@atproto/api 0.0.0-spaces-alpha-20260818021221

package/dist/atp-agent.js

@@ -0,0 +1,441 @@
+import { getPdsEndpoint, isValidDidDoc } from '@atproto/common-web';
+import { ResponseType, XRPCError, XrpcClient, errorResponseBody, } from '@atproto/xrpc';
+import { Agent } from './agent.js';
+import { ComAtprotoServerNS, } from './client/index.js';
+import { schemas } from './client/lexicons.js';
+const ReadableStream = globalThis.ReadableStream;
+/**
+ * A wrapper around the {@link Agent} class that uses credential based session
+ * management. This class also exposes most of the session management methods
+ * directly.
+ *
+ * This class will be deprecated in the near future. Use {@link Agent} directly
+ * with a {@link CredentialSession} instead:
+ *
+ *  ```ts
+ *  const session = new CredentialSession({
+ *    service: new URL('https://example.com'),
+ *  })
+ *
+ *  const agent = new Agent(session)
+ *  ```
+ */
+export class AtpAgent extends Agent {
+    constructor(options) {
+        const sessionManager = options instanceof CredentialSession
+            ? options
+            : new CredentialSession(new URL(options.service), options.fetch, options.persistSession);
+        super(sessionManager);
+        // This assignment is already being done in the super constructor, but we
+        // need to do it here to make TypeScript happy.
+        this.sessionManager = sessionManager;
+        if (!(options instanceof CredentialSession) && options.headers) {
+            for (const [key, value] of options.headers) {
+                this.setHeader(key, value);
+            }
+        }
+    }
+    clone() {
+        return this.copyInto(new AtpAgent(this.sessionManager));
+    }
+    get session() {
+        return this.sessionManager.session;
+    }
+    get hasSession() {
+        return this.sessionManager.hasSession;
+    }
+    get serviceUrl() {
+        return this.sessionManager.serviceUrl;
+    }
+    get pdsUrl() {
+        return this.sessionManager.pdsUrl;
+    }
+    get dispatchUrl() {
+        return this.sessionManager.dispatchUrl;
+    }
+    /** @deprecated use {@link serviceUrl} instead */
+    get service() {
+        return this.serviceUrl;
+    }
+    get persistSession() {
+        throw new Error('Cannot set persistSession directly. "persistSession" is defined through the constructor and will be invoked automatically when session data changes.');
+    }
+    set persistSession(v) {
+        throw new Error('Cannot set persistSession directly. "persistSession" must be defined in the constructor and can no longer be changed.');
+    }
+    /** @deprecated use {@link AtpAgent.serviceUrl} instead */
+    getServiceUrl() {
+        return this.serviceUrl;
+    }
+    async resumeSession(session) {
+        return this.sessionManager.resumeSession(session);
+    }
+    async createAccount(data, opts) {
+        return this.sessionManager.createAccount(data, opts);
+    }
+    async login(opts) {
+        return this.sessionManager.login(opts);
+    }
+    async logout() {
+        return this.sessionManager.logout();
+    }
+}
+/**
+ * Credentials (username / password) based session manager. Instances of this
+ * class will typically be used as the session manager for an {@link AtpAgent}.
+ * They can also be used with an {@link XrpcClient}, if you want to use you
+ * own Lexicons.
+ */
+export class CredentialSession {
+    constructor(serviceUrl, fetch = globalThis.fetch, persistSession) {
+        this.serviceUrl = serviceUrl;
+        this.fetch = fetch;
+        this.persistSession = persistSession;
+        /**
+         * Private {@link ComAtprotoServerNS} used to perform session management API
+         * calls on the service endpoint. Calls performed by this agent will not be
+         * authenticated using the user's session to allow proper manual configuration
+         * of the headers when performing session management operations.
+         */
+        this.server = new ComAtprotoServerNS(
+        // Note that the use of the codegen "schemas" (to instantiate `this.api`),
+        // as well as the use of `ComAtprotoServerNS` will cause this class to
+        // reference (way) more code than it actually needs. It is not possible,
+        // with the current state of the codegen, to generate a client that only
+        // includes the methods that are actually used by this class. This is a
+        // known limitation that should be addressed in a future version of the
+        // codegen.
+        new XrpcClient((url, init) => {
+            return (0, this.fetch)(new URL(url, this.serviceUrl), init);
+        }, schemas));
+    }
+    get did() {
+        return this.session?.did;
+    }
+    get dispatchUrl() {
+        return this.pdsUrl || this.serviceUrl;
+    }
+    get hasSession() {
+        return !!this.session;
+    }
+    /**
+     * Sets a WhatWG "fetch()" function to be used for making HTTP requests.
+     */
+    setFetch(fetch = globalThis.fetch) {
+        this.fetch = fetch;
+    }
+    async fetchHandler(url, init) {
+        // wait for any active session-refreshes to finish
+        await this.refreshSessionPromise;
+        const initialUri = new URL(url, this.dispatchUrl);
+        const initialReq = new Request(initialUri, init);
+        const initialToken = this.session?.accessJwt;
+        if (!initialToken || initialReq.headers.has('authorization')) {
+            return (0, this.fetch)(initialReq);
+        }
+        initialReq.headers.set('authorization', `Bearer ${initialToken}`);
+        const initialRes = await (0, this.fetch)(initialReq);
+        if (!this.session?.refreshJwt) {
+            return initialRes;
+        }
+        const isExpiredToken = initialRes.status === 401 ||
+            (await isErrorResponse(initialRes, [400], ['ExpiredToken']));
+        if (!isExpiredToken) {
+            return initialRes;
+        }
+        try {
+            await this.refreshSession();
+        }
+        catch {
+            return initialRes;
+        }
+        if (init?.signal?.aborted) {
+            return initialRes;
+        }
+        // The stream was already consumed. We cannot retry the request. A solution
+        // would be to tee() the input stream but that would bufferize the entire
+        // stream in memory which can lead to memory starvation. Instead, we will
+        // return the original response and let the calling code handle retries.
+        if (ReadableStream && init?.body instanceof ReadableStream) {
+            return initialRes;
+        }
+        // Return initial "ExpiredToken" response if the session was not refreshed.
+        const updatedToken = this.session?.accessJwt;
+        if (!updatedToken || updatedToken === initialToken) {
+            return initialRes;
+        }
+        // Make sure the initial request is cancelled to avoid leaking resources
+        // (NodeJS 👀): https://undici.nodejs.org/#/?id=garbage-collection
+        await initialRes.body?.cancel();
+        // We need to re-compute the URI in case the PDS endpoint has changed
+        const updatedUri = new URL(url, this.dispatchUrl);
+        const updatedReq = new Request(updatedUri, init);
+        updatedReq.headers.set('authorization', `Bearer ${updatedToken}`);
+        return await (0, this.fetch)(updatedReq);
+    }
+    /**
+     * Create a new account and hydrate its session in this agent.
+     */
+    async createAccount(data, opts) {
+        // Clear any existing session
+        this.session = undefined;
+        this.refreshSessionPromise = undefined;
+        try {
+            const res = await this.server.createAccount(data, opts);
+            this.session = {
+                accessJwt: res.data.accessJwt,
+                refreshJwt: res.data.refreshJwt,
+                handle: res.data.handle,
+                did: res.data.did,
+                email: data.email,
+                emailConfirmed: false,
+                emailAuthFactor: false,
+                active: true,
+            };
+            this.persistSession?.('create', this.session);
+            this._updateApiEndpoint(res.data.didDoc);
+            return res;
+        }
+        catch (e) {
+            this.session = undefined;
+            this.persistSession?.('create-failed', undefined);
+            throw e;
+        }
+    }
+    /**
+     * Start a new session with this agent.
+     */
+    async login(opts) {
+        // Clear any existing session
+        this.session = undefined;
+        this.refreshSessionPromise = undefined;
+        try {
+            const res = await this.server.createSession({
+                identifier: opts.identifier,
+                password: opts.password,
+                authFactorToken: opts.authFactorToken,
+                allowTakendown: opts.allowTakendown,
+            });
+            if (this.session) {
+                throw new Error('Concurrent login detected');
+            }
+            this.session = {
+                accessJwt: res.data.accessJwt,
+                refreshJwt: res.data.refreshJwt,
+                handle: res.data.handle,
+                did: res.data.did,
+                email: res.data.email,
+                emailConfirmed: res.data.emailConfirmed,
+                emailAuthFactor: res.data.emailAuthFactor,
+                active: res.data.active ?? true,
+                status: res.data.status,
+            };
+            this._updateApiEndpoint(res.data.didDoc);
+            this.persistSession?.('create', this.session);
+            return res;
+        }
+        catch (e) {
+            this.session = undefined;
+            this.persistSession?.('create-failed', undefined);
+            throw e;
+        }
+    }
+    async logout() {
+        if (this.session) {
+            try {
+                await this.server.deleteSession(undefined, {
+                    headers: {
+                        authorization: `Bearer ${this.session.refreshJwt}`,
+                    },
+                });
+            }
+            catch {
+                // Ignore errors
+            }
+            finally {
+                this.session = undefined;
+                this.persistSession?.('expired', undefined);
+            }
+        }
+    }
+    /**
+     * Resume a pre-existing session with this agent.
+     *
+     * @note that a rejected promise from this method indicates a failure to
+     * refresh the session after resuming it but does not indicate a failure to
+     * set the session itself. In case of rejection, check the presence of
+     * {@link CredentialSession.session} after calling this method to ensure the
+     * session was set.
+     */
+    async resumeSession(session) {
+        // Protect against multiple calls to resumeSession that would trigger a
+        // refresh for the same session simultaneously.
+        // Ideally, this check would be based on a session identifier, but since
+        // we don't have one, we will just check the refresh token.
+        if (session.refreshJwt !== this.session?.refreshJwt) {
+            // Set the current session, and discard any pending refresh operation..
+            this.session = session;
+            this.refreshSessionPromise = undefined;
+        }
+        // Ensure that the session is still valid by forcing a refresh. This will
+        // also ensure that persistSession handler is called.
+        const result = await this.refreshSession();
+        // Fool-proofing: another concurrent operation may have replaced the session
+        // while we were waiting for the refresh to complete.
+        if (session.did !== this.session?.did) {
+            throw new Error('DID mismatch on resumeSession');
+        }
+        return result;
+    }
+    /**
+     * Internal helper to refresh sessions
+     * - Wraps the actual implementation in a promise-guard to ensure only
+     *   one refresh is attempted at a time.
+     */
+    async refreshSession() {
+        if (!this.session) {
+            throw new Error('Unexpected state: no session to refresh');
+        }
+        // Do not refresh if we already have a refresh in progress
+        if (this.refreshSessionPromise)
+            return this.refreshSessionPromise;
+        const promise = this._refreshSessionInner().finally(() => {
+            if (this.refreshSessionPromise === promise) {
+                this.refreshSessionPromise = undefined;
+            }
+        });
+        this.refreshSessionPromise = promise;
+        return promise;
+    }
+    /**
+     * Internal helper to refresh sessions (actual behavior)
+     */
+    async _refreshSessionInner() {
+        const { session } = this;
+        // Should never happen
+        if (!session)
+            throw new Error('No session to refresh');
+        try {
+            const res = await this.server.refreshSession(undefined, {
+                headers: { authorization: `Bearer ${session.refreshJwt}` },
+            });
+            const { data } = res;
+            // Something is very wrong if the DID changes during a refresh
+            if (data.did !== session.did) {
+                throw new XRPCError(ResponseType.InvalidRequest, 'Invalid session', 'InvalidDID');
+            }
+            // Historically, refreshSession did not return all the fields from
+            // getSession. In particular, email, emailConfirmed and emailAuthFactor
+            // were missing. Similarly, some servers might not return the didDoc in
+            // refreshSession. We fetch them via getSession if missing, allowing to
+            // ensure that we are always talking with the right PDS.
+            if (data.emailConfirmed == null || data.didDoc == null) {
+                try {
+                    const res = await this.server.getSession(undefined, {
+                        headers: { authorization: `Bearer ${data.accessJwt}` },
+                    });
+                    // Fool proofing (should always match)
+                    if (res.data.did === data.did) {
+                        Object.assign(data, res.data);
+                    }
+                }
+                catch {
+                    // Noop, we'll keep the current values we have
+                }
+            }
+            // protect against concurrent session updates
+            if (this.session !== session) {
+                return Promise.reject(new Error('Concurrent session update detected'));
+            }
+            // succeeded, update the session
+            this.session = {
+                did: data.did,
+                accessJwt: data.accessJwt,
+                refreshJwt: data.refreshJwt,
+                handle: data.handle ?? session.handle,
+                email: data.email ?? session.email,
+                emailConfirmed: data.emailConfirmed ?? session.emailConfirmed,
+                emailAuthFactor: data.emailAuthFactor ?? session.emailAuthFactor,
+                active: data.active ?? session.active ?? true,
+                status: data.status,
+            };
+            this._updateApiEndpoint(res.data.didDoc);
+            this.persistSession?.('update', this.session);
+            return res;
+        }
+        catch (err) {
+            // protect against concurrent session updates
+            if (this.session === session) {
+                if (err instanceof XRPCError &&
+                    (err.status === 401 ||
+                        err.error === 'InvalidDID' ||
+                        ['ExpiredToken', 'InvalidToken'].includes(err.error))) {
+                    // failed due to a bad refresh token
+                    this.session = undefined;
+                    this.persistSession?.('expired', undefined);
+                }
+                else {
+                    // Assume the problem is transient and the session can be reused later.
+                    this.session = session;
+                    this.persistSession?.('network-error', session);
+                }
+            }
+            throw err;
+        }
+    }
+    /**
+     * Helper to update the pds endpoint dynamically.
+     *
+     * The session methods (create, resume, refresh) may respond with the user's
+     * did document which contains the user's canonical PDS endpoint. That endpoint
+     * may differ from the endpoint used to contact the server. We capture that
+     * PDS endpoint and update the client to use that given endpoint for future
+     * requests. (This helps ensure smooth migrations between PDSes, especially
+     * when the PDSes are operated by a single org.)
+     */
+    _updateApiEndpoint(didDoc) {
+        const endpoint = isValidDidDoc(didDoc) ? getPdsEndpoint(didDoc) : undefined;
+        if (endpoint) {
+            this.pdsUrl = new URL(endpoint);
+        }
+        else {
+            // If the did doc is invalid (or missing), we clear the pdsUrl (should
+            // never happen). This is fine if the auth server and PDS are the same
+            // service, or if the auth server will proxy requests to the right PDS
+            // (which is the case for Bluesky's "entryway").
+            this.pdsUrl = undefined;
+        }
+    }
+}
+function isErrorObject(v) {
+    return errorResponseBody.safeParse(v).success;
+}
+async function isErrorResponse(response, status, errorNames) {
+    if (!status.includes(response.status))
+        return false;
+    // Some engines (react-native 👀) don't expose a response.body property...
+    // if (!response.body) return false
+    try {
+        const json = await peekJson(response, 10 * 1024);
+        return isErrorObject(json) && errorNames.includes(json.error);
+    }
+    catch (err) {
+        return false;
+    }
+}
+async function peekJson(response, maxSize = Infinity) {
+    if (extractType(response) !== 'application/json')
+        throw new Error('Not JSON');
+    if (extractLength(response) > maxSize)
+        throw new Error('Response too large');
+    return response.clone().json();
+}
+function extractLength({ headers }) {
+    return headers.get('Content-Length')
+        ? Number(headers.get('Content-Length'))
+        : NaN;
+}
+function extractType({ headers }) {
+    return headers.get('Content-Type')?.split(';')[0]?.trim();
+}
+//# sourceMappingURL=atp-agent.js.map

package/dist/atp-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atp-agent.js","sourceRoot":"","sources":["../src/atp-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnE,OAAO,EAGL,YAAY,EACZ,SAAS,EACT,UAAU,EACV,iBAAiB,GAClB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAIL,kBAAkB,GAEnB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAQ9C,MAAM,cAAc,GAAG,UAAU,CAAC,cACY,CAAA;AAS9C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGjC,YAAY,OAA4C;QACtD,MAAM,cAAc,GAClB,OAAO,YAAY,iBAAiB;YAClC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,iBAAiB,CACnB,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EACxB,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,cAAc,CACvB,CAAA;QAEP,KAAK,CAAC,cAAc,CAAC,CAAA;QAErB,yEAAyE;QACzE,+CAA+C;QAC/C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAA;QAEpC,IAAI,CAAC,CAAC,OAAO,YAAY,iBAAiB,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;IACzD,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAA;IACpC,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,CAAA;IACvC,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,CAAA;IACvC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAA;IACnC,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,CAAA;IACxC,CAAC;IAED,iDAAiD;IACjD,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,UAAU,CAAA;IACxB,CAAC;IAED,IAAI,cAAc;QAChB,MAAM,IAAI,KAAK,CACb,sJAAsJ,CACvJ,CAAA;IACH,CAAC;IAED,IAAI,cAAc,CAAC,CAAU;QAC3B,MAAM,IAAI,KAAK,CACb,uHAAuH,CACxH,CAAA;IACH,CAAC;IAED,0DAA0D;IAC1D,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAuB;QAEvB,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,IAA+C,EAC/C,IAAgD;QAEhD,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAuB;QAEvB,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAA;IACrC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IAwB5B,YACkB,UAAe,EACxB,KAAK,GAAG,UAAU,CAAC,KAAK,EACZ,cAAyC;QAF5C,eAAU,GAAV,UAAU,CAAK;QACxB,UAAK,GAAL,KAAK,CAAmB;QACZ,mBAAc,GAAd,cAAc,CAA2B;QAtB9D;;;;;WAKG;QACO,WAAM,GAAG,IAAI,kBAAkB;QACvC,0EAA0E;QAC1E,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,WAAW;QACX,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3B,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAA;QAC7D,CAAC,EAAE,OAAO,CAAC,CACZ,CAAA;IAME,CAAC;IAEJ,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,OAAO,EAAE,GAAG,CAAA;IAC1B,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAA;IACvC,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,IAAkB;QAChD,kDAAkD;QAClD,MAAM,IAAI,CAAC,qBAAqB,CAAA;QAEhC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;QACjD,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAEhD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAA;QAC5C,IAAI,CAAC,YAAY,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAA;QACpC,CAAC;QAED,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,YAAY,EAAE,CAAC,CAAA;QACjE,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAA;QAEpD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAA;QACnB,CAAC;QACD,MAAM,cAAc,GAClB,UAAU,CAAC,MAAM,KAAK,GAAG;YACzB,CAAC,MAAM,eAAe,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;QAE9D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,UAAU,CAAA;QACnB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,UAAU,CAAA;QACnB,CAAC;QAED,IAAI,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,OAAO,UAAU,CAAA;QACnB,CAAC;QAED,2EAA2E;QAC3E,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,cAAc,IAAI,IAAI,EAAE,IAAI,YAAY,cAAc,EAAE,CAAC;YAC3D,OAAO,UAAU,CAAA;QACnB,CAAC;QAED,2EAA2E;QAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAA;QAC5C,IAAI,CAAC,YAAY,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;YACnD,OAAO,UAAU,CAAA;QACnB,CAAC;QAED,wEAAwE;QACxE,kEAAkE;QAClE,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;QAE/B,qEAAqE;QACrE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;QACjD,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAEhD,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,YAAY,EAAE,CAAC,CAAA;QAEjE,OAAO,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,IAA+C,EAC/C,IAAgD;QAEhD,6BAA6B;QAC7B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;QACxB,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAA;QAEtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACvD,IAAI,CAAC,OAAO,GAAG;gBACb,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS;gBAC7B,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU;gBAC/B,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;gBACvB,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,cAAc,EAAE,KAAK;gBACrB,eAAe,EAAE,KAAK;gBACtB,MAAM,EAAE,IAAI;aACb,CAAA;YACD,IAAI,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YAC7C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACxC,OAAO,GAAG,CAAA;QACZ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;YACxB,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;YACjD,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CACT,IAAuB;QAEvB,6BAA6B;QAC7B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;QACxB,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAA;QAEtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAA;YAEF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;YAC9C,CAAC;YAED,IAAI,CAAC,OAAO,GAAG;gBACb,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS;gBAC7B,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU;gBAC/B,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;gBACvB,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;gBACjB,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK;gBACrB,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc;gBACvC,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,eAAe;gBACzC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;gBAC/B,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;aACxB,CAAA;YACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACxC,IAAI,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YAC7C,OAAO,GAAG,CAAA;QACZ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;YACxB,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;YACjD,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE;oBACzC,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;qBACnD;iBACF,CAAC,CAAA;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;gBACxB,IAAI,CAAC,cAAc,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CACjB,OAAuB;QAEvB,uEAAuE;QACvE,+CAA+C;QAC/C,wEAAwE;QACxE,2DAA2D;QAC3D,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;YACpD,uEAAuE;YACvE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;YACtB,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAA;QACxC,CAAC;QAED,yEAAyE;QACzE,qDAAqD;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAE1C,4EAA4E;QAC5E,qDAAqD;QACrD,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAClD,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC5D,CAAC;QAED,0DAA0D;QAC1D,IAAI,IAAI,CAAC,qBAAqB;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAA;QAEjE,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACvD,IAAI,IAAI,CAAC,qBAAqB,KAAK,OAAO,EAAE,CAAC;gBAC3C,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAA;YACxC,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAA;QAEpC,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB;QAChC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;QAExB,sBAAsB;QACtB,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAEtD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE;gBACtD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,UAAU,EAAE,EAAE;aAC3D,CAAC,CAAA;YAEF,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAA;YAEpB,8DAA8D;YAC9D,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC7B,MAAM,IAAI,SAAS,CACjB,YAAY,CAAC,cAAc,EAC3B,iBAAiB,EACjB,YAAY,CACb,CAAA;YACH,CAAC;YAED,kEAAkE;YAClE,uEAAuE;YACvE,uEAAuE;YACvE,uEAAuE;YACvE,wDAAwD;YACxD,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;gBACvD,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE;wBAClD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE,EAAE;qBACvD,CAAC,CAAA;oBAEF,sCAAsC;oBACtC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;wBAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;oBAC/B,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,8CAA8C;gBAChD,CAAC;YACH,CAAC;YAED,6CAA6C;YAC7C,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC7B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAA;YACxE,CAAC;YAED,gCAAgC;YAChC,IAAI,CAAC,OAAO,GAAG;gBACb,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;gBACrC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;gBAClC,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc;gBAC7D,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe;gBAChE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI;gBAC7C,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAA;YAED,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACxC,IAAI,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YAE7C,OAAO,GAAG,CAAA;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6CAA6C;YAC7C,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC7B,IACE,GAAG,YAAY,SAAS;oBACxB,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG;wBACjB,GAAG,CAAC,KAAK,KAAK,YAAY;wBAC1B,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EACvD,CAAC;oBACD,oCAAoC;oBACpC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;oBACxB,IAAI,CAAC,cAAc,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;gBAC7C,CAAC;qBAAM,CAAC;oBACN,uEAAuE;oBACvE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;oBACtB,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;gBACjD,CAAC;YACH,CAAC;YAED,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACK,kBAAkB,CAAC,MAAe;QACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC3E,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;QACjC,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,gDAAgD;YAChD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;QACzB,CAAC;IACH,CAAC;CACF;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;AAC/C,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAkB,EAClB,MAAgB,EAChB,UAAoB;IAEpB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IACnD,0EAA0E;IAC1E,mCAAmC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,CAAA;QAChD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAK,UAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,QAAkB,EAClB,OAAO,GAAG,QAAQ;IAElB,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAA;IAC7E,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAC5E,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAA;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,EAAE,OAAO,EAAY;IAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAClC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACvC,CAAC,CAAC,GAAG,CAAA;AACT,CAAC;AAED,SAAS,WAAW,CAAC,EAAE,OAAO,EAAY;IACxC,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;AAC3D,CAAC","sourcesContent":["import { getPdsEndpoint, isValidDidDoc } from '@atproto/common-web'\nimport {\n  type ErrorResponseBody,\n  type Gettable,\n  ResponseType,\n  XRPCError,\n  XrpcClient,\n  errorResponseBody,\n} from '@atproto/xrpc'\nimport { Agent } from './agent.js'\nimport {\n  type ComAtprotoServerCreateAccount,\n  type ComAtprotoServerCreateSession,\n  type ComAtprotoServerGetSession,\n  ComAtprotoServerNS,\n  type ComAtprotoServerRefreshSession,\n} from './client/index.js'\nimport { schemas } from './client/lexicons.js'\nimport type { SessionManager } from './session-manager.js'\nimport type {\n  AtpAgentLoginOpts,\n  AtpPersistSessionHandler,\n  AtpSessionData,\n} from './types.js'\n\nconst ReadableStream = globalThis.ReadableStream as\n  typeof globalThis.ReadableStream | undefined\n\nexport type AtpAgentOptions = {\n  service: string | URL\n  persistSession?: AtpPersistSessionHandler\n  fetch?: typeof globalThis.fetch\n  headers?: Iterable<[string, Gettable<null | string>]>\n}\n\n/**\n * A wrapper around the {@link Agent} class that uses credential based session\n * management. This class also exposes most of the session management methods\n * directly.\n *\n * This class will be deprecated in the near future. Use {@link Agent} directly\n * with a {@link CredentialSession} instead:\n *\n *  ```ts\n *  const session = new CredentialSession({\n *    service: new URL('https://example.com'),\n *  })\n *\n *  const agent = new Agent(session)\n *  ```\n */\nexport class AtpAgent extends Agent {\n  readonly sessionManager: CredentialSession\n\n  constructor(options: AtpAgentOptions | CredentialSession) {\n    const sessionManager =\n      options instanceof CredentialSession\n        ? options\n        : new CredentialSession(\n            new URL(options.service),\n            options.fetch,\n            options.persistSession,\n          )\n\n    super(sessionManager)\n\n    // This assignment is already being done in the super constructor, but we\n    // need to do it here to make TypeScript happy.\n    this.sessionManager = sessionManager\n\n    if (!(options instanceof CredentialSession) && options.headers) {\n      for (const [key, value] of options.headers) {\n        this.setHeader(key, value)\n      }\n    }\n  }\n\n  clone(): AtpAgent {\n    return this.copyInto(new AtpAgent(this.sessionManager))\n  }\n\n  get session() {\n    return this.sessionManager.session\n  }\n\n  get hasSession() {\n    return this.sessionManager.hasSession\n  }\n\n  get serviceUrl() {\n    return this.sessionManager.serviceUrl\n  }\n\n  get pdsUrl() {\n    return this.sessionManager.pdsUrl\n  }\n\n  get dispatchUrl() {\n    return this.sessionManager.dispatchUrl\n  }\n\n  /** @deprecated use {@link serviceUrl} instead */\n  get service() {\n    return this.serviceUrl\n  }\n\n  get persistSession() {\n    throw new Error(\n      'Cannot set persistSession directly. \"persistSession\" is defined through the constructor and will be invoked automatically when session data changes.',\n    )\n  }\n\n  set persistSession(v: unknown) {\n    throw new Error(\n      'Cannot set persistSession directly. \"persistSession\" must be defined in the constructor and can no longer be changed.',\n    )\n  }\n\n  /** @deprecated use {@link AtpAgent.serviceUrl} instead */\n  getServiceUrl() {\n    return this.serviceUrl\n  }\n\n  async resumeSession(\n    session: AtpSessionData,\n  ): Promise<ComAtprotoServerGetSession.Response> {\n    return this.sessionManager.resumeSession(session)\n  }\n\n  async createAccount(\n    data: ComAtprotoServerCreateAccount.InputSchema,\n    opts?: ComAtprotoServerCreateAccount.CallOptions,\n  ): Promise<ComAtprotoServerCreateAccount.Response> {\n    return this.sessionManager.createAccount(data, opts)\n  }\n\n  async login(\n    opts: AtpAgentLoginOpts,\n  ): Promise<ComAtprotoServerCreateSession.Response> {\n    return this.sessionManager.login(opts)\n  }\n\n  async logout(): Promise<void> {\n    return this.sessionManager.logout()\n  }\n}\n\n/**\n * Credentials (username / password) based session manager. Instances of this\n * class will typically be used as the session manager for an {@link AtpAgent}.\n * They can also be used with an {@link XrpcClient}, if you want to use you\n * own Lexicons.\n */\nexport class CredentialSession implements SessionManager {\n  public pdsUrl?: URL // The PDS URL, driven by the did doc\n  public session?: AtpSessionData\n  public refreshSessionPromise?: Promise<ComAtprotoServerRefreshSession.Response>\n\n  /**\n   * Private {@link ComAtprotoServerNS} used to perform session management API\n   * calls on the service endpoint. Calls performed by this agent will not be\n   * authenticated using the user's session to allow proper manual configuration\n   * of the headers when performing session management operations.\n   */\n  protected server = new ComAtprotoServerNS(\n    // Note that the use of the codegen \"schemas\" (to instantiate `this.api`),\n    // as well as the use of `ComAtprotoServerNS` will cause this class to\n    // reference (way) more code than it actually needs. It is not possible,\n    // with the current state of the codegen, to generate a client that only\n    // includes the methods that are actually used by this class. This is a\n    // known limitation that should be addressed in a future version of the\n    // codegen.\n    new XrpcClient((url, init) => {\n      return (0, this.fetch)(new URL(url, this.serviceUrl), init)\n    }, schemas),\n  )\n\n  constructor(\n    public readonly serviceUrl: URL,\n    public fetch = globalThis.fetch,\n    protected readonly persistSession?: AtpPersistSessionHandler,\n  ) {}\n\n  get did() {\n    return this.session?.did\n  }\n\n  get dispatchUrl() {\n    return this.pdsUrl || this.serviceUrl\n  }\n\n  get hasSession() {\n    return !!this.session\n  }\n\n  /**\n   * Sets a WhatWG \"fetch()\" function to be used for making HTTP requests.\n   */\n  setFetch(fetch = globalThis.fetch) {\n    this.fetch = fetch\n  }\n\n  async fetchHandler(url: string, init?: RequestInit): Promise<Response> {\n    // wait for any active session-refreshes to finish\n    await this.refreshSessionPromise\n\n    const initialUri = new URL(url, this.dispatchUrl)\n    const initialReq = new Request(initialUri, init)\n\n    const initialToken = this.session?.accessJwt\n    if (!initialToken || initialReq.headers.has('authorization')) {\n      return (0, this.fetch)(initialReq)\n    }\n\n    initialReq.headers.set('authorization', `Bearer ${initialToken}`)\n    const initialRes = await (0, this.fetch)(initialReq)\n\n    if (!this.session?.refreshJwt) {\n      return initialRes\n    }\n    const isExpiredToken =\n      initialRes.status === 401 ||\n      (await isErrorResponse(initialRes, [400], ['ExpiredToken']))\n\n    if (!isExpiredToken) {\n      return initialRes\n    }\n\n    try {\n      await this.refreshSession()\n    } catch {\n      return initialRes\n    }\n\n    if (init?.signal?.aborted) {\n      return initialRes\n    }\n\n    // The stream was already consumed. We cannot retry the request. A solution\n    // would be to tee() the input stream but that would bufferize the entire\n    // stream in memory which can lead to memory starvation. Instead, we will\n    // return the original response and let the calling code handle retries.\n    if (ReadableStream && init?.body instanceof ReadableStream) {\n      return initialRes\n    }\n\n    // Return initial \"ExpiredToken\" response if the session was not refreshed.\n    const updatedToken = this.session?.accessJwt\n    if (!updatedToken || updatedToken === initialToken) {\n      return initialRes\n    }\n\n    // Make sure the initial request is cancelled to avoid leaking resources\n    // (NodeJS 👀): https://undici.nodejs.org/#/?id=garbage-collection\n    await initialRes.body?.cancel()\n\n    // We need to re-compute the URI in case the PDS endpoint has changed\n    const updatedUri = new URL(url, this.dispatchUrl)\n    const updatedReq = new Request(updatedUri, init)\n\n    updatedReq.headers.set('authorization', `Bearer ${updatedToken}`)\n\n    return await (0, this.fetch)(updatedReq)\n  }\n\n  /**\n   * Create a new account and hydrate its session in this agent.\n   */\n  async createAccount(\n    data: ComAtprotoServerCreateAccount.InputSchema,\n    opts?: ComAtprotoServerCreateAccount.CallOptions,\n  ): Promise<ComAtprotoServerCreateAccount.Response> {\n    // Clear any existing session\n    this.session = undefined\n    this.refreshSessionPromise = undefined\n\n    try {\n      const res = await this.server.createAccount(data, opts)\n      this.session = {\n        accessJwt: res.data.accessJwt,\n        refreshJwt: res.data.refreshJwt,\n        handle: res.data.handle,\n        did: res.data.did,\n        email: data.email,\n        emailConfirmed: false,\n        emailAuthFactor: false,\n        active: true,\n      }\n      this.persistSession?.('create', this.session)\n      this._updateApiEndpoint(res.data.didDoc)\n      return res\n    } catch (e) {\n      this.session = undefined\n      this.persistSession?.('create-failed', undefined)\n      throw e\n    }\n  }\n\n  /**\n   * Start a new session with this agent.\n   */\n  async login(\n    opts: AtpAgentLoginOpts,\n  ): Promise<ComAtprotoServerCreateSession.Response> {\n    // Clear any existing session\n    this.session = undefined\n    this.refreshSessionPromise = undefined\n\n    try {\n      const res = await this.server.createSession({\n        identifier: opts.identifier,\n        password: opts.password,\n        authFactorToken: opts.authFactorToken,\n        allowTakendown: opts.allowTakendown,\n      })\n\n      if (this.session) {\n        throw new Error('Concurrent login detected')\n      }\n\n      this.session = {\n        accessJwt: res.data.accessJwt,\n        refreshJwt: res.data.refreshJwt,\n        handle: res.data.handle,\n        did: res.data.did,\n        email: res.data.email,\n        emailConfirmed: res.data.emailConfirmed,\n        emailAuthFactor: res.data.emailAuthFactor,\n        active: res.data.active ?? true,\n        status: res.data.status,\n      }\n      this._updateApiEndpoint(res.data.didDoc)\n      this.persistSession?.('create', this.session)\n      return res\n    } catch (e) {\n      this.session = undefined\n      this.persistSession?.('create-failed', undefined)\n      throw e\n    }\n  }\n\n  async logout(): Promise<void> {\n    if (this.session) {\n      try {\n        await this.server.deleteSession(undefined, {\n          headers: {\n            authorization: `Bearer ${this.session.refreshJwt}`,\n          },\n        })\n      } catch {\n        // Ignore errors\n      } finally {\n        this.session = undefined\n        this.persistSession?.('expired', undefined)\n      }\n    }\n  }\n\n  /**\n   * Resume a pre-existing session with this agent.\n   *\n   * @note that a rejected promise from this method indicates a failure to\n   * refresh the session after resuming it but does not indicate a failure to\n   * set the session itself. In case of rejection, check the presence of\n   * {@link CredentialSession.session} after calling this method to ensure the\n   * session was set.\n   */\n  async resumeSession(\n    session: AtpSessionData,\n  ): Promise<ComAtprotoServerRefreshSession.Response> {\n    // Protect against multiple calls to resumeSession that would trigger a\n    // refresh for the same session simultaneously.\n    // Ideally, this check would be based on a session identifier, but since\n    // we don't have one, we will just check the refresh token.\n    if (session.refreshJwt !== this.session?.refreshJwt) {\n      // Set the current session, and discard any pending refresh operation..\n      this.session = session\n      this.refreshSessionPromise = undefined\n    }\n\n    // Ensure that the session is still valid by forcing a refresh. This will\n    // also ensure that persistSession handler is called.\n    const result = await this.refreshSession()\n\n    // Fool-proofing: another concurrent operation may have replaced the session\n    // while we were waiting for the refresh to complete.\n    if (session.did !== this.session?.did) {\n      throw new Error('DID mismatch on resumeSession')\n    }\n\n    return result\n  }\n\n  /**\n   * Internal helper to refresh sessions\n   * - Wraps the actual implementation in a promise-guard to ensure only\n   *   one refresh is attempted at a time.\n   */\n  async refreshSession(): Promise<ComAtprotoServerRefreshSession.Response> {\n    if (!this.session) {\n      throw new Error('Unexpected state: no session to refresh')\n    }\n\n    // Do not refresh if we already have a refresh in progress\n    if (this.refreshSessionPromise) return this.refreshSessionPromise\n\n    const promise = this._refreshSessionInner().finally(() => {\n      if (this.refreshSessionPromise === promise) {\n        this.refreshSessionPromise = undefined\n      }\n    })\n\n    this.refreshSessionPromise = promise\n\n    return promise\n  }\n\n  /**\n   * Internal helper to refresh sessions (actual behavior)\n   */\n  private async _refreshSessionInner(): Promise<ComAtprotoServerRefreshSession.Response> {\n    const { session } = this\n\n    // Should never happen\n    if (!session) throw new Error('No session to refresh')\n\n    try {\n      const res = await this.server.refreshSession(undefined, {\n        headers: { authorization: `Bearer ${session.refreshJwt}` },\n      })\n\n      const { data } = res\n\n      // Something is very wrong if the DID changes during a refresh\n      if (data.did !== session.did) {\n        throw new XRPCError(\n          ResponseType.InvalidRequest,\n          'Invalid session',\n          'InvalidDID',\n        )\n      }\n\n      // Historically, refreshSession did not return all the fields from\n      // getSession. In particular, email, emailConfirmed and emailAuthFactor\n      // were missing. Similarly, some servers might not return the didDoc in\n      // refreshSession. We fetch them via getSession if missing, allowing to\n      // ensure that we are always talking with the right PDS.\n      if (data.emailConfirmed == null || data.didDoc == null) {\n        try {\n          const res = await this.server.getSession(undefined, {\n            headers: { authorization: `Bearer ${data.accessJwt}` },\n          })\n\n          // Fool proofing (should always match)\n          if (res.data.did === data.did) {\n            Object.assign(data, res.data)\n          }\n        } catch {\n          // Noop, we'll keep the current values we have\n        }\n      }\n\n      // protect against concurrent session updates\n      if (this.session !== session) {\n        return Promise.reject(new Error('Concurrent session update detected'))\n      }\n\n      // succeeded, update the session\n      this.session = {\n        did: data.did,\n        accessJwt: data.accessJwt,\n        refreshJwt: data.refreshJwt,\n        handle: data.handle ?? session.handle,\n        email: data.email ?? session.email,\n        emailConfirmed: data.emailConfirmed ?? session.emailConfirmed,\n        emailAuthFactor: data.emailAuthFactor ?? session.emailAuthFactor,\n        active: data.active ?? session.active ?? true,\n        status: data.status,\n      }\n\n      this._updateApiEndpoint(res.data.didDoc)\n      this.persistSession?.('update', this.session)\n\n      return res\n    } catch (err) {\n      // protect against concurrent session updates\n      if (this.session === session) {\n        if (\n          err instanceof XRPCError &&\n          (err.status === 401 ||\n            err.error === 'InvalidDID' ||\n            ['ExpiredToken', 'InvalidToken'].includes(err.error))\n        ) {\n          // failed due to a bad refresh token\n          this.session = undefined\n          this.persistSession?.('expired', undefined)\n        } else {\n          // Assume the problem is transient and the session can be reused later.\n          this.session = session\n          this.persistSession?.('network-error', session)\n        }\n      }\n\n      throw err\n    }\n  }\n\n  /**\n   * Helper to update the pds endpoint dynamically.\n   *\n   * The session methods (create, resume, refresh) may respond with the user's\n   * did document which contains the user's canonical PDS endpoint. That endpoint\n   * may differ from the endpoint used to contact the server. We capture that\n   * PDS endpoint and update the client to use that given endpoint for future\n   * requests. (This helps ensure smooth migrations between PDSes, especially\n   * when the PDSes are operated by a single org.)\n   */\n  private _updateApiEndpoint(didDoc: unknown) {\n    const endpoint = isValidDidDoc(didDoc) ? getPdsEndpoint(didDoc) : undefined\n    if (endpoint) {\n      this.pdsUrl = new URL(endpoint)\n    } else {\n      // If the did doc is invalid (or missing), we clear the pdsUrl (should\n      // never happen). This is fine if the auth server and PDS are the same\n      // service, or if the auth server will proxy requests to the right PDS\n      // (which is the case for Bluesky's \"entryway\").\n      this.pdsUrl = undefined\n    }\n  }\n}\n\nfunction isErrorObject(v: unknown): v is ErrorResponseBody {\n  return errorResponseBody.safeParse(v).success\n}\n\nasync function isErrorResponse(\n  response: Response,\n  status: number[],\n  errorNames: string[],\n): Promise<boolean> {\n  if (!status.includes(response.status)) return false\n  // Some engines (react-native 👀) don't expose a response.body property...\n  // if (!response.body) return false\n  try {\n    const json = await peekJson(response, 10 * 1024)\n    return isErrorObject(json) && (errorNames as any[]).includes(json.error)\n  } catch (err) {\n    return false\n  }\n}\n\nasync function peekJson(\n  response: Response,\n  maxSize = Infinity,\n): Promise<unknown> {\n  if (extractType(response) !== 'application/json') throw new Error('Not JSON')\n  if (extractLength(response) > maxSize) throw new Error('Response too large')\n  return response.clone().json()\n}\n\nfunction extractLength({ headers }: Response) {\n  return headers.get('Content-Length')\n    ? Number(headers.get('Content-Length'))\n    : NaN\n}\n\nfunction extractType({ headers }: Response) {\n  return headers.get('Content-Type')?.split(';')[0]?.trim()\n}\n"]}

package/dist/bsky-agent.d.ts

@@ -0,0 +1,6 @@
+import { AtpAgent } from './atp-agent.js';
+/** @deprecated use {@link AtpAgent} instead */
+export declare class BskyAgent extends AtpAgent {
+    clone(): this;
+}
+//# sourceMappingURL=bsky-agent.d.ts.map

package/dist/bsky-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bsky-agent.d.ts","sourceRoot":"","sources":["../src/bsky-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,+CAA+C;AAC/C,qBAAa,SAAU,SAAQ,QAAQ;IACrC,KAAK,IAAI,IAAI,CAQZ;CACF"}

package/dist/bsky-agent.js

@@ -0,0 +1,13 @@
+import { AtpAgent } from './atp-agent.js';
+/** @deprecated use {@link AtpAgent} instead */
+export class BskyAgent extends AtpAgent {
+    clone() {
+        if (this.constructor === BskyAgent) {
+            const agent = new BskyAgent(this.sessionManager);
+            return this.copyInto(agent);
+        }
+        // sub-classes should override this method
+        throw new TypeError('Cannot clone a subclass of BskyAgent');
+    }
+}
+//# sourceMappingURL=bsky-agent.js.map

package/dist/bsky-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bsky-agent.js","sourceRoot":"","sources":["../src/bsky-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,+CAA+C;AAC/C,MAAM,OAAO,SAAU,SAAQ,QAAQ;IACrC,KAAK;QACH,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAa,CAAC,CAAA;QACrC,CAAC;QAED,0CAA0C;QAC1C,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAA;IAC7D,CAAC;CACF","sourcesContent":["import { AtpAgent } from './atp-agent.js'\n\n/** @deprecated use {@link AtpAgent} instead */\nexport class BskyAgent extends AtpAgent {\n  clone(): this {\n    if (this.constructor === BskyAgent) {\n      const agent = new BskyAgent(this.sessionManager)\n      return this.copyInto(agent as this)\n    }\n\n    // sub-classes should override this method\n    throw new TypeError('Cannot clone a subclass of BskyAgent')\n  }\n}\n"]}