@atproto/ozone 0.1.106 → 0.1.108

package/dist/verification/issuer.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerificationIssuer = void 0;
+const api_1 = require("@atproto/api");
+class VerificationIssuer {
+    constructor(verifierConfig) {
+        Object.defineProperty(this, "verifierConfig", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: verifierConfig
+        });
+        Object.defineProperty(this, "session", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: new api_1.CredentialSession(new URL(this.verifierConfig.url))
+        });
+        Object.defineProperty(this, "agent", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: new api_1.Agent(this.session)
+        });
+    }
+    static creator() {
+        return (verifierConfig) => new VerificationIssuer(verifierConfig);
+    }
+    async getAgent() {
+        if (!this.session.hasSession) {
+            await this.session.login({
+                identifier: this.verifierConfig.did,
+                password: this.verifierConfig.password,
+            });
+        }
+        // Trigger a test request to check if the session is still valid, if not, we will login again
+        try {
+            await this.agent.com.atproto.server.getSession();
+        }
+        catch (err) {
+            if (err.status === 401) {
+                await this.session.login({
+                    identifier: this.verifierConfig.did,
+                    password: this.verifierConfig.password,
+                });
+            }
+        }
+        return this.agent;
+    }
+    async verify(verifications) {
+        const grantedVerifications = [];
+        const failedVerifications = [];
+        const now = new Date().toISOString();
+        const agent = await this.getAgent();
+        await Promise.allSettled(verifications.map(async ({ displayName, handle, subject, createdAt }) => {
+            try {
+                const verificationRecord = {
+                    createdAt: createdAt || now,
+                    issuer: this.verifierConfig.did,
+                    displayName,
+                    handle,
+                    subject,
+                };
+                const { data: { uri, cid }, } = await agent.com.atproto.repo.createRecord({
+                    repo: this.verifierConfig.did,
+                    record: verificationRecord,
+                    collection: 'app.bsky.graph.verification',
+                });
+                grantedVerifications.push({
+                    ...verificationRecord,
+                    uri,
+                    cid,
+                    revokedAt: null,
+                    updatedAt: now,
+                    revokedBy: null,
+                    revokeReason: null,
+                });
+            }
+            catch (err) {
+                failedVerifications.push({
+                    $type: 'tools.ozone.verification.grantVerifications#grantError',
+                    error: err.message,
+                    subject,
+                });
+                return;
+            }
+        }));
+        return { grantedVerifications, failedVerifications };
+    }
+    async revoke({ uris }) {
+        const revokedVerifications = [];
+        const failedRevocations = [];
+        const agent = await this.getAgent();
+        await Promise.allSettled(uris.map(async (uri) => {
+            try {
+                const atUri = new api_1.AtUri(uri);
+                if (atUri.collection !== 'app.bsky.graph.verification') {
+                    throw new Error(`Only verification records can be revoked`);
+                }
+                if (atUri.host !== this.verifierConfig.did) {
+                    throw new Error(`Cannot revoke verification record ${uri} not issued by ${this.verifierConfig.did}`);
+                }
+                await agent.com.atproto.repo.deleteRecord({
+                    collection: atUri.collection,
+                    repo: this.verifierConfig.did,
+                    rkey: atUri.rkey,
+                });
+                revokedVerifications.push(uri);
+            }
+            catch (err) {
+                failedRevocations.push({ uri, error: err.message });
+                return;
+            }
+        }));
+        return { revokedVerifications, failedRevocations };
+    }
+}
+exports.VerificationIssuer = VerificationIssuer;
+//# sourceMappingURL=issuer.js.map

package/dist/verification/issuer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issuer.js","sourceRoot":"","sources":["../../src/verification/issuer.ts"],"names":[],"mappings":";;;AACA,sCAA8D;AAe9D,MAAa,kBAAkB;IAG7B,YAAoB,cAA8B;QAAtC;;;;mBAAQ,cAAc;WAAgB;QAF1C;;;;mBAAU,IAAI,uBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;WAAA;QACjE;;;;mBAAQ,IAAI,WAAK,CAAC,IAAI,CAAC,OAAO,CAAC;WAAA;IACc,CAAC;IAEtD,MAAM,CAAC,OAAO;QACZ,OAAO,CAAC,cAA8B,EAAE,EAAE,CACxC,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBACvB,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;gBACnC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ;aACvC,CAAC,CAAA;QACJ,CAAC;QAED,6FAA6F;QAC7F,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAA;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAW,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;oBACvB,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;oBACnC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ;iBACvC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,aAAkC;QAC7C,MAAM,oBAAoB,GAA+B,EAAE,CAAA;QAC3D,MAAM,mBAAmB,GAInB,EAAE,CAAA;QACR,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;QACnC,MAAM,OAAO,CAAC,UAAU,CACtB,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,kBAAkB,GAAG;oBACzB,SAAS,EAAE,SAAS,IAAI,GAAG;oBAC3B,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;oBAC/B,WAAW;oBACX,MAAM;oBACN,OAAO;iBACR,CAAA;gBACD,MAAM,EACJ,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GACnB,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;oBAC5C,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;oBAC7B,MAAM,EAAE,kBAAkB;oBAC1B,UAAU,EAAE,6BAA6B;iBAC1C,CAAC,CAAA;gBACF,oBAAoB,CAAC,IAAI,CAAC;oBACxB,GAAG,kBAAkB;oBACrB,GAAG;oBACH,GAAG;oBACH,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,IAAI;oBACf,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mBAAmB,CAAC,IAAI,CAAC;oBACvB,KAAK,EAAE,wDAAwD;oBAC/D,KAAK,EAAG,GAAa,CAAC,OAAO;oBAC7B,OAAO;iBACR,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;QACH,CAAC,CAAC,CACH,CAAA;QAED,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAsB;QACvC,MAAM,oBAAoB,GAAa,EAAE,CAAA;QACzC,MAAM,iBAAiB,GAA0C,EAAE,CAAA;QAEnE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;QAEnC,MAAM,OAAO,CAAC,UAAU,CACtB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,WAAK,CAAC,GAAG,CAAC,CAAA;gBAE5B,IAAI,KAAK,CAAC,UAAU,KAAK,6BAA6B,EAAE,CAAC;oBACvD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBAC7D,CAAC;gBAED,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;oBAC3C,MAAM,IAAI,KAAK,CACb,qCAAqC,GAAG,kBAAkB,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CACpF,CAAA;gBACH,CAAC;gBAED,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;oBACxC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;oBAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB,CAAC,CAAA;gBACF,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iBAAiB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC9D,OAAM;YACR,CAAC;QACH,CAAC,CAAC,CACH,CAAA;QAED,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,CAAA;IACpD,CAAC;CACF;AAtHD,gDAsHC"}

package/dist/verification/service.d.ts

@@ -0,0 +1,47 @@
+import { Selectable } from 'kysely';
+import { $Typed, AppBskyActorDefs, ToolsOzoneModerationDefs, ToolsOzoneVerificationDefs } from '@atproto/api';
+import { Database } from '../db';
+import { Verification } from '../db/schema/verification';
+export type VerificationServiceCreator = (db: Database) => VerificationService;
+export declare class VerificationService {
+    db: Database;
+    constructor(db: Database);
+    static creator(): (db: Database) => VerificationService;
+    create(verifications: Pick<Verification, 'uri' | 'issuer' | 'subject' | 'handle' | 'displayName' | 'createdAt' | 'cid'>[]): Promise<Selectable<Verification>[]>;
+    markRevoked({ uris, revokedBy, revokedAt, revokeReason, }: {
+        uris: string[];
+        revokedBy?: string;
+        revokedAt?: string;
+        revokeReason?: string;
+    }): Promise<import("kysely").UpdateResult[] | undefined>;
+    list({ sortDirection, cursor, createdAfter, createdBefore, issuers, subjects, isRevoked, limit, }: {
+        sortDirection?: 'asc' | 'desc';
+        cursor?: string;
+        createdAfter?: string;
+        createdBefore?: string;
+        issuers?: string[];
+        subjects?: string[];
+        isRevoked?: boolean;
+        limit?: number;
+    }): Promise<{
+        verifications: {
+            createdAt: string;
+            updatedAt: string;
+            uri: string;
+            cid: string;
+            subject: string;
+            handle: string;
+            displayName: string;
+            issuer: string;
+            revokeReason: string | null;
+            revokedAt: string | null;
+            revokedBy: string | null;
+        }[];
+        cursor: string | undefined;
+    }>;
+    view(verifications: Selectable<Verification>[], repos: Map<string, $Typed<ToolsOzoneModerationDefs.RepoViewDetail> | $Typed<ToolsOzoneModerationDefs.RepoViewNotFound>>, profiles: Map<string, AppBskyActorDefs.ProfileViewDetailed>): $Typed<ToolsOzoneVerificationDefs.VerificationView>[];
+    getFirehoseCursor(): Promise<number | null>;
+    createFirehoseCursor(): Promise<import("kysely").InsertResult[]>;
+    updateFirehoseCursor(cursor: number): Promise<number | null | undefined>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/verification/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/verification/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,EACL,MAAM,EACN,gBAAgB,EAEhB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAExD,MAAM,MAAM,0BAA0B,GAAG,CAAC,EAAE,EAAE,QAAQ,KAAK,mBAAmB,CAAA;AAE9E,qBAAa,mBAAmB;IACX,EAAE,EAAE,QAAQ;gBAAZ,EAAE,EAAE,QAAQ;IAE/B,MAAM,CAAC,OAAO,KACJ,IAAI,QAAQ;IAGhB,MAAM,CACV,aAAa,EAAE,IAAI,CACjB,YAAY,EACV,KAAK,GACL,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,aAAa,GACb,WAAW,GACX,KAAK,CACR,EAAE;IAYC,WAAW,CAAC,EAChB,IAAI,EACJ,SAAS,EACT,SAAS,EACT,YAAY,GACb,EAAE;QACD,IAAI,EAAE,MAAM,EAAE,CAAA;QACd,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB;IAoBK,IAAI,CAAC,EACT,aAAa,EACb,MAAM,EACN,YAAY,EACZ,aAAa,EACb,OAAY,EACZ,QAAa,EACb,SAAS,EACT,KAAW,GACZ,EAAE;QACD,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;QAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;QAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;QACnB,SAAS,CAAC,EAAE,OAAO,CAAA;QACnB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf;;;;;;;;;;;;;;;;IAsCD,IAAI,CACF,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,EACzC,KAAK,EAAE,GAAG,CACR,MAAM,EACJ,MAAM,CAAC,wBAAwB,CAAC,cAAc,CAAC,GAC/C,MAAM,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CACpD,EACD,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAC1D,MAAM,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,EAAE;IAoClD,iBAAiB;IAUvB,oBAAoB;IAWd,oBAAoB,CAAC,MAAM,EAAE,MAAM;CAa1C"}

package/dist/verification/service.js

@@ -0,0 +1,141 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerificationService = void 0;
+const api_1 = require("@atproto/api");
+const pagination_1 = require("../db/pagination");
+class VerificationService {
+    constructor(db) {
+        Object.defineProperty(this, "db", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: db
+        });
+    }
+    static creator() {
+        return (db) => new VerificationService(db);
+    }
+    async create(verifications) {
+        return this.db.transaction(async (tx) => {
+            return tx.db
+                .insertInto('verification')
+                .values(verifications)
+                .onConflict((oc) => oc.doNothing())
+                .returningAll()
+                .execute();
+        });
+    }
+    async markRevoked({ uris, revokedBy, revokedAt, revokeReason, }) {
+        const now = new Date().toISOString();
+        return this.db.transaction(async (tx) => {
+            for (const uri of uris) {
+                return tx.db
+                    .updateTable('verification')
+                    .set({
+                    revokeReason,
+                    updatedAt: now,
+                    revokedAt: revokedAt || now,
+                    // Allow setting revokedBy to a moderator/verifier DID and if it isn't set, default to the author of the verification record
+                    revokedBy: revokedBy || new api_1.AtUri(uri).host,
+                })
+                    .where('uri', '=', uri)
+                    .where('revokedAt', 'is', null)
+                    .execute();
+            }
+        });
+    }
+    async list({ sortDirection, cursor, createdAfter, createdBefore, issuers = [], subjects = [], isRevoked, limit = 100, }) {
+        const { ref } = this.db.db.dynamic;
+        let qb = this.db.db.selectFrom('verification').selectAll();
+        if (issuers.length) {
+            qb = qb.where('issuer', 'in', issuers);
+        }
+        if (isRevoked !== undefined) {
+            qb = qb.where('revokedAt', isRevoked ? 'is not' : 'is', null);
+        }
+        if (subjects.length) {
+            qb = qb.where('subject', 'in', subjects);
+        }
+        if (createdAfter) {
+            qb = qb.where('createdAt', '>=', createdAfter);
+        }
+        if (createdBefore) {
+            qb = qb.where('createdAt', '<=', createdBefore);
+        }
+        const keyset = new pagination_1.CreatedAtUriKeyset(ref(`createdAt`), ref('uri'));
+        const paginatedBuilder = (0, pagination_1.paginate)(qb, {
+            limit,
+            cursor,
+            keyset,
+            tryIndex: true,
+            direction: sortDirection === 'desc' ? 'desc' : 'asc',
+        });
+        const result = await paginatedBuilder.execute();
+        return { verifications: result, cursor: keyset.packFromResult(result) };
+    }
+    view(verifications, repos, profiles) {
+        return verifications.map((verification) => {
+            const issuerRepo = repos.get(verification.issuer);
+            const subjectRepo = repos.get(verification.subject);
+            const subjectProfile = profiles.get(verification.subject);
+            const issuerProfile = profiles.get(verification.issuer);
+            return {
+                $type: 'tools.ozone.verification.defs#verificationView',
+                uri: verification.uri,
+                issuer: verification.issuer,
+                subject: verification.subject,
+                createdAt: verification.createdAt,
+                displayName: verification.displayName,
+                handle: verification.handle,
+                updatedAt: verification.updatedAt || undefined,
+                revokedAt: verification.revokedAt || undefined,
+                revokedBy: verification.revokedBy || undefined,
+                revokeReason: verification.revokeReason || undefined,
+                issuerRepo,
+                subjectRepo,
+                subjectProfile: subjectProfile
+                    ? {
+                        $type: 'app.bsky.actor.defs#profileViewDetailed',
+                        ...subjectProfile,
+                    }
+                    : undefined,
+                issuerProfile: issuerProfile
+                    ? {
+                        $type: 'app.bsky.actor.defs#profileViewDetailed',
+                        ...issuerProfile,
+                    }
+                    : undefined,
+            };
+        });
+    }
+    async getFirehoseCursor() {
+        const entry = await this.db.db
+            .selectFrom('firehose_cursor')
+            .select('cursor')
+            .where('service', '=', 'verification')
+            .executeTakeFirst();
+        return entry?.cursor || null;
+    }
+    createFirehoseCursor() {
+        return this.db.db
+            .insertInto('firehose_cursor')
+            .values({
+            service: 'verification',
+            cursor: null,
+        })
+            .onConflict((oc) => oc.doNothing())
+            .execute();
+    }
+    async updateFirehoseCursor(cursor) {
+        const updated = await this.db.db
+            .updateTable('firehose_cursor')
+            .set({ cursor })
+            .where('service', '=', 'verification')
+            .where((qb) => qb.where('cursor', '<', cursor).orWhere('cursor', 'is', null))
+            .returningAll()
+            .executeTakeFirst();
+        return updated?.cursor;
+    }
+}
+exports.VerificationService = VerificationService;
+//# sourceMappingURL=service.js.map

package/dist/verification/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/verification/service.ts"],"names":[],"mappings":";;;AACA,sCAMqB;AAErB,iDAA+D;AAK/D,MAAa,mBAAmB;IAC9B,YAAmB,EAAY;QAAnB;;;;mBAAO,EAAE;WAAU;IAAG,CAAC;IAEnC,MAAM,CAAC,OAAO;QACZ,OAAO,CAAC,EAAY,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,aASG;QAEH,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACtC,OAAO,EAAE,CAAC,EAAE;iBACT,UAAU,CAAC,cAAc,CAAC;iBAC1B,MAAM,CAAC,aAAa,CAAC;iBACrB,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;iBAClC,YAAY,EAAE;iBACd,OAAO,EAAE,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAChB,IAAI,EACJ,SAAS,EACT,SAAS,EACT,YAAY,GAMb;QACC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACtC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,OAAO,EAAE,CAAC,EAAE;qBACT,WAAW,CAAC,cAAc,CAAC;qBAC3B,GAAG,CAAC;oBACH,YAAY;oBACZ,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,SAAS,IAAI,GAAG;oBAC3B,4HAA4H;oBAC5H,SAAS,EAAE,SAAS,IAAI,IAAI,WAAK,CAAC,GAAG,CAAC,CAAC,IAAI;iBAC5C,CAAC;qBACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;qBACtB,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;qBAC9B,OAAO,EAAE,CAAA;YACd,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EACT,aAAa,EACb,MAAM,EACN,YAAY,EACZ,aAAa,EACb,OAAO,GAAG,EAAE,EACZ,QAAQ,GAAG,EAAE,EACb,SAAS,EACT,KAAK,GAAG,GAAG,GAUZ;QACC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAA;QAElC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,SAAS,EAAE,CAAA;QAE1D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QACxC,CAAC;QAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC/D,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC1C,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,YAAY,CAAC,CAAA;QAChD,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;QACjD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,+BAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;QACnE,MAAM,gBAAgB,GAAG,IAAA,qBAAQ,EAAC,EAAE,EAAE;YACpC,KAAK;YACL,MAAM;YACN,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;SACrD,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,CAAA;QAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAA;IACzE,CAAC;IAED,IAAI,CACF,aAAyC,EACzC,KAIC,EACD,QAA2D;QAE3D,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YACxC,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YACjD,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;YACnD,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;YACzD,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YACvD,OAAO;gBACL,KAAK,EAAE,gDAAgD;gBACvD,GAAG,EAAE,YAAY,CAAC,GAAG;gBACrB,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,WAAW,EAAE,YAAY,CAAC,WAAW;gBACrC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,SAAS;gBAC9C,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,SAAS;gBAC9C,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,SAAS;gBAC9C,YAAY,EAAE,YAAY,CAAC,YAAY,IAAI,SAAS;gBACpD,UAAU;gBACV,WAAW;gBACX,cAAc,EAAE,cAAc;oBAC5B,CAAC,CAAC;wBACE,KAAK,EAAE,yCAAyC;wBAChD,GAAG,cAAc;qBAClB;oBACH,CAAC,CAAC,SAAS;gBACb,aAAa,EAAE,aAAa;oBAC1B,CAAC,CAAC;wBACE,KAAK,EAAE,yCAAyC;wBAChD,GAAG,aAAa;qBACjB;oBACH,CAAC,CAAC,SAAS;aACd,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,EAAE;aAC3B,UAAU,CAAC,iBAAiB,CAAC;aAC7B,MAAM,CAAC,QAAQ,CAAC;aAChB,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,cAAc,CAAC;aACrC,gBAAgB,EAAE,CAAA;QAErB,OAAO,KAAK,EAAE,MAAM,IAAI,IAAI,CAAA;IAC9B,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE;aACd,UAAU,CAAC,iBAAiB,CAAC;aAC7B,MAAM,CAAC;YACN,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,IAAI;SACb,CAAC;aACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;aAClC,OAAO,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,EAAE;aAC7B,WAAW,CAAC,iBAAiB,CAAC;aAC9B,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;aACf,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,cAAc,CAAC;aACrC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CACZ,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAC9D;aACA,YAAY,EAAE;aACd,gBAAgB,EAAE,CAAA;QAErB,OAAO,OAAO,EAAE,MAAM,CAAA;IACxB,CAAC;CACF;AAjMD,kDAiMC"}

package/dist/verification/util.d.ts

@@ -0,0 +1,6 @@
+import { $Typed, ToolsOzoneModerationDefs } from '@atproto/api';
+import { AppContext } from '../context';
+import { ModerationService } from '../mod-service';
+import { ParsedLabelers } from '../util';
+export declare const getReposForVerifications: (ctx: AppContext, labelers: ParsedLabelers, modService: ModerationService, dids: string[], isModerator: boolean) => Promise<Map<string, $Typed<ToolsOzoneModerationDefs.RepoViewDetail> | $Typed<ToolsOzoneModerationDefs.RepoViewNotFound>>>;
+//# sourceMappingURL=util.d.ts.map

package/dist/verification/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../src/verification/util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAExC,eAAO,MAAM,wBAAwB,GACnC,KAAK,UAAU,EACf,UAAU,cAAc,EACxB,YAAY,iBAAiB,EAC7B,MAAM,MAAM,EAAE,EACd,aAAa,OAAO,8HAsCrB,CAAA"}

package/dist/verification/util.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getReposForVerifications = void 0;
+const util_1 = require("../api/util");
+const getReposForVerifications = async (ctx, labelers, modService, dids, isModerator) => {
+    const [partialRepos, accountInfo] = await Promise.all([
+        modService.views.repoDetails(dids, labelers),
+        (0, util_1.getPdsAccountInfos)(ctx, dids),
+    ]);
+    const repos = new Map(dids.map((did) => {
+        const partialRepo = partialRepos.get(did);
+        if (!partialRepo) {
+            return [
+                did,
+                {
+                    did,
+                    $type: 'tools.ozone.moderation.defs#repoViewNotFound',
+                },
+            ];
+        }
+        return [
+            did,
+            {
+                ...(0, util_1.addAccountInfoToRepoViewDetail)(partialRepo, accountInfo.get(did) || null, isModerator),
+                $type: 'tools.ozone.moderation.defs#repoViewDetail',
+            },
+        ];
+    }));
+    return repos;
+};
+exports.getReposForVerifications = getReposForVerifications;
+//# sourceMappingURL=util.js.map

package/dist/verification/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../src/verification/util.ts"],"names":[],"mappings":";;;AACA,sCAAgF;AAKzE,MAAM,wBAAwB,GAAG,KAAK,EAC3C,GAAe,EACf,QAAwB,EACxB,UAA6B,EAC7B,IAAc,EACd,WAAoB,EACpB,EAAE;IACF,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpD,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC5C,IAAA,yBAAkB,EAAC,GAAG,EAAE,IAAI,CAAC;KAC9B,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,IAAI,GAAG,CAKnB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACf,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACzC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;gBACL,GAAG;gBACH;oBACE,GAAG;oBACH,KAAK,EAAE,8CAA8C;iBACtD;aACF,CAAA;QACH,CAAC;QACD,OAAO;YACL,GAAG;YACH;gBACE,GAAG,IAAA,qCAA8B,EAC/B,WAAW,EACX,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAC5B,WAAW,CACZ;gBACD,KAAK,EAAE,4CAA4C;aACpD;SACF,CAAA;IACH,CAAC,CAAC,CACH,CAAA;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AA3CY,QAAA,wBAAwB,4BA2CpC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atproto/ozone",
-  "version": "0.1.106",
+  "version": "0.1.108",
   "license": "MIT",
   "description": "Backend service for moderating the Bluesky network.",
   "keywords": [
@@ -34,14 +34,15 @@
     "typed-emitter": "^2.1.0",
     "uint8arrays": "3.0.0",
     "undici": "^6.14.1",
-    "@atproto/api": "^0.15.3",
+    "ws": "^8.12.0",
+    "@atproto/api": "^0.15.5",
     "@atproto/common": "^0.4.10",
     "@atproto/crypto": "^0.4.4",
     "@atproto/identity": "^0.4.7",
     "@atproto/lexicon": "^0.4.10",
     "@atproto/syntax": "^0.4.0",
     "@atproto/xrpc": "^0.6.12",
-    "@atproto/xrpc-server": "^0.7.15"
+    "@atproto/xrpc-server": "^0.7.17"
   },
   "devDependencies": {
     "@did-plc/server": "^0.0.1",
@@ -54,7 +55,7 @@
     "ts-node": "^10.8.2",
     "typescript": "^5.6.3",
     "@atproto/lex-cli": "^0.8.0",
-    "@atproto/pds": "^0.4.131"
+    "@atproto/pds": "^0.4.134"
   },
   "scripts": {
     "codegen": "lex gen-server --yes ./src/lexicon ../../lexicons/com/atproto/*/* ../../lexicons/app/bsky/*/* ../../lexicons/chat/bsky/*/* ../../lexicons/tools/ozone/*/*",

package/src/api/index.ts

@@ -35,6 +35,9 @@ import addMember from './team/addMember'
 import deleteMember from './team/deleteMember'
 import listMembers from './team/listMembers'
 import updateMember from './team/updateMember'
+import grantVerifications from './verification/grantVerifications'
+import listVerifications from './verification/listVerifications'
+import revokeVerifications from './verification/revokeVerifications'
 
 export * as health from './health'
 
@@ -76,5 +79,8 @@ export default function (server: Server, ctx: AppContext) {
   removeOptions(server, ctx)
   getReporterStats(server, ctx)
   getSubjects(server, ctx)
+  grantVerifications(server, ctx)
+  revokeVerifications(server, ctx)
+  listVerifications(server, ctx)
   return server
 }

package/src/api/proxied.ts

@@ -6,7 +6,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.actor.getProfile({
     auth: ctx.authVerifier.moderator,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.actor.getProfile(
+      const res = await ctx.appviewAgent.app.bsky.actor.getProfile(
         request.params,
         await ctx.appviewAuth(ids.AppBskyActorGetProfile),
       )
@@ -20,7 +20,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.actor.getProfiles({
     auth: ctx.authVerifier.modOrAdminToken,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.actor.getProfiles(
+      const res = await ctx.appviewAgent.app.bsky.actor.getProfiles(
         request.params,
         await ctx.appviewAuth(ids.AppBskyActorGetProfiles),
       )
@@ -34,7 +34,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.feed.getAuthorFeed({
     auth: ctx.authVerifier.modOrAdminToken,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.feed.getAuthorFeed(
+      const res = await ctx.appviewAgent.app.bsky.feed.getAuthorFeed(
         request.params,
         await ctx.appviewAuth(ids.AppBskyFeedGetAuthorFeed),
       )
@@ -48,7 +48,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.feed.searchPosts({
     auth: ctx.authVerifier.moderator,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.feed.searchPosts(
+      const res = await ctx.appviewAgent.app.bsky.feed.searchPosts(
         request.params,
         await ctx.appviewAuth(ids.AppBskyFeedSearchPosts),
       )
@@ -62,7 +62,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.feed.getPostThread({
     auth: ctx.authVerifier.modOrAdminToken,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.feed.getPostThread(
+      const res = await ctx.appviewAgent.app.bsky.feed.getPostThread(
         request.params,
         await ctx.appviewAuth(ids.AppBskyFeedGetPostThread),
       )
@@ -76,7 +76,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.feed.getFeedGenerator({
     auth: ctx.authVerifier.moderator,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.feed.getFeedGenerator(
+      const res = await ctx.appviewAgent.app.bsky.feed.getFeedGenerator(
         request.params,
         await ctx.appviewAuth(ids.AppBskyFeedGetFeedGenerator),
       )
@@ -90,7 +90,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.graph.getFollows({
     auth: ctx.authVerifier.modOrAdminToken,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.graph.getFollows(
+      const res = await ctx.appviewAgent.app.bsky.graph.getFollows(
         request.params,
         await ctx.appviewAuth(ids.AppBskyGraphGetFollows),
       )
@@ -104,7 +104,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.graph.getFollowers({
     auth: ctx.authVerifier.modOrAdminToken,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.graph.getFollowers(
+      const res = await ctx.appviewAgent.app.bsky.graph.getFollowers(
         request.params,
         await ctx.appviewAuth(ids.AppBskyGraphGetFollowers),
       )
@@ -118,7 +118,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.graph.getList({
     auth: ctx.authVerifier.modOrAdminToken,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.graph.getList(
+      const res = await ctx.appviewAgent.app.bsky.graph.getList(
         request.params,
         await ctx.appviewAuth(ids.AppBskyGraphGetList),
       )
@@ -132,7 +132,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.graph.getLists({
     auth: ctx.authVerifier.modOrAdminToken,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.graph.getLists(
+      const res = await ctx.appviewAgent.app.bsky.graph.getLists(
         request.params,
         await ctx.appviewAuth(ids.AppBskyGraphGetLists),
       )
@@ -149,7 +149,7 @@ export default function (server: Server, ctx: AppContext) {
       if (!ctx.pdsAgent) {
         throw new Error('PDS not configured')
       }
-      const res = await ctx.pdsAgent.api.com.atproto.admin.searchAccounts(
+      const res = await ctx.pdsAgent.com.atproto.admin.searchAccounts(
         request.params,
         await ctx.pdsAuth(ids.ComAtprotoAdminSearchAccounts),
       )
@@ -160,6 +160,23 @@ export default function (server: Server, ctx: AppContext) {
     },
   })
 
+  server.tools.ozone.hosting.getAccountHistory({
+    auth: ctx.authVerifier.moderator,
+    handler: async (request) => {
+      if (!ctx.pdsAgent) {
+        throw new Error('PDS not configured')
+      }
+      const res = await ctx.pdsAgent.tools.ozone.hosting.getAccountHistory(
+        request.params,
+        await ctx.pdsAuth(ids.ToolsOzoneHostingGetAccountHistory),
+      )
+      return {
+        encoding: 'application/json',
+        body: res.data,
+      }
+    },
+  })
+
   server.tools.ozone.signature.findRelatedAccounts({
     auth: ctx.authVerifier.moderator,
     handler: async (request) => {
@@ -228,7 +245,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.graph.getStarterPacks({
     auth: ctx.authVerifier.modOrAdminToken,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.graph.getStarterPacks(
+      const res = await ctx.appviewAgent.app.bsky.graph.getStarterPacks(
         request.params,
         await ctx.appviewAuth(ids.AppBskyGraphGetStarterPacks),
       )
@@ -242,11 +259,10 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.graph.getActorStarterPacks({
     auth: ctx.authVerifier.modOrAdminToken,
     handler: async (request) => {
-      const res =
-        await ctx.appviewAgent.api.app.bsky.graph.getActorStarterPacks(
-          request.params,
-          await ctx.appviewAuth(ids.AppBskyGraphGetActorStarterPacks),
-        )
+      const res = await ctx.appviewAgent.app.bsky.graph.getActorStarterPacks(
+        request.params,
+        await ctx.appviewAuth(ids.AppBskyGraphGetActorStarterPacks),
+      )
       return {
         encoding: 'application/json',
         body: res.data,
@@ -257,7 +273,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.feed.getLikes({
     auth: ctx.authVerifier.modOrAdminToken,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.feed.getLikes(
+      const res = await ctx.appviewAgent.app.bsky.feed.getLikes(
         request.params,
         await ctx.appviewAuth(ids.AppBskyFeedGetLikes),
       )
@@ -271,7 +287,7 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.feed.getRepostedBy({
     auth: ctx.authVerifier.moderator,
     handler: async (request) => {
-      const res = await ctx.appviewAgent.api.app.bsky.feed.getRepostedBy(
+      const res = await ctx.appviewAgent.app.bsky.feed.getRepostedBy(
         request.params,
         await ctx.appviewAuth(ids.AppBskyFeedGetRepostedBy),
       )
@@ -285,11 +301,10 @@ export default function (server: Server, ctx: AppContext) {
   server.app.bsky.actor.searchActorsTypeahead({
     auth: ctx.authVerifier.moderator,
     handler: async (request) => {
-      const res =
-        await ctx.appviewAgent.api.app.bsky.actor.searchActorsTypeahead(
-          request.params,
-          await ctx.appviewAuth(ids.AppBskyActorSearchActorsTypeahead),
-        )
+      const res = await ctx.appviewAgent.app.bsky.actor.searchActorsTypeahead(
+        request.params,
+        await ctx.appviewAuth(ids.AppBskyActorSearchActorsTypeahead),
+      )
       return {
         encoding: 'application/json',
         body: res.data,

package/src/api/server/getConfig.ts

@@ -27,6 +27,7 @@ export default function (server: Server, ctx: AppContext) {
                 ? TOOLS_OZONE_TEAM.DefsRoleModerator
                 : TOOLS_OZONE_TEAM.DefsRoleTriage,
           },
+          verifierDid: ctx.cfg.verifier?.did || undefined,
         },
       }
     },

package/src/api/setting/removeOptions.ts

@@ -32,6 +32,7 @@ export default function (server: Server, ctx: AppContext) {
           'tools.ozone.team.defs#roleModerator',
           'tools.ozone.team.defs#roleTriage',
           'tools.ozone.team.defs#roleAdmin',
+          'tools.ozone.team.defs#roleVerifier',
         ]
 
         if (access.type !== 'admin_token' && !access.isAdmin) {

package/src/api/setting/upsertOption.ts

@@ -118,6 +118,7 @@ const getRolesForInstanceOption = (
     ToolsOzoneTeamDefs.ROLEADMIN,
     ToolsOzoneTeamDefs.ROLEMODERATOR,
     ToolsOzoneTeamDefs.ROLETRIAGE,
+    ToolsOzoneTeamDefs.ROLEVERIFIER,
   ]
   if (access.type === 'admin_token') {
     return fullPermission
@@ -131,6 +132,10 @@ const getRolesForInstanceOption = (
     return [ToolsOzoneTeamDefs.ROLEMODERATOR, ToolsOzoneTeamDefs.ROLETRIAGE]
   }
 
+  if (access.isVerifier) {
+    return [ToolsOzoneTeamDefs.ROLEVERIFIER]
+  }
+
   return [ToolsOzoneTeamDefs.ROLETRIAGE]
 }
 
@@ -143,6 +148,8 @@ const getManagerRole = (role?: string) => {
     managerRole = ToolsOzoneTeamDefs.ROLEMODERATOR
   } else if (role === ToolsOzoneTeamDefs.ROLETRIAGE) {
     managerRole = ToolsOzoneTeamDefs.ROLETRIAGE
+  } else if (role === ToolsOzoneTeamDefs.ROLEVERIFIER) {
+    managerRole = ToolsOzoneTeamDefs.ROLEVERIFIER
   }
 
   return managerRole