@atproto/bsky 0.0.249 → 0.0.250

package/dist/lexicons/chat/bsky/moderation/defs.defs.js.map

@@ -1 +1 @@
-{"version":3,"file":"defs.defs.js","sourceRoot":"","sources":["../../../../../src/lexicons/chat/bsky/moderation/defs.defs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,cAAc,CAAA;AAChC,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAA;AAElD,MAAM,KAAK,GAAG,2BAA2B,CAAA;AAEzC,OAAO,EAAE,KAAK,EAAE,CAAA;AAgBhB,6WAA6W;AAC7W,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAC3C,KAAK,EACL,WAAW;AACX,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;IACrB,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE;IAC5B,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE;IAC7B,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IAC5B,aAAa,CAAC,CAAC,CAAC,UAAU,CACxB;QACE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAc,CAAC,GAAG,EAAE,CAAC,WAAW,CAAQ,CAAC;QACjE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAa,CAAC,GAAG,EAAE,CAAC,UAAU,CAAQ,CAAC;KAChE,EACD,KAAK,CACN,CACF;CACF,CAAC,CACH,CAAA;AAED,OAAO,EAAE,SAAS,EAAE,CAAA;AAOpB,uEAAuE;AACvE,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAC7C,KAAK,EACL,aAAa;AACb,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAC3B,CAAA;AAED,OAAO,EAAE,WAAW,EAAE,CAAA;AAoCtB,kQAAkQ;AAClQ,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAC5C,KAAK,EACL,YAAY;AACZ,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;IACrB,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACzD,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IAChC,aAAa,CAAC,CAAC,CAAC,GAAG,CACjB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAQ,CACtC,CACF;IACD,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE;IAC3C,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAC7B,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,eAAe,CAAQ,CACzC;IACD,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE;IACtC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE;IACtC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;CACrE,CAAC,CACH,CAAA;AAED,OAAO,EAAE,UAAU,EAAE,CAAA","sourcesContent":["/*\n * THIS FILE WAS GENERATED BY \"@atproto/lex\". DO NOT EDIT.\n */\n\nimport { l } from '@atproto/lex'\nimport * as GroupDefs from '../group/defs.defs.js'\nimport * as ConvoDefs from '../convo/defs.defs.js'\n\nconst $nsid = 'chat.bsky.moderation.defs'\n\nexport { $nsid }\n\n/** A view of a conversation for moderation purposes. Unlike chat.bsky.convo.defs#convoView, it does not include viewer-specific data (such as muted, unreadCount, status, lastMessage, lastReaction), since the requester is a moderator and not a member of the conversation. The member list is not included; use chat.bsky.moderation.getConvoMembers to list members. */\ntype ConvoView = {\n  $type?: 'chat.bsky.moderation.defs#convoView'\n  id: string\n  rev: string\n\n  /**\n   * Union field that has data specific to different kinds of convos.\n   */\n  kind?: l.$Typed<DirectConvo> | l.$Typed<GroupConvo> | l.Unknown$TypedObject\n}\n\nexport type { ConvoView }\n\n/** A view of a conversation for moderation purposes. Unlike chat.bsky.convo.defs#convoView, it does not include viewer-specific data (such as muted, unreadCount, status, lastMessage, lastReaction), since the requester is a moderator and not a member of the conversation. The member list is not included; use chat.bsky.moderation.getConvoMembers to list members. */\nconst convoView = /*#__PURE__*/ l.typedObject<ConvoView>(\n  $nsid,\n  'convoView',\n  /*#__PURE__*/ l.object({\n    id: /*#__PURE__*/ l.string(),\n    rev: /*#__PURE__*/ l.string(),\n    kind: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.typedUnion(\n        [\n          /*#__PURE__*/ l.typedRef<DirectConvo>((() => directConvo) as any),\n          /*#__PURE__*/ l.typedRef<GroupConvo>((() => groupConvo) as any),\n        ],\n        false,\n      ),\n    ),\n  }),\n)\n\nexport { convoView }\n\n/** Data specific to a direct conversation, for moderation purposes. */\ntype DirectConvo = { $type?: 'chat.bsky.moderation.defs#directConvo' }\n\nexport type { DirectConvo }\n\n/** Data specific to a direct conversation, for moderation purposes. */\nconst directConvo = /*#__PURE__*/ l.typedObject<DirectConvo>(\n  $nsid,\n  'directConvo',\n  /*#__PURE__*/ l.object({}),\n)\n\nexport { directConvo }\n\n/** Data specific to a group conversation, for moderation purposes. Unlike chat.bsky.convo.defs#groupConvo, it does not include viewer-specific data (such as unreadJoinRequestCount), since the requester is a moderator and not a member of the conversation. */\ntype GroupConvo = {\n  $type?: 'chat.bsky.moderation.defs#groupConvo'\n  createdAt: l.DatetimeString\n  joinLink?: GroupDefs.JoinLinkView\n\n  /**\n   * The total number of pending join requests for the group conversation. This information is only visible to the owner and to moderators. Capped at 21.\n   */\n  joinRequestCount: number\n\n  /**\n   * The lock status of the conversation.\n   */\n  lockStatus: ConvoDefs.ConvoLockStatus\n\n  /**\n   * The total number of members in the group conversation.\n   */\n  memberCount: number\n\n  /**\n   * The maximum number of members allowed in the group conversation.\n   */\n  memberLimit: number\n\n  /**\n   * The display name of the group conversation.\n   */\n  name: string\n}\n\nexport type { GroupConvo }\n\n/** Data specific to a group conversation, for moderation purposes. Unlike chat.bsky.convo.defs#groupConvo, it does not include viewer-specific data (such as unreadJoinRequestCount), since the requester is a moderator and not a member of the conversation. */\nconst groupConvo = /*#__PURE__*/ l.typedObject<GroupConvo>(\n  $nsid,\n  'groupConvo',\n  /*#__PURE__*/ l.object({\n    createdAt: /*#__PURE__*/ l.string({ format: 'datetime' }),\n    joinLink: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.ref<GroupDefs.JoinLinkView>(\n        (() => GroupDefs.joinLinkView) as any,\n      ),\n    ),\n    joinRequestCount: /*#__PURE__*/ l.integer(),\n    lockStatus: /*#__PURE__*/ l.ref<ConvoDefs.ConvoLockStatus>(\n      (() => ConvoDefs.convoLockStatus) as any,\n    ),\n    memberCount: /*#__PURE__*/ l.integer(),\n    memberLimit: /*#__PURE__*/ l.integer(),\n    name: /*#__PURE__*/ l.string({ maxGraphemes: 128, maxLength: 1280 }),\n  }),\n)\n\nexport { groupConvo }\n"]}
+{"version":3,"file":"defs.defs.js","sourceRoot":"","sources":["../../../../../src/lexicons/chat/bsky/moderation/defs.defs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,cAAc,CAAA;AAChC,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAA;AAElD,MAAM,KAAK,GAAG,2BAA2B,CAAA;AAEzC,OAAO,EAAE,KAAK,EAAE,CAAA;AAgBhB,6WAA6W;AAC7W,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAC3C,KAAK,EACL,WAAW;AACX,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;IACrB,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE;IAC5B,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE;IAC7B,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IAC5B,aAAa,CAAC,CAAC,CAAC,UAAU,CACxB;QACE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAc,CAAC,GAAG,EAAE,CAAC,WAAW,CAAQ,CAAC;QACjE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAa,CAAC,GAAG,EAAE,CAAC,UAAU,CAAQ,CAAC;KAChE,EACD,KAAK,CACN,CACF;CACF,CAAC,CACH,CAAA;AAED,OAAO,EAAE,SAAS,EAAE,CAAA;AAOpB,uEAAuE;AACvE,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAC7C,KAAK,EACL,aAAa;AACb,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAC3B,CAAA;AAED,OAAO,EAAE,WAAW,EAAE,CAAA;AAoCtB,kQAAkQ;AAClQ,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAC5C,KAAK,EACL,YAAY;AACZ,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;IACrB,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACzD,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IAChC,aAAa,CAAC,CAAC,CAAC,GAAG,CACjB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAQ,CACtC,CACF;IACD,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE;IAC3C,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAC7B,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,eAAe,CAAQ,CACzC;IACD,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE;IACtC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE;IACtC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;CACnE,CAAC,CACH,CAAA;AAED,OAAO,EAAE,UAAU,EAAE,CAAA","sourcesContent":["/*\n * THIS FILE WAS GENERATED BY \"@atproto/lex\". DO NOT EDIT.\n */\n\nimport { l } from '@atproto/lex'\nimport * as GroupDefs from '../group/defs.defs.js'\nimport * as ConvoDefs from '../convo/defs.defs.js'\n\nconst $nsid = 'chat.bsky.moderation.defs'\n\nexport { $nsid }\n\n/** A view of a conversation for moderation purposes. Unlike chat.bsky.convo.defs#convoView, it does not include viewer-specific data (such as muted, unreadCount, status, lastMessage, lastReaction), since the requester is a moderator and not a member of the conversation. The member list is not included; use chat.bsky.moderation.getConvoMembers to list members. */\ntype ConvoView = {\n  $type?: 'chat.bsky.moderation.defs#convoView'\n  id: string\n  rev: string\n\n  /**\n   * Union field that has data specific to different kinds of convos.\n   */\n  kind?: l.$Typed<DirectConvo> | l.$Typed<GroupConvo> | l.Unknown$TypedObject\n}\n\nexport type { ConvoView }\n\n/** A view of a conversation for moderation purposes. Unlike chat.bsky.convo.defs#convoView, it does not include viewer-specific data (such as muted, unreadCount, status, lastMessage, lastReaction), since the requester is a moderator and not a member of the conversation. The member list is not included; use chat.bsky.moderation.getConvoMembers to list members. */\nconst convoView = /*#__PURE__*/ l.typedObject<ConvoView>(\n  $nsid,\n  'convoView',\n  /*#__PURE__*/ l.object({\n    id: /*#__PURE__*/ l.string(),\n    rev: /*#__PURE__*/ l.string(),\n    kind: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.typedUnion(\n        [\n          /*#__PURE__*/ l.typedRef<DirectConvo>((() => directConvo) as any),\n          /*#__PURE__*/ l.typedRef<GroupConvo>((() => groupConvo) as any),\n        ],\n        false,\n      ),\n    ),\n  }),\n)\n\nexport { convoView }\n\n/** Data specific to a direct conversation, for moderation purposes. */\ntype DirectConvo = { $type?: 'chat.bsky.moderation.defs#directConvo' }\n\nexport type { DirectConvo }\n\n/** Data specific to a direct conversation, for moderation purposes. */\nconst directConvo = /*#__PURE__*/ l.typedObject<DirectConvo>(\n  $nsid,\n  'directConvo',\n  /*#__PURE__*/ l.object({}),\n)\n\nexport { directConvo }\n\n/** Data specific to a group conversation, for moderation purposes. Unlike chat.bsky.convo.defs#groupConvo, it does not include viewer-specific data (such as unreadJoinRequestCount), since the requester is a moderator and not a member of the conversation. */\ntype GroupConvo = {\n  $type?: 'chat.bsky.moderation.defs#groupConvo'\n  createdAt: l.DatetimeString\n  joinLink?: GroupDefs.JoinLinkView\n\n  /**\n   * The total number of pending join requests for the group conversation. This information is only visible to the owner and to moderators. Capped at 21.\n   */\n  joinRequestCount: number\n\n  /**\n   * The lock status of the conversation.\n   */\n  lockStatus: ConvoDefs.ConvoLockStatus\n\n  /**\n   * The total number of members in the group conversation.\n   */\n  memberCount: number\n\n  /**\n   * The maximum number of members allowed in the group conversation.\n   */\n  memberLimit: number\n\n  /**\n   * The display name of the group conversation.\n   */\n  name: string\n}\n\nexport type { GroupConvo }\n\n/** Data specific to a group conversation, for moderation purposes. Unlike chat.bsky.convo.defs#groupConvo, it does not include viewer-specific data (such as unreadJoinRequestCount), since the requester is a moderator and not a member of the conversation. */\nconst groupConvo = /*#__PURE__*/ l.typedObject<GroupConvo>(\n  $nsid,\n  'groupConvo',\n  /*#__PURE__*/ l.object({\n    createdAt: /*#__PURE__*/ l.string({ format: 'datetime' }),\n    joinLink: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.ref<GroupDefs.JoinLinkView>(\n        (() => GroupDefs.joinLinkView) as any,\n      ),\n    ),\n    joinRequestCount: /*#__PURE__*/ l.integer(),\n    lockStatus: /*#__PURE__*/ l.ref<ConvoDefs.ConvoLockStatus>(\n      (() => ConvoDefs.convoLockStatus) as any,\n    ),\n    memberCount: /*#__PURE__*/ l.integer(),\n    memberLimit: /*#__PURE__*/ l.integer(),\n    name: /*#__PURE__*/ l.string({ maxGraphemes: 50, maxLength: 500 }),\n  }),\n)\n\nexport { groupConvo }\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atproto/bsky",
-  "version": "0.0.249",
+  "version": "0.0.250",
   "license": "MIT",
   "description": "Reference implementation of app.bsky App View (Bluesky API)",
   "keywords": [
@@ -49,17 +49,17 @@
     "undici": "^8.5.0",
     "zod": "3.23.8",
     "@atproto-labs/fetch-node": "^0.3.3",
-    "@atproto-labs/xrpc-utils": "^0.1.2",
-    "@atproto/api": "^0.20.22",
+    "@atproto/api": "^0.20.23",
     "@atproto/common": "^0.6.4",
     "@atproto/crypto": "^0.5.2",
-    "@atproto/sync": "^0.3.4",
-    "@atproto/syntax": "^0.6.3",
-    "@atproto/xrpc-server": "^0.11.3",
-    "@atproto/lex": "^0.1.5",
     "@atproto/did": "^0.5.2",
+    "@atproto/identity": "^0.5.2",
+    "@atproto-labs/xrpc-utils": "^0.1.3",
+    "@atproto/lex": "^0.1.5",
     "@atproto/repo": "^0.10.2",
-    "@atproto/identity": "^0.5.2"
+    "@atproto/sync": "^0.3.5",
+    "@atproto/xrpc-server": "^0.11.4",
+    "@atproto/syntax": "^0.6.3"
   },
   "devDependencies": {
     "@bufbuild/buf": "^1.28.1",
@@ -73,7 +73,7 @@
     "@types/qs": "^6.9.7",
     "ts-node": "^10.8.2",
     "vitest": "^4.0.16",
-    "@atproto/pds": "^0.5.9"
+    "@atproto/pds": "^0.5.11"
   },
   "type": "module",
   "exports": {

package/src/api/age-assurance/const.ts

@@ -158,6 +158,25 @@ export const AGE_ASSURANCE_CONFIG = app.bsky.ageassurance.defs.config.$build({
         }),
       ],
     },
+    {
+      countryCode: 'US',
+      regionCode: 'TX',
+      minAccessAge: 18,
+      // On-device age verification is permitted here in addition to the
+      // third-party (KWS) flow, which is always supported and remains as a
+      // fallback for platforms without the native age API (e.g. web) or
+      // insufficient device results.
+      additionalVerificationMethods: ['device'],
+      rules: [
+        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
+          age: 18,
+          access: 'full',
+        }),
+        app.bsky.ageassurance.defs.configRegionRuleDefault.$build({
+          access: 'none',
+        }),
+      ],
+    },
     {
       countryCode: 'BR',
       regionCode: undefined,

package/src/api/age-assurance/kws/age-verified.test.ts

@@ -0,0 +1,98 @@
+import { describe, expect, it } from 'vitest'
+import {
+  parseKWSAgeVerifiedStatus,
+  serializeKWSAgeVerifiedStatus,
+} from './age-verified.js'
+
+describe('parseKWSAgeVerifiedStatus', () => {
+  it('parses a minimal status object', () => {
+    const raw = JSON.stringify({ verified: true, verifiedMinimumAge: 18 })
+    expect(parseKWSAgeVerifiedStatus(raw)).toEqual({
+      verified: true,
+      verifiedMinimumAge: 18,
+    })
+  })
+
+  it('parses the optional transactionId and timestamp fields', () => {
+    const raw = JSON.stringify({
+      verified: true,
+      verifiedMinimumAge: 18,
+      transactionId: 'txn-123',
+      timestamp: 1750680000,
+    })
+    expect(parseKWSAgeVerifiedStatus(raw)).toEqual({
+      verified: true,
+      verifiedMinimumAge: 18,
+      transactionId: 'txn-123',
+      timestamp: 1750680000,
+    })
+  })
+
+  it('tolerates the new timestamp field without transactionId', () => {
+    const raw = JSON.stringify({
+      verified: true,
+      verifiedMinimumAge: 18,
+      timestamp: 1750680000,
+    })
+    expect(parseKWSAgeVerifiedStatus(raw)).toEqual({
+      verified: true,
+      verifiedMinimumAge: 18,
+      timestamp: 1750680000,
+    })
+  })
+
+  it('silently strips unknown fields KWS may add', () => {
+    const raw = JSON.stringify({
+      verified: true,
+      verifiedMinimumAge: 18,
+      timestamp: 1750680000,
+      errorCode: null,
+      somethingNew: 'ignored',
+    })
+    expect(parseKWSAgeVerifiedStatus(raw)).toEqual({
+      verified: true,
+      verifiedMinimumAge: 18,
+      timestamp: 1750680000,
+      errorCode: null,
+    })
+  })
+
+  it('strips a truly unknown field', () => {
+    const raw = JSON.stringify({
+      verified: true,
+      verifiedMinimumAge: 18,
+      somethingNew: 'ignored',
+    })
+    expect(parseKWSAgeVerifiedStatus(raw)).toEqual({
+      verified: true,
+      verifiedMinimumAge: 18,
+    })
+  })
+
+  it('throws on malformed JSON', () => {
+    expect(() => parseKWSAgeVerifiedStatus('not json')).toThrow(
+      /Invalid KWS age-verified status/,
+    )
+  })
+
+  it('throws when a required field is missing', () => {
+    const raw = JSON.stringify({ verified: true })
+    expect(() => parseKWSAgeVerifiedStatus(raw)).toThrow(
+      /Invalid KWS age-verified status/,
+    )
+  })
+})
+
+describe('serializeKWSAgeVerifiedStatus', () => {
+  it('round-trips a status object including timestamp', () => {
+    const status = {
+      verified: true,
+      verifiedMinimumAge: 18,
+      transactionId: 'txn-123',
+      timestamp: 1750680000,
+    }
+    expect(
+      parseKWSAgeVerifiedStatus(serializeKWSAgeVerifiedStatus(status)),
+    ).toEqual(status)
+  })
+})

package/src/api/age-assurance/kws/age-verified.ts

@@ -7,6 +7,12 @@ export const KWSAgeVerifiedStatusSchema = z.object({
   verified: z.boolean(),
   verifiedMinimumAge: z.number(),
   transactionId: z.string().optional(),
+  // A code indicating the reason for failure, or null when verification
+  // succeeded.
+  errorCode: z.string().nullable().optional(),
+  // Epoch seconds indicating when KWS generated the payload. Optional so we
+  // remain compatible with payloads sent before this field was introduced.
+  timestamp: z.number().optional(),
 })
 
 /**

package/src/api/app/bsky/graph/muteActor.ts

@@ -11,6 +11,9 @@ export default function (server: Server, ctx: AppContext) {
       const requester = auth.credentials.iss
       const [did] = await ctx.hydrator.actor.getDids([actor])
       if (!did) throw new InvalidRequestError('Actor not found')
+      if (requester === did) {
+        throw new InvalidRequestError('Actor cannot mute themselves')
+      }
       await ctx.bsyncClient.addMuteOperation({
         type: MuteOperation_Type.ADD,
         actorDid: requester,

package/src/api/kws/types.ts

@@ -25,6 +25,14 @@ export const externalPayloadSchema = z
 
 export type KwsStatus = {
   verified: boolean
+  // A unique reference ID for the verification transaction.
+  transactionId?: string
+  // A code indicating the reason for failure, or null when verification
+  // succeeded.
+  errorCode?: string | null
+  // Epoch seconds indicating when KWS generated the payload. Optional so we
+  // remain compatible with payloads sent before this field was introduced.
+  timestamp?: number
 }
 
 export type KwsVerificationIntermediateQuery = {
@@ -56,6 +64,9 @@ export type KwsWebhookBody = {
 // Not `.strict()` to avoid breaking if KWS adds fields.
 export const statusSchema = z.object({
   verified: z.boolean(),
+  transactionId: z.string().optional(),
+  errorCode: z.string().nullable().optional(),
+  timestamp: z.number().optional(),
 })
 
 // Not `.strict()` to avoid breaking if KWS adds fields.

package/src/api/kws/util.test.ts

@@ -0,0 +1,50 @@
+import { describe, expect, it } from 'vitest'
+import { parseStatus } from './util.js'
+
+describe('parseStatus', () => {
+  it('parses a minimal status object', () => {
+    const raw = JSON.stringify({ verified: true })
+    expect(parseStatus(raw)).toEqual({ verified: true })
+  })
+
+  it('parses the optional transactionId, errorCode, and timestamp fields', () => {
+    const raw = JSON.stringify({
+      verified: true,
+      transactionId: 'txn-123',
+      errorCode: null,
+      timestamp: 1750680000,
+    })
+    expect(parseStatus(raw)).toEqual({
+      verified: true,
+      transactionId: 'txn-123',
+      errorCode: null,
+      timestamp: 1750680000,
+    })
+  })
+
+  it('parses a non-null errorCode', () => {
+    const raw = JSON.stringify({ verified: false, errorCode: 'some-failure' })
+    expect(parseStatus(raw)).toEqual({
+      verified: false,
+      errorCode: 'some-failure',
+    })
+  })
+
+  it('silently strips unknown fields KWS may add', () => {
+    const raw = JSON.stringify({
+      verified: true,
+      timestamp: 1750680000,
+      somethingNew: 'ignored',
+    })
+    expect(parseStatus(raw)).toEqual({ verified: true, timestamp: 1750680000 })
+  })
+
+  it('throws on malformed JSON', () => {
+    expect(() => parseStatus('not json')).toThrow(/Invalid status/)
+  })
+
+  it('throws when verified is missing', () => {
+    const raw = JSON.stringify({ timestamp: 1750680000 })
+    expect(() => parseStatus(raw)).toThrow(/Invalid status/)
+  })
+})

package/src/data-plane/index.ts

@@ -1,3 +1,2 @@
 export * from './server/index.js'
 export * from './client/index.js'
-export * from './bsync/index.js'