@atproto/ozone 0.1.126 → 0.1.127

package/dist/safelink/service.js

@@ -0,0 +1,179 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SafelinkRuleService = void 0;
+const xrpc_server_1 = require("@atproto/xrpc-server");
+class SafelinkRuleService {
+    constructor(db) {
+        Object.defineProperty(this, "db", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: db
+        });
+    }
+    static creator() {
+        return (db) => new SafelinkRuleService(db);
+    }
+    formatEvent(event) {
+        return {
+            id: event.id,
+            eventType: event.eventType,
+            url: event.url,
+            pattern: event.pattern,
+            action: event.action,
+            reason: event.reason,
+            createdBy: event.createdBy,
+            createdAt: new Date(event.createdAt).toISOString(),
+            comment: event.comment || undefined,
+        };
+    }
+    async addRule({ url, pattern, action, reason, createdBy, comment, }) {
+        const existingRule = await this.getActiveRule(url, pattern);
+        if (existingRule) {
+            throw new xrpc_server_1.InvalidRequestError('A rule for this URL/domain already exists', 'RuleAlreadyExists');
+        }
+        const now = new Date().toISOString();
+        const rule = {
+            url,
+            pattern,
+            action,
+            reason,
+            createdBy,
+            comment: comment || null,
+            createdAt: now,
+        };
+        return await this.db.transaction(async (txn) => {
+            const event = await txn.db
+                .insertInto('safelink_event')
+                .values({
+                eventType: 'addRule',
+                ...rule,
+            })
+                .returningAll()
+                .executeTakeFirstOrThrow();
+            await txn.db
+                .insertInto('safelink_rule')
+                .values({ ...rule, updatedAt: now })
+                .execute();
+            return event;
+        });
+    }
+    async updateRule({ url, pattern, action, reason, createdBy, comment, }) {
+        const existingRule = await this.getActiveRule(url, pattern);
+        if (!existingRule) {
+            throw new xrpc_server_1.InvalidRequestError('No active rule found for this URL/domain', 'RuleNotFound');
+        }
+        const now = new Date().toISOString();
+        const rule = {
+            action,
+            reason,
+            createdBy,
+            comment: comment || null,
+        };
+        return await this.db.transaction(async (txn) => {
+            const event = await txn.db
+                .insertInto('safelink_event')
+                .values({
+                createdAt: now,
+                url: existingRule.url,
+                pattern: existingRule.pattern,
+                eventType: 'updateRule',
+                ...rule,
+            })
+                .returningAll()
+                .executeTakeFirstOrThrow();
+            await txn.db
+                .updateTable('safelink_rule')
+                .set(rule)
+                .where('url', '=', existingRule.url)
+                .where('pattern', '=', existingRule.pattern)
+                .execute();
+            return event;
+        });
+    }
+    async removeRule({ url, pattern, createdBy, comment, }) {
+        const existingRule = await this.getActiveRule(url, pattern);
+        if (!existingRule) {
+            throw new xrpc_server_1.InvalidRequestError('No active rule found for this URL/domain', 'RuleNotFound');
+        }
+        return await this.db.transaction(async (txn) => {
+            const event = await txn.db
+                .insertInto('safelink_event')
+                .values({
+                eventType: 'removeRule',
+                url,
+                pattern,
+                action: existingRule.action,
+                reason: existingRule.reason,
+                createdBy,
+                comment: comment || null,
+                createdAt: new Date().toISOString(),
+            })
+                .returningAll()
+                .executeTakeFirstOrThrow();
+            await txn.db
+                .deleteFrom('safelink_rule')
+                .where('url', '=', url)
+                .where('pattern', '=', pattern)
+                .execute();
+            return event;
+        });
+    }
+    async getActiveRule(url, pattern) {
+        const rule = await this.db.db
+            .selectFrom('safelink_rule')
+            .selectAll()
+            .where('url', '=', url)
+            .where('pattern', '=', pattern)
+            .executeTakeFirst();
+        if (!rule) {
+            return null;
+        }
+        return rule;
+    }
+    async getActiveRules({ cursor, limit = 50, urls, patternType, actions, reason, createdBy, direction = 'desc', } = {}) {
+        let query = this.db.db.selectFrom('safelink_rule').selectAll();
+        if (urls && urls.length > 0) {
+            query = query.where('url', 'in', urls);
+        }
+        if (patternType) {
+            query = query.where('pattern', '=', patternType);
+        }
+        if (actions && actions.length > 0) {
+            query = query.where('action', 'in', actions);
+        }
+        if (reason) {
+            query = query.where('reason', '=', reason);
+        }
+        if (createdBy) {
+            query = query.where('createdBy', '=', createdBy);
+        }
+        if (cursor) {
+            query = query.where('id', direction === 'asc' ? '>' : '<', parseInt(cursor, 10));
+        }
+        const rules = await query.orderBy('id', direction).limit(limit).execute();
+        return {
+            rules,
+            cursor: rules.at(-1)?.id?.toString(),
+        };
+    }
+    async queryEvents({ cursor, limit = 50, urls, patternType, direction = 'desc', } = {}) {
+        let query = this.db.db.selectFrom('safelink_event').selectAll();
+        if (urls && urls.length > 0) {
+            query = query.where('url', 'in', urls);
+        }
+        if (patternType) {
+            query = query.where('pattern', '=', patternType);
+        }
+        if (cursor) {
+            query = query.where('id', direction === 'asc' ? '>' : '<', parseInt(cursor, 10));
+        }
+        const events = await query.orderBy('id', direction).limit(limit).execute();
+        return {
+            events,
+            cursor: events.at(-1)?.id?.toString(),
+        };
+    }
+}
+exports.SafelinkRuleService = SafelinkRuleService;
+//# sourceMappingURL=service.js.map

package/dist/safelink/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/safelink/service.ts"],"names":[],"mappings":";;;AAEA,sDAA0D;AAW1D,MAAa,mBAAmB;IAC9B,YAAmB,EAAY;QAAnB;;;;mBAAO,EAAE;WAAU;IAAG,CAAC;IAEnC,MAAM,CAAC,OAAO;QACZ,OAAO,CAAC,EAAY,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,WAAW,CAAC,KAAgC;QAC1C,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAClD,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS;SACpC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EACZ,GAAG,EACH,OAAO,EACP,MAAM,EACN,MAAM,EACN,SAAS,EACT,OAAO,GAQR;QACC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC3D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,iCAAmB,CAC3B,2CAA2C,EAC3C,mBAAmB,CACpB,CAAA;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,IAAI,GAAG;YACX,GAAG;YACH,OAAO;YACP,MAAM;YACN,MAAM;YACN,SAAS;YACT,OAAO,EAAE,OAAO,IAAI,IAAI;YACxB,SAAS,EAAE,GAAG;SACf,CAAA;QAED,OAAO,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE;iBACvB,UAAU,CAAC,gBAAgB,CAAC;iBAC5B,MAAM,CAAC;gBACN,SAAS,EAAE,SAAS;gBACpB,GAAG,IAAI;aACR,CAAC;iBACD,YAAY,EAAE;iBACd,uBAAuB,EAAE,CAAA;YAE5B,MAAM,GAAG,CAAC,EAAE;iBACT,UAAU,CAAC,eAAe,CAAC;iBAC3B,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;iBACnC,OAAO,EAAE,CAAA;YAEZ,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EACf,GAAG,EACH,OAAO,EACP,MAAM,EACN,MAAM,EACN,SAAS,EACT,OAAO,GAQR;QACC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,iCAAmB,CAC3B,0CAA0C,EAC1C,cAAc,CACf,CAAA;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,IAAI,GAAG;YACX,MAAM;YACN,MAAM;YACN,SAAS;YACT,OAAO,EAAE,OAAO,IAAI,IAAI;SACzB,CAAA;QAED,OAAO,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE;iBACvB,UAAU,CAAC,gBAAgB,CAAC;iBAC5B,MAAM,CAAC;gBACN,SAAS,EAAE,GAAG;gBACd,GAAG,EAAE,YAAY,CAAC,GAAG;gBACrB,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,SAAS,EAAE,YAAY;gBACvB,GAAG,IAAI;aACR,CAAC;iBACD,YAAY,EAAE;iBACd,uBAAuB,EAAE,CAAA;YAE5B,MAAM,GAAG,CAAC,EAAE;iBACT,WAAW,CAAC,eAAe,CAAC;iBAC5B,GAAG,CAAC,IAAI,CAAC;iBACT,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC;iBACnC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC;iBAC3C,OAAO,EAAE,CAAA;YAEZ,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EACf,GAAG,EACH,OAAO,EACP,SAAS,EACT,OAAO,GAMR;QACC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,iCAAmB,CAC3B,0CAA0C,EAC1C,cAAc,CACf,CAAA;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE;iBACvB,UAAU,CAAC,gBAAgB,CAAC;iBAC5B,MAAM,CAAC;gBACN,SAAS,EAAE,YAAY;gBACvB,GAAG;gBACH,OAAO;gBACP,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,SAAS;gBACT,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;iBACD,YAAY,EAAE;iBACd,uBAAuB,EAAE,CAAA;YAE5B,MAAM,GAAG,CAAC,EAAE;iBACT,UAAU,CAAC,eAAe,CAAC;iBAC3B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;iBACtB,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC;iBAC9B,OAAO,EAAE,CAAA;YAEZ,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,OAA4B;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,EAAE;aAC1B,UAAU,CAAC,eAAe,CAAC;aAC3B,SAAS,EAAE;aACX,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;aACtB,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC;aAC9B,gBAAgB,EAAE,CAAA;QAErB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EACnB,MAAM,EACN,KAAK,GAAG,EAAE,EACV,IAAI,EACJ,WAAW,EACX,OAAO,EACP,MAAM,EACN,SAAS,EACT,SAAS,GAAG,MAAM,MAUhB,EAAE;QAIJ,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,CAAA;QAE9D,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACxC,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QAClD,CAAC;QAED,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAC9C,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;QAC5C,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;QAClD,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,GAAG,KAAK,CAAC,KAAK,CACjB,IAAI,EACJ,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAC/B,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CACrB,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAA;QAEzE,OAAO;YACL,KAAK;YACL,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE;SACrC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAChB,MAAM,EACN,KAAK,GAAG,EAAE,EACV,IAAI,EACJ,WAAW,EACX,SAAS,GAAG,MAAM,MAOhB,EAAE;QAIJ,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,CAAA;QAE/D,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACxC,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QAClD,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,GAAG,KAAK,CAAC,KAAK,CACjB,IAAI,EACJ,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAC/B,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CACrB,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAA;QAE1E,OAAO;YACL,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE;SACtC,CAAA;IACH,CAAC;CACF;AAlSD,kDAkSC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atproto/ozone",
-  "version": "0.1.126",
+  "version": "0.1.127",
   "license": "MIT",
   "description": "Backend service for moderating the Bluesky network.",
   "keywords": [
@@ -35,12 +35,12 @@
     "uint8arrays": "3.0.0",
     "undici": "^6.14.1",
     "ws": "^8.12.0",
-    "@atproto/api": "^0.15.21",
+    "@atproto/api": "^0.15.22",
     "@atproto/common": "^0.4.11",
     "@atproto/crypto": "^0.4.4",
+    "@atproto/identity": "^0.4.8",
     "@atproto/lexicon": "^0.4.11",
     "@atproto/syntax": "^0.4.0",
-    "@atproto/identity": "^0.4.8",
     "@atproto/xrpc": "^0.7.0",
     "@atproto/xrpc-server": "^0.8.0"
   },
@@ -55,7 +55,7 @@
     "ts-node": "^10.8.2",
     "typescript": "^5.6.3",
     "@atproto/lex-cli": "^0.8.3",
-    "@atproto/pds": "^0.4.156"
+    "@atproto/pds": "^0.4.157"
   },
   "scripts": {
     "codegen": "lex gen-server --yes ./src/lexicon ../../lexicons/com/atproto/*/* ../../lexicons/app/bsky/*/* ../../lexicons/chat/bsky/*/* ../../lexicons/tools/ozone/*/*",

package/src/api/index.ts

@@ -21,6 +21,11 @@ import queryStatuses from './moderation/queryStatuses'
 import searchRepos from './moderation/searchRepos'
 import proxied from './proxied'
 import createReport from './report/createReport'
+import addSafelinkRule from './safelink/addRule'
+import querySafelinkEvents from './safelink/queryEvents'
+import querySafelinkRules from './safelink/queryRules'
+import removeSafelinkRule from './safelink/removeRule'
+import updateSafelinkRule from './safelink/updateRule'
 import getConfig from './server/getConfig'
 import setAddValues from './set/addValues'
 import deleteSet from './set/deleteSet'
@@ -82,5 +87,10 @@ export default function (server: Server, ctx: AppContext) {
   grantVerifications(server, ctx)
   revokeVerifications(server, ctx)
   listVerifications(server, ctx)
+  addSafelinkRule(server, ctx)
+  updateSafelinkRule(server, ctx)
+  removeSafelinkRule(server, ctx)
+  querySafelinkEvents(server, ctx)
+  querySafelinkRules(server, ctx)
   return server
 }

package/src/api/safelink/addRule.ts

@@ -0,0 +1,48 @@
+import { AuthRequiredError } from '@atproto/xrpc-server'
+import { AppContext } from '../../context'
+import { Server } from '../../lexicon'
+import {
+  getSafelinkAction,
+  getSafelinkPattern,
+  getSafelinkReason,
+} from '../util'
+
+export default function (server: Server, ctx: AppContext) {
+  server.tools.ozone.safelink.addRule({
+    auth: ctx.authVerifier.modOrAdminToken,
+    handler: async ({ input, auth }) => {
+      const access = auth.credentials
+      const db = ctx.db
+      const { url, pattern, action, reason, comment, createdBy } = input.body
+
+      if (!access.isModerator) {
+        throw new AuthRequiredError('Must be a moderator to add URL rules')
+      }
+
+      if (access.type === 'admin_token' && !createdBy) {
+        throw new AuthRequiredError(
+          'Must specify createdBy when using admin auth',
+        )
+      }
+
+      const safelinkRuleService = ctx.safelinkRuleService(db)
+
+      const event = await safelinkRuleService.addRule({
+        url,
+        pattern: getSafelinkPattern(pattern),
+        action: getSafelinkAction(action),
+        reason: getSafelinkReason(reason),
+        createdBy:
+          access.type === 'admin_token'
+            ? createdBy || ctx.cfg.service.did
+            : access.iss,
+        comment,
+      })
+
+      return {
+        encoding: 'application/json',
+        body: safelinkRuleService.formatEvent(event),
+      }
+    },
+  })
+}

package/src/api/safelink/queryEvents.ts

@@ -0,0 +1,32 @@
+import { AppContext } from '../../context'
+import { Server } from '../../lexicon'
+import { getSafelinkPattern } from '../util'
+
+export default function (server: Server, ctx: AppContext) {
+  server.tools.ozone.safelink.queryEvents({
+    auth: ctx.authVerifier.modOrAdminToken,
+    handler: async ({ input }) => {
+      const db = ctx.db
+      const { cursor, limit, urls, patternType, sortDirection } = input.body
+
+      const safelinkRuleService = ctx.safelinkRuleService(db)
+      const result = await safelinkRuleService.queryEvents({
+        cursor,
+        limit,
+        urls,
+        patternType: patternType ? getSafelinkPattern(patternType) : undefined,
+        direction: sortDirection as 'asc' | 'desc' | undefined,
+      })
+
+      return {
+        encoding: 'application/json',
+        body: {
+          cursor: result.cursor,
+          events: result.events.map((event) =>
+            safelinkRuleService.formatEvent(event),
+          ),
+        },
+      }
+    },
+  })
+}

package/src/api/safelink/queryRules.ts

@@ -0,0 +1,58 @@
+import { AppContext } from '../../context'
+import { Server } from '../../lexicon'
+import {
+  getSafelinkAction,
+  getSafelinkPattern,
+  getSafelinkReason,
+} from '../util'
+
+export default function (server: Server, ctx: AppContext) {
+  server.tools.ozone.safelink.queryRules({
+    auth: ctx.authVerifier.modOrAdminToken,
+    handler: async ({ input }) => {
+      const db = ctx.db
+      const {
+        cursor,
+        limit,
+        urls,
+        patternType,
+        actions,
+        reason,
+        createdBy,
+        sortDirection,
+      } = input.body
+
+      const safelinkRuleService = ctx.safelinkRuleService(db)
+      const result = await safelinkRuleService.getActiveRules({
+        cursor,
+        limit,
+        urls,
+        patternType: patternType ? getSafelinkPattern(patternType) : undefined,
+        actions:
+          actions && actions.length > 0
+            ? actions.map(getSafelinkAction)
+            : undefined,
+        reason: reason ? getSafelinkReason(reason) : undefined,
+        createdBy,
+        direction: sortDirection as 'asc' | 'desc' | undefined,
+      })
+
+      return {
+        encoding: 'application/json',
+        body: {
+          cursor: result.cursor,
+          rules: result.rules.map((rule) => ({
+            url: rule.url,
+            pattern: rule.pattern,
+            action: rule.action,
+            reason: rule.reason,
+            createdBy: rule.createdBy,
+            createdAt: new Date(rule.createdAt).toISOString(),
+            updatedAt: new Date(rule.updatedAt).toISOString(),
+            comment: rule.comment || undefined,
+          })),
+        },
+      }
+    },
+  })
+}

package/src/api/safelink/removeRule.ts

@@ -0,0 +1,42 @@
+import { AuthRequiredError } from '@atproto/xrpc-server'
+import { AppContext } from '../../context'
+import { Server } from '../../lexicon'
+import { getSafelinkPattern } from '../util'
+
+export default function (server: Server, ctx: AppContext) {
+  server.tools.ozone.safelink.removeRule({
+    auth: ctx.authVerifier.modOrAdminToken,
+    handler: async ({ input, auth }) => {
+      const access = auth.credentials
+      const db = ctx.db
+      const { url, pattern, comment, createdBy } = input.body
+
+      if (!access.isModerator) {
+        throw new AuthRequiredError('Must be a moderator to remove URL rules')
+      }
+
+      if (access.type === 'admin_token' && !createdBy) {
+        throw new AuthRequiredError(
+          'Must specify createdBy when using admin auth',
+        )
+      }
+
+      const safelinkRuleService = ctx.safelinkRuleService(db)
+
+      const event = await safelinkRuleService.removeRule({
+        url,
+        pattern: getSafelinkPattern(pattern),
+        createdBy:
+          access.type === 'admin_token'
+            ? createdBy || ctx.cfg.service.did
+            : access.iss,
+        comment,
+      })
+
+      return {
+        encoding: 'application/json',
+        body: safelinkRuleService.formatEvent(event),
+      }
+    },
+  })
+}

package/src/api/safelink/updateRule.ts

@@ -0,0 +1,48 @@
+import { AuthRequiredError } from '@atproto/xrpc-server'
+import { AppContext } from '../../context'
+import { Server } from '../../lexicon'
+import {
+  getSafelinkAction,
+  getSafelinkPattern,
+  getSafelinkReason,
+} from '../util'
+
+export default function (server: Server, ctx: AppContext) {
+  server.tools.ozone.safelink.updateRule({
+    auth: ctx.authVerifier.modOrAdminToken,
+    handler: async ({ input, auth }) => {
+      const access = auth.credentials
+      const db = ctx.db
+      const { url, pattern, action, reason, comment, createdBy } = input.body
+
+      if (!access.isModerator) {
+        throw new AuthRequiredError('Must be a moderator to update URL rules')
+      }
+
+      if (access.type === 'admin_token' && !createdBy) {
+        throw new AuthRequiredError(
+          'Must specify createdBy when using admin auth',
+        )
+      }
+
+      const safelinkRuleService = ctx.safelinkRuleService(db)
+
+      const event = await safelinkRuleService.updateRule({
+        url,
+        pattern: getSafelinkPattern(pattern),
+        action: getSafelinkAction(action),
+        reason: getSafelinkReason(reason),
+        createdBy:
+          access.type === 'admin_token'
+            ? createdBy || ctx.cfg.service.did
+            : access.iss,
+        comment,
+      })
+
+      return {
+        encoding: 'application/json',
+        body: safelinkRuleService.formatEvent(event),
+      }
+    },
+  })
+}

package/src/api/util.ts

@@ -191,3 +191,41 @@ const memberRoles = new Set([
   ROLETRIAGE,
   ROLEVERIFIER,
 ])
+
+export const getSafelinkPattern = (pattern: string): SafelinkPatternType => {
+  if (safelinkPatterns.has(pattern)) {
+    return pattern as SafelinkPatternType
+  }
+  throw new InvalidRequestError('Invalid safelink pattern type')
+}
+
+export const getSafelinkAction = (action: string): SafelinkActionType => {
+  if (safelinkActions.has(action)) {
+    return action as SafelinkActionType
+  }
+  throw new InvalidRequestError('Invalid safelink action type')
+}
+
+export const getSafelinkReason = (reason: string): SafelinkReasonType => {
+  if (safelinkReasons.has(reason)) {
+    return reason as SafelinkReasonType
+  }
+  throw new InvalidRequestError('Invalid safelink reason type')
+}
+
+export const getSafelinkEventType = (eventType: string): SafelinkEventType => {
+  if (safelinkEventTypes.has(eventType)) {
+    return eventType as SafelinkEventType
+  }
+  throw new InvalidRequestError('Invalid safelink event type')
+}
+
+export type SafelinkEventType = 'addRule' | 'updateRule' | 'removeRule'
+export type SafelinkPatternType = 'domain' | 'url'
+export type SafelinkActionType = 'block' | 'warn' | 'whitelist'
+export type SafelinkReasonType = 'csam' | 'spam' | 'phishing' | 'none'
+
+const safelinkPatterns = new Set(['domain', 'url'])
+const safelinkActions = new Set(['block', 'warn', 'whitelist'])
+const safelinkReasons = new Set(['csam', 'spam', 'phishing', 'none'])
+const safelinkEventTypes = new Set(['addRule', 'updateRule', 'removeRule'])

package/src/context.ts

@@ -17,6 +17,10 @@ import { BlobDiverter } from './daemon/blob-diverter'
 import { Database } from './db'
 import { ImageInvalidator } from './image-invalidator'
 import { ModerationService, ModerationServiceCreator } from './mod-service'
+import {
+  SafelinkRuleService,
+  SafelinkRuleServiceCreator,
+} from './safelink/service'
 import { Sequencer } from './sequencer/sequencer'
 import { SetService, SetServiceCreator } from './set/service'
 import { SettingService, SettingServiceCreator } from './setting/service'
@@ -42,6 +46,7 @@ export type AppContextOptions = {
   cfg: OzoneConfig
   modService: ModerationServiceCreator
   communicationTemplateService: CommunicationTemplateServiceCreator
+  safelinkRuleService: SafelinkRuleServiceCreator
   setService: SetServiceCreator
   settingService: SettingServiceCreator
   teamService: TeamServiceCreator
@@ -130,6 +135,7 @@ export class AppContext {
     )
 
     const communicationTemplateService = CommunicationTemplateService.creator()
+    const safelinkRuleService = SafelinkRuleService.creator()
     const teamService = TeamService.creator(
       appviewAgent,
       cfg.appview.did,
@@ -154,6 +160,7 @@ export class AppContext {
         cfg,
         modService,
         communicationTemplateService,
+        safelinkRuleService,
         teamService,
         setService,
         settingService,
@@ -204,6 +211,10 @@ export class AppContext {
     return this.opts.communicationTemplateService
   }
 
+  get safelinkRuleService(): SafelinkRuleServiceCreator {
+    return this.opts.safelinkRuleService
+  }
+
   get teamService(): TeamServiceCreator {
     return this.opts.teamService
   }

package/src/db/migrations/20250609T110704000Z-safelink.ts

@@ -0,0 +1,53 @@
+import { Kysely } from 'kysely'
+
+export async function up(db: Kysely<unknown>): Promise<void> {
+  await db.schema
+    .createTable('safelink_event')
+    .addColumn('id', 'bigserial', (col) => col.primaryKey())
+    .addColumn('eventType', 'varchar', (col) => col.notNull())
+    .addColumn('url', 'varchar', (col) => col.notNull())
+    .addColumn('pattern', 'varchar', (col) => col.notNull())
+    .addColumn('action', 'varchar', (col) => col.notNull())
+    .addColumn('reason', 'varchar', (col) => col.notNull())
+    .addColumn('createdBy', 'varchar', (col) => col.notNull())
+    .addColumn('createdAt', 'varchar', (col) => col.notNull())
+    .addColumn('comment', 'text')
+    .execute()
+
+  await db.schema
+    .createTable('safelink_rule')
+    .addColumn('id', 'bigserial', (col) => col.primaryKey())
+    .addColumn('url', 'varchar', (col) => col.notNull())
+    .addColumn('pattern', 'varchar', (col) => col.notNull())
+    .addColumn('action', 'varchar', (col) => col.notNull())
+    .addColumn('reason', 'varchar', (col) => col.notNull())
+    .addColumn('createdBy', 'varchar', (col) => col.notNull())
+    .addColumn('createdAt', 'varchar', (col) => col.notNull())
+    .addColumn('updatedAt', 'varchar', (col) => col.notNull())
+    .addColumn('comment', 'text')
+    .addUniqueConstraint('safelink_rule_url_pattern_key', ['url', 'pattern'])
+    .execute()
+
+  await db.schema
+    .createIndex('safelink_event_url_pattern_idx')
+    .on('safelink_event')
+    .columns(['url', 'pattern'])
+    .execute()
+
+  await db.schema
+    .createIndex('safelink_rule_action_idx')
+    .on('safelink_rule')
+    .column('action')
+    .execute()
+
+  await db.schema
+    .createIndex('safelink_rule_reason_idx')
+    .on('safelink_rule')
+    .column('reason')
+    .execute()
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+  await db.schema.dropTable('safelink_rule').execute()
+  await db.schema.dropTable('safelink_event').execute()
+}

package/src/db/migrations/index.ts

@@ -25,3 +25,4 @@ export * as _20250221T132135150Z from './20250221T132135150Z-member-details'
 export * as _20250404T201720309Z from './20250404T201720309Z-subject-status-sort-idxs'
 export * as _20250415T201720309Z from './20250415T201720309Z-verification'
 export * as _20250417T201720309Z from './20250417T201720309Z-firehose-cursor'
+export * as _20250609T110704000Z from './20250609T110704000Z-safelink'

package/src/db/schema/index.ts

@@ -13,6 +13,7 @@ import * as set from './ozone_set'
 import * as recordEventsStats from './record_events_stats'
 import * as recordPushEvent from './record_push_event'
 import * as repoPushEvent from './repo_push_event'
+import * as safelink from './safelink'
 import * as setting from './setting'
 import * as signingKey from './signing_key'
 import * as verification from './verification'
@@ -33,7 +34,8 @@ export type DatabaseSchemaType = modEvent.PartialDB &
   accountRecordEventsStats.PartialDB &
   accountRecordStatusStats.PartialDB &
   verification.PartialDB &
-  firehoseCursor.PartialDB
+  firehoseCursor.PartialDB &
+  safelink.PartialDB
 
 export type DatabaseSchema = Kysely<DatabaseSchemaType>