@atproto/common 0.3.4 → 0.4.1

package/dist/ipld-multi.d.ts

@@ -1 +1,2 @@
 export declare const cborDecodeMulti: (encoded: Uint8Array) => unknown[];
+//# sourceMappingURL=ipld-multi.d.ts.map

package/dist/ipld-multi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipld-multi.d.ts","sourceRoot":"","sources":["../src/ipld-multi.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,eAAe,YAAa,UAAU,KAAG,OAAO,EAM5D,CAAA"}

package/dist/ipld-multi.js

@@ -0,0 +1,53 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cborDecodeMulti = void 0;
+const cborx = __importStar(require("cbor-x"));
+const cid_1 = require("multiformats/cid");
+// add extension for decoding CIDs
+// decoding code taken from @ipld/dag-cbor
+// does not support encoding cids
+cborx.addExtension({
+    Class: cid_1.CID,
+    tag: 42,
+    encode: () => {
+        throw new Error('cannot encode cids');
+    },
+    decode: (bytes) => {
+        if (bytes[0] !== 0) {
+            throw new Error('Invalid CID for CBOR tag 42; expected leading 0x00');
+        }
+        return cid_1.CID.decode(bytes.subarray(1)); // ignore leading 0x00
+    },
+});
+const cborDecodeMulti = (encoded) => {
+    const decoded = [];
+    cborx.decodeMultiple(encoded, (value) => {
+        decoded.push(value);
+    });
+    return decoded;
+};
+exports.cborDecodeMulti = cborDecodeMulti;
+//# sourceMappingURL=ipld-multi.js.map

package/dist/ipld-multi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipld-multi.js","sourceRoot":"","sources":["../src/ipld-multi.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8CAA+B;AAC/B,0CAAsC;AAEtC,kCAAkC;AAClC,0CAA0C;AAC1C,iCAAiC;AACjC,KAAK,CAAC,YAAY,CAAC;IACjB,KAAK,EAAE,SAAG;IACV,GAAG,EAAE,EAAE;IACP,MAAM,EAAE,GAAG,EAAE;QACX,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACvC,CAAC;IACD,MAAM,EAAE,CAAC,KAAiB,EAAO,EAAE;QACjC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QACD,OAAO,SAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,sBAAsB;IAC7D,CAAC;CACF,CAAC,CAAA;AAEK,MAAM,eAAe,GAAG,CAAC,OAAmB,EAAa,EAAE;IAChE,MAAM,OAAO,GAAc,EAAE,CAAA;IAC7B,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACtC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AANY,QAAA,eAAe,mBAM3B"}

package/dist/ipld.d.ts

@@ -27,3 +27,4 @@ export declare class VerifyCidError extends Error {
     actual: CID;
     constructor(expected: CID, actual: CID);
 }
+//# sourceMappingURL=ipld.d.ts.map

package/dist/ipld.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipld.d.ts","sourceRoot":"","sources":["../src/ipld.ts"],"names":[],"mappings":";;;AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAA;AAErD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,KAAK,MAAM,oBAAoB,CAAA;AAI3C,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C,eAAO,MAAM,UAAU,yBAAmB,CAAA;AAC1C,eAAO,MAAM,UAAU,yBAAmB,CAAA;AAE1C,eAAO,MAAM,eAAe,SAAgB,OAAO,kCAMlD,CAAA;AAED,eAAO,MAAM,UAAU,SAAgB,OAAO,KAAG,QAAQ,GAAG,CAG3D,CAAA;AAED,eAAO,MAAM,UAAU,WAAkB,MAAM,KAAG,QAAQ,OAAO,CAOhE,CAAA;AAED,eAAO,MAAM,iBAAiB,UACrB,UAAU,KAChB,OAAO,MAAM,EAAE,OAAO,CAMxB,CAAA;AAED,eAAO,MAAM,iBAAiB,QAAe,GAAG,SAAS,UAAU,kBAQlE,CAAA;AAED,eAAO,MAAM,WAAW,SAAU,UAAU,SAAS,MAAM,KAAG,GAG7D,CAAA;AAED,eAAO,MAAM,cAAc,SAAU,UAAU,KAAG,GAEjD,CAAA;AAED,qBAAa,kBAAmB,SAAQ,SAAS;IAE5B,GAAG,EAAE,GAAG;IAD3B,MAAM,cAA8B;gBACjB,GAAG,EAAE,GAAG;IAI3B,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,iBAAiB;IAKzE,MAAM,CAAC,EAAE,EAAE,iBAAiB;CAgB7B;AAED,qBAAa,cAAe,SAAQ,KAAK;IAE9B,QAAQ,EAAE,GAAG;IACb,MAAM,EAAE,GAAG;gBADX,QAAQ,EAAE,GAAG,EACb,MAAM,EAAE,GAAG;CAIrB"}

package/dist/ipld.js

@@ -0,0 +1,146 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifyCidError = exports.VerifyCidTransform = exports.sha256RawToCid = exports.sha256ToCid = exports.verifyCidForBytes = exports.cborBytesToRecord = exports.isValidCid = exports.cidForCbor = exports.dataToCborBlock = exports.cborDecode = exports.cborEncode = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const stream_1 = require("stream");
+const common_web_1 = require("@atproto/common-web");
+const cid_1 = require("multiformats/cid");
+const Block = __importStar(require("multiformats/block"));
+const rawCodec = __importStar(require("multiformats/codecs/raw"));
+const sha2_1 = require("multiformats/hashes/sha2");
+const mf = __importStar(require("multiformats"));
+const cborCodec = __importStar(require("@ipld/dag-cbor"));
+exports.cborEncode = cborCodec.encode;
+exports.cborDecode = cborCodec.decode;
+const dataToCborBlock = async (data) => {
+    return Block.encode({
+        value: data,
+        codec: cborCodec,
+        hasher: sha2_1.sha256,
+    });
+};
+exports.dataToCborBlock = dataToCborBlock;
+const cidForCbor = async (data) => {
+    const block = await (0, exports.dataToCborBlock)(data);
+    return block.cid;
+};
+exports.cidForCbor = cidForCbor;
+const isValidCid = async (cidStr) => {
+    try {
+        const parsed = cid_1.CID.parse(cidStr);
+        return parsed.toString() === cidStr;
+    }
+    catch (err) {
+        return false;
+    }
+};
+exports.isValidCid = isValidCid;
+const cborBytesToRecord = (bytes) => {
+    const val = (0, exports.cborDecode)(bytes);
+    if (!common_web_1.check.is(val, common_web_1.schema.map)) {
+        throw new Error(`Expected object, got: ${val}`);
+    }
+    return val;
+};
+exports.cborBytesToRecord = cborBytesToRecord;
+const verifyCidForBytes = async (cid, bytes) => {
+    const digest = await sha2_1.sha256.digest(bytes);
+    const expected = cid_1.CID.createV1(cid.code, digest);
+    if (!cid.equals(expected)) {
+        throw new Error(`Not a valid CID for bytes. Expected: ${expected.toString()} Got: ${cid.toString()}`);
+    }
+};
+exports.verifyCidForBytes = verifyCidForBytes;
+const sha256ToCid = (hash, codec) => {
+    const digest = mf.digest.create(sha2_1.sha256.code, hash);
+    return cid_1.CID.createV1(codec, digest);
+};
+exports.sha256ToCid = sha256ToCid;
+const sha256RawToCid = (hash) => {
+    return (0, exports.sha256ToCid)(hash, rawCodec.code);
+};
+exports.sha256RawToCid = sha256RawToCid;
+class VerifyCidTransform extends stream_1.Transform {
+    constructor(cid) {
+        super();
+        Object.defineProperty(this, "cid", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: cid
+        });
+        Object.defineProperty(this, "hasher", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: crypto_1.default.createHash('sha256')
+        });
+    }
+    _transform(chunk, _enc, cb) {
+        this.hasher.update(chunk);
+        cb(null, chunk);
+    }
+    _flush(cb) {
+        try {
+            const cid = (0, exports.sha256RawToCid)(this.hasher.digest());
+            if (this.cid.equals(cid)) {
+                return cb();
+            }
+            else {
+                return cb(new VerifyCidError(this.cid, cid));
+            }
+        }
+        catch (_err) {
+            const err = _err instanceof Error
+                ? _err
+                : new Error('Unexpected error', { cause: _err });
+            return cb(err);
+        }
+    }
+}
+exports.VerifyCidTransform = VerifyCidTransform;
+class VerifyCidError extends Error {
+    constructor(expected, actual) {
+        super('Bad cid check');
+        Object.defineProperty(this, "expected", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: expected
+        });
+        Object.defineProperty(this, "actual", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: actual
+        });
+    }
+}
+exports.VerifyCidError = VerifyCidError;
+//# sourceMappingURL=ipld.js.map

package/dist/ipld.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipld.js","sourceRoot":"","sources":["../src/ipld.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oDAA2B;AAC3B,mCAAqD;AACrD,oDAAmD;AACnD,0CAAsC;AACtC,0DAA2C;AAC3C,kEAAmD;AACnD,mDAAiD;AACjD,iDAAkC;AAClC,0DAA2C;AAE9B,QAAA,UAAU,GAAG,SAAS,CAAC,MAAM,CAAA;AAC7B,QAAA,UAAU,GAAG,SAAS,CAAC,MAAM,CAAA;AAEnC,MAAM,eAAe,GAAG,KAAK,EAAE,IAAa,EAAE,EAAE;IACrD,OAAO,KAAK,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,aAAM;KACf,CAAC,CAAA;AACJ,CAAC,CAAA;AANY,QAAA,eAAe,mBAM3B;AAEM,MAAM,UAAU,GAAG,KAAK,EAAE,IAAa,EAAgB,EAAE;IAC9D,MAAM,KAAK,GAAG,MAAM,IAAA,uBAAe,EAAC,IAAI,CAAC,CAAA;IACzC,OAAO,KAAK,CAAC,GAAG,CAAA;AAClB,CAAC,CAAA;AAHY,QAAA,UAAU,cAGtB;AAEM,MAAM,UAAU,GAAG,KAAK,EAAE,MAAc,EAAoB,EAAE;IACnE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,OAAO,MAAM,CAAC,QAAQ,EAAE,KAAK,MAAM,CAAA;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAPY,QAAA,UAAU,cAOtB;AAEM,MAAM,iBAAiB,GAAG,CAC/B,KAAiB,EACQ,EAAE;IAC3B,MAAM,GAAG,GAAG,IAAA,kBAAU,EAAC,KAAK,CAAC,CAAA;IAC7B,IAAI,CAAC,kBAAK,CAAC,EAAE,CAAC,GAAG,EAAE,mBAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AARY,QAAA,iBAAiB,qBAQ7B;AAEM,MAAM,iBAAiB,GAAG,KAAK,EAAE,GAAQ,EAAE,KAAiB,EAAE,EAAE;IACrE,MAAM,MAAM,GAAG,MAAM,aAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACzC,MAAM,QAAQ,GAAG,SAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC/C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,wCAAwC,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,CAAC,QAAQ,EAAE,EAAE,CACrF,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AARY,QAAA,iBAAiB,qBAQ7B;AAEM,MAAM,WAAW,GAAG,CAAC,IAAgB,EAAE,KAAa,EAAO,EAAE;IAClE,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAClD,OAAO,SAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;AACpC,CAAC,CAAA;AAHY,QAAA,WAAW,eAGvB;AAEM,MAAM,cAAc,GAAG,CAAC,IAAgB,EAAO,EAAE;IACtD,OAAO,IAAA,mBAAW,EAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;AACzC,CAAC,CAAA;AAFY,QAAA,cAAc,kBAE1B;AAED,MAAa,kBAAmB,SAAQ,kBAAS;IAE/C,YAAmB,GAAQ;QACzB,KAAK,EAAE,CAAA;QADG;;;;mBAAO,GAAG;WAAK;QAD3B;;;;mBAAS,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;WAAA;IAGpC,CAAC;IAED,UAAU,CAAC,KAAiB,EAAE,IAAoB,EAAE,EAAqB;QACvE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACzB,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,CAAC,EAAqB;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAA,sBAAc,EAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAChD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,EAAE,EAAE,CAAA;YACb,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;YAC9C,CAAC;QACH,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACd,MAAM,GAAG,GACP,IAAI,YAAY,KAAK;gBACnB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,KAAK,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACpD,OAAO,EAAE,CAAC,GAAG,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;CACF;AA3BD,gDA2BC;AAED,MAAa,cAAe,SAAQ,KAAK;IACvC,YACS,QAAa,EACb,MAAW;QAElB,KAAK,CAAC,eAAe,CAAC,CAAA;QAHtB;;;;mBAAO,QAAQ;WAAK;QACpB;;;;mBAAO,MAAM;WAAK;IAGpB,CAAC;CACF;AAPD,wCAOC"}

package/dist/logger.d.ts

@@ -1,2 +1,3 @@
 import pino from 'pino';
 export declare const subsystemLogger: (name: string) => pino.Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AAwBvB,eAAO,MAAM,eAAe,SAAU,MAAM,KAAG,KAAK,MAWnD,CAAA"}

package/dist/logger.js

@@ -0,0 +1,32 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.subsystemLogger = void 0;
+const pino_1 = __importDefault(require("pino"));
+const allSystemsEnabled = !process.env.LOG_SYSTEMS;
+const enabledSystems = (process.env.LOG_SYSTEMS || '')
+    .replace(',', ' ')
+    .split(' ');
+const enabledEnv = process.env.LOG_ENABLED;
+const enabled = enabledEnv === 'true' || enabledEnv === 't' || enabledEnv === '1';
+const level = process.env.LOG_LEVEL || 'info';
+const config = {
+    enabled,
+    level,
+};
+const rootLogger = process.env.LOG_DESTINATION
+    ? (0, pino_1.default)(config, pino_1.default.destination(process.env.LOG_DESTINATION))
+    : (0, pino_1.default)(config);
+const subsystems = {};
+const subsystemLogger = (name) => {
+    if (subsystems[name])
+        return subsystems[name];
+    const subsystemEnabled = enabled && (allSystemsEnabled || enabledSystems.indexOf(name) > -1);
+    // can't disable child loggers, so we just set their level to fatal to effectively turn them off
+    subsystems[name] = rootLogger.child({ name }, { level: subsystemEnabled ? level : 'silent' });
+    return subsystems[name];
+};
+exports.subsystemLogger = subsystemLogger;
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAuB;AAEvB,MAAM,iBAAiB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAA;AAClD,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;KACnD,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC;KACjB,KAAK,CAAC,GAAG,CAAC,CAAA;AAEb,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAA;AAC1C,MAAM,OAAO,GACX,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,CAAA;AAEnE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,CAAA;AAE7C,MAAM,MAAM,GAAG;IACb,OAAO;IACP,KAAK;CACN,CAAA;AAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe;IAC5C,CAAC,CAAC,IAAA,cAAI,EAAC,MAAM,EAAE,cAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7D,CAAC,CAAC,IAAA,cAAI,EAAC,MAAM,CAAC,CAAA;AAEhB,MAAM,UAAU,GAAgC,EAAE,CAAA;AAE3C,MAAM,eAAe,GAAG,CAAC,IAAY,EAAe,EAAE;IAC3D,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,gBAAgB,GACpB,OAAO,IAAI,CAAC,iBAAiB,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAErE,gGAAgG;IAChG,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CACjC,EAAE,IAAI,EAAE,EACR,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAC/C,CAAA;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC,CAAA;AAXY,QAAA,eAAe,mBAW3B"}

package/dist/obfuscate.d.ts

@@ -0,0 +1,9 @@
+export declare function obfuscateEmail(email: string): string;
+export declare function obfuscateWord(word: string): string;
+export declare function obfuscateHeaders(headers: Record<string, string>): Record<string, string>;
+export declare function obfuscateAuthHeader(authHeader: string): string;
+export declare function obfuscateBasic(token: string): null | string;
+export declare function obfuscateBearer(token: string): string;
+export declare function obfuscateToken(token: string): string;
+export declare function obfuscateJwt(token: string): null | string;
+//# sourceMappingURL=obfuscate.d.ts.map

package/dist/obfuscate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"obfuscate.d.ts","sourceRoot":"","sources":["../src/obfuscate.ts"],"names":[],"mappings":"AAAA,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,UAG3C;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,UAEzC;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,0BAY/D;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAgB9D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAS3D;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAuBzD"}

package/dist/obfuscate.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.obfuscateJwt = exports.obfuscateToken = exports.obfuscateBearer = exports.obfuscateBasic = exports.obfuscateAuthHeader = exports.obfuscateHeaders = exports.obfuscateWord = exports.obfuscateEmail = void 0;
+function obfuscateEmail(email) {
+    const [local, domain] = email.split('@');
+    return `${obfuscateWord(local)}@${obfuscateWord(domain)}`;
+}
+exports.obfuscateEmail = obfuscateEmail;
+function obfuscateWord(word) {
+    return `${word.charAt(0)}***${word.charAt(word.length - 1)}`;
+}
+exports.obfuscateWord = obfuscateWord;
+function obfuscateHeaders(headers) {
+    const obfuscatedHeaders = {};
+    for (const key in headers) {
+        if (key.toLowerCase() === 'authorization') {
+            obfuscatedHeaders[key] = obfuscateAuthHeader(headers[key]);
+        }
+        else if (key.toLowerCase() === 'dpop') {
+            obfuscatedHeaders[key] = obfuscateJwt(headers[key]) || 'Invalid';
+        }
+        else {
+            obfuscatedHeaders[key] = headers[key];
+        }
+    }
+    return obfuscatedHeaders;
+}
+exports.obfuscateHeaders = obfuscateHeaders;
+function obfuscateAuthHeader(authHeader) {
+    // This is a hot path (runs on every request). Avoid using split() or regex.
+    const spaceIdx = authHeader.indexOf(' ');
+    if (spaceIdx === -1)
+        return 'Invalid';
+    const type = authHeader.slice(0, spaceIdx);
+    switch (type.toLowerCase()) {
+        case 'bearer':
+        case 'dpop':
+            return `${type} ${obfuscateBearer(authHeader.slice(spaceIdx + 1))}`;
+        case 'basic':
+            return `${type} ${obfuscateBasic(authHeader.slice(spaceIdx + 1)) || 'Invalid'}`;
+        default:
+            return `Invalid`;
+    }
+}
+exports.obfuscateAuthHeader = obfuscateAuthHeader;
+function obfuscateBasic(token) {
+    if (!token)
+        return null;
+    const buffer = Buffer.from(token, 'base64');
+    if (!buffer.length)
+        return null; // Buffer.from will silently ignore invalid base64 chars
+    const authHeader = buffer.toString('utf8');
+    const colIdx = authHeader.indexOf(':');
+    if (colIdx === -1)
+        return null;
+    const username = authHeader.slice(0, colIdx);
+    return `${username}:***`;
+}
+exports.obfuscateBasic = obfuscateBasic;
+function obfuscateBearer(token) {
+    return obfuscateJwt(token) || obfuscateToken(token);
+}
+exports.obfuscateBearer = obfuscateBearer;
+function obfuscateToken(token) {
+    if (token.length >= 12)
+        return obfuscateWord(token);
+    return token ? '***' : '';
+}
+exports.obfuscateToken = obfuscateToken;
+function obfuscateJwt(token) {
+    const firstDot = token.indexOf('.');
+    if (firstDot === -1)
+        return null;
+    const secondDot = token.indexOf('.', firstDot + 1);
+    if (secondDot === -1)
+        return null;
+    // Expected to be missing
+    const thirdDot = token.indexOf('.', secondDot + 1);
+    if (thirdDot !== -1)
+        return null;
+    try {
+        const payloadEnc = token.slice(firstDot + 1, secondDot);
+        const payloadJson = Buffer.from(payloadEnc, 'base64').toString('utf8');
+        const payload = JSON.parse(payloadJson);
+        if (typeof payload.sub === 'string')
+            return payload.sub;
+    }
+    catch {
+        // Invalid JWT
+        return null;
+    }
+    // Strip the signature
+    return token.slice(0, secondDot) + '.obfuscated';
+}
+exports.obfuscateJwt = obfuscateJwt;
+//# sourceMappingURL=obfuscate.js.map

package/dist/obfuscate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"obfuscate.js","sourceRoot":"","sources":["../src/obfuscate.ts"],"names":[],"mappings":";;;AAAA,SAAgB,cAAc,CAAC,KAAa;IAC1C,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACxC,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAA;AAC3D,CAAC;AAHD,wCAGC;AAED,SAAgB,aAAa,CAAC,IAAY;IACxC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAA;AAC9D,CAAC;AAFD,sCAEC;AAED,SAAgB,gBAAgB,CAAC,OAA+B;IAC9D,MAAM,iBAAiB,GAA2B,EAAE,CAAA;IACpD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,eAAe,EAAE,CAAC;YAC1C,iBAAiB,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAC5D,CAAC;aAAM,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YACxC,iBAAiB,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAA;QAClE,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAA;AAC1B,CAAC;AAZD,4CAYC;AAED,SAAgB,mBAAmB,CAAC,UAAkB;IACpD,4EAA4E;IAE5E,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAErC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC1C,QAAQ,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3B,KAAK,QAAQ,CAAC;QACd,KAAK,MAAM;YACT,OAAO,GAAG,IAAI,IAAI,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QACrE,KAAK,OAAO;YACV,OAAO,GAAG,IAAI,IAAI,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAA;QACjF;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC;AAhBD,kDAgBC;AAED,SAAgB,cAAc,CAAC,KAAa;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAC3C,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA,CAAC,wDAAwD;IACxF,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACtC,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IAC5C,OAAO,GAAG,QAAQ,MAAM,CAAA;AAC1B,CAAC;AATD,wCASC;AAED,SAAgB,eAAe,CAAC,KAAa;IAC3C,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,CAAA;AACrD,CAAC;AAFD,0CAEC;AAED,SAAgB,cAAc,CAAC,KAAa;IAC1C,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAA;IACnD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AAC3B,CAAC;AAHD,wCAGC;AAED,SAAgB,YAAY,CAAC,KAAa;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAEhC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAA;IAClD,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAEjC,yBAAyB;IACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG,CAAC,CAAC,CAAA;IAClD,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAEhC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,SAAS,CAAC,CAAA;QACvD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACvC,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,GAAG,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAED,sBAAsB;IACtB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,aAAa,CAAA;AAClD,CAAC;AAvBD,oCAuBC"}

package/dist/streams.d.ts

@@ -12,5 +12,6 @@ export declare class MaxSizeChecker extends Transform {
     createError: () => Error;
     totalSize: number;
     constructor(maxSize: number, createError: () => Error);
-    _transform(chunk: Uint8Array, _enc: BufferEncoding, cb: TransformCallback): void | this;
+    _transform(chunk: Uint8Array, _enc: BufferEncoding, cb: TransformCallback): void;
 }
+//# sourceMappingURL=streams.d.ts.map

package/dist/streams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streams.d.ts","sourceRoot":"","sources":["../src/streams.ts"],"names":[],"mappings":";;AAAA,OAAO,EACL,MAAM,EACN,QAAQ,EAER,SAAS,EACT,iBAAiB,EAClB,MAAM,QAAQ,CAAA;AAEf,eAAO,MAAM,mBAAmB,eAAgB,MAAM,EAAE,SAQvD,CAAA;AAED,eAAO,MAAM,WAAW,WAAY,QAAQ,KAAG,QAI9C,CAAA;AAED,eAAO,MAAM,UAAU,WAAkB,QAAQ,KAAG,QAAQ,MAAM,CAMjE,CAAA;AAED,eAAO,MAAM,aAAa,WAAkB,QAAQ,KAAG,QAAQ,UAAU,CAMxE,CAAA;AAED,eAAO,MAAM,oBAAoB,SACzB,cAAc,UAAU,CAAC,KAC9B,QAEF,CAAA;AAED,eAAO,MAAM,aAAa,UAAW,UAAU,KAAG,QAKjD,CAAA;AAED,qBAAa,cAAe,SAAQ,SAAS;IAGlC,OAAO,EAAE,MAAM;IACf,WAAW,EAAE,MAAM,KAAK;IAHjC,SAAS,SAAI;gBAEJ,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,KAAK;IAIjC,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,iBAAiB;CAQ1E"}

package/dist/streams.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MaxSizeChecker = exports.bytesToStream = exports.byteIterableToStream = exports.streamToBytes = exports.streamSize = exports.cloneStream = exports.forwardStreamErrors = void 0;
+const stream_1 = require("stream");
+const forwardStreamErrors = (...streams) => {
+    for (let i = 0; i < streams.length; ++i) {
+        const stream = streams[i];
+        const next = streams[i + 1];
+        if (next) {
+            stream.once('error', (err) => next.emit('error', err));
+        }
+    }
+};
+exports.forwardStreamErrors = forwardStreamErrors;
+const cloneStream = (stream) => {
+    const passthrough = new stream_1.PassThrough();
+    (0, exports.forwardStreamErrors)(stream, passthrough);
+    return stream.pipe(passthrough);
+};
+exports.cloneStream = cloneStream;
+const streamSize = async (stream) => {
+    let size = 0;
+    for await (const chunk of stream) {
+        size += chunk.length;
+    }
+    return size;
+};
+exports.streamSize = streamSize;
+const streamToBytes = async (stream) => {
+    const bufs = [];
+    for await (const bytes of stream) {
+        bufs.push(bytes);
+    }
+    return new Uint8Array(Buffer.concat(bufs));
+};
+exports.streamToBytes = streamToBytes;
+const byteIterableToStream = (iter) => {
+    return stream_1.Readable.from(iter, { objectMode: false });
+};
+exports.byteIterableToStream = byteIterableToStream;
+const bytesToStream = (bytes) => {
+    const stream = new stream_1.Readable();
+    stream.push(bytes);
+    stream.push(null);
+    return stream;
+};
+exports.bytesToStream = bytesToStream;
+class MaxSizeChecker extends stream_1.Transform {
+    constructor(maxSize, createError) {
+        super();
+        Object.defineProperty(this, "maxSize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: maxSize
+        });
+        Object.defineProperty(this, "createError", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: createError
+        });
+        Object.defineProperty(this, "totalSize", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 0
+        });
+    }
+    _transform(chunk, _enc, cb) {
+        this.totalSize += chunk.length;
+        if (this.totalSize > this.maxSize) {
+            cb(this.createError());
+        }
+        else {
+            cb(null, chunk);
+        }
+    }
+}
+exports.MaxSizeChecker = MaxSizeChecker;
+//# sourceMappingURL=streams.js.map

package/dist/streams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streams.js","sourceRoot":"","sources":["../src/streams.ts"],"names":[],"mappings":";;;AAAA,mCAMe;AAER,MAAM,mBAAmB,GAAG,CAAC,GAAG,OAAiB,EAAE,EAAE;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3B,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;QACxD,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AARY,QAAA,mBAAmB,uBAQ/B;AAEM,MAAM,WAAW,GAAG,CAAC,MAAgB,EAAY,EAAE;IACxD,MAAM,WAAW,GAAG,IAAI,oBAAW,EAAE,CAAA;IACrC,IAAA,2BAAmB,EAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;AACjC,CAAC,CAAA;AAJY,QAAA,WAAW,eAIvB;AAEM,MAAM,UAAU,GAAG,KAAK,EAAE,MAAgB,EAAmB,EAAE;IACpE,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;IACtB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AANY,QAAA,UAAU,cAMtB;AAEM,MAAM,aAAa,GAAG,KAAK,EAAE,MAAgB,EAAuB,EAAE;IAC3E,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClB,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5C,CAAC,CAAA;AANY,QAAA,aAAa,iBAMzB;AAEM,MAAM,oBAAoB,GAAG,CAClC,IAA+B,EACrB,EAAE;IACZ,OAAO,iBAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;AACnD,CAAC,CAAA;AAJY,QAAA,oBAAoB,wBAIhC;AAEM,MAAM,aAAa,GAAG,CAAC,KAAiB,EAAY,EAAE;IAC3D,MAAM,MAAM,GAAG,IAAI,iBAAQ,EAAE,CAAA;IAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjB,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AALY,QAAA,aAAa,iBAKzB;AAED,MAAa,cAAe,SAAQ,kBAAS;IAE3C,YACS,OAAe,EACf,WAAwB;QAE/B,KAAK,EAAE,CAAA;QAHP;;;;mBAAO,OAAO;WAAQ;QACtB;;;;mBAAO,WAAW;WAAa;QAHjC;;;;mBAAY,CAAC;WAAA;IAMb,CAAC;IACD,UAAU,CAAC,KAAiB,EAAE,IAAoB,EAAE,EAAqB;QACvE,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAA;QAC9B,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QACxB,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;CACF;AAhBD,wCAgBC"}

package/jest.config.js

@@ -1,6 +1,6 @@
-const base = require('../../jest.config.base.js')
-
+/** @type {import('jest').Config} */
 module.exports = {
-  ...base,
   displayName: 'Common',
+  transform: { '^.+\\.(t|j)s$': '@swc/jest' },
+  setupFiles: ['<rootDir>/../../jest.setup.ts'],
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atproto/common",
-  "version": "0.3.4",
+  "version": "0.4.1",
   "license": "MIT",
   "description": "Shared web-platform-friendly code for atproto libraries",
   "keywords": [
@@ -13,20 +13,22 @@
     "directory": "packages/common"
   },
   "main": "dist/index.js",
+  "types": "dist/index.d.ts",
   "dependencies": {
     "@ipld/dag-cbor": "^7.0.3",
     "cbor-x": "^1.5.1",
     "iso-datestring-validator": "^2.2.2",
     "multiformats": "^9.9.0",
-    "pino": "^8.15.0",
-    "zod": "3.21.4",
-    "@atproto/common-web": "^0.2.4"
+    "pino": "^8.21.0",
+    "@atproto/common-web": "^0.3.0"
+  },
+  "devDependencies": {
+    "jest": "^28.1.2",
+    "typescript": "^5.3.3",
+    "uint8arrays": "3.0.0"
   },
   "scripts": {
     "test": "jest",
-    "build": "node ./build.js",
-    "postbuild": "tsc --build tsconfig.build.json",
-    "update-main-to-dist": "node ../../update-main-to-dist.js packages/common"
-  },
-  "types": "dist/index.d.ts"
+    "build": "tsc --build tsconfig.build.json"
+  }
 }

package/src/index.ts

@@ -1,9 +1,10 @@
 export * from '@atproto/common-web'
+export * from './buffers'
 export * from './dates'
 export * from './env'
 export * from './fs'
 export * from './ipld'
 export * from './ipld-multi'
 export * from './logger'
+export * from './obfuscate'
 export * from './streams'
-export * from './buffers'

package/src/ipld.ts

@@ -92,7 +92,10 @@ export class VerifyCidTransform extends Transform {
 }
 
 export class VerifyCidError extends Error {
-  constructor(public expected: CID, public actual: CID) {
+  constructor(
+    public expected: CID,
+    public actual: CID,
+  ) {
     super('Bad cid check')
   }
 }

package/src/obfuscate.ts

@@ -0,0 +1,85 @@
+export function obfuscateEmail(email: string) {
+  const [local, domain] = email.split('@')
+  return `${obfuscateWord(local)}@${obfuscateWord(domain)}`
+}
+
+export function obfuscateWord(word: string) {
+  return `${word.charAt(0)}***${word.charAt(word.length - 1)}`
+}
+
+export function obfuscateHeaders(headers: Record<string, string>) {
+  const obfuscatedHeaders: Record<string, string> = {}
+  for (const key in headers) {
+    if (key.toLowerCase() === 'authorization') {
+      obfuscatedHeaders[key] = obfuscateAuthHeader(headers[key])
+    } else if (key.toLowerCase() === 'dpop') {
+      obfuscatedHeaders[key] = obfuscateJwt(headers[key]) || 'Invalid'
+    } else {
+      obfuscatedHeaders[key] = headers[key]
+    }
+  }
+  return obfuscatedHeaders
+}
+
+export function obfuscateAuthHeader(authHeader: string): string {
+  // This is a hot path (runs on every request). Avoid using split() or regex.
+
+  const spaceIdx = authHeader.indexOf(' ')
+  if (spaceIdx === -1) return 'Invalid'
+
+  const type = authHeader.slice(0, spaceIdx)
+  switch (type.toLowerCase()) {
+    case 'bearer':
+    case 'dpop':
+      return `${type} ${obfuscateBearer(authHeader.slice(spaceIdx + 1))}`
+    case 'basic':
+      return `${type} ${obfuscateBasic(authHeader.slice(spaceIdx + 1)) || 'Invalid'}`
+    default:
+      return `Invalid`
+  }
+}
+
+export function obfuscateBasic(token: string): null | string {
+  if (!token) return null
+  const buffer = Buffer.from(token, 'base64')
+  if (!buffer.length) return null // Buffer.from will silently ignore invalid base64 chars
+  const authHeader = buffer.toString('utf8')
+  const colIdx = authHeader.indexOf(':')
+  if (colIdx === -1) return null
+  const username = authHeader.slice(0, colIdx)
+  return `${username}:***`
+}
+
+export function obfuscateBearer(token: string): string {
+  return obfuscateJwt(token) || obfuscateToken(token)
+}
+
+export function obfuscateToken(token: string): string {
+  if (token.length >= 12) return obfuscateWord(token)
+  return token ? '***' : ''
+}
+
+export function obfuscateJwt(token: string): null | string {
+  const firstDot = token.indexOf('.')
+  if (firstDot === -1) return null
+
+  const secondDot = token.indexOf('.', firstDot + 1)
+  if (secondDot === -1) return null
+
+  // Expected to be missing
+  const thirdDot = token.indexOf('.', secondDot + 1)
+  if (thirdDot !== -1) return null
+
+  try {
+    const payloadEnc = token.slice(firstDot + 1, secondDot)
+    const payloadJson = Buffer.from(payloadEnc, 'base64').toString('utf8')
+    const payload = JSON.parse(payloadJson)
+    if (typeof payload.sub === 'string') return payload.sub
+  } catch {
+    // Invalid JWT
+    return null
+  }
+
+  // Strip the signature
+  return token.slice(0, secondDot) + '.obfuscated'
+}