@atproto/ozone 0.1.126 → 0.1.128

package/dist/safelink/service.d.ts

@@ -0,0 +1,69 @@
+import { Selectable } from 'kysely';
+import { ToolsOzoneSafelinkDefs } from '@atproto/api';
+import { SafelinkActionType, SafelinkPatternType, SafelinkReasonType } from '../api/util';
+import { Database } from '../db';
+import { SafelinkEvent, SafelinkRule } from '../db/schema/safelink';
+export type SafelinkRuleServiceCreator = (db: Database) => SafelinkRuleService;
+export declare class SafelinkRuleService {
+    db: Database;
+    constructor(db: Database);
+    static creator(): (db: Database) => SafelinkRuleService;
+    formatEvent(event: Selectable<SafelinkEvent>): ToolsOzoneSafelinkDefs.Event;
+    addRule({ url, pattern, action, reason, createdBy, comment, }: {
+        url: string;
+        pattern: SafelinkPatternType;
+        action: SafelinkActionType;
+        reason: SafelinkReasonType;
+        createdBy: string;
+        comment?: string;
+    }): Promise<Selectable<SafelinkEvent>>;
+    updateRule({ url, pattern, action, reason, createdBy, comment, }: {
+        url: string;
+        pattern: SafelinkPatternType;
+        action: SafelinkActionType;
+        reason: SafelinkReasonType;
+        createdBy: string;
+        comment?: string;
+    }): Promise<Selectable<SafelinkEvent>>;
+    removeRule({ url, pattern, createdBy, comment, }: {
+        url: string;
+        pattern: SafelinkPatternType;
+        createdBy: string;
+        comment?: string;
+    }): Promise<Selectable<SafelinkEvent>>;
+    getActiveRule(url: string, pattern: SafelinkPatternType): Promise<{
+        id: number;
+        action: SafelinkActionType;
+        comment: string | null;
+        createdAt: string;
+        createdBy: string;
+        updatedAt: string;
+        reason: SafelinkReasonType;
+        url: string;
+        pattern: SafelinkPatternType;
+    } | null>;
+    getActiveRules({ cursor, limit, urls, patternType, actions, reason, createdBy, direction, }?: {
+        cursor?: string;
+        limit?: number;
+        urls?: string[];
+        patternType?: SafelinkPatternType;
+        actions?: SafelinkActionType[];
+        reason?: SafelinkReasonType;
+        createdBy?: string;
+        direction?: 'asc' | 'desc';
+    }): Promise<{
+        rules: Selectable<SafelinkRule>[];
+        cursor?: string;
+    }>;
+    queryEvents({ cursor, limit, urls, patternType, direction, }?: {
+        cursor?: string;
+        limit?: number;
+        urls?: string[];
+        patternType?: SafelinkPatternType;
+        direction?: 'asc' | 'desc';
+    }): Promise<{
+        events: Selectable<SafelinkEvent>[];
+        cursor?: string;
+    }>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/safelink/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/safelink/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAErD,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAEnE,MAAM,MAAM,0BAA0B,GAAG,CAAC,EAAE,EAAE,QAAQ,KAAK,mBAAmB,CAAA;AAE9E,qBAAa,mBAAmB;IACX,EAAE,EAAE,QAAQ;gBAAZ,EAAE,EAAE,QAAQ;IAE/B,MAAM,CAAC,OAAO,KACJ,IAAI,QAAQ;IAGtB,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC,GAAG,sBAAsB,CAAC,KAAK;IAcrE,OAAO,CAAC,EACZ,GAAG,EACH,OAAO,EACP,MAAM,EACN,MAAM,EACN,SAAS,EACT,OAAO,GACR,EAAE;QACD,GAAG,EAAE,MAAM,CAAA;QACX,OAAO,EAAE,mBAAmB,CAAA;QAC5B,MAAM,EAAE,kBAAkB,CAAA;QAC1B,MAAM,EAAE,kBAAkB,CAAA;QAC1B,SAAS,EAAE,MAAM,CAAA;QACjB,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAuChC,UAAU,CAAC,EACf,GAAG,EACH,OAAO,EACP,MAAM,EACN,MAAM,EACN,SAAS,EACT,OAAO,GACR,EAAE;QACD,GAAG,EAAE,MAAM,CAAA;QACX,OAAO,EAAE,mBAAmB,CAAA;QAC5B,MAAM,EAAE,kBAAkB,CAAA;QAC1B,MAAM,EAAE,kBAAkB,CAAA;QAC1B,SAAS,EAAE,MAAM,CAAA;QACjB,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAyChC,UAAU,CAAC,EACf,GAAG,EACH,OAAO,EACP,SAAS,EACT,OAAO,GACR,EAAE;QACD,GAAG,EAAE,MAAM,CAAA;QACX,OAAO,EAAE,mBAAmB,CAAA;QAC5B,SAAS,EAAE,MAAM,CAAA;QACjB,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAmChC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB;;;;;;;;;;;IAevD,cAAc,CAAC,EACnB,MAAM,EACN,KAAU,EACV,IAAI,EACJ,WAAW,EACX,OAAO,EACP,MAAM,EACN,SAAS,EACT,SAAkB,GACnB,GAAE;QACD,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;QACf,WAAW,CAAC,EAAE,mBAAmB,CAAA;QACjC,OAAO,CAAC,EAAE,kBAAkB,EAAE,CAAA;QAC9B,MAAM,CAAC,EAAE,kBAAkB,CAAA;QAC3B,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;KACtB,GAAG,OAAO,CAAC;QACf,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,CAAA;QACjC,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAC;IAuCI,WAAW,CAAC,EAChB,MAAM,EACN,KAAU,EACV,IAAI,EACJ,WAAW,EACX,SAAkB,GACnB,GAAE;QACD,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;QACf,WAAW,CAAC,EAAE,mBAAmB,CAAA;QACjC,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;KACtB,GAAG,OAAO,CAAC;QACf,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,EAAE,CAAA;QACnC,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAC;CA0BH"}

package/dist/safelink/service.js

@@ -0,0 +1,179 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SafelinkRuleService = void 0;
+const xrpc_server_1 = require("@atproto/xrpc-server");
+class SafelinkRuleService {
+    constructor(db) {
+        Object.defineProperty(this, "db", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: db
+        });
+    }
+    static creator() {
+        return (db) => new SafelinkRuleService(db);
+    }
+    formatEvent(event) {
+        return {
+            id: event.id,
+            eventType: event.eventType,
+            url: event.url,
+            pattern: event.pattern,
+            action: event.action,
+            reason: event.reason,
+            createdBy: event.createdBy,
+            createdAt: new Date(event.createdAt).toISOString(),
+            comment: event.comment || undefined,
+        };
+    }
+    async addRule({ url, pattern, action, reason, createdBy, comment, }) {
+        const existingRule = await this.getActiveRule(url, pattern);
+        if (existingRule) {
+            throw new xrpc_server_1.InvalidRequestError('A rule for this URL/domain already exists', 'RuleAlreadyExists');
+        }
+        const now = new Date().toISOString();
+        const rule = {
+            url,
+            pattern,
+            action,
+            reason,
+            createdBy,
+            comment: comment || null,
+            createdAt: now,
+        };
+        return await this.db.transaction(async (txn) => {
+            const event = await txn.db
+                .insertInto('safelink_event')
+                .values({
+                eventType: 'addRule',
+                ...rule,
+            })
+                .returningAll()
+                .executeTakeFirstOrThrow();
+            await txn.db
+                .insertInto('safelink_rule')
+                .values({ ...rule, updatedAt: now })
+                .execute();
+            return event;
+        });
+    }
+    async updateRule({ url, pattern, action, reason, createdBy, comment, }) {
+        const existingRule = await this.getActiveRule(url, pattern);
+        if (!existingRule) {
+            throw new xrpc_server_1.InvalidRequestError('No active rule found for this URL/domain', 'RuleNotFound');
+        }
+        const now = new Date().toISOString();
+        const rule = {
+            action,
+            reason,
+            createdBy,
+            comment: comment || null,
+        };
+        return await this.db.transaction(async (txn) => {
+            const event = await txn.db
+                .insertInto('safelink_event')
+                .values({
+                createdAt: now,
+                url: existingRule.url,
+                pattern: existingRule.pattern,
+                eventType: 'updateRule',
+                ...rule,
+            })
+                .returningAll()
+                .executeTakeFirstOrThrow();
+            await txn.db
+                .updateTable('safelink_rule')
+                .set(rule)
+                .where('url', '=', existingRule.url)
+                .where('pattern', '=', existingRule.pattern)
+                .execute();
+            return event;
+        });
+    }
+    async removeRule({ url, pattern, createdBy, comment, }) {
+        const existingRule = await this.getActiveRule(url, pattern);
+        if (!existingRule) {
+            throw new xrpc_server_1.InvalidRequestError('No active rule found for this URL/domain', 'RuleNotFound');
+        }
+        return await this.db.transaction(async (txn) => {
+            const event = await txn.db
+                .insertInto('safelink_event')
+                .values({
+                eventType: 'removeRule',
+                url,
+                pattern,
+                action: existingRule.action,
+                reason: existingRule.reason,
+                createdBy,
+                comment: comment || null,
+                createdAt: new Date().toISOString(),
+            })
+                .returningAll()
+                .executeTakeFirstOrThrow();
+            await txn.db
+                .deleteFrom('safelink_rule')
+                .where('url', '=', url)
+                .where('pattern', '=', pattern)
+                .execute();
+            return event;
+        });
+    }
+    async getActiveRule(url, pattern) {
+        const rule = await this.db.db
+            .selectFrom('safelink_rule')
+            .selectAll()
+            .where('url', '=', url)
+            .where('pattern', '=', pattern)
+            .executeTakeFirst();
+        if (!rule) {
+            return null;
+        }
+        return rule;
+    }
+    async getActiveRules({ cursor, limit = 50, urls, patternType, actions, reason, createdBy, direction = 'desc', } = {}) {
+        let query = this.db.db.selectFrom('safelink_rule').selectAll();
+        if (urls && urls.length > 0) {
+            query = query.where('url', 'in', urls);
+        }
+        if (patternType) {
+            query = query.where('pattern', '=', patternType);
+        }
+        if (actions && actions.length > 0) {
+            query = query.where('action', 'in', actions);
+        }
+        if (reason) {
+            query = query.where('reason', '=', reason);
+        }
+        if (createdBy) {
+            query = query.where('createdBy', '=', createdBy);
+        }
+        if (cursor) {
+            query = query.where('id', direction === 'asc' ? '>' : '<', parseInt(cursor, 10));
+        }
+        const rules = await query.orderBy('id', direction).limit(limit).execute();
+        return {
+            rules,
+            cursor: rules.at(-1)?.id?.toString(),
+        };
+    }
+    async queryEvents({ cursor, limit = 50, urls, patternType, direction = 'desc', } = {}) {
+        let query = this.db.db.selectFrom('safelink_event').selectAll();
+        if (urls && urls.length > 0) {
+            query = query.where('url', 'in', urls);
+        }
+        if (patternType) {
+            query = query.where('pattern', '=', patternType);
+        }
+        if (cursor) {
+            query = query.where('id', direction === 'asc' ? '>' : '<', parseInt(cursor, 10));
+        }
+        const events = await query.orderBy('id', direction).limit(limit).execute();
+        return {
+            events,
+            cursor: events.at(-1)?.id?.toString(),
+        };
+    }
+}
+exports.SafelinkRuleService = SafelinkRuleService;
+//# sourceMappingURL=service.js.map

package/dist/safelink/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/safelink/service.ts"],"names":[],"mappings":";;;AAEA,sDAA0D;AAW1D,MAAa,mBAAmB;IAC9B,YAAmB,EAAY;QAAnB;;;;mBAAO,EAAE;WAAU;IAAG,CAAC;IAEnC,MAAM,CAAC,OAAO;QACZ,OAAO,CAAC,EAAY,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,WAAW,CAAC,KAAgC;QAC1C,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAClD,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS;SACpC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EACZ,GAAG,EACH,OAAO,EACP,MAAM,EACN,MAAM,EACN,SAAS,EACT,OAAO,GAQR;QACC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC3D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,iCAAmB,CAC3B,2CAA2C,EAC3C,mBAAmB,CACpB,CAAA;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,IAAI,GAAG;YACX,GAAG;YACH,OAAO;YACP,MAAM;YACN,MAAM;YACN,SAAS;YACT,OAAO,EAAE,OAAO,IAAI,IAAI;YACxB,SAAS,EAAE,GAAG;SACf,CAAA;QAED,OAAO,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE;iBACvB,UAAU,CAAC,gBAAgB,CAAC;iBAC5B,MAAM,CAAC;gBACN,SAAS,EAAE,SAAS;gBACpB,GAAG,IAAI;aACR,CAAC;iBACD,YAAY,EAAE;iBACd,uBAAuB,EAAE,CAAA;YAE5B,MAAM,GAAG,CAAC,EAAE;iBACT,UAAU,CAAC,eAAe,CAAC;iBAC3B,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;iBACnC,OAAO,EAAE,CAAA;YAEZ,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EACf,GAAG,EACH,OAAO,EACP,MAAM,EACN,MAAM,EACN,SAAS,EACT,OAAO,GAQR;QACC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,iCAAmB,CAC3B,0CAA0C,EAC1C,cAAc,CACf,CAAA;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,IAAI,GAAG;YACX,MAAM;YACN,MAAM;YACN,SAAS;YACT,OAAO,EAAE,OAAO,IAAI,IAAI;SACzB,CAAA;QAED,OAAO,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE;iBACvB,UAAU,CAAC,gBAAgB,CAAC;iBAC5B,MAAM,CAAC;gBACN,SAAS,EAAE,GAAG;gBACd,GAAG,EAAE,YAAY,CAAC,GAAG;gBACrB,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,SAAS,EAAE,YAAY;gBACvB,GAAG,IAAI;aACR,CAAC;iBACD,YAAY,EAAE;iBACd,uBAAuB,EAAE,CAAA;YAE5B,MAAM,GAAG,CAAC,EAAE;iBACT,WAAW,CAAC,eAAe,CAAC;iBAC5B,GAAG,CAAC,IAAI,CAAC;iBACT,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC;iBACnC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC;iBAC3C,OAAO,EAAE,CAAA;YAEZ,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EACf,GAAG,EACH,OAAO,EACP,SAAS,EACT,OAAO,GAMR;QACC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,iCAAmB,CAC3B,0CAA0C,EAC1C,cAAc,CACf,CAAA;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE;iBACvB,UAAU,CAAC,gBAAgB,CAAC;iBAC5B,MAAM,CAAC;gBACN,SAAS,EAAE,YAAY;gBACvB,GAAG;gBACH,OAAO;gBACP,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,SAAS;gBACT,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;iBACD,YAAY,EAAE;iBACd,uBAAuB,EAAE,CAAA;YAE5B,MAAM,GAAG,CAAC,EAAE;iBACT,UAAU,CAAC,eAAe,CAAC;iBAC3B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;iBACtB,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC;iBAC9B,OAAO,EAAE,CAAA;YAEZ,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,OAA4B;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,EAAE;aAC1B,UAAU,CAAC,eAAe,CAAC;aAC3B,SAAS,EAAE;aACX,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;aACtB,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC;aAC9B,gBAAgB,EAAE,CAAA;QAErB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EACnB,MAAM,EACN,KAAK,GAAG,EAAE,EACV,IAAI,EACJ,WAAW,EACX,OAAO,EACP,MAAM,EACN,SAAS,EACT,SAAS,GAAG,MAAM,MAUhB,EAAE;QAIJ,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,CAAA;QAE9D,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACxC,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QAClD,CAAC;QAED,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAC9C,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;QAC5C,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;QAClD,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,GAAG,KAAK,CAAC,KAAK,CACjB,IAAI,EACJ,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAC/B,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CACrB,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAA;QAEzE,OAAO;YACL,KAAK;YACL,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE;SACrC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAChB,MAAM,EACN,KAAK,GAAG,EAAE,EACV,IAAI,EACJ,WAAW,EACX,SAAS,GAAG,MAAM,MAOhB,EAAE;QAIJ,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,CAAA;QAE/D,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACxC,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QAClD,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,GAAG,KAAK,CAAC,KAAK,CACjB,IAAI,EACJ,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAC/B,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CACrB,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAA;QAE1E,OAAO;YACL,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE;SACtC,CAAA;IACH,CAAC;CACF;AAlSD,kDAkSC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atproto/ozone",
-  "version": "0.1.126",
+  "version": "0.1.128",
   "license": "MIT",
   "description": "Backend service for moderating the Bluesky network.",
   "keywords": [
@@ -35,14 +35,14 @@
     "uint8arrays": "3.0.0",
     "undici": "^6.14.1",
     "ws": "^8.12.0",
-    "@atproto/api": "^0.15.21",
+    "@atproto/api": "^0.15.23",
     "@atproto/common": "^0.4.11",
     "@atproto/crypto": "^0.4.4",
     "@atproto/lexicon": "^0.4.11",
     "@atproto/syntax": "^0.4.0",
-    "@atproto/identity": "^0.4.8",
     "@atproto/xrpc": "^0.7.0",
-    "@atproto/xrpc-server": "^0.8.0"
+    "@atproto/xrpc-server": "^0.8.0",
+    "@atproto/identity": "^0.4.8"
   },
   "devDependencies": {
     "@did-plc/server": "^0.0.1",
@@ -55,7 +55,7 @@
     "ts-node": "^10.8.2",
     "typescript": "^5.6.3",
     "@atproto/lex-cli": "^0.8.3",
-    "@atproto/pds": "^0.4.156"
+    "@atproto/pds": "^0.4.158"
   },
   "scripts": {
     "codegen": "lex gen-server --yes ./src/lexicon ../../lexicons/com/atproto/*/* ../../lexicons/app/bsky/*/* ../../lexicons/chat/bsky/*/* ../../lexicons/tools/ozone/*/*",

package/src/api/index.ts

@@ -21,6 +21,11 @@ import queryStatuses from './moderation/queryStatuses'
 import searchRepos from './moderation/searchRepos'
 import proxied from './proxied'
 import createReport from './report/createReport'
+import addSafelinkRule from './safelink/addRule'
+import querySafelinkEvents from './safelink/queryEvents'
+import querySafelinkRules from './safelink/queryRules'
+import removeSafelinkRule from './safelink/removeRule'
+import updateSafelinkRule from './safelink/updateRule'
 import getConfig from './server/getConfig'
 import setAddValues from './set/addValues'
 import deleteSet from './set/deleteSet'
@@ -82,5 +87,10 @@ export default function (server: Server, ctx: AppContext) {
   grantVerifications(server, ctx)
   revokeVerifications(server, ctx)
   listVerifications(server, ctx)
+  addSafelinkRule(server, ctx)
+  updateSafelinkRule(server, ctx)
+  removeSafelinkRule(server, ctx)
+  querySafelinkEvents(server, ctx)
+  querySafelinkRules(server, ctx)
   return server
 }

package/src/api/moderation/emitEvent.ts

@@ -154,6 +154,7 @@ const handleModerationEvent = async ({
       event,
       subject,
       createdBy,
+      modTool: input.body.modTool,
     })
 
     const tagService = new TagService(
@@ -243,6 +244,7 @@ export default function (server: Server, ctx: AppContext) {
                 comment:
                   '[DIVERT_SIDE_EFFECT]: Automatically taking down after divert event',
               },
+              modTool: input.body.modTool,
             },
           },
         })

package/src/api/moderation/queryEvents.ts

@@ -26,6 +26,7 @@ export default function (server: Server, ctx: AppContext) {
         collections = [],
         subjectType,
         policies,
+        modTool,
       } = params
       const db = ctx.db
       const modService = ctx.modService(db)
@@ -49,6 +50,7 @@ export default function (server: Server, ctx: AppContext) {
         collections,
         subjectType,
         policies,
+        modTool,
       })
       return {
         encoding: 'application/json',

package/src/api/report/createReport.ts

@@ -17,7 +17,7 @@ export default function (server: Server, ctx: AppContext) {
     handler: async ({ input, auth }) => {
       const requester =
         'iss' in auth.credentials ? auth.credentials.iss : ctx.cfg.service.did
-      const { reasonType, reason } = input.body
+      const { reasonType, reason, modTool } = input.body
       const subject = subjectFromInput(input.body.subject)
 
       // If the report is an appeal, the requester must be the author of the subject
@@ -37,6 +37,7 @@ export default function (server: Server, ctx: AppContext) {
             reason,
             subject,
             reportedBy: requester || ctx.cfg.service.did,
+            modTool,
           })
 
         const tagService = new TagService(

package/src/api/safelink/addRule.ts

@@ -0,0 +1,48 @@
+import { AuthRequiredError } from '@atproto/xrpc-server'
+import { AppContext } from '../../context'
+import { Server } from '../../lexicon'
+import {
+  getSafelinkAction,
+  getSafelinkPattern,
+  getSafelinkReason,
+} from '../util'
+
+export default function (server: Server, ctx: AppContext) {
+  server.tools.ozone.safelink.addRule({
+    auth: ctx.authVerifier.modOrAdminToken,
+    handler: async ({ input, auth }) => {
+      const access = auth.credentials
+      const db = ctx.db
+      const { url, pattern, action, reason, comment, createdBy } = input.body
+
+      if (!access.isModerator) {
+        throw new AuthRequiredError('Must be a moderator to add URL rules')
+      }
+
+      if (access.type === 'admin_token' && !createdBy) {
+        throw new AuthRequiredError(
+          'Must specify createdBy when using admin auth',
+        )
+      }
+
+      const safelinkRuleService = ctx.safelinkRuleService(db)
+
+      const event = await safelinkRuleService.addRule({
+        url,
+        pattern: getSafelinkPattern(pattern),
+        action: getSafelinkAction(action),
+        reason: getSafelinkReason(reason),
+        createdBy:
+          access.type === 'admin_token'
+            ? createdBy || ctx.cfg.service.did
+            : access.iss,
+        comment,
+      })
+
+      return {
+        encoding: 'application/json',
+        body: safelinkRuleService.formatEvent(event),
+      }
+    },
+  })
+}

package/src/api/safelink/queryEvents.ts

@@ -0,0 +1,32 @@
+import { AppContext } from '../../context'
+import { Server } from '../../lexicon'
+import { getSafelinkPattern } from '../util'
+
+export default function (server: Server, ctx: AppContext) {
+  server.tools.ozone.safelink.queryEvents({
+    auth: ctx.authVerifier.modOrAdminToken,
+    handler: async ({ input }) => {
+      const db = ctx.db
+      const { cursor, limit, urls, patternType, sortDirection } = input.body
+
+      const safelinkRuleService = ctx.safelinkRuleService(db)
+      const result = await safelinkRuleService.queryEvents({
+        cursor,
+        limit,
+        urls,
+        patternType: patternType ? getSafelinkPattern(patternType) : undefined,
+        direction: sortDirection as 'asc' | 'desc' | undefined,
+      })
+
+      return {
+        encoding: 'application/json',
+        body: {
+          cursor: result.cursor,
+          events: result.events.map((event) =>
+            safelinkRuleService.formatEvent(event),
+          ),
+        },
+      }
+    },
+  })
+}

package/src/api/safelink/queryRules.ts

@@ -0,0 +1,58 @@
+import { AppContext } from '../../context'
+import { Server } from '../../lexicon'
+import {
+  getSafelinkAction,
+  getSafelinkPattern,
+  getSafelinkReason,
+} from '../util'
+
+export default function (server: Server, ctx: AppContext) {
+  server.tools.ozone.safelink.queryRules({
+    auth: ctx.authVerifier.modOrAdminToken,
+    handler: async ({ input }) => {
+      const db = ctx.db
+      const {
+        cursor,
+        limit,
+        urls,
+        patternType,
+        actions,
+        reason,
+        createdBy,
+        sortDirection,
+      } = input.body
+
+      const safelinkRuleService = ctx.safelinkRuleService(db)
+      const result = await safelinkRuleService.getActiveRules({
+        cursor,
+        limit,
+        urls,
+        patternType: patternType ? getSafelinkPattern(patternType) : undefined,
+        actions:
+          actions && actions.length > 0
+            ? actions.map(getSafelinkAction)
+            : undefined,
+        reason: reason ? getSafelinkReason(reason) : undefined,
+        createdBy,
+        direction: sortDirection as 'asc' | 'desc' | undefined,
+      })
+
+      return {
+        encoding: 'application/json',
+        body: {
+          cursor: result.cursor,
+          rules: result.rules.map((rule) => ({
+            url: rule.url,
+            pattern: rule.pattern,
+            action: rule.action,
+            reason: rule.reason,
+            createdBy: rule.createdBy,
+            createdAt: new Date(rule.createdAt).toISOString(),
+            updatedAt: new Date(rule.updatedAt).toISOString(),
+            comment: rule.comment || undefined,
+          })),
+        },
+      }
+    },
+  })
+}

package/src/api/safelink/removeRule.ts

@@ -0,0 +1,42 @@
+import { AuthRequiredError } from '@atproto/xrpc-server'
+import { AppContext } from '../../context'
+import { Server } from '../../lexicon'
+import { getSafelinkPattern } from '../util'
+
+export default function (server: Server, ctx: AppContext) {
+  server.tools.ozone.safelink.removeRule({
+    auth: ctx.authVerifier.modOrAdminToken,
+    handler: async ({ input, auth }) => {
+      const access = auth.credentials
+      const db = ctx.db
+      const { url, pattern, comment, createdBy } = input.body
+
+      if (!access.isModerator) {
+        throw new AuthRequiredError('Must be a moderator to remove URL rules')
+      }
+
+      if (access.type === 'admin_token' && !createdBy) {
+        throw new AuthRequiredError(
+          'Must specify createdBy when using admin auth',
+        )
+      }
+
+      const safelinkRuleService = ctx.safelinkRuleService(db)
+
+      const event = await safelinkRuleService.removeRule({
+        url,
+        pattern: getSafelinkPattern(pattern),
+        createdBy:
+          access.type === 'admin_token'
+            ? createdBy || ctx.cfg.service.did
+            : access.iss,
+        comment,
+      })
+
+      return {
+        encoding: 'application/json',
+        body: safelinkRuleService.formatEvent(event),
+      }
+    },
+  })
+}

package/src/api/safelink/updateRule.ts

@@ -0,0 +1,48 @@
+import { AuthRequiredError } from '@atproto/xrpc-server'
+import { AppContext } from '../../context'
+import { Server } from '../../lexicon'
+import {
+  getSafelinkAction,
+  getSafelinkPattern,
+  getSafelinkReason,
+} from '../util'
+
+export default function (server: Server, ctx: AppContext) {
+  server.tools.ozone.safelink.updateRule({
+    auth: ctx.authVerifier.modOrAdminToken,
+    handler: async ({ input, auth }) => {
+      const access = auth.credentials
+      const db = ctx.db
+      const { url, pattern, action, reason, comment, createdBy } = input.body
+
+      if (!access.isModerator) {
+        throw new AuthRequiredError('Must be a moderator to update URL rules')
+      }
+
+      if (access.type === 'admin_token' && !createdBy) {
+        throw new AuthRequiredError(
+          'Must specify createdBy when using admin auth',
+        )
+      }
+
+      const safelinkRuleService = ctx.safelinkRuleService(db)
+
+      const event = await safelinkRuleService.updateRule({
+        url,
+        pattern: getSafelinkPattern(pattern),
+        action: getSafelinkAction(action),
+        reason: getSafelinkReason(reason),
+        createdBy:
+          access.type === 'admin_token'
+            ? createdBy || ctx.cfg.service.did
+            : access.iss,
+        comment,
+      })
+
+      return {
+        encoding: 'application/json',
+        body: safelinkRuleService.formatEvent(event),
+      }
+    },
+  })
+}

package/src/api/util.ts

@@ -191,3 +191,41 @@ const memberRoles = new Set([
   ROLETRIAGE,
   ROLEVERIFIER,
 ])
+
+export const getSafelinkPattern = (pattern: string): SafelinkPatternType => {
+  if (safelinkPatterns.has(pattern)) {
+    return pattern as SafelinkPatternType
+  }
+  throw new InvalidRequestError('Invalid safelink pattern type')
+}
+
+export const getSafelinkAction = (action: string): SafelinkActionType => {
+  if (safelinkActions.has(action)) {
+    return action as SafelinkActionType
+  }
+  throw new InvalidRequestError('Invalid safelink action type')
+}
+
+export const getSafelinkReason = (reason: string): SafelinkReasonType => {
+  if (safelinkReasons.has(reason)) {
+    return reason as SafelinkReasonType
+  }
+  throw new InvalidRequestError('Invalid safelink reason type')
+}
+
+export const getSafelinkEventType = (eventType: string): SafelinkEventType => {
+  if (safelinkEventTypes.has(eventType)) {
+    return eventType as SafelinkEventType
+  }
+  throw new InvalidRequestError('Invalid safelink event type')
+}
+
+export type SafelinkEventType = 'addRule' | 'updateRule' | 'removeRule'
+export type SafelinkPatternType = 'domain' | 'url'
+export type SafelinkActionType = 'block' | 'warn' | 'whitelist'
+export type SafelinkReasonType = 'csam' | 'spam' | 'phishing' | 'none'
+
+const safelinkPatterns = new Set(['domain', 'url'])
+const safelinkActions = new Set(['block', 'warn', 'whitelist'])
+const safelinkReasons = new Set(['csam', 'spam', 'phishing', 'none'])
+const safelinkEventTypes = new Set(['addRule', 'updateRule', 'removeRule'])