@fedify/vocab 2.4.5-dev.2462 → 2.4.5

package/dist/mod.js

@@ -12,7 +12,7 @@ import { isTemporalDuration, isTemporalInstant } from "@fedify/vocab-runtime/tem
 import { delay } from "es-toolkit";
 //#region deno.json
 var name = "@fedify/vocab";
-var version = "2.4.5-dev.2462+46a3f2c5";
+var version = "2.4.5";
 //#endregion
 //#region src/type.ts
 function getTypeId(object) {
@@ -328,6 +328,11 @@ var Object$1 = class Object$1 {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -13922,6 +13927,11 @@ var PropertyValue = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -14294,6 +14304,11 @@ var Measure = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -15677,6 +15692,11 @@ var InteractionPolicy = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -16185,6 +16205,11 @@ var InteractionRule = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -19626,6 +19651,11 @@ var Translation = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -27276,6 +27306,11 @@ var DidService = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -27782,6 +27817,11 @@ var DataIntegrityProof = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -28468,6 +28508,11 @@ var CryptographicKey = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -29135,6 +29180,11 @@ var Multikey = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -30197,6 +30247,11 @@ var Commitment = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -30583,6 +30638,11 @@ var Intent = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -41868,6 +41928,11 @@ var Endpoints = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -48570,6 +48635,11 @@ var Link = class Link {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -74348,6 +74418,11 @@ var Source = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -76935,7 +77010,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 	const result = await lookupWebFinger(handle, {
 		userAgent: options.userAgent,
 		tracerProvider: options.tracerProvider,
-		meterProvider: options.meterProvider
+		meterProvider: options.meterProvider,
+		allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 	});
 	if (result == null || !linksToPortableActor(result, canonicalId)) throw new ActorHandleNotFoundError();
 	const subject = result.subject?.match(/^acct:([^@]+)@([^@]+)$/);
@@ -76943,7 +77019,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 		const subjectResult = await lookupWebFinger(result.subject, {
 			userAgent: options.userAgent,
 			tracerProvider: options.tracerProvider,
-			meterProvider: options.meterProvider
+			meterProvider: options.meterProvider,
+			allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 		});
 		if (subjectResult != null && linksToPortableActor(subjectResult, canonicalId)) return normalizeActorHandle(`@${subject[1]}@${subject[2]}`, options);
 	}

package/dist-tests/{actor-C2nY5FCY.mjs → actor-BWv7I2WQ.mjs}

@@ -1,14 +1,14 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { F as Person, P as Organization, U as Service, a as Application, b as Group } from "./vocab-mc4pgfni.mjs";
 import { t as getTypeId } from "./type-BMdjm4Eg.mjs";
+import { F as Person, P as Organization, U as Service, a as Application, b as Group } from "./vocab-S9K4rFgH.mjs";
 import { canonicalizePortableUri, formatIri, fromCompatibleEf61Id, isGatewayUrl } from "@fedify/vocab-runtime";
 import { lookupWebFinger } from "@fedify/webfinger";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { domainToASCII, domainToUnicode } from "node:url";
 //#region deno.json
 var name = "@fedify/vocab";
-var version = "2.4.5-dev.2462+46a3f2c5";
+var version = "2.4.5";
 //#endregion
 //#region src/actor.ts
 const ACTOR_DISCOVERY_HISTOGRAM_BUCKETS = [
@@ -206,7 +206,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 	const result = await lookupWebFinger(handle, {
 		userAgent: options.userAgent,
 		tracerProvider: options.tracerProvider,
-		meterProvider: options.meterProvider
+		meterProvider: options.meterProvider,
+		allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 	});
 	if (result == null || !linksToPortableActor(result, canonicalId)) throw new ActorHandleNotFoundError();
 	const subject = result.subject?.match(/^acct:([^@]+)@([^@]+)$/);
@@ -214,7 +215,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 		const subjectResult = await lookupWebFinger(result.subject, {
 			userAgent: options.userAgent,
 			tracerProvider: options.tracerProvider,
-			meterProvider: options.meterProvider
+			meterProvider: options.meterProvider,
+			allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 		});
 		if (subjectResult != null && linksToPortableActor(subjectResult, canonicalId)) return normalizeActorHandle(`@${subject[1]}@${subject[2]}`, options);
 	}

package/dist-tests/actor.test.mjs

@@ -1,8 +1,9 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { F as Person, P as Organization, Q as __exportAll, U as Service, a as Application, b as Group } from "./vocab-mc4pgfni.mjs";
-import { t as esm_default } from "./esm-B55wgjAT.mjs";
-import { a as normalizeActorHandle, i as isActor, n as getActorHandle, r as getActorTypeName, t as getActorClassByTypeName } from "./actor-C2nY5FCY.mjs";
+import { n as __exportAll } from "./rolldown-runtime-BWJg4WE8.mjs";
+import { t as esm_default } from "./esm-BIqRhjGA.mjs";
+import { a as normalizeActorHandle, i as isActor, n as getActorHandle, r as getActorTypeName, t as getActorClassByTypeName } from "./actor-BWv7I2WQ.mjs";
+import { F as Person, P as Organization, U as Service, a as Application, b as Group } from "./vocab-S9K4rFgH.mjs";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { deepStrictEqual, ok, rejects, strictEqual, throws } from "node:assert/strict";
 //#region ../../node_modules/.pnpm/fast-check@3.23.2/node_modules/fast-check/lib/esm/check/precondition/PreconditionFailure.js

package/dist-tests/{esm-B55wgjAT.mjs → esm-BIqRhjGA.mjs}

@@ -1,6 +1,6 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { $ as __toESM, Z as __commonJSMin } from "./vocab-mc4pgfni.mjs";
+import { i as __toESM, t as __commonJSMin } from "./rolldown-runtime-BWJg4WE8.mjs";
 //#endregion
 //#region ../../node_modules/.pnpm/regexparam@3.0.0/node_modules/regexparam/dist/index.mjs
 var import_glob_to_regexp = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exports, module) => {

package/dist-tests/gateway.test.mjs

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { F as Person, M as OrderedCollection, S as Image, c as CollectionPage, k as Note, s as Collection, u as Create } from "./vocab-mc4pgfni.mjs";
-import { t as esm_default } from "./esm-B55wgjAT.mjs";
-import { n as traverseCollection, t as lookupObject } from "./lookup-CeKwbSpe.mjs";
+import { t as esm_default } from "./esm-BIqRhjGA.mjs";
+import { F as Person, M as OrderedCollection, S as Image, c as CollectionPage, k as Note, s as Collection, u as Create } from "./vocab-S9K4rFgH.mjs";
+import { n as traverseCollection, t as lookupObject } from "./lookup---G_JdKW.mjs";
 import { t as assertInstanceOf } from "./utils-Df2odC27.mjs";
 import { createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { deepStrictEqual, ok, rejects } from "node:assert/strict";
@@ -597,7 +597,7 @@ test("getObject() sends the ActivityStreams Accept header to gateways", {
 	});
 	try {
 		assertInstanceOf(await (await createActivity()).getObject({
-			documentLoader: getDocumentLoader(),
+			documentLoader: getDocumentLoader({ allowPrivateAddress: true }),
 			contextLoader: mockDocumentLoader,
 			gateways: ["https://example.com"],
 			verifyPortableObject: createVerifier()

package/dist-tests/{lookup-CeKwbSpe.mjs → lookup---G_JdKW.mjs}

@@ -1,8 +1,8 @@
 import { Temporal } from "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { A as Object$1 } from "./vocab-mc4pgfni.mjs";
-import { i as isActor, o as name, s as version } from "./actor-C2nY5FCY.mjs";
+import { i as isActor, o as name, s as version } from "./actor-BWv7I2WQ.mjs";
 import { t as getTypeId } from "./type-BMdjm4Eg.mjs";
+import { A as Object$1 } from "./vocab-S9K4rFgH.mjs";
 import { canonicalizePortableUri, formatIri, getDocumentLoader, haveSameFe34Origin, haveSameIriOrigin, parseIri } from "@fedify/vocab-runtime";
 import { lookupWebFinger } from "@fedify/webfinger";
 import { SpanStatusCode, trace } from "@opentelemetry/api";

package/dist-tests/lookup.test.mjs

@@ -1,16 +1,18 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { A as Object$1, F as Person, k as Note, s as Collection } from "./vocab-mc4pgfni.mjs";
-import { t as esm_default } from "./esm-B55wgjAT.mjs";
-import { n as traverseCollection, t as lookupObject } from "./lookup-CeKwbSpe.mjs";
+import { t as esm_default } from "./esm-BIqRhjGA.mjs";
+import { A as Object$1, F as Person, k as Note, s as Collection } from "./vocab-S9K4rFgH.mjs";
+import { n as traverseCollection, t as lookupObject } from "./lookup---G_JdKW.mjs";
 import { t as assertInstanceOf } from "./utils-Df2odC27.mjs";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { deepStrictEqual, equal, ok, rejects } from "node:assert/strict";
 //#region src/lookup.test.ts
+const allowPrivateAddress = { allowPrivateAddress: true };
 test("lookupObject()", {
 	sanitizeResources: false,
 	sanitizeOps: false
 }, async (t) => {
+	const responseTimers = [];
 	esm_default.spyGlobal();
 	esm_default.get("begin:https://example.com/.well-known/webfinger", {
 		subject: "acct:johndoe@example.com",
@@ -34,7 +36,8 @@ test("lookupObject()", {
 	});
 	const options = {
 		documentLoader: mockDocumentLoader,
-		contextLoader: mockDocumentLoader
+		contextLoader: mockDocumentLoader,
+		...allowPrivateAddress
 	};
 	await t.step("actor", async () => {
 		const person = await lookupObject("@johndoe@example.com", options);
@@ -73,7 +76,7 @@ test("lookupObject()", {
 	});
 	esm_default.removeRoutes({ includeFallback: false });
 	esm_default.get("begin:https://example.com/.well-known/webfinger", () => new Promise((resolve) => {
-		setTimeout(() => {
+		responseTimers.push(setTimeout(() => {
 			resolve({
 				subject: "acct:johndoe@example.com",
 				links: [{
@@ -82,7 +85,7 @@ test("lookupObject()", {
 					type: "application/activity+json"
 				}]
 			});
-		}, 1e3);
+		}, 1e3));
 	}));
 	await t.step("request cancellation", async () => {
 		const controller = new AbortController();
@@ -113,7 +116,7 @@ test("lookupObject()", {
 	});
 	esm_default.removeRoutes({ includeFallback: false });
 	esm_default.get("begin:https://example.com/.well-known/webfinger", () => new Promise((resolve) => {
-		setTimeout(() => {
+		responseTimers.push(setTimeout(() => {
 			resolve({
 				subject: "acct:johndoe@example.com",
 				links: [{
@@ -122,7 +125,7 @@ test("lookupObject()", {
 					type: "application/activity+json"
 				}]
 			});
-		}, 500);
+		}, 500));
 	}));
 	await t.step("cancellation with immediate abort", async () => {
 		const controller = new AbortController();
@@ -134,7 +137,7 @@ test("lookupObject()", {
 	});
 	esm_default.removeRoutes({ includeFallback: false });
 	esm_default.get("https://example.com/slow-object", () => new Promise((resolve) => {
-		setTimeout(() => {
+		responseTimers.push(setTimeout(() => {
 			resolve({
 				status: 200,
 				headers: { "Content-Type": "application/activity+json" },
@@ -144,7 +147,7 @@ test("lookupObject()", {
 					content: "Slow response"
 				}
 			});
-		}, 1e3);
+		}, 1e3));
 	}));
 	await t.step("direct object fetch cancellation", async () => {
 		const controller = new AbortController();
@@ -155,6 +158,7 @@ test("lookupObject()", {
 		controller.abort();
 		deepStrictEqual(await promise, null);
 	});
+	for (const timer of responseTimers) clearTimeout(timer);
 	esm_default.hardReset();
 	esm_default.removeRoutes();
 });
@@ -392,15 +396,18 @@ test("FEP-fe34: lookupObject() cross-origin security", {
 			throw new Error(`Unexpected URL: ${url}`);
 		};
 		deepStrictEqual(await lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader
 		}), null);
 		await rejects(() => lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader,
 			crossOrigin: "throw"
 		}), Error, "The object's @id (https://malicious.com/fake-actor) has a different origin than the document URL (https://different-origin.com/actor)");
 		const result2 = await lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader,
 			crossOrigin: "trust"
@@ -471,11 +478,20 @@ test("FEP-fe34: lookupObject() cross-origin security", {
 		const errorDocumentLoader = async (_url) => {
 			throw new Error("Network error");
 		};
-		deepStrictEqual(await lookupObject("https://example.com/note", {
-			documentLoader: errorDocumentLoader,
-			contextLoader: mockDocumentLoader,
-			crossOrigin: "throw"
-		}), null);
+		esm_default.spyGlobal();
+		esm_default.get("begin:https://example.com/.well-known/webfinger", 404);
+		let result;
+		try {
+			result = await lookupObject("https://example.com/note", {
+				...allowPrivateAddress,
+				documentLoader: errorDocumentLoader,
+				contextLoader: mockDocumentLoader,
+				crossOrigin: "throw"
+			});
+		} finally {
+			esm_default.hardReset();
+		}
+		deepStrictEqual(result, null);
 	});
 	await t.step("malformed JSON handling with cross-origin policy", async () => {
 		const malformedJsonDocumentLoader = async (url) => {
@@ -540,6 +556,7 @@ test("lookupObject() records activitypub.object.lookup counter", {
 		await t.step("records kind=actor for an actor result", async () => {
 			const [meterProvider, recorder] = createTestMeterProvider();
 			assertInstanceOf(await lookupObject("@johndoe@example.com", {
+				...allowPrivateAddress,
 				documentLoader: mockDocumentLoader,
 				contextLoader: mockDocumentLoader,
 				meterProvider
@@ -593,6 +610,7 @@ test("lookupObject() records activitypub.object.lookup counter", {
 			});
 			const [meterProvider, recorder] = createTestMeterProvider();
 			deepStrictEqual(await lookupObject("janedoe@example.com", {
+				...allowPrivateAddress,
 				documentLoader: mockDocumentLoader,
 				contextLoader: mockDocumentLoader,
 				meterProvider
@@ -622,6 +640,7 @@ test("lookupObject() records activitypub.object.lookup counter", {
 			});
 			const [meterProvider, recorder] = createTestMeterProvider();
 			await lookupObject("@johndoe@example.com", {
+				...allowPrivateAddress,
 				documentLoader: mockDocumentLoader,
 				contextLoader: mockDocumentLoader,
 				meterProvider
@@ -643,6 +662,7 @@ test("lookupObject() records activitypub.object.lookup counter", {
 			});
 			const [meterProvider, recorder] = createTestMeterProvider();
 			await lookupObject(new URL("acct:johndoe@example.com"), {
+				...allowPrivateAddress,
 				documentLoader: mockDocumentLoader,
 				contextLoader: mockDocumentLoader,
 				meterProvider