@atproto/lex-password-session 0.0.0

package/README.md

@@ -0,0 +1,413 @@
+# @atproto/lex-password-agent
+
+Password-based client authentication for AT Protocol Lexicons. See the [Changelog](./CHANGELOG.md) for version history.
+
+```bash
+npm install @atproto/lex-password-agent
+```
+
+- Session management with automatic token refresh
+- Hooks for persisting and monitoring session state
+- PDS endpoint discovery from DID documents
+- Two-factor authentication support
+
+> [!IMPORTANT]
+>
+> This package is currently in **preview**. The API and features are subject to change before the stable release.
+
+**What is this?**
+
+`@atproto/lex-password-agent` provides a `PasswordAgent` class that implements the `Agent` interface from `@atproto/lex-client`. It handles password-based authentication with AT Protocol services, including:
+
+1. Creating sessions with username/password credentials
+2. Automatic token refresh when access tokens expire
+3. Session persistence through lifecycle hooks
+4. Graceful logout with server-side session cleanup
+
+```typescript
+import { Client } from '@atproto/lex-client'
+import { PasswordAgent } from '@atproto/lex-password-agent'
+import * as app from './lexicons/app.js'
+
+// Login with credentials
+const result = await PasswordAgent.login({
+  service: 'https://bsky.social',
+  identifier: 'alice.bsky.social',
+  password: 'app-password',
+  hooks: {
+    onRefreshed: (session) => saveToStorage(session),
+    onDeleted: (session) => clearStorage(session),
+  },
+})
+
+if (!result.success) throw result.error
+
+const agent = result.value
+const client = new Client(agent)
+
+// Make authenticated requests
+const profile = await client.call(app.bsky.actor.getProfile, {
+  actor: agent.did,
+})
+```
+
+<!-- START doctoc generated TOC please keep comment here to allow auto update -->
+<!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
+
+- [Quick Start](#quick-start)
+- [PasswordAgent](#passwordagent)
+  - [Login](#login)
+  - [Two-Factor Authentication](#two-factor-authentication)
+  - [Resume Session](#resume-session)
+  - [Logout](#logout)
+  - [Static Delete](#static-delete)
+- [Session Hooks](#session-hooks)
+  - [onRefreshed](#onrefreshed)
+  - [onRefreshFailure](#onrefreshfailure)
+  - [onDeleted](#ondeleted)
+  - [onDeleteFailure](#ondeletefailure)
+- [Session Object](#session-object)
+- [Error Handling](#error-handling)
+- [Using with Client](#using-with-client)
+- [License](#license)
+
+<!-- END doctoc generated TOC please keep comment here to allow auto update -->
+
+## Quick Start
+
+**1. Install the package**
+
+```bash
+npm install @atproto/lex-password-agent @atproto/lex-client
+```
+
+**2. Login and make requests**
+
+```typescript
+import { Client } from '@atproto/lex-client'
+import { PasswordAgent } from '@atproto/lex-password-agent'
+
+const result = await PasswordAgent.login({
+  service: 'https://bsky.social',
+  identifier: 'your-handle.bsky.social',
+  password: 'your-app-password',
+})
+
+if (result.success) {
+  const agent = result.value
+  const client = new Client(agent)
+
+  // Make authenticated API calls
+  console.log('Logged in as:', agent.did)
+}
+```
+
+## PasswordAgent
+
+The `PasswordAgent` class manages password-based authentication sessions.
+
+### Login
+
+Create a new session with username and password:
+
+```typescript
+import { PasswordAgent } from '@atproto/lex-password-agent'
+
+const result = await PasswordAgent.login({
+  service: 'https://bsky.social',
+  identifier: 'alice.bsky.social', // handle or email
+  password: 'app-password',
+  hooks: {
+    onRefreshed: (session) => {
+      // Persist session for later restoration
+      localStorage.setItem('session', JSON.stringify(session))
+    },
+    onDeleted: () => {
+      localStorage.removeItem('session')
+    },
+  },
+})
+
+if (result.success) {
+  const agent = result.value
+  console.log('Logged in as:', agent.did)
+} else {
+  console.error('Login failed:', result.error, result.message)
+}
+```
+
+The `login()` method returns a discriminated union:
+
+- On success: `{ success: true, value: PasswordAgent }`
+- On expected errors: `LexRpcResponseError` with `success: false`
+- On unexpected errors: throws the error
+
+### Two-Factor Authentication
+
+If the account has 2FA enabled, login will return an `AuthFactorTokenRequired` error:
+
+```typescript
+const result = await PasswordAgent.login({
+  service: 'https://bsky.social',
+  identifier: 'alice.bsky.social',
+  password: 'app-password',
+})
+
+if (!result.success && result.error === 'AuthFactorTokenRequired') {
+  // Prompt user for 2FA code, then retry
+  const code = await prompt2FACode()
+
+  const retryResult = await PasswordAgent.login({
+    service: 'https://bsky.social',
+    identifier: 'alice.bsky.social',
+    password: 'app-password',
+    authFactorToken: code,
+  })
+}
+```
+
+### Resume Session
+
+Restore a previously saved session:
+
+```typescript
+import { PasswordAgent, Session } from '@atproto/lex-password-agent'
+
+// Load session from storage
+const savedSession: Session = JSON.parse(localStorage.getItem('session')!)
+
+// Resume the session (automatically refreshes tokens)
+const agent = await PasswordAgent.resume(savedSession, {
+  hooks: {
+    onRefreshed: (session) => {
+      localStorage.setItem('session', JSON.stringify(session))
+    },
+    onDeleted: () => {
+      localStorage.removeItem('session')
+    },
+  },
+})
+
+console.log('Session resumed for:', agent.did)
+```
+
+> [!NOTE]
+>
+> `resume()` automatically calls `refresh()` to ensure the session is valid and tokens are current.
+
+### Logout
+
+End the session and notify the server:
+
+```typescript
+await agent.logout()
+```
+
+After logout:
+
+- The `onDeleted` hook is called
+- The agent is marked as destroyed (`agent.destroyed === true`)
+- Further requests will throw `'Logged out'`
+
+### Static Delete
+
+Delete a session without creating an agent instance:
+
+```typescript
+import { PasswordAgent, Session } from '@atproto/lex-password-agent'
+
+const session: Session = JSON.parse(localStorage.getItem('session')!)
+
+// Delete the session on the server
+await PasswordAgent.delete(session)
+```
+
+This is useful for cleanup scenarios where you don't need to make additional requests.
+
+## Session Hooks
+
+Hooks provide callbacks for session lifecycle events. All hooks receive the agent as `this` context.
+
+### onRefreshed
+
+Called when tokens are successfully refreshed:
+
+```typescript
+const result = await PasswordAgent.login({
+  service: 'https://bsky.social',
+  identifier: 'alice.bsky.social',
+  password: 'app-password',
+  hooks: {
+    onRefreshed(session) {
+      // `this` is the PasswordAgent instance
+      console.log('Session refreshed for:', this.did)
+
+      // Persist the updated session
+      saveSession(session)
+    },
+  },
+})
+```
+
+> [!IMPORTANT]
+>
+> Requests are blocked while `onRefreshed` is running. Keep this callback fast to avoid delays.
+
+### onRefreshFailure
+
+Called when token refresh fails due to transient errors (network issues, server unavailability):
+
+```typescript
+hooks: {
+  onRefreshFailure(session, error) {
+    console.warn('Token refresh failed:', error.message)
+    // Session may still be valid - consider retry logic
+  }
+}
+```
+
+### onDeleted
+
+Called when the session is terminated (logout or server-side invalidation):
+
+```typescript
+hooks: {
+  onDeleted(session) {
+    console.log('Session ended for:', session.data.did)
+    clearPersistedSession(session.data.did)
+    redirectToLogin()
+  }
+}
+```
+
+### onDeleteFailure
+
+Called when logout fails due to transient errors:
+
+```typescript
+hooks: {
+  onDeleteFailure(session, error) {
+    console.error('Logout failed:', error.message)
+    // Consider queuing for retry to avoid orphaned sessions
+    queueLogoutRetry(session)
+  }
+}
+```
+
+> [!WARNING]
+>
+> Ignoring delete failures can leave sessions active on the server. Implement retry logic for security-sensitive applications.
+
+## Session Object
+
+The `Session` type contains all data needed to authenticate and restore sessions:
+
+```typescript
+type Session = {
+  // Session credentials and user info from createSession response
+  data: {
+    accessJwt: string
+    refreshJwt: string
+    did: string
+    handle: string
+    email?: string
+    emailConfirmed?: boolean
+    didDoc?: object
+    // ... other fields from createSession
+  }
+
+  // When tokens were last refreshed
+  refreshedAt: string // ISO 8601 datetime
+
+  // PDS URL extracted from DID document (for routing requests)
+  pdsUrl: string | null
+
+  // Original service URL used for login
+  service: string
+}
+```
+
+## Error Handling
+
+Login errors are returned as `LexRpcResponseError` objects:
+
+```typescript
+const result = await PasswordAgent.login({
+  service: 'https://bsky.social',
+  identifier: 'alice.bsky.social',
+  password: 'wrong-password',
+})
+
+if (!result.success) {
+  switch (result.error) {
+    case 'AuthenticationRequired':
+      console.error('Invalid credentials')
+      break
+    case 'AuthFactorTokenRequired':
+      console.error('2FA required')
+      break
+    case 'AccountTakedown':
+      console.error('Account has been suspended')
+      break
+    default:
+      console.error('Login failed:', result.message)
+  }
+}
+```
+
+Common error codes:
+
+| Error Code                | Description                    |
+| ------------------------- | ------------------------------ |
+| `AuthenticationRequired`  | Invalid username or password   |
+| `AuthFactorTokenRequired` | 2FA code needed                |
+| `AccountTakedown`         | Account suspended              |
+| `ExpiredToken`            | Token has expired (on refresh) |
+| `InvalidToken`            | Token is invalid               |
+
+## Using with Client
+
+The `PasswordAgent` implements the `Agent` interface and can be used directly with `Client`:
+
+```typescript
+import { Client } from '@atproto/lex-client'
+import { PasswordAgent } from '@atproto/lex-password-agent'
+import * as app from './lexicons/app.js'
+
+const result = await PasswordAgent.login({
+  service: 'https://bsky.social',
+  identifier: 'alice.bsky.social',
+  password: 'app-password',
+})
+
+if (result.success) {
+  const client = new Client(result.value)
+
+  // The client automatically uses the agent for authentication
+  const profile = await client.call(app.bsky.actor.getProfile, {
+    actor: client.assertDid,
+  })
+
+  // Tokens are automatically refreshed when expired
+  const timeline = await client.call(app.bsky.feed.getTimeline, {
+    limit: 50,
+  })
+
+  // Create records
+  await client.create(app.bsky.feed.post, {
+    text: 'Hello from lex-password-agent!',
+    createdAt: new Date().toISOString(),
+  })
+}
+```
+
+The agent handles:
+
+- Adding `Authorization` headers to requests
+- Detecting expired tokens (401 responses or `ExpiredToken` errors)
+- Automatically refreshing tokens and retrying failed requests
+- Routing requests to the correct PDS based on DID document
+
+## License
+
+MIT or Apache2

package/dist/error.d.ts

@@ -0,0 +1,8 @@
+import { LexError, LexRpcResponseError } from '@atproto/lex-client';
+import { com } from './lexicons';
+export declare class LexAuthFactorError extends LexError {
+    readonly response: LexRpcResponseError<typeof com.atproto.server.createSession.main>;
+    name: string;
+    constructor(response: LexRpcResponseError<typeof com.atproto.server.createSession.main>);
+}
+//# sourceMappingURL=error.d.ts.map

package/dist/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACnE,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAEhC,qBAAa,kBAAmB,SAAQ,QAAQ;IAI5C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CACpC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAC7C;IALH,IAAI,SAAuB;gBAGhB,QAAQ,EAAE,mBAAmB,CACpC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAC7C;CAIJ"}

package/dist/error.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LexAuthFactorError = void 0;
+const lex_client_1 = require("@atproto/lex-client");
+class LexAuthFactorError extends lex_client_1.LexError {
+    response;
+    name = 'LexAuthFactorError';
+    constructor(response) {
+        super(response.error, response.message, { cause: response.reason });
+        this.response = response;
+    }
+}
+exports.LexAuthFactorError = LexAuthFactorError;
+//# sourceMappingURL=error.js.map

package/dist/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":";;;AAAA,oDAAmE;AAGnE,MAAa,kBAAmB,SAAQ,qBAAQ;IAInC;IAHX,IAAI,GAAG,oBAAoB,CAAA;IAE3B,YACW,QAER;QAED,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QAJ1D,aAAQ,GAAR,QAAQ,CAEhB;IAGH,CAAC;CACF;AAVD,gDAUC","sourcesContent":["import { LexError, LexRpcResponseError } from '@atproto/lex-client'\nimport { com } from './lexicons'\n\nexport class LexAuthFactorError extends LexError {\n  name = 'LexAuthFactorError'\n\n  constructor(\n    readonly response: LexRpcResponseError<\n      typeof com.atproto.server.createSession.main\n    >,\n  ) {\n    super(response.error, response.message, { cause: response.reason })\n  }\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from './error.js';
+export * from './password-session.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,cAAc,uBAAuB,CAAA"}

package/dist/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./error.js"), exports);
+tslib_1.__exportStar(require("./password-session.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,qDAA0B;AAC1B,gEAAqC","sourcesContent":["export * from './error.js'\nexport * from './password-session.js'\n"]}

package/dist/lexicons/com/atproto/server/createAccount.d.ts

@@ -0,0 +1,3 @@
+export * from './createAccount.defs.js';
+export * as $defs from './createAccount.defs.js';
+//# sourceMappingURL=createAccount.d.ts.map

package/dist/lexicons/com/atproto/server/createAccount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAccount.d.ts","sourceRoot":"","sources":["../../../../../src/lexicons/com/atproto/server/createAccount.ts"],"names":[],"mappings":"AAIA,cAAc,yBAAyB,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,yBAAyB,CAAA"}

package/dist/lexicons/com/atproto/server/createAccount.defs.d.ts

@@ -0,0 +1,57 @@
+import { l } from '@atproto/lex-schema';
+declare const $nsid = "com.atproto.server.createAccount";
+export { $nsid };
+/** Create an account. Implemented by PDS. */
+declare const main: l.Procedure<"com.atproto.server.createAccount", l.ParamsSchema<{}>, l.Payload<"application/json", l.ObjectSchema<{
+    readonly email: l.OptionalSchema<string>;
+    readonly handle: l.StringSchema<{
+        readonly format: "handle";
+    }>;
+    readonly did: l.OptionalSchema<`did:${string}:${string}`>;
+    readonly inviteCode: l.OptionalSchema<string>;
+    readonly verificationCode: l.OptionalSchema<string>;
+    readonly verificationPhone: l.OptionalSchema<string>;
+    readonly password: l.OptionalSchema<string>;
+    readonly recoveryKey: l.OptionalSchema<string>;
+    readonly plcOp: l.OptionalSchema<import("@atproto/lex-client").LexMap>;
+}>>, l.Payload<"application/json", l.ObjectSchema<{
+    readonly accessJwt: l.StringSchema<{}>;
+    readonly refreshJwt: l.StringSchema<{}>;
+    readonly handle: l.StringSchema<{
+        readonly format: "handle";
+    }>;
+    readonly did: l.StringSchema<{
+        readonly format: "did";
+    }>;
+    readonly didDoc: l.OptionalSchema<import("@atproto/lex-client").LexMap>;
+}>>, readonly ["InvalidHandle", "InvalidPassword", "InvalidInviteCode", "HandleNotAvailable", "UnsupportedDomain", "UnresolvableDid", "IncompatibleDidDoc"]>;
+export { main };
+export type Params = l.InferMethodParams<typeof main>;
+export type Input = l.InferMethodInput<typeof main>;
+export type InputBody = l.InferMethodInputBody<typeof main>;
+export type Output = l.InferMethodOutput<typeof main>;
+export type OutputBody = l.InferMethodOutputBody<typeof main>;
+export declare const $lxm: "com.atproto.server.createAccount", $params: l.ParamsSchema<{}>, $input: l.Payload<"application/json", l.ObjectSchema<{
+    readonly email: l.OptionalSchema<string>;
+    readonly handle: l.StringSchema<{
+        readonly format: "handle";
+    }>;
+    readonly did: l.OptionalSchema<`did:${string}:${string}`>;
+    readonly inviteCode: l.OptionalSchema<string>;
+    readonly verificationCode: l.OptionalSchema<string>;
+    readonly verificationPhone: l.OptionalSchema<string>;
+    readonly password: l.OptionalSchema<string>;
+    readonly recoveryKey: l.OptionalSchema<string>;
+    readonly plcOp: l.OptionalSchema<import("@atproto/lex-client").LexMap>;
+}>>, $output: l.Payload<"application/json", l.ObjectSchema<{
+    readonly accessJwt: l.StringSchema<{}>;
+    readonly refreshJwt: l.StringSchema<{}>;
+    readonly handle: l.StringSchema<{
+        readonly format: "handle";
+    }>;
+    readonly did: l.StringSchema<{
+        readonly format: "did";
+    }>;
+    readonly didDoc: l.OptionalSchema<import("@atproto/lex-client").LexMap>;
+}>>;
+//# sourceMappingURL=createAccount.defs.d.ts.map

package/dist/lexicons/com/atproto/server/createAccount.defs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAccount.defs.d.ts","sourceRoot":"","sources":["../../../../../src/lexicons/com/atproto/server/createAccount.defs.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAA;AAEvC,QAAA,MAAM,KAAK,qCAAqC,CAAA;AAEhD,OAAO,EAAE,KAAK,EAAE,CAAA;AAEhB,6CAA6C;AAC7C,QAAA,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;4JAgCP,CAAA;AACH,OAAO,EAAE,IAAI,EAAE,CAAA;AAEf,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,iBAAiB,CAAC,OAAO,IAAI,CAAC,CAAA;AACrD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,gBAAgB,CAAC,OAAO,IAAI,CAAC,CAAA;AACnD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,oBAAoB,CAAC,OAAO,IAAI,CAAC,CAAA;AAC3D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,iBAAiB,CAAC,OAAO,IAAI,CAAC,CAAA;AACrD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAA;AAE7D,eAAO,MAAM,IAAI,oCAA0B,EACzC,OAAO,oBAAgC,EACvC,MAAM;;;;;;;;;;;;GAA2B,EACjC,OAAO;;;;;;;;;;GAA4B,CAAA"}

package/dist/lexicons/com/atproto/server/createAccount.defs.js

@@ -0,0 +1,43 @@
+"use strict";
+/*
+ * THIS FILE WAS GENERATED BY "@atproto/lex". DO NOT EDIT.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.$output = exports.$input = exports.$params = exports.$lxm = exports.main = exports.$nsid = void 0;
+const lex_schema_1 = require("@atproto/lex-schema");
+const $nsid = 'com.atproto.server.createAccount';
+exports.$nsid = $nsid;
+/** Create an account. Implemented by PDS. */
+const main = 
+/*#__PURE__*/
+lex_schema_1.l.procedure($nsid, 
+/*#__PURE__*/ lex_schema_1.l.params(), 
+/*#__PURE__*/ lex_schema_1.l.jsonPayload({
+    email: /*#__PURE__*/ lex_schema_1.l.optional(/*#__PURE__*/ lex_schema_1.l.string()),
+    handle: /*#__PURE__*/ lex_schema_1.l.string({ format: 'handle' }),
+    did: /*#__PURE__*/ lex_schema_1.l.optional(/*#__PURE__*/ lex_schema_1.l.string({ format: 'did' })),
+    inviteCode: /*#__PURE__*/ lex_schema_1.l.optional(/*#__PURE__*/ lex_schema_1.l.string()),
+    verificationCode: /*#__PURE__*/ lex_schema_1.l.optional(/*#__PURE__*/ lex_schema_1.l.string()),
+    verificationPhone: /*#__PURE__*/ lex_schema_1.l.optional(/*#__PURE__*/ lex_schema_1.l.string()),
+    password: /*#__PURE__*/ lex_schema_1.l.optional(/*#__PURE__*/ lex_schema_1.l.string()),
+    recoveryKey: /*#__PURE__*/ lex_schema_1.l.optional(/*#__PURE__*/ lex_schema_1.l.string()),
+    plcOp: /*#__PURE__*/ lex_schema_1.l.optional(/*#__PURE__*/ lex_schema_1.l.unknownObject()),
+}), 
+/*#__PURE__*/ lex_schema_1.l.jsonPayload({
+    accessJwt: /*#__PURE__*/ lex_schema_1.l.string(),
+    refreshJwt: /*#__PURE__*/ lex_schema_1.l.string(),
+    handle: /*#__PURE__*/ lex_schema_1.l.string({ format: 'handle' }),
+    did: /*#__PURE__*/ lex_schema_1.l.string({ format: 'did' }),
+    didDoc: /*#__PURE__*/ lex_schema_1.l.optional(/*#__PURE__*/ lex_schema_1.l.unknownObject()),
+}), [
+    'InvalidHandle',
+    'InvalidPassword',
+    'InvalidInviteCode',
+    'HandleNotAvailable',
+    'UnsupportedDomain',
+    'UnresolvableDid',
+    'IncompatibleDidDoc',
+]);
+exports.main = main;
+exports.$lxm = main.nsid, exports.$params = main.parameters, exports.$input = main.input, exports.$output = main.output;
+//# sourceMappingURL=createAccount.defs.js.map

package/dist/lexicons/com/atproto/server/createAccount.defs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAccount.defs.js","sourceRoot":"","sources":["../../../../../src/lexicons/com/atproto/server/createAccount.defs.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,oDAAuC;AAEvC,MAAM,KAAK,GAAG,kCAAkC,CAAA;AAEvC,sBAAK;AAEd,6CAA6C;AAC7C,MAAM,IAAI;AACR,aAAa;AACb,cAAC,CAAC,SAAS,CACT,KAAK;AACL,aAAa,CAAC,cAAC,CAAC,MAAM,EAAE;AACxB,aAAa,CAAC,cAAC,CAAC,WAAW,CAAC;IAC1B,KAAK,EAAE,aAAa,CAAC,cAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAC,CAAC,MAAM,EAAE,CAAC;IACzD,MAAM,EAAE,aAAa,CAAC,cAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpD,GAAG,EAAE,aAAa,CAAC,cAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,UAAU,EAAE,aAAa,CAAC,cAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAC,CAAC,MAAM,EAAE,CAAC;IAC9D,gBAAgB,EAAE,aAAa,CAAC,cAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAC,CAAC,MAAM,EAAE,CAAC;IACpE,iBAAiB,EAAE,aAAa,CAAC,cAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAC,CAAC,MAAM,EAAE,CAAC;IACrE,QAAQ,EAAE,aAAa,CAAC,cAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAC,CAAC,MAAM,EAAE,CAAC;IAC5D,WAAW,EAAE,aAAa,CAAC,cAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAC,CAAC,MAAM,EAAE,CAAC;IAC/D,KAAK,EAAE,aAAa,CAAC,cAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAC,CAAC,aAAa,EAAE,CAAC;CACjE,CAAC;AACF,aAAa,CAAC,cAAC,CAAC,WAAW,CAAC;IAC1B,SAAS,EAAE,aAAa,CAAC,cAAC,CAAC,MAAM,EAAE;IACnC,UAAU,EAAE,aAAa,CAAC,cAAC,CAAC,MAAM,EAAE;IACpC,MAAM,EAAE,aAAa,CAAC,cAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpD,GAAG,EAAE,aAAa,CAAC,cAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9C,MAAM,EAAE,aAAa,CAAC,cAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAC,CAAC,aAAa,EAAE,CAAC;CAClE,CAAC,EACF;IACE,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,mBAAmB;IACnB,iBAAiB;IACjB,oBAAoB;CACrB,CACF,CAAA;AACM,oBAAI;AAQA,QAAA,IAAI,GAAiB,IAAI,CAAC,IAAI,EACzC,QAAA,OAAO,GAAiB,IAAI,CAAC,UAAU,EACvC,QAAA,MAAM,GAAiB,IAAI,CAAC,KAAK,EACjC,QAAA,OAAO,GAAiB,IAAI,CAAC,MAAM,CAAA","sourcesContent":["/*\n * THIS FILE WAS GENERATED BY \"@atproto/lex\". DO NOT EDIT.\n */\n\nimport { l } from '@atproto/lex-schema'\n\nconst $nsid = 'com.atproto.server.createAccount'\n\nexport { $nsid }\n\n/** Create an account. Implemented by PDS. */\nconst main =\n  /*#__PURE__*/\n  l.procedure(\n    $nsid,\n    /*#__PURE__*/ l.params(),\n    /*#__PURE__*/ l.jsonPayload({\n      email: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\n      handle: /*#__PURE__*/ l.string({ format: 'handle' }),\n      did: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.string({ format: 'did' })),\n      inviteCode: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\n      verificationCode: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\n      verificationPhone: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\n      password: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\n      recoveryKey: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\n      plcOp: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.unknownObject()),\n    }),\n    /*#__PURE__*/ l.jsonPayload({\n      accessJwt: /*#__PURE__*/ l.string(),\n      refreshJwt: /*#__PURE__*/ l.string(),\n      handle: /*#__PURE__*/ l.string({ format: 'handle' }),\n      did: /*#__PURE__*/ l.string({ format: 'did' }),\n      didDoc: /*#__PURE__*/ l.optional(/*#__PURE__*/ l.unknownObject()),\n    }),\n    [\n      'InvalidHandle',\n      'InvalidPassword',\n      'InvalidInviteCode',\n      'HandleNotAvailable',\n      'UnsupportedDomain',\n      'UnresolvableDid',\n      'IncompatibleDidDoc',\n    ],\n  )\nexport { main }\n\nexport type Params = l.InferMethodParams<typeof main>\nexport type Input = l.InferMethodInput<typeof main>\nexport type InputBody = l.InferMethodInputBody<typeof main>\nexport type Output = l.InferMethodOutput<typeof main>\nexport type OutputBody = l.InferMethodOutputBody<typeof main>\n\nexport const $lxm = /*#__PURE__*/ main.nsid,\n  $params = /*#__PURE__*/ main.parameters,\n  $input = /*#__PURE__*/ main.input,\n  $output = /*#__PURE__*/ main.output\n"]}

package/dist/lexicons/com/atproto/server/createAccount.js

@@ -0,0 +1,10 @@
+"use strict";
+/*
+ * THIS FILE WAS GENERATED BY "@atproto/lex". DO NOT EDIT.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.$defs = void 0;
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./createAccount.defs.js"), exports);
+exports.$defs = tslib_1.__importStar(require("./createAccount.defs.js"));
+//# sourceMappingURL=createAccount.js.map

package/dist/lexicons/com/atproto/server/createAccount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAccount.js","sourceRoot":"","sources":["../../../../../src/lexicons/com/atproto/server/createAccount.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;AAEH,kEAAuC;AACvC,yEAAgD","sourcesContent":["/*\n * THIS FILE WAS GENERATED BY \"@atproto/lex\". DO NOT EDIT.\n */\n\nexport * from './createAccount.defs.js'\nexport * as $defs from './createAccount.defs.js'\n"]}

package/dist/lexicons/com/atproto/server/createSession.d.ts

@@ -0,0 +1,3 @@
+export * from './createSession.defs.js';
+export * as $defs from './createSession.defs.js';
+//# sourceMappingURL=createSession.d.ts.map

package/dist/lexicons/com/atproto/server/createSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSession.d.ts","sourceRoot":"","sources":["../../../../../src/lexicons/com/atproto/server/createSession.ts"],"names":[],"mappings":"AAIA,cAAc,yBAAyB,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,yBAAyB,CAAA"}

package/dist/lexicons/com/atproto/server/createSession.defs.d.ts

@@ -0,0 +1,53 @@
+import { l } from '@atproto/lex-schema';
+declare const $nsid = "com.atproto.server.createSession";
+export { $nsid };
+/** Create an authentication session. */
+declare const main: l.Procedure<"com.atproto.server.createSession", l.ParamsSchema<{}>, l.Payload<"application/json", l.ObjectSchema<{
+    readonly identifier: l.StringSchema<{}>;
+    readonly password: l.StringSchema<{}>;
+    readonly authFactorToken: l.OptionalSchema<string>;
+    readonly allowTakendown: l.OptionalSchema<boolean>;
+}>>, l.Payload<"application/json", l.ObjectSchema<{
+    readonly accessJwt: l.StringSchema<{}>;
+    readonly refreshJwt: l.StringSchema<{}>;
+    readonly handle: l.StringSchema<{
+        readonly format: "handle";
+    }>;
+    readonly did: l.StringSchema<{
+        readonly format: "did";
+    }>;
+    readonly didDoc: l.OptionalSchema<import("@atproto/lex-client").LexMap>;
+    readonly email: l.OptionalSchema<string>;
+    readonly emailConfirmed: l.OptionalSchema<boolean>;
+    readonly emailAuthFactor: l.OptionalSchema<boolean>;
+    readonly active: l.OptionalSchema<boolean>;
+    readonly status: l.OptionalSchema<string>;
+}>>, readonly ["AccountTakedown", "AuthFactorTokenRequired"]>;
+export { main };
+export type Params = l.InferMethodParams<typeof main>;
+export type Input = l.InferMethodInput<typeof main>;
+export type InputBody = l.InferMethodInputBody<typeof main>;
+export type Output = l.InferMethodOutput<typeof main>;
+export type OutputBody = l.InferMethodOutputBody<typeof main>;
+export declare const $lxm: "com.atproto.server.createSession", $params: l.ParamsSchema<{}>, $input: l.Payload<"application/json", l.ObjectSchema<{
+    readonly identifier: l.StringSchema<{}>;
+    readonly password: l.StringSchema<{}>;
+    readonly authFactorToken: l.OptionalSchema<string>;
+    readonly allowTakendown: l.OptionalSchema<boolean>;
+}>>, $output: l.Payload<"application/json", l.ObjectSchema<{
+    readonly accessJwt: l.StringSchema<{}>;
+    readonly refreshJwt: l.StringSchema<{}>;
+    readonly handle: l.StringSchema<{
+        readonly format: "handle";
+    }>;
+    readonly did: l.StringSchema<{
+        readonly format: "did";
+    }>;
+    readonly didDoc: l.OptionalSchema<import("@atproto/lex-client").LexMap>;
+    readonly email: l.OptionalSchema<string>;
+    readonly emailConfirmed: l.OptionalSchema<boolean>;
+    readonly emailAuthFactor: l.OptionalSchema<boolean>;
+    readonly active: l.OptionalSchema<boolean>;
+    readonly status: l.OptionalSchema<string>;
+}>>;
+//# sourceMappingURL=createSession.defs.d.ts.map

package/dist/lexicons/com/atproto/server/createSession.defs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSession.defs.d.ts","sourceRoot":"","sources":["../../../../../src/lexicons/com/atproto/server/createSession.defs.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAA;AAEvC,QAAA,MAAM,KAAK,qCAAqC,CAAA;AAEhD,OAAO,EAAE,KAAK,EAAE,CAAA;AAEhB,wCAAwC;AACxC,QAAA,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;6DAwBP,CAAA;AACH,OAAO,EAAE,IAAI,EAAE,CAAA;AAEf,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,iBAAiB,CAAC,OAAO,IAAI,CAAC,CAAA;AACrD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,gBAAgB,CAAC,OAAO,IAAI,CAAC,CAAA;AACnD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,oBAAoB,CAAC,OAAO,IAAI,CAAC,CAAA;AAC3D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,iBAAiB,CAAC,OAAO,IAAI,CAAC,CAAA;AACrD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAA;AAE7D,eAAO,MAAM,IAAI,oCAA0B,EACzC,OAAO,oBAAgC,EACvC,MAAM;;;;;GAA2B,EACjC,OAAO;;;;;;;;;;;;;;;GAA4B,CAAA"}