@atproto/bsky 0.0.198 → 0.0.200

package/dist/api/app/bsky/contact/verifyPhone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyPhone.d.ts","sourceRoot":"","sources":["../../../../../src/api/app/bsky/contact/verifyPhone.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAG5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAsBvD"}

package/dist/api/app/bsky/contact/verifyPhone.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = default_1;
+const util_1 = require("./util");
+function default_1(server, ctx) {
+    server.app.bsky.contact.verifyPhone({
+        auth: ctx.authVerifier.standard,
+        handler: async ({ auth, input }) => {
+            (0, util_1.assertRolodexOrThrowUnimplemented)(ctx);
+            const actor = auth.credentials.iss;
+            // TODO: Error handling.
+            const res = await ctx.rolodexClient.verifyPhone({
+                actor,
+                verificationCode: input.body.code,
+                phone: input.body.phone,
+            });
+            return {
+                encoding: 'application/json',
+                body: {
+                    token: res.token,
+                },
+            };
+        },
+    });
+}
+//# sourceMappingURL=verifyPhone.js.map

package/dist/api/app/bsky/contact/verifyPhone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyPhone.js","sourceRoot":"","sources":["../../../../../src/api/app/bsky/contact/verifyPhone.ts"],"names":[],"mappings":";;AAIA,4BAsBC;AAxBD,iCAA0D;AAE1D,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QAClC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ;QAC/B,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,IAAA,wCAAiC,EAAC,GAAG,CAAC,CAAA;YAEtC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAClC,wBAAwB;YACxB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC;gBAC9C,KAAK;gBACL,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;gBACjC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;aACxB,CAAC,CAAA;YAEF,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,KAAK,EAAE,GAAG,CAAC,KAAK;iBACjB;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport { assertRolodexOrThrowUnimplemented } from './util'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.app.bsky.contact.verifyPhone({\n    auth: ctx.authVerifier.standard,\n    handler: async ({ auth, input }) => {\n      assertRolodexOrThrowUnimplemented(ctx)\n\n      const actor = auth.credentials.iss\n      // TODO: Error handling.\n      const res = await ctx.rolodexClient.verifyPhone({\n        actor,\n        verificationCode: input.body.code,\n        phone: input.body.phone,\n      })\n\n      return {\n        encoding: 'application/json',\n        body: {\n          token: res.token,\n        },\n      }\n    },\n  })\n}\n"]}

package/dist/api/app/bsky/graph/getRelationships.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getRelationships.d.ts","sourceRoot":"","sources":["../../../../../src/api/app/bsky/graph/getRelationships.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAE5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAyCvD"}
+{"version":3,"file":"getRelationships.d.ts","sourceRoot":"","sources":["../../../../../src/api/app/bsky/graph/getRelationships.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAE5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA6CvD"}

package/dist/api/app/bsky/graph/getRelationships.js

@@ -23,6 +23,10 @@ function default_1(server, ctx) {
                         did,
                         following: subject.following,
                         followedBy: subject.followedBy,
+                        blocking: subject.blocking,
+                        blockedBy: subject.blockedBy,
+                        blockingByList: subject.blockingByList,
+                        blockedByList: subject.blockedByList,
                     }
                     : {
                         $type: 'app.bsky.graph.defs#notFoundActor',

package/dist/api/app/bsky/graph/getRelationships.js.map

@@ -1 +1 @@
-{"version":3,"file":"getRelationships.js","sourceRoot":"","sources":["../../../../../src/api/app/bsky/graph/getRelationships.ts"],"names":[],"mappings":";;AAGA,4BAyCC;AAzCD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5B,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,MAAM,CAAA;YACrC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO;oBACL,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE;wBACJ,KAAK;wBACL,aAAa,EAAE,EAAE;qBAClB;iBACF,CAAA;YACH,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,2BAA2B,CAC9D,MAAM,EACN,KAAK,CACN,CAAA;YACD,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACvC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC5B,OAAO,OAAO;oBACZ,CAAC,CAAC;wBACE,KAAK,EAAE,kCAAkC;wBACzC,GAAG;wBACH,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;qBAC/B;oBACH,CAAC,CAAC;wBACE,KAAK,EAAE,mCAAmC;wBAC1C,KAAK,EAAE,GAAG;wBACV,QAAQ,EAAE,IAAI;qBACf,CAAA;YACP,CAAC,CAAC,CAAA;YACF,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,KAAK;oBACL,aAAa;iBACd;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.app.bsky.graph.getRelationships({\n    handler: async ({ params }) => {\n      const { actor, others = [] } = params\n      if (others.length < 1) {\n        return {\n          encoding: 'application/json',\n          body: {\n            actor,\n            relationships: [],\n          },\n        }\n      }\n      const res = await ctx.hydrator.actor.getProfileViewerStatesNaive(\n        others,\n        actor,\n      )\n      const relationships = others.map((did) => {\n        const subject = res.get(did)\n        return subject\n          ? {\n              $type: 'app.bsky.graph.defs#relationship',\n              did,\n              following: subject.following,\n              followedBy: subject.followedBy,\n            }\n          : {\n              $type: 'app.bsky.graph.defs#notFoundActor',\n              actor: did,\n              notFound: true,\n            }\n      })\n      return {\n        encoding: 'application/json',\n        body: {\n          actor,\n          relationships,\n        },\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"getRelationships.js","sourceRoot":"","sources":["../../../../../src/api/app/bsky/graph/getRelationships.ts"],"names":[],"mappings":";;AAGA,4BA6CC;AA7CD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5B,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,MAAM,CAAA;YACrC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO;oBACL,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE;wBACJ,KAAK;wBACL,aAAa,EAAE,EAAE;qBAClB;iBACF,CAAA;YACH,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,2BAA2B,CAC9D,MAAM,EACN,KAAK,CACN,CAAA;YACD,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACvC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC5B,OAAO,OAAO;oBACZ,CAAC,CAAC;wBACE,KAAK,EAAE,kCAAkC;wBACzC,GAAG;wBACH,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;wBACtC,aAAa,EAAE,OAAO,CAAC,aAAa;qBACrC;oBACH,CAAC,CAAC;wBACE,KAAK,EAAE,mCAAmC;wBAC1C,KAAK,EAAE,GAAG;wBACV,QAAQ,EAAE,IAAI;qBACf,CAAA;YACP,CAAC,CAAC,CAAA;YACF,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,KAAK;oBACL,aAAa;iBACd;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.app.bsky.graph.getRelationships({\n    handler: async ({ params }) => {\n      const { actor, others = [] } = params\n      if (others.length < 1) {\n        return {\n          encoding: 'application/json',\n          body: {\n            actor,\n            relationships: [],\n          },\n        }\n      }\n      const res = await ctx.hydrator.actor.getProfileViewerStatesNaive(\n        others,\n        actor,\n      )\n      const relationships = others.map((did) => {\n        const subject = res.get(did)\n        return subject\n          ? {\n              $type: 'app.bsky.graph.defs#relationship',\n              did,\n              following: subject.following,\n              followedBy: subject.followedBy,\n              blocking: subject.blocking,\n              blockedBy: subject.blockedBy,\n              blockingByList: subject.blockingByList,\n              blockedByList: subject.blockedByList,\n            }\n          : {\n              $type: 'app.bsky.graph.defs#notFoundActor',\n              actor: did,\n              notFound: true,\n            }\n      })\n      return {\n        encoding: 'application/json',\n        body: {\n          actor,\n          relationships,\n        },\n      }\n    },\n  })\n}\n"]}

package/dist/api/external.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external.d.ts","sourceRoot":"","sources":["../../src/api/external.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAGvC,eAAO,MAAM,YAAY,GAAI,KAAK,UAAU,KAAG,MAQ9C,CAAA"}
+{"version":3,"file":"external.d.ts","sourceRoot":"","sources":["../../src/api/external.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAIvC,eAAO,MAAM,YAAY,GAAI,KAAK,UAAU,KAAG,MAS9C,CAAA"}

package/dist/api/external.js

@@ -35,11 +35,13 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createRouter = void 0;
 const express_1 = require("express");
+const aaApi = __importStar(require("./age-assurance"));
 const kwsApi = __importStar(require("./kws"));
 const createRouter = (ctx) => {
     const router = (0, express_1.Router)();
     if (ctx.kwsClient) {
         router.use('/kws', kwsApi.createRouter(ctx));
+        router.use(aaApi.createRouter(ctx));
     }
     return router;
 };

package/dist/api/external.js.map

@@ -1 +1 @@
-{"version":3,"file":"external.js","sourceRoot":"","sources":["../../src/api/external.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,qCAAgC;AAEhC,8CAA+B;AAExB,MAAM,YAAY,GAAG,CAAC,GAAe,EAAU,EAAE;IACtD,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAA;IAEvB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9C,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AARY,QAAA,YAAY,gBAQxB","sourcesContent":["import { Router } from 'express'\nimport { AppContext } from '../context'\nimport * as kwsApi from './kws'\n\nexport const createRouter = (ctx: AppContext): Router => {\n  const router = Router()\n\n  if (ctx.kwsClient) {\n    router.use('/kws', kwsApi.createRouter(ctx))\n  }\n\n  return router\n}\n"]}
+{"version":3,"file":"external.js","sourceRoot":"","sources":["../../src/api/external.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,qCAAgC;AAEhC,uDAAwC;AACxC,8CAA+B;AAExB,MAAM,YAAY,GAAG,CAAC,GAAe,EAAU,EAAE;IACtD,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAA;IAEvB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAC5C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;IACrC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AATY,QAAA,YAAY,gBASxB","sourcesContent":["import { Router } from 'express'\nimport { AppContext } from '../context'\nimport * as aaApi from './age-assurance'\nimport * as kwsApi from './kws'\n\nexport const createRouter = (ctx: AppContext): Router => {\n  const router = Router()\n\n  if (ctx.kwsClient) {\n    router.use('/kws', kwsApi.createRouter(ctx))\n    router.use(aaApi.createRouter(ctx))\n  }\n\n  return router\n}\n"]}

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AA8EnC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAA;AAElC,OAAO,KAAK,SAAS,MAAM,cAAc,CAAA;AAEzC,OAAO,KAAK,YAAY,MAAM,iBAAiB,CAAA;AAE/C,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAA;AAEtC,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,UAgFvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAwFnC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAA;AAElC,OAAO,KAAK,SAAS,MAAM,cAAc,CAAA;AAEzC,OAAO,KAAK,YAAY,MAAM,iBAAiB,CAAA;AAE/C,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAA;AAEtC,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,UA0FvD"}

package/dist/api/index.js

@@ -43,9 +43,19 @@ const getProfiles_1 = __importDefault(require("./app/bsky/actor/getProfiles"));
 const getSuggestions_1 = __importDefault(require("./app/bsky/actor/getSuggestions"));
 const searchActors_1 = __importDefault(require("./app/bsky/actor/searchActors"));
 const searchActorsTypeahead_1 = __importDefault(require("./app/bsky/actor/searchActorsTypeahead"));
+const begin_1 = __importDefault(require("./app/bsky/ageassurance/begin"));
+const getConfig_1 = __importDefault(require("./app/bsky/ageassurance/getConfig"));
+const getState_1 = __importDefault(require("./app/bsky/ageassurance/getState"));
 const createBookmark_1 = __importDefault(require("./app/bsky/bookmark/createBookmark"));
 const deleteBookmark_1 = __importDefault(require("./app/bsky/bookmark/deleteBookmark"));
 const getBookmarks_1 = __importDefault(require("./app/bsky/bookmark/getBookmarks"));
+const dismissMatch_1 = __importDefault(require("./app/bsky/contact/dismissMatch"));
+const getMatches_1 = __importDefault(require("./app/bsky/contact/getMatches"));
+const getSyncStatus_1 = __importDefault(require("./app/bsky/contact/getSyncStatus"));
+const importContacts_1 = __importDefault(require("./app/bsky/contact/importContacts"));
+const removeData_1 = __importDefault(require("./app/bsky/contact/removeData"));
+const startPhoneVerification_1 = __importDefault(require("./app/bsky/contact/startPhoneVerification"));
+const verifyPhone_1 = __importDefault(require("./app/bsky/contact/verifyPhone"));
 const getActorFeeds_1 = __importDefault(require("./app/bsky/feed/getActorFeeds"));
 const getActorLikes_1 = __importDefault(require("./app/bsky/feed/getActorLikes"));
 const getAuthorFeed_1 = __importDefault(require("./app/bsky/feed/getAuthorFeed"));
@@ -95,7 +105,7 @@ const putPreferencesV2_1 = __importDefault(require("./app/bsky/notification/putP
 const registerPush_1 = __importDefault(require("./app/bsky/notification/registerPush"));
 const updateSeen_1 = __importDefault(require("./app/bsky/notification/updateSeen"));
 const getAgeAssuranceState_1 = __importDefault(require("./app/bsky/unspecced/getAgeAssuranceState"));
-const getConfig_1 = __importDefault(require("./app/bsky/unspecced/getConfig"));
+const getConfig_2 = __importDefault(require("./app/bsky/unspecced/getConfig"));
 const getOnboardingSuggestedStarterPacks_1 = __importDefault(require("./app/bsky/unspecced/getOnboardingSuggestedStarterPacks"));
 const getPopularFeedGenerators_1 = __importDefault(require("./app/bsky/unspecced/getPopularFeedGenerators"));
 const getPostThreadOtherV2_1 = __importDefault(require("./app/bsky/unspecced/getPostThreadOtherV2"));
@@ -124,6 +134,13 @@ function default_1(server, ctx) {
     (0, createBookmark_1.default)(server, ctx);
     (0, deleteBookmark_1.default)(server, ctx);
     (0, getBookmarks_1.default)(server, ctx);
+    (0, dismissMatch_1.default)(server, ctx);
+    (0, getMatches_1.default)(server, ctx);
+    (0, getSyncStatus_1.default)(server, ctx);
+    (0, importContacts_1.default)(server, ctx);
+    (0, removeData_1.default)(server, ctx);
+    (0, startPhoneVerification_1.default)(server, ctx);
+    (0, verifyPhone_1.default)(server, ctx);
     (0, getActorFeeds_1.default)(server, ctx);
     (0, getSuggestedFeeds_1.default)(server, ctx);
     (0, getAuthorFeed_1.default)(server, ctx);
@@ -184,11 +201,14 @@ function default_1(server, ctx) {
     (0, putPreferences_1.default)(server, ctx);
     (0, putPreferencesV2_1.default)(server, ctx);
     (0, registerPush_1.default)(server, ctx);
-    (0, getConfig_1.default)(server, ctx);
+    (0, getConfig_2.default)(server, ctx);
     (0, getPopularFeedGenerators_1.default)(server, ctx);
     (0, getTaggedSuggestions_1.default)(server, ctx);
     (0, getAgeAssuranceState_1.default)(server, ctx);
     (0, initAgeAssurance_1.default)(server, ctx);
+    (0, getConfig_1.default)(server, ctx);
+    (0, getState_1.default)(server, ctx);
+    (0, begin_1.default)(server, ctx);
     // com.atproto
     (0, getSubjectStatus_1.default)(server, ctx);
     (0, updateSubjectStatus_1.default)(server, ctx);

package/dist/api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuFA,4BAgFC;AArKD,6EAAoD;AACpD,+EAAsD;AACtD,qFAA4D;AAC5D,iFAAwD;AACxD,mGAA0E;AAC1E,wFAA+D;AAC/D,wFAA+D;AAC/D,oFAA2D;AAC3D,kFAAyD;AACzD,kFAAyD;AACzD,kFAAyD;AACzD,sEAA6C;AAC7C,wFAA+D;AAC/D,0FAAiE;AACjE,wEAA+C;AAC/C,8EAAqD;AACrD,kFAAyD;AACzD,wEAA+C;AAC/C,0EAAiD;AACjD,kFAAyD;AACzD,0FAAiE;AACjE,8EAAqD;AACrD,8EAAqD;AACrD,iGAAwE;AACxE,2EAAkD;AAClD,iFAAwD;AACxD,6EAAoD;AACpD,2FAAkE;AAClE,uEAA8C;AAC9C,mFAA0D;AAC1D,iFAAwD;AACxD,yEAAgD;AAChD,qGAA4E;AAC5E,yEAAgD;AAChD,yFAAgE;AAChE,qFAA4D;AAC5D,uFAA8D;AAC9D,mHAA0F;AAC1F,6GAAoF;AACpF,2EAAkD;AAClD,mFAA0D;AAC1D,6EAAoD;AACpD,6FAAoE;AACpE,+EAAsD;AACtD,uFAA8D;AAC9D,iFAAwD;AACxD,iFAA+D;AAC/D,4FAAmE;AACnE,4FAAmE;AACnE,kHAAyF;AACzF,kGAAyE;AACzE,8GAAqF;AACrF,4FAAmE;AACnE,gGAAuE;AACvE,wFAA+D;AAC/D,oFAA2D;AAC3D,qGAA4E;AAC5E,+EAAsD;AACtD,iIAAwG;AACxG,6GAAoF;AACpF,qGAA4E;AAC5E,2FAAkE;AAClE,+FAA+E;AAC/E,6GAAoF;AACpF,+FAAsE;AACtE,qGAA4E;AAC5E,+FAAsE;AACtE,+EAAsD;AACtD,6FAAoE;AACpE,0FAAiE;AACjE,4FAAmE;AACnE,kGAAyE;AACzE,yFAAgE;AAChE,kFAAyD;AACzD,6EAAoD;AACpD,iFAAwD;AAExD,mDAAkC;AAElC,0DAAyC;AAEzC,gEAA+C;AAE/C,uDAAsC;AAEtC,mBAAyB,MAAc,EAAE,GAAe;IACtD,WAAW;IACX,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,iBAAO,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACpB,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,kBAAQ,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,8BAAoB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,IAAA,yBAAe,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,IAAA,kBAAQ,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,8BAAoB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,iBAAO,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACpB,IAAA,kBAAQ,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrB,IAAA,gCAAsB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACnC,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,kBAAQ,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrB,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,yBAAe,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,IAAA,uCAA6B,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1C,IAAA,4BAAkB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/B,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,yBAAe,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,oCAA0B,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvC,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,4CAAkC,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/C,IAAA,kCAAwB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrC,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,2BAA0B,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvC,IAAA,qBAAkB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/B,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,+BAAqB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAClC,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,mCAAyB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtC,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,iCAAuB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACpC,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,kCAAwB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrC,IAAA,8BAAoB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,IAAA,8BAAoB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,cAAc;IACd,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,IAAA,6BAAmB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAChC,IAAA,yBAAe,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import { AppContext } from '../context'\nimport { Server } from '../lexicon'\nimport getProfile from './app/bsky/actor/getProfile'\nimport getProfiles from './app/bsky/actor/getProfiles'\nimport getSuggestions from './app/bsky/actor/getSuggestions'\nimport searchActors from './app/bsky/actor/searchActors'\nimport searchActorsTypeahead from './app/bsky/actor/searchActorsTypeahead'\nimport createBookmark from './app/bsky/bookmark/createBookmark'\nimport deleteBookmark from './app/bsky/bookmark/deleteBookmark'\nimport getBookmarks from './app/bsky/bookmark/getBookmarks'\nimport getActorFeeds from './app/bsky/feed/getActorFeeds'\nimport getActorLikes from './app/bsky/feed/getActorLikes'\nimport getAuthorFeed from './app/bsky/feed/getAuthorFeed'\nimport getFeed from './app/bsky/feed/getFeed'\nimport getFeedGenerator from './app/bsky/feed/getFeedGenerator'\nimport getFeedGenerators from './app/bsky/feed/getFeedGenerators'\nimport getLikes from './app/bsky/feed/getLikes'\nimport getListFeed from './app/bsky/feed/getListFeed'\nimport getPostThread from './app/bsky/feed/getPostThread'\nimport getPosts from './app/bsky/feed/getPosts'\nimport getQuotes from './app/bsky/feed/getQuotes'\nimport getRepostedBy from './app/bsky/feed/getRepostedBy'\nimport getSuggestedFeeds from './app/bsky/feed/getSuggestedFeeds'\nimport getTimeline from './app/bsky/feed/getTimeline'\nimport searchPosts from './app/bsky/feed/searchPosts'\nimport getActorStarterPacks from './app/bsky/graph/getActorStarterPacks'\nimport getBlocks from './app/bsky/graph/getBlocks'\nimport getFollowers from './app/bsky/graph/getFollowers'\nimport getFollows from './app/bsky/graph/getFollows'\nimport getKnownFollowers from './app/bsky/graph/getKnownFollowers'\nimport getList from './app/bsky/graph/getList'\nimport getListBlocks from './app/bsky/graph/getListBlocks'\nimport getListMutes from './app/bsky/graph/getListMutes'\nimport getLists from './app/bsky/graph/getLists'\nimport getListsWithMembership from './app/bsky/graph/getListsWithMembership'\nimport getMutes from './app/bsky/graph/getMutes'\nimport getRelationships from './app/bsky/graph/getRelationships'\nimport getStarterPack from './app/bsky/graph/getStarterPack'\nimport getStarterPacks from './app/bsky/graph/getStarterPacks'\nimport getStarterPacksWithMembership from './app/bsky/graph/getStarterPacksWithMembership'\nimport getSuggestedFollowsByActor from './app/bsky/graph/getSuggestedFollowsByActor'\nimport muteActor from './app/bsky/graph/muteActor'\nimport muteActorList from './app/bsky/graph/muteActorList'\nimport muteThread from './app/bsky/graph/muteThread'\nimport searchStarterPacks from './app/bsky/graph/searchStarterPacks'\nimport unmuteActor from './app/bsky/graph/unmuteActor'\nimport unmuteActorList from './app/bsky/graph/unmuteActorList'\nimport unmuteThread from './app/bsky/graph/unmuteThread'\nimport getLabelerServices from './app/bsky/labeler/getServices'\nimport getPreferences from './app/bsky/notification/getPreferences'\nimport getUnreadCount from './app/bsky/notification/getUnreadCount'\nimport listActivitySubscriptions from './app/bsky/notification/listActivitySubscriptions'\nimport listNotifications from './app/bsky/notification/listNotifications'\nimport putActivitySubscription from './app/bsky/notification/putActivitySubscription'\nimport putPreferences from './app/bsky/notification/putPreferences'\nimport putPreferencesV2 from './app/bsky/notification/putPreferencesV2'\nimport registerPush from './app/bsky/notification/registerPush'\nimport updateSeen from './app/bsky/notification/updateSeen'\nimport getAgeAssuranceState from './app/bsky/unspecced/getAgeAssuranceState'\nimport getConfig from './app/bsky/unspecced/getConfig'\nimport getOnboardingSuggestedStarterPacks from './app/bsky/unspecced/getOnboardingSuggestedStarterPacks'\nimport getPopularFeedGenerators from './app/bsky/unspecced/getPopularFeedGenerators'\nimport getPostThreadOtherV2 from './app/bsky/unspecced/getPostThreadOtherV2'\nimport getPostThreadV2 from './app/bsky/unspecced/getPostThreadV2'\nimport getUnspeccedSuggestedFeeds from './app/bsky/unspecced/getSuggestedFeeds'\nimport getSuggestedStarterPacks from './app/bsky/unspecced/getSuggestedStarterPacks'\nimport getSuggestedUsers from './app/bsky/unspecced/getSuggestedUsers'\nimport getTaggedSuggestions from './app/bsky/unspecced/getTaggedSuggestions'\nimport getTrendingTopics from './app/bsky/unspecced/getTrendingTopics'\nimport getTrends from './app/bsky/unspecced/getTrends'\nimport initAgeAssurance from './app/bsky/unspecced/initAgeAssurance'\nimport getAccountInfos from './com/atproto/admin/getAccountInfos'\nimport getSubjectStatus from './com/atproto/admin/getSubjectStatus'\nimport updateSubjectStatus from './com/atproto/admin/updateSubjectStatus'\nimport resolveHandle from './com/atproto/identity/resolveHandle'\nimport queryLabels from './com/atproto/label/queryLabels'\nimport getRecord from './com/atproto/repo/getRecord'\nimport fetchLabels from './com/atproto/temp/fetchLabels'\n\nexport * as health from './health'\n\nexport * as wellKnown from './well-known'\n\nexport * as blobResolver from './blob-resolver'\n\nexport * as external from './external'\n\nexport default function (server: Server, ctx: AppContext) {\n  // app.bsky\n  getTimeline(server, ctx)\n  createBookmark(server, ctx)\n  deleteBookmark(server, ctx)\n  getBookmarks(server, ctx)\n  getActorFeeds(server, ctx)\n  getSuggestedFeeds(server, ctx)\n  getAuthorFeed(server, ctx)\n  getFeed(server, ctx)\n  getFeedGenerator(server, ctx)\n  getFeedGenerators(server, ctx)\n  getLikes(server, ctx)\n  getListFeed(server, ctx)\n  getQuotes(server, ctx)\n  getPostThread(server, ctx)\n  getPostThreadOtherV2(server, ctx)\n  getPostThreadV2(server, ctx)\n  getPosts(server, ctx)\n  searchPosts(server, ctx)\n  getActorLikes(server, ctx)\n  getProfile(server, ctx)\n  getProfiles(server, ctx)\n  getRepostedBy(server, ctx)\n  getActorStarterPacks(server, ctx)\n  getBlocks(server, ctx)\n  getListBlocks(server, ctx)\n  getFollowers(server, ctx)\n  getKnownFollowers(server, ctx)\n  getFollows(server, ctx)\n  getList(server, ctx)\n  getLists(server, ctx)\n  getListsWithMembership(server, ctx)\n  getListMutes(server, ctx)\n  getMutes(server, ctx)\n  getRelationships(server, ctx)\n  getStarterPack(server, ctx)\n  getStarterPacks(server, ctx)\n  getStarterPacksWithMembership(server, ctx)\n  searchStarterPacks(server, ctx)\n  muteActor(server, ctx)\n  unmuteActor(server, ctx)\n  muteActorList(server, ctx)\n  unmuteActorList(server, ctx)\n  muteThread(server, ctx)\n  unmuteThread(server, ctx)\n  getSuggestedFollowsByActor(server, ctx)\n  getTrendingTopics(server, ctx)\n  getTrends(server, ctx)\n  getOnboardingSuggestedStarterPacks(server, ctx)\n  getSuggestedStarterPacks(server, ctx)\n  getSuggestedUsers(server, ctx)\n  getUnspeccedSuggestedFeeds(server, ctx)\n  getLabelerServices(server, ctx)\n  searchActors(server, ctx)\n  searchActorsTypeahead(server, ctx)\n  getSuggestions(server, ctx)\n  getPreferences(server, ctx)\n  getUnreadCount(server, ctx)\n  listActivitySubscriptions(server, ctx)\n  listNotifications(server, ctx)\n  putActivitySubscription(server, ctx)\n  updateSeen(server, ctx)\n  putPreferences(server, ctx)\n  putPreferencesV2(server, ctx)\n  registerPush(server, ctx)\n  getConfig(server, ctx)\n  getPopularFeedGenerators(server, ctx)\n  getTaggedSuggestions(server, ctx)\n  getAgeAssuranceState(server, ctx)\n  initAgeAssurance(server, ctx)\n  // com.atproto\n  getSubjectStatus(server, ctx)\n  updateSubjectStatus(server, ctx)\n  getAccountInfos(server, ctx)\n  resolveHandle(server, ctx)\n  getRecord(server, ctx)\n  fetchLabels(server, ctx)\n  queryLabels(server, ctx)\n  return server\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiGA,4BA0FC;AAzLD,6EAAoD;AACpD,+EAAsD;AACtD,qFAA4D;AAC5D,iFAAwD;AACxD,mGAA0E;AAC1E,0EAAmD;AACnD,kFAA2D;AAC3D,gFAAyD;AACzD,wFAA+D;AAC/D,wFAA+D;AAC/D,oFAA2D;AAC3D,mFAA0D;AAC1D,+EAAsD;AACtD,qFAA4D;AAC5D,uFAA8D;AAC9D,+EAAsD;AACtD,uGAA8E;AAC9E,iFAAwD;AACxD,kFAAyD;AACzD,kFAAyD;AACzD,kFAAyD;AACzD,sEAA6C;AAC7C,wFAA+D;AAC/D,0FAAiE;AACjE,wEAA+C;AAC/C,8EAAqD;AACrD,kFAAyD;AACzD,wEAA+C;AAC/C,0EAAiD;AACjD,kFAAyD;AACzD,0FAAiE;AACjE,8EAAqD;AACrD,8EAAqD;AACrD,iGAAwE;AACxE,2EAAkD;AAClD,iFAAwD;AACxD,6EAAoD;AACpD,2FAAkE;AAClE,uEAA8C;AAC9C,mFAA0D;AAC1D,iFAAwD;AACxD,yEAAgD;AAChD,qGAA4E;AAC5E,yEAAgD;AAChD,yFAAgE;AAChE,qFAA4D;AAC5D,uFAA8D;AAC9D,mHAA0F;AAC1F,6GAAoF;AACpF,2EAAkD;AAClD,mFAA0D;AAC1D,6EAAoD;AACpD,6FAAoE;AACpE,+EAAsD;AACtD,uFAA8D;AAC9D,iFAAwD;AACxD,iFAA+D;AAC/D,4FAAmE;AACnE,4FAAmE;AACnE,kHAAyF;AACzF,kGAAyE;AACzE,8GAAqF;AACrF,4FAAmE;AACnE,gGAAuE;AACvE,wFAA+D;AAC/D,oFAA2D;AAC3D,qGAA4E;AAC5E,+EAAsD;AACtD,iIAAwG;AACxG,6GAAoF;AACpF,qGAA4E;AAC5E,2FAAkE;AAClE,+FAA+E;AAC/E,6GAAoF;AACpF,+FAAsE;AACtE,qGAA4E;AAC5E,+FAAsE;AACtE,+EAAsD;AACtD,6FAAoE;AACpE,0FAAiE;AACjE,4FAAmE;AACnE,kGAAyE;AACzE,yFAAgE;AAChE,kFAAyD;AACzD,6EAAoD;AACpD,iFAAwD;AAExD,mDAAkC;AAElC,0DAAyC;AAEzC,gEAA+C;AAE/C,uDAAsC;AAEtC,mBAAyB,MAAc,EAAE,GAAe;IACtD,WAAW;IACX,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,gCAAsB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACnC,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,iBAAO,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACpB,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,kBAAQ,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,8BAAoB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,IAAA,yBAAe,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,IAAA,kBAAQ,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,8BAAoB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,iBAAO,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACpB,IAAA,kBAAQ,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrB,IAAA,gCAAsB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACnC,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,kBAAQ,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrB,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,yBAAe,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,IAAA,uCAA6B,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1C,IAAA,4BAAkB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/B,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,yBAAe,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,oCAA0B,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvC,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,4CAAkC,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/C,IAAA,kCAAwB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrC,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,2BAA0B,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvC,IAAA,qBAAkB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/B,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,+BAAqB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAClC,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,mCAAyB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtC,IAAA,2BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAA,iCAAuB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACpC,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,wBAAc,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,kCAAwB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrC,IAAA,8BAAoB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,IAAA,8BAAoB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,IAAA,mBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,kBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,eAAO,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACpB,cAAc;IACd,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,IAAA,6BAAmB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAChC,IAAA,yBAAe,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,mBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,IAAA,qBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import { AppContext } from '../context'\nimport { Server } from '../lexicon'\nimport getProfile from './app/bsky/actor/getProfile'\nimport getProfiles from './app/bsky/actor/getProfiles'\nimport getSuggestions from './app/bsky/actor/getSuggestions'\nimport searchActors from './app/bsky/actor/searchActors'\nimport searchActorsTypeahead from './app/bsky/actor/searchActorsTypeahead'\nimport aaBegin from './app/bsky/ageassurance/begin'\nimport aaGetConfig from './app/bsky/ageassurance/getConfig'\nimport aaGetState from './app/bsky/ageassurance/getState'\nimport createBookmark from './app/bsky/bookmark/createBookmark'\nimport deleteBookmark from './app/bsky/bookmark/deleteBookmark'\nimport getBookmarks from './app/bsky/bookmark/getBookmarks'\nimport dismissMatch from './app/bsky/contact/dismissMatch'\nimport getMatches from './app/bsky/contact/getMatches'\nimport getSyncStatus from './app/bsky/contact/getSyncStatus'\nimport importContacts from './app/bsky/contact/importContacts'\nimport removeData from './app/bsky/contact/removeData'\nimport startPhoneVerification from './app/bsky/contact/startPhoneVerification'\nimport verifyPhone from './app/bsky/contact/verifyPhone'\nimport getActorFeeds from './app/bsky/feed/getActorFeeds'\nimport getActorLikes from './app/bsky/feed/getActorLikes'\nimport getAuthorFeed from './app/bsky/feed/getAuthorFeed'\nimport getFeed from './app/bsky/feed/getFeed'\nimport getFeedGenerator from './app/bsky/feed/getFeedGenerator'\nimport getFeedGenerators from './app/bsky/feed/getFeedGenerators'\nimport getLikes from './app/bsky/feed/getLikes'\nimport getListFeed from './app/bsky/feed/getListFeed'\nimport getPostThread from './app/bsky/feed/getPostThread'\nimport getPosts from './app/bsky/feed/getPosts'\nimport getQuotes from './app/bsky/feed/getQuotes'\nimport getRepostedBy from './app/bsky/feed/getRepostedBy'\nimport getSuggestedFeeds from './app/bsky/feed/getSuggestedFeeds'\nimport getTimeline from './app/bsky/feed/getTimeline'\nimport searchPosts from './app/bsky/feed/searchPosts'\nimport getActorStarterPacks from './app/bsky/graph/getActorStarterPacks'\nimport getBlocks from './app/bsky/graph/getBlocks'\nimport getFollowers from './app/bsky/graph/getFollowers'\nimport getFollows from './app/bsky/graph/getFollows'\nimport getKnownFollowers from './app/bsky/graph/getKnownFollowers'\nimport getList from './app/bsky/graph/getList'\nimport getListBlocks from './app/bsky/graph/getListBlocks'\nimport getListMutes from './app/bsky/graph/getListMutes'\nimport getLists from './app/bsky/graph/getLists'\nimport getListsWithMembership from './app/bsky/graph/getListsWithMembership'\nimport getMutes from './app/bsky/graph/getMutes'\nimport getRelationships from './app/bsky/graph/getRelationships'\nimport getStarterPack from './app/bsky/graph/getStarterPack'\nimport getStarterPacks from './app/bsky/graph/getStarterPacks'\nimport getStarterPacksWithMembership from './app/bsky/graph/getStarterPacksWithMembership'\nimport getSuggestedFollowsByActor from './app/bsky/graph/getSuggestedFollowsByActor'\nimport muteActor from './app/bsky/graph/muteActor'\nimport muteActorList from './app/bsky/graph/muteActorList'\nimport muteThread from './app/bsky/graph/muteThread'\nimport searchStarterPacks from './app/bsky/graph/searchStarterPacks'\nimport unmuteActor from './app/bsky/graph/unmuteActor'\nimport unmuteActorList from './app/bsky/graph/unmuteActorList'\nimport unmuteThread from './app/bsky/graph/unmuteThread'\nimport getLabelerServices from './app/bsky/labeler/getServices'\nimport getPreferences from './app/bsky/notification/getPreferences'\nimport getUnreadCount from './app/bsky/notification/getUnreadCount'\nimport listActivitySubscriptions from './app/bsky/notification/listActivitySubscriptions'\nimport listNotifications from './app/bsky/notification/listNotifications'\nimport putActivitySubscription from './app/bsky/notification/putActivitySubscription'\nimport putPreferences from './app/bsky/notification/putPreferences'\nimport putPreferencesV2 from './app/bsky/notification/putPreferencesV2'\nimport registerPush from './app/bsky/notification/registerPush'\nimport updateSeen from './app/bsky/notification/updateSeen'\nimport getAgeAssuranceState from './app/bsky/unspecced/getAgeAssuranceState'\nimport getConfig from './app/bsky/unspecced/getConfig'\nimport getOnboardingSuggestedStarterPacks from './app/bsky/unspecced/getOnboardingSuggestedStarterPacks'\nimport getPopularFeedGenerators from './app/bsky/unspecced/getPopularFeedGenerators'\nimport getPostThreadOtherV2 from './app/bsky/unspecced/getPostThreadOtherV2'\nimport getPostThreadV2 from './app/bsky/unspecced/getPostThreadV2'\nimport getUnspeccedSuggestedFeeds from './app/bsky/unspecced/getSuggestedFeeds'\nimport getSuggestedStarterPacks from './app/bsky/unspecced/getSuggestedStarterPacks'\nimport getSuggestedUsers from './app/bsky/unspecced/getSuggestedUsers'\nimport getTaggedSuggestions from './app/bsky/unspecced/getTaggedSuggestions'\nimport getTrendingTopics from './app/bsky/unspecced/getTrendingTopics'\nimport getTrends from './app/bsky/unspecced/getTrends'\nimport initAgeAssurance from './app/bsky/unspecced/initAgeAssurance'\nimport getAccountInfos from './com/atproto/admin/getAccountInfos'\nimport getSubjectStatus from './com/atproto/admin/getSubjectStatus'\nimport updateSubjectStatus from './com/atproto/admin/updateSubjectStatus'\nimport resolveHandle from './com/atproto/identity/resolveHandle'\nimport queryLabels from './com/atproto/label/queryLabels'\nimport getRecord from './com/atproto/repo/getRecord'\nimport fetchLabels from './com/atproto/temp/fetchLabels'\n\nexport * as health from './health'\n\nexport * as wellKnown from './well-known'\n\nexport * as blobResolver from './blob-resolver'\n\nexport * as external from './external'\n\nexport default function (server: Server, ctx: AppContext) {\n  // app.bsky\n  getTimeline(server, ctx)\n  createBookmark(server, ctx)\n  deleteBookmark(server, ctx)\n  getBookmarks(server, ctx)\n  dismissMatch(server, ctx)\n  getMatches(server, ctx)\n  getSyncStatus(server, ctx)\n  importContacts(server, ctx)\n  removeData(server, ctx)\n  startPhoneVerification(server, ctx)\n  verifyPhone(server, ctx)\n  getActorFeeds(server, ctx)\n  getSuggestedFeeds(server, ctx)\n  getAuthorFeed(server, ctx)\n  getFeed(server, ctx)\n  getFeedGenerator(server, ctx)\n  getFeedGenerators(server, ctx)\n  getLikes(server, ctx)\n  getListFeed(server, ctx)\n  getQuotes(server, ctx)\n  getPostThread(server, ctx)\n  getPostThreadOtherV2(server, ctx)\n  getPostThreadV2(server, ctx)\n  getPosts(server, ctx)\n  searchPosts(server, ctx)\n  getActorLikes(server, ctx)\n  getProfile(server, ctx)\n  getProfiles(server, ctx)\n  getRepostedBy(server, ctx)\n  getActorStarterPacks(server, ctx)\n  getBlocks(server, ctx)\n  getListBlocks(server, ctx)\n  getFollowers(server, ctx)\n  getKnownFollowers(server, ctx)\n  getFollows(server, ctx)\n  getList(server, ctx)\n  getLists(server, ctx)\n  getListsWithMembership(server, ctx)\n  getListMutes(server, ctx)\n  getMutes(server, ctx)\n  getRelationships(server, ctx)\n  getStarterPack(server, ctx)\n  getStarterPacks(server, ctx)\n  getStarterPacksWithMembership(server, ctx)\n  searchStarterPacks(server, ctx)\n  muteActor(server, ctx)\n  unmuteActor(server, ctx)\n  muteActorList(server, ctx)\n  unmuteActorList(server, ctx)\n  muteThread(server, ctx)\n  unmuteThread(server, ctx)\n  getSuggestedFollowsByActor(server, ctx)\n  getTrendingTopics(server, ctx)\n  getTrends(server, ctx)\n  getOnboardingSuggestedStarterPacks(server, ctx)\n  getSuggestedStarterPacks(server, ctx)\n  getSuggestedUsers(server, ctx)\n  getUnspeccedSuggestedFeeds(server, ctx)\n  getLabelerServices(server, ctx)\n  searchActors(server, ctx)\n  searchActorsTypeahead(server, ctx)\n  getSuggestions(server, ctx)\n  getPreferences(server, ctx)\n  getUnreadCount(server, ctx)\n  listActivitySubscriptions(server, ctx)\n  listNotifications(server, ctx)\n  putActivitySubscription(server, ctx)\n  updateSeen(server, ctx)\n  putPreferences(server, ctx)\n  putPreferencesV2(server, ctx)\n  registerPush(server, ctx)\n  getConfig(server, ctx)\n  getPopularFeedGenerators(server, ctx)\n  getTaggedSuggestions(server, ctx)\n  getAgeAssuranceState(server, ctx)\n  initAgeAssurance(server, ctx)\n  aaGetConfig(server, ctx)\n  aaGetState(server, ctx)\n  aaBegin(server, ctx)\n  // com.atproto\n  getSubjectStatus(server, ctx)\n  updateSubjectStatus(server, ctx)\n  getAccountInfos(server, ctx)\n  resolveHandle(server, ctx)\n  getRecord(server, ctx)\n  fetchLabels(server, ctx)\n  queryLabels(server, ctx)\n  return server\n}\n"]}

package/dist/api/kws/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/api/kws/api.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAEjD,OAAO,EACL,uBAAuB,EAIxB,MAAM,SAAS,CAAA;AAsChB,eAAO,MAAM,mBAAmB,GAC7B,KAAK,uBAAuB,KAAG,cA6C/B,CAAA"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/api/kws/api.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AASjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAA;AAmCjD,eAAO,MAAM,mBAAmB,GAC7B,KAAK,uBAAuB,KAAG,cAmE/B,CAAA"}

package/dist/api/kws/api.js

@@ -2,47 +2,65 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.verificationHandler = void 0;
 const logger_1 = require("../../logger");
-const types_1 = require("./types");
-const util_1 = require("./util");
-const validateRequest = (ctx, req) => {
+const const_1 = require("../age-assurance/const");
+const external_payload_1 = require("../age-assurance/kws/external-payload");
+const stash_1 = require("../age-assurance/stash");
+const util_1 = require("../age-assurance/util");
+const util_2 = require("./util");
+function parseQueryParams(ctx, req) {
     try {
-        const intermediate = types_1.verificationIntermediateQuerySchema.parse({
-            externalPayload: req.query.externalPayload,
-            signature: req.query.signature,
-            status: req.query.status,
-        });
-        const data = `${intermediate.status}:${intermediate.externalPayload}`;
-        (0, util_1.validateSignature)(ctx.cfg.kws.verificationSecret, data, intermediate.signature);
+        const status = String(req.query.status);
+        const externalPayload = String(req.query.externalPayload);
+        const signature = String(req.query.signature);
+        (0, util_2.validateSignature)(ctx.cfg.kws.verificationSecret, `${status}:${externalPayload}`, signature);
         return {
-            ...intermediate,
-            externalPayload: (0, util_1.parseExternalPayload)(intermediate.externalPayload),
-            status: (0, util_1.parseStatus)(intermediate.status),
+            status,
+            externalPayload,
         };
     }
     catch (err) {
         throw new Error('Invalid KWS API request', { cause: err });
     }
-};
+}
 const verificationHandler = (ctx) => async (req, res) => {
     let actorDid;
     try {
-        const query = validateRequest(ctx, req);
-        const { externalPayload, status: { verified }, } = query;
+        const query = parseQueryParams(ctx, req);
+        const { verified } = (0, util_2.parseStatus)(query.status);
         if (!verified) {
             throw new Error('Unexpected KWS verification response call with unverified status');
         }
-        const { actorDid: externalPayloadActorDid, attemptId } = externalPayload;
-        actorDid = externalPayloadActorDid;
         // Assumes `app.set('trust proxy', ...)` configured with `true` or specific values.
         const completeIp = req.ip;
-        const completeUa = (0, util_1.getClientUa)(req);
-        await (0, util_1.createStashEvent)(ctx, {
-            actorDid,
-            attemptId,
-            completeIp,
-            completeUa,
-            status: 'assured',
-        });
+        const completeUa = (0, util_2.getClientUa)(req);
+        const externalPayload = (0, external_payload_1.parseKWSExternalPayloadV1WithV2Compat)(query.externalPayload);
+        actorDid = externalPayload.actorDid;
+        if (externalPayload.version === external_payload_1.KWSExternalPayloadVersion.V2) {
+            const { countryCode, regionCode, attemptId } = externalPayload;
+            const { access } = (0, util_1.computeAgeAssuranceAccessOrThrow)(const_1.AGE_ASSURANCE_CONFIG, {
+                countryCode: countryCode,
+                regionCode: regionCode,
+                verifiedMinimumAge: 18, // `adult-verified` is 18+ only
+            });
+            await (0, stash_1.createEvent)(ctx, actorDid, {
+                attemptId,
+                status: 'assured',
+                access,
+                countryCode,
+                regionCode,
+                completeIp,
+                completeUa,
+            });
+        }
+        else {
+            await (0, util_2.createStashEvent)(ctx, {
+                actorDid,
+                attemptId: externalPayload.attemptId,
+                status: 'assured',
+                completeIp,
+                completeUa,
+            });
+        }
         return res
             .status(302)
             .setHeader('Location', `${ctx.cfg.kws.redirectUrl}?${new URLSearchParams({ actorDid, result: 'success' })}`)

package/dist/api/kws/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/api/kws/api.ts"],"names":[],"mappings":";;;AACA,yCAAgD;AAChD,mCAKgB;AAChB,iCAMe;AAEf,MAAM,eAAe,GAAG,CACtB,GAA4B,EAC5B,GAAoB,EACE,EAAE;IACxB,IAAI,CAAC;QACH,MAAM,YAAY,GAChB,2CAAmC,CAAC,KAAK,CAAC;YACxC,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,eAAe;YAC1C,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS;YAC9B,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;SACzB,CAAC,CAAA;QAEJ,MAAM,IAAI,GAAG,GAAG,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,CAAA;QACrE,IAAA,wBAAiB,EACf,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAC9B,IAAI,EACJ,YAAY,CAAC,SAAS,CACvB,CAAA;QAED,OAAO;YACL,GAAG,YAAY;YACf,eAAe,EAAE,IAAA,2BAAoB,EAAC,YAAY,CAAC,eAAe,CAAC;YACnE,MAAM,EAAE,IAAA,kBAAW,EAAC,YAAY,CAAC,MAAM,CAAC;SACzC,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC,CAAA;AAEM,MAAM,mBAAmB,GAC9B,CAAC,GAA4B,EAAkB,EAAE,CACjD,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;IACpD,IAAI,QAA4B,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACvC,MAAM,EACJ,eAAe,EACf,MAAM,EAAE,EAAE,QAAQ,EAAE,GACrB,GAAG,KAAK,CAAA;QACT,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAA;QACH,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,EAAE,GAAG,eAAe,CAAA;QACxE,QAAQ,GAAG,uBAAuB,CAAA;QAClC,mFAAmF;QACnF,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE,CAAA;QACzB,MAAM,UAAU,GAAG,IAAA,kBAAW,EAAC,GAAG,CAAC,CAAA;QACnC,MAAM,IAAA,uBAAgB,EAAC,GAAG,EAAE;YAC1B,QAAQ;YACR,SAAS;YACT,UAAU;YACV,UAAU;YACV,MAAM,EAAE,SAAS;SAClB,CAAC,CAAA;QACF,OAAO,GAAG;aACP,MAAM,CAAC,GAAG,CAAC;aACX,SAAS,CACR,UAAU,EACV,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CACrF;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4CAA4C,CAAC,CAAA;QAEhE,OAAO,GAAG;aACP,MAAM,CAAC,GAAG,CAAC;aACX,SAAS,CACR,UAAU,EACV,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,eAAe,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAC9G;aACA,GAAG,EAAE,CAAA;IACV,CAAC;AACH,CAAC,CAAA;AA9CU,QAAA,mBAAmB,uBA8C7B","sourcesContent":["import express, { RequestHandler } from 'express'\nimport { httpLogger as log } from '../../logger'\nimport {\n  AppContextWithKwsClient,\n  KwsVerificationIntermediateQuery,\n  KwsVerificationQuery,\n  verificationIntermediateQuerySchema,\n} from './types'\nimport {\n  createStashEvent,\n  getClientUa,\n  parseExternalPayload,\n  parseStatus,\n  validateSignature,\n} from './util'\n\nconst validateRequest = (\n  ctx: AppContextWithKwsClient,\n  req: express.Request,\n): KwsVerificationQuery => {\n  try {\n    const intermediate: KwsVerificationIntermediateQuery =\n      verificationIntermediateQuerySchema.parse({\n        externalPayload: req.query.externalPayload,\n        signature: req.query.signature,\n        status: req.query.status,\n      })\n\n    const data = `${intermediate.status}:${intermediate.externalPayload}`\n    validateSignature(\n      ctx.cfg.kws.verificationSecret,\n      data,\n      intermediate.signature,\n    )\n\n    return {\n      ...intermediate,\n      externalPayload: parseExternalPayload(intermediate.externalPayload),\n      status: parseStatus(intermediate.status),\n    }\n  } catch (err) {\n    throw new Error('Invalid KWS API request', { cause: err })\n  }\n}\n\nexport const verificationHandler =\n  (ctx: AppContextWithKwsClient): RequestHandler =>\n  async (req: express.Request, res: express.Response) => {\n    let actorDid: string | undefined\n    try {\n      const query = validateRequest(ctx, req)\n      const {\n        externalPayload,\n        status: { verified },\n      } = query\n      if (!verified) {\n        throw new Error(\n          'Unexpected KWS verification response call with unverified status',\n        )\n      }\n\n      const { actorDid: externalPayloadActorDid, attemptId } = externalPayload\n      actorDid = externalPayloadActorDid\n      // Assumes `app.set('trust proxy', ...)` configured with `true` or specific values.\n      const completeIp = req.ip\n      const completeUa = getClientUa(req)\n      await createStashEvent(ctx, {\n        actorDid,\n        attemptId,\n        completeIp,\n        completeUa,\n        status: 'assured',\n      })\n      return res\n        .status(302)\n        .setHeader(\n          'Location',\n          `${ctx.cfg.kws.redirectUrl}?${new URLSearchParams({ actorDid, result: 'success' })}`,\n        )\n        .end()\n    } catch (err) {\n      log.error({ err }, 'Failed to handle KWS verification response')\n\n      return res\n        .status(302)\n        .setHeader(\n          'Location',\n          `${ctx.cfg.kws.redirectUrl}?${new URLSearchParams({ ...(actorDid ? { actorDid } : {}), result: 'unknown' })}`,\n        )\n        .end()\n    }\n  }\n"]}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/api/kws/api.ts"],"names":[],"mappings":";;;AACA,yCAAgD;AAChD,kDAA6D;AAC7D,4EAG8C;AAC9C,kDAAoD;AACpD,gDAAwE;AAExE,iCAKe;AAEf,SAAS,gBAAgB,CACvB,GAA4B,EAC5B,GAAoB;IAKpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAE7C,IAAA,wBAAiB,EACf,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAC9B,GAAG,MAAM,IAAI,eAAe,EAAE,EAC9B,SAAS,CACV,CAAA;QAED,OAAO;YACL,MAAM;YACN,eAAe;SAChB,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC;AAEM,MAAM,mBAAmB,GAC9B,CAAC,GAA4B,EAAkB,EAAE,CACjD,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;IACpD,IAAI,QAA4B,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACxC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,kBAAW,EAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAA;QACH,CAAC;QAED,mFAAmF;QACnF,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE,CAAA;QACzB,MAAM,UAAU,GAAG,IAAA,kBAAW,EAAC,GAAG,CAAC,CAAA;QACnC,MAAM,eAAe,GAAG,IAAA,wDAAqC,EAC3D,KAAK,CAAC,eAAe,CACtB,CAAA;QACD,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAA;QAEnC,IAAI,eAAe,CAAC,OAAO,KAAK,4CAAyB,CAAC,EAAE,EAAE,CAAC;YAC7D,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,eAAe,CAAA;YAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,uCAAgC,EACjD,4BAAoB,EACpB;gBACE,WAAW,EAAE,WAAW;gBACxB,UAAU,EAAE,UAAU;gBACtB,kBAAkB,EAAE,EAAE,EAAE,+BAA+B;aACxD,CACF,CAAA;YACD,MAAM,IAAA,mBAAW,EAAC,GAAG,EAAE,QAAQ,EAAE;gBAC/B,SAAS;gBACT,MAAM,EAAE,SAAS;gBACjB,MAAM;gBACN,WAAW;gBACX,UAAU;gBACV,UAAU;gBACV,UAAU;aACX,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,uBAAgB,EAAC,GAAG,EAAE;gBAC1B,QAAQ;gBACR,SAAS,EAAE,eAAe,CAAC,SAAS;gBACpC,MAAM,EAAE,SAAS;gBACjB,UAAU;gBACV,UAAU;aACX,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,GAAG;aACP,MAAM,CAAC,GAAG,CAAC;aACX,SAAS,CACR,UAAU,EACV,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CACrF;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4CAA4C,CAAC,CAAA;QAEhE,OAAO,GAAG;aACP,MAAM,CAAC,GAAG,CAAC;aACX,SAAS,CACR,UAAU,EACV,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,eAAe,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAC9G;aACA,GAAG,EAAE,CAAA;IACV,CAAC;AACH,CAAC,CAAA;AApEU,QAAA,mBAAmB,uBAoE7B","sourcesContent":["import express, { RequestHandler } from 'express'\nimport { httpLogger as log } from '../../logger'\nimport { AGE_ASSURANCE_CONFIG } from '../age-assurance/const'\nimport {\n  KWSExternalPayloadVersion,\n  parseKWSExternalPayloadV1WithV2Compat,\n} from '../age-assurance/kws/external-payload'\nimport { createEvent } from '../age-assurance/stash'\nimport { computeAgeAssuranceAccessOrThrow } from '../age-assurance/util'\nimport { AppContextWithKwsClient } from './types'\nimport {\n  createStashEvent,\n  getClientUa,\n  parseStatus,\n  validateSignature,\n} from './util'\n\nfunction parseQueryParams(\n  ctx: AppContextWithKwsClient,\n  req: express.Request,\n): {\n  status: string\n  externalPayload: string\n} {\n  try {\n    const status = String(req.query.status)\n    const externalPayload = String(req.query.externalPayload)\n    const signature = String(req.query.signature)\n\n    validateSignature(\n      ctx.cfg.kws.verificationSecret,\n      `${status}:${externalPayload}`,\n      signature,\n    )\n\n    return {\n      status,\n      externalPayload,\n    }\n  } catch (err) {\n    throw new Error('Invalid KWS API request', { cause: err })\n  }\n}\n\nexport const verificationHandler =\n  (ctx: AppContextWithKwsClient): RequestHandler =>\n  async (req: express.Request, res: express.Response) => {\n    let actorDid: string | undefined\n    try {\n      const query = parseQueryParams(ctx, req)\n      const { verified } = parseStatus(query.status)\n      if (!verified) {\n        throw new Error(\n          'Unexpected KWS verification response call with unverified status',\n        )\n      }\n\n      // Assumes `app.set('trust proxy', ...)` configured with `true` or specific values.\n      const completeIp = req.ip\n      const completeUa = getClientUa(req)\n      const externalPayload = parseKWSExternalPayloadV1WithV2Compat(\n        query.externalPayload,\n      )\n      actorDid = externalPayload.actorDid\n\n      if (externalPayload.version === KWSExternalPayloadVersion.V2) {\n        const { countryCode, regionCode, attemptId } = externalPayload\n        const { access } = computeAgeAssuranceAccessOrThrow(\n          AGE_ASSURANCE_CONFIG,\n          {\n            countryCode: countryCode,\n            regionCode: regionCode,\n            verifiedMinimumAge: 18, // `adult-verified` is 18+ only\n          },\n        )\n        await createEvent(ctx, actorDid, {\n          attemptId,\n          status: 'assured',\n          access,\n          countryCode,\n          regionCode,\n          completeIp,\n          completeUa,\n        })\n      } else {\n        await createStashEvent(ctx, {\n          actorDid,\n          attemptId: externalPayload.attemptId,\n          status: 'assured',\n          completeIp,\n          completeUa,\n        })\n      }\n\n      return res\n        .status(302)\n        .setHeader(\n          'Location',\n          `${ctx.cfg.kws.redirectUrl}?${new URLSearchParams({ actorDid, result: 'success' })}`,\n        )\n        .end()\n    } catch (err) {\n      log.error({ err }, 'Failed to handle KWS verification response')\n\n      return res\n        .status(302)\n        .setHeader(\n          'Location',\n          `${ctx.cfg.kws.redirectUrl}?${new URLSearchParams({ ...(actorDid ? { actorDid } : {}), result: 'unknown' })}`,\n        )\n        .end()\n    }\n  }\n"]}

package/dist/api/kws/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/kws/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAO,MAAM,SAAS,CAAA;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAK1C,eAAO,MAAM,YAAY,GAAI,KAAK,UAAU,KAAG,MAQ9C,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/kws/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAO,MAAM,SAAS,CAAA;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAK1C,eAAO,MAAM,YAAY,GAAI,KAAK,UAAU,KAAG,MAc9C,CAAA"}

package/dist/api/kws/index.js

@@ -8,7 +8,9 @@ const createRouter = (ctx) => {
     assertAppContextWithAgeAssuranceClient(ctx);
     const router = (0, express_1.Router)();
     router.use((0, express_1.raw)({ type: 'application/json' }));
-    router.post('/age-assurance-webhook', (0, webhook_1.webhookAuth)(ctx), (0, webhook_1.webhookHandler)(ctx));
+    router.post('/age-assurance-webhook', (0, webhook_1.webhookAuth)({
+        secret: ctx.cfg.kws.webhookSecret,
+    }), (0, webhook_1.webhookHandler)(ctx));
     router.get('/age-assurance-verification', (0, api_1.verificationHandler)(ctx));
     return router;
 };

package/dist/api/kws/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/kws/index.ts"],"names":[],"mappings":";;;AAAA,qCAAqC;AAErC,+BAA2C;AAE3C,uCAAuD;AAEhD,MAAM,YAAY,GAAG,CAAC,GAAe,EAAU,EAAE;IACtD,sCAAsC,CAAC,GAAG,CAAC,CAAA;IAE3C,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAA;IACvB,MAAM,CAAC,GAAG,CAAC,IAAA,aAAG,EAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAA;IAC7C,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,IAAA,qBAAW,EAAC,GAAG,CAAC,EAAE,IAAA,wBAAc,EAAC,GAAG,CAAC,CAAC,CAAA;IAC5E,MAAM,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAA,yBAAmB,EAAC,GAAG,CAAC,CAAC,CAAA;IACnE,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AARY,QAAA,YAAY,gBAQxB;AAED,MAAM,sCAAsC,GAEE,CAAC,GAAe,EAAE,EAAE;IAChE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC,CAAA","sourcesContent":["import { Router, raw } from 'express'\nimport { AppContext } from '../../context'\nimport { verificationHandler } from './api'\nimport { AppContextWithKwsClient } from './types'\nimport { webhookAuth, webhookHandler } from './webhook'\n\nexport const createRouter = (ctx: AppContext): Router => {\n  assertAppContextWithAgeAssuranceClient(ctx)\n\n  const router = Router()\n  router.use(raw({ type: 'application/json' }))\n  router.post('/age-assurance-webhook', webhookAuth(ctx), webhookHandler(ctx))\n  router.get('/age-assurance-verification', verificationHandler(ctx))\n  return router\n}\n\nconst assertAppContextWithAgeAssuranceClient: (\n  ctx: AppContext,\n) => asserts ctx is AppContextWithKwsClient = (ctx: AppContext) => {\n  if (!ctx.kwsClient) {\n    throw new Error('Tried to set up KWS router without kwsClient configured.')\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/kws/index.ts"],"names":[],"mappings":";;;AAAA,qCAAqC;AAErC,+BAA2C;AAE3C,uCAAuD;AAEhD,MAAM,YAAY,GAAG,CAAC,GAAe,EAAU,EAAE;IACtD,sCAAsC,CAAC,GAAG,CAAC,CAAA;IAE3C,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAA;IACvB,MAAM,CAAC,GAAG,CAAC,IAAA,aAAG,EAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAA;IAC7C,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,IAAA,qBAAW,EAAC;QACV,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa;KAClC,CAAC,EACF,IAAA,wBAAc,EAAC,GAAG,CAAC,CACpB,CAAA;IACD,MAAM,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAA,yBAAmB,EAAC,GAAG,CAAC,CAAC,CAAA;IACnE,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAdY,QAAA,YAAY,gBAcxB;AAED,MAAM,sCAAsC,GAEE,CAAC,GAAe,EAAE,EAAE;IAChE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC,CAAA","sourcesContent":["import { Router, raw } from 'express'\nimport { AppContext } from '../../context'\nimport { verificationHandler } from './api'\nimport { AppContextWithKwsClient } from './types'\nimport { webhookAuth, webhookHandler } from './webhook'\n\nexport const createRouter = (ctx: AppContext): Router => {\n  assertAppContextWithAgeAssuranceClient(ctx)\n\n  const router = Router()\n  router.use(raw({ type: 'application/json' }))\n  router.post(\n    '/age-assurance-webhook',\n    webhookAuth({\n      secret: ctx.cfg.kws.webhookSecret,\n    }),\n    webhookHandler(ctx),\n  )\n  router.get('/age-assurance-verification', verificationHandler(ctx))\n  return router\n}\n\nconst assertAppContextWithAgeAssuranceClient: (\n  ctx: AppContext,\n) => asserts ctx is AppContextWithKwsClient = (ctx: AppContext) => {\n  if (!ctx.kwsClient) {\n    throw new Error('Tried to set up KWS router without kwsClient configured.')\n  }\n}\n"]}

package/dist/api/kws/webhook.d.ts

@@ -1,5 +1,7 @@
 import { RequestHandler } from 'express';
 import { AppContextWithKwsClient } from './types';
-export declare const webhookAuth: (ctx: AppContextWithKwsClient) => RequestHandler;
+export declare const webhookAuth: ({ secret }: {
+    secret: string;
+}) => RequestHandler;
 export declare const webhookHandler: (ctx: AppContextWithKwsClient) => RequestHandler;
 //# sourceMappingURL=webhook.d.ts.map

package/dist/api/kws/webhook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../src/api/kws/webhook.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAEjD,OAAO,EACL,uBAAuB,EAGxB,MAAM,SAAS,CAAA;AAQhB,eAAO,MAAM,WAAW,GACrB,KAAK,uBAAuB,KAAG,cA8B/B,CAAA;AA4BH,eAAO,MAAM,cAAc,GACxB,KAAK,uBAAuB,KAAG,cAgC/B,CAAA"}
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../src/api/kws/webhook.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AASjD,OAAO,EACL,uBAAuB,EAGxB,MAAM,SAAS,CAAA;AAGhB,eAAO,MAAM,WAAW,GACrB,YAAY;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,KAAG,cA8BjC,CAAA;AAiBH,eAAO,MAAM,cAAc,GACxB,KAAK,uBAAuB,KAAG,cAgE/B,CAAA"}

package/dist/api/kws/webhook.js

@@ -2,13 +2,17 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.webhookHandler = exports.webhookAuth = void 0;
 const logger_1 = require("../../logger");
+const const_1 = require("../age-assurance/const");
+const external_payload_1 = require("../age-assurance/kws/external-payload");
+const stash_1 = require("../age-assurance/stash");
+const util_1 = require("../age-assurance/util");
 const types_1 = require("./types");
-const util_1 = require("./util");
-const webhookAuth = (ctx) => (req, res, next) => {
+const util_2 = require("./util");
+const webhookAuth = ({ secret }) => (req, res, next) => {
     const body = req.body;
     const sigHeader = req.headers['x-kws-signature'];
     if (!sigHeader || typeof sigHeader !== 'string') {
-        return res.status(401).header((0, util_1.kwsWwwAuthenticate)()).json({
+        return res.status(401).header((0, util_2.kwsWwwAuthenticate)()).json({
             success: false,
             error: 'Invalid authentication for KWS webhook: missing signature header',
         });
@@ -21,12 +25,12 @@ const webhookAuth = (ctx) => (req, res, next) => {
             throw new Error('Invalid webhook signature format');
         }
         const data = `${timestamp}.${body}`;
-        (0, util_1.validateSignature)(ctx.cfg.kws.webhookSecret, data, signature);
+        (0, util_2.validateSignature)(secret, data, signature);
         next();
     }
     catch (err) {
         logger_1.httpLogger.error({ err }, 'Invalid KWS webhook signature');
-        return res.status(401).header((0, util_1.kwsWwwAuthenticate)()).json({
+        return res.status(401).header((0, util_2.kwsWwwAuthenticate)()).json({
             success: false,
             error: 'Invalid authentication for KWS webhook: signature mismatch',
         });
@@ -36,14 +40,7 @@ exports.webhookAuth = webhookAuth;
 const parseBody = (serialized) => {
     try {
         const value = JSON.parse(serialized);
-        const intermediate = types_1.webhookBodyIntermediateSchema.parse(value);
-        return {
-            ...intermediate,
-            payload: {
-                ...intermediate.payload,
-                externalPayload: (0, util_1.parseExternalPayload)(intermediate.payload.externalPayload),
-            },
-        };
+        return types_1.webhookBodyIntermediateSchema.parse(value);
     }
     catch (err) {
         throw new Error(`Invalid webhook body: ${serialized}`, { cause: err });
@@ -58,17 +55,48 @@ const webhookHandler = (ctx) => async (req, res) => {
         logger_1.httpLogger.error({ err }, 'Invalid KWS webhook body');
         return res.status(400).json(err);
     }
-    const { payload: { status: { verified }, externalPayload, }, } = body;
-    const { actorDid, attemptId } = externalPayload;
+    const { verified } = body.payload.status;
     if (!verified) {
         throw new Error('Unexpected KWS webhook call with unverified status');
     }
+    const externalPayload = (0, external_payload_1.parseKWSExternalPayloadV1WithV2Compat)(body.payload.externalPayload);
+    const isV2 = externalPayload.version === external_payload_1.KWSExternalPayloadVersion.V2;
+    let result;
+    if (isV2) {
+        const { attemptId, actorDid, countryCode, regionCode } = externalPayload;
+        try {
+            result = (0, util_1.computeAgeAssuranceAccessOrThrow)(const_1.AGE_ASSURANCE_CONFIG, {
+                countryCode: countryCode,
+                regionCode: regionCode,
+                verifiedMinimumAge: 18, // `adult-verified` is 18+ only
+            });
+        }
+        catch (err) {
+            // internal errors
+            logger_1.httpLogger.error({ err, attemptId, actorDid, countryCode, regionCode }, 'Failed to compute age assurance access');
+        }
+    }
     try {
-        await (0, util_1.createStashEvent)(ctx, {
-            actorDid,
-            attemptId,
-            status: 'assured',
-        });
+        if (isV2) {
+            if (result) {
+                const { attemptId, actorDid, countryCode, regionCode } = externalPayload;
+                await (0, stash_1.createEvent)(ctx, actorDid, {
+                    attemptId,
+                    status: 'assured',
+                    access: result.access,
+                    countryCode,
+                    regionCode,
+                });
+            } // else do nothing
+        }
+        else {
+            const { attemptId, actorDid } = externalPayload;
+            await (0, util_2.createStashEvent)(ctx, {
+                attemptId: attemptId,
+                actorDid: actorDid,
+                status: 'assured',
+            });
+        }
         return res.status(200).end();
     }
     catch (err) {

package/dist/api/kws/webhook.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../../src/api/kws/webhook.ts"],"names":[],"mappings":";;;AACA,yCAAgD;AAChD,mCAIgB;AAChB,iCAKe;AAER,MAAM,WAAW,GACtB,CAAC,GAA4B,EAAkB,EAAE,CACjD,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;IAC1E,MAAM,IAAI,GAAW,GAAG,CAAC,IAAI,CAAA;IAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAChD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAA,yBAAkB,GAAE,CAAC,CAAC,IAAI,CAAC;YACvD,OAAO,EAAE,KAAK;YACd,KAAK,EACH,kEAAkE;SACrE,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACtE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACvE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,IAAI,EAAE,CAAA;QACnC,IAAA,wBAAiB,EAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC7D,IAAI,EAAE,CAAA;IACR,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAA;QACnD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAA,yBAAkB,GAAE,CAAC,CAAC,IAAI,CAAC;YACvD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,4DAA4D;SACpE,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAA;AA/BU,QAAA,WAAW,eA+BrB;AAQH,MAAM,SAAS,GAAG,CAAC,UAAkB,EAAkB,EAAE;IACvD,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QAC7C,MAAM,YAAY,GAChB,qCAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAE5C,OAAO;YACL,GAAG,YAAY;YACf,OAAO,EAAE;gBACP,GAAG,YAAY,CAAC,OAAO;gBACvB,eAAe,EAAE,IAAA,2BAAoB,EACnC,YAAY,CAAC,OAAO,CAAC,eAAe,CACrC;aACF;SACF,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IACxE,CAAC;AACH,CAAC,CAAA;AAEM,MAAM,cAAc,GACzB,CAAC,GAA4B,EAAkB,EAAE,CACjD,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;IACpD,IAAI,IAAoB,CAAA;IACxB,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAA;QAC9C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;IAED,MAAM,EACJ,OAAO,EAAE,EACP,MAAM,EAAE,EAAE,QAAQ,EAAE,EACpB,eAAe,GAChB,GACF,GAAG,IAAI,CAAA;IACR,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,eAAe,CAAA;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAA,uBAAgB,EAAC,GAAG,EAAE;YAC1B,QAAQ;YACR,SAAS;YACT,MAAM,EAAE,SAAS;SAClB,CAAC,CAAA;QACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAClD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;AACH,CAAC,CAAA;AAjCU,QAAA,cAAc,kBAiCxB","sourcesContent":["import express, { RequestHandler } from 'express'\nimport { httpLogger as log } from '../../logger'\nimport {\n  AppContextWithKwsClient,\n  KwsWebhookBody,\n  webhookBodyIntermediateSchema,\n} from './types'\nimport {\n  createStashEvent,\n  kwsWwwAuthenticate,\n  parseExternalPayload,\n  validateSignature,\n} from './util'\n\nexport const webhookAuth =\n  (ctx: AppContextWithKwsClient): RequestHandler =>\n  (req: express.Request, res: express.Response, next: express.NextFunction) => {\n    const body: Buffer = req.body\n    const sigHeader = req.headers['x-kws-signature']\n    if (!sigHeader || typeof sigHeader !== 'string') {\n      return res.status(401).header(kwsWwwAuthenticate()).json({\n        success: false,\n        error:\n          'Invalid authentication for KWS webhook: missing signature header',\n      })\n    }\n\n    try {\n      const parts = sigHeader.split(',')\n      const timestamp = parts.find((p) => p.startsWith('t='))?.split('=')[1]\n      const signature = parts.find((p) => p.startsWith('v1='))?.split('=')[1]\n      if (typeof timestamp !== 'string' || typeof signature !== 'string') {\n        throw new Error('Invalid webhook signature format')\n      }\n\n      const data = `${timestamp}.${body}`\n      validateSignature(ctx.cfg.kws.webhookSecret, data, signature)\n      next()\n    } catch (err) {\n      log.error({ err }, 'Invalid KWS webhook signature')\n      return res.status(401).header(kwsWwwAuthenticate()).json({\n        success: false,\n        error: 'Invalid authentication for KWS webhook: signature mismatch',\n      })\n    }\n  }\n\ntype AgeAssuranceWebhookIntermediateBody = {\n  payload: Omit<KwsWebhookBody['payload'], 'externalPayload'> & {\n    externalPayload: string\n  }\n}\n\nconst parseBody = (serialized: string): KwsWebhookBody => {\n  try {\n    const value: unknown = JSON.parse(serialized)\n    const intermediate: AgeAssuranceWebhookIntermediateBody =\n      webhookBodyIntermediateSchema.parse(value)\n\n    return {\n      ...intermediate,\n      payload: {\n        ...intermediate.payload,\n        externalPayload: parseExternalPayload(\n          intermediate.payload.externalPayload,\n        ),\n      },\n    }\n  } catch (err) {\n    throw new Error(`Invalid webhook body: ${serialized}`, { cause: err })\n  }\n}\n\nexport const webhookHandler =\n  (ctx: AppContextWithKwsClient): RequestHandler =>\n  async (req: express.Request, res: express.Response) => {\n    let body: KwsWebhookBody\n    try {\n      body = parseBody(req.body)\n    } catch (err) {\n      log.error({ err }, 'Invalid KWS webhook body')\n      return res.status(400).json(err)\n    }\n\n    const {\n      payload: {\n        status: { verified },\n        externalPayload,\n      },\n    } = body\n    const { actorDid, attemptId } = externalPayload\n    if (!verified) {\n      throw new Error('Unexpected KWS webhook call with unverified status')\n    }\n\n    try {\n      await createStashEvent(ctx, {\n        actorDid,\n        attemptId,\n        status: 'assured',\n      })\n      return res.status(200).end()\n    } catch (err) {\n      log.error({ err }, 'Failed to handle KWS webhook')\n      return res.status(500).json(err)\n    }\n  }\n"]}
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../../src/api/kws/webhook.ts"],"names":[],"mappings":";;;AACA,yCAAgD;AAChD,kDAA6D;AAC7D,4EAG8C;AAC9C,kDAAoD;AACpD,gDAAwE;AACxE,mCAIgB;AAChB,iCAAgF;AAEzE,MAAM,WAAW,GACtB,CAAC,EAAE,MAAM,EAAsB,EAAkB,EAAE,CACnD,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;IAC1E,MAAM,IAAI,GAAW,GAAG,CAAC,IAAI,CAAA;IAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAChD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAA,yBAAkB,GAAE,CAAC,CAAC,IAAI,CAAC;YACvD,OAAO,EAAE,KAAK;YACd,KAAK,EACH,kEAAkE;SACrE,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACtE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACvE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,IAAI,EAAE,CAAA;QACnC,IAAA,wBAAiB,EAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC1C,IAAI,EAAE,CAAA;IACR,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAA;QACnD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAA,yBAAkB,GAAE,CAAC,CAAC,IAAI,CAAC;YACvD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,4DAA4D;SACpE,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAA;AA/BU,QAAA,WAAW,eA+BrB;AAQH,MAAM,SAAS,GAAG,CAAC,UAAkB,EAAuC,EAAE;IAC5E,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QAC7C,OAAO,qCAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IACxE,CAAC;AACH,CAAC,CAAA;AAEM,MAAM,cAAc,GACzB,CAAC,GAA4B,EAAkB,EAAE,CACjD,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;IACpD,IAAI,IAAyC,CAAA;IAC7C,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAA;QAC9C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAA;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IAED,MAAM,eAAe,GAAG,IAAA,wDAAqC,EAC3D,IAAI,CAAC,OAAO,CAAC,eAAe,CAC7B,CAAA;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,KAAK,4CAAyB,CAAC,EAAE,CAAA;IAErE,IAAI,MAAuE,CAAA;IAC3E,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,eAAe,CAAA;QACxE,IAAI,CAAC;YACH,MAAM,GAAG,IAAA,uCAAgC,EAAC,4BAAoB,EAAE;gBAC9D,WAAW,EAAE,WAAW;gBACxB,UAAU,EAAE,UAAU;gBACtB,kBAAkB,EAAE,EAAE,EAAE,+BAA+B;aACxD,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,kBAAkB;YAClB,mBAAG,CAAC,KAAK,CACP,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,EACrD,wCAAwC,CACzC,CAAA;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,GACpD,eAAe,CAAA;gBACjB,MAAM,IAAA,mBAAW,EAAC,GAAG,EAAE,QAAQ,EAAE;oBAC/B,SAAS;oBACT,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,WAAW;oBACX,UAAU;iBACX,CAAC,CAAA;YACJ,CAAC,CAAC,kBAAkB;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAA;YAC/C,MAAM,IAAA,uBAAgB,EAAC,GAAG,EAAE;gBAC1B,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAClD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;AACH,CAAC,CAAA;AAjEU,QAAA,cAAc,kBAiExB","sourcesContent":["import express, { RequestHandler } from 'express'\nimport { httpLogger as log } from '../../logger'\nimport { AGE_ASSURANCE_CONFIG } from '../age-assurance/const'\nimport {\n  KWSExternalPayloadVersion,\n  parseKWSExternalPayloadV1WithV2Compat,\n} from '../age-assurance/kws/external-payload'\nimport { createEvent } from '../age-assurance/stash'\nimport { computeAgeAssuranceAccessOrThrow } from '../age-assurance/util'\nimport {\n  AppContextWithKwsClient,\n  KwsWebhookBody,\n  webhookBodyIntermediateSchema,\n} from './types'\nimport { createStashEvent, kwsWwwAuthenticate, validateSignature } from './util'\n\nexport const webhookAuth =\n  ({ secret }: { secret: string }): RequestHandler =>\n  (req: express.Request, res: express.Response, next: express.NextFunction) => {\n    const body: Buffer = req.body\n    const sigHeader = req.headers['x-kws-signature']\n    if (!sigHeader || typeof sigHeader !== 'string') {\n      return res.status(401).header(kwsWwwAuthenticate()).json({\n        success: false,\n        error:\n          'Invalid authentication for KWS webhook: missing signature header',\n      })\n    }\n\n    try {\n      const parts = sigHeader.split(',')\n      const timestamp = parts.find((p) => p.startsWith('t='))?.split('=')[1]\n      const signature = parts.find((p) => p.startsWith('v1='))?.split('=')[1]\n      if (typeof timestamp !== 'string' || typeof signature !== 'string') {\n        throw new Error('Invalid webhook signature format')\n      }\n\n      const data = `${timestamp}.${body}`\n      validateSignature(secret, data, signature)\n      next()\n    } catch (err) {\n      log.error({ err }, 'Invalid KWS webhook signature')\n      return res.status(401).header(kwsWwwAuthenticate()).json({\n        success: false,\n        error: 'Invalid authentication for KWS webhook: signature mismatch',\n      })\n    }\n  }\n\ntype AgeAssuranceWebhookIntermediateBody = {\n  payload: Omit<KwsWebhookBody['payload'], 'externalPayload'> & {\n    externalPayload: string\n  }\n}\n\nconst parseBody = (serialized: string): AgeAssuranceWebhookIntermediateBody => {\n  try {\n    const value: unknown = JSON.parse(serialized)\n    return webhookBodyIntermediateSchema.parse(value)\n  } catch (err) {\n    throw new Error(`Invalid webhook body: ${serialized}`, { cause: err })\n  }\n}\n\nexport const webhookHandler =\n  (ctx: AppContextWithKwsClient): RequestHandler =>\n  async (req: express.Request, res: express.Response) => {\n    let body: AgeAssuranceWebhookIntermediateBody\n    try {\n      body = parseBody(req.body)\n    } catch (err) {\n      log.error({ err }, 'Invalid KWS webhook body')\n      return res.status(400).json(err)\n    }\n\n    const { verified } = body.payload.status\n    if (!verified) {\n      throw new Error('Unexpected KWS webhook call with unverified status')\n    }\n\n    const externalPayload = parseKWSExternalPayloadV1WithV2Compat(\n      body.payload.externalPayload,\n    )\n    const isV2 = externalPayload.version === KWSExternalPayloadVersion.V2\n\n    let result: ReturnType<typeof computeAgeAssuranceAccessOrThrow> | undefined\n    if (isV2) {\n      const { attemptId, actorDid, countryCode, regionCode } = externalPayload\n      try {\n        result = computeAgeAssuranceAccessOrThrow(AGE_ASSURANCE_CONFIG, {\n          countryCode: countryCode,\n          regionCode: regionCode,\n          verifiedMinimumAge: 18, // `adult-verified` is 18+ only\n        })\n      } catch (err) {\n        // internal errors\n        log.error(\n          { err, attemptId, actorDid, countryCode, regionCode },\n          'Failed to compute age assurance access',\n        )\n      }\n    }\n\n    try {\n      if (isV2) {\n        if (result) {\n          const { attemptId, actorDid, countryCode, regionCode } =\n            externalPayload\n          await createEvent(ctx, actorDid, {\n            attemptId,\n            status: 'assured',\n            access: result.access,\n            countryCode,\n            regionCode,\n          })\n        } // else do nothing\n      } else {\n        const { attemptId, actorDid } = externalPayload\n        await createStashEvent(ctx, {\n          attemptId: attemptId,\n          actorDid: actorDid,\n          status: 'assured',\n        })\n      }\n      return res.status(200).end()\n    } catch (err) {\n      log.error({ err }, 'Failed to handle KWS webhook')\n      return res.status(500).json(err)\n    }\n  }\n"]}

package/dist/config.d.ts

@@ -9,8 +9,22 @@ export interface KwsConfig {
     clientId: string;
     redirectUrl: string;
     userAgent: string;
+    /**
+     * V1 secret used to validate `adult-verifieid` redirects
+     */
     verificationSecret: string;
+    /**
+     * V1 secret used to validate `adult-verified` webhooks
+     */
     webhookSecret: string;
+    /**
+     * V2 secret used to validate `age-verified` webhooks
+     */
+    ageVerifiedWebhookSecret: string;
+    /**
+     * V2 secret used to validate `age-verified` redirects
+     */
+    ageVerifiedRedirectSecret: string;
 }
 export interface ServerConfigValues {
     version?: string;
@@ -34,6 +48,10 @@ export interface ServerConfigValues {
     courierApiKey?: string;
     courierHttpVersion?: '1.1' | '2';
     courierIgnoreBadTls?: boolean;
+    rolodexUrl?: string;
+    rolodexApiKey?: string;
+    rolodexHttpVersion?: '1.1' | '2';
+    rolodexIgnoreBadTls?: boolean;
     searchUrl?: string;
     searchTagsHide: Set<string>;
     suggestionsUrl?: string;
@@ -102,6 +120,10 @@ export declare class ServerConfig {
     get courierApiKey(): string | undefined;
     get courierHttpVersion(): "2" | "1.1" | undefined;
     get courierIgnoreBadTls(): boolean | undefined;
+    get rolodexUrl(): string | undefined;
+    get rolodexApiKey(): string | undefined;
+    get rolodexHttpVersion(): "2" | "1.1" | undefined;
+    get rolodexIgnoreBadTls(): boolean | undefined;
     get searchUrl(): string | undefined;
     get searchTagsHide(): Set<string>;
     get suggestionsUrl(): string | undefined;