@atproto/bsky 0.0.251 → 0.0.253

package/proto/courier.proto

@@ -1,84 +0,0 @@
-syntax = "proto3";
-
-package courier;
-option go_package = "./;courier";
-
-import "google/protobuf/struct.proto";
-import "google/protobuf/timestamp.proto";
-
-//
-// Messages
-//
-
-// Ping
-message PingRequest {}
-message PingResponse {}
-
-// Notifications
-
-enum AppPlatform {
-  APP_PLATFORM_UNSPECIFIED = 0;
-  APP_PLATFORM_IOS = 1;
-  APP_PLATFORM_ANDROID = 2;
-  APP_PLATFORM_WEB = 3;
-}
-
-message Notification {
-  string id = 1;
-  string recipient_did = 2;
-  string title = 3;
-  string message = 4;
-  string collapse_key = 5;
-  bool always_deliver = 6;
-  google.protobuf.Timestamp timestamp = 7;
-  google.protobuf.Struct additional = 8;
-  bool client_controlled = 9;
-  // Maps to iOS's `thread-id`: https://developer.apple.com/documentation/usernotifications/generating-a-remote-notification.
-  string thread_id = 10;
-}
-
-message PushNotificationsRequest {
-  repeated Notification notifications = 1;
-}
-
-message PushNotificationsResponse {}
-
-message RegisterDeviceTokenRequest {
-  string did = 1;
-  string token = 2;
-  string app_id = 3;
-  AppPlatform platform = 4;
-  bool age_restricted = 5;
-}
-
-message RegisterDeviceTokenResponse {}
-
-message UnregisterDeviceTokenRequest {
-  string did = 1;
-  string token = 2;
-  string app_id = 3;
-  AppPlatform platform = 4;
-}
-
-message UnregisterDeviceTokenResponse {}
-
-message SetAgeRestrictedRequest {
-  string did = 1;
-  bool age_restricted = 2;
-}
-
-message SetAgeRestrictedResponse {}
-
-service Service {
-  rpc Ping(PingRequest) returns (PingResponse);
-
-  // Push notifications.
-
-  rpc PushNotifications(PushNotificationsRequest) returns (PushNotificationsResponse);
-
-  // Device token management.
-
-  rpc RegisterDeviceToken(RegisterDeviceTokenRequest) returns (RegisterDeviceTokenResponse);
-  rpc UnregisterDeviceToken(UnregisterDeviceTokenRequest) returns (UnregisterDeviceTokenResponse);
-  rpc SetAgeRestricted(SetAgeRestrictedRequest) returns (SetAgeRestrictedResponse);
-}

package/proto/rolodex.proto

@@ -1,116 +0,0 @@
-syntax = "proto3";
-
-package rolodex;
-option go_package = "./;rolodex";
-
-import "google/protobuf/timestamp.proto";
-
-//
-// Messages
-//
-
-// Ping
-message PingRequest {}
-
-message PingResponse {}
-
-// GetSyncStatus
-message GetSyncStatusRequest {
-  string actor = 1;
-}
-
-message SyncStatus {
-  google.protobuf.Timestamp synced_at = 1;
-  int32 matches_count = 2;
-}
-
-message GetSyncStatusResponse {
-  SyncStatus status = 1;
-}
-
-// StartPhoneVerification
-message StartPhoneVerificationRequest {
-  string actor = 1;
-  string phone = 2;
-}
-
-message StartPhoneVerificationResponse {}
-
-// VerifyPhone
-message VerifyPhoneRequest {
-  string actor = 1;
-  string phone = 2;
-  string verification_code = 3;
-}
-
-message VerifyPhoneResponse {
-  string token = 1;
-}
-
-// ImportContacts
-message ImportContactsRequest {
-  string actor = 1;
-  string token = 2;
-  repeated string contacts = 3;
-}
-
-message ImportContactsMatch {
-  // To which index of the input contacts this contact corresponds.
-  int32 input_index = 1;
-  string subject = 2;
-}
-
-message ImportContactsResponse {
-  repeated ImportContactsMatch matches = 1;
-}
-
-// GetMatches
-message GetMatchesRequest {
-  string actor = 1;
-  int32 limit = 2;
-  string cursor = 3;
-}
-
-message GetMatchesResponse {
-  repeated string subjects = 1;
-  string cursor = 2;
-}
-
-// DismissMatch
-message DismissMatchRequest {
-  string actor = 1;
-  string subject = 2;
-}
-
-message DismissMatchResponse {
-  int32 matches_count = 1;
-}
-
-// RemoveData
-message RemoveDataRequest {
-  string actor = 1;
-}
-
-message RemoveDataResponse {
-  int32 contacts_count = 1;
-  int32 matches_count = 2;
-}
-
-//
-// Service
-//
-
-service RolodexService {
-  rpc Ping(PingRequest) returns (PingResponse);
-
-  rpc GetSyncStatus(GetSyncStatusRequest) returns (GetSyncStatusResponse);
-
-  rpc StartPhoneVerification(StartPhoneVerificationRequest) returns (StartPhoneVerificationResponse);
-  rpc VerifyPhone(VerifyPhoneRequest) returns (VerifyPhoneResponse);
-  rpc ImportContacts(ImportContactsRequest) returns (ImportContactsResponse);
-
-  rpc GetMatches(GetMatchesRequest) returns (GetMatchesResponse);
-  rpc DismissMatch(DismissMatchRequest) returns (DismissMatchResponse);
-
-  rpc RemoveData(RemoveDataRequest) returns (RemoveDataResponse);
-}

package/src/api/age-assurance/const.ts

@@ -1,203 +0,0 @@
-import { app } from '../../lexicons/index.js'
-
-/**
- * Age assurance configuration defining rules for various regions.
- *
- * NOTE: These rules are matched in order, and the first matching rule
- * determines the access level granted.
- *
- * NOTE: all regions MUST have a default rule as the last rule.
- */
-export const AGE_ASSURANCE_CONFIG = app.bsky.ageassurance.defs.config.$build({
-  regions: [
-    {
-      countryCode: 'GB',
-      regionCode: undefined,
-      minAccessAge: 13,
-      rules: [
-        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
-          age: 18,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleIfDeclaredOverAge.$build({
-          age: 13,
-          access: 'safe',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleDefault.$build({
-          access: 'none',
-        }),
-      ],
-    },
-    {
-      countryCode: 'AU',
-      regionCode: undefined,
-      minAccessAge: 16,
-      rules: [
-        app.bsky.ageassurance.defs.configRegionRuleIfAccountNewerThan.$build({
-          date: '2025-12-10T00:00:00Z',
-          access: 'none',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
-          age: 18,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
-          age: 16,
-          access: 'safe',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleIfDeclaredOverAge.$build({
-          age: 16,
-          access: 'safe',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleDefault.$build({
-          access: 'none',
-        }),
-      ],
-    },
-    {
-      countryCode: 'US',
-      regionCode: 'SD',
-      minAccessAge: 13,
-      rules: [
-        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
-          age: 18,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleIfDeclaredOverAge.$build({
-          age: 13,
-          access: 'safe',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleDefault.$build({
-          access: 'none',
-        }),
-      ],
-    },
-    {
-      countryCode: 'US',
-      regionCode: 'WY',
-      minAccessAge: 13,
-      rules: [
-        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
-          age: 18,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleIfDeclaredOverAge.$build({
-          age: 13,
-          access: 'safe',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleDefault.$build({
-          access: 'none',
-        }),
-      ],
-    },
-    {
-      countryCode: 'US',
-      regionCode: 'OH',
-      minAccessAge: 13,
-      rules: [
-        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
-          age: 18,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleIfDeclaredOverAge.$build({
-          age: 13,
-          access: 'safe',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleDefault.$build({
-          access: 'none',
-        }),
-      ],
-    },
-    {
-      countryCode: 'US',
-      regionCode: 'MS',
-      minAccessAge: 18,
-      rules: [
-        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
-          age: 18,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleDefault.$build({
-          access: 'none',
-        }),
-      ],
-    },
-    {
-      countryCode: 'US',
-      regionCode: 'VA',
-      minAccessAge: 16,
-      rules: [
-        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
-          age: 16,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleIfDeclaredOverAge.$build({
-          age: 16,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleDefault.$build({
-          access: 'none',
-        }),
-      ],
-    },
-    {
-      countryCode: 'US',
-      regionCode: 'TN',
-      minAccessAge: 18,
-      rules: [
-        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
-          age: 18,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleIfDeclaredOverAge.$build({
-          age: 18,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleDefault.$build({
-          access: 'none',
-        }),
-      ],
-    },
-    {
-      countryCode: 'US',
-      regionCode: 'TX',
-      minAccessAge: 18,
-      // On-device age verification is permitted here in addition to the
-      // third-party (KWS) flow, which is always supported and remains as a
-      // fallback for platforms without the native age API (e.g. web) or
-      // insufficient device results.
-      additionalVerificationMethods: ['device'],
-      rules: [
-        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
-          age: 18,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleDefault.$build({
-          access: 'none',
-        }),
-      ],
-    },
-    {
-      countryCode: 'BR',
-      regionCode: undefined,
-      minAccessAge: 13,
-      rules: [
-        app.bsky.ageassurance.defs.configRegionRuleIfAssuredOverAge.$build({
-          age: 18,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleIfDeclaredOverAge.$build({
-          age: 18,
-          access: 'full',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleIfDeclaredOverAge.$build({
-          age: 13,
-          access: 'safe',
-        }),
-        app.bsky.ageassurance.defs.configRegionRuleDefault.$build({
-          access: 'none',
-        }),
-      ],
-    },
-  ],
-})

package/src/api/age-assurance/index.ts

@@ -1,34 +0,0 @@
-import { Router, raw } from 'express'
-import { AppContext } from '../../context.js'
-import { webhookAuth } from '../kws/webhook.js'
-import { handler as ageVerifiedRedirect } from './redirects/kws-age-verified.js'
-import { AppContextWithAA } from './types.js'
-import { handler as ageVerifiedWebhook } from './webhooks/kws-age-verified.js'
-
-export const createRouter = (ctx: AppContext): Router => {
-  assertAppContextWithAgeAssuranceClient(ctx)
-
-  const router = Router()
-  router.use(raw({ type: 'application/json' }))
-  router.post(
-    '/age-assurance/webhooks/kws-age-verified',
-    webhookAuth({
-      secret: ctx.cfg.kws.ageVerifiedWebhookSecret,
-    }),
-    ageVerifiedWebhook(ctx),
-  )
-  router.get(
-    '/age-assurance/redirects/kws-age-verified',
-    ageVerifiedRedirect(ctx),
-  )
-
-  return router
-}
-
-const assertAppContextWithAgeAssuranceClient: (
-  ctx: AppContext,
-) => asserts ctx is AppContextWithAA = (ctx: AppContext) => {
-  if (!ctx.kwsClient) {
-    throw new Error('Tried to set up KWS router without kwsClient configured.')
-  }
-}

package/src/api/age-assurance/kws/age-verified.test.ts

@@ -1,98 +0,0 @@
-import { describe, expect, it } from 'vitest'
-import {
-  parseKWSAgeVerifiedStatus,
-  serializeKWSAgeVerifiedStatus,
-} from './age-verified.js'
-
-describe('parseKWSAgeVerifiedStatus', () => {
-  it('parses a minimal status object', () => {
-    const raw = JSON.stringify({ verified: true, verifiedMinimumAge: 18 })
-    expect(parseKWSAgeVerifiedStatus(raw)).toEqual({
-      verified: true,
-      verifiedMinimumAge: 18,
-    })
-  })
-
-  it('parses the optional transactionId and timestamp fields', () => {
-    const raw = JSON.stringify({
-      verified: true,
-      verifiedMinimumAge: 18,
-      transactionId: 'txn-123',
-      timestamp: 1750680000,
-    })
-    expect(parseKWSAgeVerifiedStatus(raw)).toEqual({
-      verified: true,
-      verifiedMinimumAge: 18,
-      transactionId: 'txn-123',
-      timestamp: 1750680000,
-    })
-  })
-
-  it('tolerates the new timestamp field without transactionId', () => {
-    const raw = JSON.stringify({
-      verified: true,
-      verifiedMinimumAge: 18,
-      timestamp: 1750680000,
-    })
-    expect(parseKWSAgeVerifiedStatus(raw)).toEqual({
-      verified: true,
-      verifiedMinimumAge: 18,
-      timestamp: 1750680000,
-    })
-  })
-
-  it('silently strips unknown fields KWS may add', () => {
-    const raw = JSON.stringify({
-      verified: true,
-      verifiedMinimumAge: 18,
-      timestamp: 1750680000,
-      errorCode: null,
-      somethingNew: 'ignored',
-    })
-    expect(parseKWSAgeVerifiedStatus(raw)).toEqual({
-      verified: true,
-      verifiedMinimumAge: 18,
-      timestamp: 1750680000,
-      errorCode: null,
-    })
-  })
-
-  it('strips a truly unknown field', () => {
-    const raw = JSON.stringify({
-      verified: true,
-      verifiedMinimumAge: 18,
-      somethingNew: 'ignored',
-    })
-    expect(parseKWSAgeVerifiedStatus(raw)).toEqual({
-      verified: true,
-      verifiedMinimumAge: 18,
-    })
-  })
-
-  it('throws on malformed JSON', () => {
-    expect(() => parseKWSAgeVerifiedStatus('not json')).toThrow(
-      /Invalid KWS age-verified status/,
-    )
-  })
-
-  it('throws when a required field is missing', () => {
-    const raw = JSON.stringify({ verified: true })
-    expect(() => parseKWSAgeVerifiedStatus(raw)).toThrow(
-      /Invalid KWS age-verified status/,
-    )
-  })
-})
-
-describe('serializeKWSAgeVerifiedStatus', () => {
-  it('round-trips a status object including timestamp', () => {
-    const status = {
-      verified: true,
-      verifiedMinimumAge: 18,
-      transactionId: 'txn-123',
-      timestamp: 1750680000,
-    }
-    expect(
-      parseKWSAgeVerifiedStatus(serializeKWSAgeVerifiedStatus(status)),
-    ).toEqual(status)
-  })
-})

package/src/api/age-assurance/kws/age-verified.ts

@@ -1,81 +0,0 @@
-import { z } from 'zod'
-
-/**
- * Schema for KWS the `status` object on `age-verified` payloads.
- */
-export const KWSAgeVerifiedStatusSchema = z.object({
-  verified: z.boolean(),
-  verifiedMinimumAge: z.number(),
-  transactionId: z.string().optional(),
-  // A code indicating the reason for failure, or null when verification
-  // succeeded.
-  errorCode: z.string().nullable().optional(),
-  // Epoch seconds indicating when KWS generated the payload. Optional so we
-  // remain compatible with payloads sent before this field was introduced.
-  timestamp: z.number().optional(),
-})
-
-/**
- * The KWS `status` object on `age-verified` payloads.
- */
-export type KWSAgeVerifiedStatus = z.infer<typeof KWSAgeVerifiedStatusSchema>
-
-export function serializeKWSAgeVerifiedStatus(
-  status: KWSAgeVerifiedStatus,
-): string {
-  return JSON.stringify(KWSAgeVerifiedStatusSchema.parse(status))
-}
-
-/**
- * Parse KWS `age-verified` status object.
- */
-export const parseKWSAgeVerifiedStatus = (
-  raw: string,
-): KWSAgeVerifiedStatus => {
-  try {
-    const value = JSON.parse(raw)
-    return KWSAgeVerifiedStatusSchema.parse(value)
-  } catch (err) {
-    throw new Error(`Invalid KWS age-verified status: ${raw}`, {
-      cause: err,
-    })
-  }
-}
-
-/**
- * Schema for KWS `age-verified` webhooks.
- *
- * Note: we don't use `.strict()` here so that we avoid breaking if KWS adds
- * fields, and some fields below are not strictly typed since we're not using
- * them.
- */
-export const KWSAgeVerifiedWebhookSchema = z.object({
-  name: z.string(),
-  time: z.string(), // ISO8601 timestamp, but don't validate here
-  orgId: z.string().uuid().optional(),
-  productId: z.string().uuid().optional(),
-  payload: z.object({
-    email: z.string(), // no need to validate here
-    externalPayload: z.string(),
-    status: KWSAgeVerifiedStatusSchema,
-  }),
-})
-
-/**
- * The raw KWS `age-verified` webhook body
- */
-export type KWSWebhookAgeVerified = z.infer<typeof KWSAgeVerifiedWebhookSchema>
-
-/**
- * Parse KWS `age-verified` webhook body and its external payload.
- */
-export const parseKWSAgeVerifiedWebhook = (
-  raw: string,
-): KWSWebhookAgeVerified => {
-  try {
-    const value: unknown = JSON.parse(raw)
-    return KWSAgeVerifiedWebhookSchema.parse(value)
-  } catch (err) {
-    throw new Error(`Invalid webhook body: ${raw}`, { cause: err })
-  }
-}

package/src/api/age-assurance/kws/const.ts

@@ -1,33 +0,0 @@
-/**
- * Supported languages for KWS Adult Verification. This list comes from KWS's
- * Age Verification Developer Guide PDF doc.
- */
-export const KWS_SUPPORTED_LANGUAGES = new Set([
-  'en',
-  'ar',
-  'zh-Hans',
-  'nl',
-  'tl',
-  'fr',
-  'de',
-  'id',
-  'it',
-  'ja',
-  'ko',
-  'pl',
-  'pt-BR',
-  'pt',
-  'ru',
-  'es',
-  'th',
-  'tr',
-  'vi',
-])
-
-/**
- * Regions where our "version 2" using the `age-verified` KWS flow is
- * available. In these regions, we'll use a different KWS flow from the
- * existing `adult-verified` flow, pass along a different external payload, and
- * handle webhooks/redirects differently in the appview.
- */
-export const KWS_V2_COUNTRIES = new Set(['AU'])