@atproto/pds 0.4.215 → 0.4.217

package/dist/api/com/atproto/identity/signPlcOperation.js

@@ -38,51 +38,61 @@ const plc = __importStar(require("@did-plc/lib"));
 const common_1 = require("@atproto/common");
 const xrpc_server_1 = require("@atproto/xrpc-server");
 const auth_scope_1 = require("../../../../auth-scope");
-const lexicons_1 = require("../../../../lexicon/lexicons");
-const proxy_1 = require("../../../proxy");
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.identity.signPlcOperation({
-        auth: ctx.authVerifier.authorization({
-            // @NOTE Should match auth rules from requestPlcOperationSignature
-            scopes: auth_scope_1.ACCESS_FULL,
-            additional: [auth_scope_1.AuthScope.Takendown],
-            authorize: (permissions) => {
-                permissions.assertIdentity({ attr: '*' });
-            },
-        }),
-        handler: async ({ auth, input, req }) => {
-            if (ctx.entrywayAgent) {
-                return (0, proxy_1.resultPassthru)(await ctx.entrywayAgent.com.atproto.identity.signPlcOperation(input.body, await ctx.entrywayAuthHeaders(req, auth.credentials.did, lexicons_1.ids.ComAtprotoIdentitySignPlcOperation)));
-            }
-            const did = auth.credentials.did;
-            const { token } = input.body;
-            if (!token) {
-                throw new xrpc_server_1.InvalidRequestError('email confirmation token required to sign PLC operations');
-            }
-            await ctx.accountManager.assertValidEmailTokenAndCleanup(did, 'plc_operation', token);
-            const lastOp = await ctx.plcClient.getLastOp(did);
-            if (common_1.check.is(lastOp, plc.def.tombstone)) {
-                throw new xrpc_server_1.InvalidRequestError('Did is tombstoned');
-            }
-            const operation = await plc.createUpdateOp(lastOp, ctx.plcRotationKey, (lastOp) => ({
-                ...lastOp,
-                rotationKeys: input.body.rotationKeys ?? lastOp.rotationKeys,
-                alsoKnownAs: input.body.alsoKnownAs ?? lastOp.alsoKnownAs,
-                verificationMethods: 
-                // @TODO: actually validate instead of type casting
-                input.body.verificationMethods ?? lastOp.verificationMethods,
-                services: 
-                // @TODO: actually validate instead of type casting
-                input.body.services ??
-                    lastOp.services,
-            }));
-            return {
-                encoding: 'application/json',
-                body: {
-                    operation,
-                },
-            };
+    const { entrywayClient } = ctx;
+    const auth = ctx.authVerifier.authorization({
+        // @NOTE Should match auth rules from requestPlcOperationSignature
+        scopes: auth_scope_1.ACCESS_FULL,
+        additional: [auth_scope_1.AuthScope.Takendown],
+        authorize: (permissions) => {
+            permissions.assertIdentity({ attr: '*' });
         },
     });
+    if (entrywayClient) {
+        server.add(index_js_1.com.atproto.identity.signPlcOperation, {
+            auth,
+            handler: async ({ auth, input: { body }, req }) => {
+                const { headers } = await ctx.entrywayAuthHeaders(req, auth.credentials.did, index_js_1.com.atproto.identity.signPlcOperation.$lxm);
+                return entrywayClient.xrpc(index_js_1.com.atproto.identity.signPlcOperation, {
+                    headers,
+                    body,
+                });
+            },
+        });
+    }
+    else {
+        server.add(index_js_1.com.atproto.identity.signPlcOperation, {
+            auth,
+            handler: async ({ auth, input }) => {
+                const did = auth.credentials.did;
+                const { token } = input.body;
+                if (!token) {
+                    throw new xrpc_server_1.InvalidRequestError('email confirmation token required to sign PLC operations');
+                }
+                await ctx.accountManager.assertValidEmailTokenAndCleanup(did, 'plc_operation', token);
+                const lastOp = await ctx.plcClient.getLastOp(did);
+                if (common_1.check.is(lastOp, plc.def.tombstone)) {
+                    throw new xrpc_server_1.InvalidRequestError('Did is tombstoned');
+                }
+                const operation = await plc.createUpdateOp(lastOp, ctx.plcRotationKey, (lastOp) => ({
+                    ...lastOp,
+                    rotationKeys: input.body.rotationKeys ?? lastOp.rotationKeys,
+                    alsoKnownAs: input.body.alsoKnownAs ?? lastOp.alsoKnownAs,
+                    verificationMethods: 
+                    // @TODO: actually validate instead of type casting
+                    input.body.verificationMethods ?? lastOp.verificationMethods,
+                    services: 
+                    // @TODO: actually validate instead of type casting
+                    input.body.services ??
+                        lastOp.services,
+                }));
+                return {
+                    encoding: 'application/json',
+                    body: { operation },
+                };
+            },
+        });
+    }
 }
 //# sourceMappingURL=signPlcOperation.js.map

package/dist/api/com/atproto/identity/signPlcOperation.js.map

@@ -1 +1 @@
-{"version":3,"file":"signPlcOperation.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/signPlcOperation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,4BAqEC;AA9ED,kDAAmC;AACnC,4CAAuC;AACvC,sDAA0D;AAC1D,uDAA+D;AAG/D,2DAAkD;AAClD,0CAA+C;AAE/C,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC3C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,kEAAkE;YAClE,MAAM,EAAE,wBAAW;YACnB,UAAU,EAAE,CAAC,sBAAS,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;gBACzB,WAAW,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3C,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACtC,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,OAAO,IAAA,sBAAc,EACnB,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAC3D,KAAK,CAAC,IAAI,EACV,MAAM,GAAG,CAAC,mBAAmB,CAC3B,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,kCAAkC,CACvC,CACF,CACF,CAAA;YACH,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAChC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,iCAAmB,CAC3B,0DAA0D,CAC3D,CAAA;YACH,CAAC;YACD,MAAM,GAAG,CAAC,cAAc,CAAC,+BAA+B,CACtD,GAAG,EACH,eAAe,EACf,KAAK,CACN,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;YACjD,IAAI,cAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,iCAAmB,CAAC,mBAAmB,CAAC,CAAA;YACpD,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,cAAc,CACxC,MAAM,EACN,GAAG,CAAC,cAAc,EAClB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACX,GAAG,MAAM;gBACT,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY;gBAC5D,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW;gBACzD,mBAAmB;gBACjB,mDAAmD;gBAClD,KAAK,CAAC,IAAI,CAAC,mBAEe,IAAI,MAAM,CAAC,mBAAmB;gBAC3D,QAAQ;gBACN,mDAAmD;gBAClD,KAAK,CAAC,IAAI,CAAC,QAE2C;oBACvD,MAAM,CAAC,QAAQ;aAClB,CAAC,CACH,CAAA;YACD,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,SAAS;iBACV;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import * as plc from '@did-plc/lib'\nimport { check } from '@atproto/common'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { ACCESS_FULL, AuthScope } from '../../../../auth-scope'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport { ids } from '../../../../lexicon/lexicons'\nimport { resultPassthru } from '../../../proxy'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.identity.signPlcOperation({\n    auth: ctx.authVerifier.authorization({\n      // @NOTE Should match auth rules from requestPlcOperationSignature\n      scopes: ACCESS_FULL,\n      additional: [AuthScope.Takendown],\n      authorize: (permissions) => {\n        permissions.assertIdentity({ attr: '*' })\n      },\n    }),\n    handler: async ({ auth, input, req }) => {\n      if (ctx.entrywayAgent) {\n        return resultPassthru(\n          await ctx.entrywayAgent.com.atproto.identity.signPlcOperation(\n            input.body,\n            await ctx.entrywayAuthHeaders(\n              req,\n              auth.credentials.did,\n              ids.ComAtprotoIdentitySignPlcOperation,\n            ),\n          ),\n        )\n      }\n\n      const did = auth.credentials.did\n      const { token } = input.body\n      if (!token) {\n        throw new InvalidRequestError(\n          'email confirmation token required to sign PLC operations',\n        )\n      }\n      await ctx.accountManager.assertValidEmailTokenAndCleanup(\n        did,\n        'plc_operation',\n        token,\n      )\n\n      const lastOp = await ctx.plcClient.getLastOp(did)\n      if (check.is(lastOp, plc.def.tombstone)) {\n        throw new InvalidRequestError('Did is tombstoned')\n      }\n      const operation = await plc.createUpdateOp(\n        lastOp,\n        ctx.plcRotationKey,\n        (lastOp) => ({\n          ...lastOp,\n          rotationKeys: input.body.rotationKeys ?? lastOp.rotationKeys,\n          alsoKnownAs: input.body.alsoKnownAs ?? lastOp.alsoKnownAs,\n          verificationMethods:\n            // @TODO: actually validate instead of type casting\n            (input.body.verificationMethods as\n              | undefined\n              | Record<string, string>) ?? lastOp.verificationMethods,\n          services:\n            // @TODO: actually validate instead of type casting\n            (input.body.services as\n              | undefined\n              | Record<string, { type: string; endpoint: string }>) ??\n            lastOp.services,\n        }),\n      )\n      return {\n        encoding: 'application/json',\n        body: {\n          operation,\n        },\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"signPlcOperation.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/signPlcOperation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,4BA6EC;AApFD,kDAAmC;AACnC,4CAAuC;AACvC,sDAAkE;AAClE,uDAA+D;AAE/D,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAA;IAE9B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;QAC1C,kEAAkE;QAClE,MAAM,EAAE,wBAAW;QACnB,UAAU,EAAE,CAAC,sBAAS,CAAC,SAAS,CAAC;QACjC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;YACzB,WAAW,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QAC3C,CAAC;KACF,CAAC,CAAA;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE;YAChD,IAAI;YACJ,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAChD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAC/C,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAC3C,CAAA;gBAED,OAAO,cAAc,CAAC,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE;oBAChE,OAAO;oBACP,IAAI;iBACL,CAAC,CAAA;YACJ,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE;YAChD,IAAI;YACJ,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;gBAChC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;gBAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,iCAAmB,CAC3B,0DAA0D,CAC3D,CAAA;gBACH,CAAC;gBACD,MAAM,GAAG,CAAC,cAAc,CAAC,+BAA+B,CACtD,GAAG,EACH,eAAe,EACf,KAAK,CACN,CAAA;gBAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBACjD,IAAI,cAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,iCAAmB,CAAC,mBAAmB,CAAC,CAAA;gBACpD,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,cAAc,CACxC,MAAM,EACN,GAAG,CAAC,cAAc,EAClB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACX,GAAG,MAAM;oBACT,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY;oBAC5D,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW;oBACzD,mBAAmB;oBACjB,mDAAmD;oBAClD,KAAK,CAAC,IAAI,CAAC,mBAEe,IAAI,MAAM,CAAC,mBAAmB;oBAC3D,QAAQ;oBACN,mDAAmD;oBAClD,KAAK,CAAC,IAAI,CAAC,QAE2C;wBACvD,MAAM,CAAC,QAAQ;iBAClB,CAAC,CACH,CAAA;gBAED,OAAO;oBACL,QAAQ,EAAE,kBAA2B;oBACrC,IAAI,EAAE,EAAE,SAAS,EAAE;iBACpB,CAAA;YACH,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;AACH,CAAC","sourcesContent":["import * as plc from '@did-plc/lib'\nimport { check } from '@atproto/common'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { ACCESS_FULL, AuthScope } from '../../../../auth-scope'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  const { entrywayClient } = ctx\n\n  const auth = ctx.authVerifier.authorization({\n    // @NOTE Should match auth rules from requestPlcOperationSignature\n    scopes: ACCESS_FULL,\n    additional: [AuthScope.Takendown],\n    authorize: (permissions) => {\n      permissions.assertIdentity({ attr: '*' })\n    },\n  })\n\n  if (entrywayClient) {\n    server.add(com.atproto.identity.signPlcOperation, {\n      auth,\n      handler: async ({ auth, input: { body }, req }) => {\n        const { headers } = await ctx.entrywayAuthHeaders(\n          req,\n          auth.credentials.did,\n          com.atproto.identity.signPlcOperation.$lxm,\n        )\n\n        return entrywayClient.xrpc(com.atproto.identity.signPlcOperation, {\n          headers,\n          body,\n        })\n      },\n    })\n  } else {\n    server.add(com.atproto.identity.signPlcOperation, {\n      auth,\n      handler: async ({ auth, input }) => {\n        const did = auth.credentials.did\n        const { token } = input.body\n        if (!token) {\n          throw new InvalidRequestError(\n            'email confirmation token required to sign PLC operations',\n          )\n        }\n        await ctx.accountManager.assertValidEmailTokenAndCleanup(\n          did,\n          'plc_operation',\n          token,\n        )\n\n        const lastOp = await ctx.plcClient.getLastOp(did)\n        if (check.is(lastOp, plc.def.tombstone)) {\n          throw new InvalidRequestError('Did is tombstoned')\n        }\n        const operation = await plc.createUpdateOp(\n          lastOp,\n          ctx.plcRotationKey,\n          (lastOp) => ({\n            ...lastOp,\n            rotationKeys: input.body.rotationKeys ?? lastOp.rotationKeys,\n            alsoKnownAs: input.body.alsoKnownAs ?? lastOp.alsoKnownAs,\n            verificationMethods:\n              // @TODO: actually validate instead of type casting\n              (input.body.verificationMethods as\n                | undefined\n                | Record<string, string>) ?? lastOp.verificationMethods,\n            services:\n              // @TODO: actually validate instead of type casting\n              (input.body.services as\n                | undefined\n                | Record<string, { type: string; endpoint: string }>) ??\n              lastOp.services,\n          }),\n        )\n\n        return {\n          encoding: 'application/json' as const,\n          body: { operation },\n        }\n      },\n    })\n  }\n}\n"]}

package/dist/api/com/atproto/identity/submitPlcOperation.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=submitPlcOperation.d.ts.map

package/dist/api/com/atproto/identity/submitPlcOperation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"submitPlcOperation.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/submitPlcOperation.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAG5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAyDvD"}
+{"version":3,"file":"submitPlcOperation.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/submitPlcOperation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAyDvD"}

package/dist/api/com/atproto/identity/submitPlcOperation.js

@@ -37,9 +37,10 @@ exports.default = default_1;
 const plc = __importStar(require("@did-plc/lib"));
 const common_1 = require("@atproto/common");
 const xrpc_server_1 = require("@atproto/xrpc-server");
+const index_js_1 = require("../../../../lexicons/index.js");
 const logger_1 = require("../../../../logger");
 function default_1(server, ctx) {
-    server.com.atproto.identity.submitPlcOperation({
+    server.add(index_js_1.com.atproto.identity.submitPlcOperation, {
         auth: ctx.authVerifier.authorization({
             authorize: (permissions) => {
                 permissions.assertIdentity({ attr: '*' });

package/dist/api/com/atproto/identity/submitPlcOperation.js.map

@@ -1 +1 @@
-{"version":3,"file":"submitPlcOperation.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/submitPlcOperation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,4BAyDC;AAhED,kDAAmC;AACnC,4CAAuC;AACvC,sDAA0D;AAG1D,+CAAsD;AAEtD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC7C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;gBACzB,WAAW,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3C,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YACtC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAA;YAE/B,IAAI,CAAC,cAAK,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,iCAAmB,CAAC,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,MAAM,WAAW,GACf,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,EAAE,CAAA;YAC9D,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,iCAAmB,CAC3B,oDAAoD,CACrD,CAAA;YACH,CAAC;YACD,IAAI,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBACrE,MAAM,IAAI,iCAAmB,CAAC,uCAAuC,CAAC,CAAA;YACxE,CAAC;YACD,IAAI,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACvE,MAAM,IAAI,iCAAmB,CAC3B,2CAA2C,CAC5C,CAAA;YACH,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC1D,IAAI,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC3D,MAAM,IAAI,iCAAmB,CAAC,uBAAuB,CAAC,CAAA;YACxD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE;gBAC7D,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAA;YACF,IACE,OAAO,EAAE,MAAM;gBACf,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,OAAO,CAAC,MAAM,EAAE,EACjD,CAAC;gBACD,MAAM,IAAI,iCAAmB,CAAC,iCAAiC,CAAC,CAAA;YAClE,CAAC;YAED,MAAM,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;YAChD,MAAM,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;YAElD,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mBAAG,CAAC,KAAK,CACP,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,EACvB,wCAAwC,CACzC,CAAA;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import * as plc from '@did-plc/lib'\nimport { check } from '@atproto/common'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport { httpLogger as log } from '../../../../logger'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.identity.submitPlcOperation({\n    auth: ctx.authVerifier.authorization({\n      authorize: (permissions) => {\n        permissions.assertIdentity({ attr: '*' })\n      },\n    }),\n    handler: async ({ auth, input }) => {\n      const requester = auth.credentials.did\n      const op = input.body.operation\n\n      if (!check.is(op, plc.def.operation)) {\n        throw new InvalidRequestError('Invalid operation')\n      }\n\n      const rotationKey =\n        ctx.cfg.entryway?.plcRotationKey ?? ctx.plcRotationKey.did()\n      if (!op.rotationKeys.includes(rotationKey)) {\n        throw new InvalidRequestError(\n          \"Rotation keys do not include server's rotation key\",\n        )\n      }\n      if (op.services['atproto_pds']?.type !== 'AtprotoPersonalDataServer') {\n        throw new InvalidRequestError('Incorrect type on atproto_pds service')\n      }\n      if (op.services['atproto_pds']?.endpoint !== ctx.cfg.service.publicUrl) {\n        throw new InvalidRequestError(\n          'Incorrect endpoint on atproto_pds service',\n        )\n      }\n      const signingKey = await ctx.actorStore.keypair(requester)\n      if (op.verificationMethods['atproto'] !== signingKey.did()) {\n        throw new InvalidRequestError('Incorrect signing key')\n      }\n      const account = await ctx.accountManager.getAccount(requester, {\n        includeDeactivated: true,\n      })\n      if (\n        account?.handle &&\n        op.alsoKnownAs.at(0) !== `at://${account.handle}`\n      ) {\n        throw new InvalidRequestError('Incorrect handle in alsoKnownAs')\n      }\n\n      await ctx.plcClient.sendOperation(requester, op)\n      await ctx.sequencer.sequenceIdentityEvt(requester)\n\n      try {\n        await ctx.idResolver.did.resolve(requester, true)\n      } catch (err) {\n        log.error(\n          { err, did: requester },\n          'failed to refresh did after plc update',\n        )\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"submitPlcOperation.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/submitPlcOperation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,4BAyDC;AAhED,kDAAmC;AACnC,4CAAuC;AACvC,sDAAkE;AAElE,4DAAmD;AACnD,+CAAsD;AAEtD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE;QAClD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;gBACzB,WAAW,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3C,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YACtC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAA;YAE/B,IAAI,CAAC,cAAK,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,iCAAmB,CAAC,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,MAAM,WAAW,GACf,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,EAAE,CAAA;YAC9D,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,iCAAmB,CAC3B,oDAAoD,CACrD,CAAA;YACH,CAAC;YACD,IAAI,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBACrE,MAAM,IAAI,iCAAmB,CAAC,uCAAuC,CAAC,CAAA;YACxE,CAAC;YACD,IAAI,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACvE,MAAM,IAAI,iCAAmB,CAC3B,2CAA2C,CAC5C,CAAA;YACH,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC1D,IAAI,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC3D,MAAM,IAAI,iCAAmB,CAAC,uBAAuB,CAAC,CAAA;YACxD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE;gBAC7D,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAA;YACF,IACE,OAAO,EAAE,MAAM;gBACf,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,OAAO,CAAC,MAAM,EAAE,EACjD,CAAC;gBACD,MAAM,IAAI,iCAAmB,CAAC,iCAAiC,CAAC,CAAA;YAClE,CAAC;YAED,MAAM,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;YAChD,MAAM,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;YAElD,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mBAAG,CAAC,KAAK,CACP,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,EACvB,wCAAwC,CACzC,CAAA;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import * as plc from '@did-plc/lib'\nimport { check } from '@atproto/common'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\nimport { httpLogger as log } from '../../../../logger'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.identity.submitPlcOperation, {\n    auth: ctx.authVerifier.authorization({\n      authorize: (permissions) => {\n        permissions.assertIdentity({ attr: '*' })\n      },\n    }),\n    handler: async ({ auth, input }) => {\n      const requester = auth.credentials.did\n      const op = input.body.operation\n\n      if (!check.is(op, plc.def.operation)) {\n        throw new InvalidRequestError('Invalid operation')\n      }\n\n      const rotationKey =\n        ctx.cfg.entryway?.plcRotationKey ?? ctx.plcRotationKey.did()\n      if (!op.rotationKeys.includes(rotationKey)) {\n        throw new InvalidRequestError(\n          \"Rotation keys do not include server's rotation key\",\n        )\n      }\n      if (op.services['atproto_pds']?.type !== 'AtprotoPersonalDataServer') {\n        throw new InvalidRequestError('Incorrect type on atproto_pds service')\n      }\n      if (op.services['atproto_pds']?.endpoint !== ctx.cfg.service.publicUrl) {\n        throw new InvalidRequestError(\n          'Incorrect endpoint on atproto_pds service',\n        )\n      }\n      const signingKey = await ctx.actorStore.keypair(requester)\n      if (op.verificationMethods['atproto'] !== signingKey.did()) {\n        throw new InvalidRequestError('Incorrect signing key')\n      }\n      const account = await ctx.accountManager.getAccount(requester, {\n        includeDeactivated: true,\n      })\n      if (\n        account?.handle &&\n        op.alsoKnownAs.at(0) !== `at://${account.handle}`\n      ) {\n        throw new InvalidRequestError('Incorrect handle in alsoKnownAs')\n      }\n\n      await ctx.plcClient.sendOperation(requester, op)\n      await ctx.sequencer.sequenceIdentityEvt(requester)\n\n      try {\n        await ctx.idResolver.did.resolve(requester, true)\n      } catch (err) {\n        log.error(\n          { err, did: requester },\n          'failed to refresh did after plc update',\n        )\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/identity/updateHandle.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=updateHandle.d.ts.map

package/dist/api/com/atproto/identity/updateHandle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updateHandle.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/updateHandle.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAI5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAsFvD"}
+{"version":3,"file":"updateHandle.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/updateHandle.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA0FvD"}

package/dist/api/com/atproto/identity/updateHandle.js

@@ -3,10 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
 const common_1 = require("@atproto/common");
 const xrpc_server_1 = require("@atproto/xrpc-server");
-const lexicons_1 = require("../../../../lexicon/lexicons");
+const index_js_1 = require("../../../../lexicons/index.js");
 const logger_1 = require("../../../../logger");
 function default_1(server, ctx) {
-    server.com.atproto.identity.updateHandle({
+    server.add(index_js_1.com.atproto.identity.updateHandle, {
         auth: ctx.authVerifier.authorization({
             checkTakedown: true,
             authorize: (permissions) => {
@@ -27,13 +27,19 @@ function default_1(server, ctx) {
         ],
         handler: async ({ auth, input, req }) => {
             const requester = auth.credentials.did;
-            if (ctx.entrywayAgent) {
+            if (ctx.entrywayClient) {
+                const { headers } = await ctx.entrywayAuthHeaders(req, auth.credentials.did, index_js_1.com.atproto.identity.updateHandle.$lxm);
                 // the full flow is:
                 // -> entryway(identity.updateHandle) [update handle, submit plc op]
                 // -> pds(admin.updateAccountHandle)  [track handle, sequence handle update]
-                await ctx.entrywayAgent.com.atproto.identity.updateHandle(
-                // @ts-expect-error "did" is not in the schema
-                { did: requester, handle: input.body.handle }, await ctx.entrywayAuthHeaders(req, auth.credentials.did, lexicons_1.ids.ComAtprotoIdentityUpdateHandle));
+                await ctx.entrywayClient.xrpc(index_js_1.com.atproto.identity.updateHandle, {
+                    headers,
+                    body: {
+                        handle: input.body.handle,
+                        // @ts-expect-error "did" is not in the schema
+                        did: requester,
+                    },
+                });
                 return;
             }
             const handle = await ctx.accountManager.normalizeAndValidateHandle(input.body.handle, { did: requester });

package/dist/api/com/atproto/identity/updateHandle.js.map

@@ -1 +1 @@
-{"version":3,"file":"updateHandle.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/updateHandle.ts"],"names":[],"mappings":";;AAOA,4BAsFC;AA7FD,4CAA6C;AAC7C,sDAA0D;AAG1D,2DAAkD;AAClD,+CAA+C;AAE/C,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QACvC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;gBACzB,WAAW,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;YAChD,CAAC;SACF,CAAC;QACF,SAAS,EAAE;YACT;gBACE,UAAU,EAAE,CAAC,GAAG,eAAM;gBACtB,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;aAC5C;YACD;gBACE,UAAU,EAAE,YAAG;gBACf,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;aAC5C;SACF;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAEtC,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,oBAAoB;gBACpB,oEAAoE;gBACpE,4EAA4E;gBAC5E,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY;gBACvD,8CAA8C;gBAC9C,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAC7C,MAAM,GAAG,CAAC,mBAAmB,CAC3B,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,8BAA8B,CACnC,CACF,CAAA;gBACD,OAAM;YACR,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,0BAA0B,CAChE,KAAK,CAAC,IAAI,CAAC,MAAM,EACjB,EAAE,GAAG,EAAE,SAAS,EAAE,CACnB,CAAA;YAED,gFAAgF;YAChF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE;gBAC1D,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAA;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACrC,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAC9B,SAAS,EACT,GAAG,CAAC,cAAc,EAClB,MAAM,CACP,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,kBAAkB,CAC1D,SAAS,EACT,IAAI,CACL,CAAA;oBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC/B,MAAM,IAAI,iCAAmB,CAC3B,2CAA2C,CAC5C,CAAA;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YAC1D,CAAC;iBAAM,CAAC;gBACN,oFAAoF;gBACpF,iDAAiD;gBACjD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBAC9B,MAAM,IAAI,iCAAmB,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAA;gBAClE,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YAC5D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mBAAU,CAAC,KAAK,CACd,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,EAC/B,kCAAkC,CACnC,CAAA;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { DAY, MINUTE } from '@atproto/common'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport { ids } from '../../../../lexicon/lexicons'\nimport { httpLogger } from '../../../../logger'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.identity.updateHandle({\n    auth: ctx.authVerifier.authorization({\n      checkTakedown: true,\n      authorize: (permissions) => {\n        permissions.assertIdentity({ attr: 'handle' })\n      },\n    }),\n    rateLimit: [\n      {\n        durationMs: 5 * MINUTE,\n        points: 10,\n        calcKey: ({ auth }) => auth.credentials.did,\n      },\n      {\n        durationMs: DAY,\n        points: 50,\n        calcKey: ({ auth }) => auth.credentials.did,\n      },\n    ],\n    handler: async ({ auth, input, req }) => {\n      const requester = auth.credentials.did\n\n      if (ctx.entrywayAgent) {\n        // the full flow is:\n        // -> entryway(identity.updateHandle) [update handle, submit plc op]\n        // -> pds(admin.updateAccountHandle)  [track handle, sequence handle update]\n        await ctx.entrywayAgent.com.atproto.identity.updateHandle(\n          // @ts-expect-error \"did\" is not in the schema\n          { did: requester, handle: input.body.handle },\n          await ctx.entrywayAuthHeaders(\n            req,\n            auth.credentials.did,\n            ids.ComAtprotoIdentityUpdateHandle,\n          ),\n        )\n        return\n      }\n\n      const handle = await ctx.accountManager.normalizeAndValidateHandle(\n        input.body.handle,\n        { did: requester },\n      )\n\n      // Pessimistic check to handle spam: also enforced by updateHandle() and the db.\n      const account = await ctx.accountManager.getAccount(handle, {\n        includeDeactivated: true,\n      })\n\n      if (!account) {\n        if (requester.startsWith('did:plc:')) {\n          await ctx.plcClient.updateHandle(\n            requester,\n            ctx.plcRotationKey,\n            handle,\n          )\n        } else {\n          const resolved = await ctx.idResolver.did.resolveAtprotoData(\n            requester,\n            true,\n          )\n          if (resolved.handle !== handle) {\n            throw new InvalidRequestError(\n              'DID is not properly configured for handle',\n            )\n          }\n        }\n        await ctx.accountManager.updateHandle(requester, handle)\n      } else {\n        // if we found an account with matching handle, check if it is the same as requester\n        // if so emit an identity event, otherwise error.\n        if (account.did !== requester) {\n          throw new InvalidRequestError(`Handle already taken: ${handle}`)\n        }\n      }\n\n      try {\n        await ctx.sequencer.sequenceIdentityEvt(requester, handle)\n      } catch (err) {\n        httpLogger.error(\n          { err, did: requester, handle },\n          'failed to sequence handle update',\n        )\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"updateHandle.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/updateHandle.ts"],"names":[],"mappings":";;AAMA,4BA0FC;AAhGD,4CAA6C;AAC7C,sDAAkE;AAElE,4DAAmD;AACnD,+CAA+C;AAE/C,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE;QAC5C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;gBACzB,WAAW,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;YAChD,CAAC;SACF,CAAC;QACF,SAAS,EAAE;YACT;gBACE,UAAU,EAAE,CAAC,GAAG,eAAM;gBACtB,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;aAC5C;YACD;gBACE,UAAU,EAAE,YAAG;gBACf,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;aAC5C;SACF;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAEtC,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;gBACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAC/C,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CACvC,CAAA;gBACD,oBAAoB;gBACpB,oEAAoE;gBACpE,4EAA4E;gBAC5E,MAAM,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE;oBAC/D,OAAO;oBACP,IAAI,EAAE;wBACJ,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;wBACzB,8CAA8C;wBAC9C,GAAG,EAAE,SAAS;qBACf;iBACF,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,0BAA0B,CAChE,KAAK,CAAC,IAAI,CAAC,MAAM,EACjB,EAAE,GAAG,EAAE,SAAS,EAAE,CACnB,CAAA;YAED,gFAAgF;YAChF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE;gBAC1D,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAA;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACrC,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAC9B,SAAS,EACT,GAAG,CAAC,cAAc,EAClB,MAAM,CACP,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,kBAAkB,CAC1D,SAAS,EACT,IAAI,CACL,CAAA;oBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC/B,MAAM,IAAI,iCAAmB,CAC3B,2CAA2C,CAC5C,CAAA;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YAC1D,CAAC;iBAAM,CAAC;gBACN,oFAAoF;gBACpF,iDAAiD;gBACjD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBAC9B,MAAM,IAAI,iCAAmB,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAA;gBAClE,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YAC5D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mBAAU,CAAC,KAAK,CACd,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,EAC/B,kCAAkC,CACnC,CAAA;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { DAY, MINUTE } from '@atproto/common'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\nimport { httpLogger } from '../../../../logger'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.identity.updateHandle, {\n    auth: ctx.authVerifier.authorization({\n      checkTakedown: true,\n      authorize: (permissions) => {\n        permissions.assertIdentity({ attr: 'handle' })\n      },\n    }),\n    rateLimit: [\n      {\n        durationMs: 5 * MINUTE,\n        points: 10,\n        calcKey: ({ auth }) => auth.credentials.did,\n      },\n      {\n        durationMs: DAY,\n        points: 50,\n        calcKey: ({ auth }) => auth.credentials.did,\n      },\n    ],\n    handler: async ({ auth, input, req }) => {\n      const requester = auth.credentials.did\n\n      if (ctx.entrywayClient) {\n        const { headers } = await ctx.entrywayAuthHeaders(\n          req,\n          auth.credentials.did,\n          com.atproto.identity.updateHandle.$lxm,\n        )\n        // the full flow is:\n        // -> entryway(identity.updateHandle) [update handle, submit plc op]\n        // -> pds(admin.updateAccountHandle)  [track handle, sequence handle update]\n        await ctx.entrywayClient.xrpc(com.atproto.identity.updateHandle, {\n          headers,\n          body: {\n            handle: input.body.handle,\n            // @ts-expect-error \"did\" is not in the schema\n            did: requester,\n          },\n        })\n        return\n      }\n\n      const handle = await ctx.accountManager.normalizeAndValidateHandle(\n        input.body.handle,\n        { did: requester },\n      )\n\n      // Pessimistic check to handle spam: also enforced by updateHandle() and the db.\n      const account = await ctx.accountManager.getAccount(handle, {\n        includeDeactivated: true,\n      })\n\n      if (!account) {\n        if (requester.startsWith('did:plc:')) {\n          await ctx.plcClient.updateHandle(\n            requester,\n            ctx.plcRotationKey,\n            handle,\n          )\n        } else {\n          const resolved = await ctx.idResolver.did.resolveAtprotoData(\n            requester,\n            true,\n          )\n          if (resolved.handle !== handle) {\n            throw new InvalidRequestError(\n              'DID is not properly configured for handle',\n            )\n          }\n        }\n        await ctx.accountManager.updateHandle(requester, handle)\n      } else {\n        // if we found an account with matching handle, check if it is the same as requester\n        // if so emit an identity event, otherwise error.\n        if (account.did !== requester) {\n          throw new InvalidRequestError(`Handle already taken: ${handle}`)\n        }\n      }\n\n      try {\n        await ctx.sequencer.sequenceIdentityEvt(requester, handle)\n      } catch (err) {\n        httpLogger.error(\n          { err, did: requester, handle },\n          'failed to sequence handle update',\n        )\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/index.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../context';
-import { Server } from '../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=index.d.ts.map

package/dist/api/com/atproto/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/com/atproto/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AASzC,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAQvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/com/atproto/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAS7C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAQvD"}

package/dist/api/com/atproto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/com/atproto/index.ts"],"names":[],"mappings":";;;;;AAUA,4BAQC;AAhBD,oDAA2B;AAC3B,0DAAiC;AACjC,8DAAqC;AACrC,kDAAyB;AACzB,sDAAoC;AACpC,kDAAyB;AACzB,kDAAyB;AAEzB,mBAAyB,MAAc,EAAE,GAAe;IACtD,IAAA,eAAK,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAClB,IAAA,kBAAQ,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrB,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,cAAI,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjB,IAAA,gBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,cAAI,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjB,IAAA,cAAI,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACnB,CAAC","sourcesContent":["import { AppContext } from '../../../context'\nimport { Server } from '../../../lexicon'\nimport admin from './admin'\nimport identity from './identity'\nimport moderation from './moderation'\nimport repo from './repo'\nimport serverMethods from './server'\nimport sync from './sync'\nimport temp from './temp'\n\nexport default function (server: Server, ctx: AppContext) {\n  admin(server, ctx)\n  identity(server, ctx)\n  moderation(server, ctx)\n  repo(server, ctx)\n  serverMethods(server, ctx)\n  sync(server, ctx)\n  temp(server, ctx)\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/com/atproto/index.ts"],"names":[],"mappings":";;;;;AAUA,4BAQC;AAhBD,oDAA2B;AAC3B,0DAAiC;AACjC,8DAAqC;AACrC,kDAAyB;AACzB,sDAAoC;AACpC,kDAAyB;AACzB,kDAAyB;AAEzB,mBAAyB,MAAc,EAAE,GAAe;IACtD,IAAA,eAAK,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAClB,IAAA,kBAAQ,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACrB,IAAA,oBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,cAAI,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjB,IAAA,gBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,cAAI,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjB,IAAA,cAAI,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACnB,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../context'\nimport admin from './admin'\nimport identity from './identity'\nimport moderation from './moderation'\nimport repo from './repo'\nimport serverMethods from './server'\nimport sync from './sync'\nimport temp from './temp'\n\nexport default function (server: Server, ctx: AppContext) {\n  admin(server, ctx)\n  identity(server, ctx)\n  moderation(server, ctx)\n  repo(server, ctx)\n  serverMethods(server, ctx)\n  sync(server, ctx)\n  temp(server, ctx)\n}\n"]}

package/dist/api/com/atproto/moderation/createReport.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=createReport.d.ts.map

package/dist/api/com/atproto/moderation/createReport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createReport.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/moderation/createReport.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAI5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAiCvD"}
+{"version":3,"file":"createReport.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/moderation/createReport.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAiCvD"}

package/dist/api/com/atproto/moderation/createReport.js

@@ -1,32 +1,31 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
-const api_1 = require("@atproto/api");
+const lex_1 = require("@atproto/lex");
 const auth_scope_1 = require("../../../../auth-scope");
-const lexicons_1 = require("../../../../lexicon/lexicons");
+const index_js_1 = require("../../../../lexicons/index.js");
 const pipethrough_1 = require("../../../../pipethrough");
 function default_1(server, ctx) {
-    server.com.atproto.moderation.createReport({
+    server.add(index_js_1.com.atproto.moderation.createReport, {
         auth: ctx.authVerifier.authorization({
             additional: [auth_scope_1.AuthScope.Takendown],
             authorize: (permissions, { req }) => {
-                const lxm = lexicons_1.ids.ComAtprotoModerationCreateReport;
+                const lxm = index_js_1.com.atproto.moderation.createReport.$lxm;
                 const aud = (0, pipethrough_1.computeProxyTo)(ctx, req, lxm);
                 permissions.assertRpc({ aud, lxm });
             },
         }),
-        handler: async ({ auth, input, req }) => {
-            const { url, did: aud } = await (0, pipethrough_1.parseProxyInfo)(ctx, req, lexicons_1.ids.ComAtprotoModerationCreateReport);
-            const agent = new api_1.AtpAgent({ service: url });
-            const serviceAuth = await ctx.serviceAuthHeaders(auth.credentials.did, aud, lexicons_1.ids.ComAtprotoModerationCreateReport);
-            const res = await agent.com.atproto.moderation.createReport(input.body, {
-                ...serviceAuth,
-                encoding: 'application/json',
+        handler: async ({ auth, params, input: { body }, req }) => {
+            const { url, did: aud } = await (0, pipethrough_1.parseProxyInfo)(ctx, req, index_js_1.com.atproto.moderation.createReport.$lxm);
+            const { headers } = await ctx.serviceAuthHeaders(auth.credentials.did, aud, index_js_1.com.atproto.moderation.createReport.$lxm);
+            return (0, lex_1.xrpc)(url, index_js_1.com.atproto.moderation.createReport, {
+                validateRequest: ctx.cfg.service.devMode,
+                validateResponse: ctx.cfg.service.devMode,
+                strictResponseProcessing: ctx.cfg.service.devMode,
+                headers,
+                params,
+                body,
             });
-            return {
-                encoding: 'application/json',
-                body: res.data,
-            };
         },
     });
 }

package/dist/api/com/atproto/moderation/createReport.js.map

@@ -1 +1 @@
-{"version":3,"file":"createReport.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/moderation/createReport.ts"],"names":[],"mappings":";;AAOA,4BAiCC;AAxCD,sCAAuC;AACvC,uDAAkD;AAGlD,2DAAkD;AAClD,yDAAwE;AAExE,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;QACzC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,UAAU,EAAE,CAAC,sBAAS,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAClC,MAAM,GAAG,GAAG,cAAG,CAAC,gCAAgC,CAAA;gBAChD,MAAM,GAAG,GAAG,IAAA,4BAAc,EAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;gBACzC,WAAW,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;YACrC,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACtC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAA,4BAAc,EAC5C,GAAG,EACH,GAAG,EACH,cAAG,CAAC,gCAAgC,CACrC,CAAA;YACD,MAAM,KAAK,GAAG,IAAI,cAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;YAC5C,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAC9C,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,GAAG,EACH,cAAG,CAAC,gCAAgC,CACrC,CAAA;YACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE;gBACtE,GAAG,WAAW;gBACd,QAAQ,EAAE,kBAAkB;aAC7B,CAAC,CAAA;YAEF,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,GAAG,CAAC,IAAI;aACf,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { AtpAgent } from '@atproto/api'\nimport { AuthScope } from '../../../../auth-scope'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport { ids } from '../../../../lexicon/lexicons'\nimport { computeProxyTo, parseProxyInfo } from '../../../../pipethrough'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.moderation.createReport({\n    auth: ctx.authVerifier.authorization({\n      additional: [AuthScope.Takendown],\n      authorize: (permissions, { req }) => {\n        const lxm = ids.ComAtprotoModerationCreateReport\n        const aud = computeProxyTo(ctx, req, lxm)\n        permissions.assertRpc({ aud, lxm })\n      },\n    }),\n    handler: async ({ auth, input, req }) => {\n      const { url, did: aud } = await parseProxyInfo(\n        ctx,\n        req,\n        ids.ComAtprotoModerationCreateReport,\n      )\n      const agent = new AtpAgent({ service: url })\n      const serviceAuth = await ctx.serviceAuthHeaders(\n        auth.credentials.did,\n        aud,\n        ids.ComAtprotoModerationCreateReport,\n      )\n      const res = await agent.com.atproto.moderation.createReport(input.body, {\n        ...serviceAuth,\n        encoding: 'application/json',\n      })\n\n      return {\n        encoding: 'application/json',\n        body: res.data,\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"createReport.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/moderation/createReport.ts"],"names":[],"mappings":";;AAOA,4BAiCC;AAxCD,sCAAmC;AAEnC,uDAAkD;AAElD,4DAAmD;AACnD,yDAAwE;AAExE,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE;QAC9C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,UAAU,EAAE,CAAC,sBAAS,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAClC,MAAM,GAAG,GAAG,cAAG,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAA;gBACpD,MAAM,GAAG,GAAG,IAAA,4BAAc,EAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;gBACzC,WAAW,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;YACrC,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACxD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAA,4BAAc,EAC5C,GAAG,EACH,GAAG,EACH,cAAG,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CACzC,CAAA;YAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAC9C,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,GAAG,EACH,cAAG,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CACzC,CAAA;YAED,OAAO,IAAA,UAAI,EAAC,GAAG,EAAE,cAAG,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE;gBACpD,eAAe,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO;gBACxC,gBAAgB,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO;gBACzC,wBAAwB,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO;gBACjD,OAAO;gBACP,MAAM;gBACN,IAAI;aACL,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { xrpc } from '@atproto/lex'\nimport { Server } from '@atproto/xrpc-server'\nimport { AuthScope } from '../../../../auth-scope'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\nimport { computeProxyTo, parseProxyInfo } from '../../../../pipethrough'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.moderation.createReport, {\n    auth: ctx.authVerifier.authorization({\n      additional: [AuthScope.Takendown],\n      authorize: (permissions, { req }) => {\n        const lxm = com.atproto.moderation.createReport.$lxm\n        const aud = computeProxyTo(ctx, req, lxm)\n        permissions.assertRpc({ aud, lxm })\n      },\n    }),\n    handler: async ({ auth, params, input: { body }, req }) => {\n      const { url, did: aud } = await parseProxyInfo(\n        ctx,\n        req,\n        com.atproto.moderation.createReport.$lxm,\n      )\n\n      const { headers } = await ctx.serviceAuthHeaders(\n        auth.credentials.did,\n        aud,\n        com.atproto.moderation.createReport.$lxm,\n      )\n\n      return xrpc(url, com.atproto.moderation.createReport, {\n        validateRequest: ctx.cfg.service.devMode,\n        validateResponse: ctx.cfg.service.devMode,\n        strictResponseProcessing: ctx.cfg.service.devMode,\n        headers,\n        params,\n        body,\n      })\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/moderation/index.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=index.d.ts.map

package/dist/api/com/atproto/moderation/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/moderation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAG5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAEvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/moderation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAEvD"}

package/dist/api/com/atproto/moderation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/moderation/index.ts"],"names":[],"mappings":";;;;;AAIA,4BAEC;AAJD,kEAAyC;AAEzC,mBAAyB,MAAc,EAAE,GAAe;IACtD,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAC3B,CAAC","sourcesContent":["import { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport createReport from './createReport'\n\nexport default function (server: Server, ctx: AppContext) {\n  createReport(server, ctx)\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/moderation/index.ts"],"names":[],"mappings":";;;;;AAIA,4BAEC;AAJD,kEAAyC;AAEzC,mBAAyB,MAAc,EAAE,GAAe;IACtD,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAC3B,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport createReport from './createReport'\n\nexport default function (server: Server, ctx: AppContext) {\n  createReport(server, ctx)\n}\n"]}

package/dist/api/com/atproto/repo/applyWrites.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=applyWrites.d.ts.map

package/dist/api/com/atproto/repo/applyWrites.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"applyWrites.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/repo/applyWrites.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAkC5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA4IvD"}
+{"version":3,"file":"applyWrites.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/repo/applyWrites.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,MAAM,EACP,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AA8BhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAmKvD"}

package/dist/api/com/atproto/repo/applyWrites.js

@@ -1,19 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
-const cid_1 = require("multiformats/cid");
+const lex_data_1 = require("@atproto/lex-data");
 const repo_1 = require("@atproto/repo");
 const xrpc_server_1 = require("@atproto/xrpc-server");
-const applyWrites_1 = require("../../../../lexicon/types/com/atproto/repo/applyWrites");
+const index_js_1 = require("../../../../lexicons/index.js");
 const logger_1 = require("../../../../logger");
 const repo_2 = require("../../../../repo");
-const ratelimitPoints = ({ input }) => {
+const ratelimitPoints = ({ input, }) => {
     let points = 0;
     for (const op of input.body.writes) {
-        if ((0, applyWrites_1.isCreate)(op)) {
+        if (index_js_1.com.atproto.repo.applyWrites.create.$isTypeOf(op)) {
             points += 3;
         }
-        else if ((0, applyWrites_1.isUpdate)(op)) {
+        else if (index_js_1.com.atproto.repo.applyWrites.update.$isTypeOf(op)) {
             points += 2;
         }
         else {
@@ -23,7 +23,7 @@ const ratelimitPoints = ({ input }) => {
     return points;
 };
 function default_1(server, ctx) {
-    server.com.atproto.repo.applyWrites({
+    server.add(index_js_1.com.atproto.repo.applyWrites, {
         auth: ctx.authVerifier.authorization({
             // @NOTE the "checkTakedown" and "checkDeactivated" checks are typically
             // performed during auth. However, since this method's "repo" parameter
@@ -66,9 +66,24 @@ function default_1(server, ctx) {
             if (auth.credentials.type === 'oauth') {
                 // @NOTE Unlike "importRepo", we do not require "action" = "*" here.
                 for (const [action, collections] of [
-                    ['create', new Set(writes.filter(applyWrites_1.isCreate).map((w) => w.collection))],
-                    ['update', new Set(writes.filter(applyWrites_1.isUpdate).map((w) => w.collection))],
-                    ['delete', new Set(writes.filter(applyWrites_1.isDelete).map((w) => w.collection))],
+                    [
+                        'create',
+                        new Set(writes
+                            .filter((v) => index_js_1.com.atproto.repo.applyWrites.create.$isTypeOf(v))
+                            .map((w) => w.collection)),
+                    ],
+                    [
+                        'update',
+                        new Set(writes
+                            .filter((v) => index_js_1.com.atproto.repo.applyWrites.update.$isTypeOf(v))
+                            .map((w) => w.collection)),
+                    ],
+                    [
+                        'delete',
+                        new Set(writes
+                            .filter((v) => index_js_1.com.atproto.repo.applyWrites.delete.$isTypeOf(v))
+                            .map((w) => w.collection)),
+                    ],
                 ]) {
                     for (const collection of collections) {
                         auth.credentials.permissions.assertRepo({ action, collection });
@@ -78,26 +93,28 @@ function default_1(server, ctx) {
             // @NOTE should preserve order of ts.writes for final use in response
             let preparedWrites;
             try {
-                preparedWrites = await Promise.all(writes.map(async (write) => {
-                    if ((0, applyWrites_1.isCreate)(write)) {
+                preparedWrites = await Promise.all(writes.map(async (write, i) => {
+                    if (index_js_1.com.atproto.repo.applyWrites.create.$isTypeOf(write)) {
                         return (0, repo_2.prepareCreate)({
                             did,
                             collection: write.collection,
                             record: write.value,
                             rkey: write.rkey,
                             validate,
+                            validationPath: ['writes', i, 'record'],
                         });
                     }
-                    else if ((0, applyWrites_1.isUpdate)(write)) {
+                    else if (index_js_1.com.atproto.repo.applyWrites.update.$isTypeOf(write)) {
                         return (0, repo_2.prepareUpdate)({
                             did,
                             collection: write.collection,
                             record: write.value,
                             rkey: write.rkey,
                             validate,
+                            validationPath: ['writes', i, 'record'],
                         });
                     }
-                    else if ((0, applyWrites_1.isDelete)(write)) {
+                    else if (index_js_1.com.atproto.repo.applyWrites.delete.$isTypeOf(write)) {
                         return (0, repo_2.prepareDelete)({
                             did,
                             collection: write.collection,
@@ -115,7 +132,7 @@ function default_1(server, ctx) {
                 }
                 throw err;
             }
-            const swapCommitCid = swapCommit ? cid_1.CID.parse(swapCommit) : undefined;
+            const swapCommitCid = swapCommit ? (0, lex_data_1.parseCid)(swapCommit) : undefined;
             const commit = await ctx.actorStore.transact(did, async (actorTxn) => {
                 const commit = await actorTxn.repo
                     .processWrites(preparedWrites, swapCommitCid)
@@ -151,23 +168,19 @@ function default_1(server, ctx) {
 const writeToOutputResult = (write) => {
     switch (write.action) {
         case repo_1.WriteOpAction.Create:
-            return {
-                $type: 'com.atproto.repo.applyWrites#createResult',
+            return index_js_1.com.atproto.repo.applyWrites.createResult.$build({
                 cid: write.cid.toString(),
                 uri: write.uri.toString(),
                 validationStatus: write.validationStatus,
-            };
+            });
         case repo_1.WriteOpAction.Update:
-            return {
-                $type: 'com.atproto.repo.applyWrites#updateResult',
+            return index_js_1.com.atproto.repo.applyWrites.updateResult.$build({
                 cid: write.cid.toString(),
                 uri: write.uri.toString(),
                 validationStatus: write.validationStatus,
-            };
+            });
         case repo_1.WriteOpAction.Delete:
-            return {
-                $type: 'com.atproto.repo.applyWrites#deleteResult',
-            };
+            return index_js_1.com.atproto.repo.applyWrites.deleteResult.$build({});
         default:
             throw new Error(`Unrecognized action: ${write}`);
     }

package/dist/api/com/atproto/repo/applyWrites.js.map

@@ -1 +1 @@
-{"version":3,"file":"applyWrites.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/repo/applyWrites.ts"],"names":[],"mappings":";;AAsCA,4BA4IC;AAlLD,0CAAsC;AACtC,wCAA6C;AAC7C,sDAA6E;AAG7E,wFAQ+D;AAC/D,+CAA6C;AAC7C,2CAOyB;AAEzB,MAAM,eAAe,GAAG,CAAC,EAAE,KAAK,EAA2B,EAAE,EAAE;IAC7D,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,IAAA,sBAAQ,EAAC,EAAE,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,CAAA;QACb,CAAC;aAAM,IAAI,IAAA,sBAAQ,EAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,CAAA;QACb,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;QAClC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,wEAAwE;YACxE,uEAAuE;YACvE,0EAA0E;YAC1E,yEAAyE;YACzE,uEAAuE;YACvE,6CAA6C;YAE7C,uBAAuB;YACvB,0BAA0B;YAC1B,SAAS,EAAE,GAAG,EAAE;gBACd,8DAA8D;YAChE,CAAC;SACF,CAAC;QAEF,SAAS,EAAE;YACT;gBACE,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;gBAC3C,UAAU,EAAE,eAAe;aAC5B;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;gBAC3C,UAAU,EAAE,eAAe;aAC5B;SACF;QAED,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;YACjC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YAEzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,EAAE;gBACvD,gBAAgB,EAAE,IAAI;gBACtB,aAAa,EAAE,IAAI;aACpB,CAAC,CAAA;YAEF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;YACvB,IAAI,GAAG,KAAK,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;gBACjC,MAAM,IAAI,+BAAiB,EAAE,CAAA;YAC/B,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACxB,MAAM,IAAI,iCAAmB,CAAC,2BAA2B,CAAC,CAAA;YAC5D,CAAC;YAED,iEAAiE;YACjE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACtC,oEAAoE;gBACpE,KAAK,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI;oBAClC,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;oBACrE,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;oBACrE,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;iBAC7D,EAAE,CAAC;oBACX,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;wBACrC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;oBACjE,CAAC;gBACH,CAAC;YACH,CAAC;YAED,qEAAqE;YACrE,IAAI,cAA+B,CAAA;YACnC,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;oBACzB,IAAI,IAAA,sBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;wBACpB,OAAO,IAAA,oBAAa,EAAC;4BACnB,GAAG;4BACH,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,MAAM,EAAE,KAAK,CAAC,KAAK;4BACnB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,QAAQ;yBACT,CAAC,CAAA;oBACJ,CAAC;yBAAM,IAAI,IAAA,sBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;wBAC3B,OAAO,IAAA,oBAAa,EAAC;4BACnB,GAAG;4BACH,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,MAAM,EAAE,KAAK,CAAC,KAAK;4BACnB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,QAAQ;yBACT,CAAC,CAAA;oBACJ,CAAC;yBAAM,IAAI,IAAA,sBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;wBAC3B,OAAO,IAAA,oBAAa,EAAC;4BACnB,GAAG;4BACH,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;yBACjB,CAAC,CAAA;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,iCAAmB,CAC3B,yBAAyB,KAAK,CAAC,OAAO,CAAC,EAAE,CAC1C,CAAA;oBACH,CAAC;gBACH,CAAC,CAAC,CACH,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,yBAAkB,EAAE,CAAC;oBACtC,MAAM,IAAI,iCAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;gBAC5C,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;YAED,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,SAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAEpE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBACnE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI;qBAC/B,aAAa,CAAC,cAAc,EAAE,aAAa,CAAC;qBAC5C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACb,IAAI,GAAG,YAAY,yBAAkB,EAAE,CAAC;wBACtC,MAAM,IAAI,iCAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;oBAC3D,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAA;oBACX,CAAC;gBACH,CAAC,CAAC,CAAA;gBAEJ,MAAM,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;gBAC/C,OAAO,MAAM,CAAA;YACf,CAAC,CAAC,CAAA;YAEF,MAAM,GAAG,CAAC,cAAc;iBACrB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;iBAC3C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,iBAAQ,CAAC,KAAK,CACZ,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EAC9C,+BAA+B,CAChC,CAAA;YACH,CAAC,CAAC,CAAA;YAEJ,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;wBAC1B,GAAG,EAAE,MAAM,CAAC,GAAG;qBAChB;oBACD,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC;iBACjD;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,KAAoB,EAAE,EAAE;IACnD,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,oBAAa,CAAC,MAAM;YACvB,OAAO;gBACL,KAAK,EAAE,2CAA2C;gBAClD,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACzB,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACzB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aAClB,CAAA;QAC1B,KAAK,oBAAa,CAAC,MAAM;YACvB,OAAO;gBACL,KAAK,EAAE,2CAA2C;gBAClD,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACzB,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACzB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aAClB,CAAA;QAC1B,KAAK,oBAAa,CAAC,MAAM;YACvB,OAAO;gBACL,KAAK,EAAE,2CAA2C;aAC5B,CAAA;QAC1B;YACE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAA;IACpD,CAAC;AACH,CAAC,CAAA","sourcesContent":["import { CID } from 'multiformats/cid'\nimport { WriteOpAction } from '@atproto/repo'\nimport { AuthRequiredError, InvalidRequestError } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport {\n  CreateResult,\n  DeleteResult,\n  HandlerInput,\n  UpdateResult,\n  isCreate,\n  isDelete,\n  isUpdate,\n} from '../../../../lexicon/types/com/atproto/repo/applyWrites'\nimport { dbLogger } from '../../../../logger'\nimport {\n  BadCommitSwapError,\n  InvalidRecordError,\n  PreparedWrite,\n  prepareCreate,\n  prepareDelete,\n  prepareUpdate,\n} from '../../../../repo'\n\nconst ratelimitPoints = ({ input }: { input: HandlerInput }) => {\n  let points = 0\n  for (const op of input.body.writes) {\n    if (isCreate(op)) {\n      points += 3\n    } else if (isUpdate(op)) {\n      points += 2\n    } else {\n      points += 1\n    }\n  }\n  return points\n}\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.repo.applyWrites({\n    auth: ctx.authVerifier.authorization({\n      // @NOTE the \"checkTakedown\" and \"checkDeactivated\" checks are typically\n      // performed during auth. However, since this method's \"repo\" parameter\n      // can be a handle, we will need to fetch the account again to ensure that\n      // the handle matches the DID from the request's credentials. In order to\n      // avoid fetching the account twice (during auth, and then again in the\n      // controller), the checks are disabled here:\n\n      // checkTakedown: true,\n      // checkDeactivated: true,\n      authorize: () => {\n        // Performed in the handler as it is based on the request body\n      },\n    }),\n\n    rateLimit: [\n      {\n        name: 'repo-write-hour',\n        calcKey: ({ auth }) => auth.credentials.did,\n        calcPoints: ratelimitPoints,\n      },\n      {\n        name: 'repo-write-day',\n        calcKey: ({ auth }) => auth.credentials.did,\n        calcPoints: ratelimitPoints,\n      },\n    ],\n\n    handler: async ({ input, auth }) => {\n      const { repo, validate, swapCommit, writes } = input.body\n\n      const account = await ctx.authVerifier.findAccount(repo, {\n        checkDeactivated: true,\n        checkTakedown: true,\n      })\n\n      const did = account.did\n      if (did !== auth.credentials.did) {\n        throw new AuthRequiredError()\n      }\n\n      if (writes.length > 200) {\n        throw new InvalidRequestError('Too many writes. Max: 200')\n      }\n\n      // Verify permission of every unique \"action\" / \"collection\" pair\n      if (auth.credentials.type === 'oauth') {\n        // @NOTE Unlike \"importRepo\", we do not require \"action\" = \"*\" here.\n        for (const [action, collections] of [\n          ['create', new Set(writes.filter(isCreate).map((w) => w.collection))],\n          ['update', new Set(writes.filter(isUpdate).map((w) => w.collection))],\n          ['delete', new Set(writes.filter(isDelete).map((w) => w.collection))],\n        ] as const) {\n          for (const collection of collections) {\n            auth.credentials.permissions.assertRepo({ action, collection })\n          }\n        }\n      }\n\n      // @NOTE should preserve order of ts.writes for final use in response\n      let preparedWrites: PreparedWrite[]\n      try {\n        preparedWrites = await Promise.all(\n          writes.map(async (write) => {\n            if (isCreate(write)) {\n              return prepareCreate({\n                did,\n                collection: write.collection,\n                record: write.value,\n                rkey: write.rkey,\n                validate,\n              })\n            } else if (isUpdate(write)) {\n              return prepareUpdate({\n                did,\n                collection: write.collection,\n                record: write.value,\n                rkey: write.rkey,\n                validate,\n              })\n            } else if (isDelete(write)) {\n              return prepareDelete({\n                did,\n                collection: write.collection,\n                rkey: write.rkey,\n              })\n            } else {\n              throw new InvalidRequestError(\n                `Action not supported: ${write['$type']}`,\n              )\n            }\n          }),\n        )\n      } catch (err) {\n        if (err instanceof InvalidRecordError) {\n          throw new InvalidRequestError(err.message)\n        }\n        throw err\n      }\n\n      const swapCommitCid = swapCommit ? CID.parse(swapCommit) : undefined\n\n      const commit = await ctx.actorStore.transact(did, async (actorTxn) => {\n        const commit = await actorTxn.repo\n          .processWrites(preparedWrites, swapCommitCid)\n          .catch((err) => {\n            if (err instanceof BadCommitSwapError) {\n              throw new InvalidRequestError(err.message, 'InvalidSwap')\n            } else {\n              throw err\n            }\n          })\n\n        await ctx.sequencer.sequenceCommit(did, commit)\n        return commit\n      })\n\n      await ctx.accountManager\n        .updateRepoRoot(did, commit.cid, commit.rev)\n        .catch((err) => {\n          dbLogger.error(\n            { err, did, cid: commit.cid, rev: commit.rev },\n            'failed to update account root',\n          )\n        })\n\n      return {\n        encoding: 'application/json',\n        body: {\n          commit: {\n            cid: commit.cid.toString(),\n            rev: commit.rev,\n          },\n          results: preparedWrites.map(writeToOutputResult),\n        },\n      }\n    },\n  })\n}\n\nconst writeToOutputResult = (write: PreparedWrite) => {\n  switch (write.action) {\n    case WriteOpAction.Create:\n      return {\n        $type: 'com.atproto.repo.applyWrites#createResult',\n        cid: write.cid.toString(),\n        uri: write.uri.toString(),\n        validationStatus: write.validationStatus,\n      } satisfies CreateResult\n    case WriteOpAction.Update:\n      return {\n        $type: 'com.atproto.repo.applyWrites#updateResult',\n        cid: write.cid.toString(),\n        uri: write.uri.toString(),\n        validationStatus: write.validationStatus,\n      } satisfies UpdateResult\n    case WriteOpAction.Delete:\n      return {\n        $type: 'com.atproto.repo.applyWrites#deleteResult',\n      } satisfies DeleteResult\n    default:\n      throw new Error(`Unrecognized action: ${write}`)\n  }\n}\n"]}
+{"version":3,"file":"applyWrites.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/repo/applyWrites.ts"],"names":[],"mappings":";;AAqCA,4BAmKC;AAxMD,gDAA4C;AAC5C,wCAA6C;AAC7C,sDAI6B;AAE7B,4DAAmD;AACnD,+CAA6C;AAC7C,2CAOyB;AAEzB,MAAM,eAAe,GAAG,CAAC,EACvB,KAAK,GAGN,EAAE,EAAE;IACH,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,CAAC,CAAA;QACb,CAAC;aAAM,IAAI,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,CAAC,CAAA;QACb,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;QACvC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,wEAAwE;YACxE,uEAAuE;YACvE,0EAA0E;YAC1E,yEAAyE;YACzE,uEAAuE;YACvE,6CAA6C;YAE7C,uBAAuB;YACvB,0BAA0B;YAC1B,SAAS,EAAE,GAAG,EAAE;gBACd,8DAA8D;YAChE,CAAC;SACF,CAAC;QAEF,SAAS,EAAE;YACT;gBACE,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;gBAC3C,UAAU,EAAE,eAAe;aAC5B;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;gBAC3C,UAAU,EAAE,eAAe;aAC5B;SACF;QAED,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;YACjC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YAEzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,EAAE;gBACvD,gBAAgB,EAAE,IAAI;gBACtB,aAAa,EAAE,IAAI;aACpB,CAAC,CAAA;YAEF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;YACvB,IAAI,GAAG,KAAK,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;gBACjC,MAAM,IAAI,+BAAiB,EAAE,CAAA;YAC/B,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACxB,MAAM,IAAI,iCAAmB,CAAC,2BAA2B,CAAC,CAAA;YAC5D,CAAC;YAED,iEAAiE;YACjE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACtC,oEAAoE;gBACpE,KAAK,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI;oBAClC;wBACE,QAAQ;wBACR,IAAI,GAAG,CACL,MAAM;6BACH,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;6BAC/D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAC5B;qBACF;oBACD;wBACE,QAAQ;wBACR,IAAI,GAAG,CACL,MAAM;6BACH,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;6BAC/D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAC5B;qBACF;oBACD;wBACE,QAAQ;wBACR,IAAI,GAAG,CACL,MAAM;6BACH,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;6BAC/D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAC5B;qBACF;iBACO,EAAE,CAAC;oBACX,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;wBACrC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;oBACjE,CAAC;gBACH,CAAC;YACH,CAAC;YAED,qEAAqE;YACrE,IAAI,cAA+B,CAAA;YACnC,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;oBAC5B,IAAI,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;wBACzD,OAAO,IAAA,oBAAa,EAAC;4BACnB,GAAG;4BACH,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,MAAM,EAAE,KAAK,CAAC,KAAK;4BACnB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,QAAQ;4BACR,cAAc,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,CAAC;yBACxC,CAAC,CAAA;oBACJ,CAAC;yBAAM,IAAI,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;wBAChE,OAAO,IAAA,oBAAa,EAAC;4BACnB,GAAG;4BACH,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,MAAM,EAAE,KAAK,CAAC,KAAK;4BACnB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,QAAQ;4BACR,cAAc,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,CAAC;yBACxC,CAAC,CAAA;oBACJ,CAAC;yBAAM,IAAI,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;wBAChE,OAAO,IAAA,oBAAa,EAAC;4BACnB,GAAG;4BACH,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;yBACjB,CAAC,CAAA;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,iCAAmB,CAC3B,yBAAyB,KAAK,CAAC,OAAO,CAAC,EAAE,CAC1C,CAAA;oBACH,CAAC;gBACH,CAAC,CAAC,CACH,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,yBAAkB,EAAE,CAAC;oBACtC,MAAM,IAAI,iCAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;gBAC5C,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;YAED,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,IAAA,mBAAQ,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAEnE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBACnE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI;qBAC/B,aAAa,CAAC,cAAc,EAAE,aAAa,CAAC;qBAC5C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACb,IAAI,GAAG,YAAY,yBAAkB,EAAE,CAAC;wBACtC,MAAM,IAAI,iCAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;oBAC3D,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAA;oBACX,CAAC;gBACH,CAAC,CAAC,CAAA;gBAEJ,MAAM,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;gBAC/C,OAAO,MAAM,CAAA;YACf,CAAC,CAAC,CAAA;YAEF,MAAM,GAAG,CAAC,cAAc;iBACrB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;iBAC3C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,iBAAQ,CAAC,KAAK,CACZ,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EAC9C,+BAA+B,CAChC,CAAA;YACH,CAAC,CAAC,CAAA;YAEJ,OAAO;gBACL,QAAQ,EAAE,kBAA2B;gBACrC,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;wBAC1B,GAAG,EAAE,MAAM,CAAC,GAAG;qBAChB;oBACD,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC;iBACjD;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,KAAoB,EAAE,EAAE;IACnD,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,oBAAa,CAAC,MAAM;YACvB,OAAO,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC;gBACtD,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACzB,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACzB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,CAAC,CAAA;QACJ,KAAK,oBAAa,CAAC,MAAM;YACvB,OAAO,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC;gBACtD,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACzB,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACzB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,CAAC,CAAA;QACJ,KAAK,oBAAa,CAAC,MAAM;YACvB,OAAO,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC7D;YACE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAA;IACpD,CAAC;AACH,CAAC,CAAA","sourcesContent":["import { parseCid } from '@atproto/lex-data'\nimport { WriteOpAction } from '@atproto/repo'\nimport {\n  AuthRequiredError,\n  InvalidRequestError,\n  Server,\n} from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\nimport { dbLogger } from '../../../../logger'\nimport {\n  BadCommitSwapError,\n  InvalidRecordError,\n  PreparedWrite,\n  prepareCreate,\n  prepareDelete,\n  prepareUpdate,\n} from '../../../../repo'\n\nconst ratelimitPoints = ({\n  input,\n}: {\n  input: com.atproto.repo.applyWrites.$Input\n}) => {\n  let points = 0\n  for (const op of input.body.writes) {\n    if (com.atproto.repo.applyWrites.create.$isTypeOf(op)) {\n      points += 3\n    } else if (com.atproto.repo.applyWrites.update.$isTypeOf(op)) {\n      points += 2\n    } else {\n      points += 1\n    }\n  }\n  return points\n}\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.repo.applyWrites, {\n    auth: ctx.authVerifier.authorization({\n      // @NOTE the \"checkTakedown\" and \"checkDeactivated\" checks are typically\n      // performed during auth. However, since this method's \"repo\" parameter\n      // can be a handle, we will need to fetch the account again to ensure that\n      // the handle matches the DID from the request's credentials. In order to\n      // avoid fetching the account twice (during auth, and then again in the\n      // controller), the checks are disabled here:\n\n      // checkTakedown: true,\n      // checkDeactivated: true,\n      authorize: () => {\n        // Performed in the handler as it is based on the request body\n      },\n    }),\n\n    rateLimit: [\n      {\n        name: 'repo-write-hour',\n        calcKey: ({ auth }) => auth.credentials.did,\n        calcPoints: ratelimitPoints,\n      },\n      {\n        name: 'repo-write-day',\n        calcKey: ({ auth }) => auth.credentials.did,\n        calcPoints: ratelimitPoints,\n      },\n    ],\n\n    handler: async ({ input, auth }) => {\n      const { repo, validate, swapCommit, writes } = input.body\n\n      const account = await ctx.authVerifier.findAccount(repo, {\n        checkDeactivated: true,\n        checkTakedown: true,\n      })\n\n      const did = account.did\n      if (did !== auth.credentials.did) {\n        throw new AuthRequiredError()\n      }\n\n      if (writes.length > 200) {\n        throw new InvalidRequestError('Too many writes. Max: 200')\n      }\n\n      // Verify permission of every unique \"action\" / \"collection\" pair\n      if (auth.credentials.type === 'oauth') {\n        // @NOTE Unlike \"importRepo\", we do not require \"action\" = \"*\" here.\n        for (const [action, collections] of [\n          [\n            'create',\n            new Set(\n              writes\n                .filter((v) => com.atproto.repo.applyWrites.create.$isTypeOf(v))\n                .map((w) => w.collection),\n            ),\n          ],\n          [\n            'update',\n            new Set(\n              writes\n                .filter((v) => com.atproto.repo.applyWrites.update.$isTypeOf(v))\n                .map((w) => w.collection),\n            ),\n          ],\n          [\n            'delete',\n            new Set(\n              writes\n                .filter((v) => com.atproto.repo.applyWrites.delete.$isTypeOf(v))\n                .map((w) => w.collection),\n            ),\n          ],\n        ] as const) {\n          for (const collection of collections) {\n            auth.credentials.permissions.assertRepo({ action, collection })\n          }\n        }\n      }\n\n      // @NOTE should preserve order of ts.writes for final use in response\n      let preparedWrites: PreparedWrite[]\n      try {\n        preparedWrites = await Promise.all(\n          writes.map(async (write, i) => {\n            if (com.atproto.repo.applyWrites.create.$isTypeOf(write)) {\n              return prepareCreate({\n                did,\n                collection: write.collection,\n                record: write.value,\n                rkey: write.rkey,\n                validate,\n                validationPath: ['writes', i, 'record'],\n              })\n            } else if (com.atproto.repo.applyWrites.update.$isTypeOf(write)) {\n              return prepareUpdate({\n                did,\n                collection: write.collection,\n                record: write.value,\n                rkey: write.rkey,\n                validate,\n                validationPath: ['writes', i, 'record'],\n              })\n            } else if (com.atproto.repo.applyWrites.delete.$isTypeOf(write)) {\n              return prepareDelete({\n                did,\n                collection: write.collection,\n                rkey: write.rkey,\n              })\n            } else {\n              throw new InvalidRequestError(\n                `Action not supported: ${write['$type']}`,\n              )\n            }\n          }),\n        )\n      } catch (err) {\n        if (err instanceof InvalidRecordError) {\n          throw new InvalidRequestError(err.message)\n        }\n        throw err\n      }\n\n      const swapCommitCid = swapCommit ? parseCid(swapCommit) : undefined\n\n      const commit = await ctx.actorStore.transact(did, async (actorTxn) => {\n        const commit = await actorTxn.repo\n          .processWrites(preparedWrites, swapCommitCid)\n          .catch((err) => {\n            if (err instanceof BadCommitSwapError) {\n              throw new InvalidRequestError(err.message, 'InvalidSwap')\n            } else {\n              throw err\n            }\n          })\n\n        await ctx.sequencer.sequenceCommit(did, commit)\n        return commit\n      })\n\n      await ctx.accountManager\n        .updateRepoRoot(did, commit.cid, commit.rev)\n        .catch((err) => {\n          dbLogger.error(\n            { err, did, cid: commit.cid, rev: commit.rev },\n            'failed to update account root',\n          )\n        })\n\n      return {\n        encoding: 'application/json' as const,\n        body: {\n          commit: {\n            cid: commit.cid.toString(),\n            rev: commit.rev,\n          },\n          results: preparedWrites.map(writeToOutputResult),\n        },\n      }\n    },\n  })\n}\n\nconst writeToOutputResult = (write: PreparedWrite) => {\n  switch (write.action) {\n    case WriteOpAction.Create:\n      return com.atproto.repo.applyWrites.createResult.$build({\n        cid: write.cid.toString(),\n        uri: write.uri.toString(),\n        validationStatus: write.validationStatus,\n      })\n    case WriteOpAction.Update:\n      return com.atproto.repo.applyWrites.updateResult.$build({\n        cid: write.cid.toString(),\n        uri: write.uri.toString(),\n        validationStatus: write.validationStatus,\n      })\n    case WriteOpAction.Delete:\n      return com.atproto.repo.applyWrites.deleteResult.$build({})\n    default:\n      throw new Error(`Unrecognized action: ${write}`)\n  }\n}\n"]}