@fedify/vocab 2.4.0-dev.1583 → 2.4.0-dev.1618

package/dist/mod.d.cts

@@ -10269,6 +10269,7 @@ declare class Endpoints {
     provideClientKey?: URL | null;
     signClientKey?: URL | null;
     sharedInbox?: URL | null;
+    uploadMedia?: URL | null;
   }, options?: {
     documentLoader?: DocumentLoader$1;
     contextLoader?: DocumentLoader$1;
@@ -10288,6 +10289,7 @@ declare class Endpoints {
     provideClientKey?: URL | null;
     signClientKey?: URL | null;
     sharedInbox?: URL | null;
+    uploadMedia?: URL | null;
   }, options?: {
     documentLoader?: DocumentLoader$1;
     contextLoader?: DocumentLoader$1;
@@ -10333,6 +10335,14 @@ declare class Endpoints {
   * objects which are not addressed to the `Public`` endpoint.
   */
   get sharedInbox(): URL | null;
+  /** Upload endpoint URI for this user for binary data, such as an image or
+  * video, as described in the [ActivityPub Media
+  * Upload](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload) extension.
+  * Clients `POST` a `multipart/form-data` request containing a `file` part
+  * (the binary payload) and an `object` part (an ActivityStreams object shell)
+  * to this endpoint.
+  */
+  get uploadMedia(): URL | null;
   /**
   * Converts this object to a JSON-LD structure.
   * @param options The options to use.

package/dist/mod.d.ts

@@ -10269,6 +10269,7 @@ declare class Endpoints {
     provideClientKey?: URL | null;
     signClientKey?: URL | null;
     sharedInbox?: URL | null;
+    uploadMedia?: URL | null;
   }, options?: {
     documentLoader?: DocumentLoader$1;
     contextLoader?: DocumentLoader$1;
@@ -10288,6 +10289,7 @@ declare class Endpoints {
     provideClientKey?: URL | null;
     signClientKey?: URL | null;
     sharedInbox?: URL | null;
+    uploadMedia?: URL | null;
   }, options?: {
     documentLoader?: DocumentLoader$1;
     contextLoader?: DocumentLoader$1;
@@ -10333,6 +10335,14 @@ declare class Endpoints {
   * objects which are not addressed to the `Public`` endpoint.
   */
   get sharedInbox(): URL | null;
+  /** Upload endpoint URI for this user for binary data, such as an image or
+  * video, as described in the [ActivityPub Media
+  * Upload](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload) extension.
+  * Clients `POST` a `multipart/form-data` request containing a `file` part
+  * (the binary payload) and an `object` part (an ActivityStreams object shell)
+  * to this endpoint.
+  */
+  get uploadMedia(): URL | null;
   /**
   * Converts this object to a JSON-LD structure.
   * @param options The options to use.

package/dist/mod.js

@@ -1,16 +1,16 @@
-import { Temporal } from "@js-temporal/polyfill";
+import { Temporal } from "temporal-polyfill";
 import { lookupWebFinger } from "@fedify/webfinger";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { domainToASCII, domainToUnicode } from "node:url";
 import jsonld from "@fedify/vocab-runtime/jsonld";
 import { getLogger } from "@logtape/logtape";
-import { LanguageString, LanguageString as LanguageString$1, decodeMultibase, encodeMultibase, exportMultibaseKey, exportSpki, formatIri, getDocumentLoader, haveSameIriOrigin, importMultibaseKey, importPem, isDecimal, parseDecimal, parseIri, parseJsonLdId } from "@fedify/vocab-runtime";
+import { LanguageString, LanguageString as LanguageString$1, decodeMultibase, encodeMultibase, exportMultibaseKey, exportSpki, formatIri, getDocumentLoader, haveSameFe34Origin, haveSameIriOrigin, importMultibaseKey, importPem, isDecimal, parseDecimal, parseIri, parseJsonLdId } from "@fedify/vocab-runtime";
 import { compactJsonLdCache, isTrustedIriOrigin, normalizeJsonLdIris } from "@fedify/vocab-runtime/internal/jsonld-cache";
 import { isTemporalDuration, isTemporalInstant } from "@fedify/vocab-runtime/temporal";
 import { delay } from "es-toolkit";
 //#region deno.json
 var name = "@fedify/vocab";
-var version = "2.4.0-dev.1583+1a6f31cb";
+var version = "2.4.0-dev.1618+58858243";
 //#endregion
 //#region src/type.ts
 function getTypeId(object) {
@@ -172,6 +172,7 @@ const PORTABLE_IRI_KEYS = new Set([
 	"https://www.w3.org/ns/activitystreams#target",
 	"https://www.w3.org/ns/activitystreams#to",
 	"https://www.w3.org/ns/activitystreams#units",
+	"https://www.w3.org/ns/activitystreams#uploadMedia",
 	"https://www.w3.org/ns/activitystreams#url",
 	"https://www.w3.org/ns/did#service",
 	"https://www.w3.org/ns/did#serviceEndpoint",
@@ -233,6 +234,7 @@ const PORTABLE_IRI_KEYS = new Set([
 	"target",
 	"to",
 	"units",
+	"uploadMedia",
 	"url"
 ]);
 /** Describes an object of any kind. The Object type serves as the base type for
@@ -28625,6 +28627,7 @@ var Endpoints = class {
 	#_8Bx9qN8oU7Bpt2xi6khaxWp1gMr_provideClientKey = [];
 	#_3dU7PMVQZJpsCpo2F4RQXxBXdPmS_signClientKey = [];
 	#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox = [];
+	#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = [];
 	/**
 	* Constructs a new instance of Endpoints with the given values.
 	* @param values The values to initialize the instance with.
@@ -28651,6 +28654,8 @@ var Endpoints = class {
 		else throw new TypeError("The signClientKey must be of type URL.");
 		if ("sharedInbox" in values && values.sharedInbox != null) if (values.sharedInbox instanceof URL) this.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox = [values.sharedInbox];
 		else throw new TypeError("The sharedInbox must be of type URL.");
+		if ("uploadMedia" in values && values.uploadMedia != null) if (values.uploadMedia instanceof URL) this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = [values.uploadMedia];
+		else throw new TypeError("The uploadMedia must be of type URL.");
 	}
 	/**
 	* Clones this instance, optionally updating it with the given values.
@@ -28685,6 +28690,9 @@ var Endpoints = class {
 		clone.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox = this.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox;
 		if ("sharedInbox" in values && values.sharedInbox != null) if (values.sharedInbox instanceof URL) clone.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox = [values.sharedInbox];
 		else throw new TypeError("The sharedInbox must be of type URL.");
+		clone.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia;
+		if ("uploadMedia" in values && values.uploadMedia != null) if (values.uploadMedia instanceof URL) clone.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = [values.uploadMedia];
+		else throw new TypeError("The uploadMedia must be of type URL.");
 		return clone;
 	}
 	/** Endpoint URI so this actor's clients may access remote ActivityStreams
@@ -28752,6 +28760,18 @@ var Endpoints = class {
 		if (this.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox.length < 1) return null;
 		return this.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox[0];
 	}
+	/** Upload endpoint URI for this user for binary data, such as an image or
+	* video, as described in the [ActivityPub Media
+	* Upload](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload) extension.
+	* Clients `POST` a `multipart/form-data` request containing a `file` part
+	* (the binary payload) and an `object` part (an ActivityStreams object shell)
+	* to this endpoint.
+	*/
+	get uploadMedia() {
+		if (this._warning != null) getLogger(this._warning.category).warn(this._warning.message, this._warning.values);
+		if (this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia.length < 1) return null;
+		return this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia[0];
+	}
 	/**
 	* Converts this object to a JSON-LD structure.
 	* @param options The options to use.
@@ -28807,6 +28827,12 @@ var Endpoints = class {
 				compactItems.push(item);
 			}
 			if (compactItems.length > 0) result["sharedInbox"] = compactItems.length > 1 ? compactItems : compactItems[0];
+			compactItems = [];
+			for (const v of this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia) {
+				const item = formatIri(v);
+				compactItems.push(item);
+			}
+			if (compactItems.length > 0) result["uploadMedia"] = compactItems.length > 1 ? compactItems : compactItems[0];
 			if (this.id != null) result["id"] = formatIri(this.id);
 			result["@context"] = "https://www.w3.org/ns/activitystreams";
 			return result;
@@ -28849,6 +28875,12 @@ var Endpoints = class {
 			array.push(element);
 		}
 		if (array.length > 0) values["https://www.w3.org/ns/activitystreams#sharedInbox"] = array;
+		array = [];
+		for (const v of this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia) {
+			const element = { "@id": formatIri(v) };
+			array.push(element);
+		}
+		if (array.length > 0) values["https://www.w3.org/ns/activitystreams#uploadMedia"] = array;
 		if (this.id != null) values["@id"] = formatIri(this.id);
 		if (options.format === "expand") return await jsonld.expand(values, { documentLoader: options.contextLoader });
 		const docContext = options.context ?? "https://www.w3.org/ns/activitystreams";
@@ -28974,6 +29006,15 @@ var Endpoints = class {
 			_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox.push(decoded);
 		}
 		instance.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox = _3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox;
+		const _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = [];
+		let _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array = values["https://www.w3.org/ns/activitystreams#uploadMedia"];
+		for (const v of _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array == null ? [] : _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array.length === 1 && "@list" in _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array[0] ? _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array[0]["@list"] : _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array) {
+			if (v == null) continue;
+			const decoded = parseIri(v["@id"], options.baseUrl);
+			if (typeof decoded === "undefined") continue;
+			_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia.push(decoded);
+		}
+		instance.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia;
 		if (!("_fromSubclass" in options) || !options._fromSubclass) try {
 			if (cacheJsonLd != null && cacheJsonLd !== expanded) {
 				const compactArray = Array.isArray(json) && json.length === 1;
@@ -29022,6 +29063,11 @@ var Endpoints = class {
 			[Symbol.for("nodejs.util.inspect.custom")]: (_depth, options, inspect) => "URL " + inspect(v.href, options)
 		} : v);
 		if (_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox.length == 1) proxy.sharedInbox = _3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox[0];
+		const _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia.map((v) => v instanceof URL ? {
+			[Symbol.for("Deno.customInspect")]: (inspect, options) => "URL " + inspect(v.href, options),
+			[Symbol.for("nodejs.util.inspect.custom")]: (_depth, options, inspect) => "URL " + inspect(v.href, options)
+		} : v);
+		if (_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia.length == 1) proxy.uploadMedia = _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia[0];
 		return proxy;
 	}
 };
@@ -53203,7 +53249,7 @@ async function lookupObjectInternal(identifier, options = {}) {
 		}
 		throw error;
 	}
-	if (options.crossOrigin !== "trust" && object.id != null && !haveSameIriOrigin(object.id, documentUrl)) {
+	if (options.crossOrigin !== "trust" && object.id != null && !haveSameIriOrigin(object.id, documentUrl) && !haveSameFe34Origin(object.id, documentUrl)) {
 		if (options.crossOrigin === "throw") throw new Error(`The object's @id (${object.id.href}) has a different origin than the document URL (${remoteDoc.documentUrl}); refusing to return the object.  If you want to bypass this check and are aware of the security implications, set the crossOrigin option to "trust".`);
 		logger.warn("The object's @id ({objectId}) has a different origin than the document URL ({documentUrl}); refusing to return the object.  If you want to bypass this check and are aware of the security implications, set the crossOrigin option to \"trust\".", {
 			...remoteDoc,

package/dist-tests/{actor-Br5HgxUd.mjs → actor-COnJgcOw.mjs}

@@ -1,7 +1,7 @@
-import "@js-temporal/polyfill";
+import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { A as Person, G as __toESM, L as Service, U as __commonJSMin, a as Application, k as Organization, v as Group } from "./vocab-DOHLQ4UQ.mjs";
-import { t as getTypeId } from "./type-Cf-vxmre.mjs";
+import { A as Organization, K as __toESM, R as Service, W as __commonJSMin, a as Application, j as Person, v as Group } from "./vocab-OU5GYbNg.mjs";
+import { t as getTypeId } from "./type-_BlsfT3S.mjs";
 import { lookupWebFinger } from "@fedify/webfinger";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { domainToASCII, domainToUnicode } from "node:url";
@@ -1206,7 +1206,7 @@ var esm_default = new class FetchMock {
 //#endregion
 //#region deno.json
 var name = "@fedify/vocab";
-var version = "2.4.0-dev.1583+1a6f31cb";
+var version = "2.4.0-dev.1618+58858243";
 //#endregion
 //#region src/actor.ts
 const ACTOR_DISCOVERY_HISTOGRAM_BUCKETS = [

package/dist-tests/actor.test.mjs

@@ -1,7 +1,7 @@
-import "@js-temporal/polyfill";
+import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { A as Person, L as Service, W as __exportAll, a as Application, k as Organization, v as Group } from "./vocab-DOHLQ4UQ.mjs";
-import { a as normalizeActorHandle, c as esm_default, i as isActor, n as getActorHandle, r as getActorTypeName, t as getActorClassByTypeName } from "./actor-Br5HgxUd.mjs";
+import { A as Organization, G as __exportAll, R as Service, a as Application, j as Person, v as Group } from "./vocab-OU5GYbNg.mjs";
+import { a as normalizeActorHandle, c as esm_default, i as isActor, n as getActorHandle, r as getActorTypeName, t as getActorClassByTypeName } from "./actor-COnJgcOw.mjs";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { deepStrictEqual, ok, rejects, strictEqual, throws } from "node:assert/strict";
 //#region ../../node_modules/.pnpm/fast-check@3.23.2/node_modules/fast-check/lib/esm/check/precondition/PreconditionFailure.js

package/dist-tests/cjs.test.mjs

@@ -0,0 +1,28 @@
+import "temporal-polyfill";
+globalThis.addEventListener = () => {};
+import { createRequire } from "node:module";
+import { mockDocumentLoader, test } from "@fedify/fixture";
+import { ok, strictEqual, throws } from "node:assert";
+//#region src/cjs.test.ts
+test("CommonJS entry bundles temporal-polyfill internally", { ignore: "Deno" in globalThis }, async () => {
+	const originalTemporal = globalThis.Temporal;
+	const require = createRequire(import.meta.url);
+	throws(() => require("temporal-polyfill"), (error) => {
+		if (error == null || typeof error !== "object") return false;
+		const { code } = error;
+		return code === "ERR_PACKAGE_PATH_NOT_EXPORTED" || code === "MODULE_NOT_FOUND";
+	});
+	const obj = await require("../dist/mod.cjs").Object.fromJsonLd({
+		"@context": "https://www.w3.org/ns/activitystreams",
+		type: "Object",
+		published: "2025-01-01T12:34:56Z"
+	}, {
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader
+	});
+	ok(obj.published != null);
+	strictEqual(obj.published.toString(), "2025-01-01T12:34:56Z");
+	strictEqual(globalThis.Temporal, originalTemporal);
+});
+//#endregion
+export {};

package/dist-tests/endpoints.yaml

@@ -84,3 +84,17 @@ properties:
     objects which are not addressed to the `Public`` endpoint.
   range:
   - "http://www.w3.org/2001/XMLSchema#anyURI"
+
+- singularName: uploadMedia
+  functional: true
+  compactName: uploadMedia
+  uri: "https://www.w3.org/ns/activitystreams#uploadMedia"
+  description: |
+    Upload endpoint URI for this user for binary data, such as an image or
+    video, as described in the [ActivityPub Media
+    Upload](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload) extension.
+    Clients `POST` a `multipart/form-data` request containing a `file` part
+    (the binary payload) and an `object` part (an ActivityStreams object shell)
+    to this endpoint.
+  range:
+  - "http://www.w3.org/2001/XMLSchema#anyURI"

package/dist-tests/lookup.test.mjs

@@ -1,15 +1,15 @@
-import { Temporal } from "@js-temporal/polyfill";
+import { Temporal } from "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { A as Person, E as Object$1, T as Note, o as Collection } from "./vocab-DOHLQ4UQ.mjs";
-import { c as esm_default, i as isActor, o as name, s as version } from "./actor-Br5HgxUd.mjs";
-import { t as getTypeId } from "./type-Cf-vxmre.mjs";
-import { t as assertInstanceOf } from "./utils-CE8Dk5hm.mjs";
+import { D as Object$1, E as Note, j as Person, o as Collection } from "./vocab-OU5GYbNg.mjs";
+import { c as esm_default, i as isActor, o as name, s as version } from "./actor-COnJgcOw.mjs";
+import { t as getTypeId } from "./type-_BlsfT3S.mjs";
+import { t as assertInstanceOf } from "./utils-CQjrpUkt.mjs";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { deepStrictEqual, equal, ok, rejects } from "node:assert/strict";
 import { lookupWebFinger } from "@fedify/webfinger";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { getLogger } from "@logtape/logtape";
-import { getDocumentLoader, haveSameIriOrigin, parseIri } from "@fedify/vocab-runtime";
+import { getDocumentLoader, haveSameFe34Origin, haveSameIriOrigin, parseIri } from "@fedify/vocab-runtime";
 import { delay } from "es-toolkit";
 //#region src/handle.ts
 /**
@@ -223,7 +223,7 @@ async function lookupObjectInternal(identifier, options = {}) {
 		}
 		throw error;
 	}
-	if (options.crossOrigin !== "trust" && object.id != null && !haveSameIriOrigin(object.id, documentUrl)) {
+	if (options.crossOrigin !== "trust" && object.id != null && !haveSameIriOrigin(object.id, documentUrl) && !haveSameFe34Origin(object.id, documentUrl)) {
 		if (options.crossOrigin === "throw") throw new Error(`The object's @id (${object.id.href}) has a different origin than the document URL (${remoteDoc.documentUrl}); refusing to return the object.  If you want to bypass this check and are aware of the security implications, set the crossOrigin option to "trust".`);
 		logger.warn("The object's @id ({objectId}) has a different origin than the document URL ({documentUrl}); refusing to return the object.  If you want to bypass this check and are aware of the security implications, set the crossOrigin option to \"trust\".", {
 			...remoteDoc,
@@ -538,6 +538,73 @@ test("FEP-fe34: lookupObject() cross-origin security", {
 		deepStrictEqual(result.id, new URL("https://example.com/note"));
 		deepStrictEqual(result.content, "This is a legitimate note from the same origin");
 	});
+	await t.step("same-authority non-FE34 IRIs are still trusted", async () => {
+		const atProtoDocumentLoader = async (url) => {
+			if (url === "https://gateway.example/at-item") return {
+				documentUrl: "at://did%3Aplc%3Aexample/collection/item",
+				contextUrl: null,
+				document: {
+					"@context": "https://www.w3.org/ns/activitystreams",
+					type: "Note",
+					id: "at://did:plc:example/collection/reply",
+					content: "AT Protocol note"
+				}
+			};
+			throw new Error(`Unexpected URL: ${url}`);
+		};
+		const result = await lookupObject("https://gateway.example/at-item", {
+			documentLoader: atProtoDocumentLoader,
+			contextLoader: mockDocumentLoader
+		});
+		assertInstanceOf(result, Note);
+		deepStrictEqual(result.id, new URL("at://did%3Aplc%3Aexample/collection/reply"));
+		deepStrictEqual(result.content, "AT Protocol note");
+	});
+	await t.step("portable object IDs are trusted by DID cryptographic origin", async () => {
+		const portableDocumentLoader = async (url) => {
+			if (url === "https://gateway.example/.well-known/apgateway/did:key:z6Mkabc/note") return {
+				documentUrl: "ap+ef61://did:key:z6Mkabc/note",
+				contextUrl: null,
+				document: {
+					"@context": "https://www.w3.org/ns/activitystreams",
+					type: "Note",
+					id: "ap://did:key:z6Mkabc/note",
+					content: "Portable note"
+				}
+			};
+			throw new Error(`Unexpected URL: ${url}`);
+		};
+		const result = await lookupObject("https://gateway.example/.well-known/apgateway/did:key:z6Mkabc/note", {
+			documentLoader: portableDocumentLoader,
+			contextLoader: mockDocumentLoader
+		});
+		assertInstanceOf(result, Note);
+		deepStrictEqual(result.content, "Portable note");
+	});
+	await t.step("portable object IDs reject mismatched cryptographic origins", async () => {
+		const portableDocumentLoader = async (url) => {
+			if (url === "https://gateway.example/.well-known/apgateway/did:key:z6Mkabc/note") return {
+				documentUrl: "ap+ef61://did:key:z6Mkabc/note",
+				contextUrl: null,
+				document: {
+					"@context": "https://www.w3.org/ns/activitystreams",
+					type: "Note",
+					id: "ap://did:key:z6Mkdef/note",
+					content: "Spoofed portable note"
+				}
+			};
+			throw new Error(`Unexpected URL: ${url}`);
+		};
+		deepStrictEqual(await lookupObject("https://gateway.example/.well-known/apgateway/did:key:z6Mkabc/note", {
+			documentLoader: portableDocumentLoader,
+			contextLoader: mockDocumentLoader
+		}), null);
+		await rejects(() => lookupObject("https://gateway.example/.well-known/apgateway/did:key:z6Mkabc/note", {
+			documentLoader: portableDocumentLoader,
+			contextLoader: mockDocumentLoader,
+			crossOrigin: "throw"
+		}), Error, "The object's @id (ap+ef61://did%3Akey%3Az6Mkdef/note) has a different origin than the document URL (ap+ef61://did:key:z6Mkabc/note)");
+	});
 	await t.step("objects without @id are trusted", async () => {
 		const noIdDocumentLoader = async (url) => {
 			if (url === "https://example.com/note") return {

package/dist-tests/{type-Cf-vxmre.mjs → type-_BlsfT3S.mjs}

@@ -1,4 +1,4 @@
-import "@js-temporal/polyfill";
+import "temporal-polyfill";
 globalThis.addEventListener = () => {};
 //#region src/type.ts
 function getTypeId(object) {

package/dist-tests/type.test.mjs

@@ -1,7 +1,7 @@
-import "@js-temporal/polyfill";
+import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { A as Person, B as getEntityTypeById, C as Link, V as isEntityType } from "./vocab-DOHLQ4UQ.mjs";
-import { t as getTypeId } from "./type-Cf-vxmre.mjs";
+import { C as Link, H as isEntityType, V as getEntityTypeById, j as Person } from "./vocab-OU5GYbNg.mjs";
+import { t as getTypeId } from "./type-_BlsfT3S.mjs";
 import { test } from "@fedify/fixture";
 import { deepStrictEqual } from "node:assert/strict";
 //#region src/type.test.ts

package/dist-tests/{utils-CE8Dk5hm.mjs → utils-CQjrpUkt.mjs}

@@ -1,4 +1,4 @@
-import "@js-temporal/polyfill";
+import "temporal-polyfill";
 globalThis.addEventListener = () => {};
 import { ok } from "node:assert";
 //#region src/utils.ts

package/dist-tests/{vocab-DOHLQ4UQ.mjs → vocab-OU5GYbNg.mjs}

@@ -1,5 +1,6 @@
-import { Temporal } from "@js-temporal/polyfill";
+import { Temporal } from "temporal-polyfill";
 globalThis.addEventListener = () => {};
+import "node:module";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import jsonld from "@fedify/vocab-runtime/jsonld";
 import { getLogger } from "@logtape/logtape";
@@ -281,6 +282,7 @@ const PORTABLE_IRI_KEYS = new Set([
 	"https://www.w3.org/ns/activitystreams#target",
 	"https://www.w3.org/ns/activitystreams#to",
 	"https://www.w3.org/ns/activitystreams#units",
+	"https://www.w3.org/ns/activitystreams#uploadMedia",
 	"https://www.w3.org/ns/activitystreams#url",
 	"https://www.w3.org/ns/did#service",
 	"https://www.w3.org/ns/did#serviceEndpoint",
@@ -342,6 +344,7 @@ const PORTABLE_IRI_KEYS = new Set([
 	"target",
 	"to",
 	"units",
+	"uploadMedia",
 	"url"
 ]);
 /** Describes an object of any kind. The Object type serves as the base type for
@@ -28734,6 +28737,7 @@ var Endpoints = class {
 	#_8Bx9qN8oU7Bpt2xi6khaxWp1gMr_provideClientKey = [];
 	#_3dU7PMVQZJpsCpo2F4RQXxBXdPmS_signClientKey = [];
 	#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox = [];
+	#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = [];
 	/**
 	* Constructs a new instance of Endpoints with the given values.
 	* @param values The values to initialize the instance with.
@@ -28760,6 +28764,8 @@ var Endpoints = class {
 		else throw new TypeError("The signClientKey must be of type URL.");
 		if ("sharedInbox" in values && values.sharedInbox != null) if (values.sharedInbox instanceof URL) this.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox = [values.sharedInbox];
 		else throw new TypeError("The sharedInbox must be of type URL.");
+		if ("uploadMedia" in values && values.uploadMedia != null) if (values.uploadMedia instanceof URL) this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = [values.uploadMedia];
+		else throw new TypeError("The uploadMedia must be of type URL.");
 	}
 	/**
 	* Clones this instance, optionally updating it with the given values.
@@ -28794,6 +28800,9 @@ var Endpoints = class {
 		clone.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox = this.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox;
 		if ("sharedInbox" in values && values.sharedInbox != null) if (values.sharedInbox instanceof URL) clone.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox = [values.sharedInbox];
 		else throw new TypeError("The sharedInbox must be of type URL.");
+		clone.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia;
+		if ("uploadMedia" in values && values.uploadMedia != null) if (values.uploadMedia instanceof URL) clone.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = [values.uploadMedia];
+		else throw new TypeError("The uploadMedia must be of type URL.");
 		return clone;
 	}
 	/** Endpoint URI so this actor's clients may access remote ActivityStreams
@@ -28861,6 +28870,18 @@ var Endpoints = class {
 		if (this.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox.length < 1) return null;
 		return this.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox[0];
 	}
+	/** Upload endpoint URI for this user for binary data, such as an image or
+	* video, as described in the [ActivityPub Media
+	* Upload](https://www.w3.org/wiki/SocialCG/ActivityPub/MediaUpload) extension.
+	* Clients `POST` a `multipart/form-data` request containing a `file` part
+	* (the binary payload) and an `object` part (an ActivityStreams object shell)
+	* to this endpoint.
+	*/
+	get uploadMedia() {
+		if (this._warning != null) getLogger(this._warning.category).warn(this._warning.message, this._warning.values);
+		if (this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia.length < 1) return null;
+		return this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia[0];
+	}
 	/**
 	* Converts this object to a JSON-LD structure.
 	* @param options The options to use.
@@ -28916,6 +28937,12 @@ var Endpoints = class {
 				compactItems.push(item);
 			}
 			if (compactItems.length > 0) result["sharedInbox"] = compactItems.length > 1 ? compactItems : compactItems[0];
+			compactItems = [];
+			for (const v of this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia) {
+				const item = formatIri(v);
+				compactItems.push(item);
+			}
+			if (compactItems.length > 0) result["uploadMedia"] = compactItems.length > 1 ? compactItems : compactItems[0];
 			if (this.id != null) result["id"] = formatIri(this.id);
 			result["@context"] = "https://www.w3.org/ns/activitystreams";
 			return result;
@@ -28958,6 +28985,12 @@ var Endpoints = class {
 			array.push(element);
 		}
 		if (array.length > 0) values["https://www.w3.org/ns/activitystreams#sharedInbox"] = array;
+		array = [];
+		for (const v of this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia) {
+			const element = { "@id": formatIri(v) };
+			array.push(element);
+		}
+		if (array.length > 0) values["https://www.w3.org/ns/activitystreams#uploadMedia"] = array;
 		if (this.id != null) values["@id"] = formatIri(this.id);
 		if (options.format === "expand") return await jsonld.expand(values, { documentLoader: options.contextLoader });
 		const docContext = options.context ?? "https://www.w3.org/ns/activitystreams";
@@ -29083,6 +29116,15 @@ var Endpoints = class {
 			_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox.push(decoded);
 		}
 		instance.#_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox = _3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox;
+		const _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = [];
+		let _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array = values["https://www.w3.org/ns/activitystreams#uploadMedia"];
+		for (const v of _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array == null ? [] : _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array.length === 1 && "@list" in _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array[0] ? _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array[0]["@list"] : _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia__array) {
+			if (v == null) continue;
+			const decoded = parseIri(v["@id"], options.baseUrl);
+			if (typeof decoded === "undefined") continue;
+			_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia.push(decoded);
+		}
+		instance.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia;
 		if (!("_fromSubclass" in options) || !options._fromSubclass) try {
 			if (cacheJsonLd != null && cacheJsonLd !== expanded) {
 				const compactArray = Array.isArray(json) && json.length === 1;
@@ -29131,6 +29173,11 @@ var Endpoints = class {
 			[Symbol.for("nodejs.util.inspect.custom")]: (_depth, options, inspect) => "URL " + inspect(v.href, options)
 		} : v);
 		if (_3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox.length == 1) proxy.sharedInbox = _3JprUSDLVqqX4dwHRi37qGZZCRCc_sharedInbox[0];
+		const _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia = this.#_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia.map((v) => v instanceof URL ? {
+			[Symbol.for("Deno.customInspect")]: (inspect, options) => "URL " + inspect(v.href, options),
+			[Symbol.for("nodejs.util.inspect.custom")]: (_depth, options, inspect) => "URL " + inspect(v.href, options)
+		} : v);
+		if (_KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia.length == 1) proxy.uploadMedia = _KukVKGqFRETxAxXA15YCYAA7XAT_uploadMedia[0];
 		return proxy;
 	}
 };
@@ -52873,4 +52920,4 @@ function getEntityTypeById(id) {
 	return entityTypeIds.get(typeof id === "string" ? id : id?.href);
 }
 //#endregion
-export { Person as A, getEntityTypeById as B, Link as C, Offer as D, Object$1 as E, QuoteRequest as F, __toESM as G, vocab_exports as H, Reject as I, Service as L, Proposal as M, Question as N, OrderedCollectionPage as O, QuoteAuthorization as P, Source as R, InteractionRule as S, Note as T, __commonJSMin as U, isEntityType as V, __exportAll as W, Follow as _, Application as a, Intent as b, Create as c, Document as d, Endpoints as f, FeaturedItem as g, FeaturedCollection as h, Announce as i, Place as j, Organization as k, CryptographicKey as l, FeatureRequest as m, Activity as n, Collection as o, FeatureAuthorization as p, Agreement as r, Commitment as s, Accept as t, Delete as u, Group as v, Measure as w, InteractionPolicy as x, Hashtag as y, Tombstone as z };
+export { Organization as A, Tombstone as B, Link as C, Object$1 as D, Note as E, QuoteAuthorization as F, __exportAll as G, isEntityType as H, QuoteRequest as I, __toESM as K, Reject as L, Place as M, Proposal as N, Offer as O, Question as P, Service as R, InteractionRule as S, Multikey as T, vocab_exports as U, getEntityTypeById as V, __commonJSMin as W, Follow as _, Application as a, Intent as b, Create as c, Document as d, Endpoints as f, FeaturedItem as g, FeaturedCollection as h, Announce as i, Person as j, OrderedCollectionPage as k, CryptographicKey as l, FeatureRequest as m, Activity as n, Collection as o, FeatureAuthorization as p, Agreement as r, Commitment as s, Accept as t, Delete as u, Group as v, Measure as w, InteractionPolicy as x, Hashtag as y, Source as z };