@fedify/vocab 2.5.0-dev.2446 → 2.5.0-dev.2492

package/dist/mod.d.ts

@@ -1,6 +1,7 @@
 /// <reference lib="esnext.temporal" />
 import { Decimal, Decimal as Decimal$1, DocumentLoader, DocumentLoader as DocumentLoader$1, DocumentLoaderOptions, GetUserAgentOptions, GetUserAgentOptions as GetUserAgentOptions$1, Json, LanguageString, LanguageString as LanguageString$1, PortableObjectReferrer, PortableObjectVerification, PortableObjectVerifier, PortableObjectVerifier as PortableObjectVerifier$1, PortableObjectVerifierOptions, PropertyPreprocessor, PropertyPreprocessor as PropertyPreprocessor$1, PropertyPreprocessorContext, RemoteDocument } from "@fedify/vocab-runtime";
 import { MeterProvider, Span, TracerProvider } from "@opentelemetry/api";
+import { DereferenceObserver } from "@fedify/vocab-runtime/internal/portable-dereference";
 
 //#region src/vocab.d.ts
 /** Describes an object of any kind. The Object type serves as the base type for
@@ -21,6 +22,11 @@ declare class Object$1 {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -2849,6 +2855,11 @@ declare class PropertyValue {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -2977,6 +2988,11 @@ declare class Measure {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -3643,6 +3659,11 @@ declare class InteractionPolicy {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -3818,6 +3839,11 @@ declare class InteractionRule {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -5551,6 +5577,11 @@ declare class Translation {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -7717,6 +7748,11 @@ declare class DidService {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -7953,6 +7989,11 @@ declare class DataIntegrityProof {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -8132,6 +8173,11 @@ declare class CryptographicKey {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -8290,6 +8336,11 @@ declare class Multikey {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -8688,6 +8739,11 @@ declare class Commitment {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -8823,6 +8879,11 @@ declare class Intent {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -13600,6 +13661,11 @@ declare class Endpoints {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -15416,6 +15482,11 @@ declare class Link {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -23391,6 +23462,11 @@ declare class Source {
     message: string;
     values?: Record<string, unknown>;
   } | undefined;
+  /**
+  * Internal cross-package contract with @fedify/testing, which copies this
+  * cache when attaching document loaders to an activity clone.  Keep this
+  * accessor name and its getter/setter semantics stable.
+  */
   protected get _cachedJsonLd(): unknown | undefined;
   protected set _cachedJsonLd(value: unknown | undefined);
   protected get _baseUrl(): URL | undefined;
@@ -25673,6 +25749,34 @@ type ObjectLookupKind = "actor" | "object" | "other";
 *
 * @since 0.2.0
 */
+/**
+* The key of the {@link LookupObjectOptions} property that observes how
+* {@link lookupObject} selects the object it returns.
+*
+* @internal Technically exported for other Fedify packages, but not part of
+* the public API contract.  This is not considered public API for Semantic
+* Versioning decisions.
+*/
+declare const lookupObserver: unique symbol;
+/**
+* Observes how {@link lookupObject} selects the object it returns: each
+* candidate is offered to {@link DereferenceObserver.accept} at the boundary
+* that would otherwise return it, both for ordinary documents and for
+* FEP-ef61 portable objects, and each failure that does not propagate is
+* reported to {@link DereferenceObserver.failed}.  The observer is not passed
+* on to the returned object.
+*
+* @internal Technically exported for other Fedify packages, but not part of
+* the public API contract.  This is not considered public API for Semantic
+* Versioning decisions.
+*/
+interface LookupObserver extends DereferenceObserver<Object$1> {
+  /**
+  * Whether to fall back to WebFinger when an HTTP(S) URL cannot be fetched.
+  * Defaults to `true`.
+  */
+  readonly webFinger?: boolean;
+}
 interface LookupObjectOptions {
   /**
   * The document loader for loading remote JSON-LD documents.
@@ -25768,6 +25872,11 @@ interface LookupObjectOptions {
   * @since 2.4.0
   */
   verifyPortableObject?: PortableObjectVerifier$1;
+  /**
+  * See {@link LookupObserver}.
+  * @internal
+  */
+  [lookupObserver]?: LookupObserver;
 }
 /**
 * Looks up an ActivityStreams object by its URI (including `acct:` URIs)
@@ -25992,4 +26101,4 @@ declare function getTypeId(object: Object$1 | Link | null): URL | null;
 */
 declare function getTypeId(object: Object$1 | Link | null | undefined): URL | null | undefined;
 //#endregion
-export { $EntityType, Accept, Activity, Actor, ActorDiscoveryResult, ActorTypeName, Add, Agreement, Announce, AnnounceAuthorization, AnnounceRequest, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Commitment, Create, CryptographicKey, DataIntegrityProof, type Decimal, Delete, DidService, Dislike, Document, type DocumentLoader, type DocumentLoaderOptions, Emoji, EmojiReact, Endpoints, Event, Export, FeatureAuthorization, FeatureRequest, FeaturedCollection, FeaturedItem, FediverseHandle, Flag, Follow, GetActorHandleOptions, type GetUserAgentOptions, Group, Hashtag, Ignore, Image, Intent, InteractionPolicy, InteractionRule, IntransitiveActivity, Invite, Join, type Json, LanguageString, Leave, Like, LikeAuthorization, LikeRequest, Link, Listen, LookupObjectOptions, Measure, Mention, Move, Multikey, NormalizeActorHandleOptions, Note, Object$1 as Object, ObjectLookupKind, Offer, OrderedCollection, OrderedCollectionPage, Organization, PUBLIC_COLLECTION, Page, Person, Place, type PortableObjectReferrer, type PortableObjectVerification, type PortableObjectVerifier, type PortableObjectVerifierOptions, Profile, type PropertyPreprocessor, type PropertyPreprocessorContext, PropertyValue, Proposal, Question, QuoteAuthorization, QuoteRequest, Read, Recipient, Reject, Relationship, type RemoteDocument, Remove, ReplyAuthorization, ReplyRequest, Service, Source, TentativeAccept, TentativeReject, Tombstone, Translation, Travel, TraverseCollectionOptions, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getEntityTypeById, getTypeId, isActor, isEntityType, isFediverseHandle, lookupObject, normalizeActorHandle, normalizeLinkToImage, parseFediverseHandle, toAcctUrl, traverseCollection };
+export { $EntityType, Accept, Activity, Actor, ActorDiscoveryResult, ActorTypeName, Add, Agreement, Announce, AnnounceAuthorization, AnnounceRequest, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Commitment, Create, CryptographicKey, DataIntegrityProof, type Decimal, Delete, DidService, Dislike, Document, type DocumentLoader, type DocumentLoaderOptions, Emoji, EmojiReact, Endpoints, Event, Export, FeatureAuthorization, FeatureRequest, FeaturedCollection, FeaturedItem, FediverseHandle, Flag, Follow, GetActorHandleOptions, type GetUserAgentOptions, Group, Hashtag, Ignore, Image, Intent, InteractionPolicy, InteractionRule, IntransitiveActivity, Invite, Join, type Json, LanguageString, Leave, Like, LikeAuthorization, LikeRequest, Link, Listen, LookupObjectOptions, LookupObserver, Measure, Mention, Move, Multikey, NormalizeActorHandleOptions, Note, Object$1 as Object, ObjectLookupKind, Offer, OrderedCollection, OrderedCollectionPage, Organization, PUBLIC_COLLECTION, Page, Person, Place, type PortableObjectReferrer, type PortableObjectVerification, type PortableObjectVerifier, type PortableObjectVerifierOptions, Profile, type PropertyPreprocessor, type PropertyPreprocessorContext, PropertyValue, Proposal, Question, QuoteAuthorization, QuoteRequest, Read, Recipient, Reject, Relationship, type RemoteDocument, Remove, ReplyAuthorization, ReplyRequest, Service, Source, TentativeAccept, TentativeReject, Tombstone, Translation, Travel, TraverseCollectionOptions, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getEntityTypeById, getTypeId, isActor, isEntityType, isFediverseHandle, lookupObject, lookupObserver, normalizeActorHandle, normalizeLinkToImage, parseFediverseHandle, toAcctUrl, traverseCollection };

package/dist/mod.js

@@ -6,13 +6,13 @@ import { domainToASCII, domainToUnicode } from "node:url";
 import jsonld from "@fedify/vocab-runtime/jsonld";
 import { getLogger } from "@logtape/logtape";
 import { compactJsonLdCache, createScopedContextLoader, getPortableActorGateways, isTrustedIriOrigin, normalizeJsonLdIris } from "@fedify/vocab-runtime/internal/jsonld-cache";
-import { PortableObjectRejectedError, copyPortableProvenance, createSnapshotContextLoader, dereferencePortableIri, getPortableGatewayCandidates, getPortableResponseClaim, getReferrerGateways, isPortableIri, isPortableMode, isUnsecuredPortableObject, isUnverifiedPortableClaim, markUnverifiedPortableClaim, mustDereferencePortableObject, parseCompatibleEf61Reference, recordPortableReferrer, rejectMalformedCompatibleReference, warnUnverifiableEmbeddedObject } from "@fedify/vocab-runtime/internal/portable-dereference";
+import { PortableObjectRejectedError, acceptCandidate, copyPortableProvenance, createSnapshotContextLoader, dereferencePortableIri, getPortableGatewayCandidates, getPortableResponseClaim, getReferrerGateways, isPortableIri, isPortableMode, isUnsecuredPortableObject, isUnverifiedPortableClaim, markUnverifiedPortableClaim, mustDereferencePortableObject, parseCompatibleEf61Reference, recordPortableReferrer, rejectMalformedCompatibleReference, warnUnverifiableEmbeddedObject } from "@fedify/vocab-runtime/internal/portable-dereference";
 import { enterSignedValueScope, resolveSignedValues, retainedSignedValueRef } from "@fedify/vocab-runtime/internal/signed-representation";
 import { isTemporalDuration, isTemporalInstant } from "@fedify/vocab-runtime/temporal";
 import { delay } from "es-toolkit";
 //#region deno.json
 var name = "@fedify/vocab";
-var version = "2.5.0-dev.2446+2014cb03";
+var version = "2.5.0-dev.2492+4648c04e";
 //#endregion
 //#region src/type.ts
 function getTypeId(object) {
@@ -352,6 +352,11 @@ var Object$1 = class Object$1 {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -14036,6 +14041,11 @@ var PropertyValue = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -14413,6 +14423,11 @@ var Measure = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -15811,6 +15826,11 @@ var InteractionPolicy = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -16324,6 +16344,11 @@ var InteractionRule = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -19800,6 +19825,11 @@ var Translation = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -27485,6 +27515,11 @@ var DidService = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -28001,6 +28036,11 @@ var DataIntegrityProof = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -28692,6 +28732,11 @@ var CryptographicKey = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -29364,6 +29409,11 @@ var Multikey = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -30436,6 +30486,11 @@ var Commitment = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -30827,6 +30882,11 @@ var Intent = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -42251,6 +42311,11 @@ var Endpoints = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -49032,6 +49097,11 @@ var Link = class Link {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -75152,6 +75222,11 @@ var Source = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -77784,7 +77859,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 	const result = await lookupWebFinger(handle, {
 		userAgent: options.userAgent,
 		tracerProvider: options.tracerProvider,
-		meterProvider: options.meterProvider
+		meterProvider: options.meterProvider,
+		allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 	});
 	if (result == null || !linksToPortableActor(result, canonicalId)) throw new ActorHandleNotFoundError();
 	const subject = result.subject?.match(/^acct:([^@]+)@([^@]+)$/);
@@ -77792,7 +77868,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 		const subjectResult = await lookupWebFinger(result.subject, {
 			userAgent: options.userAgent,
 			tracerProvider: options.tracerProvider,
-			meterProvider: options.meterProvider
+			meterProvider: options.meterProvider,
+			allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 		});
 		if (subjectResult != null && linksToPortableActor(subjectResult, canonicalId)) return normalizeActorHandle(`@${subject[1]}@${subject[2]}`, options);
 	}
@@ -77981,6 +78058,20 @@ const logger = getLogger([
 	"lookup"
 ]);
 /**
+* Options for the {@link lookupObject} function.
+*
+* @since 0.2.0
+*/
+/**
+* The key of the {@link LookupObjectOptions} property that observes how
+* {@link lookupObject} selects the object it returns.
+*
+* @internal Technically exported for other Fedify packages, but not part of
+* the public API contract.  This is not considered public API for Semantic
+* Versioning decisions.
+*/
+const lookupObserver = Symbol.for("@fedify/vocab/lookupObserver");
+/**
 * The maximum number of requests to FEP-ef61 gateways that a single
 * {@link lookupObject} call makes for portable objects.  Gateways come from
 * possibly untrusted WebFinger responses and location hints, so they are
@@ -78100,8 +78191,13 @@ async function lookupObjectInternal(identifier, options = {}) {
 			remoteDoc = await documentLoader(identifier.href, { signal: options.signal });
 		} catch (error) {
 			logger.debug("Failed to fetch remote document:\n{error}", { error });
+			options[lookupObserver]?.failed?.({
+				operation: "fetch",
+				error
+			});
 		}
 	}
+	if (remoteDoc == null && options[lookupObserver]?.webFinger === false) return null;
 	if (remoteDoc == null) {
 		const jrd = await lookupWebFinger(identifier, {
 			userAgent: options.userAgent,
@@ -78146,7 +78242,7 @@ async function lookupObjectInternal(identifier, options = {}) {
 		}
 	}
 	if (remoteDoc == null) return null;
-	const snapshot = options.verifyPortableObject == null ? null : createSnapshotContextLoader(options.contextLoader ?? getDocumentLoader({ userAgent: options.userAgent }));
+	const snapshot = options.verifyPortableObject == null && options[lookupObserver] == null ? null : createSnapshotContextLoader(options.contextLoader ?? getDocumentLoader({ userAgent: options.userAgent }));
 	try {
 		let object;
 		let documentUrl;
@@ -78160,6 +78256,10 @@ async function lookupObjectInternal(identifier, options = {}) {
 				baseUrl: documentUrl
 			});
 		} catch (error) {
+			options[lookupObserver]?.failed?.({
+				operation: "parse",
+				error
+			});
 			if (error instanceof TypeError) {
 				logger.debug("Failed to parse JSON-LD document: {error}\n{document}", {
 					...remoteDoc,
@@ -78169,7 +78269,7 @@ async function lookupObjectInternal(identifier, options = {}) {
 			}
 			throw error;
 		}
-		if (snapshot != null) {
+		if (options.verifyPortableObject != null && snapshot != null) {
 			const claim = getPortableResponseClaim(remoteDoc.documentUrl, object.id);
 			if (claim === null) {
 				logger.debug("Refusing the document {documentUrl}, as it claims to be a portable object with a malformed compatible identifier.", { documentUrl: remoteDoc.documentUrl });
@@ -78188,8 +78288,16 @@ async function lookupObjectInternal(identifier, options = {}) {
 				...remoteDoc,
 				objectId: object.id.href
 			});
+			options[lookupObserver]?.failed?.({ operation: "origin" });
 			return null;
 		}
+		if (!await acceptCandidate(options[lookupObserver], {
+			document: remoteDoc.document,
+			documentUrl: remoteDoc.documentUrl,
+			baseUrl: documentUrl,
+			contextLoader: snapshot?.loader ?? options.contextLoader ?? getDocumentLoader({ userAgent: options.userAgent }),
+			object
+		})) return null;
 		return object;
 	} finally {
 		snapshot?.release();
@@ -78303,6 +78411,7 @@ async function dereference({ options, documentLoader }, id, inferredGateways, ga
 			verifyPortableObject: options.verifyPortableObject,
 			crossOrigin: options.crossOrigin === "throw" ? "throw" : "ignore",
 			signal: options.signal,
+			observer: options[lookupObserver],
 			parse: (document, { contextLoader, baseUrl }) => Object$1.fromJsonLd(document, {
 				documentLoader,
 				contextLoader,
@@ -78351,4 +78460,4 @@ async function* traverseCollection(collection, options = {}) {
 	}
 }
 //#endregion
-export { Accept, Activity, Add, Agreement, Announce, AnnounceAuthorization, AnnounceRequest, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Commitment, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, FeatureAuthorization, FeatureRequest, FeaturedCollection, FeaturedItem, Flag, Follow, Group, Hashtag, Ignore, Image, Intent, InteractionPolicy, InteractionRule, IntransitiveActivity, Invite, Join, LanguageString, Leave, Like, LikeAuthorization, LikeRequest, Link, Listen, Measure, Mention, Move, Multikey, Note, Object$1 as Object, Offer, OrderedCollection, OrderedCollectionPage, Organization, PUBLIC_COLLECTION, Page, Person, Place, Profile, PropertyValue, Proposal, Question, QuoteAuthorization, QuoteRequest, Read, Reject, Relationship, Remove, ReplyAuthorization, ReplyRequest, Service, Source, TentativeAccept, TentativeReject, Tombstone, Translation, Travel, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getEntityTypeById, getTypeId, isActor, isEntityType, isFediverseHandle, lookupObject, normalizeActorHandle, normalizeLinkToImage, parseFediverseHandle, toAcctUrl, traverseCollection };
+export { Accept, Activity, Add, Agreement, Announce, AnnounceAuthorization, AnnounceRequest, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Commitment, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, FeatureAuthorization, FeatureRequest, FeaturedCollection, FeaturedItem, Flag, Follow, Group, Hashtag, Ignore, Image, Intent, InteractionPolicy, InteractionRule, IntransitiveActivity, Invite, Join, LanguageString, Leave, Like, LikeAuthorization, LikeRequest, Link, Listen, Measure, Mention, Move, Multikey, Note, Object$1 as Object, Offer, OrderedCollection, OrderedCollectionPage, Organization, PUBLIC_COLLECTION, Page, Person, Place, Profile, PropertyValue, Proposal, Question, QuoteAuthorization, QuoteRequest, Read, Reject, Relationship, Remove, ReplyAuthorization, ReplyRequest, Service, Source, TentativeAccept, TentativeReject, Tombstone, Translation, Travel, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getEntityTypeById, getTypeId, isActor, isEntityType, isFediverseHandle, lookupObject, lookupObserver, normalizeActorHandle, normalizeLinkToImage, parseFediverseHandle, toAcctUrl, traverseCollection };

package/dist-tests/{actor-C89Bex4F.mjs → actor-BjUFWXfi.mjs}

@@ -1,14 +1,14 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { F as Person, P as Organization, U as Service, a as Application, b as Group } from "./vocab-jHKm_LJ6.mjs";
 import { t as getTypeId } from "./type-BMdjm4Eg.mjs";
+import { F as Person, P as Organization, U as Service, a as Application, b as Group } from "./vocab-BMEyHiOV.mjs";
 import { canonicalizePortableUri, formatIri, fromCompatibleEf61Id, isGatewayUrl } from "@fedify/vocab-runtime";
 import { lookupWebFinger } from "@fedify/webfinger";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { domainToASCII, domainToUnicode } from "node:url";
 //#region deno.json
 var name = "@fedify/vocab";
-var version = "2.5.0-dev.2446+2014cb03";
+var version = "2.5.0-dev.2492+4648c04e";
 //#endregion
 //#region src/actor.ts
 const ACTOR_DISCOVERY_HISTOGRAM_BUCKETS = [
@@ -206,7 +206,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 	const result = await lookupWebFinger(handle, {
 		userAgent: options.userAgent,
 		tracerProvider: options.tracerProvider,
-		meterProvider: options.meterProvider
+		meterProvider: options.meterProvider,
+		allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 	});
 	if (result == null || !linksToPortableActor(result, canonicalId)) throw new ActorHandleNotFoundError();
 	const subject = result.subject?.match(/^acct:([^@]+)@([^@]+)$/);
@@ -214,7 +215,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 		const subjectResult = await lookupWebFinger(result.subject, {
 			userAgent: options.userAgent,
 			tracerProvider: options.tracerProvider,
-			meterProvider: options.meterProvider
+			meterProvider: options.meterProvider,
+			allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 		});
 		if (subjectResult != null && linksToPortableActor(subjectResult, canonicalId)) return normalizeActorHandle(`@${subject[1]}@${subject[2]}`, options);
 	}

package/dist-tests/actor.test.mjs

@@ -1,8 +1,9 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { $ as __exportAll, F as Person, P as Organization, U as Service, a as Application, b as Group } from "./vocab-jHKm_LJ6.mjs";
-import { t as esm_default } from "./esm-DtAfYdqR.mjs";
-import { a as normalizeActorHandle, i as isActor, n as getActorHandle, r as getActorTypeName, t as getActorClassByTypeName } from "./actor-C89Bex4F.mjs";
+import { n as __exportAll } from "./rolldown-runtime-BWJg4WE8.mjs";
+import { t as esm_default } from "./esm-BIqRhjGA.mjs";
+import { a as normalizeActorHandle, i as isActor, n as getActorHandle, r as getActorTypeName, t as getActorClassByTypeName } from "./actor-BjUFWXfi.mjs";
+import { F as Person, P as Organization, U as Service, a as Application, b as Group } from "./vocab-BMEyHiOV.mjs";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { deepStrictEqual, ok, rejects, strictEqual, throws } from "node:assert/strict";
 //#region ../../node_modules/.pnpm/fast-check@3.23.2/node_modules/fast-check/lib/esm/check/precondition/PreconditionFailure.js

package/dist-tests/{esm-DtAfYdqR.mjs → esm-BIqRhjGA.mjs}

@@ -1,6 +1,6 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { Q as __commonJSMin, et as __toESM } from "./vocab-jHKm_LJ6.mjs";
+import { i as __toESM, t as __commonJSMin } from "./rolldown-runtime-BWJg4WE8.mjs";
 //#endregion
 //#region ../../node_modules/.pnpm/regexparam@3.0.0/node_modules/regexparam/dist/index.mjs
 var import_glob_to_regexp = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exports, module) => {

package/dist-tests/gateway.test.mjs

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { F as Person, M as OrderedCollection, S as Image, c as CollectionPage, k as Note, s as Collection, u as Create } from "./vocab-jHKm_LJ6.mjs";
-import { t as esm_default } from "./esm-DtAfYdqR.mjs";
-import { n as traverseCollection, t as lookupObject } from "./lookup-BehNGq4X.mjs";
+import { t as esm_default } from "./esm-BIqRhjGA.mjs";
+import { F as Person, M as OrderedCollection, S as Image, c as CollectionPage, k as Note, s as Collection, u as Create } from "./vocab-BMEyHiOV.mjs";
+import { r as traverseCollection, t as lookupObject } from "./lookup-BQqIkZ5j.mjs";
 import { t as assertInstanceOf } from "./utils-Df2odC27.mjs";
 import { createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { deepStrictEqual, ok, rejects } from "node:assert/strict";
@@ -597,7 +597,7 @@ test("getObject() sends the ActivityStreams Accept header to gateways", {
 	});
 	try {
 		assertInstanceOf(await (await createActivity()).getObject({
-			documentLoader: getDocumentLoader(),
+			documentLoader: getDocumentLoader({ allowPrivateAddress: true }),
 			contextLoader: mockDocumentLoader,
 			gateways: ["https://example.com"],
 			verifyPortableObject: createVerifier()

package/dist-tests/license.test.mjs

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { E as Link, F as Person, J as Video, P as Organization, S as Image, U as Service, a as Application, b as Group, k as Note, s as Collection, u as Create, z as Question } from "./vocab-jHKm_LJ6.mjs";
-import "./src-fpZm9WyF.mjs";
+import { E as Link, F as Person, J as Video, P as Organization, S as Image, U as Service, a as Application, b as Group, k as Note, s as Collection, u as Create, z as Question } from "./vocab-BMEyHiOV.mjs";
+import "./src-DQiQQv6h.mjs";
 import { test } from "@fedify/fixture";
 import { deepStrictEqual, ok } from "node:assert/strict";
 import { getDocumentLoader, preloadedContexts } from "@fedify/vocab-runtime";