@atproto/bsky 0.0.253 → 0.0.255

package/dist/api/app/bsky/unspecced/initAgeAssurance.d.ts

@@ -1,4 +1,4 @@
-import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context.js';
+import { type Server } from '@atproto/xrpc-server';
+import type { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=initAgeAssurance.d.ts.map

package/dist/api/app/bsky/unspecced/initAgeAssurance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initAgeAssurance.d.ts","sourceRoot":"","sources":["../../../../../src/api/app/bsky/unspecced/initAgeAssurance.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,MAAM,EACP,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAUnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAyEvD"}
+{"version":3,"file":"initAgeAssurance.d.ts","sourceRoot":"","sources":["../../../../../src/api/app/bsky/unspecced/initAgeAssurance.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,MAAM,EACZ,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAUxD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAyEvD"}

package/dist/api/app/bsky/unspecced/initAgeAssurance.js.map

@@ -1 +1 @@
-{"version":3,"file":"initAgeAssurance.js","sourceRoot":"","sources":["../../../../../src/api/app/bsky/unspecced/initAgeAssurance.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAE1B,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AACnD,OAAO,EAAE,UAAU,IAAI,GAAG,EAAE,MAAM,uBAAuB,CAAA;AAGzD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAIpE,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE;QAC9C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ;QAC/B,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACtC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,IAAI,yBAAyB,CACjC,0DAA0D,CAC3D,CAAA;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAErC,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YAE9D,IAAI,SAAS,EAAE,kBAAkB,EAAE,CAAC;gBAClC,IACE,SAAS,CAAC,kBAAkB,CAAC,MAAM,KAAK,SAAS;oBACjD,SAAS,CAAC,kBAAkB,CAAC,MAAM,KAAK,SAAS,EACjD,CAAC;oBACD,MAAM,IAAI,mBAAmB,CAC3B,0DAA0D,SAAS,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAC/F,mBAAmB,CACpB,CAAA;gBACH,CAAC;YACH,CAAC;YAED,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAElE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;YACrC,mFAAmF;YACnF,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAA;YACrB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;YAC/B,MAAM,eAAe,GAAuB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;YAEnE,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;oBAC5B,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;oBACtC,KAAK;oBACL,eAAe;oBACf,QAAQ;iBACT,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;oBAC3C,GAAG,CAAC,KAAK,CACP,EAAE,eAAe,EAAE,EACnB,4GAA4G,CAC7G,CAAA;oBACD,MAAM,IAAI,mBAAmB,CAC3B,mDAAmD,EACnD,YAAY,CACb,CAAA;gBACH,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;gBACxC,QAAQ;gBACR,SAAS;gBACT,KAAK;gBACL,MAAM;gBACN,MAAM;gBACN,MAAM,EAAE,SAAS;aAClB,CAAC,CAAA;YAEF,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,eAAe,EAAE,KAAK,CAAC,SAAS;iBACjC;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,kDAAkD;AAClD,yDAAyD;AACzD,MAAM,uBAAuB,GAAG;IAC9B,IAAI;IACJ,IAAI;IACJ,SAAS;IACT,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;CACL,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,KAAkB,EAAe,EAAE;IACxD,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAA;IAE9C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,mBAAmB,CAC3B,oEAAoE,EACpE,cAAc,CACf,CAAA;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,KAAK;QACL,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;KACvE,CAAA;AACH,CAAC,CAAA;AAED,MAAM,uBAAuB,GAAG,KAAK,EACnC,GAAe,EACf,QAAgB,EACgB,EAAE;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;YACxC,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,yBAAyB,EAAE,CAAC,QAAQ,CAAC;YACrC,gBAAgB,EAAE,CAAC,QAAQ,CAAC;SAC7B,CAAC,CAAA;QAEF,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC,CAAA","sourcesContent":["import crypto from 'node:crypto'\nimport { isEmailValid } from '@hapi/address'\nimport { isDisposableEmail } from 'disposable-email-domains-js'\nimport {\n  InvalidRequestError,\n  MethodNotImplementedError,\n  Server,\n} from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context.js'\nimport { KwsExternalPayloadError } from '../../../../kws.js'\nimport { app } from '../../../../lexicons/index.js'\nimport { httpLogger as log } from '../../../../logger.js'\nimport { ActorInfo } from '../../../../proto/bsky_pb.js'\nimport { KwsExternalPayload } from '../../../kws/types.js'\nimport { createStashEvent, getClientUa } from '../../../kws/util.js'\n\ntype InputSchema = app.bsky.unspecced.initAgeAssurance.$InputBody\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(app.bsky.unspecced.initAgeAssurance, {\n    auth: ctx.authVerifier.standard,\n    handler: async ({ auth, input, req }) => {\n      if (!ctx.kwsClient) {\n        throw new MethodNotImplementedError(\n          'This service is not configured to support age assurance.',\n        )\n      }\n\n      const actorDid = auth.credentials.iss\n\n      const actorInfo = await getAgeVerificationState(ctx, actorDid)\n\n      if (actorInfo?.ageAssuranceStatus) {\n        if (\n          actorInfo.ageAssuranceStatus.status !== 'unknown' &&\n          actorInfo.ageAssuranceStatus.status !== 'pending'\n        ) {\n          throw new InvalidRequestError(\n            `Cannot initiate age assurance flow from current state: ${actorInfo.ageAssuranceStatus.status}`,\n            'InvalidInitiation',\n          )\n        }\n      }\n\n      const { countryCode, email, language } = validateInput(input.body)\n\n      const attemptId = crypto.randomUUID()\n      // Assumes `app.set('trust proxy', ...)` configured with `true` or specific values.\n      const initIp = req.ip\n      const initUa = getClientUa(req)\n      const externalPayload: KwsExternalPayload = { actorDid, attemptId }\n\n      try {\n        await ctx.kwsClient.sendEmail({\n          countryCode: countryCode.toUpperCase(),\n          email,\n          externalPayload,\n          language,\n        })\n      } catch (err) {\n        if (err instanceof KwsExternalPayloadError) {\n          log.error(\n            { externalPayload },\n            'Age Assurance flow failed because external payload got too long, which is caused by the DID being too long',\n          )\n          throw new InvalidRequestError(\n            'Age Assurance flow failed because DID is too long',\n            'DidTooLong',\n          )\n        }\n        throw err\n      }\n\n      const event = await createStashEvent(ctx, {\n        actorDid,\n        attemptId,\n        email,\n        initIp,\n        initUa,\n        status: 'pending',\n      })\n\n      return {\n        encoding: 'application/json',\n        body: {\n          status: event.status,\n          lastInitiatedAt: event.createdAt,\n        },\n      }\n    },\n  })\n}\n\n// Supported languages for KWS Adult Verification.\n// This list comes from KWS's AV Developer Guide PDF doc.\nconst kwsAvSupportedLanguages = [\n  'en',\n  'ar',\n  'zh-Hans',\n  'nl',\n  'tl',\n  'fr',\n  'de',\n  'id',\n  'it',\n  'ja',\n  'ko',\n  'pl',\n  'pt-BR',\n  'pt',\n  'ru',\n  'es',\n  'th',\n  'tr',\n  'vi',\n]\n\nconst validateInput = (input: InputSchema): InputSchema => {\n  const { countryCode, email, language } = input\n\n  if (!isEmailValid(email) || isDisposableEmail(email)) {\n    throw new InvalidRequestError(\n      'This email address is not supported, please use a different email.',\n      'InvalidEmail',\n    )\n  }\n\n  return {\n    countryCode,\n    email,\n    language: kwsAvSupportedLanguages.includes(language) ? language : 'en',\n  }\n}\n\nconst getAgeVerificationState = async (\n  ctx: AppContext,\n  actorDid: string,\n): Promise<ActorInfo | undefined> => {\n  try {\n    const res = await ctx.dataplane.getActors({\n      dids: [actorDid],\n      returnAgeAssuranceForDids: [actorDid],\n      skipCacheForDids: [actorDid],\n    })\n\n    return res.actors[0]\n  } catch (err) {\n    return undefined\n  }\n}\n"]}
+{"version":3,"file":"initAgeAssurance.js","sourceRoot":"","sources":["../../../../../src/api/app/bsky/unspecced/initAgeAssurance.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAE1B,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AACnD,OAAO,EAAE,UAAU,IAAI,GAAG,EAAE,MAAM,uBAAuB,CAAA;AAGzD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAIpE,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE;QAC9C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ;QAC/B,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACtC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,IAAI,yBAAyB,CACjC,0DAA0D,CAC3D,CAAA;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAErC,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YAE9D,IAAI,SAAS,EAAE,kBAAkB,EAAE,CAAC;gBAClC,IACE,SAAS,CAAC,kBAAkB,CAAC,MAAM,KAAK,SAAS;oBACjD,SAAS,CAAC,kBAAkB,CAAC,MAAM,KAAK,SAAS,EACjD,CAAC;oBACD,MAAM,IAAI,mBAAmB,CAC3B,0DAA0D,SAAS,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAC/F,mBAAmB,CACpB,CAAA;gBACH,CAAC;YACH,CAAC;YAED,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAElE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;YACrC,mFAAmF;YACnF,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAA;YACrB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;YAC/B,MAAM,eAAe,GAAuB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;YAEnE,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;oBAC5B,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;oBACtC,KAAK;oBACL,eAAe;oBACf,QAAQ;iBACT,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;oBAC3C,GAAG,CAAC,KAAK,CACP,EAAE,eAAe,EAAE,EACnB,4GAA4G,CAC7G,CAAA;oBACD,MAAM,IAAI,mBAAmB,CAC3B,mDAAmD,EACnD,YAAY,CACb,CAAA;gBACH,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;gBACxC,QAAQ;gBACR,SAAS;gBACT,KAAK;gBACL,MAAM;gBACN,MAAM;gBACN,MAAM,EAAE,SAAS;aAClB,CAAC,CAAA;YAEF,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,eAAe,EAAE,KAAK,CAAC,SAAS;iBACjC;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,kDAAkD;AAClD,yDAAyD;AACzD,MAAM,uBAAuB,GAAG;IAC9B,IAAI;IACJ,IAAI;IACJ,SAAS;IACT,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;CACL,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,KAAkB,EAAe,EAAE;IACxD,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAA;IAE9C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,mBAAmB,CAC3B,oEAAoE,EACpE,cAAc,CACf,CAAA;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,KAAK;QACL,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;KACvE,CAAA;AACH,CAAC,CAAA;AAED,MAAM,uBAAuB,GAAG,KAAK,EACnC,GAAe,EACf,QAAgB,EACgB,EAAE;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;YACxC,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,yBAAyB,EAAE,CAAC,QAAQ,CAAC;YACrC,gBAAgB,EAAE,CAAC,QAAQ,CAAC;SAC7B,CAAC,CAAA;QAEF,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC,CAAA","sourcesContent":["import crypto from 'node:crypto'\nimport { isEmailValid } from '@hapi/address'\nimport { isDisposableEmail } from 'disposable-email-domains-js'\nimport {\n  InvalidRequestError,\n  MethodNotImplementedError,\n  type Server,\n} from '@atproto/xrpc-server'\nimport type { AppContext } from '../../../../context.js'\nimport { KwsExternalPayloadError } from '../../../../kws.js'\nimport { app } from '../../../../lexicons/index.js'\nimport { httpLogger as log } from '../../../../logger.js'\nimport type { ActorInfo } from '../../../../proto/bsky_pb.js'\nimport type { KwsExternalPayload } from '../../../kws/types.js'\nimport { createStashEvent, getClientUa } from '../../../kws/util.js'\n\ntype InputSchema = app.bsky.unspecced.initAgeAssurance.$InputBody\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(app.bsky.unspecced.initAgeAssurance, {\n    auth: ctx.authVerifier.standard,\n    handler: async ({ auth, input, req }) => {\n      if (!ctx.kwsClient) {\n        throw new MethodNotImplementedError(\n          'This service is not configured to support age assurance.',\n        )\n      }\n\n      const actorDid = auth.credentials.iss\n\n      const actorInfo = await getAgeVerificationState(ctx, actorDid)\n\n      if (actorInfo?.ageAssuranceStatus) {\n        if (\n          actorInfo.ageAssuranceStatus.status !== 'unknown' &&\n          actorInfo.ageAssuranceStatus.status !== 'pending'\n        ) {\n          throw new InvalidRequestError(\n            `Cannot initiate age assurance flow from current state: ${actorInfo.ageAssuranceStatus.status}`,\n            'InvalidInitiation',\n          )\n        }\n      }\n\n      const { countryCode, email, language } = validateInput(input.body)\n\n      const attemptId = crypto.randomUUID()\n      // Assumes `app.set('trust proxy', ...)` configured with `true` or specific values.\n      const initIp = req.ip\n      const initUa = getClientUa(req)\n      const externalPayload: KwsExternalPayload = { actorDid, attemptId }\n\n      try {\n        await ctx.kwsClient.sendEmail({\n          countryCode: countryCode.toUpperCase(),\n          email,\n          externalPayload,\n          language,\n        })\n      } catch (err) {\n        if (err instanceof KwsExternalPayloadError) {\n          log.error(\n            { externalPayload },\n            'Age Assurance flow failed because external payload got too long, which is caused by the DID being too long',\n          )\n          throw new InvalidRequestError(\n            'Age Assurance flow failed because DID is too long',\n            'DidTooLong',\n          )\n        }\n        throw err\n      }\n\n      const event = await createStashEvent(ctx, {\n        actorDid,\n        attemptId,\n        email,\n        initIp,\n        initUa,\n        status: 'pending',\n      })\n\n      return {\n        encoding: 'application/json',\n        body: {\n          status: event.status,\n          lastInitiatedAt: event.createdAt,\n        },\n      }\n    },\n  })\n}\n\n// Supported languages for KWS Adult Verification.\n// This list comes from KWS's AV Developer Guide PDF doc.\nconst kwsAvSupportedLanguages = [\n  'en',\n  'ar',\n  'zh-Hans',\n  'nl',\n  'tl',\n  'fr',\n  'de',\n  'id',\n  'it',\n  'ja',\n  'ko',\n  'pl',\n  'pt-BR',\n  'pt',\n  'ru',\n  'es',\n  'th',\n  'tr',\n  'vi',\n]\n\nconst validateInput = (input: InputSchema): InputSchema => {\n  const { countryCode, email, language } = input\n\n  if (!isEmailValid(email) || isDisposableEmail(email)) {\n    throw new InvalidRequestError(\n      'This email address is not supported, please use a different email.',\n      'InvalidEmail',\n    )\n  }\n\n  return {\n    countryCode,\n    email,\n    language: kwsAvSupportedLanguages.includes(language) ? language : 'en',\n  }\n}\n\nconst getAgeVerificationState = async (\n  ctx: AppContext,\n  actorDid: string,\n): Promise<ActorInfo | undefined> => {\n  try {\n    const res = await ctx.dataplane.getActors({\n      dids: [actorDid],\n      returnAgeAssuranceForDids: [actorDid],\n      skipCacheForDids: [actorDid],\n    })\n\n    return res.actors[0]\n  } catch (err) {\n    return undefined\n  }\n}\n"]}

package/dist/api/blob-dispatcher.d.ts

@@ -1,4 +1,4 @@
-import { Dispatcher } from 'undici';
-import { ServerConfig } from '../config.js';
+import { type Dispatcher } from 'undici';
+import type { ServerConfig } from '../config.js';
 export declare function createBlobDispatcher(cfg: ServerConfig): Dispatcher;
 //# sourceMappingURL=blob-dispatcher.d.ts.map

package/dist/api/blob-dispatcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blob-dispatcher.d.ts","sourceRoot":"","sources":["../../src/api/blob-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,UAAU,EAAsB,MAAM,QAAQ,CAAA;AAE9D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAG3C,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,YAAY,GAAG,UAAU,CAmClE"}
+{"version":3,"file":"blob-dispatcher.d.ts","sourceRoot":"","sources":["../../src/api/blob-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,UAAU,EAAsB,MAAM,QAAQ,CAAA;AAEnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAGhD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,YAAY,GAAG,UAAU,CAmClE"}

package/dist/api/blob-dispatcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"blob-dispatcher.js","sourceRoot":"","sources":["../../src/api/blob-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAc,IAAI,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAErE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAE9D,MAAM,UAAU,oBAAoB,CAAC,GAAiB;IACpD,MAAM,cAAc,GAAG,IAAI,KAAK,CAAC;QAC/B,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,uBAAuB;QACrD,cAAc,EAAE,GAAG,CAAC,mBAAmB;QACvC,eAAe,EAAE,GAAG,CAAC,oBAAoB;QACzC,WAAW,EAAE,GAAG,CAAC,gBAAgB;QACjC,OAAO,EAAE,GAAG,CAAC,qBAAqB;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;gBACf,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAC1B,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;gBAClD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,GAAG,CAAC,CAAA;gBACrD,CAAC;gBACD,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBAC7D,CAAC;gBACD,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC/B,CAAC;QACL,OAAO,EAAE;YACP,MAAM,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;SAC9D;KACF,CAAC,CAAA;IAEF,OAAO,cAAc,CAAC,OAAO,CAC3B,YAAY,CAAC,QAAQ,CAAC;QACpB,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,IAAI;KACzB,CAAC,EACF,YAAY,CAAC,KAAK,CAAC;QACjB,WAAW,EAAE,CAAC,GAAG,2BAA2B,CAAC;QAC7C,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,GAAG,CAAC,eAAe;KAChC,CAAC,CACH,CAAA;AACH,CAAC","sourcesContent":["import { Agent, Dispatcher, Pool, interceptors } from 'undici'\nimport { isUnicastIp, unicastLookup } from '@atproto-labs/fetch-node'\nimport { ServerConfig } from '../config.js'\nimport { RETRYABLE_HTTP_STATUS_CODES } from '../util/retry.js'\n\nexport function createBlobDispatcher(cfg: ServerConfig): Dispatcher {\n  const baseDispatcher = new Agent({\n    allowH2: cfg.proxyAllowHTTP2, // This is experimental\n    headersTimeout: cfg.proxyHeadersTimeout,\n    maxResponseSize: cfg.proxyMaxResponseSize,\n    bodyTimeout: cfg.proxyBodyTimeout,\n    factory: cfg.disableSsrfProtection\n      ? undefined\n      : (origin, opts) => {\n          const { protocol, hostname } =\n            origin instanceof URL ? origin : new URL(origin)\n          if (protocol !== 'https:') {\n            throw new Error(`Forbidden protocol \"${protocol}\"`)\n          }\n          if (isUnicastIp(hostname) === false) {\n            throw new Error('Hostname resolved to non-unicast address')\n          }\n          return new Pool(origin, opts)\n        },\n    connect: {\n      lookup: cfg.disableSsrfProtection ? undefined : unicastLookup,\n    },\n  })\n\n  return baseDispatcher.compose(\n    interceptors.redirect({\n      maxRedirections: 10,\n      throwOnMaxRedirect: true,\n    }),\n    interceptors.retry({\n      statusCodes: [...RETRYABLE_HTTP_STATUS_CODES],\n      methods: ['GET', 'HEAD'],\n      maxRetries: cfg.proxyMaxRetries,\n    }),\n  )\n}\n"]}
+{"version":3,"file":"blob-dispatcher.js","sourceRoot":"","sources":["../../src/api/blob-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAmB,IAAI,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACnE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAErE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAE9D,MAAM,UAAU,oBAAoB,CAAC,GAAiB;IACpD,MAAM,cAAc,GAAG,IAAI,KAAK,CAAC;QAC/B,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,uBAAuB;QACrD,cAAc,EAAE,GAAG,CAAC,mBAAmB;QACvC,eAAe,EAAE,GAAG,CAAC,oBAAoB;QACzC,WAAW,EAAE,GAAG,CAAC,gBAAgB;QACjC,OAAO,EAAE,GAAG,CAAC,qBAAqB;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;gBACf,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAC1B,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;gBAClD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,GAAG,CAAC,CAAA;gBACrD,CAAC;gBACD,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBAC7D,CAAC;gBACD,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC/B,CAAC;QACL,OAAO,EAAE;YACP,MAAM,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;SAC9D;KACF,CAAC,CAAA;IAEF,OAAO,cAAc,CAAC,OAAO,CAC3B,YAAY,CAAC,QAAQ,CAAC;QACpB,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,IAAI;KACzB,CAAC,EACF,YAAY,CAAC,KAAK,CAAC;QACjB,WAAW,EAAE,CAAC,GAAG,2BAA2B,CAAC;QAC7C,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,GAAG,CAAC,eAAe;KAChC,CAAC,CACH,CAAA;AACH,CAAC","sourcesContent":["import { Agent, type Dispatcher, Pool, interceptors } from 'undici'\nimport { isUnicastIp, unicastLookup } from '@atproto-labs/fetch-node'\nimport type { ServerConfig } from '../config.js'\nimport { RETRYABLE_HTTP_STATUS_CODES } from '../util/retry.js'\n\nexport function createBlobDispatcher(cfg: ServerConfig): Dispatcher {\n  const baseDispatcher = new Agent({\n    allowH2: cfg.proxyAllowHTTP2, // This is experimental\n    headersTimeout: cfg.proxyHeadersTimeout,\n    maxResponseSize: cfg.proxyMaxResponseSize,\n    bodyTimeout: cfg.proxyBodyTimeout,\n    factory: cfg.disableSsrfProtection\n      ? undefined\n      : (origin, opts) => {\n          const { protocol, hostname } =\n            origin instanceof URL ? origin : new URL(origin)\n          if (protocol !== 'https:') {\n            throw new Error(`Forbidden protocol \"${protocol}\"`)\n          }\n          if (isUnicastIp(hostname) === false) {\n            throw new Error('Hostname resolved to non-unicast address')\n          }\n          return new Pool(origin, opts)\n        },\n    connect: {\n      lookup: cfg.disableSsrfProtection ? undefined : unicastLookup,\n    },\n  })\n\n  return baseDispatcher.compose(\n    interceptors.redirect({\n      maxRedirections: 10,\n      throwOnMaxRedirect: true,\n    }),\n    interceptors.retry({\n      statusCodes: [...RETRYABLE_HTTP_STATUS_CODES],\n      methods: ['GET', 'HEAD'],\n      maxRetries: cfg.proxyMaxRetries,\n    }),\n  )\n}\n"]}

package/dist/api/blob-resolver.d.ts

@@ -1,9 +1,9 @@
-import { Writable } from 'node:stream';
-import { Dispatcher } from 'undici';
-import { AtprotoDid } from '@atproto/did';
-import { Cid } from '@atproto/lex';
-import { AppContext } from '../context.js';
-import { Middleware } from '../util/http.js';
+import { type Writable } from 'node:stream';
+import type { Dispatcher } from 'undici';
+import { type AtprotoDid } from '@atproto/did';
+import type { Cid } from '@atproto/lex';
+import type { AppContext } from '../context.js';
+import { type Middleware } from '../util/http.js';
 export declare function createMiddleware(ctx: AppContext): Middleware;
 export type StreamBlobOptions = {
     cid: string;

package/dist/api/blob-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blob-resolver.d.ts","sourceRoot":"","sources":["../../src/api/blob-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,QAAQ,EAAE,MAAM,aAAa,CAAA;AAGzD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAMnC,OAAO,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAA;AACvD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAQlC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAU1C,OAAO,EACL,UAAU,EAGX,MAAM,iBAAiB,CAAA;AAGxB,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAoH5D;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG,CAC9B,IAAI,EAAE,UAAU,CAAC,iBAAiB,EAClC,IAAI,EAAE;IACJ,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,UAAU,CAAA;IACf,GAAG,EAAE,GAAG,CAAA;CACT,KACE,QAAQ,CAAA;AAEb,wBAAsB,UAAU,CAC9B,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,iBAAiB,wCAgE3B"}
+{"version":3,"file":"blob-resolver.d.ts","sourceRoot":"","sources":["../../src/api/blob-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAA;AAGnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAMxC,OAAO,EAAE,KAAK,UAAU,EAAgB,MAAM,cAAc,CAAA;AAC5D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAQvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAU/C,OAAO,EACL,KAAK,UAAU,EAGhB,MAAM,iBAAiB,CAAA;AAGxB,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAoH5D;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG,CAC9B,IAAI,EAAE,UAAU,CAAC,iBAAiB,EAClC,IAAI,EAAE;IACJ,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,UAAU,CAAA;IACf,GAAG,EAAE,GAAG,CAAA;CACT,KACE,QAAQ,CAAA;AAEb,wBAAsB,UAAU,CAC9B,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,iBAAiB,wCAgE3B"}

package/dist/api/blob-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"blob-resolver.js","sourceRoot":"","sources":["../../src/api/blob-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,SAAS,EAAY,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEtD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,cAAc,GACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAc,YAAY,EAAE,MAAM,cAAc,CAAA;AAEvD,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,0BAA0B,CAAA;AAGjC,OAAO,EACL,IAAI,EAEJ,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,UAAU,IAAI,GAAG,EAAE,MAAM,cAAc,CAAA;AAChD,OAAO,EAEL,oBAAoB,EACpB,cAAc,GACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,MAAM,UAAU,gBAAgB,CAAC,GAAe;IAC9C,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,EAAE,CAAA;QAChE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,EAAE,CAAA;QACjD,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC/D,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,EAAE,CAAA;QAEzD,oEAAoE;QACpE,6BAA6B;QAE7B,IAAI,CAAC;YACH,MAAM,aAAa,GAAsB;gBACvC,GAAG,EAAE,QAAQ;gBACb,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC;gBAC3B,mEAAmE;gBACnE,wEAAwE;gBACxE,0EAA0E;gBAC1E,cAAc,EAAE,2BAA2B,CACzC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAC9B,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAC9B;aACF,CAAA;YAED,MAAM,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE;gBACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;gBACrD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;gBAEjD,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAE,EAAE;oBAChC,GAAG,CAAC,IAAI,CACN,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,EAClD,4CAA4C,CAC7C,CAAA;gBACH,CAAC,CAAA;gBAED,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE;oBAC/B,kEAAkE;oBAClE,kEAAkE;oBAClE,oEAAoE;oBACpE,oEAAoE;oBACpE,YAAY,CAAC,UAAU,CAAC,CAAA;oBACxB,QAAQ,CAAC,GAAG,CAAC,CAAA;gBACf,CAAC,CAAA;gBAED,oEAAoE;gBACpE,mEAAmE;gBACnE,uBAAuB;gBACvB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBAE7B,sEAAsE;gBACtE,wEAAwE;gBACxE,uEAAuE;gBACvE,uEAAuE;gBACvE,qEAAqE;gBACrE,wEAAwE;gBACxE,sEAAsE;gBACtE,uEAAuE;gBACvE,qEAAqE;gBACrE,+CAA+C;gBAC/C,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;oBACjC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;oBAE9B,oEAAoE;oBACpE,yDAAyD;oBACzD,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB,6BAA6B,CAC9B,CAAA;oBACD,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;oBAClD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;oBACxC,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;oBAEtC,qCAAqC;oBACrC,6DAA6D;oBAE7D,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;oBAEnC,qEAAqE;oBACrE,mEAAmE;oBACnE,sEAAsE;oBACtE,qEAAqE;oBACrE,iEAAiE;oBACjE,oDAAoD;oBACpD,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAA;oBAElC,oEAAoE;oBACpE,0DAA0D;oBAC1D,mEAAmE;oBACnE,qEAAqE;oBACrE,qEAAqE;oBACrE,gEAAgE;oBAChE,qEAAqE;oBACrE,QAAQ;oBACR,GAAG,CAAC,YAAY,EAAE,CAAA;oBAElB,kDAAkD;oBAClD,KAAK,QAAQ,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;gBAChD,CAAC,EAAE,EAAE,CAAC,CAAA,CAAC,8DAA8D;gBAErE,iDAAiD;gBACjD,OAAO,QAAQ,CAAA;YACjB,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBACrC,GAAG,CAAC,OAAO,EAAE,CAAA;YACf,CAAC;iBAAM,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBACzC,sEAAsE;gBACtE,wCAAwC;gBACxC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;YACrC,CAAC;iBAAM,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,CAAC,CAAA;YACX,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;YAC1D,CAAC;QACH,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,OAA0B,EAC1B,OAA0B;IAE1B,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAErD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAE5C,OAAO,CAAC,GAAG,CACT,iBAAiB,EACjB,OAAO,CAAC,cAAc;QACpB,kBAAkB,CAChB,GAAG,CAAC,GAAG,CAAC,qBAAqB;YAC3B,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,4BAA4B,CACjC,CACJ,CAAA;IAED,IAAI,eAAe,GAAG,KAAK,CAAA;IAE3B,OAAO,GAAG,CAAC,cAAc;SACtB,MAAM,CACL;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;QAC/B,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,EACD,CAAC,QAAQ,EAAE,EAAE;QACX,eAAe,GAAG,IAAI,CAAA;QAEtB,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CACN;gBACE,GAAG;gBACH,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;gBACnB,GAAG,EAAE,GAAG,CAAC,MAAM;gBACf,MAAM,EAAE,QAAQ,CAAC,UAAU;aAC5B,EACD,iCAAiC,CAClC,CAAA;YAED,MAAM,QAAQ,CAAC,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG;gBAC3D,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,aAAa;gBACvE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA,CAAC,sBAAsB;QACpF,CAAC;QAED,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IAC7C,CAAC,CACF;SACA,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,kDAAkD;QAClD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,oDAAoD;YACpD,GAAG,CAAC,IAAI,CACN,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,EAClD,0CAA0C,CAC3C,CAAA;YAED,MAAM,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1D,CAAC;QAED,MAAM,GAAG,CAAA;IACX,CAAC,CAAC,CAAA;AACN,CAAC;AAED,SAAS,eAAe,CAAC,MAAoC;IAC3D,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAC3B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;QAAE,MAAM,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM;QAAE,MAAM,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAClD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAC7B,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,SAA0B,EAC1B,GAAW,EACX,GAAQ;IAER,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAEjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAA;IAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAChC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IAE3C,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,SAA0B,EAC1B,GAAW,EACX,GAAQ;IAER,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClD,SAAS,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAChD,IAAI,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzC,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC,CAAC;QACF,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;KACxD,CAAC,CAAA;IAEF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,IAAI,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACtE,MAAM,GAAG,GACP,QAAQ;QACR,kBAAkB,CAAC,QAAQ,EAAE;YAC3B,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,2BAA2B;SAClC,CAAC,CAAA;IAEJ,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;IAC5C,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,cAAc,CACrB,EACE,sBAAsB,EAAE,SAAS,EACjC,2BAA2B,EAAE,cAAc,GAC9B,EACf,GAAQ;IAER,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAA;IAEzC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAE1C,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC;YAC/C,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvC,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,cAAc,CAAA;QAEnC,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,GAAQ,EAAE,QAA4B;IAC/D,oEAAoE;IACpE,uEAAuE;IACvE,2EAA2E;IAC3E,4EAA4E;IAC5E,8BAA8B;IAC9B,EAAE;IACF,8EAA8E;IAC9E,mBAAmB;IACnB,EAAE;IACF,6EAA6E;IAC7E,6EAA6E;IAC7E,wEAAwE;IACxE,SAAS;IAET,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IACzC,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAE5C,6EAA6E;IAC7E,yDAAyD;IACzD,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAA;IAErC,MAAM,kBAAkB,GAAG,IAAI,eAAe,EAAE,CAAA;IAChD,MAAM,eAAe,GAAa,CAAC,GAAG,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACzD,MAAM,aAAa,GAAG,eAAe,CAAC,CAAC,CAAE,CAAA;IAEzC,uEAAuE;IACvE,wBAAwB;IACxB,MAAM,eAAe,GAA0B,QAAQ,CAAC,eAAe,EAAE;QACvE,MAAM,EAAE,kBAAkB,CAAC,MAAM;KAClC,CAAC,CAAC,IAAI,CACL,GAAG,EAAE,CAAC,IAAI,EACV,CAAC,GAAG,EAAE,EAAE;QACN,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAE1B,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,2BAA2B;QAC3B,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAE1B,OAAO,KAAK,CAAA;IACd,CAAC,CACF,CAAA;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,CAAA;IAEjB,MAAM,WAAW,GAAG,IAAI,SAAS,CAAC;QAChC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ;YACjC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YACpC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACvB,CAAC;QACD,KAAK,CAAC,QAAQ;YACZ,gEAAgE;YAChE,aAAa,CAAC,GAAG,EAAE,CAAA;YACnB,sEAAsE;YACtE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAChC,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,QAAQ;YACnB,kBAAkB,CAAC,KAAK,EAAE,CAAA,CAAC,2CAA2C;YACtE,QAAQ,CAAC,GAAG,CAAC,CAAA;QACf,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK;QACzB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;AACpD,CAAC","sourcesContent":["import { Duplex, Transform, Writable } from 'node:stream'\nimport { pipeline } from 'node:stream/promises'\nimport createError, { isHttpError } from 'http-errors'\nimport { Dispatcher } from 'undici'\nimport {\n  VerifyCidError,\n  VerifyCidTransform,\n  createDecoders,\n} from '@atproto/common'\nimport { AtprotoDid, isAtprotoDid } from '@atproto/did'\nimport { Cid } from '@atproto/lex'\nimport {\n  ACCEPT_ENCODING_COMPRESSED,\n  ACCEPT_ENCODING_UNCOMPRESSED,\n  buildProxiedContentEncoding,\n  formatAcceptHeader,\n} from '@atproto-labs/xrpc-utils'\nimport { ServerConfig } from '../config.js'\nimport { AppContext } from '../context.js'\nimport {\n  Code,\n  DataPlaneClient,\n  getServiceEndpoint,\n  isDataplaneError,\n  unpackIdentityServices,\n} from '../data-plane/index.js'\nimport { parseCid } from '../hydration/util.js'\nimport { httpLogger as log } from '../logger.js'\nimport {\n  Middleware,\n  proxyResponseHeaders,\n  responseSignal,\n} from '../util/http.js'\nimport { BSKY_USER_AGENT } from './util.js'\n\nexport function createMiddleware(ctx: AppContext): Middleware {\n  return async (req, res, next) => {\n    if (req.method !== 'GET' && req.method !== 'HEAD') return next()\n    if (!req.url?.startsWith('/blob/')) return next()\n    const { length, 2: didParam, 3: cidParam } = req.url.split('/')\n    if (length !== 4 || !didParam || !cidParam) return next()\n\n    // @TODO Check sec-fetch-* headers (e.g. to prevent files from being\n    // displayed as a web page) ?\n\n    try {\n      const streamOptions: StreamBlobOptions = {\n        did: didParam,\n        cid: cidParam,\n        signal: responseSignal(res),\n        // Because we will be verifying the CID, we need to ensure that the\n        // upstream response can be de-compressed. We do this by negotiating the\n        // \"accept-encoding\" header based on the downstream client's capabilities.\n        acceptEncoding: buildProxiedContentEncoding(\n          req.headers['accept-encoding'],\n          ctx.cfg.proxyPreferCompressed,\n        ),\n      }\n\n      await streamBlob(ctx, streamOptions, (upstream, { cid, did, url }) => {\n        const encoding = upstream.headers['content-encoding']\n        const verifier = createCidVerifier(cid, encoding)\n\n        const logError = (err: unknown) => {\n          log.warn(\n            { err, did, cid: cid.toString(), pds: url.origin },\n            'blob resolution failed during transmission',\n          )\n        }\n\n        const onError = (err: unknown) => {\n          // No need to pipe the data (verifier) into the response, as it is\n          // \"errored\". The response processing will continue in the \"catch\"\n          // block below (because streamBlob() will reject the promise in case\n          // of \"error\" event on the writable stream returned by the factory).\n          clearTimeout(graceTimer)\n          logError(err)\n        }\n\n        // Catch any error that occurs before the timer bellow is triggered.\n        // The promise returned by streamBlob() will be rejected as soon as\n        // the verifier errors.\n        verifier.on('error', onError)\n\n        // The way I/O work, it is likely that, in case of small payloads, the\n        // full upstream response is already buffered at this point. In order to\n        // return a 404 instead of a broken response stream, we allow the event\n        // loop to to process any pending I/O events before we start piping the\n        // bytes to the response. For larger payloads, the response will look\n        // like a 200 with a broken chunked response stream. The only way around\n        // that would be to buffer the entire response before piping it to the\n        // response, which will hurt latency (need the full payload) and memory\n        // usage (either RAM or DISK). Since this is more of an edge case, we\n        // allow the broken response stream to be sent.\n        const graceTimer = setTimeout(() => {\n          verifier.off('error', onError)\n\n          // Make sure that the content served from the bsky api domain cannot\n          // be used to perform XSS attacks (by serving HTML pages)\n          res.setHeader(\n            'Content-Security-Policy',\n            `default-src 'none'; sandbox`,\n          )\n          res.setHeader('X-Content-Type-Options', 'nosniff')\n          res.setHeader('X-Frame-Options', 'DENY')\n          res.setHeader('X-XSS-Protection', '0')\n\n          // @TODO Add a cache-control header ?\n          // @TODO Add content-disposition header (to force download) ?\n\n          proxyResponseHeaders(upstream, res)\n\n          // Force chunked encoding. This is required because the verifier will\n          // trigger an error *after* the last chunk has been passed through.\n          // Because the number of bytes sent will match the content-length, the\n          // HTTP response will be considered \"complete\" by the HTTP server. At\n          // this point, only trailers headers could indicate that an error\n          // occurred, but that is not the behavior we expect.\n          res.removeHeader('content-length')\n\n          // From this point on, triggering the next middleware (including any\n          // error handler) can be problematic because content-type,\n          // content-encoding, etc. headers have already been set. Because of\n          // this, we make sure that res.headersSent is set to true, preventing\n          // another error handler middleware from being called (from the catch\n          // block bellow). Not flushing the headers here would require to\n          // revert the headers set from this middleware (which we don't do for\n          // now).\n          res.flushHeaders()\n\n          // Pipe the verifier output into the HTTP response\n          void pipeline([verifier, res]).catch(logError)\n        }, 10) // 0 works too. Allow for additional data to come in for 10ms.\n\n        // Write the upstream response into the verifier.\n        return verifier\n      })\n    } catch (err) {\n      if (res.headersSent || res.destroyed) {\n        res.destroy()\n      } else if (err instanceof VerifyCidError) {\n        // @NOTE This only works because of the graceTimer above. It will also\n        // only be triggered for small payloads.\n        next(createError(404, err.message))\n      } else if (isHttpError(err)) {\n        next(err)\n      } else {\n        next(createError(502, 'Upstream Error', { cause: err }))\n      }\n    }\n  }\n}\n\nexport type StreamBlobOptions = {\n  cid: string\n  did: string\n  acceptEncoding?: string\n  signal?: AbortSignal\n}\n\nexport type StreamBlobFactory = (\n  data: Dispatcher.StreamFactoryData,\n  info: {\n    url: URL\n    did: AtprotoDid\n    cid: Cid\n  },\n) => Writable\n\nexport async function streamBlob(\n  ctx: AppContext,\n  options: StreamBlobOptions,\n  factory: StreamBlobFactory,\n) {\n  const { did, cid } = parseBlobParams(options)\n  const url = await getBlobUrl(ctx.dataplane, did, cid)\n\n  const headers = getBlobHeaders(ctx.cfg, url)\n\n  headers.set(\n    'accept-encoding',\n    options.acceptEncoding ||\n      formatAcceptHeader(\n        ctx.cfg.proxyPreferCompressed\n          ? ACCEPT_ENCODING_COMPRESSED\n          : ACCEPT_ENCODING_UNCOMPRESSED,\n      ),\n  )\n\n  let headersReceived = false\n\n  return ctx.blobDispatcher\n    .stream(\n      {\n        method: 'GET',\n        origin: url.origin,\n        path: url.pathname + url.search,\n        headers,\n        signal: options.signal,\n      },\n      (upstream) => {\n        headersReceived = true\n\n        if (upstream.statusCode !== 200) {\n          log.warn(\n            {\n              did,\n              cid: cid.toString(),\n              pds: url.origin,\n              status: upstream.statusCode,\n            },\n            `blob resolution failed upstream`,\n          )\n\n          throw upstream.statusCode >= 400 && upstream.statusCode < 500\n            ? createError(404, 'Blob not found', { cause: upstream }) // 4xx => 404\n            : createError(502, 'Upstream Error', { cause: upstream }) // !200 && !4xx => 502\n        }\n\n        return factory(upstream, { url, did, cid })\n      },\n    )\n    .catch((err) => {\n      // Is this a connection error, or a stream error ?\n      if (!headersReceived) {\n        // connection error, dns error, headers timeout, ...\n        log.warn(\n          { err, did, cid: cid.toString(), pds: url.origin },\n          'blob resolution failed during connection',\n        )\n\n        throw createError(502, 'Upstream Error', { cause: err })\n      }\n\n      throw err\n    })\n}\n\nfunction parseBlobParams(params: { cid: string; did: string }) {\n  const { cid, did } = params\n  if (!isAtprotoDid(did)) throw createError(400, 'Invalid did')\n  const cidObj = parseCid(cid)\n  if (!cidObj) throw createError(400, 'Invalid cid')\n  return { cid: cidObj, did }\n}\n\nasync function getBlobUrl(\n  dataplane: DataPlaneClient,\n  did: string,\n  cid: Cid,\n): Promise<URL> {\n  const pds = await getBlobPds(dataplane, did, cid)\n\n  const url = new URL(`/xrpc/com.atproto.sync.getBlob`, pds)\n  url.searchParams.set('did', did)\n  url.searchParams.set('cid', cid.toString())\n\n  return url\n}\n\nasync function getBlobPds(\n  dataplane: DataPlaneClient,\n  did: string,\n  cid: Cid,\n): Promise<string> {\n  const [identity, { takenDown }] = await Promise.all([\n    dataplane.getIdentityByDid({ did }).catch((err) => {\n      if (isDataplaneError(err, Code.NotFound)) {\n        return undefined\n      }\n      throw err\n    }),\n    dataplane.getBlobTakedown({ did, cid: cid.toString() }),\n  ])\n\n  if (takenDown) {\n    throw createError(404, 'Blob not found')\n  }\n\n  const services = identity && unpackIdentityServices(identity.services)\n  const pds =\n    services &&\n    getServiceEndpoint(services, {\n      id: 'atproto_pds',\n      type: 'AtprotoPersonalDataServer',\n    })\n\n  if (!pds) {\n    throw createError(404, 'Origin not found')\n  }\n\n  return pds\n}\n\nfunction getBlobHeaders(\n  {\n    blobRateLimitBypassKey: bypassKey,\n    blobRateLimitBypassHostname: bypassHostname,\n  }: ServerConfig,\n  url: URL,\n): Map<string, string> {\n  const headers = new Map<string, string>()\n\n  headers.set('user-agent', BSKY_USER_AGENT)\n\n  if (bypassKey && bypassHostname) {\n    const matchesUrl = bypassHostname.startsWith('.')\n      ? url.hostname.endsWith(bypassHostname)\n      : url.hostname === bypassHostname\n\n    if (matchesUrl) {\n      headers.set('x-ratelimit-bypass', bypassKey)\n    }\n  }\n\n  return headers\n}\n\n/**\n * This function creates a passthrough stream that will decompress (if needed)\n * and verify the CID of the input stream. The output data will be identical to\n * the input data.\n *\n * If you need the un-compressed data, you should use a decompress + verify\n * pipeline instead.\n */\nfunction createCidVerifier(cid: Cid, encoding?: string | string[]): Duplex {\n  // If the upstream content is compressed, we do not want to return a\n  // de-compressed stream here. Indeed, the \"compression\" middleware will\n  // compress the response before it is sent downstream, if it is not already\n  // compressed. Because of this, it is preferable to return the content as-is\n  // to avoid re-compressing it.\n  //\n  // We do still want to be able to verify the CID, which requires decompressing\n  // the input bytes.\n  //\n  // To that end, we create a passthrough in order to \"tee\" the stream into two\n  // streams: one that will be sent, unaltered, downstream, and a pipeline that\n  // will be used to decompress & verify the CID (discarding de-compressed\n  // data).\n\n  const decoders = createDecoders(encoding)\n  const verifier = new VerifyCidTransform(cid)\n\n  // Optimization: If the content is not compressed, we don't need to \"tee\" the\n  // stream, we can use the verifier as simple passthrough.\n  if (!decoders.length) return verifier\n\n  const pipelineController = new AbortController()\n  const pipelineStreams: Duplex[] = [...decoders, verifier]\n  const pipelineInput = pipelineStreams[0]!\n\n  // Create a promise that will resolve if, and only if, the decoding and\n  // verification succeed.\n  const pipelinePromise: Promise<null | Error> = pipeline(pipelineStreams, {\n    signal: pipelineController.signal,\n  }).then(\n    () => null,\n    (err) => {\n      const error = asError(err)\n\n      // the data being processed by the pipeline is invalid (e.g. invalid\n      // compressed content, non-matching the CID, ...). If that occurs, we can\n      // destroy the passthrough (this allows not to wait for the \"flush\" event\n      // to propagate the error).\n      passthrough.destroy(error)\n\n      return error\n    },\n  )\n\n  // We don't care about the un-compressed data, we only use the verifier to\n  // detect any error through the pipelinePromise. We still need to pass the\n  // verifier into flowing mode to ensure that the pipelinePromise resolves.\n  verifier.resume()\n\n  const passthrough = new Transform({\n    transform(chunk, encoding, callback) {\n      pipelineInput.write(chunk, encoding)\n      callback(null, chunk)\n    },\n    flush(callback) {\n      // End the input stream, which will resolve the pipeline promise\n      pipelineInput.end()\n      // End the pass-through stream according to the result of the pipeline\n      pipelinePromise.then(callback)\n    },\n    destroy(err, callback) {\n      pipelineController.abort() // Causes pipeline() to destroy all streams\n      callback(err)\n    },\n  })\n\n  return passthrough\n}\n\nfunction asError(err: unknown): Error {\n  return err instanceof Error\n    ? err\n    : new Error('Processing failed', { cause: err })\n}\n"]}
+{"version":3,"file":"blob-resolver.js","sourceRoot":"","sources":["../../src/api/blob-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,SAAS,EAAiB,MAAM,aAAa,CAAA;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEtD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,cAAc,GACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAmB,YAAY,EAAE,MAAM,cAAc,CAAA;AAE5D,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,0BAA0B,CAAA;AAGjC,OAAO,EACL,IAAI,EAEJ,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,UAAU,IAAI,GAAG,EAAE,MAAM,cAAc,CAAA;AAChD,OAAO,EAEL,oBAAoB,EACpB,cAAc,GACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,MAAM,UAAU,gBAAgB,CAAC,GAAe;IAC9C,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,EAAE,CAAA;QAChE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,EAAE,CAAA;QACjD,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC/D,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,EAAE,CAAA;QAEzD,oEAAoE;QACpE,6BAA6B;QAE7B,IAAI,CAAC;YACH,MAAM,aAAa,GAAsB;gBACvC,GAAG,EAAE,QAAQ;gBACb,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC;gBAC3B,mEAAmE;gBACnE,wEAAwE;gBACxE,0EAA0E;gBAC1E,cAAc,EAAE,2BAA2B,CACzC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAC9B,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAC9B;aACF,CAAA;YAED,MAAM,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE;gBACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;gBACrD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;gBAEjD,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAE,EAAE;oBAChC,GAAG,CAAC,IAAI,CACN,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,EAClD,4CAA4C,CAC7C,CAAA;gBACH,CAAC,CAAA;gBAED,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE;oBAC/B,kEAAkE;oBAClE,kEAAkE;oBAClE,oEAAoE;oBACpE,oEAAoE;oBACpE,YAAY,CAAC,UAAU,CAAC,CAAA;oBACxB,QAAQ,CAAC,GAAG,CAAC,CAAA;gBACf,CAAC,CAAA;gBAED,oEAAoE;gBACpE,mEAAmE;gBACnE,uBAAuB;gBACvB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBAE7B,sEAAsE;gBACtE,wEAAwE;gBACxE,uEAAuE;gBACvE,uEAAuE;gBACvE,qEAAqE;gBACrE,wEAAwE;gBACxE,sEAAsE;gBACtE,uEAAuE;gBACvE,qEAAqE;gBACrE,+CAA+C;gBAC/C,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;oBACjC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;oBAE9B,oEAAoE;oBACpE,yDAAyD;oBACzD,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB,6BAA6B,CAC9B,CAAA;oBACD,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;oBAClD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;oBACxC,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;oBAEtC,qCAAqC;oBACrC,6DAA6D;oBAE7D,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;oBAEnC,qEAAqE;oBACrE,mEAAmE;oBACnE,sEAAsE;oBACtE,qEAAqE;oBACrE,iEAAiE;oBACjE,oDAAoD;oBACpD,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAA;oBAElC,oEAAoE;oBACpE,0DAA0D;oBAC1D,mEAAmE;oBACnE,qEAAqE;oBACrE,qEAAqE;oBACrE,gEAAgE;oBAChE,qEAAqE;oBACrE,QAAQ;oBACR,GAAG,CAAC,YAAY,EAAE,CAAA;oBAElB,kDAAkD;oBAClD,KAAK,QAAQ,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;gBAChD,CAAC,EAAE,EAAE,CAAC,CAAA,CAAC,8DAA8D;gBAErE,iDAAiD;gBACjD,OAAO,QAAQ,CAAA;YACjB,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBACrC,GAAG,CAAC,OAAO,EAAE,CAAA;YACf,CAAC;iBAAM,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBACzC,sEAAsE;gBACtE,wCAAwC;gBACxC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;YACrC,CAAC;iBAAM,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,CAAC,CAAA;YACX,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;YAC1D,CAAC;QACH,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,OAA0B,EAC1B,OAA0B;IAE1B,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAErD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAE5C,OAAO,CAAC,GAAG,CACT,iBAAiB,EACjB,OAAO,CAAC,cAAc;QACpB,kBAAkB,CAChB,GAAG,CAAC,GAAG,CAAC,qBAAqB;YAC3B,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,4BAA4B,CACjC,CACJ,CAAA;IAED,IAAI,eAAe,GAAG,KAAK,CAAA;IAE3B,OAAO,GAAG,CAAC,cAAc;SACtB,MAAM,CACL;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;QAC/B,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,EACD,CAAC,QAAQ,EAAE,EAAE;QACX,eAAe,GAAG,IAAI,CAAA;QAEtB,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CACN;gBACE,GAAG;gBACH,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;gBACnB,GAAG,EAAE,GAAG,CAAC,MAAM;gBACf,MAAM,EAAE,QAAQ,CAAC,UAAU;aAC5B,EACD,iCAAiC,CAClC,CAAA;YAED,MAAM,QAAQ,CAAC,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG;gBAC3D,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,aAAa;gBACvE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA,CAAC,sBAAsB;QACpF,CAAC;QAED,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IAC7C,CAAC,CACF;SACA,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,kDAAkD;QAClD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,oDAAoD;YACpD,GAAG,CAAC,IAAI,CACN,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,EAClD,0CAA0C,CAC3C,CAAA;YAED,MAAM,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1D,CAAC;QAED,MAAM,GAAG,CAAA;IACX,CAAC,CAAC,CAAA;AACN,CAAC;AAED,SAAS,eAAe,CAAC,MAAoC;IAC3D,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAC3B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;QAAE,MAAM,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM;QAAE,MAAM,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAClD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAC7B,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,SAA0B,EAC1B,GAAW,EACX,GAAQ;IAER,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAEjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAA;IAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAChC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IAE3C,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,SAA0B,EAC1B,GAAW,EACX,GAAQ;IAER,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClD,SAAS,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAChD,IAAI,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzC,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC,CAAC;QACF,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;KACxD,CAAC,CAAA;IAEF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,IAAI,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACtE,MAAM,GAAG,GACP,QAAQ;QACR,kBAAkB,CAAC,QAAQ,EAAE;YAC3B,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,2BAA2B;SAClC,CAAC,CAAA;IAEJ,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;IAC5C,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,cAAc,CACrB,EACE,sBAAsB,EAAE,SAAS,EACjC,2BAA2B,EAAE,cAAc,GAC9B,EACf,GAAQ;IAER,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAA;IAEzC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAE1C,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC;YAC/C,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvC,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,cAAc,CAAA;QAEnC,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,GAAQ,EAAE,QAA4B;IAC/D,oEAAoE;IACpE,uEAAuE;IACvE,2EAA2E;IAC3E,4EAA4E;IAC5E,8BAA8B;IAC9B,EAAE;IACF,8EAA8E;IAC9E,mBAAmB;IACnB,EAAE;IACF,6EAA6E;IAC7E,6EAA6E;IAC7E,wEAAwE;IACxE,SAAS;IAET,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IACzC,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAE5C,6EAA6E;IAC7E,yDAAyD;IACzD,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAA;IAErC,MAAM,kBAAkB,GAAG,IAAI,eAAe,EAAE,CAAA;IAChD,MAAM,eAAe,GAAa,CAAC,GAAG,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACzD,MAAM,aAAa,GAAG,eAAe,CAAC,CAAC,CAAE,CAAA;IAEzC,uEAAuE;IACvE,wBAAwB;IACxB,MAAM,eAAe,GAA0B,QAAQ,CAAC,eAAe,EAAE;QACvE,MAAM,EAAE,kBAAkB,CAAC,MAAM;KAClC,CAAC,CAAC,IAAI,CACL,GAAG,EAAE,CAAC,IAAI,EACV,CAAC,GAAG,EAAE,EAAE;QACN,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAE1B,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,2BAA2B;QAC3B,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAE1B,OAAO,KAAK,CAAA;IACd,CAAC,CACF,CAAA;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,CAAA;IAEjB,MAAM,WAAW,GAAG,IAAI,SAAS,CAAC;QAChC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ;YACjC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YACpC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACvB,CAAC;QACD,KAAK,CAAC,QAAQ;YACZ,gEAAgE;YAChE,aAAa,CAAC,GAAG,EAAE,CAAA;YACnB,sEAAsE;YACtE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAChC,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,QAAQ;YACnB,kBAAkB,CAAC,KAAK,EAAE,CAAA,CAAC,2CAA2C;YACtE,QAAQ,CAAC,GAAG,CAAC,CAAA;QACf,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK;QACzB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;AACpD,CAAC","sourcesContent":["import { type Duplex, Transform, type Writable } from 'node:stream'\nimport { pipeline } from 'node:stream/promises'\nimport createError, { isHttpError } from 'http-errors'\nimport type { Dispatcher } from 'undici'\nimport {\n  VerifyCidError,\n  VerifyCidTransform,\n  createDecoders,\n} from '@atproto/common'\nimport { type AtprotoDid, isAtprotoDid } from '@atproto/did'\nimport type { Cid } from '@atproto/lex'\nimport {\n  ACCEPT_ENCODING_COMPRESSED,\n  ACCEPT_ENCODING_UNCOMPRESSED,\n  buildProxiedContentEncoding,\n  formatAcceptHeader,\n} from '@atproto-labs/xrpc-utils'\nimport type { ServerConfig } from '../config.js'\nimport type { AppContext } from '../context.js'\nimport {\n  Code,\n  type DataPlaneClient,\n  getServiceEndpoint,\n  isDataplaneError,\n  unpackIdentityServices,\n} from '../data-plane/index.js'\nimport { parseCid } from '../hydration/util.js'\nimport { httpLogger as log } from '../logger.js'\nimport {\n  type Middleware,\n  proxyResponseHeaders,\n  responseSignal,\n} from '../util/http.js'\nimport { BSKY_USER_AGENT } from './util.js'\n\nexport function createMiddleware(ctx: AppContext): Middleware {\n  return async (req, res, next) => {\n    if (req.method !== 'GET' && req.method !== 'HEAD') return next()\n    if (!req.url?.startsWith('/blob/')) return next()\n    const { length, 2: didParam, 3: cidParam } = req.url.split('/')\n    if (length !== 4 || !didParam || !cidParam) return next()\n\n    // @TODO Check sec-fetch-* headers (e.g. to prevent files from being\n    // displayed as a web page) ?\n\n    try {\n      const streamOptions: StreamBlobOptions = {\n        did: didParam,\n        cid: cidParam,\n        signal: responseSignal(res),\n        // Because we will be verifying the CID, we need to ensure that the\n        // upstream response can be de-compressed. We do this by negotiating the\n        // \"accept-encoding\" header based on the downstream client's capabilities.\n        acceptEncoding: buildProxiedContentEncoding(\n          req.headers['accept-encoding'],\n          ctx.cfg.proxyPreferCompressed,\n        ),\n      }\n\n      await streamBlob(ctx, streamOptions, (upstream, { cid, did, url }) => {\n        const encoding = upstream.headers['content-encoding']\n        const verifier = createCidVerifier(cid, encoding)\n\n        const logError = (err: unknown) => {\n          log.warn(\n            { err, did, cid: cid.toString(), pds: url.origin },\n            'blob resolution failed during transmission',\n          )\n        }\n\n        const onError = (err: unknown) => {\n          // No need to pipe the data (verifier) into the response, as it is\n          // \"errored\". The response processing will continue in the \"catch\"\n          // block below (because streamBlob() will reject the promise in case\n          // of \"error\" event on the writable stream returned by the factory).\n          clearTimeout(graceTimer)\n          logError(err)\n        }\n\n        // Catch any error that occurs before the timer bellow is triggered.\n        // The promise returned by streamBlob() will be rejected as soon as\n        // the verifier errors.\n        verifier.on('error', onError)\n\n        // The way I/O work, it is likely that, in case of small payloads, the\n        // full upstream response is already buffered at this point. In order to\n        // return a 404 instead of a broken response stream, we allow the event\n        // loop to to process any pending I/O events before we start piping the\n        // bytes to the response. For larger payloads, the response will look\n        // like a 200 with a broken chunked response stream. The only way around\n        // that would be to buffer the entire response before piping it to the\n        // response, which will hurt latency (need the full payload) and memory\n        // usage (either RAM or DISK). Since this is more of an edge case, we\n        // allow the broken response stream to be sent.\n        const graceTimer = setTimeout(() => {\n          verifier.off('error', onError)\n\n          // Make sure that the content served from the bsky api domain cannot\n          // be used to perform XSS attacks (by serving HTML pages)\n          res.setHeader(\n            'Content-Security-Policy',\n            `default-src 'none'; sandbox`,\n          )\n          res.setHeader('X-Content-Type-Options', 'nosniff')\n          res.setHeader('X-Frame-Options', 'DENY')\n          res.setHeader('X-XSS-Protection', '0')\n\n          // @TODO Add a cache-control header ?\n          // @TODO Add content-disposition header (to force download) ?\n\n          proxyResponseHeaders(upstream, res)\n\n          // Force chunked encoding. This is required because the verifier will\n          // trigger an error *after* the last chunk has been passed through.\n          // Because the number of bytes sent will match the content-length, the\n          // HTTP response will be considered \"complete\" by the HTTP server. At\n          // this point, only trailers headers could indicate that an error\n          // occurred, but that is not the behavior we expect.\n          res.removeHeader('content-length')\n\n          // From this point on, triggering the next middleware (including any\n          // error handler) can be problematic because content-type,\n          // content-encoding, etc. headers have already been set. Because of\n          // this, we make sure that res.headersSent is set to true, preventing\n          // another error handler middleware from being called (from the catch\n          // block bellow). Not flushing the headers here would require to\n          // revert the headers set from this middleware (which we don't do for\n          // now).\n          res.flushHeaders()\n\n          // Pipe the verifier output into the HTTP response\n          void pipeline([verifier, res]).catch(logError)\n        }, 10) // 0 works too. Allow for additional data to come in for 10ms.\n\n        // Write the upstream response into the verifier.\n        return verifier\n      })\n    } catch (err) {\n      if (res.headersSent || res.destroyed) {\n        res.destroy()\n      } else if (err instanceof VerifyCidError) {\n        // @NOTE This only works because of the graceTimer above. It will also\n        // only be triggered for small payloads.\n        next(createError(404, err.message))\n      } else if (isHttpError(err)) {\n        next(err)\n      } else {\n        next(createError(502, 'Upstream Error', { cause: err }))\n      }\n    }\n  }\n}\n\nexport type StreamBlobOptions = {\n  cid: string\n  did: string\n  acceptEncoding?: string\n  signal?: AbortSignal\n}\n\nexport type StreamBlobFactory = (\n  data: Dispatcher.StreamFactoryData,\n  info: {\n    url: URL\n    did: AtprotoDid\n    cid: Cid\n  },\n) => Writable\n\nexport async function streamBlob(\n  ctx: AppContext,\n  options: StreamBlobOptions,\n  factory: StreamBlobFactory,\n) {\n  const { did, cid } = parseBlobParams(options)\n  const url = await getBlobUrl(ctx.dataplane, did, cid)\n\n  const headers = getBlobHeaders(ctx.cfg, url)\n\n  headers.set(\n    'accept-encoding',\n    options.acceptEncoding ||\n      formatAcceptHeader(\n        ctx.cfg.proxyPreferCompressed\n          ? ACCEPT_ENCODING_COMPRESSED\n          : ACCEPT_ENCODING_UNCOMPRESSED,\n      ),\n  )\n\n  let headersReceived = false\n\n  return ctx.blobDispatcher\n    .stream(\n      {\n        method: 'GET',\n        origin: url.origin,\n        path: url.pathname + url.search,\n        headers,\n        signal: options.signal,\n      },\n      (upstream) => {\n        headersReceived = true\n\n        if (upstream.statusCode !== 200) {\n          log.warn(\n            {\n              did,\n              cid: cid.toString(),\n              pds: url.origin,\n              status: upstream.statusCode,\n            },\n            `blob resolution failed upstream`,\n          )\n\n          throw upstream.statusCode >= 400 && upstream.statusCode < 500\n            ? createError(404, 'Blob not found', { cause: upstream }) // 4xx => 404\n            : createError(502, 'Upstream Error', { cause: upstream }) // !200 && !4xx => 502\n        }\n\n        return factory(upstream, { url, did, cid })\n      },\n    )\n    .catch((err) => {\n      // Is this a connection error, or a stream error ?\n      if (!headersReceived) {\n        // connection error, dns error, headers timeout, ...\n        log.warn(\n          { err, did, cid: cid.toString(), pds: url.origin },\n          'blob resolution failed during connection',\n        )\n\n        throw createError(502, 'Upstream Error', { cause: err })\n      }\n\n      throw err\n    })\n}\n\nfunction parseBlobParams(params: { cid: string; did: string }) {\n  const { cid, did } = params\n  if (!isAtprotoDid(did)) throw createError(400, 'Invalid did')\n  const cidObj = parseCid(cid)\n  if (!cidObj) throw createError(400, 'Invalid cid')\n  return { cid: cidObj, did }\n}\n\nasync function getBlobUrl(\n  dataplane: DataPlaneClient,\n  did: string,\n  cid: Cid,\n): Promise<URL> {\n  const pds = await getBlobPds(dataplane, did, cid)\n\n  const url = new URL(`/xrpc/com.atproto.sync.getBlob`, pds)\n  url.searchParams.set('did', did)\n  url.searchParams.set('cid', cid.toString())\n\n  return url\n}\n\nasync function getBlobPds(\n  dataplane: DataPlaneClient,\n  did: string,\n  cid: Cid,\n): Promise<string> {\n  const [identity, { takenDown }] = await Promise.all([\n    dataplane.getIdentityByDid({ did }).catch((err) => {\n      if (isDataplaneError(err, Code.NotFound)) {\n        return undefined\n      }\n      throw err\n    }),\n    dataplane.getBlobTakedown({ did, cid: cid.toString() }),\n  ])\n\n  if (takenDown) {\n    throw createError(404, 'Blob not found')\n  }\n\n  const services = identity && unpackIdentityServices(identity.services)\n  const pds =\n    services &&\n    getServiceEndpoint(services, {\n      id: 'atproto_pds',\n      type: 'AtprotoPersonalDataServer',\n    })\n\n  if (!pds) {\n    throw createError(404, 'Origin not found')\n  }\n\n  return pds\n}\n\nfunction getBlobHeaders(\n  {\n    blobRateLimitBypassKey: bypassKey,\n    blobRateLimitBypassHostname: bypassHostname,\n  }: ServerConfig,\n  url: URL,\n): Map<string, string> {\n  const headers = new Map<string, string>()\n\n  headers.set('user-agent', BSKY_USER_AGENT)\n\n  if (bypassKey && bypassHostname) {\n    const matchesUrl = bypassHostname.startsWith('.')\n      ? url.hostname.endsWith(bypassHostname)\n      : url.hostname === bypassHostname\n\n    if (matchesUrl) {\n      headers.set('x-ratelimit-bypass', bypassKey)\n    }\n  }\n\n  return headers\n}\n\n/**\n * This function creates a passthrough stream that will decompress (if needed)\n * and verify the CID of the input stream. The output data will be identical to\n * the input data.\n *\n * If you need the un-compressed data, you should use a decompress + verify\n * pipeline instead.\n */\nfunction createCidVerifier(cid: Cid, encoding?: string | string[]): Duplex {\n  // If the upstream content is compressed, we do not want to return a\n  // de-compressed stream here. Indeed, the \"compression\" middleware will\n  // compress the response before it is sent downstream, if it is not already\n  // compressed. Because of this, it is preferable to return the content as-is\n  // to avoid re-compressing it.\n  //\n  // We do still want to be able to verify the CID, which requires decompressing\n  // the input bytes.\n  //\n  // To that end, we create a passthrough in order to \"tee\" the stream into two\n  // streams: one that will be sent, unaltered, downstream, and a pipeline that\n  // will be used to decompress & verify the CID (discarding de-compressed\n  // data).\n\n  const decoders = createDecoders(encoding)\n  const verifier = new VerifyCidTransform(cid)\n\n  // Optimization: If the content is not compressed, we don't need to \"tee\" the\n  // stream, we can use the verifier as simple passthrough.\n  if (!decoders.length) return verifier\n\n  const pipelineController = new AbortController()\n  const pipelineStreams: Duplex[] = [...decoders, verifier]\n  const pipelineInput = pipelineStreams[0]!\n\n  // Create a promise that will resolve if, and only if, the decoding and\n  // verification succeed.\n  const pipelinePromise: Promise<null | Error> = pipeline(pipelineStreams, {\n    signal: pipelineController.signal,\n  }).then(\n    () => null,\n    (err) => {\n      const error = asError(err)\n\n      // the data being processed by the pipeline is invalid (e.g. invalid\n      // compressed content, non-matching the CID, ...). If that occurs, we can\n      // destroy the passthrough (this allows not to wait for the \"flush\" event\n      // to propagate the error).\n      passthrough.destroy(error)\n\n      return error\n    },\n  )\n\n  // We don't care about the un-compressed data, we only use the verifier to\n  // detect any error through the pipelinePromise. We still need to pass the\n  // verifier into flowing mode to ensure that the pipelinePromise resolves.\n  verifier.resume()\n\n  const passthrough = new Transform({\n    transform(chunk, encoding, callback) {\n      pipelineInput.write(chunk, encoding)\n      callback(null, chunk)\n    },\n    flush(callback) {\n      // End the input stream, which will resolve the pipeline promise\n      pipelineInput.end()\n      // End the pass-through stream according to the result of the pipeline\n      pipelinePromise.then(callback)\n    },\n    destroy(err, callback) {\n      pipelineController.abort() // Causes pipeline() to destroy all streams\n      callback(err)\n    },\n  })\n\n  return passthrough\n}\n\nfunction asError(err: unknown): Error {\n  return err instanceof Error\n    ? err\n    : new Error('Processing failed', { cause: err })\n}\n"]}

package/dist/api/com/atproto/admin/getAccountInfos.d.ts

@@ -1,4 +1,4 @@
-import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context.js';
+import type { Server } from '@atproto/xrpc-server';
+import type { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getAccountInfos.d.ts.map

package/dist/api/com/atproto/admin/getAccountInfos.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getAccountInfos.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/getAccountInfos.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA0CvD"}
+{"version":3,"file":"getAccountInfos.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/getAccountInfos.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGxD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA0CvD"}

package/dist/api/com/atproto/admin/getAccountInfos.js.map

@@ -1 +1 @@
-{"version":3,"file":"getAccountInfos.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/getAccountInfos.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAkB,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAGhE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE;QAC5C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,sBAAsB;QAC7C,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAA;YACvB,MAAM,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YAE9D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;gBACtD,gBAAgB,EAAE,IAAI;gBACtB,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAA;YAEF,MAAM,KAAK,GAAG,UAAU,CACtB,IAAI,EACJ,CAAC,GAAG,EAAkD,EAAE;gBACtD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC5B,IAAI,CAAC,IAAI;oBAAE,OAAM;gBACjB,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,gBAAgB;oBAAE,OAAM;gBACjD,MAAM,aAAa,GACjB,CAAC,IAAI,CAAC,kBAAkB,IAAI,gBAAgB;oBAC1C,CAAC,CAAC,IAAI,CAAC,OAAO;oBACd,CAAC,CAAC,SAAS,CAAA;gBAEf,OAAO;oBACL,GAAG;oBACH,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,cAAc;oBACrC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC3D,SAAS,EAAE,CACT,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAC7B,CAAC,WAAW,EAAoB;iBAClC,CAAA;YACH,CAAC,CACF,CAAA;YAED,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,KAAK;iBACN;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { mapDefined } from '@atproto/common'\nimport { DatetimeString, INVALID_HANDLE } from '@atproto/syntax'\nimport { Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.admin.getAccountInfos, {\n    auth: ctx.authVerifier.optionalStandardOrRole,\n    handler: async ({ params, auth }) => {\n      const { dids } = params\n      const { includeTakedowns } = ctx.authVerifier.parseCreds(auth)\n\n      const actors = await ctx.hydrator.actor.getActors(dids, {\n        includeTakedowns: true,\n        skipCacheForDids: dids,\n      })\n\n      const infos = mapDefined(\n        dids,\n        (did): com.atproto.admin.defs.AccountView | undefined => {\n          const info = actors.get(did)\n          if (!info) return\n          if (info.takedownRef && !includeTakedowns) return\n          const profileRecord =\n            !info.profileTakedownRef || includeTakedowns\n              ? info.profile\n              : undefined\n\n          return {\n            did,\n            handle: info.handle ?? INVALID_HANDLE,\n            relatedRecords: profileRecord ? [profileRecord] : undefined,\n            indexedAt: (\n              info.sortedAt ?? new Date(0)\n            ).toISOString() as DatetimeString,\n          }\n        },\n      )\n\n      return {\n        encoding: 'application/json',\n        body: {\n          infos,\n        },\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"getAccountInfos.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/getAccountInfos.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAuB,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAGrE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE;QAC5C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,sBAAsB;QAC7C,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAA;YACvB,MAAM,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YAE9D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;gBACtD,gBAAgB,EAAE,IAAI;gBACtB,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAA;YAEF,MAAM,KAAK,GAAG,UAAU,CACtB,IAAI,EACJ,CAAC,GAAG,EAAkD,EAAE;gBACtD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC5B,IAAI,CAAC,IAAI;oBAAE,OAAM;gBACjB,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,gBAAgB;oBAAE,OAAM;gBACjD,MAAM,aAAa,GACjB,CAAC,IAAI,CAAC,kBAAkB,IAAI,gBAAgB;oBAC1C,CAAC,CAAC,IAAI,CAAC,OAAO;oBACd,CAAC,CAAC,SAAS,CAAA;gBAEf,OAAO;oBACL,GAAG;oBACH,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,cAAc;oBACrC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC3D,SAAS,EAAE,CACT,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAC7B,CAAC,WAAW,EAAoB;iBAClC,CAAA;YACH,CAAC,CACF,CAAA;YAED,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,KAAK;iBACN;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { mapDefined } from '@atproto/common'\nimport { type DatetimeString, INVALID_HANDLE } from '@atproto/syntax'\nimport type { Server } from '@atproto/xrpc-server'\nimport type { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.admin.getAccountInfos, {\n    auth: ctx.authVerifier.optionalStandardOrRole,\n    handler: async ({ params, auth }) => {\n      const { dids } = params\n      const { includeTakedowns } = ctx.authVerifier.parseCreds(auth)\n\n      const actors = await ctx.hydrator.actor.getActors(dids, {\n        includeTakedowns: true,\n        skipCacheForDids: dids,\n      })\n\n      const infos = mapDefined(\n        dids,\n        (did): com.atproto.admin.defs.AccountView | undefined => {\n          const info = actors.get(did)\n          if (!info) return\n          if (info.takedownRef && !includeTakedowns) return\n          const profileRecord =\n            !info.profileTakedownRef || includeTakedowns\n              ? info.profile\n              : undefined\n\n          return {\n            did,\n            handle: info.handle ?? INVALID_HANDLE,\n            relatedRecords: profileRecord ? [profileRecord] : undefined,\n            indexedAt: (\n              info.sortedAt ?? new Date(0)\n            ).toISOString() as DatetimeString,\n          }\n        },\n      )\n\n      return {\n        encoding: 'application/json',\n        body: {\n          infos,\n        },\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/admin/getSubjectStatus.d.ts

@@ -1,4 +1,4 @@
-import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context.js';
+import { type Server } from '@atproto/xrpc-server';
+import type { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getSubjectStatus.d.ts.map

package/dist/api/com/atproto/admin/getSubjectStatus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getSubjectStatus.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/getSubjectStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA0EvD"}
+{"version":3,"file":"getSubjectStatus.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/getSubjectStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAA;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGxD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA0EvD"}

package/dist/api/com/atproto/admin/getSubjectStatus.js.map

@@ -1 +1 @@
-{"version":3,"file":"getSubjectStatus.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/getSubjectStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAU,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE;QAC7C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,gBAAgB;QACvC,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,CAAA;YAEjC,IAAI,IAAI,GAA0D,IAAI,CAAA;YACtE,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,IAAI,mBAAmB,CAC3B,0CAA0C,CAC3C,CAAA;gBACH,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC;oBAC9C,GAAG;oBACH,GAAG,EAAE,IAAI;iBACV,CAAC,CAAA;gBACF,IAAI,GAAG;oBACL,OAAO,EAAE;wBACP,KAAK,EAAE,oCAAoC;wBAC3C,GAAG,EAAE,GAAG;wBACR,GAAG,EAAE,IAAI;qBACV;oBACD,QAAQ,EAAE;wBACR,OAAO,EAAE,GAAG,CAAC,SAAS;wBACtB,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;qBAC9C;iBACF,CAAA;YACH,CAAC;iBAAM,IAAI,GAAG,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;gBACnD,IAAI,GAAG,EAAE,CAAC;oBACR,IAAI,GAAG;wBACL,OAAO,EAAE;4BACP,KAAK,EAAE,4BAA4B;4BACnC,GAAG;4BACH,GAAG,EAAE,GAAG,CAAC,GAAG;yBACb;wBACD,QAAQ,EAAE;4BACR,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW;4BAC1B,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;yBAClC;qBACF,CAAA;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,GAAG,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,CACV,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE;oBACxC,gBAAgB,EAAE,IAAI;oBACtB,gBAAgB,EAAE,CAAC,GAAG,CAAC;iBACxB,CAAC,CACH,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACV,IAAI,GAAG,EAAE,CAAC;oBACR,IAAI,GAAG;wBACL,OAAO,EAAE;4BACP,KAAK,EAAE,gCAAgC;4BACvC,GAAG,EAAE,GAAG;yBACT;wBACD,QAAQ,EAAE;4BACR,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW;4BAC1B,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;yBAClC;qBACF,CAAA;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,CAAC,CAAA;YACtD,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAA;YAChE,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI;aACL,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.admin.getSubjectStatus, {\n    auth: ctx.authVerifier.roleOrModService,\n    handler: async ({ params }) => {\n      const { did, uri, blob } = params\n\n      let body: com.atproto.admin.getSubjectStatus.$OutputBody | null = null\n      if (blob) {\n        if (!did) {\n          throw new InvalidRequestError(\n            'Must provide a did to request blob state',\n          )\n        }\n        const res = await ctx.dataplane.getBlobTakedown({\n          did,\n          cid: blob,\n        })\n        body = {\n          subject: {\n            $type: 'com.atproto.admin.defs#repoBlobRef',\n            did: did,\n            cid: blob,\n          },\n          takedown: {\n            applied: res.takenDown,\n            ref: res.takedownRef ? 'TAKEDOWN' : undefined,\n          },\n        }\n      } else if (uri) {\n        const res = await ctx.hydrator.getRecord(uri, true)\n        if (res) {\n          body = {\n            subject: {\n              $type: 'com.atproto.repo.strongRef',\n              uri,\n              cid: res.cid,\n            },\n            takedown: {\n              applied: !!res.takedownRef,\n              ref: res.takedownRef || undefined,\n            },\n          }\n        }\n      } else if (did) {\n        const res = (\n          await ctx.hydrator.actor.getActors([did], {\n            includeTakedowns: true,\n            skipCacheForDids: [did],\n          })\n        ).get(did)\n        if (res) {\n          body = {\n            subject: {\n              $type: 'com.atproto.admin.defs#repoRef',\n              did: did,\n            },\n            takedown: {\n              applied: !!res.takedownRef,\n              ref: res.takedownRef || undefined,\n            },\n          }\n        }\n      } else {\n        throw new InvalidRequestError('No provided subject')\n      }\n      if (body === null) {\n        throw new InvalidRequestError('Subject not found', 'NotFound')\n      }\n      return {\n        encoding: 'application/json',\n        body,\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"getSubjectStatus.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/getSubjectStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAe,MAAM,sBAAsB,CAAA;AAEvE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE;QAC7C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,gBAAgB;QACvC,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,CAAA;YAEjC,IAAI,IAAI,GAA0D,IAAI,CAAA;YACtE,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,IAAI,mBAAmB,CAC3B,0CAA0C,CAC3C,CAAA;gBACH,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC;oBAC9C,GAAG;oBACH,GAAG,EAAE,IAAI;iBACV,CAAC,CAAA;gBACF,IAAI,GAAG;oBACL,OAAO,EAAE;wBACP,KAAK,EAAE,oCAAoC;wBAC3C,GAAG,EAAE,GAAG;wBACR,GAAG,EAAE,IAAI;qBACV;oBACD,QAAQ,EAAE;wBACR,OAAO,EAAE,GAAG,CAAC,SAAS;wBACtB,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;qBAC9C;iBACF,CAAA;YACH,CAAC;iBAAM,IAAI,GAAG,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;gBACnD,IAAI,GAAG,EAAE,CAAC;oBACR,IAAI,GAAG;wBACL,OAAO,EAAE;4BACP,KAAK,EAAE,4BAA4B;4BACnC,GAAG;4BACH,GAAG,EAAE,GAAG,CAAC,GAAG;yBACb;wBACD,QAAQ,EAAE;4BACR,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW;4BAC1B,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;yBAClC;qBACF,CAAA;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,GAAG,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,CACV,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE;oBACxC,gBAAgB,EAAE,IAAI;oBACtB,gBAAgB,EAAE,CAAC,GAAG,CAAC;iBACxB,CAAC,CACH,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACV,IAAI,GAAG,EAAE,CAAC;oBACR,IAAI,GAAG;wBACL,OAAO,EAAE;4BACP,KAAK,EAAE,gCAAgC;4BACvC,GAAG,EAAE,GAAG;yBACT;wBACD,QAAQ,EAAE;4BACR,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW;4BAC1B,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;yBAClC;qBACF,CAAA;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,CAAC,CAAA;YACtD,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAA;YAChE,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI;aACL,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError, type Server } from '@atproto/xrpc-server'\nimport type { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.admin.getSubjectStatus, {\n    auth: ctx.authVerifier.roleOrModService,\n    handler: async ({ params }) => {\n      const { did, uri, blob } = params\n\n      let body: com.atproto.admin.getSubjectStatus.$OutputBody | null = null\n      if (blob) {\n        if (!did) {\n          throw new InvalidRequestError(\n            'Must provide a did to request blob state',\n          )\n        }\n        const res = await ctx.dataplane.getBlobTakedown({\n          did,\n          cid: blob,\n        })\n        body = {\n          subject: {\n            $type: 'com.atproto.admin.defs#repoBlobRef',\n            did: did,\n            cid: blob,\n          },\n          takedown: {\n            applied: res.takenDown,\n            ref: res.takedownRef ? 'TAKEDOWN' : undefined,\n          },\n        }\n      } else if (uri) {\n        const res = await ctx.hydrator.getRecord(uri, true)\n        if (res) {\n          body = {\n            subject: {\n              $type: 'com.atproto.repo.strongRef',\n              uri,\n              cid: res.cid,\n            },\n            takedown: {\n              applied: !!res.takedownRef,\n              ref: res.takedownRef || undefined,\n            },\n          }\n        }\n      } else if (did) {\n        const res = (\n          await ctx.hydrator.actor.getActors([did], {\n            includeTakedowns: true,\n            skipCacheForDids: [did],\n          })\n        ).get(did)\n        if (res) {\n          body = {\n            subject: {\n              $type: 'com.atproto.admin.defs#repoRef',\n              did: did,\n            },\n            takedown: {\n              applied: !!res.takedownRef,\n              ref: res.takedownRef || undefined,\n            },\n          }\n        }\n      } else {\n        throw new InvalidRequestError('No provided subject')\n      }\n      if (body === null) {\n        throw new InvalidRequestError('Subject not found', 'NotFound')\n      }\n      return {\n        encoding: 'application/json',\n        body,\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/admin/updateSubjectStatus.d.ts

@@ -1,4 +1,4 @@
-import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context.js';
+import { type Server } from '@atproto/xrpc-server';
+import type { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=updateSubjectStatus.d.ts.map

package/dist/api/com/atproto/admin/updateSubjectStatus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updateSubjectStatus.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/updateSubjectStatus.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,MAAM,EACP,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAsEvD"}
+{"version":3,"file":"updateSubjectStatus.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/updateSubjectStatus.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,MAAM,EACZ,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGxD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAsEvD"}

package/dist/api/com/atproto/admin/updateSubjectStatus.js.map

@@ -1 +1 @@
-{"version":3,"file":"updateSubjectStatus.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/updateSubjectStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GAEpB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE;QAChD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,gBAAgB;QACvC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;YACjC,MAAM,EAAE,kBAAkB,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YAChE,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,MAAM,IAAI,iBAAiB,CACzB,kDAAkD,CACnD,CAAA;YACH,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YACtB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YACxC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;wBACrB,MAAM,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC;4BAChC,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,GAAG,EAAE,QAAQ,CAAC,GAAG;4BACjB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC;4BAClC,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;qBAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;wBACrB,MAAM,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;4BACjC,SAAS,EAAE,OAAO,CAAC,GAAG;4BACtB,GAAG,EAAE,QAAQ,CAAC,GAAG;4BACjB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC;4BACnC,SAAS,EAAE,OAAO,CAAC,GAAG;4BACtB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;qBAAM,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;wBACrB,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC;4BAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,GAAG,EAAE,QAAQ,CAAC,GAAG;4BACjB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;4BACjC,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,mBAAmB,CAC3B,yBAAyB,OAAO,CAAC,KAAK,EAAE,CACzC,CAAA;gBACH,CAAC;YACH,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,OAAO;oBACP,QAAQ;iBACT;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { Timestamp } from '@bufbuild/protobuf'\nimport {\n  AuthRequiredError,\n  InvalidRequestError,\n  Server,\n} from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.admin.updateSubjectStatus, {\n    auth: ctx.authVerifier.roleOrModService,\n    handler: async ({ input, auth }) => {\n      const { canPerformTakedown } = ctx.authVerifier.parseCreds(auth)\n      if (!canPerformTakedown) {\n        throw new AuthRequiredError(\n          'Must be a full moderator to update subject state',\n        )\n      }\n      const now = new Date()\n      const { subject, takedown } = input.body\n      if (takedown) {\n        if (com.atproto.admin.defs.repoRef.$isTypeOf(subject)) {\n          if (takedown.applied) {\n            await ctx.dataplane.takedownActor({\n              did: subject.did,\n              ref: takedown.ref,\n              seen: Timestamp.fromDate(now),\n            })\n          } else {\n            await ctx.dataplane.untakedownActor({\n              did: subject.did,\n              seen: Timestamp.fromDate(now),\n            })\n          }\n        } else if (com.atproto.repo.strongRef.$isTypeOf(subject)) {\n          if (takedown.applied) {\n            await ctx.dataplane.takedownRecord({\n              recordUri: subject.uri,\n              ref: takedown.ref,\n              seen: Timestamp.fromDate(now),\n            })\n          } else {\n            await ctx.dataplane.untakedownRecord({\n              recordUri: subject.uri,\n              seen: Timestamp.fromDate(now),\n            })\n          }\n        } else if (com.atproto.admin.defs.repoBlobRef.$isTypeOf(subject)) {\n          if (takedown.applied) {\n            await ctx.dataplane.takedownBlob({\n              did: subject.did,\n              cid: subject.cid,\n              ref: takedown.ref,\n              seen: Timestamp.fromDate(now),\n            })\n          } else {\n            await ctx.dataplane.untakedownBlob({\n              did: subject.did,\n              cid: subject.cid,\n              seen: Timestamp.fromDate(now),\n            })\n          }\n        } else {\n          throw new InvalidRequestError(\n            `Invalid subject type: ${subject.$type}`,\n          )\n        }\n      }\n\n      return {\n        encoding: 'application/json',\n        body: {\n          subject,\n          takedown,\n        },\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"updateSubjectStatus.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/updateSubjectStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GAEpB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE;QAChD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,gBAAgB;QACvC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;YACjC,MAAM,EAAE,kBAAkB,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YAChE,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,MAAM,IAAI,iBAAiB,CACzB,kDAAkD,CACnD,CAAA;YACH,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YACtB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YACxC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;wBACrB,MAAM,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC;4BAChC,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,GAAG,EAAE,QAAQ,CAAC,GAAG;4BACjB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC;4BAClC,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;qBAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;wBACrB,MAAM,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;4BACjC,SAAS,EAAE,OAAO,CAAC,GAAG;4BACtB,GAAG,EAAE,QAAQ,CAAC,GAAG;4BACjB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC;4BACnC,SAAS,EAAE,OAAO,CAAC,GAAG;4BACtB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;qBAAM,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;wBACrB,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC;4BAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,GAAG,EAAE,QAAQ,CAAC,GAAG;4BACjB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;4BACjC,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;yBAC9B,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,mBAAmB,CAC3B,yBAAyB,OAAO,CAAC,KAAK,EAAE,CACzC,CAAA;gBACH,CAAC;YACH,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,OAAO;oBACP,QAAQ;iBACT;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { Timestamp } from '@bufbuild/protobuf'\nimport {\n  AuthRequiredError,\n  InvalidRequestError,\n  type Server,\n} from '@atproto/xrpc-server'\nimport type { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.admin.updateSubjectStatus, {\n    auth: ctx.authVerifier.roleOrModService,\n    handler: async ({ input, auth }) => {\n      const { canPerformTakedown } = ctx.authVerifier.parseCreds(auth)\n      if (!canPerformTakedown) {\n        throw new AuthRequiredError(\n          'Must be a full moderator to update subject state',\n        )\n      }\n      const now = new Date()\n      const { subject, takedown } = input.body\n      if (takedown) {\n        if (com.atproto.admin.defs.repoRef.$isTypeOf(subject)) {\n          if (takedown.applied) {\n            await ctx.dataplane.takedownActor({\n              did: subject.did,\n              ref: takedown.ref,\n              seen: Timestamp.fromDate(now),\n            })\n          } else {\n            await ctx.dataplane.untakedownActor({\n              did: subject.did,\n              seen: Timestamp.fromDate(now),\n            })\n          }\n        } else if (com.atproto.repo.strongRef.$isTypeOf(subject)) {\n          if (takedown.applied) {\n            await ctx.dataplane.takedownRecord({\n              recordUri: subject.uri,\n              ref: takedown.ref,\n              seen: Timestamp.fromDate(now),\n            })\n          } else {\n            await ctx.dataplane.untakedownRecord({\n              recordUri: subject.uri,\n              seen: Timestamp.fromDate(now),\n            })\n          }\n        } else if (com.atproto.admin.defs.repoBlobRef.$isTypeOf(subject)) {\n          if (takedown.applied) {\n            await ctx.dataplane.takedownBlob({\n              did: subject.did,\n              cid: subject.cid,\n              ref: takedown.ref,\n              seen: Timestamp.fromDate(now),\n            })\n          } else {\n            await ctx.dataplane.untakedownBlob({\n              did: subject.did,\n              cid: subject.cid,\n              seen: Timestamp.fromDate(now),\n            })\n          }\n        } else {\n          throw new InvalidRequestError(\n            `Invalid subject type: ${subject.$type}`,\n          )\n        }\n      }\n\n      return {\n        encoding: 'application/json',\n        body: {\n          subject,\n          takedown,\n        },\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/identity/resolveHandle.d.ts

@@ -1,4 +1,4 @@
-import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context.js';
+import { type Server } from '@atproto/xrpc-server';
+import type { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=resolveHandle.d.ts.map

package/dist/api/com/atproto/identity/resolveHandle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolveHandle.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/resolveHandle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAcvD"}
+{"version":3,"file":"resolveHandle.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/resolveHandle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAA;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGxD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAcvD"}

package/dist/api/com/atproto/identity/resolveHandle.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolveHandle.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/resolveHandle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAU,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAClE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YAC9D,oBAAoB,EAAE,IAAI;SAC3B,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,EAAE,GAAG,EAAE;SACd,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.identity.resolveHandle, async ({ params }) => {\n    const [did] = await ctx.hydrator.actor.getDids([params.handle], {\n      lookupUnidirectional: true,\n    })\n    if (!did) {\n      throw new InvalidRequestError('Unable to resolve handle')\n    }\n\n    return {\n      encoding: 'application/json',\n      body: { did },\n    }\n  })\n}\n"]}
+{"version":3,"file":"resolveHandle.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/resolveHandle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAe,MAAM,sBAAsB,CAAA;AAEvE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAClE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YAC9D,oBAAoB,EAAE,IAAI;SAC3B,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,EAAE,GAAG,EAAE;SACd,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError, type Server } from '@atproto/xrpc-server'\nimport type { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.identity.resolveHandle, async ({ params }) => {\n    const [did] = await ctx.hydrator.actor.getDids([params.handle], {\n      lookupUnidirectional: true,\n    })\n    if (!did) {\n      throw new InvalidRequestError('Unable to resolve handle')\n    }\n\n    return {\n      encoding: 'application/json',\n      body: { did },\n    }\n  })\n}\n"]}

package/dist/api/com/atproto/label/queryLabels.d.ts

@@ -1,4 +1,4 @@
-import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context.js';
+import { type Server } from '@atproto/xrpc-server';
+import type { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=queryLabels.d.ts.map

package/dist/api/com/atproto/label/queryLabels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queryLabels.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/label/queryLabels.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAgCvD"}
+{"version":3,"file":"queryLabels.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/label/queryLabels.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAA;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGxD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAgCvD"}

package/dist/api/com/atproto/label/queryLabels.js.map

@@ -1 +1 @@
-{"version":3,"file":"queryLabels.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/label/queryLabels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,mBAAmB,EAAU,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC7D,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;QAEvC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,CAAC,CAAA;QAC3D,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,CAAA;QAC1D,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,CAAC,CAAA;QACtD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAC5D,WAAW;QACX,yFAAyF;QACzF;YACE,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,IAAI,GAAG,EAAE;SAClB,CACF,CAAA;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAEvE,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,EAAE,MAAM,EAAE;SACjB,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC","sourcesContent":["import { isUriString } from '@atproto/lex'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.label.queryLabels, async ({ params }) => {\n    const { uriPatterns, sources } = params\n\n    if (!sources?.length) {\n      throw new InvalidRequestError('source dids are required')\n    }\n\n    if (uriPatterns.some(includesWildcard)) {\n      throw new InvalidRequestError('wildcards not supported')\n    }\n\n    // @TODO Should this be enforced at the schema level?\n    if (!uriPatterns.every(isUriString)) {\n      throw new InvalidRequestError('invalid uri pattern')\n    }\n\n    const labelMap = await ctx.hydrator.label.getLabelsForSubjects(\n      uriPatterns,\n      // If sources are provided, use them. Otherwise, use the labelers from the request header\n      {\n        dids: sources,\n        redact: new Set(),\n      },\n    )\n    const labels = uriPatterns.flatMap((sub) => labelMap.getBySubject(sub))\n\n    return {\n      encoding: 'application/json',\n      body: { labels },\n    }\n  })\n}\n\nfunction includesWildcard(str: string) {\n  return str.includes('*')\n}\n"]}
+{"version":3,"file":"queryLabels.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/label/queryLabels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,mBAAmB,EAAe,MAAM,sBAAsB,CAAA;AAEvE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC7D,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;QAEvC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,CAAC,CAAA;QAC3D,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,CAAA;QAC1D,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,CAAC,CAAA;QACtD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAC5D,WAAW;QACX,yFAAyF;QACzF;YACE,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,IAAI,GAAG,EAAE;SAClB,CACF,CAAA;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAEvE,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,EAAE,MAAM,EAAE;SACjB,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC","sourcesContent":["import { isUriString } from '@atproto/lex'\nimport { InvalidRequestError, type Server } from '@atproto/xrpc-server'\nimport type { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.label.queryLabels, async ({ params }) => {\n    const { uriPatterns, sources } = params\n\n    if (!sources?.length) {\n      throw new InvalidRequestError('source dids are required')\n    }\n\n    if (uriPatterns.some(includesWildcard)) {\n      throw new InvalidRequestError('wildcards not supported')\n    }\n\n    // @TODO Should this be enforced at the schema level?\n    if (!uriPatterns.every(isUriString)) {\n      throw new InvalidRequestError('invalid uri pattern')\n    }\n\n    const labelMap = await ctx.hydrator.label.getLabelsForSubjects(\n      uriPatterns,\n      // If sources are provided, use them. Otherwise, use the labelers from the request header\n      {\n        dids: sources,\n        redact: new Set(),\n      },\n    )\n    const labels = uriPatterns.flatMap((sub) => labelMap.getBySubject(sub))\n\n    return {\n      encoding: 'application/json',\n      body: { labels },\n    }\n  })\n}\n\nfunction includesWildcard(str: string) {\n  return str.includes('*')\n}\n"]}

package/dist/api/com/atproto/repo/getRecord.d.ts

@@ -1,4 +1,4 @@
-import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context.js';
+import { type Server } from '@atproto/xrpc-server';
+import type { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getRecord.d.ts.map

package/dist/api/com/atproto/repo/getRecord.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getRecord.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/repo/getRecord.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAsCvD"}
+{"version":3,"file":"getRecord.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/repo/getRecord.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAA;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGxD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAsCvD"}

package/dist/api/com/atproto/repo/getRecord.js.map

@@ -1 +1 @@
-{"version":3,"file":"getRecord.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/repo/getRecord.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AACpC,OAAO,EAAE,mBAAmB,EAAU,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;QACrC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,sBAAsB;QAC7C,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YAC9C,MAAM,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YAC9D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YACtD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAA;YAC/D,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE;gBACvD,gBAAgB;aACjB,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAA;YAC/D,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;YACxC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;YAElE,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,mBAAmB,CAC3B,4BAA4B,GAAG,EAAE,EACjC,gBAAgB,CACjB,CAAA;YACH,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,kBAA2B;gBACrC,IAAI,EAAE;oBACJ,GAAG,EAAE,GAAG;oBACR,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,KAAK,EAAE,MAAM,CAAC,MAAM;iBACrB;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { atUri } from '@atproto/lex'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.repo.getRecord, {\n    auth: ctx.authVerifier.optionalStandardOrRole,\n    handler: async ({ auth, params }) => {\n      const { repo, collection, rkey, cid } = params\n      const { includeTakedowns } = ctx.authVerifier.parseCreds(auth)\n      const [did] = await ctx.hydrator.actor.getDids([repo])\n      if (!did) {\n        throw new InvalidRequestError(`Could not find repo: ${repo}`)\n      }\n\n      const actors = await ctx.hydrator.actor.getActors([did], {\n        includeTakedowns,\n      })\n      if (!actors.get(did)) {\n        throw new InvalidRequestError(`Could not find repo: ${repo}`)\n      }\n\n      const uri = atUri(did, collection, rkey)\n      const result = await ctx.hydrator.getRecord(uri, includeTakedowns)\n\n      if (!result || (cid && result.cid !== cid)) {\n        throw new InvalidRequestError(\n          `Could not locate record: ${uri}`,\n          'RecordNotFound',\n        )\n      }\n\n      return {\n        encoding: 'application/json' as const,\n        body: {\n          uri: uri,\n          cid: result.cid,\n          value: result.record,\n        },\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"getRecord.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/repo/getRecord.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AACpC,OAAO,EAAE,mBAAmB,EAAe,MAAM,sBAAsB,CAAA;AAEvE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;QACrC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,sBAAsB;QAC7C,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YAC9C,MAAM,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YAC9D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YACtD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAA;YAC/D,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE;gBACvD,gBAAgB;aACjB,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAA;YAC/D,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;YACxC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;YAElE,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,mBAAmB,CAC3B,4BAA4B,GAAG,EAAE,EACjC,gBAAgB,CACjB,CAAA;YACH,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,kBAA2B;gBACrC,IAAI,EAAE;oBACJ,GAAG,EAAE,GAAG;oBACR,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,KAAK,EAAE,MAAM,CAAC,MAAM;iBACrB;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { atUri } from '@atproto/lex'\nimport { InvalidRequestError, type Server } from '@atproto/xrpc-server'\nimport type { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.repo.getRecord, {\n    auth: ctx.authVerifier.optionalStandardOrRole,\n    handler: async ({ auth, params }) => {\n      const { repo, collection, rkey, cid } = params\n      const { includeTakedowns } = ctx.authVerifier.parseCreds(auth)\n      const [did] = await ctx.hydrator.actor.getDids([repo])\n      if (!did) {\n        throw new InvalidRequestError(`Could not find repo: ${repo}`)\n      }\n\n      const actors = await ctx.hydrator.actor.getActors([did], {\n        includeTakedowns,\n      })\n      if (!actors.get(did)) {\n        throw new InvalidRequestError(`Could not find repo: ${repo}`)\n      }\n\n      const uri = atUri(did, collection, rkey)\n      const result = await ctx.hydrator.getRecord(uri, includeTakedowns)\n\n      if (!result || (cid && result.cid !== cid)) {\n        throw new InvalidRequestError(\n          `Could not locate record: ${uri}`,\n          'RecordNotFound',\n        )\n      }\n\n      return {\n        encoding: 'application/json' as const,\n        body: {\n          uri: uri,\n          cid: result.cid,\n          value: result.record,\n        },\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/temp/fetchLabels.d.ts

@@ -1,4 +1,4 @@
-import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context.js';
+import { type Server } from '@atproto/xrpc-server';
+import type { AppContext } from '../../../../context.js';
 export default function (server: Server, _ctx: AppContext): void;
 //# sourceMappingURL=fetchLabels.d.ts.map

package/dist/api/com/atproto/temp/fetchLabels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetchLabels.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/fetchLabels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,QAIxD"}
+{"version":3,"file":"fetchLabels.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/fetchLabels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAA;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGxD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,QAIxD"}

package/dist/api/com/atproto/temp/fetchLabels.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetchLabels.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/fetchLabels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAU,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,IAAgB;IACvD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzD,MAAM,IAAI,mBAAmB,CAAC,8BAA8B,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, _ctx: AppContext) {\n  server.add(com.atproto.temp.fetchLabels, async (_reqCtx) => {\n    throw new InvalidRequestError('not implemented on dataplane')\n  })\n}\n"]}
+{"version":3,"file":"fetchLabels.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/fetchLabels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAe,MAAM,sBAAsB,CAAA;AAEvE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,IAAgB;IACvD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzD,MAAM,IAAI,mBAAmB,CAAC,8BAA8B,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError, type Server } from '@atproto/xrpc-server'\nimport type { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, _ctx: AppContext) {\n  server.add(com.atproto.temp.fetchLabels, async (_reqCtx) => {\n    throw new InvalidRequestError('not implemented on dataplane')\n  })\n}\n"]}

package/dist/api/external.d.ts

@@ -1,4 +1,4 @@
 import { Router } from 'express';
-import { AppContext } from '../context.js';
+import type { AppContext } from '../context.js';
 export declare const createRouter: (ctx: AppContext) => Router;
 //# sourceMappingURL=external.d.ts.map

package/dist/api/external.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external.d.ts","sourceRoot":"","sources":["../../src/api/external.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAI1C,eAAO,MAAM,YAAY,QAAS,UAAU,KAAG,MAS9C,CAAA"}
+{"version":3,"file":"external.d.ts","sourceRoot":"","sources":["../../src/api/external.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAI/C,eAAO,MAAM,YAAY,QAAS,UAAU,KAAG,MAS9C,CAAA"}

package/dist/api/external.js.map

@@ -1 +1 @@
-{"version":3,"file":"external.js","sourceRoot":"","sources":["../../src/api/external.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAEhC,OAAO,KAAK,KAAK,MAAM,0BAA0B,CAAA;AACjD,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAA;AAExC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAe,EAAU,EAAE;IACtD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAA;IAEvB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAC5C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;IACrC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA","sourcesContent":["import { Router } from 'express'\nimport { AppContext } from '../context.js'\nimport * as aaApi from './age-assurance/index.js'\nimport * as kwsApi from './kws/index.js'\n\nexport const createRouter = (ctx: AppContext): Router => {\n  const router = Router()\n\n  if (ctx.kwsClient) {\n    router.use('/kws', kwsApi.createRouter(ctx))\n    router.use(aaApi.createRouter(ctx))\n  }\n\n  return router\n}\n"]}
+{"version":3,"file":"external.js","sourceRoot":"","sources":["../../src/api/external.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAEhC,OAAO,KAAK,KAAK,MAAM,0BAA0B,CAAA;AACjD,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAA;AAExC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAe,EAAU,EAAE;IACtD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAA;IAEvB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAC5C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;IACrC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA","sourcesContent":["import { Router } from 'express'\nimport type { AppContext } from '../context.js'\nimport * as aaApi from './age-assurance/index.js'\nimport * as kwsApi from './kws/index.js'\n\nexport const createRouter = (ctx: AppContext): Router => {\n  const router = Router()\n\n  if (ctx.kwsClient) {\n    router.use('/kws', kwsApi.createRouter(ctx))\n    router.use(aaApi.createRouter(ctx))\n  }\n\n  return router\n}\n"]}

package/dist/api/health.d.ts

@@ -1,4 +1,4 @@
 import { Router } from 'express';
-import { AppContext } from '../context.js';
+import type { AppContext } from '../context.js';
 export declare const createRouter: (ctx: AppContext) => Router;
 //# sourceMappingURL=health.d.ts.map

package/dist/api/health.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/api/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAE1C,eAAO,MAAM,YAAY,QAAS,UAAU,KAAG,MA2C9C,CAAA"}
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/api/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAE/C,eAAO,MAAM,YAAY,QAAS,UAAU,KAAG,MA2C9C,CAAA"}

package/dist/api/health.js.map

@@ -1 +1 @@
-{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/api/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAGhC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAe,EAAU,EAAE;IACtD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAA;IAEvB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,EAAE,GAAG;QAChC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACtB,GAAG,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;CAgBZ,CAAC,CAAA;IACA,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,GAAG,EAAE,GAAG;QAC1C,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACtB,GAAG,CAAC,IAAI,CACN,iNAAiN,CAClN,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,WAAW,GAAG,EAAE,GAAG;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,GAAG,CAAA;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,qBAAqB,CAAC,CAAA;YAC7C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAA;QACxE,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC,CAAA","sourcesContent":["import { Router } from 'express'\nimport { AppContext } from '../context.js'\n\nexport const createRouter = (ctx: AppContext): Router => {\n  const router = Router()\n\n  router.get('/', function (req, res) {\n    res.type('text/plain')\n    res.send(`\n  _         _\n | |       | |\n | |__  ___| | ___   _\n | '_ \\\\/ __| |/ / | | |\n | |_) \\\\__ \\\\   <| |_| |\n |_.__/|___/_|\\\\_\\\\\\\\__, |\n                  __/ |\n                 |___/\n\nThis is an AT Protocol Application View (AppView) for the \"bsky.app\" application.\n\nMost API routes are under /xrpc/\n\n      Code: https://github.com/bluesky-social/atproto\n  Protocol: https://atproto.com\n`)\n  })\n\n  router.get('/robots.txt', function (req, res) {\n    res.type('text/plain')\n    res.send(\n      '# Hello Friends!\\n\\n# Crawling the public parts of the API is allowed. HTTP 429 (\"backoff\") status codes are used for rate-limiting. Up to a handful concurrent requests should be ok.\\nUser-agent: *\\nAllow: /',\n    )\n  })\n\n  router.get('/xrpc/_health', async function (req, res) {\n    const { version } = ctx.cfg\n    try {\n      await ctx.dataplane.ping({})\n    } catch (err) {\n      req.log.error({ err }, 'failed health check')\n      return res.status(503).send({ version, error: 'Service Unavailable' })\n    }\n    res.send({ version })\n  })\n\n  return router\n}\n"]}
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/api/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAGhC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAe,EAAU,EAAE;IACtD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAA;IAEvB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,EAAE,GAAG;QAChC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACtB,GAAG,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;CAgBZ,CAAC,CAAA;IACA,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,GAAG,EAAE,GAAG;QAC1C,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACtB,GAAG,CAAC,IAAI,CACN,iNAAiN,CAClN,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,WAAW,GAAG,EAAE,GAAG;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,GAAG,CAAA;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,qBAAqB,CAAC,CAAA;YAC7C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAA;QACxE,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC,CAAA","sourcesContent":["import { Router } from 'express'\nimport type { AppContext } from '../context.js'\n\nexport const createRouter = (ctx: AppContext): Router => {\n  const router = Router()\n\n  router.get('/', function (req, res) {\n    res.type('text/plain')\n    res.send(`\n  _         _\n | |       | |\n | |__  ___| | ___   _\n | '_ \\\\/ __| |/ / | | |\n | |_) \\\\__ \\\\   <| |_| |\n |_.__/|___/_|\\\\_\\\\\\\\__, |\n                  __/ |\n                 |___/\n\nThis is an AT Protocol Application View (AppView) for the \"bsky.app\" application.\n\nMost API routes are under /xrpc/\n\n      Code: https://github.com/bluesky-social/atproto\n  Protocol: https://atproto.com\n`)\n  })\n\n  router.get('/robots.txt', function (req, res) {\n    res.type('text/plain')\n    res.send(\n      '# Hello Friends!\\n\\n# Crawling the public parts of the API is allowed. HTTP 429 (\"backoff\") status codes are used for rate-limiting. Up to a handful concurrent requests should be ok.\\nUser-agent: *\\nAllow: /',\n    )\n  })\n\n  router.get('/xrpc/_health', async function (req, res) {\n    const { version } = ctx.cfg\n    try {\n      await ctx.dataplane.ping({})\n    } catch (err) {\n      req.log.error({ err }, 'failed health check')\n      return res.status(503).send({ version, error: 'Service Unavailable' })\n    }\n    res.send({ version })\n  })\n\n  return router\n}\n"]}

package/dist/api/index.d.ts

@@ -1,5 +1,5 @@
-import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../context.js';
+import type { Server } from '@atproto/xrpc-server';
+import type { AppContext } from '../context.js';
 export * as health from './health.js';
 export * as wellKnown from './well-known.js';
 export * as blobResolver from './blob-resolver.js';

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAqG1C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAE5C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAElD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AAEvC,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAuGvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAqG/C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAE5C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAElD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AAEvC,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAuGvD"}