as getPortableGatewayCandidates } from "./portable-dereference-DapCH3Fb.mjs";
 import { deepStrictEqual, equal } from "node:assert/strict";
 import { test, testDefinitions } from "@fedify/fixture";
 //#region src/portable-workers.test.ts

package/dist/tests/{request-Di6nD5PF.mjs → request-BhF-wf8-.mjs}

@@ -2,7 +2,7 @@ import { n as UrlError } from "./url-COj5Q8mb.mjs";
 import process from "node:process";
 //#region deno.json
 var name = "@fedify/vocab-runtime";
-var version = "2.5.0-dev.2504+fdeb138d";
+var version = "2.5.0-dev.2516+42d3ed0b";
 //#endregion
 //#region src/request.ts
 /**

package/dist/tests/{request-6xMPqPD2.cjs → request-mwbvgtpO.cjs}

@@ -4,7 +4,7 @@ let node_process = require("node:process");
 node_process = require_rolldown_runtime.__toESM(node_process, 1);
 //#region deno.json
 var name = "@fedify/vocab-runtime";
-var version = "2.5.0-dev.2504+fdeb138d";
+var version = "2.5.0-dev.2516+42d3ed0b";
 //#endregion
 //#region src/request.ts
 /**

package/dist/tests/request.test.cjs

@@ -1,5 +1,5 @@
 const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");
-const require_request = require("./request-6xMPqPD2.cjs");
+const require_request = require("./request-mwbvgtpO.cjs");
 const require_url = require("./url-Bdj-rTcC.cjs");
 let node_test = require("node:test");
 let node_process = require("node:process");

package/dist/tests/request.test.mjs

@@ -1,4 +1,4 @@
-import { i as isTransientFetchError, n as createActivityPubRequest, r as getUserAgent, s as version, t as FetchError } from "./request-Di6nD5PF.mjs";
+import { i as isTransientFetchError, n as createActivityPubRequest, r as getUserAgent, s as version, t as FetchError } from "./request-BhF-wf8-.mjs";
 import { n as UrlError } from "./url-COj5Q8mb.mjs";
 import { test } from "node:test";
 import process from "node:process";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fedify/vocab-runtime",
-  "version": "2.5.0-dev.2504+fdeb138d",
+  "version": "2.5.0-dev.2516+42d3ed0b",
   "homepage": "https://fedify.dev/",
   "repository": {
     "type": "git",

package/src/internal/portable-dereference.test.ts

@@ -4,15 +4,49 @@ import type { DocumentLoader } from "../docloader.ts";
 import { parseIri, withGatewayHints } from "../url.ts";
 import { createScopedContextLoader } from "./jsonld-cache.ts";
 import {
+  copyPortableProvenance,
   createSnapshotContextLoader,
   getPortableGatewayCandidates,
   getReferrerGateways,
+  isInPortableChain,
   isPortableIri,
   recordPortableReferrer,
+  retargetPortableReferrer,
 } from "./portable-dereference.ts";
 
 const hrefs = (urls: URL[]) => urls.map((url) => url.href);
 
+test("retargetPortableReferrer() only reconnects existing provenance", () => {
+  const id = parseIri("ap://did:key:z6Mkabc/actor");
+  const parent = { id, gateways: [new URL("https://original.example")] };
+  const copiedParent = { id, gateways: [new URL("https://copy.example")] };
+  const source = {};
+  const copy = {};
+  let calls = 0;
+  retargetPortableReferrer(copy, () => {
+    calls++;
+    return copiedParent;
+  });
+  deepStrictEqual(calls, 0);
+  ok(!isInPortableChain(copy));
+  recordPortableReferrer(parent, source, "https://example.com/property");
+  copyPortableProvenance(source, copy);
+  retargetPortableReferrer(copy, () => undefined);
+  deepStrictEqual(hrefs(getReferrerGateways(copy, id)!), [
+    "https://original.example/",
+  ]);
+  retargetPortableReferrer(copy, (original) => {
+    ok(original === parent);
+    return copiedParent;
+  });
+  deepStrictEqual(hrefs(getReferrerGateways(copy, id)!), [
+    "https://copy.example/",
+  ]);
+  deepStrictEqual(hrefs(getReferrerGateways(source, id)!), [
+    "https://original.example/",
+  ]);
+});
+
 test("isPortableIri()", () => {
   ok(isPortableIri(parseIri("ap://did:key:z6Mkabc/actor")));
   ok(isPortableIri(parseIri("ap+ef61://did:key:z6Mkabc/actor")));

package/src/internal/portable-dereference.ts

@@ -198,6 +198,27 @@ export function copyPortableProvenance(from: object, to: object): void {
   });
 }
 
+/**
+ * Reconnects an existing historical referrer to its independent graph copy.
+ * Does not create provenance or add verification or collection-context evidence.
+ * An unresolved referrer remains external history. Like the other provenance
+ * helpers, this is for generated vocabulary code, not a public trust API.
+ * @internal
+ */
+export function retargetPortableReferrer(
+  copy: object,
+  resolve: (original: object) => object | undefined,
+): void {
+  const provenance = provenances.get(copy);
+  if (provenance?.referrer == null) return;
+  const object = resolve(provenance.referrer.object);
+  if (object == null) return;
+  provenances.set(copy, {
+    ...provenance,
+    referrer: { ...provenance.referrer, object },
+  });
+}
+
 /**
  * Recognizes an FEP-ef61 compatible identifier to dereference as a portable
  * object.