@atproto/bsky 0.0.274 → 0.0.275

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @atproto/bsky
 
+## 0.0.275
+
+### Patch Changes
+
+- [#5350](https://github.com/bluesky-social/atproto/pull/5350) [`1f3f67c`](https://github.com/bluesky-social/atproto/commit/1f3f67c4b5bac19cc226b24f55d90ffd431d0d72) Thanks [@mary-ext](https://github.com/mary-ext)! - Remove the `maxGraphemes` and `maxLength` constraints from the `alt` field of `app.bsky.embed.video`, matching `app.bsky.embed.images`
+
+- [#5348](https://github.com/bluesky-social/atproto/pull/5348) [`5c3b7c9`](https://github.com/bluesky-social/atproto/commit/5c3b7c9c87efa4d48d41bc55af61f5b1f1e04920) Thanks [@dreyfus92](https://github.com/dreyfus92)! - Remove `key-encoder` dependency (and its `elliptic`/`asn1.js`/`bn.js` transitive tree) in favor of Node's native JWK key import and the already-present `@noble/curves`
+
+- Updated dependencies [[`1f3f67c`](https://github.com/bluesky-social/atproto/commit/1f3f67c4b5bac19cc226b24f55d90ffd431d0d72), [`5c3b7c9`](https://github.com/bluesky-social/atproto/commit/5c3b7c9c87efa4d48d41bc55af61f5b1f1e04920)]:
+  - @atproto/api@0.20.41
+  - @atproto/xrpc-server@0.12.5
+  - @atproto-labs/xrpc-utils@0.1.18
+  - @atproto/sync@0.4.5
+
 ## 0.0.274
 
 ### Patch Changes

package/dist/auth-verifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-verifier.d.ts","sourceRoot":"","sources":["../src/auth-verifier.ts"],"names":[],"mappings":"AAAA,OAAe,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAKlC,OAAO,EAAE,KAAK,SAAS,EAAe,MAAM,cAAc,CAAA;AAC1D,OAAO,EAEL,KAAK,wBAAwB,EAI9B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAEL,KAAK,eAAe,EAIrB,MAAM,uBAAuB,CAAA;AAM9B,KAAK,MAAM,GAAG;IACZ,GAAG,EAAE,OAAO,CAAC,OAAO,CAAA;CACrB,CAAA;AAED,KAAK,gBAAgB,GAAG;IACtB,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAA;CACxC,CAAA;AAED,oBAAY,UAAU;IACpB,KAAK,IAAA;IACL,OAAO,IAAA;IACP,OAAO,IAAA;CACR;AAED,KAAK,UAAU,GAAG;IAChB,WAAW,EAAE;QACX,IAAI,EAAE,MAAM,CAAA;QACZ,GAAG,EAAE,IAAI,CAAA;KACV,CAAA;CACF,CAAA;AAED,KAAK,cAAc,GAAG;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,UAAU,CAAA;QAChB,8FAA8F;QAC9F,GAAG,EAAE,MAAM,CAAA;QACX,GAAG,EAAE,SAAS,GAAG,GAAG,SAAS,IAAI,MAAM,EAAE,CAAA;KAC1C,CAAA;CACF,CAAA;AAED,KAAK,UAAU,GAAG;IAChB,WAAW,EAAE;QACX,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,OAAO,CAAA;KACf,CAAA;CACF,CAAA;AAED,KAAK,gBAAgB,GAAG;IACtB,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAA;QACnB,GAAG,EAAE,SAAS,CAAA;QACd,GAAG,EAAE,SAAS,GAAG,GAAG,SAAS,IAAI,MAAM,EAAE,CAAA;KAC1C,CAAA;CACF,CAAA;AAQD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,SAAS,CAAA;IACjB,qBAAqB,EAAE,SAAS,EAAE,CAAA;IAClC,aAAa,EAAE,SAAS,CAAA;IACxB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,oBAAoB,CAAC,EAAE,SAAS,CAAA;CACjC,CAAA;AAED,qBAAa,YAAY;IAQd,SAAS,EAAE,eAAe;IAP5B,MAAM,EAAE,SAAS,CAAA;IACjB,oBAAoB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;IACpC,aAAa,EAAE,SAAS,CAAA;IAC/B,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,oBAAoB,CAAC,CAAW;IAExC,YACS,SAAS,EAAE,eAAe,EACjC,IAAI,EAAE,gBAAgB,EAUvB;IAGD,6BAA6B,SACpB,gBAAgB,WACX,MAAM,KAAG,OAAO,CAAC,cAAc,GAAG,UAAU,CAAC,CAkDxD;IAEH,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,UAAU,CAAC,CAC/B;IAExC,QAAQ,QAAe,MAAM,KAAG,OAAO,CAAC,cAAc,CAAC,CAMtD;IAED,IAAI,QAAS,MAAM,KAAG,UAAU,CAW/B;IAED,cAAc,QACP,MAAM,KACV,OAAO,CAAC,cAAc,GAAG,UAAU,CAAC,CAMtC;IAED,sBAAsB,QACf,MAAM,KACV,OAAO,CAAC,cAAc,GAAG,UAAU,GAAG,UAAU,CAAC,CAkBnD;IAKD,eAAe,WAAkB,MAAM,KAAG,OAAO,CAAC,cAAc,CAAC,CAmDhE;IAED,UAAU,WAAkB,MAAM,KAAG,OAAO,CAAC,gBAAgB,CAAC,CAM7D;IAED,gBAAgB,WACN,MAAM,KACb,OAAO,CAAC,UAAU,GAAG,gBAAgB,CAAC,CAMxC;IAED,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO;;;;;;;;;;MAWlC;IAEK,gBAAgB,CACpB,QAAQ,SAAS;QACf,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;QAClB,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAA;KACxC,EACD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ;aAoER,CAAC,SAAS,GAAG,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC,GACxD,CAAC,QAAQ,SAAS;YAAE,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;SAAE,GAAG,CAAC,GAAG,OAAO,CAAC;aAC9C,MAAM,GACxB,CAAC,QAAQ,SAAS;YAAE,GAAG,EAAE,MAAM,CAAC,SAAS,MAAM,CAAA;SAAE,GAAG,CAAC,GAAG,OAAO,CAAC;OAErE;IAED,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,IAAI,SAAS,GAAG,GAAG,SAAS,kBAAkB,CAK3E;IAED,SAAS,IAAI,UAAU,CAOtB;IAED,UAAU,CACR,KAAK,EAAE,cAAc,GAAG,UAAU,GAAG,gBAAgB,GAAG,UAAU;;;;;;;MAyBnE;CACF;AAsBD,eAAO,MAAM,cAAc,UAClB,MAAM,KACZ;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAY3C,CAAA;AAED,eAAO,MAAM,cAAc,aAAc,MAAM,YAAY,MAAM,KAAG,MAKnE,CAAA;AAGD,eAAO,MAAM,qBAAqB,iBAAkB,MAAM,KAAG,SAG5D,CAAA;AA2BD,eAAO,MAAM,sBAAsB,EAAE,wBAgBpC,CAAA"}
+{"version":3,"file":"auth-verifier.d.ts","sourceRoot":"","sources":["../src/auth-verifier.ts"],"names":[],"mappings":"AAAA,OAAe,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAA;AAEpD,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAIlC,OAAO,EAAE,KAAK,SAAS,EAAe,MAAM,cAAc,CAAA;AAC1D,OAAO,EAEL,KAAK,wBAAwB,EAI9B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAEL,KAAK,eAAe,EAIrB,MAAM,uBAAuB,CAAA;AAG9B,KAAK,MAAM,GAAG;IACZ,GAAG,EAAE,OAAO,CAAC,OAAO,CAAA;CACrB,CAAA;AAED,KAAK,gBAAgB,GAAG;IACtB,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAA;CACxC,CAAA;AAED,oBAAY,UAAU;IACpB,KAAK,IAAA;IACL,OAAO,IAAA;IACP,OAAO,IAAA;CACR;AAED,KAAK,UAAU,GAAG;IAChB,WAAW,EAAE;QACX,IAAI,EAAE,MAAM,CAAA;QACZ,GAAG,EAAE,IAAI,CAAA;KACV,CAAA;CACF,CAAA;AAED,KAAK,cAAc,GAAG;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,UAAU,CAAA;QAChB,8FAA8F;QAC9F,GAAG,EAAE,MAAM,CAAA;QACX,GAAG,EAAE,SAAS,GAAG,GAAG,SAAS,IAAI,MAAM,EAAE,CAAA;KAC1C,CAAA;CACF,CAAA;AAED,KAAK,UAAU,GAAG;IAChB,WAAW,EAAE;QACX,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,OAAO,CAAA;KACf,CAAA;CACF,CAAA;AAED,KAAK,gBAAgB,GAAG;IACtB,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAA;QACnB,GAAG,EAAE,SAAS,CAAA;QACd,GAAG,EAAE,SAAS,GAAG,GAAG,SAAS,IAAI,MAAM,EAAE,CAAA;KAC1C,CAAA;CACF,CAAA;AAQD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,SAAS,CAAA;IACjB,qBAAqB,EAAE,SAAS,EAAE,CAAA;IAClC,aAAa,EAAE,SAAS,CAAA;IACxB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,oBAAoB,CAAC,EAAE,SAAS,CAAA;CACjC,CAAA;AAED,qBAAa,YAAY;IAQd,SAAS,EAAE,eAAe;IAP5B,MAAM,EAAE,SAAS,CAAA;IACjB,oBAAoB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;IACpC,aAAa,EAAE,SAAS,CAAA;IAC/B,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,oBAAoB,CAAC,CAAW;IAExC,YACS,SAAS,EAAE,eAAe,EACjC,IAAI,EAAE,gBAAgB,EAUvB;IAGD,6BAA6B,SACpB,gBAAgB,WACX,MAAM,KAAG,OAAO,CAAC,cAAc,GAAG,UAAU,CAAC,CAkDxD;IAEH,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,UAAU,CAAC,CAC/B;IAExC,QAAQ,QAAe,MAAM,KAAG,OAAO,CAAC,cAAc,CAAC,CAMtD;IAED,IAAI,QAAS,MAAM,KAAG,UAAU,CAW/B;IAED,cAAc,QACP,MAAM,KACV,OAAO,CAAC,cAAc,GAAG,UAAU,CAAC,CAMtC;IAED,sBAAsB,QACf,MAAM,KACV,OAAO,CAAC,cAAc,GAAG,UAAU,GAAG,UAAU,CAAC,CAkBnD;IAKD,eAAe,WAAkB,MAAM,KAAG,OAAO,CAAC,cAAc,CAAC,CAmDhE;IAED,UAAU,WAAkB,MAAM,KAAG,OAAO,CAAC,gBAAgB,CAAC,CAM7D;IAED,gBAAgB,WACN,MAAM,KACb,OAAO,CAAC,UAAU,GAAG,gBAAgB,CAAC,CAMxC;IAED,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO;;;;;;;;;;MAWlC;IAEK,gBAAgB,CACpB,QAAQ,SAAS;QACf,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;QAClB,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAA;KACxC,EACD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ;aAoER,CAAC,SAAS,GAAG,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC,GACxD,CAAC,QAAQ,SAAS;YAAE,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;SAAE,GAAG,CAAC,GAAG,OAAO,CAAC;aAC9C,MAAM,GACxB,CAAC,QAAQ,SAAS;YAAE,GAAG,EAAE,MAAM,CAAC,SAAS,MAAM,CAAA;SAAE,GAAG,CAAC,GAAG,OAAO,CAAC;OAErE;IAED,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,IAAI,SAAS,GAAG,GAAG,SAAS,kBAAkB,CAK3E;IAED,SAAS,IAAI,UAAU,CAOtB;IAED,UAAU,CACR,KAAK,EAAE,cAAc,GAAG,UAAU,GAAG,gBAAgB,GAAG,UAAU;;;;;;;MAyBnE;CACF;AAsBD,eAAO,MAAM,cAAc,UAClB,MAAM,KACZ;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAY3C,CAAA;AAED,eAAO,MAAM,cAAc,aAAc,MAAM,YAAY,MAAM,KAAG,MAKnE,CAAA;AAkBD,eAAO,MAAM,qBAAqB,iBAAkB,MAAM,KAAG,SAE5D,CAAA;AAoBD,eAAO,MAAM,sBAAsB,EAAE,wBAgBpC,CAAA"}

package/dist/auth-verifier.js

@@ -1,13 +1,11 @@
 import crypto, {} from 'node:crypto';
+import { secp256k1 } from '@noble/curves/secp256k1';
 import * as jose from 'jose';
-import KeyEncoderModule from 'key-encoder';
 import * as ui8 from 'uint8arrays';
 import { SECP256K1_JWT_ALG, parseDidKey } from '@atproto/crypto';
 import { isDidString } from '@atproto/lex';
 import { AuthRequiredError, cryptoVerifySignatureWithKey, parseReqNsid, verifyJwt as verifyServiceJwt, } from '@atproto/xrpc-server';
 import { Code, getKeyAsDidKey, isDataplaneError, unpackIdentityKeys, } from './data-plane/index.js';
-// key-encoder is CJS with exports.default; Node ESM interop wraps it as { default: Class }
-const KeyEncoder = ((m) => m.default ?? m)(KeyEncoderModule);
 export var RoleStatus;
 (function (RoleStatus) {
     RoleStatus[RoleStatus["Valid"] = 0] = "Valid";
@@ -325,15 +323,24 @@ export const buildBasicAuth = (username, password) => {
     return (BASIC +
         ui8.toString(ui8.fromString(`${username}:${password}`, 'utf8'), 'base64pad'));
 };
-const keyEncoder = new KeyEncoder('secp256k1');
+const createSecp256k1KeyObject = (publicKey) => {
+    // accepts compressed or uncompressed keys; validates the point is on-curve
+    const point = secp256k1.ProjectivePoint.fromHex(publicKey).toRawBytes(false);
+    return crypto.createPublicKey({
+        format: 'jwk',
+        key: {
+            kty: 'EC',
+            crv: 'secp256k1',
+            x: ui8.toString(point.subarray(1, 33), 'base64url'),
+            y: ui8.toString(point.subarray(33, 65), 'base64url'),
+        },
+    });
+};
 export const createPublicKeyObject = (publicKeyHex) => {
-    const key = keyEncoder.encodePublic(publicKeyHex, 'raw', 'pem');
-    return crypto.createPublicKey({ format: 'pem', key });
+    return createSecp256k1KeyObject(publicKeyHex);
 };
 const verifySig = (publicKey, data, sig) => {
-    const keyEncoder = new KeyEncoder('secp256k1');
-    const pemKey = keyEncoder.encodePublic(ui8.toString(publicKey, 'hex'), 'raw', 'pem');
-    const key = crypto.createPublicKey({ format: 'pem', key: pemKey });
+    const key = createSecp256k1KeyObject(publicKey);
     return crypto.verify('sha256', data, {
         key,
         dsaEncoding: 'ieee-p1363',

package/dist/auth-verifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-verifier.js","sourceRoot":"","sources":["../src/auth-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,EAAE,EAAkB,MAAM,aAAa,CAAA;AAEpD,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,gBAAgB,MAAM,aAAa,CAAA;AAC1C,OAAO,KAAK,GAAG,MAAM,aAAa,CAAA;AAClC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAChE,OAAO,EAAkB,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1D,OAAO,EACL,iBAAiB,EAEjB,4BAA4B,EAC5B,YAAY,EACZ,SAAS,IAAI,gBAAgB,GAC9B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,IAAI,EAEJ,cAAc,EACd,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAG9B,2FAA2F;AAC3F,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAA;AAW5D,MAAM,CAAN,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,6CAAK,CAAA;IACL,iDAAO,CAAA;IACP,iDAAO,CAAA;AACT,CAAC,EAJW,UAAU,KAAV,UAAU,QAIrB;AAiCD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,oBAAoB;IACpB,qBAAqB;IACrB,+BAA+B;CAChC,CAAC,CAAA;AAUF,MAAM,OAAO,YAAY;IAOvB,YACS,SAA0B,EACjC,IAAsB;QADf,cAAS,GAAT,SAAS,CAAiB;QAanC,0CAA0C;QAC1C,kCAA6B,GAC3B,CAAC,IAAsB,EAAE,EAAE,CAC3B,KAAK,EAAE,GAAW,EAAwC,EAAE;YAC1D,6DAA6D;YAC7D,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAA;gBACvB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;gBAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjD,MAAM,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAA;gBAC3C,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;oBACxC,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,CAAA;gBAChD,CAAC;gBACD,OAAO;oBACL,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE;iBAC5C,CAAA;YACH,CAAC;iBAAM,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,mFAAmF;gBACnF,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACzC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBACpE,IAAI,MAAM,EAAE,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAC7B,qHAAqH;oBACrH,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;wBACtB,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAA;oBAChE,CAAC;oBACD,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;gBAClC,CAAC;gBAED,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE;oBACpD,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,GAAG,EAAE,IAAI;oBACT,GAAG,EAAE,IAAI;iBACV,CAAC,CAAA;gBACF,IACE,CAAC,IAAI,CAAC,YAAY;oBAClB,CAAE,IAAI,CAAC,oBAAoC,CAAC,GAAG,CAAC,GAAG,CAAC,EACpD,CAAC;oBACD,MAAM,IAAI,iBAAiB,CACzB,yCAAyC,EACzC,gBAAgB,CACjB,CAAA;gBACH,CAAC;gBACD,OAAO;oBACL,WAAW,EAAE;wBACX,IAAI,EAAE,UAAU;wBAChB,GAAG;wBACH,GAAG;qBACJ;iBACF,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,SAAS,EAAE,CAAA;YACzB,CAAC;QACH,CAAC,CAAA;QAEH,qBAAgB,GACd,IAAI,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAA;QAExC,aAAQ,GAAG,KAAK,EAAE,GAAW,EAA2B,EAAE;YACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YAC/C,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACvC,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;YACvD,CAAC;YACD,OAAO,MAAwB,CAAA;QACjC,CAAC,CAAA;QAED,SAAI,GAAG,CAAC,GAAW,EAAc,EAAE;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtC,MAAM,IAAI,iBAAiB,EAAE,CAAA;YAC/B,CAAC;YACD,OAAO;gBACL,WAAW,EAAE;oBACX,GAAG,KAAK;oBACR,IAAI,EAAE,MAAM;iBACb;aACF,CAAA;QACH,CAAC,CAAA;QAED,mBAAc,GAAG,KAAK,EACpB,GAAW,EAC2B,EAAE;YACxC,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;YAC3B,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACvB,CAAC;QACH,CAAC,CAAA;QAED,2BAAsB,GAAG,KAAK,EAC5B,GAAW,EACwC,EAAE;YACrD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;YACjC,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC;oBACtC,OAAO;wBACL,WAAW,EAAE;4BACX,GAAG,KAAK;4BACR,IAAI,EAAE,MAAM;yBACb;qBACF,CAAA;gBACH,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;oBAC/C,OAAO,IAAI,CAAC,SAAS,EAAE,CAAA;gBACzB,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,iBAAiB,EAAE,CAAA;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC,CAAA;QAED,wFAAwF;QACxF,6FAA6F;QAC7F,iEAAiE;QACjE,oBAAe,GAAG,KAAK,EAAE,MAAc,EAA2B,EAAE;YAClE,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;YACvD,CAAC;YAED,qEAAqE;YACrE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC/B,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAA;YAChE,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,IAAI;iBACnB,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC;iBAC3C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,iBAAiB,EAAE,CAAC;oBACxC,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAA;gBAClE,CAAC;gBACD,MAAM,IAAI,iBAAiB,CACzB,6BAA6B,EAC7B,cAAc,CACf,CAAA;YACH,CAAC,CAAC,CAAA;YAEJ,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,CAAA;YAC5C,IAAI,OAAO,GAAG,KAAK,WAAW,EAAE,CAAC;gBAC/B,wDAAwD;gBACxD,8CAA8C;gBAC9C,MAAM,IAAI,iBAAiB,CACzB,qCAAqC,EACrC,cAAc,CACf,CAAA;YACH,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAA;YAChE,CAAC;iBAAM,IACL,OAAO,GAAG,KAAK,QAAQ;gBACvB,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;gBAC3B,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAC9B,CAAC;gBACD,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAA;YAC9D,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAA;YAChE,CAAC;YAED,OAAO;gBACL,WAAW,EAAE;oBACX,IAAI,EAAE,UAAU;oBAChB,GAAG,EAAE,IAAI,CAAC,MAAM;oBAChB,GAAG,EAAE,GAA2C;iBACjD;aACF,CAAA;QACH,CAAC,CAAA;QAED,eAAU,GAAG,KAAK,EAAE,MAAc,EAA6B,EAAE;YAC/D,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBACvD,GAAG,EAAE,IAAI,CAAC,MAAM;gBAChB,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,aAAa,kBAAkB,CAAC;aACnE,CAAC,CAAA;YACF,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAA;QAC3D,CAAC,CAAA;QAED,qBAAgB,GAAG,KAAK,EACtB,MAAc,EAC0B,EAAE;YAC1C,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAChC,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC1B,CAAC;QACH,CAAC,CAAA;QAjMC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,oBAAoB,GAAG,IAAI,GAAG,CAAC;YAClC,IAAI,CAAC,MAAM;YACX,GAAG,IAAI,CAAC,qBAAqB;SAC9B,CAAC,CAAA;QACF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;QACvC,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC5C,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAA;IACvD,CAAC;IA2LD,cAAc,CAAC,GAAoB;QACjC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAA;QAC9D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,CAAA;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;QAC3E,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAA;QACrC,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;QACvC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAMpB,MAAc,EAAE,IAAc;QAC9B,MAAM,aAAa,GAAG,KAAK,EACzB,GAAW,EACX,aAAsB,EACL,EAAE;YACnB,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;YACjE,CAAC;YACD,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACvC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;YACjD,CAAC;YAED,MAAM,KAAK,GACT,SAAS,KAAK,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAA;YAC/D,IAAI,QAAkC,CAAA;YACtC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;gBACjD,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;YACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAA;YACnD,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC,CAAA;QACD,MAAM,cAAc,GAAG,GAAG,EAAE;YAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACpC,IACE,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC9C,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG,CAAC,EACvC,CAAC;gBACD,MAAM,IAAI,iBAAiB,CACzB,OAAO,CAAC,GAAG,KAAK,SAAS;oBACvB,CAAC,CAAC,+CAA+C,GAAG,EAAE;oBACtD,CAAC,CAAC,mDAAmD,GAAG,EAAE,EAC5D,qBAAqB,CACtB,CAAA;YACH,CAAC;QACH,CAAC,CAAA;QAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;QAC1D,CAAC;QACD,iGAAiG;QACjG,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,MAAM,EACN,IAAI,CAAC,GAAG,EACR,IAAI,EACJ,aAAa,EACb,sBAAsB,CACvB,CAAA;QACD,IACE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACzC,OAAO,CAAC,GAAG,KAAK,SAAS,EACzB,CAAC;YACD,+DAA+D;YAC/D,4EAA4E;YAC5E,cAAc,EAAE,CAAA;QAClB,CAAC;QAED,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GACqD;YAClE,GAAG,EAAE,OAAO,CAAC,GACqD;SACnE,CAAA;IACH,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,OAAO;YACL,IAAI,CAAC,aAAa;YAClB,GAAG,IAAI,CAAC,aAAa,kBAAkB;SACxC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IACjB,CAAC;IAED,SAAS;QACP,OAAO;YACL,WAAW,EAAE;gBACX,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,IAAI;aACV;SACF,CAAA;IACH,CAAC;IAED,UAAU,CACR,KAAkE;QAElE,MAAM,MAAM,GACV,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QACtE,MAAM,2BAA2B,GAC/B,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC;YAC9D,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,aAAa;YACxC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU;gBACpC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7C,MAAM,kBAAkB,GACtB,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC;YAC9D,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,aAAa,CAAA;QAC1C,MAAM,YAAY,GAChB,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,aAAa;YACxC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU;gBACpC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;QAE7C,OAAO;YACL,MAAM;YACN,gBAAgB,EAAE,2BAA2B;YAC7C,eAAe,EAAE,2BAA2B;YAC5C,kBAAkB;YAClB,YAAY;YACZ,gBAAgB,EAAE,YAAY,IAAI,MAAM,KAAK,IAAI;SAClD,CAAA;IACH,CAAC;CACF;AAED,UAAU;AACV,YAAY;AAEZ,MAAM,MAAM,GAAG,SAAS,CAAA;AACxB,MAAM,KAAK,GAAG,QAAQ,CAAA;AAEtB,MAAM,aAAa,GAAG,CAAC,GAAoB,EAAW,EAAE;IACtD,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAA;AAC/D,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,GAAoB,EAAW,EAAE;IACrD,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAA;AAC9D,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CAAC,GAAoB,EAAE,EAAE;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAA;IAC9C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3C,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;AAC3C,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAa,EACkC,EAAE;IACjD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACzC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACrC,IAAI,MAAgB,CAAA;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,CAAA;IACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IACvC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;AAC/B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAU,EAAE;IAC3E,OAAO,CACL,KAAK;QACL,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAC7E,CAAA;AACH,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAA;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,YAAoB,EAAa,EAAE;IACvE,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;IAC/D,OAAO,MAAM,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;AACvD,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAChB,SAAqB,EACrB,IAAgB,EAChB,GAAe,EACf,EAAE;IACF,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAA;IAE9C,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CACpC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,EAC9B,KAAK,EACL,KAAK,CACN,CAAA;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;IAElE,OAAO,MAAM,CAAC,MAAM,CAClB,QAAQ,EACR,IAAI,EACJ;QACE,GAAG;QACH,WAAW,EAAE,YAAY;KAC1B,EACD,GAAG,CACJ,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAA6B,KAAK,EACnE,MAAc,EACd,QAAoB,EACpB,QAAoB,EACpB,GAAW,EACX,EAAE;IACF,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;QAClC,IAAI,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QAClE,CAAC;QAED,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACvD,CAAC;IAED,OAAO,4BAA4B,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;AACtE,CAAC,CAAA","sourcesContent":["import crypto, { type KeyObject } from 'node:crypto'\nimport type express from 'express'\nimport * as jose from 'jose'\nimport KeyEncoderModule from 'key-encoder'\nimport * as ui8 from 'uint8arrays'\nimport { SECP256K1_JWT_ALG, parseDidKey } from '@atproto/crypto'\nimport { type DidString, isDidString } from '@atproto/lex'\nimport {\n  AuthRequiredError,\n  type VerifySignatureWithKeyFn,\n  cryptoVerifySignatureWithKey,\n  parseReqNsid,\n  verifyJwt as verifyServiceJwt,\n} from '@atproto/xrpc-server'\nimport {\n  Code,\n  type DataPlaneClient,\n  getKeyAsDidKey,\n  isDataplaneError,\n  unpackIdentityKeys,\n} from './data-plane/index.js'\nimport type { GetIdentityByDidResponse } from './proto/bsky_pb.js'\n\n// key-encoder is CJS with exports.default; Node ESM interop wraps it as { default: Class }\nconst KeyEncoder = ((m) => m.default ?? m)(KeyEncoderModule)\n\ntype ReqCtx = {\n  req: express.Request\n}\n\ntype StandardAuthOpts = {\n  skipAudCheck?: boolean\n  lxmCheck?: (method?: string) => boolean\n}\n\nexport enum RoleStatus {\n  Valid,\n  Invalid,\n  Missing,\n}\n\ntype NullOutput = {\n  credentials: {\n    type: 'none'\n    iss: null\n  }\n}\n\ntype StandardOutput = {\n  credentials: {\n    type: 'standard'\n    /** @note we don't validate this to be a {@link DidString} (we might want to in the future) */\n    aud: string\n    iss: DidString | `${DidString}#${string}`\n  }\n}\n\ntype RoleOutput = {\n  credentials: {\n    type: 'role'\n    admin: boolean\n  }\n}\n\ntype ModServiceOutput = {\n  credentials: {\n    type: 'mod_service'\n    aud: DidString\n    iss: DidString | `${DidString}#${string}`\n  }\n}\n\nconst ALLOWED_AUTH_SCOPES = new Set([\n  'com.atproto.access',\n  'com.atproto.appPass',\n  'com.atproto.appPassPrivileged',\n])\n\nexport type AuthVerifierOpts = {\n  ownDid: DidString\n  alternateAudienceDids: DidString[]\n  modServiceDid: DidString\n  adminPasses: string[]\n  entrywayJwtPublicKey?: KeyObject\n}\n\nexport class AuthVerifier {\n  public ownDid: DidString\n  public standardAudienceDids: Set<DidString>\n  public modServiceDid: DidString\n  private adminPasses: Set<string>\n  private entrywayJwtPublicKey?: KeyObject\n\n  constructor(\n    public dataplane: DataPlaneClient,\n    opts: AuthVerifierOpts,\n  ) {\n    this.ownDid = opts.ownDid\n    this.standardAudienceDids = new Set([\n      opts.ownDid,\n      ...opts.alternateAudienceDids,\n    ])\n    this.modServiceDid = opts.modServiceDid\n    this.adminPasses = new Set(opts.adminPasses)\n    this.entrywayJwtPublicKey = opts.entrywayJwtPublicKey\n  }\n\n  // verifiers (arrow fns to preserve scope)\n  standardOptionalParameterized =\n    (opts: StandardAuthOpts) =>\n    async (ctx: ReqCtx): Promise<StandardOutput | NullOutput> => {\n      // @TODO remove! basic auth + did supported just for testing.\n      if (isBasicToken(ctx.req)) {\n        const aud = this.ownDid\n        const iss = ctx.req.headers['appview-as-did']\n        if (typeof iss !== 'string' || !isDidString(iss)) {\n          throw new AuthRequiredError('bad issuer')\n        }\n        if (!this.parseRoleCreds(ctx.req).admin) {\n          throw new AuthRequiredError('bad credentials')\n        }\n        return {\n          credentials: { type: 'standard', iss, aud },\n        }\n      } else if (isBearerToken(ctx.req)) {\n        // @NOTE temporarily accept entryway session tokens to shed load from PDS instances\n        const token = bearerTokenFromReq(ctx.req)\n        const header = token ? jose.decodeProtectedHeader(token) : undefined\n        if (header?.typ === 'at+jwt') {\n          // we should never use entryway session tokens in the case of flexible auth audiences (namely in the case of getFeed)\n          if (opts.skipAudCheck) {\n            throw new AuthRequiredError('Malformed token', 'InvalidToken')\n          }\n          return this.entrywaySession(ctx)\n        }\n\n        const { iss, aud } = await this.verifyServiceJwt(ctx, {\n          lxmCheck: opts.lxmCheck,\n          iss: null,\n          aud: null,\n        })\n        if (\n          !opts.skipAudCheck &&\n          !(this.standardAudienceDids as Set<string>).has(aud)\n        ) {\n          throw new AuthRequiredError(\n            'jwt audience does not match service did',\n            'BadJwtAudience',\n          )\n        }\n        return {\n          credentials: {\n            type: 'standard',\n            iss,\n            aud,\n          },\n        }\n      } else {\n        return this.nullCreds()\n      }\n    }\n\n  standardOptional: (ctx: ReqCtx) => Promise<StandardOutput | NullOutput> =\n    this.standardOptionalParameterized({})\n\n  standard = async (ctx: ReqCtx): Promise<StandardOutput> => {\n    const output = await this.standardOptional(ctx)\n    if (output.credentials.type === 'none') {\n      throw new AuthRequiredError(undefined, 'AuthMissing')\n    }\n    return output as StandardOutput\n  }\n\n  role = (ctx: ReqCtx): RoleOutput => {\n    const creds = this.parseRoleCreds(ctx.req)\n    if (creds.status !== RoleStatus.Valid) {\n      throw new AuthRequiredError()\n    }\n    return {\n      credentials: {\n        ...creds,\n        type: 'role',\n      },\n    }\n  }\n\n  standardOrRole = async (\n    ctx: ReqCtx,\n  ): Promise<StandardOutput | RoleOutput> => {\n    if (isBearerToken(ctx.req)) {\n      return this.standard(ctx)\n    } else {\n      return this.role(ctx)\n    }\n  }\n\n  optionalStandardOrRole = async (\n    ctx: ReqCtx,\n  ): Promise<StandardOutput | RoleOutput | NullOutput> => {\n    if (isBearerToken(ctx.req)) {\n      return await this.standard(ctx)\n    } else {\n      const creds = this.parseRoleCreds(ctx.req)\n      if (creds.status === RoleStatus.Valid) {\n        return {\n          credentials: {\n            ...creds,\n            type: 'role',\n          },\n        }\n      } else if (creds.status === RoleStatus.Missing) {\n        return this.nullCreds()\n      } else {\n        throw new AuthRequiredError()\n      }\n    }\n  }\n\n  // @NOTE this auth verifier method is not recommended to be implemented by most appviews\n  // this is a short term fix to remove proxy load from Bluesky's PDS and in line with possible\n  // future plans to have the client talk directly with the appview\n  entrywaySession = async (reqCtx: ReqCtx): Promise<StandardOutput> => {\n    const token = bearerTokenFromReq(reqCtx.req)\n    if (!token) {\n      throw new AuthRequiredError(undefined, 'AuthMissing')\n    }\n\n    // if entryway jwt key not configured then do not parsed these tokens\n    if (!this.entrywayJwtPublicKey) {\n      throw new AuthRequiredError('Malformed token', 'InvalidToken')\n    }\n\n    const res = await jose\n      .jwtVerify(token, this.entrywayJwtPublicKey)\n      .catch((err) => {\n        if (err?.['code'] === 'ERR_JWT_EXPIRED') {\n          throw new AuthRequiredError('Token has expired', 'ExpiredToken')\n        }\n        throw new AuthRequiredError(\n          'Token could not be verified',\n          'InvalidToken',\n        )\n      })\n\n    const { sub, aud, scope, cnf } = res.payload\n    if (typeof cnf !== 'undefined') {\n      // Proof-of-Possession (PoP) tokens are not allowed here\n      // https://www.rfc-editor.org/rfc/rfc7800.html\n      throw new AuthRequiredError(\n        'Malformed token: DPoP not supported',\n        'InvalidToken',\n      )\n    }\n    if (typeof sub !== 'string' || !sub.startsWith('did:')) {\n      throw new AuthRequiredError('Malformed token', 'InvalidToken')\n    } else if (\n      typeof aud !== 'string' ||\n      !aud.startsWith('did:web:') ||\n      !aud.endsWith('.bsky.network')\n    ) {\n      throw new AuthRequiredError('Bad token aud', 'InvalidToken')\n    } else if (typeof scope !== 'string' || !ALLOWED_AUTH_SCOPES.has(scope)) {\n      throw new AuthRequiredError('Bad token scope', 'InvalidToken')\n    }\n\n    return {\n      credentials: {\n        type: 'standard',\n        aud: this.ownDid,\n        iss: sub as DidString | `${DidString}#${string}`,\n      },\n    }\n  }\n\n  modService = async (reqCtx: ReqCtx): Promise<ModServiceOutput> => {\n    const { iss, aud } = await this.verifyServiceJwt(reqCtx, {\n      aud: this.ownDid,\n      iss: [this.modServiceDid, `${this.modServiceDid}#atproto_labeler`],\n    })\n    return { credentials: { type: 'mod_service', aud, iss } }\n  }\n\n  roleOrModService = async (\n    reqCtx: ReqCtx,\n  ): Promise<RoleOutput | ModServiceOutput> => {\n    if (isBearerToken(reqCtx.req)) {\n      return this.modService(reqCtx)\n    } else {\n      return this.role(reqCtx)\n    }\n  }\n\n  parseRoleCreds(req: express.Request) {\n    const parsed = parseBasicAuth(req.headers.authorization || '')\n    const { Missing, Valid, Invalid } = RoleStatus\n    if (!parsed) {\n      return { status: Missing, admin: false, moderator: false, triage: false }\n    }\n    const { username, password } = parsed\n    if (username === 'admin' && this.adminPasses.has(password)) {\n      return { status: Valid, admin: true }\n    }\n    return { status: Invalid, admin: false }\n  }\n\n  async verifyServiceJwt<\n    TOptions extends {\n      iss: string[] | null\n      aud: string | null\n      lxmCheck?: (method?: string) => boolean\n    },\n  >(reqCtx: ReqCtx, opts: TOptions) {\n    const getSigningKey = async (\n      iss: string,\n      _forceRefresh: boolean, // @TODO consider propagating to dataplane\n    ): Promise<string> => {\n      if (opts.iss !== null && !opts.iss.includes(iss)) {\n        throw new AuthRequiredError('Untrusted issuer', 'UntrustedIss')\n      }\n      const [did, serviceId] = iss.split('#')\n      if (!isDidString(did)) {\n        throw new AuthRequiredError('identity unknown')\n      }\n\n      const keyId =\n        serviceId === 'atproto_labeler' ? 'atproto_label' : 'atproto'\n      let identity: GetIdentityByDidResponse\n      try {\n        identity = await this.dataplane.getIdentityByDid({ did })\n      } catch (err) {\n        if (isDataplaneError(err, Code.NotFound)) {\n          throw new AuthRequiredError('identity unknown')\n        }\n        throw err\n      }\n      const keys = unpackIdentityKeys(identity.keys)\n      const didKey = getKeyAsDidKey(keys, { id: keyId })\n      if (!didKey) {\n        throw new AuthRequiredError('missing or bad key')\n      }\n      return didKey\n    }\n    const assertLxmCheck = () => {\n      const lxm = parseReqNsid(reqCtx.req)\n      if (\n        (opts.lxmCheck && !opts.lxmCheck(payload.lxm)) ||\n        (!opts.lxmCheck && payload.lxm !== lxm)\n      ) {\n        throw new AuthRequiredError(\n          payload.lxm !== undefined\n            ? `bad jwt lexicon method (\"lxm\"). must match: ${lxm}`\n            : `missing jwt lexicon method (\"lxm\"). must match: ${lxm}`,\n          'BadJwtLexiconMethod',\n        )\n      }\n    }\n\n    const jwtStr = bearerTokenFromReq(reqCtx.req)\n    if (!jwtStr) {\n      throw new AuthRequiredError('missing jwt', 'MissingJwt')\n    }\n    // if validating additional scopes, skip scope check in initial validation & follow up afterwards\n    const payload = await verifyServiceJwt(\n      jwtStr,\n      opts.aud,\n      null,\n      getSigningKey,\n      verifySignatureWithKey,\n    )\n    if (\n      !payload.iss.endsWith('#atproto_labeler') ||\n      payload.lxm !== undefined\n    ) {\n      // @TODO currently permissive of labelers who dont set lxm yet.\n      // we'll allow ozone self-hosters to upgrade before removing this condition.\n      assertLxmCheck()\n    }\n\n    return {\n      iss: payload.iss as (DidString | `${DidString}#${string}`) &\n        (TOptions extends { iss: ReadonlyArray<infer I> } ? I : unknown),\n      aud: payload.aud as string &\n        (TOptions extends { aud: infer A extends string } ? A : unknown),\n    }\n  }\n\n  isModService(iss: string): iss is DidString | `${DidString}#atproto_labeler` {\n    return [\n      this.modServiceDid,\n      `${this.modServiceDid}#atproto_labeler`,\n    ].includes(iss)\n  }\n\n  nullCreds(): NullOutput {\n    return {\n      credentials: {\n        type: 'none',\n        iss: null,\n      },\n    }\n  }\n\n  parseCreds(\n    creds: StandardOutput | RoleOutput | ModServiceOutput | NullOutput,\n  ) {\n    const viewer =\n      creds.credentials.type === 'standard' ? creds.credentials.iss : null\n    const includeTakedownsAnd3pBlocks =\n      (creds.credentials.type === 'role' && creds.credentials.admin) ||\n      creds.credentials.type === 'mod_service' ||\n      (creds.credentials.type === 'standard' &&\n        this.isModService(creds.credentials.iss))\n    const canPerformTakedown =\n      (creds.credentials.type === 'role' && creds.credentials.admin) ||\n      creds.credentials.type === 'mod_service'\n    const isModService =\n      creds.credentials.type === 'mod_service' ||\n      (creds.credentials.type === 'standard' &&\n        this.isModService(creds.credentials.iss))\n\n    return {\n      viewer,\n      includeTakedowns: includeTakedownsAnd3pBlocks,\n      include3pBlocks: includeTakedownsAnd3pBlocks,\n      canPerformTakedown,\n      isModService,\n      skipViewerBlocks: isModService && viewer !== null,\n    }\n  }\n}\n\n// HELPERS\n// ---------\n\nconst BEARER = 'Bearer '\nconst BASIC = 'Basic '\n\nconst isBearerToken = (req: express.Request): boolean => {\n  return req.headers.authorization?.startsWith(BEARER) ?? false\n}\n\nconst isBasicToken = (req: express.Request): boolean => {\n  return req.headers.authorization?.startsWith(BASIC) ?? false\n}\n\nconst bearerTokenFromReq = (req: express.Request) => {\n  const header = req.headers.authorization || ''\n  if (!header.startsWith(BEARER)) return null\n  return header.slice(BEARER.length).trim()\n}\n\nexport const parseBasicAuth = (\n  token: string,\n): { username: string; password: string } | null => {\n  if (!token.startsWith(BASIC)) return null\n  const b64 = token.slice(BASIC.length)\n  let parsed: string[]\n  try {\n    parsed = ui8.toString(ui8.fromString(b64, 'base64pad'), 'utf8').split(':')\n  } catch (err) {\n    return null\n  }\n  const [username, password] = parsed\n  if (!username || !password) return null\n  return { username, password }\n}\n\nexport const buildBasicAuth = (username: string, password: string): string => {\n  return (\n    BASIC +\n    ui8.toString(ui8.fromString(`${username}:${password}`, 'utf8'), 'base64pad')\n  )\n}\n\nconst keyEncoder = new KeyEncoder('secp256k1')\nexport const createPublicKeyObject = (publicKeyHex: string): KeyObject => {\n  const key = keyEncoder.encodePublic(publicKeyHex, 'raw', 'pem')\n  return crypto.createPublicKey({ format: 'pem', key })\n}\n\nconst verifySig = (\n  publicKey: Uint8Array,\n  data: Uint8Array,\n  sig: Uint8Array,\n) => {\n  const keyEncoder = new KeyEncoder('secp256k1')\n\n  const pemKey = keyEncoder.encodePublic(\n    ui8.toString(publicKey, 'hex'),\n    'raw',\n    'pem',\n  )\n  const key = crypto.createPublicKey({ format: 'pem', key: pemKey })\n\n  return crypto.verify(\n    'sha256',\n    data,\n    {\n      key,\n      dsaEncoding: 'ieee-p1363',\n    },\n    sig,\n  )\n}\n\nexport const verifySignatureWithKey: VerifySignatureWithKeyFn = async (\n  didKey: string,\n  msgBytes: Uint8Array,\n  sigBytes: Uint8Array,\n  alg: string,\n) => {\n  if (alg === SECP256K1_JWT_ALG) {\n    const parsed = parseDidKey(didKey)\n    if (alg !== parsed.jwtAlg) {\n      throw new Error(`Expected key alg ${alg}, got ${parsed.jwtAlg}`)\n    }\n\n    return verifySig(parsed.keyBytes, msgBytes, sigBytes)\n  }\n\n  return cryptoVerifySignatureWithKey(didKey, msgBytes, sigBytes, alg)\n}\n"]}
+{"version":3,"file":"auth-verifier.js","sourceRoot":"","sources":["../src/auth-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,EAAE,EAAkB,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAEnD,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,GAAG,MAAM,aAAa,CAAA;AAClC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAChE,OAAO,EAAkB,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1D,OAAO,EACL,iBAAiB,EAEjB,4BAA4B,EAC5B,YAAY,EACZ,SAAS,IAAI,gBAAgB,GAC9B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,IAAI,EAEJ,cAAc,EACd,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAY9B,MAAM,CAAN,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,6CAAK,CAAA;IACL,iDAAO,CAAA;IACP,iDAAO,CAAA;AACT,CAAC,EAJW,UAAU,KAAV,UAAU,QAIrB;AAiCD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,oBAAoB;IACpB,qBAAqB;IACrB,+BAA+B;CAChC,CAAC,CAAA;AAUF,MAAM,OAAO,YAAY;IAOvB,YACS,SAA0B,EACjC,IAAsB;QADf,cAAS,GAAT,SAAS,CAAiB;QAanC,0CAA0C;QAC1C,kCAA6B,GAC3B,CAAC,IAAsB,EAAE,EAAE,CAC3B,KAAK,EAAE,GAAW,EAAwC,EAAE;YAC1D,6DAA6D;YAC7D,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAA;gBACvB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;gBAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjD,MAAM,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAA;gBAC3C,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;oBACxC,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,CAAA;gBAChD,CAAC;gBACD,OAAO;oBACL,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE;iBAC5C,CAAA;YACH,CAAC;iBAAM,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,mFAAmF;gBACnF,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACzC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBACpE,IAAI,MAAM,EAAE,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAC7B,qHAAqH;oBACrH,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;wBACtB,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAA;oBAChE,CAAC;oBACD,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;gBAClC,CAAC;gBAED,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE;oBACpD,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,GAAG,EAAE,IAAI;oBACT,GAAG,EAAE,IAAI;iBACV,CAAC,CAAA;gBACF,IACE,CAAC,IAAI,CAAC,YAAY;oBAClB,CAAE,IAAI,CAAC,oBAAoC,CAAC,GAAG,CAAC,GAAG,CAAC,EACpD,CAAC;oBACD,MAAM,IAAI,iBAAiB,CACzB,yCAAyC,EACzC,gBAAgB,CACjB,CAAA;gBACH,CAAC;gBACD,OAAO;oBACL,WAAW,EAAE;wBACX,IAAI,EAAE,UAAU;wBAChB,GAAG;wBACH,GAAG;qBACJ;iBACF,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,SAAS,EAAE,CAAA;YACzB,CAAC;QACH,CAAC,CAAA;QAEH,qBAAgB,GACd,IAAI,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAA;QAExC,aAAQ,GAAG,KAAK,EAAE,GAAW,EAA2B,EAAE;YACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YAC/C,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACvC,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;YACvD,CAAC;YACD,OAAO,MAAwB,CAAA;QACjC,CAAC,CAAA;QAED,SAAI,GAAG,CAAC,GAAW,EAAc,EAAE;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtC,MAAM,IAAI,iBAAiB,EAAE,CAAA;YAC/B,CAAC;YACD,OAAO;gBACL,WAAW,EAAE;oBACX,GAAG,KAAK;oBACR,IAAI,EAAE,MAAM;iBACb;aACF,CAAA;QACH,CAAC,CAAA;QAED,mBAAc,GAAG,KAAK,EACpB,GAAW,EAC2B,EAAE;YACxC,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;YAC3B,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACvB,CAAC;QACH,CAAC,CAAA;QAED,2BAAsB,GAAG,KAAK,EAC5B,GAAW,EACwC,EAAE;YACrD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;YACjC,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC;oBACtC,OAAO;wBACL,WAAW,EAAE;4BACX,GAAG,KAAK;4BACR,IAAI,EAAE,MAAM;yBACb;qBACF,CAAA;gBACH,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;oBAC/C,OAAO,IAAI,CAAC,SAAS,EAAE,CAAA;gBACzB,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,iBAAiB,EAAE,CAAA;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC,CAAA;QAED,wFAAwF;QACxF,6FAA6F;QAC7F,iEAAiE;QACjE,oBAAe,GAAG,KAAK,EAAE,MAAc,EAA2B,EAAE;YAClE,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;YACvD,CAAC;YAED,qEAAqE;YACrE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC/B,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAA;YAChE,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,IAAI;iBACnB,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC;iBAC3C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,iBAAiB,EAAE,CAAC;oBACxC,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAA;gBAClE,CAAC;gBACD,MAAM,IAAI,iBAAiB,CACzB,6BAA6B,EAC7B,cAAc,CACf,CAAA;YACH,CAAC,CAAC,CAAA;YAEJ,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,CAAA;YAC5C,IAAI,OAAO,GAAG,KAAK,WAAW,EAAE,CAAC;gBAC/B,wDAAwD;gBACxD,8CAA8C;gBAC9C,MAAM,IAAI,iBAAiB,CACzB,qCAAqC,EACrC,cAAc,CACf,CAAA;YACH,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAA;YAChE,CAAC;iBAAM,IACL,OAAO,GAAG,KAAK,QAAQ;gBACvB,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;gBAC3B,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAC9B,CAAC;gBACD,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAA;YAC9D,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAA;YAChE,CAAC;YAED,OAAO;gBACL,WAAW,EAAE;oBACX,IAAI,EAAE,UAAU;oBAChB,GAAG,EAAE,IAAI,CAAC,MAAM;oBAChB,GAAG,EAAE,GAA2C;iBACjD;aACF,CAAA;QACH,CAAC,CAAA;QAED,eAAU,GAAG,KAAK,EAAE,MAAc,EAA6B,EAAE;YAC/D,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBACvD,GAAG,EAAE,IAAI,CAAC,MAAM;gBAChB,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,aAAa,kBAAkB,CAAC;aACnE,CAAC,CAAA;YACF,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAA;QAC3D,CAAC,CAAA;QAED,qBAAgB,GAAG,KAAK,EACtB,MAAc,EAC0B,EAAE;YAC1C,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAChC,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC1B,CAAC;QACH,CAAC,CAAA;QAjMC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,oBAAoB,GAAG,IAAI,GAAG,CAAC;YAClC,IAAI,CAAC,MAAM;YACX,GAAG,IAAI,CAAC,qBAAqB;SAC9B,CAAC,CAAA;QACF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;QACvC,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC5C,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAA;IACvD,CAAC;IA2LD,cAAc,CAAC,GAAoB;QACjC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAA;QAC9D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,CAAA;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;QAC3E,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAA;QACrC,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;QACvC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAMpB,MAAc,EAAE,IAAc;QAC9B,MAAM,aAAa,GAAG,KAAK,EACzB,GAAW,EACX,aAAsB,EACL,EAAE;YACnB,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;YACjE,CAAC;YACD,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACvC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;YACjD,CAAC;YAED,MAAM,KAAK,GACT,SAAS,KAAK,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAA;YAC/D,IAAI,QAAkC,CAAA;YACtC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;gBACjD,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;YACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAA;YACnD,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC,CAAA;QACD,MAAM,cAAc,GAAG,GAAG,EAAE;YAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACpC,IACE,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC9C,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG,CAAC,EACvC,CAAC;gBACD,MAAM,IAAI,iBAAiB,CACzB,OAAO,CAAC,GAAG,KAAK,SAAS;oBACvB,CAAC,CAAC,+CAA+C,GAAG,EAAE;oBACtD,CAAC,CAAC,mDAAmD,GAAG,EAAE,EAC5D,qBAAqB,CACtB,CAAA;YACH,CAAC;QACH,CAAC,CAAA;QAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;QAC1D,CAAC;QACD,iGAAiG;QACjG,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,MAAM,EACN,IAAI,CAAC,GAAG,EACR,IAAI,EACJ,aAAa,EACb,sBAAsB,CACvB,CAAA;QACD,IACE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACzC,OAAO,CAAC,GAAG,KAAK,SAAS,EACzB,CAAC;YACD,+DAA+D;YAC/D,4EAA4E;YAC5E,cAAc,EAAE,CAAA;QAClB,CAAC;QAED,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GACqD;YAClE,GAAG,EAAE,OAAO,CAAC,GACqD;SACnE,CAAA;IACH,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,OAAO;YACL,IAAI,CAAC,aAAa;YAClB,GAAG,IAAI,CAAC,aAAa,kBAAkB;SACxC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IACjB,CAAC;IAED,SAAS;QACP,OAAO;YACL,WAAW,EAAE;gBACX,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,IAAI;aACV;SACF,CAAA;IACH,CAAC;IAED,UAAU,CACR,KAAkE;QAElE,MAAM,MAAM,GACV,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QACtE,MAAM,2BAA2B,GAC/B,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC;YAC9D,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,aAAa;YACxC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU;gBACpC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7C,MAAM,kBAAkB,GACtB,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC;YAC9D,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,aAAa,CAAA;QAC1C,MAAM,YAAY,GAChB,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,aAAa;YACxC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU;gBACpC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;QAE7C,OAAO;YACL,MAAM;YACN,gBAAgB,EAAE,2BAA2B;YAC7C,eAAe,EAAE,2BAA2B;YAC5C,kBAAkB;YAClB,YAAY;YACZ,gBAAgB,EAAE,YAAY,IAAI,MAAM,KAAK,IAAI;SAClD,CAAA;IACH,CAAC;CACF;AAED,UAAU;AACV,YAAY;AAEZ,MAAM,MAAM,GAAG,SAAS,CAAA;AACxB,MAAM,KAAK,GAAG,QAAQ,CAAA;AAEtB,MAAM,aAAa,GAAG,CAAC,GAAoB,EAAW,EAAE;IACtD,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAA;AAC/D,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,GAAoB,EAAW,EAAE;IACrD,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAA;AAC9D,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CAAC,GAAoB,EAAE,EAAE;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAA;IAC9C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3C,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;AAC3C,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAa,EACkC,EAAE;IACjD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACzC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACrC,IAAI,MAAgB,CAAA;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,CAAA;IACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IACvC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;AAC/B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAU,EAAE;IAC3E,OAAO,CACL,KAAK;QACL,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAC7E,CAAA;AACH,CAAC,CAAA;AAED,MAAM,wBAAwB,GAAG,CAC/B,SAA8B,EACnB,EAAE;IACb,2EAA2E;IAC3E,MAAM,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IAC5E,OAAO,MAAM,CAAC,eAAe,CAAC;QAC5B,MAAM,EAAE,KAAK;QACb,GAAG,EAAE;YACH,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,WAAW;YAChB,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,WAAW,CAAC;YACnD,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,CAAC;SACrD;KACF,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,YAAoB,EAAa,EAAE;IACvE,OAAO,wBAAwB,CAAC,YAAY,CAAC,CAAA;AAC/C,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAChB,SAAqB,EACrB,IAAgB,EAChB,GAAe,EACf,EAAE;IACF,MAAM,GAAG,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAA;IAE/C,OAAO,MAAM,CAAC,MAAM,CAClB,QAAQ,EACR,IAAI,EACJ;QACE,GAAG;QACH,WAAW,EAAE,YAAY;KAC1B,EACD,GAAG,CACJ,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAA6B,KAAK,EACnE,MAAc,EACd,QAAoB,EACpB,QAAoB,EACpB,GAAW,EACX,EAAE;IACF,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;QAClC,IAAI,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QAClE,CAAC;QAED,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACvD,CAAC;IAED,OAAO,4BAA4B,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;AACtE,CAAC,CAAA","sourcesContent":["import crypto, { type KeyObject } from 'node:crypto'\nimport { secp256k1 } from '@noble/curves/secp256k1'\nimport type express from 'express'\nimport * as jose from 'jose'\nimport * as ui8 from 'uint8arrays'\nimport { SECP256K1_JWT_ALG, parseDidKey } from '@atproto/crypto'\nimport { type DidString, isDidString } from '@atproto/lex'\nimport {\n  AuthRequiredError,\n  type VerifySignatureWithKeyFn,\n  cryptoVerifySignatureWithKey,\n  parseReqNsid,\n  verifyJwt as verifyServiceJwt,\n} from '@atproto/xrpc-server'\nimport {\n  Code,\n  type DataPlaneClient,\n  getKeyAsDidKey,\n  isDataplaneError,\n  unpackIdentityKeys,\n} from './data-plane/index.js'\nimport type { GetIdentityByDidResponse } from './proto/bsky_pb.js'\n\ntype ReqCtx = {\n  req: express.Request\n}\n\ntype StandardAuthOpts = {\n  skipAudCheck?: boolean\n  lxmCheck?: (method?: string) => boolean\n}\n\nexport enum RoleStatus {\n  Valid,\n  Invalid,\n  Missing,\n}\n\ntype NullOutput = {\n  credentials: {\n    type: 'none'\n    iss: null\n  }\n}\n\ntype StandardOutput = {\n  credentials: {\n    type: 'standard'\n    /** @note we don't validate this to be a {@link DidString} (we might want to in the future) */\n    aud: string\n    iss: DidString | `${DidString}#${string}`\n  }\n}\n\ntype RoleOutput = {\n  credentials: {\n    type: 'role'\n    admin: boolean\n  }\n}\n\ntype ModServiceOutput = {\n  credentials: {\n    type: 'mod_service'\n    aud: DidString\n    iss: DidString | `${DidString}#${string}`\n  }\n}\n\nconst ALLOWED_AUTH_SCOPES = new Set([\n  'com.atproto.access',\n  'com.atproto.appPass',\n  'com.atproto.appPassPrivileged',\n])\n\nexport type AuthVerifierOpts = {\n  ownDid: DidString\n  alternateAudienceDids: DidString[]\n  modServiceDid: DidString\n  adminPasses: string[]\n  entrywayJwtPublicKey?: KeyObject\n}\n\nexport class AuthVerifier {\n  public ownDid: DidString\n  public standardAudienceDids: Set<DidString>\n  public modServiceDid: DidString\n  private adminPasses: Set<string>\n  private entrywayJwtPublicKey?: KeyObject\n\n  constructor(\n    public dataplane: DataPlaneClient,\n    opts: AuthVerifierOpts,\n  ) {\n    this.ownDid = opts.ownDid\n    this.standardAudienceDids = new Set([\n      opts.ownDid,\n      ...opts.alternateAudienceDids,\n    ])\n    this.modServiceDid = opts.modServiceDid\n    this.adminPasses = new Set(opts.adminPasses)\n    this.entrywayJwtPublicKey = opts.entrywayJwtPublicKey\n  }\n\n  // verifiers (arrow fns to preserve scope)\n  standardOptionalParameterized =\n    (opts: StandardAuthOpts) =>\n    async (ctx: ReqCtx): Promise<StandardOutput | NullOutput> => {\n      // @TODO remove! basic auth + did supported just for testing.\n      if (isBasicToken(ctx.req)) {\n        const aud = this.ownDid\n        const iss = ctx.req.headers['appview-as-did']\n        if (typeof iss !== 'string' || !isDidString(iss)) {\n          throw new AuthRequiredError('bad issuer')\n        }\n        if (!this.parseRoleCreds(ctx.req).admin) {\n          throw new AuthRequiredError('bad credentials')\n        }\n        return {\n          credentials: { type: 'standard', iss, aud },\n        }\n      } else if (isBearerToken(ctx.req)) {\n        // @NOTE temporarily accept entryway session tokens to shed load from PDS instances\n        const token = bearerTokenFromReq(ctx.req)\n        const header = token ? jose.decodeProtectedHeader(token) : undefined\n        if (header?.typ === 'at+jwt') {\n          // we should never use entryway session tokens in the case of flexible auth audiences (namely in the case of getFeed)\n          if (opts.skipAudCheck) {\n            throw new AuthRequiredError('Malformed token', 'InvalidToken')\n          }\n          return this.entrywaySession(ctx)\n        }\n\n        const { iss, aud } = await this.verifyServiceJwt(ctx, {\n          lxmCheck: opts.lxmCheck,\n          iss: null,\n          aud: null,\n        })\n        if (\n          !opts.skipAudCheck &&\n          !(this.standardAudienceDids as Set<string>).has(aud)\n        ) {\n          throw new AuthRequiredError(\n            'jwt audience does not match service did',\n            'BadJwtAudience',\n          )\n        }\n        return {\n          credentials: {\n            type: 'standard',\n            iss,\n            aud,\n          },\n        }\n      } else {\n        return this.nullCreds()\n      }\n    }\n\n  standardOptional: (ctx: ReqCtx) => Promise<StandardOutput | NullOutput> =\n    this.standardOptionalParameterized({})\n\n  standard = async (ctx: ReqCtx): Promise<StandardOutput> => {\n    const output = await this.standardOptional(ctx)\n    if (output.credentials.type === 'none') {\n      throw new AuthRequiredError(undefined, 'AuthMissing')\n    }\n    return output as StandardOutput\n  }\n\n  role = (ctx: ReqCtx): RoleOutput => {\n    const creds = this.parseRoleCreds(ctx.req)\n    if (creds.status !== RoleStatus.Valid) {\n      throw new AuthRequiredError()\n    }\n    return {\n      credentials: {\n        ...creds,\n        type: 'role',\n      },\n    }\n  }\n\n  standardOrRole = async (\n    ctx: ReqCtx,\n  ): Promise<StandardOutput | RoleOutput> => {\n    if (isBearerToken(ctx.req)) {\n      return this.standard(ctx)\n    } else {\n      return this.role(ctx)\n    }\n  }\n\n  optionalStandardOrRole = async (\n    ctx: ReqCtx,\n  ): Promise<StandardOutput | RoleOutput | NullOutput> => {\n    if (isBearerToken(ctx.req)) {\n      return await this.standard(ctx)\n    } else {\n      const creds = this.parseRoleCreds(ctx.req)\n      if (creds.status === RoleStatus.Valid) {\n        return {\n          credentials: {\n            ...creds,\n            type: 'role',\n          },\n        }\n      } else if (creds.status === RoleStatus.Missing) {\n        return this.nullCreds()\n      } else {\n        throw new AuthRequiredError()\n      }\n    }\n  }\n\n  // @NOTE this auth verifier method is not recommended to be implemented by most appviews\n  // this is a short term fix to remove proxy load from Bluesky's PDS and in line with possible\n  // future plans to have the client talk directly with the appview\n  entrywaySession = async (reqCtx: ReqCtx): Promise<StandardOutput> => {\n    const token = bearerTokenFromReq(reqCtx.req)\n    if (!token) {\n      throw new AuthRequiredError(undefined, 'AuthMissing')\n    }\n\n    // if entryway jwt key not configured then do not parsed these tokens\n    if (!this.entrywayJwtPublicKey) {\n      throw new AuthRequiredError('Malformed token', 'InvalidToken')\n    }\n\n    const res = await jose\n      .jwtVerify(token, this.entrywayJwtPublicKey)\n      .catch((err) => {\n        if (err?.['code'] === 'ERR_JWT_EXPIRED') {\n          throw new AuthRequiredError('Token has expired', 'ExpiredToken')\n        }\n        throw new AuthRequiredError(\n          'Token could not be verified',\n          'InvalidToken',\n        )\n      })\n\n    const { sub, aud, scope, cnf } = res.payload\n    if (typeof cnf !== 'undefined') {\n      // Proof-of-Possession (PoP) tokens are not allowed here\n      // https://www.rfc-editor.org/rfc/rfc7800.html\n      throw new AuthRequiredError(\n        'Malformed token: DPoP not supported',\n        'InvalidToken',\n      )\n    }\n    if (typeof sub !== 'string' || !sub.startsWith('did:')) {\n      throw new AuthRequiredError('Malformed token', 'InvalidToken')\n    } else if (\n      typeof aud !== 'string' ||\n      !aud.startsWith('did:web:') ||\n      !aud.endsWith('.bsky.network')\n    ) {\n      throw new AuthRequiredError('Bad token aud', 'InvalidToken')\n    } else if (typeof scope !== 'string' || !ALLOWED_AUTH_SCOPES.has(scope)) {\n      throw new AuthRequiredError('Bad token scope', 'InvalidToken')\n    }\n\n    return {\n      credentials: {\n        type: 'standard',\n        aud: this.ownDid,\n        iss: sub as DidString | `${DidString}#${string}`,\n      },\n    }\n  }\n\n  modService = async (reqCtx: ReqCtx): Promise<ModServiceOutput> => {\n    const { iss, aud } = await this.verifyServiceJwt(reqCtx, {\n      aud: this.ownDid,\n      iss: [this.modServiceDid, `${this.modServiceDid}#atproto_labeler`],\n    })\n    return { credentials: { type: 'mod_service', aud, iss } }\n  }\n\n  roleOrModService = async (\n    reqCtx: ReqCtx,\n  ): Promise<RoleOutput | ModServiceOutput> => {\n    if (isBearerToken(reqCtx.req)) {\n      return this.modService(reqCtx)\n    } else {\n      return this.role(reqCtx)\n    }\n  }\n\n  parseRoleCreds(req: express.Request) {\n    const parsed = parseBasicAuth(req.headers.authorization || '')\n    const { Missing, Valid, Invalid } = RoleStatus\n    if (!parsed) {\n      return { status: Missing, admin: false, moderator: false, triage: false }\n    }\n    const { username, password } = parsed\n    if (username === 'admin' && this.adminPasses.has(password)) {\n      return { status: Valid, admin: true }\n    }\n    return { status: Invalid, admin: false }\n  }\n\n  async verifyServiceJwt<\n    TOptions extends {\n      iss: string[] | null\n      aud: string | null\n      lxmCheck?: (method?: string) => boolean\n    },\n  >(reqCtx: ReqCtx, opts: TOptions) {\n    const getSigningKey = async (\n      iss: string,\n      _forceRefresh: boolean, // @TODO consider propagating to dataplane\n    ): Promise<string> => {\n      if (opts.iss !== null && !opts.iss.includes(iss)) {\n        throw new AuthRequiredError('Untrusted issuer', 'UntrustedIss')\n      }\n      const [did, serviceId] = iss.split('#')\n      if (!isDidString(did)) {\n        throw new AuthRequiredError('identity unknown')\n      }\n\n      const keyId =\n        serviceId === 'atproto_labeler' ? 'atproto_label' : 'atproto'\n      let identity: GetIdentityByDidResponse\n      try {\n        identity = await this.dataplane.getIdentityByDid({ did })\n      } catch (err) {\n        if (isDataplaneError(err, Code.NotFound)) {\n          throw new AuthRequiredError('identity unknown')\n        }\n        throw err\n      }\n      const keys = unpackIdentityKeys(identity.keys)\n      const didKey = getKeyAsDidKey(keys, { id: keyId })\n      if (!didKey) {\n        throw new AuthRequiredError('missing or bad key')\n      }\n      return didKey\n    }\n    const assertLxmCheck = () => {\n      const lxm = parseReqNsid(reqCtx.req)\n      if (\n        (opts.lxmCheck && !opts.lxmCheck(payload.lxm)) ||\n        (!opts.lxmCheck && payload.lxm !== lxm)\n      ) {\n        throw new AuthRequiredError(\n          payload.lxm !== undefined\n            ? `bad jwt lexicon method (\"lxm\"). must match: ${lxm}`\n            : `missing jwt lexicon method (\"lxm\"). must match: ${lxm}`,\n          'BadJwtLexiconMethod',\n        )\n      }\n    }\n\n    const jwtStr = bearerTokenFromReq(reqCtx.req)\n    if (!jwtStr) {\n      throw new AuthRequiredError('missing jwt', 'MissingJwt')\n    }\n    // if validating additional scopes, skip scope check in initial validation & follow up afterwards\n    const payload = await verifyServiceJwt(\n      jwtStr,\n      opts.aud,\n      null,\n      getSigningKey,\n      verifySignatureWithKey,\n    )\n    if (\n      !payload.iss.endsWith('#atproto_labeler') ||\n      payload.lxm !== undefined\n    ) {\n      // @TODO currently permissive of labelers who dont set lxm yet.\n      // we'll allow ozone self-hosters to upgrade before removing this condition.\n      assertLxmCheck()\n    }\n\n    return {\n      iss: payload.iss as (DidString | `${DidString}#${string}`) &\n        (TOptions extends { iss: ReadonlyArray<infer I> } ? I : unknown),\n      aud: payload.aud as string &\n        (TOptions extends { aud: infer A extends string } ? A : unknown),\n    }\n  }\n\n  isModService(iss: string): iss is DidString | `${DidString}#atproto_labeler` {\n    return [\n      this.modServiceDid,\n      `${this.modServiceDid}#atproto_labeler`,\n    ].includes(iss)\n  }\n\n  nullCreds(): NullOutput {\n    return {\n      credentials: {\n        type: 'none',\n        iss: null,\n      },\n    }\n  }\n\n  parseCreds(\n    creds: StandardOutput | RoleOutput | ModServiceOutput | NullOutput,\n  ) {\n    const viewer =\n      creds.credentials.type === 'standard' ? creds.credentials.iss : null\n    const includeTakedownsAnd3pBlocks =\n      (creds.credentials.type === 'role' && creds.credentials.admin) ||\n      creds.credentials.type === 'mod_service' ||\n      (creds.credentials.type === 'standard' &&\n        this.isModService(creds.credentials.iss))\n    const canPerformTakedown =\n      (creds.credentials.type === 'role' && creds.credentials.admin) ||\n      creds.credentials.type === 'mod_service'\n    const isModService =\n      creds.credentials.type === 'mod_service' ||\n      (creds.credentials.type === 'standard' &&\n        this.isModService(creds.credentials.iss))\n\n    return {\n      viewer,\n      includeTakedowns: includeTakedownsAnd3pBlocks,\n      include3pBlocks: includeTakedownsAnd3pBlocks,\n      canPerformTakedown,\n      isModService,\n      skipViewerBlocks: isModService && viewer !== null,\n    }\n  }\n}\n\n// HELPERS\n// ---------\n\nconst BEARER = 'Bearer '\nconst BASIC = 'Basic '\n\nconst isBearerToken = (req: express.Request): boolean => {\n  return req.headers.authorization?.startsWith(BEARER) ?? false\n}\n\nconst isBasicToken = (req: express.Request): boolean => {\n  return req.headers.authorization?.startsWith(BASIC) ?? false\n}\n\nconst bearerTokenFromReq = (req: express.Request) => {\n  const header = req.headers.authorization || ''\n  if (!header.startsWith(BEARER)) return null\n  return header.slice(BEARER.length).trim()\n}\n\nexport const parseBasicAuth = (\n  token: string,\n): { username: string; password: string } | null => {\n  if (!token.startsWith(BASIC)) return null\n  const b64 = token.slice(BASIC.length)\n  let parsed: string[]\n  try {\n    parsed = ui8.toString(ui8.fromString(b64, 'base64pad'), 'utf8').split(':')\n  } catch (err) {\n    return null\n  }\n  const [username, password] = parsed\n  if (!username || !password) return null\n  return { username, password }\n}\n\nexport const buildBasicAuth = (username: string, password: string): string => {\n  return (\n    BASIC +\n    ui8.toString(ui8.fromString(`${username}:${password}`, 'utf8'), 'base64pad')\n  )\n}\n\nconst createSecp256k1KeyObject = (\n  publicKey: Uint8Array | string,\n): KeyObject => {\n  // accepts compressed or uncompressed keys; validates the point is on-curve\n  const point = secp256k1.ProjectivePoint.fromHex(publicKey).toRawBytes(false)\n  return crypto.createPublicKey({\n    format: 'jwk',\n    key: {\n      kty: 'EC',\n      crv: 'secp256k1',\n      x: ui8.toString(point.subarray(1, 33), 'base64url'),\n      y: ui8.toString(point.subarray(33, 65), 'base64url'),\n    },\n  })\n}\n\nexport const createPublicKeyObject = (publicKeyHex: string): KeyObject => {\n  return createSecp256k1KeyObject(publicKeyHex)\n}\n\nconst verifySig = (\n  publicKey: Uint8Array,\n  data: Uint8Array,\n  sig: Uint8Array,\n) => {\n  const key = createSecp256k1KeyObject(publicKey)\n\n  return crypto.verify(\n    'sha256',\n    data,\n    {\n      key,\n      dsaEncoding: 'ieee-p1363',\n    },\n    sig,\n  )\n}\n\nexport const verifySignatureWithKey: VerifySignatureWithKeyFn = async (\n  didKey: string,\n  msgBytes: Uint8Array,\n  sigBytes: Uint8Array,\n  alg: string,\n) => {\n  if (alg === SECP256K1_JWT_ALG) {\n    const parsed = parseDidKey(didKey)\n    if (alg !== parsed.jwtAlg) {\n      throw new Error(`Expected key alg ${alg}, got ${parsed.jwtAlg}`)\n    }\n\n    return verifySig(parsed.keyBytes, msgBytes, sigBytes)\n  }\n\n  return cryptoVerifySignatureWithKey(didKey, msgBytes, sigBytes, alg)\n}\n"]}

package/dist/lexicons/app/bsky/embed/video.defs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"video.defs.d.ts","sourceRoot":"","sources":["../../../../../src/lexicons/app/bsky/embed/video.defs.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,cAAc,CAAA;AAChC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C,QAAA,MAAM,KAAK,yBAAyB,CAAA;AAEpC,KAAK,KAAK,GAAG,OAAO,KAAK,CAAA;AAEzB,OAAO,EAAE,KAAK,EAAE,CAAA;AAEhB,KAAK,IAAI,GAAG;IACV,KAAK,CAAC,EAAE,sBAAsB,CAAA;IAE9B;;OAEG;IACH,KAAK,EAAE,CAAC,CAAC,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;IAEpB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,SAAS,CAAC,WAAW,CAAA;IAEnC;;OAEG;IACH,YAAY,CAAC,EAAE,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa,CAAA;CACnD,CAAA;AAED,YAAY,EAAE,IAAI,EAAE,CAAA;AAEpB,QAAA,MAAM,IAAI,sEAuBT,CAAA;AAED,OAAO,EAAE,IAAI,EAAE,CAAA;AAEf,QAAA,MAAM,KAAK,yBAAQ,CAAA;AAEnB,KAAK,KAAK,GAAG,OAAO,KAAK,CAAA;AAEzB,OAAO,EAAE,KAAK,EAAE,CAAA;AAEhB,eAAO,MAAM,SAAS,wHAAyC,CAAA;AAC/D,eAAO,MAAM,MAAM;;eAxDT,sBAAsB;eAKvB,CAAC,CAAC,OAAO;mBACL,OAAO,EAAE;cAKd,MAAM;sBACE,SAAS,CAAC,WAAW;uBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;;;eAjB1C,sBAAsB;eAKvB,CAAC,CAAC,OAAO;mBACL,OAAO,EAAE;cAKd,MAAM;sBACE,SAAS,CAAC,WAAW;uBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;;CAuCK,CAAA;AACzD,eAAO,MAAM,OAAO;YAzDV,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;CAwCO,CAAA;AAC3D,eAAO,MAAM,MAAM,uDAAsC,CAAA;AACzD,eAAO,MAAM,KAAK;YA3DR,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;CA0CG,CAAA;AACvD,eAAO,MAAM,UAAU;YA5Db,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;cA2Ca,CAAA;AACjE,eAAO,MAAM,QAAQ;YA7DX,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;CA4CS,CAAA;AAC7D,eAAO,MAAM,MAAM;YA9DT,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;CA6CK,CAAA;AACzD,eAAO,MAAM,UAAU;YA/Db,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;EA8Ca,CAAA;AACjE,eAAO,MAAM,SAAS;YAhEZ,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;CA+CW,CAAA;AAC/D,eAAO,MAAM,aAAa;YAjEhB,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;EAgDmB,CAAA;AAEvE,KAAK,OAAO,GAAG;IACb,KAAK,CAAC,EAAE,8BAA8B,CAAA;IACtC,IAAI,EAAE,CAAC,CAAC,cAAc,CAAA;IACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAA;CAChB,CAAA;AAED,YAAY,EAAE,OAAO,EAAE,CAAA;AAEvB,QAAA,MAAM,OAAO,oFAOZ,CAAA;AAED,OAAO,EAAE,OAAO,EAAE,CAAA;AAElB,KAAK,IAAI,GAAG;IACV,KAAK,CAAC,EAAE,2BAA2B,CAAA;IACnC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAA;IAChB,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAA;IACrB,SAAS,CAAC,EAAE,CAAC,CAAC,SAAS,CAAA;IACvB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,SAAS,CAAC,WAAW,CAAA;IAEnC;;OAEG;IACH,YAAY,CAAC,EAAE,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa,CAAA;CACnD,CAAA;AAED,YAAY,EAAE,IAAI,EAAE,CAAA;AAEpB,QAAA,MAAM,IAAI,2EAqBT,CAAA;AAED,OAAO,EAAE,IAAI,EAAE,CAAA"}
+{"version":3,"file":"video.defs.d.ts","sourceRoot":"","sources":["../../../../../src/lexicons/app/bsky/embed/video.defs.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,cAAc,CAAA;AAChC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C,QAAA,MAAM,KAAK,yBAAyB,CAAA;AAEpC,KAAK,KAAK,GAAG,OAAO,KAAK,CAAA;AAEzB,OAAO,EAAE,KAAK,EAAE,CAAA;AAEhB,KAAK,IAAI,GAAG;IACV,KAAK,CAAC,EAAE,sBAAsB,CAAA;IAE9B;;OAEG;IACH,KAAK,EAAE,CAAC,CAAC,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;IAEpB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,SAAS,CAAC,WAAW,CAAA;IAEnC;;OAEG;IACH,YAAY,CAAC,EAAE,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa,CAAA;CACnD,CAAA;AAED,YAAY,EAAE,IAAI,EAAE,CAAA;AAEpB,QAAA,MAAM,IAAI,sEAqBT,CAAA;AAED,OAAO,EAAE,IAAI,EAAE,CAAA;AAEf,QAAA,MAAM,KAAK,yBAAQ,CAAA;AAEnB,KAAK,KAAK,GAAG,OAAO,KAAK,CAAA;AAEzB,OAAO,EAAE,KAAK,EAAE,CAAA;AAEhB,eAAO,MAAM,SAAS,wHAAyC,CAAA;AAC/D,eAAO,MAAM,MAAM;;eAtDT,sBAAsB;eAKvB,CAAC,CAAC,OAAO;mBACL,OAAO,EAAE;cAKd,MAAM;sBACE,SAAS,CAAC,WAAW;uBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;;;eAjB1C,sBAAsB;eAKvB,CAAC,CAAC,OAAO;mBACL,OAAO,EAAE;cAKd,MAAM;sBACE,SAAS,CAAC,WAAW;uBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;;CAqCK,CAAA;AACzD,eAAO,MAAM,OAAO;YAvDV,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;CAsCO,CAAA;AAC3D,eAAO,MAAM,MAAM,uDAAsC,CAAA;AACzD,eAAO,MAAM,KAAK;YAzDR,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;CAwCG,CAAA;AACvD,eAAO,MAAM,UAAU;YA1Db,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;cAyCa,CAAA;AACjE,eAAO,MAAM,QAAQ;YA3DX,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;CA0CS,CAAA;AAC7D,eAAO,MAAM,MAAM;YA5DT,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;CA2CK,CAAA;AACzD,eAAO,MAAM,UAAU;YA7Db,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;EA4Ca,CAAA;AACjE,eAAO,MAAM,SAAS;YA9DZ,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;CA6CW,CAAA;AAC/D,eAAO,MAAM,aAAa;YA/DhB,sBAAsB;WAKvB,CAAC,CAAC,OAAO;eACL,OAAO,EAAE;UAKd,MAAM;kBACE,SAAS,CAAC,WAAW;mBAKpB,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa;EA8CmB,CAAA;AAEvE,KAAK,OAAO,GAAG;IACb,KAAK,CAAC,EAAE,8BAA8B,CAAA;IACtC,IAAI,EAAE,CAAC,CAAC,cAAc,CAAA;IACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAA;CAChB,CAAA;AAED,YAAY,EAAE,OAAO,EAAE,CAAA;AAEvB,QAAA,MAAM,OAAO,oFAOZ,CAAA;AAED,OAAO,EAAE,OAAO,EAAE,CAAA;AAElB,KAAK,IAAI,GAAG;IACV,KAAK,CAAC,EAAE,2BAA2B,CAAA;IACnC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAA;IAChB,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAA;IACrB,SAAS,CAAC,EAAE,CAAC,CAAC,SAAS,CAAA;IACvB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,SAAS,CAAC,WAAW,CAAA;IAEnC;;OAEG;IACH,YAAY,CAAC,EAAE,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,aAAa,CAAA;CACnD,CAAA;AAED,YAAY,EAAE,IAAI,EAAE,CAAA;AAEpB,QAAA,MAAM,IAAI,2EAmBT,CAAA;AAED,OAAO,EAAE,IAAI,EAAE,CAAA"}

package/dist/lexicons/app/bsky/embed/video.defs.js

@@ -11,8 +11,7 @@ const main = /*#__PURE__*/ l.typedObject($nsid, 'main',
     captions: /*#__PURE__*/ l.optional(
     /*#__PURE__*/ l.array(
     /*#__PURE__*/ l.ref((() => caption)), { maxLength: 20 })),
-    alt: /*#__PURE__*/ l.optional(
-    /*#__PURE__*/ l.string({ maxGraphemes: 1000, maxLength: 10000 })),
+    alt: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),
     aspectRatio: /*#__PURE__*/ l.optional(
     /*#__PURE__*/ l.ref((() => EmbedDefs.aspectRatio))),
     presentation: /*#__PURE__*/ l.optional(
@@ -44,8 +43,7 @@ const view = /*#__PURE__*/ l.typedObject($nsid, 'view',
     playlist: /*#__PURE__*/ l.string({ format: 'uri' }),
     thumbnail: /*#__PURE__*/ l.optional(
     /*#__PURE__*/ l.string({ format: 'uri' })),
-    alt: /*#__PURE__*/ l.optional(
-    /*#__PURE__*/ l.string({ maxGraphemes: 1000, maxLength: 10000 })),
+    alt: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),
     aspectRatio: /*#__PURE__*/ l.optional(
     /*#__PURE__*/ l.ref((() => EmbedDefs.aspectRatio))),
     presentation: /*#__PURE__*/ l.optional(

package/dist/lexicons/app/bsky/embed/video.defs.js.map

@@ -1 +1 @@
-{"version":3,"file":"video.defs.js","sourceRoot":"","sources":["../../../../../src/lexicons/app/bsky/embed/video.defs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,cAAc,CAAA;AAChC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C,MAAM,KAAK,GAAG,sBAAsB,CAAA;AAIpC,OAAO,EAAE,KAAK,EAAE,CAAA;AAyBhB,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CACtC,KAAK,EACL,MAAM;AACN,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;IACrB,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC1E,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IAChC,aAAa,CAAC,CAAC,CAAC,KAAK;IACnB,aAAa,CAAC,CAAC,CAAC,GAAG,CAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAQ,CAAC,EACpD,EAAE,SAAS,EAAE,EAAE,EAAE,CAClB,CACF;IACD,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IAC3B,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CACjE;IACD,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IACnC,aAAa,CAAC,CAAC,CAAC,GAAG,CACjB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAQ,CACrC,CACF;IACD,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IACpC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAuC,CAC9D;CACF,CAAC,CACH,CAAA;AAED,OAAO,EAAE,IAAI,EAAE,CAAA;AAEf,MAAM,KAAK,GAAG,KAAK,CAAA;AAInB,OAAO,EAAE,KAAK,EAAE,CAAA;AAEhB,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC/D,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzD,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC3D,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzD,MAAM,CAAC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACvD,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACjE,MAAM,CAAC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC7D,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACjE,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC/D,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAUvE,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CACzC,KAAK,EACL,SAAS;AACT,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;IACrB,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACpD,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;CACrE,CAAC,CACH,CAAA;AAED,OAAO,EAAE,OAAO,EAAE,CAAA;AAkBlB,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CACtC,KAAK,EACL,MAAM;AACN,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;IACrB,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9C,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACnD,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IACjC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAC1C;IACD,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IAC3B,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CACjE;IACD,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IACnC,aAAa,CAAC,CAAC,CAAC,GAAG,CACjB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAQ,CACrC,CACF;IACD,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IACpC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAuC,CAC9D;CACF,CAAC,CACH,CAAA;AAED,OAAO,EAAE,IAAI,EAAE,CAAA","sourcesContent":["/*\n * THIS FILE WAS GENERATED BY \"@atproto/lex\". DO NOT EDIT.\n */\n\nimport { l } from '@atproto/lex'\nimport * as EmbedDefs from './defs.defs.js'\n\nconst $nsid = 'app.bsky.embed.video'\n\ntype $nsid = typeof $nsid\n\nexport { $nsid }\n\ntype Main = {\n  $type?: 'app.bsky.embed.video'\n\n  /**\n   * The mp4 video file. May be up to 300mb, formerly limited to 100mb.\n   */\n  video: l.BlobRef\n  captions?: Caption[]\n\n  /**\n   * Alt text description of the video, for accessibility.\n   */\n  alt?: string\n  aspectRatio?: EmbedDefs.AspectRatio\n\n  /**\n   * A hint to the client about how to present the video.\n   */\n  presentation?: 'default' | 'gif' | l.UnknownString\n}\n\nexport type { Main }\n\nconst main = /*#__PURE__*/ l.typedObject<Main>(\n  $nsid,\n  'main',\n  /*#__PURE__*/ l.object({\n    video: /*#__PURE__*/ l.blob({ accept: ['video/mp4'], maxSize: 300000000 }),\n    captions: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.array(\n        /*#__PURE__*/ l.ref<Caption>((() => caption) as any),\n        { maxLength: 20 },\n      ),\n    ),\n    alt: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.string({ maxGraphemes: 1000, maxLength: 10000 }),\n    ),\n    aspectRatio: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.ref<EmbedDefs.AspectRatio>(\n        (() => EmbedDefs.aspectRatio) as any,\n      ),\n    ),\n    presentation: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.string<{ knownValues: ['default', 'gif'] }>(),\n    ),\n  }),\n)\n\nexport { main }\n\nconst $type = $nsid\n\ntype $type = typeof $type\n\nexport { $type }\n\nexport const $isTypeOf = /*#__PURE__*/ main.isTypeOf.bind(main)\nexport const $build = /*#__PURE__*/ main.build.bind(main)\nexport const $assert = /*#__PURE__*/ main.assert.bind(main)\nexport const $check = /*#__PURE__*/ main.check.bind(main)\nexport const $cast = /*#__PURE__*/ main.cast.bind(main)\nexport const $ifMatches = /*#__PURE__*/ main.ifMatches.bind(main)\nexport const $matches = /*#__PURE__*/ main.matches.bind(main)\nexport const $parse = /*#__PURE__*/ main.parse.bind(main)\nexport const $safeParse = /*#__PURE__*/ main.safeParse.bind(main)\nexport const $validate = /*#__PURE__*/ main.validate.bind(main)\nexport const $safeValidate = /*#__PURE__*/ main.safeValidate.bind(main)\n\ntype Caption = {\n  $type?: 'app.bsky.embed.video#caption'\n  lang: l.LanguageString\n  file: l.BlobRef\n}\n\nexport type { Caption }\n\nconst caption = /*#__PURE__*/ l.typedObject<Caption>(\n  $nsid,\n  'caption',\n  /*#__PURE__*/ l.object({\n    lang: /*#__PURE__*/ l.string({ format: 'language' }),\n    file: /*#__PURE__*/ l.blob({ accept: ['text/vtt'], maxSize: 20000 }),\n  }),\n)\n\nexport { caption }\n\ntype View = {\n  $type?: 'app.bsky.embed.video#view'\n  cid: l.CidString\n  playlist: l.UriString\n  thumbnail?: l.UriString\n  alt?: string\n  aspectRatio?: EmbedDefs.AspectRatio\n\n  /**\n   * A hint to the client about how to present the video.\n   */\n  presentation?: 'default' | 'gif' | l.UnknownString\n}\n\nexport type { View }\n\nconst view = /*#__PURE__*/ l.typedObject<View>(\n  $nsid,\n  'view',\n  /*#__PURE__*/ l.object({\n    cid: /*#__PURE__*/ l.string({ format: 'cid' }),\n    playlist: /*#__PURE__*/ l.string({ format: 'uri' }),\n    thumbnail: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.string({ format: 'uri' }),\n    ),\n    alt: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.string({ maxGraphemes: 1000, maxLength: 10000 }),\n    ),\n    aspectRatio: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.ref<EmbedDefs.AspectRatio>(\n        (() => EmbedDefs.aspectRatio) as any,\n      ),\n    ),\n    presentation: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.string<{ knownValues: ['default', 'gif'] }>(),\n    ),\n  }),\n)\n\nexport { view }\n"]}
+{"version":3,"file":"video.defs.js","sourceRoot":"","sources":["../../../../../src/lexicons/app/bsky/embed/video.defs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,cAAc,CAAA;AAChC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C,MAAM,KAAK,GAAG,sBAAsB,CAAA;AAIpC,OAAO,EAAE,KAAK,EAAE,CAAA;AAyBhB,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CACtC,KAAK,EACL,MAAM;AACN,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;IACrB,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC1E,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IAChC,aAAa,CAAC,CAAC,CAAC,KAAK;IACnB,aAAa,CAAC,CAAC,CAAC,GAAG,CAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAQ,CAAC,EACpD,EAAE,SAAS,EAAE,EAAE,EAAE,CAClB,CACF;IACD,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACvD,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IACnC,aAAa,CAAC,CAAC,CAAC,GAAG,CACjB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAQ,CACrC,CACF;IACD,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IACpC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAuC,CAC9D;CACF,CAAC,CACH,CAAA;AAED,OAAO,EAAE,IAAI,EAAE,CAAA;AAEf,MAAM,KAAK,GAAG,KAAK,CAAA;AAInB,OAAO,EAAE,KAAK,EAAE,CAAA;AAEhB,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC/D,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzD,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC3D,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzD,MAAM,CAAC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACvD,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACjE,MAAM,CAAC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC7D,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACjE,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC/D,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAUvE,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CACzC,KAAK,EACL,SAAS;AACT,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;IACrB,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACpD,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;CACrE,CAAC,CACH,CAAA;AAED,OAAO,EAAE,OAAO,EAAE,CAAA;AAkBlB,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CACtC,KAAK,EACL,MAAM;AACN,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;IACrB,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9C,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACnD,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IACjC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAC1C;IACD,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACvD,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IACnC,aAAa,CAAC,CAAC,CAAC,GAAG,CACjB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAQ,CACrC,CACF;IACD,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ;IACpC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAuC,CAC9D;CACF,CAAC,CACH,CAAA;AAED,OAAO,EAAE,IAAI,EAAE,CAAA","sourcesContent":["/*\n * THIS FILE WAS GENERATED BY \"@atproto/lex\". DO NOT EDIT.\n */\n\nimport { l } from '@atproto/lex'\nimport * as EmbedDefs from './defs.defs.js'\n\nconst $nsid = 'app.bsky.embed.video'\n\ntype $nsid = typeof $nsid\n\nexport { $nsid }\n\ntype Main = {\n  $type?: 'app.bsky.embed.video'\n\n  /**\n   * The mp4 video file. May be up to 300mb, formerly limited to 100mb.\n   */\n  video: l.BlobRef\n  captions?: Caption[]\n\n  /**\n   * Alt text description of the video, for accessibility.\n   */\n  alt?: string\n  aspectRatio?: EmbedDefs.AspectRatio\n\n  /**\n   * A hint to the client about how to present the video.\n   */\n  presentation?: 'default' | 'gif' | l.UnknownString\n}\n\nexport type { Main }\n\nconst main = /*#__PURE__*/ l.typedObject<Main>(\n  $nsid,\n  'main',\n  /*#__PURE__*/ l.object({\n    video: /*#__PURE__*/ l.blob({ accept: ['video/mp4'], maxSize: 300000000 }),\n    captions: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.array(\n        /*#__PURE__*/ l.ref<Caption>((() => caption) as any),\n        { maxLength: 20 },\n      ),\n    ),\n    alt: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\n    aspectRatio: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.ref<EmbedDefs.AspectRatio>(\n        (() => EmbedDefs.aspectRatio) as any,\n      ),\n    ),\n    presentation: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.string<{ knownValues: ['default', 'gif'] }>(),\n    ),\n  }),\n)\n\nexport { main }\n\nconst $type = $nsid\n\ntype $type = typeof $type\n\nexport { $type }\n\nexport const $isTypeOf = /*#__PURE__*/ main.isTypeOf.bind(main)\nexport const $build = /*#__PURE__*/ main.build.bind(main)\nexport const $assert = /*#__PURE__*/ main.assert.bind(main)\nexport const $check = /*#__PURE__*/ main.check.bind(main)\nexport const $cast = /*#__PURE__*/ main.cast.bind(main)\nexport const $ifMatches = /*#__PURE__*/ main.ifMatches.bind(main)\nexport const $matches = /*#__PURE__*/ main.matches.bind(main)\nexport const $parse = /*#__PURE__*/ main.parse.bind(main)\nexport const $safeParse = /*#__PURE__*/ main.safeParse.bind(main)\nexport const $validate = /*#__PURE__*/ main.validate.bind(main)\nexport const $safeValidate = /*#__PURE__*/ main.safeValidate.bind(main)\n\ntype Caption = {\n  $type?: 'app.bsky.embed.video#caption'\n  lang: l.LanguageString\n  file: l.BlobRef\n}\n\nexport type { Caption }\n\nconst caption = /*#__PURE__*/ l.typedObject<Caption>(\n  $nsid,\n  'caption',\n  /*#__PURE__*/ l.object({\n    lang: /*#__PURE__*/ l.string({ format: 'language' }),\n    file: /*#__PURE__*/ l.blob({ accept: ['text/vtt'], maxSize: 20000 }),\n  }),\n)\n\nexport { caption }\n\ntype View = {\n  $type?: 'app.bsky.embed.video#view'\n  cid: l.CidString\n  playlist: l.UriString\n  thumbnail?: l.UriString\n  alt?: string\n  aspectRatio?: EmbedDefs.AspectRatio\n\n  /**\n   * A hint to the client about how to present the video.\n   */\n  presentation?: 'default' | 'gif' | l.UnknownString\n}\n\nexport type { View }\n\nconst view = /*#__PURE__*/ l.typedObject<View>(\n  $nsid,\n  'view',\n  /*#__PURE__*/ l.object({\n    cid: /*#__PURE__*/ l.string({ format: 'cid' }),\n    playlist: /*#__PURE__*/ l.string({ format: 'uri' }),\n    thumbnail: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.string({ format: 'uri' }),\n    ),\n    alt: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\n    aspectRatio: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.ref<EmbedDefs.AspectRatio>(\n        (() => EmbedDefs.aspectRatio) as any,\n      ),\n    ),\n    presentation: /*#__PURE__*/ l.optional(\n      /*#__PURE__*/ l.string<{ knownValues: ['default', 'gif'] }>(),\n    ),\n  }),\n)\n\nexport { view }\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atproto/bsky",
-  "version": "0.0.274",
+  "version": "0.0.275",
   "license": "MIT",
   "description": "Reference implementation of app.bsky App View (Bluesky API)",
   "keywords": [
@@ -34,6 +34,7 @@
     "@connectrpc/connect-express": "^1.1.4",
     "@connectrpc/connect-node": "^1.1.4",
     "@did-plc/lib": "^0.0.1",
+    "@noble/curves": "^1.7.0",
     "@growthbook/growthbook": "^1.6.2",
     "@hapi/address": "^5.1.1",
     "@types/http-errors": "^2.0.1",
@@ -46,7 +47,6 @@
     "http-terminator": "^3.2.0",
     "ioredis": "^5.3.2",
     "jose": "^5.0.1",
-    "key-encoder": "^2.0.3",
     "kysely": "^0.29.2",
     "leo-profanity": "^1.8.0",
     "murmurhash": "^2.0.1",
@@ -60,17 +60,17 @@
     "undici": "^8.5.0",
     "zod": "3.23.8",
     "@atproto-labs/fetch-node": "^0.3.7",
-    "@atproto-labs/xrpc-utils": "^0.1.17",
+    "@atproto-labs/xrpc-utils": "^0.1.18",
+    "@atproto/api": "^0.20.41",
+    "@atproto/crypto": "^0.5.4",
     "@atproto/common": "^0.8.0",
-    "@atproto/api": "^0.20.40",
     "@atproto/identity": "^0.5.9",
-    "@atproto/lex": "^0.3.6",
     "@atproto/did": "^0.5.4",
-    "@atproto/crypto": "^0.5.4",
-    "@atproto/repo": "^0.10.11",
-    "@atproto/sync": "^0.4.4",
+    "@atproto/lex": "^0.3.6",
+    "@atproto/sync": "^0.4.5",
     "@atproto/syntax": "^0.7.4",
-    "@atproto/xrpc-server": "^0.12.4"
+    "@atproto/repo": "^0.10.11",
+    "@atproto/xrpc-server": "^0.12.5"
   },
   "devDependencies": {
     "@bufbuild/buf": "^1.28.1",
@@ -84,7 +84,7 @@
     "@types/pg": "^8.15.5",
     "@types/qs": "^6.9.7",
     "vitest": "^4.1.10",
-    "@atproto/pds": "^0.5.28"
+    "@atproto/pds": "^0.5.29"
   },
   "scripts": {
     "codegen:buf": "buf generate ../bsync/proto && buf generate ./proto",