@atproto/ozone 0.0.12 → 0.0.13

package/dist/index.js

@@ -1331,7 +1331,7 @@ var require_src = __commonJS({
 var require_destroy = __commonJS({
   "../../node_modules/.pnpm/destroy@1.2.0/node_modules/destroy/index.js"(exports, module2) {
     "use strict";
-    var EventEmitter2 = require("events").EventEmitter;
+    var EventEmitter3 = require("events").EventEmitter;
     var ReadStream = require("fs").ReadStream;
     var Stream2 = require("stream");
     var Zlib = require("zlib");
@@ -1393,7 +1393,7 @@ var require_destroy = __commonJS({
       return stream instanceof Stream2 && typeof stream.destroy === "function";
     }
     function isEventEmitter(val) {
-      return val instanceof EventEmitter2;
+      return val instanceof EventEmitter3;
     }
     function isFsReadStream(stream) {
       return stream instanceof ReadStream;
@@ -21674,7 +21674,7 @@ var require_express = __commonJS({
   "../../node_modules/.pnpm/express@4.18.2/node_modules/express/lib/express.js"(exports, module2) {
     "use strict";
     var bodyParser = require_body_parser();
-    var EventEmitter2 = require("events").EventEmitter;
+    var EventEmitter3 = require("events").EventEmitter;
     var mixin = require_merge_descriptors();
     var proto = require_application();
     var Route = require_route();
@@ -21686,7 +21686,7 @@ var require_express = __commonJS({
       var app = function(req2, res2, next) {
         app.handle(req2, res2, next);
       };
-      mixin(app, EventEmitter2.prototype, false);
+      mixin(app, EventEmitter3.prototype, false);
       mixin(app, proto, false);
       app.request = Object.create(req, {
         app: { configurable: true, enumerable: true, writable: true, value: app }
@@ -45098,7 +45098,7 @@ var require_sonic_boom = __commonJS({
   "../../node_modules/.pnpm/sonic-boom@3.3.0/node_modules/sonic-boom/index.js"(exports, module2) {
     "use strict";
     var fs = require("fs");
-    var EventEmitter2 = require("events");
+    var EventEmitter3 = require("events");
     var inherits = require("util").inherits;
     var path = require("path");
     var sleep = require_atomic_sleep();
@@ -45285,7 +45285,7 @@ var require_sonic_boom = __commonJS({
       sonic._asyncDrainScheduled = false;
       sonic.emit("drain");
     }
-    inherits(SonicBoom, EventEmitter2);
+    inherits(SonicBoom, EventEmitter3);
     SonicBoom.prototype.write = function(data) {
       if (this.destroyed) {
         throw new Error("SonicBoom destroyed");
@@ -45675,7 +45675,7 @@ var require_thread_stream = __commonJS({
   "../../node_modules/.pnpm/thread-stream@2.4.0/node_modules/thread-stream/index.js"(exports, module2) {
     "use strict";
     var { version: version2 } = require_package();
-    var { EventEmitter: EventEmitter2 } = require("events");
+    var { EventEmitter: EventEmitter3 } = require("events");
     var { Worker } = require("worker_threads");
     var { join } = require("path");
     var { pathToFileURL } = require("url");
@@ -45830,7 +45830,7 @@ var require_thread_stream = __commonJS({
       stream.worker.off("exit", onWorkerExit);
       destroy(stream, code3 !== 0 ? new Error("the worker thread exited") : null);
     }
-    var ThreadStream = class extends EventEmitter2 {
+    var ThreadStream = class extends EventEmitter3 {
       constructor(opts = {}) {
         super();
         if (opts.bufferSize < 4) {
@@ -46694,7 +46694,7 @@ var require_meta = __commonJS({
 var require_proto = __commonJS({
   "../../node_modules/.pnpm/pino@8.15.0/node_modules/pino/lib/proto.js"(exports, module2) {
     "use strict";
-    var { EventEmitter: EventEmitter2 } = require("events");
+    var { EventEmitter: EventEmitter3 } = require("events");
     var {
       lsCacheSym,
       levelValSym,
@@ -46768,7 +46768,7 @@ var require_proto = __commonJS({
       [getLevelSym]: getLevel,
       [setLevelSym]: setLevel
     };
-    Object.setPrototypeOf(prototype, EventEmitter2.prototype);
+    Object.setPrototypeOf(prototype, EventEmitter3.prototype);
     module2.exports = function() {
       return Object.create(prototype);
     };
@@ -48861,7 +48861,7 @@ var require_extension = __commonJS({
 var require_websocket = __commonJS({
   "../../node_modules/.pnpm/ws@8.12.0/node_modules/ws/lib/websocket.js"(exports, module2) {
     "use strict";
-    var EventEmitter2 = require("events");
+    var EventEmitter3 = require("events");
     var https = require("https");
     var http = require("http");
     var net = require("net");
@@ -48892,7 +48892,7 @@ var require_websocket = __commonJS({
     var protocolVersions = [8, 13];
     var readyStates = ["CONNECTING", "OPEN", "CLOSING", "CLOSED"];
     var subprotocolRegex = /^[!#$%&'*+\-.0-9A-Z^_`|a-z~]+$/;
-    var WebSocket4 = class extends EventEmitter2 {
+    var WebSocket4 = class extends EventEmitter3 {
       constructor(address, protocols, options) {
         super();
         this._binaryType = BINARY_TYPES[0];
@@ -49627,7 +49627,7 @@ var require_subprotocol = __commonJS({
 var require_websocket_server = __commonJS({
   "../../node_modules/.pnpm/ws@8.12.0/node_modules/ws/lib/websocket-server.js"(exports, module2) {
     "use strict";
-    var EventEmitter2 = require("events");
+    var EventEmitter3 = require("events");
     var http = require("http");
     var https = require("https");
     var net = require("net");
@@ -49642,7 +49642,7 @@ var require_websocket_server = __commonJS({
     var RUNNING = 0;
     var CLOSING = 1;
     var CLOSED = 2;
-    var WebSocketServer2 = class extends EventEmitter2 {
+    var WebSocketServer2 = class extends EventEmitter3 {
       constructor(options, callback) {
         super();
         options = {
@@ -53572,7 +53572,7 @@ var require_dist3 = __commonJS({
       "../../node_modules/sonic-boom/index.js"(exports2, module22) {
         "use strict";
         var fs = require("fs");
-        var EventEmitter2 = require("events");
+        var EventEmitter22 = require("events");
         var inherits2 = require("util").inherits;
         var path = require("path");
         var sleep = require_atomic_sleep2();
@@ -53759,7 +53759,7 @@ var require_dist3 = __commonJS({
           sonic._asyncDrainScheduled = false;
           sonic.emit("drain");
         }
-        inherits2(SonicBoom, EventEmitter2);
+        inherits2(SonicBoom, EventEmitter22);
         SonicBoom.prototype.write = function(data) {
           if (this.destroyed) {
             throw new Error("SonicBoom destroyed");
@@ -54126,7 +54126,7 @@ var require_dist3 = __commonJS({
       "../../node_modules/thread-stream/index.js"(exports2, module22) {
         "use strict";
         var { version: version22 } = require_package2();
-        var { EventEmitter: EventEmitter2 } = require("events");
+        var { EventEmitter: EventEmitter22 } = require("events");
         var { Worker } = require("worker_threads");
         var { join } = require("path");
         var { pathToFileURL } = require("url");
@@ -54277,7 +54277,7 @@ var require_dist3 = __commonJS({
           stream4.worker.off("exit", onWorkerExit);
           destroy(stream4, code4 !== 0 ? new Error("the worker thread exited") : null);
         }
-        var ThreadStream = class extends EventEmitter2 {
+        var ThreadStream = class extends EventEmitter22 {
           constructor(opts = {}) {
             super();
             if (opts.bufferSize < 4) {
@@ -55113,7 +55113,7 @@ var require_dist3 = __commonJS({
     var require_proto2 = __commonJS2({
       "../../node_modules/@atproto/common/node_modules/pino/lib/proto.js"(exports2, module22) {
         "use strict";
-        var { EventEmitter: EventEmitter2 } = require("events");
+        var { EventEmitter: EventEmitter22 } = require("events");
         var {
           lsCacheSym,
           levelValSym,
@@ -55185,7 +55185,7 @@ var require_dist3 = __commonJS({
           [getLevelSym]: getLevel,
           [setLevelSym]: setLevel
         };
-        Object.setPrototypeOf(prototype3, EventEmitter2.prototype);
+        Object.setPrototypeOf(prototype3, EventEmitter22.prototype);
         module22.exports = function() {
           return Object.create(prototype3);
         };
@@ -77552,7 +77552,7 @@ if (cid) {
       }
     };
     var AxiosTransformStream_default = AxiosTransformStream;
-    var import_events2 = __toESM2(require("events"), 1);
+    var import_events3 = __toESM2(require("events"), 1);
     var import_util310 = require("util");
     var import_stream22 = require("stream");
     var { asyncIterator } = Symbol;
@@ -77750,7 +77750,7 @@ if (cid) {
         let isDone;
         let rejected = false;
         let req;
-        const emitter = new import_events2.default();
+        const emitter = new import_events3.default();
         const onFinished = () => {
           if (config22.cancelToken) {
             config22.cancelToken.unsubscribe(abort);
@@ -85284,10 +85284,10 @@ var require_result = __commonJS({
 var require_query2 = __commonJS({
   "../../node_modules/.pnpm/pg@8.10.0/node_modules/pg/lib/query.js"(exports, module2) {
     "use strict";
-    var { EventEmitter: EventEmitter2 } = require("events");
+    var { EventEmitter: EventEmitter3 } = require("events");
     var Result = require_result();
     var utils = require_utils5();
-    var Query = class extends EventEmitter2 {
+    var Query = class extends EventEmitter3 {
       constructor(config2, values, callback) {
         super();
         config2 = utils.normalizeQueryConfig(config2, values, callback);
@@ -86253,12 +86253,12 @@ var require_connection = __commonJS({
   "../../node_modules/.pnpm/pg@8.10.0/node_modules/pg/lib/connection.js"(exports, module2) {
     "use strict";
     var net = require("net");
-    var EventEmitter2 = require("events").EventEmitter;
+    var EventEmitter3 = require("events").EventEmitter;
     var { parse: parse2, serialize } = require_dist4();
     var flushBuffer = serialize.flush();
     var syncBuffer = serialize.sync();
     var endBuffer = serialize.end();
-    var Connection = class extends EventEmitter2 {
+    var Connection = class extends EventEmitter3 {
       constructor(config2) {
         super();
         config2 = config2 || {};
@@ -86433,7 +86433,7 @@ var require_connection = __commonJS({
 var require_client = __commonJS({
   "../../node_modules/.pnpm/pg@8.10.0/node_modules/pg/lib/client.js"(exports, module2) {
     "use strict";
-    var EventEmitter2 = require("events").EventEmitter;
+    var EventEmitter3 = require("events").EventEmitter;
     var utils = require_utils5();
     var sasl = require_sasl();
     var pgPass = require_lib6();
@@ -86442,7 +86442,7 @@ var require_client = __commonJS({
     var Query = require_query2();
     var defaults = require_defaults3();
     var Connection = require_connection();
-    var Client3 = class extends EventEmitter2 {
+    var Client3 = class extends EventEmitter3 {
       constructor(config2) {
         super();
         this.connectionParameters = new ConnectionParameters(config2);
@@ -86936,7 +86936,7 @@ var require_client = __commonJS({
 var require_pg_pool = __commonJS({
   "../../node_modules/.pnpm/pg-pool@3.6.1_pg@8.10.0/node_modules/pg-pool/index.js"(exports, module2) {
     "use strict";
-    var EventEmitter2 = require("events").EventEmitter;
+    var EventEmitter3 = require("events").EventEmitter;
     var NOOP = function() {
     };
     var removeWhere = (list, predicate) => {
@@ -86987,7 +86987,7 @@ var require_pg_pool = __commonJS({
         pool.emit("error", err, client);
       };
     }
-    var Pool = class extends EventEmitter2 {
+    var Pool = class extends EventEmitter3 {
       constructor(options, Client3) {
         super();
         this.options = Object.assign({}, options);
@@ -87310,11 +87310,11 @@ var require_pg_pool = __commonJS({
 var require_query3 = __commonJS({
   "../../node_modules/.pnpm/pg@8.10.0/node_modules/pg/lib/native/query.js"(exports, module2) {
     "use strict";
-    var EventEmitter2 = require("events").EventEmitter;
+    var EventEmitter3 = require("events").EventEmitter;
     var util2 = require("util");
     var utils = require_utils5();
     var NativeQuery = module2.exports = function(config2, values, callback) {
-      EventEmitter2.call(this);
+      EventEmitter3.call(this);
       config2 = utils.normalizeQueryConfig(config2, values, callback);
       this.text = config2.text;
       this.values = config2.values;
@@ -87328,7 +87328,7 @@ var require_query3 = __commonJS({
           this._emitRowEvents = true;
       }.bind(this));
     };
-    util2.inherits(NativeQuery, EventEmitter2);
+    util2.inherits(NativeQuery, EventEmitter3);
     var errorFieldMap = {
       sqlState: "code",
       statementPosition: "position",
@@ -87448,12 +87448,12 @@ var require_client2 = __commonJS({
     "use strict";
     var Native = require("pg-native");
     var TypeOverrides = require_type_overrides();
-    var EventEmitter2 = require("events").EventEmitter;
+    var EventEmitter3 = require("events").EventEmitter;
     var util2 = require("util");
     var ConnectionParameters = require_connection_parameters();
     var NativeQuery = require_query3();
     var Client3 = module2.exports = function(config2) {
-      EventEmitter2.call(this);
+      EventEmitter3.call(this);
       config2 = config2 || {};
       this._Promise = config2.Promise || global.Promise;
       this._types = new TypeOverrides(config2.types);
@@ -87479,7 +87479,7 @@ var require_client2 = __commonJS({
       this.namedQueries = {};
     };
     Client3.Query = NativeQuery;
-    util2.inherits(Client3, EventEmitter2);
+    util2.inherits(Client3, EventEmitter3);
     Client3.prototype._errorAllQueries = function(err) {
       const enqueueError = (query) => {
         process.nextTick(() => {
@@ -87771,11 +87771,11 @@ var require_eventemitter3 = __commonJS({
       else
         delete emitter._events[evt];
     }
-    function EventEmitter2() {
+    function EventEmitter3() {
       this._events = new Events();
       this._eventsCount = 0;
     }
-    EventEmitter2.prototype.eventNames = function eventNames() {
+    EventEmitter3.prototype.eventNames = function eventNames() {
       var names = [], events2, name2;
       if (this._eventsCount === 0)
         return names;
@@ -87788,7 +87788,7 @@ var require_eventemitter3 = __commonJS({
       }
       return names;
     };
-    EventEmitter2.prototype.listeners = function listeners(event) {
+    EventEmitter3.prototype.listeners = function listeners(event) {
       var evt = prefix ? prefix + event : event, handlers = this._events[evt];
       if (!handlers)
         return [];
@@ -87799,7 +87799,7 @@ var require_eventemitter3 = __commonJS({
       }
       return ee;
     };
-    EventEmitter2.prototype.listenerCount = function listenerCount(event) {
+    EventEmitter3.prototype.listenerCount = function listenerCount(event) {
       var evt = prefix ? prefix + event : event, listeners = this._events[evt];
       if (!listeners)
         return 0;
@@ -87807,7 +87807,7 @@ var require_eventemitter3 = __commonJS({
         return 1;
       return listeners.length;
     };
-    EventEmitter2.prototype.emit = function emit(event, a1, a2, a3, a4, a5) {
+    EventEmitter3.prototype.emit = function emit(event, a1, a2, a3, a4, a5) {
       var evt = prefix ? prefix + event : event;
       if (!this._events[evt])
         return false;
@@ -87862,13 +87862,13 @@ var require_eventemitter3 = __commonJS({
       }
       return true;
     };
-    EventEmitter2.prototype.on = function on(event, fn, context) {
+    EventEmitter3.prototype.on = function on(event, fn, context) {
       return addListener(this, event, fn, context, false);
     };
-    EventEmitter2.prototype.once = function once(event, fn, context) {
+    EventEmitter3.prototype.once = function once(event, fn, context) {
       return addListener(this, event, fn, context, true);
     };
-    EventEmitter2.prototype.removeListener = function removeListener(event, fn, context, once) {
+    EventEmitter3.prototype.removeListener = function removeListener(event, fn, context, once) {
       var evt = prefix ? prefix + event : event;
       if (!this._events[evt])
         return this;
@@ -87894,7 +87894,7 @@ var require_eventemitter3 = __commonJS({
       }
       return this;
     };
-    EventEmitter2.prototype.removeAllListeners = function removeAllListeners(event) {
+    EventEmitter3.prototype.removeAllListeners = function removeAllListeners(event) {
       var evt;
       if (event) {
         evt = prefix ? prefix + event : event;
@@ -87906,12 +87906,12 @@ var require_eventemitter3 = __commonJS({
       }
       return this;
     };
-    EventEmitter2.prototype.off = EventEmitter2.prototype.removeListener;
-    EventEmitter2.prototype.addListener = EventEmitter2.prototype.on;
-    EventEmitter2.prefixed = prefix;
-    EventEmitter2.EventEmitter = EventEmitter2;
+    EventEmitter3.prototype.off = EventEmitter3.prototype.removeListener;
+    EventEmitter3.prototype.addListener = EventEmitter3.prototype.on;
+    EventEmitter3.prefixed = prefix;
+    EventEmitter3.EventEmitter = EventEmitter3;
     if (typeof module2 !== "undefined") {
-      module2.exports = EventEmitter2;
+      module2.exports = EventEmitter3;
     }
   }
 });
@@ -87983,13 +87983,13 @@ var require_dist5 = __commonJS({
   "../../node_modules/.pnpm/p-queue@6.6.2/node_modules/p-queue/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    var EventEmitter2 = require_eventemitter3();
+    var EventEmitter3 = require_eventemitter3();
     var p_timeout_1 = require_p_timeout();
     var priority_queue_1 = require_priority_queue();
     var empty2 = () => {
     };
     var timeoutError = new p_timeout_1.TimeoutError();
-    var PQueue2 = class extends EventEmitter2 {
+    var PQueue2 = class extends EventEmitter3 {
       constructor(options) {
         var _a, _b, _c, _d;
         super();
@@ -88219,7 +88219,7 @@ __export(src_exports5, {
 });
 module.exports = __toCommonJS(src_exports5);
 var import_express4 = __toESM(require_express2());
-var import_events = __toESM(require("events"));
+var import_events2 = __toESM(require("events"));
 var import_http_terminator = __toESM(require_src3());
 var import_cors = __toESM(require_lib4());
 var import_compression = __toESM(require_compression());
@@ -92303,6 +92303,77 @@ var mapDefined = (arr, fn) => {
   return output2;
 };
 
+// ../common-web/src/async.ts
+var AsyncBuffer = class {
+  constructor(maxSize) {
+    this.maxSize = maxSize;
+    this.buffer = [];
+    this.closed = false;
+    this.promise = Promise.resolve();
+    this.resolve = () => null;
+    this.resetPromise();
+  }
+  get curr() {
+    return this.buffer;
+  }
+  get size() {
+    return this.buffer.length;
+  }
+  get isClosed() {
+    return this.closed;
+  }
+  resetPromise() {
+    this.promise = new Promise((r) => this.resolve = r);
+  }
+  push(item) {
+    this.buffer.push(item);
+    this.resolve();
+  }
+  pushMany(items) {
+    items.forEach((i) => this.buffer.push(i));
+    this.resolve();
+  }
+  async *events() {
+    while (true) {
+      if (this.closed && this.buffer.length === 0) {
+        if (this.toThrow) {
+          throw this.toThrow;
+        } else {
+          return;
+        }
+      }
+      await this.promise;
+      if (this.toThrow) {
+        throw this.toThrow;
+      }
+      if (this.maxSize && this.size > this.maxSize) {
+        throw new AsyncBufferFullError(this.maxSize);
+      }
+      const [first, ...rest] = this.buffer;
+      if (first) {
+        this.buffer = rest;
+        yield first;
+      } else {
+        this.resetPromise();
+      }
+    }
+  }
+  throw(err) {
+    this.toThrow = err;
+    this.closed = true;
+    this.resolve();
+  }
+  close() {
+    this.closed = true;
+    this.resolve();
+  }
+};
+var AsyncBufferFullError = class extends Error {
+  constructor(maxSize) {
+    super(`ReachedMaxBufferSize: ${maxSize}`);
+  }
+};
+
 // ../../node_modules/.pnpm/multiformats@9.9.0/node_modules/multiformats/esm/vendor/varint.js
 var encode_1 = encode;
 var MSB = 128;
@@ -106618,7 +106689,7 @@ var schemaDict = {
     defs: {
       main: {
         type: "query",
-        description: "Fetch all labels from a labeler created after a certain date. DEPRECATED: use queryLabels or subscribeLabels instead",
+        description: "DEPRECATED: use queryLabels or subscribeLabels instead -- Fetch all labels from a labeler created after a certain date.",
         parameters: {
           type: "params",
           properties: {
@@ -110684,6 +110755,7 @@ var RecordSubject = class {
 // src/logger.ts
 var import_pino_http = __toESM(require_logger());
 var dbLogger = subsystemLogger("ozone:db");
+var seqLogger = subsystemLogger("ozone:sequencer");
 var httpLogger = subsystemLogger("ozone");
 var langLogger = subsystemLogger("ozone:lang");
 var loggerMiddleware = (0, import_pino_http.default)({
@@ -110805,11 +110877,13 @@ function emitModerationEvent_default(server, ctx) {
       const isReverseTakedownEvent = isModEventReverseTakedown(event);
       const isLabelEvent = isModEventLabel(event);
       const subject = subjectFromInput(input.body.subject, input.body.subjectBlobCids);
-      if (!access.moderator && isTakedownEvent && subject.isRepo()) {
-        throw new AuthRequiredError("Must be a full moderator to perform an account takedown");
-      }
-      if (!access.moderator && (isTakedownEvent || isReverseTakedownEvent)) {
-        throw new AuthRequiredError("Must be a full moderator to take this type of action");
+      if (isTakedownEvent || isReverseTakedownEvent) {
+        if (!access.moderator) {
+          throw new AuthRequiredError("Must be a full moderator to take this type of action");
+        }
+        if (!access.admin && subject.recordPath?.includes("app.bsky.feed.generator/")) {
+          throw new AuthRequiredError("Must be a full admin to take this type of action on feed generators");
+        }
       }
       if (!access.moderator && isLabelEvent) {
         throw new AuthRequiredError("Must be a full moderator to label content");
@@ -111131,140 +111205,6 @@ function getModerationEvent_default(server, ctx) {
   });
 }
 
-// src/mod-service/types.ts
-var UNSPECCED_TAKEDOWN_LABEL = "!unspecced-takedown";
-var UNSPECCED_TAKEDOWN_BLOBS_LABEL = "!unspecced-takedown-blobs";
-
-// src/api/temp/fetchLabels.ts
-function fetchLabels_default(server, ctx) {
-  server.com.atproto.temp.fetchLabels({
-    auth: ctx.authOptionalAccessOrRoleVerifier,
-    handler: async ({ auth, params: params2 }) => {
-      const { limit } = params2;
-      const since = params2.since !== void 0 ? new Date(params2.since).toISOString() : "";
-      const includeUnspeccedTakedowns = auth.credentials.type === "role" && auth.credentials.admin;
-      const labelRes = await ctx.db.db.selectFrom("label").selectAll().orderBy("label.cts", "asc").where("cts", ">", since).if(!includeUnspeccedTakedowns, (q) => q.where("label.val", "not in", [
-        UNSPECCED_TAKEDOWN_LABEL,
-        UNSPECCED_TAKEDOWN_BLOBS_LABEL
-      ])).limit(limit).execute();
-      const labels = labelRes.map((l) => ({
-        ...l,
-        cid: l.cid === "" ? void 0 : l.cid
-      }));
-      return {
-        encoding: "application/json",
-        body: {
-          labels
-        }
-      };
-    }
-  });
-}
-
-// src/api/admin/createCommunicationTemplate.ts
-function createCommunicationTemplate_default(server, ctx) {
-  server.com.atproto.admin.createCommunicationTemplate({
-    auth: ctx.roleVerifier,
-    handler: async ({ input, auth }) => {
-      const access = auth.credentials;
-      const db = ctx.db;
-      const { createdBy, ...template } = input.body;
-      if (!access.admin) {
-        throw new AuthRequiredError("Must be an admin to create a communication template");
-      }
-      if (!createdBy) {
-        throw new InvalidRequestError("createdBy field is required");
-      }
-      const communicationTemplate = ctx.communicationTemplateService(db);
-      const newTemplate = await communicationTemplate.create({
-        ...template,
-        disabled: false,
-        lastUpdatedBy: createdBy
-      });
-      return {
-        encoding: "application/json",
-        body: communicationTemplate.view(newTemplate)
-      };
-    }
-  });
-}
-
-// src/api/admin/updateCommunicationTemplate.ts
-function updateCommunicationTemplate_default(server, ctx) {
-  server.com.atproto.admin.updateCommunicationTemplate({
-    auth: ctx.roleVerifier,
-    handler: async ({ input, auth }) => {
-      const access = auth.credentials;
-      const db = ctx.db;
-      const { id, updatedBy, ...template } = input.body;
-      if (!access.admin) {
-        throw new AuthRequiredError("Must be an admin to update a communication template");
-      }
-      if (!updatedBy) {
-        throw new InvalidRequestError("updatedBy field is required");
-      }
-      if (!Object.keys(template).length) {
-        throw new InvalidRequestError("Missing update data in request body");
-      }
-      const communicationTemplate = ctx.communicationTemplateService(db);
-      const updatedTemplate = await communicationTemplate.update(Number(id), {
-        ...template,
-        lastUpdatedBy: updatedBy
-      });
-      return {
-        encoding: "application/json",
-        body: communicationTemplate.view(updatedTemplate)
-      };
-    }
-  });
-}
-
-// src/api/admin/deleteCommunicationTemplate.ts
-function deleteCommunicationTemplate_default(server, ctx) {
-  server.com.atproto.admin.deleteCommunicationTemplate({
-    auth: ctx.roleVerifier,
-    handler: async ({ input, auth }) => {
-      const access = auth.credentials;
-      const db = ctx.db;
-      const { id } = input.body;
-      if (!access.admin) {
-        throw new AuthRequiredError("Must be an admin to delete a communication template");
-      }
-      const communicationTemplate = ctx.communicationTemplateService(db);
-      await communicationTemplate.delete(Number(id));
-    }
-  });
-}
-
-// src/api/admin/listCommunicationTemplates.ts
-function listCommunicationTemplates_default(server, ctx) {
-  server.com.atproto.admin.listCommunicationTemplates({
-    auth: ctx.roleVerifier,
-    handler: async ({ auth }) => {
-      const access = auth.credentials;
-      const db = ctx.db;
-      if (!access.moderator) {
-        throw new AuthRequiredError("Must be a full moderator to view list of communication template");
-      }
-      const communicationTemplate = ctx.communicationTemplateService(db);
-      const list = await communicationTemplate.list();
-      return {
-        encoding: "application/json",
-        body: {
-          communicationTemplates: list.map((item) => communicationTemplate.view(item))
-        }
-      };
-    }
-  });
-}
-
-// src/api/health.ts
-var health_exports = {};
-__export(health_exports, {
-  createRouter: () => createRouter
-});
-var import_express2 = __toESM(require_express2());
-
 // ../../node_modules/.pnpm/kysely@0.22.0/node_modules/kysely/dist/esm/util/object-utils.js
 function isUndefined(obj) {
   return obj === void 0;
@@ -118800,7 +118740,301 @@ var PostgresDialect = class {
   }
 };
 
+// src/mod-service/util.ts
+var formatLabel = (row) => {
+  const label = {
+    src: row.src,
+    uri: row.uri,
+    val: row.val,
+    neg: row.neg,
+    cts: row.cts
+  };
+  if (row.cid !== "") {
+    label.cid = row.cid;
+  }
+  return label;
+};
+
+// src/api/label/queryLabels.ts
+function queryLabels_default(server, ctx) {
+  server.com.atproto.label.queryLabels(async ({ params: params2 }) => {
+    const { uriPatterns, sources, limit, cursor } = params2;
+    let builder = ctx.db.db.selectFrom("label").selectAll().limit(limit);
+    if (!uriPatterns.includes("*")) {
+      builder = builder.where((qb) => {
+        qb = qb.where(sql`1 = 0`);
+        for (const pattern of uriPatterns) {
+          if (!pattern.includes("*")) {
+            qb = qb.orWhere("uri", "=", pattern);
+          } else {
+            if (pattern.indexOf("*") < pattern.length - 1) {
+              throw new InvalidRequestError(`invalid pattern: ${pattern}`);
+            }
+            const searchPattern = pattern.slice(0, -1).replaceAll("%", "").replaceAll("_", "\\_");
+            qb = qb.orWhere("uri", "like", `${searchPattern}%`);
+          }
+        }
+        return qb;
+      });
+    }
+    if (sources && sources.length > 0) {
+      builder = builder.where("src", "in", sources);
+    }
+    if (cursor) {
+      const cursorId = parseInt(cursor, 10);
+      if (isNaN(cursorId)) {
+        throw new InvalidRequestError("invalid cursor");
+      }
+      builder = builder.where("id", ">", cursorId);
+    }
+    const res = await builder.execute();
+    const labels = res.map((l) => formatLabel(l));
+    const resCursor = res.at(-1)?.id.toString(10);
+    return {
+      encoding: "application/json",
+      body: {
+        cursor: resCursor,
+        labels
+      }
+    };
+  });
+}
+
+// src/sequencer/outbox.ts
+var Outbox = class {
+  constructor(sequencer, opts = {}) {
+    this.sequencer = sequencer;
+    this.caughtUp = false;
+    this.lastSeen = -1;
+    const { maxBufferSize = 500 } = opts;
+    this.cutoverBuffer = [];
+    this.outBuffer = new AsyncBuffer(maxBufferSize);
+  }
+  async *events(backfillCursor, signal) {
+    if (backfillCursor !== void 0) {
+      for await (const evt of this.getBackfill(backfillCursor)) {
+        if (signal?.aborted)
+          return;
+        this.lastSeen = evt.seq;
+        yield evt;
+      }
+    } else {
+      this.caughtUp = true;
+    }
+    const addToBuffer = (evts) => {
+      if (this.caughtUp) {
+        this.outBuffer.pushMany(evts);
+      } else {
+        this.cutoverBuffer = [...this.cutoverBuffer, ...evts];
+      }
+    };
+    if (!signal?.aborted) {
+      this.sequencer.on("events", addToBuffer);
+    }
+    signal?.addEventListener("abort", () => this.sequencer.off("events", addToBuffer));
+    const cutover = async () => {
+      if (backfillCursor !== void 0) {
+        const cutoverEvts = await this.sequencer.requestLabelRange({
+          earliestId: this.lastSeen > -1 ? this.lastSeen : backfillCursor
+        });
+        this.outBuffer.pushMany(cutoverEvts);
+        this.outBuffer.pushMany(this.cutoverBuffer);
+        this.caughtUp = true;
+        this.cutoverBuffer = [];
+      } else {
+        this.caughtUp = true;
+      }
+    };
+    cutover();
+    while (true) {
+      try {
+        for await (const evt of this.outBuffer.events()) {
+          if (signal?.aborted)
+            return;
+          if (evt.seq > this.lastSeen) {
+            this.lastSeen = evt.seq;
+            yield evt;
+          }
+        }
+      } catch (err) {
+        if (err instanceof AsyncBufferFullError) {
+          throw new InvalidRequestError("Stream consumer too slow", "ConsumerTooSlow");
+        } else {
+          throw err;
+        }
+      }
+    }
+  }
+  async *getBackfill(backfillCursor) {
+    const PAGE_SIZE = 500;
+    while (true) {
+      const evts = await this.sequencer.requestLabelRange({
+        earliestId: this.lastSeen > -1 ? this.lastSeen : backfillCursor,
+        limit: PAGE_SIZE
+      });
+      for (const evt of evts) {
+        yield evt;
+      }
+      const seqCursor = this.sequencer.lastSeen ?? -1;
+      if (seqCursor - this.lastSeen < PAGE_SIZE / 2)
+        break;
+      if (evts.length < 1)
+        break;
+    }
+  }
+};
+var outbox_default = Outbox;
+
+// src/api/label/subscribeLabels.ts
+function subscribeLabels_default(server, ctx) {
+  server.com.atproto.label.subscribeLabels(async function* ({
+    params: params2,
+    signal
+  }) {
+    const { cursor } = params2;
+    const outbox = new outbox_default(ctx.sequencer);
+    if (cursor !== void 0) {
+      const curr = await ctx.sequencer.curr();
+      if (cursor > (curr ?? 0)) {
+        throw new InvalidRequestError("Cursor in the future.", "FutureCursor");
+      }
+    }
+    for await (const evt of outbox.events(cursor, signal)) {
+      yield { $type: "com.atproto.label.subscribeLabels#labels", ...evt };
+    }
+  });
+}
+
+// src/mod-service/types.ts
+var UNSPECCED_TAKEDOWN_LABEL = "!unspecced-takedown";
+var UNSPECCED_TAKEDOWN_BLOBS_LABEL = "!unspecced-takedown-blobs";
+
+// src/api/temp/fetchLabels.ts
+function fetchLabels_default(server, ctx) {
+  server.com.atproto.temp.fetchLabels({
+    auth: ctx.authOptionalAccessOrRoleVerifier,
+    handler: async ({ auth, params: params2 }) => {
+      const { limit } = params2;
+      const since = params2.since !== void 0 ? new Date(params2.since).toISOString() : "";
+      const includeUnspeccedTakedowns = auth.credentials.type === "role" && auth.credentials.admin;
+      const labelRes = await ctx.db.db.selectFrom("label").selectAll().orderBy("label.cts", "asc").where("cts", ">", since).if(!includeUnspeccedTakedowns, (q) => q.where("label.val", "not in", [
+        UNSPECCED_TAKEDOWN_LABEL,
+        UNSPECCED_TAKEDOWN_BLOBS_LABEL
+      ])).limit(limit).execute();
+      const labels = labelRes.map((l) => formatLabel(l));
+      return {
+        encoding: "application/json",
+        body: {
+          labels
+        }
+      };
+    }
+  });
+}
+
+// src/api/admin/createCommunicationTemplate.ts
+function createCommunicationTemplate_default(server, ctx) {
+  server.com.atproto.admin.createCommunicationTemplate({
+    auth: ctx.roleVerifier,
+    handler: async ({ input, auth }) => {
+      const access = auth.credentials;
+      const db = ctx.db;
+      const { createdBy, ...template } = input.body;
+      if (!access.admin) {
+        throw new AuthRequiredError("Must be an admin to create a communication template");
+      }
+      if (!createdBy) {
+        throw new InvalidRequestError("createdBy field is required");
+      }
+      const communicationTemplate = ctx.communicationTemplateService(db);
+      const newTemplate = await communicationTemplate.create({
+        ...template,
+        disabled: false,
+        lastUpdatedBy: createdBy
+      });
+      return {
+        encoding: "application/json",
+        body: communicationTemplate.view(newTemplate)
+      };
+    }
+  });
+}
+
+// src/api/admin/updateCommunicationTemplate.ts
+function updateCommunicationTemplate_default(server, ctx) {
+  server.com.atproto.admin.updateCommunicationTemplate({
+    auth: ctx.roleVerifier,
+    handler: async ({ input, auth }) => {
+      const access = auth.credentials;
+      const db = ctx.db;
+      const { id, updatedBy, ...template } = input.body;
+      if (!access.admin) {
+        throw new AuthRequiredError("Must be an admin to update a communication template");
+      }
+      if (!updatedBy) {
+        throw new InvalidRequestError("updatedBy field is required");
+      }
+      if (!Object.keys(template).length) {
+        throw new InvalidRequestError("Missing update data in request body");
+      }
+      const communicationTemplate = ctx.communicationTemplateService(db);
+      const updatedTemplate = await communicationTemplate.update(Number(id), {
+        ...template,
+        lastUpdatedBy: updatedBy
+      });
+      return {
+        encoding: "application/json",
+        body: communicationTemplate.view(updatedTemplate)
+      };
+    }
+  });
+}
+
+// src/api/admin/deleteCommunicationTemplate.ts
+function deleteCommunicationTemplate_default(server, ctx) {
+  server.com.atproto.admin.deleteCommunicationTemplate({
+    auth: ctx.roleVerifier,
+    handler: async ({ input, auth }) => {
+      const access = auth.credentials;
+      const db = ctx.db;
+      const { id } = input.body;
+      if (!access.admin) {
+        throw new AuthRequiredError("Must be an admin to delete a communication template");
+      }
+      const communicationTemplate = ctx.communicationTemplateService(db);
+      await communicationTemplate.delete(Number(id));
+    }
+  });
+}
+
+// src/api/admin/listCommunicationTemplates.ts
+function listCommunicationTemplates_default(server, ctx) {
+  server.com.atproto.admin.listCommunicationTemplates({
+    auth: ctx.roleVerifier,
+    handler: async ({ auth }) => {
+      const access = auth.credentials;
+      const db = ctx.db;
+      if (!access.moderator) {
+        throw new AuthRequiredError("Must be a full moderator to view list of communication template");
+      }
+      const communicationTemplate = ctx.communicationTemplateService(db);
+      const list = await communicationTemplate.list();
+      return {
+        encoding: "application/json",
+        body: {
+          communicationTemplates: list.map((item) => communicationTemplate.view(item))
+        }
+      };
+    }
+  });
+}
+
 // src/api/health.ts
+var health_exports = {};
+__export(health_exports, {
+  createRouter: () => createRouter
+});
+var import_express2 = __toESM(require_express2());
 var createRouter = (ctx) => {
   const router = import_express2.default.Router();
   router.get("/xrpc/_health", async function(req, res) {
@@ -118862,6 +119096,8 @@ function api_default(server, ctx) {
   getModerationEvent_default(server, ctx);
   queryModerationEvents_default(server, ctx);
   queryModerationStatuses_default(server, ctx);
+  queryLabels_default(server, ctx);
+  subscribeLabels_default(server, ctx);
   fetchLabels_default(server, ctx);
   listCommunicationTemplates_default(server, ctx);
   createCommunicationTemplate_default(server, ctx);
@@ -119527,6 +119763,9 @@ var getKey = (doc) => {
   const key = getSigningKey(doc);
   if (!key)
     return void 0;
+  return getDidKeyFromMultibase(key);
+};
+var getDidKeyFromMultibase = (key) => {
   const keyBytes = multibaseToBytes(key.publicKeyMultibase);
   let didKey = void 0;
   if (key.type === "EcdsaSecp256r1VerificationKey2019") {
@@ -124579,7 +124818,7 @@ var schemaDict2 = {
     defs: {
       main: {
         type: "query",
-        description: "Fetch all labels from a labeler created after a certain date. DEPRECATED: use queryLabels or subscribeLabels instead",
+        description: "DEPRECATED: use queryLabels or subscribeLabels instead -- Fetch all labels from a labeler created after a certain date.",
         parameters: {
           type: "params",
           properties: {
@@ -131887,7 +132126,8 @@ async function up(db) {
   await db.schema.createTable("moderation_event").addColumn("id", "serial", (col) => col.primaryKey()).addColumn("action", "varchar", (col) => col.notNull()).addColumn("subjectType", "varchar", (col) => col.notNull()).addColumn("subjectDid", "varchar", (col) => col.notNull()).addColumn("subjectUri", "varchar").addColumn("subjectCid", "varchar").addColumn("comment", "text").addColumn("meta", "jsonb").addColumn("createdAt", "varchar", (col) => col.notNull()).addColumn("createdBy", "varchar", (col) => col.notNull()).addColumn("reversedAt", "varchar").addColumn("reversedBy", "varchar").addColumn("durationInHours", "integer").addColumn("expiresAt", "varchar").addColumn("reversedReason", "text").addColumn("createLabelVals", "varchar").addColumn("negateLabelVals", "varchar").addColumn("legacyRefId", "integer").execute();
   await db.schema.createTable("moderation_subject_status").addColumn("id", "serial", (col) => col.primaryKey()).addColumn("did", "varchar", (col) => col.notNull()).addColumn("recordPath", "varchar", (col) => col.notNull().defaultTo("")).addColumn("blobCids", "jsonb").addColumn("recordCid", "varchar").addColumn("reviewState", "varchar", (col) => col.notNull()).addColumn("comment", "varchar").addColumn("muteUntil", "varchar").addColumn("lastReviewedAt", "varchar").addColumn("lastReviewedBy", "varchar").addColumn("lastReportedAt", "varchar").addColumn("lastAppealedAt", "varchar").addColumn("takendown", "boolean", (col) => col.defaultTo(false).notNull()).addColumn("suspendUntil", "varchar").addColumn("appealed", "boolean").addColumn("createdAt", "varchar", (col) => col.notNull()).addColumn("updatedAt", "varchar", (col) => col.notNull()).addUniqueConstraint("moderation_status_unique_idx", ["did", "recordPath"]).execute();
   await db.schema.createIndex("moderation_subject_status_blob_cids_idx").on("moderation_subject_status").using("gin").column("blobCids").execute();
-  await db.schema.createTable("label").addColumn("src", "varchar", (col) => col.notNull()).addColumn("uri", "varchar", (col) => col.notNull()).addColumn("cid", "varchar", (col) => col.notNull()).addColumn("val", "varchar", (col) => col.notNull()).addColumn("neg", "boolean", (col) => col.notNull()).addColumn("cts", "varchar", (col) => col.notNull()).addPrimaryKeyConstraint("label_pkey", ["src", "uri", "cid", "val"]).execute();
+  await db.schema.createTable("label").addColumn("id", "bigserial", (col) => col.primaryKey()).addColumn("src", "varchar", (col) => col.notNull()).addColumn("uri", "varchar", (col) => col.notNull()).addColumn("cid", "varchar", (col) => col.notNull()).addColumn("val", "varchar", (col) => col.notNull()).addColumn("neg", "boolean", (col) => col.notNull()).addColumn("cts", "varchar", (col) => col.notNull()).execute();
+  await db.schema.createIndex("unique_label_idx").unique().on("label").columns(["src", "uri", "cid", "val"]).execute();
   await db.schema.createIndex("label_uri_index").on("label").column("uri").execute();
   await db.schema.createTable("repo_push_event").addColumn("id", "serial", (col) => col.primaryKey()).addColumn("eventType", "varchar", (col) => col.notNull()).addColumn("subjectDid", "varchar", (col) => col.notNull()).addColumn("takedownRef", "varchar").addColumn("confirmedAt", "timestamptz").addColumn("lastAttempted", "timestamptz").addColumn("attempts", "integer", (col) => col.notNull().defaultTo(0)).addUniqueConstraint("repo_push_event_unique_evt", [
     "subjectDid",
@@ -132402,11 +132642,7 @@ var ModerationViews = class {
   }
   async labels(subject, includeNeg) {
     const res = await this.db.db.selectFrom("label").where("label.uri", "=", subject).if(!includeNeg, (qb) => qb.where("neg", "=", false)).selectAll().execute();
-    return res.map((l) => ({
-      ...l,
-      cid: l.cid === "" ? void 0 : l.cid,
-      neg: l.neg
-    }));
+    return res.map((l) => formatLabel(l));
   }
   async getSubjectStatus(subjects) {
     const parsedSubjects = subjects.map((subject) => parseSubjectId(subject));
@@ -132629,6 +132865,8 @@ var adjustModerationSubjectStatus = async (db, moderationEvent, blobCids) => {
     subjectStatus.appealed = true;
     newStatus.lastAppealedAt = createdAt;
     subjectStatus.lastAppealedAt = createdAt;
+    subjectStatus.reviewState = REVIEWESCALATED;
+    newStatus.reviewState = REVIEWESCALATED;
   }
   if (action === "com.atproto.admin.defs#modEventResolveAppeal" && subjectStatus.appealed) {
     newStatus.appealed = false;
@@ -132821,6 +133059,9 @@ var paginate = (qb, opts) => {
   return qb.if(!!limit, (q) => q.limit(limit)).if(!nullsLast, (q) => q.orderBy(keyset.primary, direction).orderBy(keyset.secondary, direction)).if(!!nullsLast, (q) => q.orderBy(direction === "asc" ? sql`${keyset.primary} asc nulls last` : sql`${keyset.primary} desc nulls last`).orderBy(direction === "asc" ? sql`${keyset.secondary} asc nulls last` : sql`${keyset.secondary} desc nulls last`)).if(!!keysetSql, (qb2) => keysetSql ? qb2.where(keysetSql) : qb2);
 };
 
+// src/db/schema/label.ts
+var LabelChannel = "label_channel";
+
 // src/mod-service/index.ts
 var ModerationService = class {
   constructor(db, backgroundQueue, eventPusher, appviewAgent, appviewAuth, serverDid) {
@@ -133053,17 +133294,15 @@ var ModerationService = class {
       subjectDid: subject.did,
       takedownRef
     }));
-    const [repoEvts] = await Promise.all([
-      this.db.db.insertInto("repo_push_event").values(values).onConflict((oc) => oc.columns(["subjectDid", "eventType"]).doUpdateSet({
-        takedownRef,
-        confirmedAt: null,
-        attempts: 0,
-        lastAttempted: null
-      })).returning("id").execute(),
-      this.formatAndCreateLabels(subject.did, null, {
-        create: [UNSPECCED_TAKEDOWN_LABEL]
-      })
-    ]);
+    const repoEvts = await this.db.db.insertInto("repo_push_event").values(values).onConflict((oc) => oc.columns(["subjectDid", "eventType"]).doUpdateSet({
+      takedownRef,
+      confirmedAt: null,
+      attempts: 0,
+      lastAttempted: null
+    })).returning("id").execute();
+    await this.formatAndCreateLabels(subject.did, null, {
+      create: [UNSPECCED_TAKEDOWN_LABEL]
+    });
     this.db.onCommit(() => {
       this.backgroundQueue.add(async () => {
         await Promise.all(repoEvts.map((evt) => this.eventPusher.attemptRepoEvent(evt.id)));
@@ -133071,17 +133310,15 @@ var ModerationService = class {
     });
   }
   async reverseTakedownRepo(subject) {
-    const [repoEvts] = await Promise.all([
-      this.db.db.updateTable("repo_push_event").where("eventType", "in", TAKEDOWNS).where("subjectDid", "=", subject.did).set({
-        takedownRef: null,
-        confirmedAt: null,
-        attempts: 0,
-        lastAttempted: null
-      }).returning("id").execute(),
-      this.formatAndCreateLabels(subject.did, null, {
-        negate: [UNSPECCED_TAKEDOWN_LABEL]
-      })
-    ]);
+    const repoEvts = await this.db.db.updateTable("repo_push_event").where("eventType", "in", TAKEDOWNS).where("subjectDid", "=", subject.did).set({
+      takedownRef: null,
+      confirmedAt: null,
+      attempts: 0,
+      lastAttempted: null
+    }).returning("id").execute();
+    await this.formatAndCreateLabels(subject.did, null, {
+      negate: [UNSPECCED_TAKEDOWN_LABEL]
+    });
     this.db.onCommit(() => {
       this.backgroundQueue.add(async () => {
         await Promise.all(repoEvts.map((evt) => this.eventPusher.attemptRepoEvent(evt.id)));
@@ -133103,15 +133340,15 @@ var ModerationService = class {
     if (blobCids && blobCids.length > 0) {
       labels.push(UNSPECCED_TAKEDOWN_BLOBS_LABEL);
     }
-    const [recordEvts] = await Promise.all([
-      this.db.db.insertInto("record_push_event").values(values).onConflict((oc) => oc.columns(["subjectUri", "eventType"]).doUpdateSet({
-        takedownRef,
-        confirmedAt: null,
-        attempts: 0,
-        lastAttempted: null
-      })).returning("id").execute(),
-      this.formatAndCreateLabels(subject.uri, subject.cid, { create: labels })
-    ]);
+    const recordEvts = await this.db.db.insertInto("record_push_event").values(values).onConflict((oc) => oc.columns(["subjectUri", "eventType"]).doUpdateSet({
+      takedownRef,
+      confirmedAt: null,
+      attempts: 0,
+      lastAttempted: null
+    })).returning("id").execute();
+    await this.formatAndCreateLabels(subject.uri, subject.cid, {
+      create: labels
+    });
     this.db.onCommit(() => {
       this.backgroundQueue.add(async () => {
         await Promise.all(recordEvts.map((evt) => this.eventPusher.attemptRecordEvent(evt.id)));
@@ -133149,16 +133386,15 @@ var ModerationService = class {
     if (blobCids && blobCids.length > 0) {
       labels.push(UNSPECCED_TAKEDOWN_BLOBS_LABEL);
     }
-    const [recordEvts] = await Promise.all([
-      this.db.db.updateTable("record_push_event").where("eventType", "in", TAKEDOWNS).where("subjectDid", "=", subject.did).where("subjectUri", "=", subject.uri).set({
-        takedownRef: null,
-        confirmedAt: null,
-        attempts: 0,
-        lastAttempted: null
-      }).returning("id").execute(),
-      this.formatAndCreateLabels(subject.uri, subject.cid, { negate: labels })
-    ]);
-    this.db.onCommit(() => {
+    const recordEvts = await this.db.db.updateTable("record_push_event").where("eventType", "in", TAKEDOWNS).where("subjectDid", "=", subject.did).where("subjectUri", "=", subject.uri).set({
+      takedownRef: null,
+      confirmedAt: null,
+      attempts: 0,
+      lastAttempted: null
+    }).returning("id").execute();
+    await this.formatAndCreateLabels(subject.uri, subject.cid, {
+      negate: labels
+    }), this.db.onCommit(() => {
       this.backgroundQueue.add(async () => {
         await Promise.all(recordEvts.map((evt) => this.eventPusher.attemptRecordEvent(evt.id)));
       });
@@ -133313,8 +133549,10 @@ var ModerationService = class {
       neg: !!l.neg
     }));
     const { ref } = this.db.db.dynamic;
+    await sql`notify ${ref(LabelChannel)}`.execute(this.db.db);
     const excluded = (col) => ref(`excluded.${col}`);
     await this.db.db.insertInto("label").values(dbVals).onConflict((oc) => oc.columns(["src", "uri", "cid", "val"]).doUpdateSet({
+      id: sql`${excluded("id")}`,
       neg: sql`${excluded("neg")}`,
       cts: sql`${excluded("cts")}`
     })).execute();
@@ -133766,6 +134004,101 @@ var OzoneDaemon = class {
   }
 };
 
+// src/sequencer/sequencer.ts
+var import_events = __toESM(require("events"));
+var Sequencer = class extends import_events.default {
+  constructor(db, lastSeen = 0) {
+    super();
+    this.db = db;
+    this.lastSeen = lastSeen;
+    this.destroyed = false;
+    this.queued = false;
+    this.setMaxListeners(100);
+  }
+  async start() {
+    const curr = await this.curr();
+    this.lastSeen = curr ?? 0;
+    this.poll();
+    this.conn = await this.db.pool.connect();
+    this.conn.query(`listen ${LabelChannel}`);
+    this.conn.on("notification", (notif) => {
+      if (notif.channel === LabelChannel) {
+        this.poll();
+      }
+    });
+  }
+  async destroy() {
+    if (this.destroyed)
+      return;
+    this.destroyed = true;
+    if (this.conn) {
+      this.conn.release();
+      this.conn = void 0;
+    }
+    if (this.pollPromise) {
+      await this.pollPromise;
+    }
+    this.emit("close");
+  }
+  async curr() {
+    const got = await this.db.db.selectFrom("label").selectAll().orderBy("id", "desc").limit(1).executeTakeFirst();
+    return got?.id ?? null;
+  }
+  async next(cursor) {
+    const got = await this.db.db.selectFrom("label").selectAll().where("id", ">", cursor).limit(1).orderBy("id", "asc").executeTakeFirst();
+    return got || null;
+  }
+  async requestLabelRange(opts) {
+    const { earliestId, limit } = opts;
+    let seqQb = this.db.db.selectFrom("label").selectAll().orderBy("id", "asc");
+    if (earliestId !== void 0) {
+      seqQb = seqQb.where("id", ">", earliestId);
+    }
+    if (limit !== void 0) {
+      seqQb = seqQb.limit(limit);
+    }
+    const rows = await seqQb.execute();
+    if (rows.length < 1) {
+      return [];
+    }
+    const evts = [];
+    for (const row of rows) {
+      evts.push({
+        seq: row.id,
+        labels: [formatLabel(row)]
+      });
+    }
+    return evts;
+  }
+  poll() {
+    if (this.destroyed)
+      return;
+    if (this.pollPromise) {
+      this.queued = true;
+      return;
+    }
+    this.queued = false;
+    this.pollPromise = this.requestLabelRange({
+      earliestId: this.lastSeen,
+      limit: 500
+    }).then((evts) => {
+      this.emit("events", evts);
+      this.lastSeen = evts.at(-1)?.seq ?? this.lastSeen;
+      if (evts.length > 0) {
+        this.queued = true;
+      }
+    }).catch((err) => {
+      seqLogger.error({ err, lastSeen: this.lastSeen }, "sequencer failed to poll db");
+    }).finally(() => {
+      this.pollPromise = void 0;
+      if (this.queued) {
+        this.poll();
+      }
+    });
+  }
+};
+var sequencer_default = Sequencer;
+
 // src/communication-service/template.ts
 var CommunicationTemplateService = class {
   constructor(db) {
@@ -133842,7 +134175,10 @@ var AppContext = class {
   static async fromConfig(cfg, secrets, overrides) {
     const db = new Database({
       url: cfg.db.postgresUrl,
-      schema: cfg.db.postgresSchema
+      schema: cfg.db.postgresSchema,
+      poolSize: cfg.db.poolSize,
+      poolMaxUses: cfg.db.poolMaxUses,
+      poolIdleTimeoutMs: cfg.db.poolIdleTimeoutMs
     });
     const signingKey = await Secp256k1Keypair.import(secrets.signingKeyHex);
     const appviewAgent = new AtpAgent({ service: cfg.appview.url });
@@ -133863,6 +134199,7 @@ var AppContext = class {
     const idResolver = new IdResolver({
       plcUrl: cfg.identity.plcUrl
     });
+    const sequencer = new sequencer_default(db);
     return new AppContext({
       db,
       cfg,
@@ -133873,6 +134210,7 @@ var AppContext = class {
       signingKey,
       idResolver,
       backgroundQueue,
+      sequencer,
       ...overrides ?? {}
     }, secrets);
   }
@@ -133910,6 +134248,9 @@ var AppContext = class {
   get backgroundQueue() {
     return this.opts.backgroundQueue;
   }
+  get sequencer() {
+    return this.opts.sequencer;
+  }
   get authVerifier() {
     return authVerifier(this.idResolver, { aud: this.cfg.service.did });
   }
@@ -133965,7 +134306,10 @@ var envToCfg = (env) => {
   (0, import_node_assert.default)(env.dbPostgresUrl);
   const dbCfg = {
     postgresUrl: env.dbPostgresUrl,
-    postgresSchema: env.dbPostgresSchema
+    postgresSchema: env.dbPostgresSchema,
+    poolSize: env.dbPoolSize,
+    poolMaxUses: env.dbPoolMaxUses,
+    poolIdleTimeoutMs: env.dbPoolIdleTimeoutMs
   };
   (0, import_node_assert.default)(env.appviewUrl);
   (0, import_node_assert.default)(env.appviewDid);
@@ -134006,6 +134350,9 @@ var readEnv = () => {
     pdsDid: envStr("OZONE_PDS_DID"),
     dbPostgresUrl: envStr("OZONE_DB_POSTGRES_URL"),
     dbPostgresSchema: envStr("OZONE_DB_POSTGRES_SCHEMA"),
+    dbPoolSize: envInt("OZONE_DB_POOL_SIZE"),
+    dbPoolMaxUses: envInt("OZONE_DB_POOL_MAX_USES"),
+    dbPoolIdleTimeoutMs: envInt("OZONE_DB_POOL_IDLE_TIMEOUT_MS"),
     didPlcUrl: envStr("OZONE_DID_PLC_URL"),
     adminPassword: envStr("OZONE_ADMIN_PASSWORD"),
     moderatorPassword: envStr("OZONE_MODERATOR_PASSWORD"),
@@ -134070,11 +134417,12 @@ var OzoneService = class {
         waitingCount: backgroundQueue.queue.size
       }, "background queue stats");
     }, 1e4);
+    await this.ctx.sequencer.start();
     const server = this.app.listen(this.ctx.cfg.service.port);
     this.server = server;
     server.keepAliveTimeout = 9e4;
     this.terminator = (0, import_http_terminator.createHttpTerminator)({ server });
-    await import_events.default.once(server, "listening");
+    await import_events2.default.once(server, "listening");
     const { port } = server.address();
     this.ctx.assignPort(port);
     return server;
@@ -134082,6 +134430,7 @@ var OzoneService = class {
   async destroy() {
     await this.terminator?.terminate();
     await this.ctx.backgroundQueue.destroy();
+    await this.ctx.sequencer.destroy();
     await this.ctx.db.close();
     clearInterval(this.dbStatsInterval);
   }