@fedify/vocab 2.5.0-dev.2448 → 2.5.0-dev.2494

package/dist/mod.js

@@ -12,7 +12,7 @@ import { isTemporalDuration, isTemporalInstant } from "@fedify/vocab-runtime/tem
 import { delay } from "es-toolkit";
 //#region deno.json
 var name = "@fedify/vocab";
-var version = "2.5.0-dev.2448+756933d0";
+var version = "2.5.0-dev.2494+f2e9b5d3";
 //#endregion
 //#region src/type.ts
 function getTypeId(object) {
@@ -352,6 +352,11 @@ var Object$1 = class Object$1 {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -14036,6 +14041,11 @@ var PropertyValue = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -14413,6 +14423,11 @@ var Measure = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -15811,6 +15826,11 @@ var InteractionPolicy = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -16324,6 +16344,11 @@ var InteractionRule = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -19800,6 +19825,11 @@ var Translation = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -27485,6 +27515,11 @@ var DidService = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -28001,6 +28036,11 @@ var DataIntegrityProof = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -28692,6 +28732,11 @@ var CryptographicKey = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -29364,6 +29409,11 @@ var Multikey = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -30436,6 +30486,11 @@ var Commitment = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -30827,6 +30882,11 @@ var Intent = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -42251,6 +42311,11 @@ var Endpoints = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -49032,6 +49097,11 @@ var Link = class Link {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -75152,6 +75222,11 @@ var Source = class {
 	get _warning() {
 		return this.#warning;
 	}
+	/**
+	* Internal cross-package contract with @fedify/testing, which copies this
+	* cache when attaching document loaders to an activity clone.  Keep this
+	* accessor name and its getter/setter semantics stable.
+	*/
 	get _cachedJsonLd() {
 		return this.#cachedJsonLd;
 	}
@@ -77784,7 +77859,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 	const result = await lookupWebFinger(handle, {
 		userAgent: options.userAgent,
 		tracerProvider: options.tracerProvider,
-		meterProvider: options.meterProvider
+		meterProvider: options.meterProvider,
+		allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 	});
 	if (result == null || !linksToPortableActor(result, canonicalId)) throw new ActorHandleNotFoundError();
 	const subject = result.subject?.match(/^acct:([^@]+)@([^@]+)$/);
@@ -77792,7 +77868,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 		const subjectResult = await lookupWebFinger(result.subject, {
 			userAgent: options.userAgent,
 			tracerProvider: options.tracerProvider,
-			meterProvider: options.meterProvider
+			meterProvider: options.meterProvider,
+			allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 		});
 		if (subjectResult != null && linksToPortableActor(subjectResult, canonicalId)) return normalizeActorHandle(`@${subject[1]}@${subject[2]}`, options);
 	}

package/dist-tests/{actor-C93GLWk5.mjs → actor-CW4MtXG3.mjs}

@@ -1,14 +1,14 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { F as Person, P as Organization, U as Service, a as Application, b as Group } from "./vocab-jHKm_LJ6.mjs";
 import { t as getTypeId } from "./type-BMdjm4Eg.mjs";
+import { F as Person, P as Organization, U as Service, a as Application, b as Group } from "./vocab-BMEyHiOV.mjs";
 import { canonicalizePortableUri, formatIri, fromCompatibleEf61Id, isGatewayUrl } from "@fedify/vocab-runtime";
 import { lookupWebFinger } from "@fedify/webfinger";
 import { SpanStatusCode, trace } from "@opentelemetry/api";
 import { domainToASCII, domainToUnicode } from "node:url";
 //#region deno.json
 var name = "@fedify/vocab";
-var version = "2.5.0-dev.2448+756933d0";
+var version = "2.5.0-dev.2494+f2e9b5d3";
 //#endregion
 //#region src/actor.ts
 const ACTOR_DISCOVERY_HISTOGRAM_BUCKETS = [
@@ -206,7 +206,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 	const result = await lookupWebFinger(handle, {
 		userAgent: options.userAgent,
 		tracerProvider: options.tracerProvider,
-		meterProvider: options.meterProvider
+		meterProvider: options.meterProvider,
+		allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 	});
 	if (result == null || !linksToPortableActor(result, canonicalId)) throw new ActorHandleNotFoundError();
 	const subject = result.subject?.match(/^acct:([^@]+)@([^@]+)$/);
@@ -214,7 +215,8 @@ async function getPortableActorHandle(actor, actorId, options) {
 		const subjectResult = await lookupWebFinger(result.subject, {
 			userAgent: options.userAgent,
 			tracerProvider: options.tracerProvider,
-			meterProvider: options.meterProvider
+			meterProvider: options.meterProvider,
+			allowPrivateAddress: "allowPrivateAddress" in options && options.allowPrivateAddress === true
 		});
 		if (subjectResult != null && linksToPortableActor(subjectResult, canonicalId)) return normalizeActorHandle(`@${subject[1]}@${subject[2]}`, options);
 	}

package/dist-tests/actor.test.mjs

@@ -1,8 +1,9 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { $ as __exportAll, F as Person, P as Organization, U as Service, a as Application, b as Group } from "./vocab-jHKm_LJ6.mjs";
-import { t as esm_default } from "./esm-DtAfYdqR.mjs";
-import { a as normalizeActorHandle, i as isActor, n as getActorHandle, r as getActorTypeName, t as getActorClassByTypeName } from "./actor-C93GLWk5.mjs";
+import { n as __exportAll } from "./rolldown-runtime-BWJg4WE8.mjs";
+import { t as esm_default } from "./esm-BIqRhjGA.mjs";
+import { a as normalizeActorHandle, i as isActor, n as getActorHandle, r as getActorTypeName, t as getActorClassByTypeName } from "./actor-CW4MtXG3.mjs";
+import { F as Person, P as Organization, U as Service, a as Application, b as Group } from "./vocab-BMEyHiOV.mjs";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { deepStrictEqual, ok, rejects, strictEqual, throws } from "node:assert/strict";
 //#region ../../node_modules/.pnpm/fast-check@3.23.2/node_modules/fast-check/lib/esm/check/precondition/PreconditionFailure.js

package/dist-tests/{esm-DtAfYdqR.mjs → esm-BIqRhjGA.mjs}

@@ -1,6 +1,6 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { Q as __commonJSMin, et as __toESM } from "./vocab-jHKm_LJ6.mjs";
+import { i as __toESM, t as __commonJSMin } from "./rolldown-runtime-BWJg4WE8.mjs";
 //#endregion
 //#region ../../node_modules/.pnpm/regexparam@3.0.0/node_modules/regexparam/dist/index.mjs
 var import_glob_to_regexp = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exports, module) => {

package/dist-tests/gateway.test.mjs

@@ -1,8 +1,8 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { F as Person, M as OrderedCollection, S as Image, c as CollectionPage, k as Note, s as Collection, u as Create } from "./vocab-jHKm_LJ6.mjs";
-import { t as esm_default } from "./esm-DtAfYdqR.mjs";
-import { r as traverseCollection, t as lookupObject } from "./lookup-C4i0dNeY.mjs";
+import { t as esm_default } from "./esm-BIqRhjGA.mjs";
+import { F as Person, M as OrderedCollection, S as Image, c as CollectionPage, k as Note, s as Collection, u as Create } from "./vocab-BMEyHiOV.mjs";
+import { r as traverseCollection, t as lookupObject } from "./lookup-DFHFanoB.mjs";
 import { t as assertInstanceOf } from "./utils-Df2odC27.mjs";
 import { createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { deepStrictEqual, ok, rejects } from "node:assert/strict";
@@ -597,7 +597,7 @@ test("getObject() sends the ActivityStreams Accept header to gateways", {
 	});
 	try {
 		assertInstanceOf(await (await createActivity()).getObject({
-			documentLoader: getDocumentLoader(),
+			documentLoader: getDocumentLoader({ allowPrivateAddress: true }),
 			contextLoader: mockDocumentLoader,
 			gateways: ["https://example.com"],
 			verifyPortableObject: createVerifier()

package/dist-tests/license.test.mjs

@@ -1,7 +1,7 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { E as Link, F as Person, J as Video, P as Organization, S as Image, U as Service, a as Application, b as Group, k as Note, s as Collection, u as Create, z as Question } from "./vocab-jHKm_LJ6.mjs";
-import "./src-Dn87CPDV.mjs";
+import { E as Link, F as Person, J as Video, P as Organization, S as Image, U as Service, a as Application, b as Group, k as Note, s as Collection, u as Create, z as Question } from "./vocab-BMEyHiOV.mjs";
+import "./src-CiJ-s7w0.mjs";
 import { test } from "@fedify/fixture";
 import { deepStrictEqual, ok } from "node:assert/strict";
 import { getDocumentLoader, preloadedContexts } from "@fedify/vocab-runtime";

package/dist-tests/{lookup-C4i0dNeY.mjs → lookup-DFHFanoB.mjs}

@@ -1,8 +1,8 @@
 import { Temporal } from "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { A as Object$1 } from "./vocab-jHKm_LJ6.mjs";
-import { i as isActor, o as name, s as version } from "./actor-C93GLWk5.mjs";
+import { i as isActor, o as name, s as version } from "./actor-CW4MtXG3.mjs";
 import { t as getTypeId } from "./type-BMdjm4Eg.mjs";
+import { A as Object$1 } from "./vocab-BMEyHiOV.mjs";
 import { canonicalizePortableUri, formatIri, getDocumentLoader, haveSameFe34Origin, haveSameIriOrigin, parseIri } from "@fedify/vocab-runtime";
 import { lookupWebFinger } from "@fedify/webfinger";
 import { SpanStatusCode, trace } from "@opentelemetry/api";

package/dist-tests/lookup.test.mjs

@@ -1,16 +1,18 @@
 import "temporal-polyfill";
 globalThis.addEventListener = () => {};
-import { A as Object$1, F as Person, k as Note, s as Collection } from "./vocab-jHKm_LJ6.mjs";
-import { t as esm_default } from "./esm-DtAfYdqR.mjs";
-import { n as lookupObserver, r as traverseCollection, t as lookupObject } from "./lookup-C4i0dNeY.mjs";
+import { t as esm_default } from "./esm-BIqRhjGA.mjs";
+import { A as Object$1, F as Person, k as Note, s as Collection } from "./vocab-BMEyHiOV.mjs";
+import { n as lookupObserver, r as traverseCollection, t as lookupObject } from "./lookup-DFHFanoB.mjs";
 import { t as assertInstanceOf } from "./utils-Df2odC27.mjs";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { deepStrictEqual, equal, ok, rejects } from "node:assert/strict";
 //#region src/lookup.test.ts
+const allowPrivateAddress = { allowPrivateAddress: true };
 test("lookupObject()", {
 	sanitizeResources: false,
 	sanitizeOps: false
 }, async (t) => {
+	const responseTimers = [];
 	esm_default.spyGlobal();
 	esm_default.get("begin:https://example.com/.well-known/webfinger", {
 		subject: "acct:johndoe@example.com",
@@ -34,7 +36,8 @@ test("lookupObject()", {
 	});
 	const options = {
 		documentLoader: mockDocumentLoader,
-		contextLoader: mockDocumentLoader
+		contextLoader: mockDocumentLoader,
+		...allowPrivateAddress
 	};
 	await t.step("actor", async () => {
 		const person = await lookupObject("@johndoe@example.com", options);
@@ -73,7 +76,7 @@ test("lookupObject()", {
 	});
 	esm_default.removeRoutes({ includeFallback: false });
 	esm_default.get("begin:https://example.com/.well-known/webfinger", () => new Promise((resolve) => {
-		setTimeout(() => {
+		responseTimers.push(setTimeout(() => {
 			resolve({
 				subject: "acct:johndoe@example.com",
 				links: [{
@@ -82,7 +85,7 @@ test("lookupObject()", {
 					type: "application/activity+json"
 				}]
 			});
-		}, 1e3);
+		}, 1e3));
 	}));
 	await t.step("request cancellation", async () => {
 		const controller = new AbortController();
@@ -113,7 +116,7 @@ test("lookupObject()", {
 	});
 	esm_default.removeRoutes({ includeFallback: false });
 	esm_default.get("begin:https://example.com/.well-known/webfinger", () => new Promise((resolve) => {
-		setTimeout(() => {
+		responseTimers.push(setTimeout(() => {
 			resolve({
 				subject: "acct:johndoe@example.com",
 				links: [{
@@ -122,7 +125,7 @@ test("lookupObject()", {
 					type: "application/activity+json"
 				}]
 			});
-		}, 500);
+		}, 500));
 	}));
 	await t.step("cancellation with immediate abort", async () => {
 		const controller = new AbortController();
@@ -134,7 +137,7 @@ test("lookupObject()", {
 	});
 	esm_default.removeRoutes({ includeFallback: false });
 	esm_default.get("https://example.com/slow-object", () => new Promise((resolve) => {
-		setTimeout(() => {
+		responseTimers.push(setTimeout(() => {
 			resolve({
 				status: 200,
 				headers: { "Content-Type": "application/activity+json" },
@@ -144,7 +147,7 @@ test("lookupObject()", {
 					content: "Slow response"
 				}
 			});
-		}, 1e3);
+		}, 1e3));
 	}));
 	await t.step("direct object fetch cancellation", async () => {
 		const controller = new AbortController();
@@ -155,6 +158,7 @@ test("lookupObject()", {
 		controller.abort();
 		deepStrictEqual(await promise, null);
 	});
+	for (const timer of responseTimers) clearTimeout(timer);
 	esm_default.hardReset();
 	esm_default.removeRoutes();
 });
@@ -392,15 +396,18 @@ test("FEP-fe34: lookupObject() cross-origin security", {
 			throw new Error(`Unexpected URL: ${url}`);
 		};
 		deepStrictEqual(await lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader
 		}), null);
 		await rejects(() => lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader,
 			crossOrigin: "throw"
 		}), Error, "The object's @id (https://malicious.com/fake-actor) has a different origin than the document URL (https://different-origin.com/actor)");
 		const result2 = await lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader,
 			crossOrigin: "trust"
@@ -471,11 +478,20 @@ test("FEP-fe34: lookupObject() cross-origin security", {
 		const errorDocumentLoader = async (_url) => {
 			throw new Error("Network error");
 		};
-		deepStrictEqual(await lookupObject("https://example.com/note", {
-			documentLoader: errorDocumentLoader,
-			contextLoader: mockDocumentLoader,
-			crossOrigin: "throw"
-		}), null);
+		esm_default.spyGlobal();
+		esm_default.get("begin:https://example.com/.well-known/webfinger", 404);
+		let result;
+		try {
+			result = await lookupObject("https://example.com/note", {
+				...allowPrivateAddress,
+				documentLoader: errorDocumentLoader,
+				contextLoader: mockDocumentLoader,
+				crossOrigin: "throw"
+			});
+		} finally {
+			esm_default.hardReset();
+		}
+		deepStrictEqual(result, null);
 	});
 	await t.step("malformed JSON handling with cross-origin policy", async () => {
 		const malformedJsonDocumentLoader = async (url) => {
@@ -540,6 +556,7 @@ test("lookupObject() records activitypub.object.lookup counter", {
 		await t.step("records kind=actor for an actor result", async () => {
 			const [meterProvider, recorder] = createTestMeterProvider();
 			assertInstanceOf(await lookupObject("@johndoe@example.com", {
+				...allowPrivateAddress,
 				documentLoader: mockDocumentLoader,
 				contextLoader: mockDocumentLoader,
 				meterProvider
@@ -593,6 +610,7 @@ test("lookupObject() records activitypub.object.lookup counter", {
 			});
 			const [meterProvider, recorder] = createTestMeterProvider();
 			deepStrictEqual(await lookupObject("janedoe@example.com", {
+				...allowPrivateAddress,
 				documentLoader: mockDocumentLoader,
 				contextLoader: mockDocumentLoader,
 				meterProvider
@@ -622,6 +640,7 @@ test("lookupObject() records activitypub.object.lookup counter", {
 			});
 			const [meterProvider, recorder] = createTestMeterProvider();
 			await lookupObject("@johndoe@example.com", {
+				...allowPrivateAddress,
 				documentLoader: mockDocumentLoader,
 				contextLoader: mockDocumentLoader,
 				meterProvider
@@ -643,6 +662,7 @@ test("lookupObject() records activitypub.object.lookup counter", {
 			});
 			const [meterProvider, recorder] = createTestMeterProvider();
 			await lookupObject(new URL("acct:johndoe@example.com"), {
+				...allowPrivateAddress,
 				documentLoader: mockDocumentLoader,
 				contextLoader: mockDocumentLoader,
 				meterProvider