@atproto/pds 0.4.215 → 0.4.217

package/dist/api/com/atproto/server/requestEmailUpdate.js

@@ -3,10 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
 const common_1 = require("@atproto/common");
 const xrpc_server_1 = require("@atproto/xrpc-server");
-const lexicons_1 = require("../../../../lexicon/lexicons");
-const proxy_1 = require("../../../proxy");
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.server.requestEmailUpdate({
+    const { entrywayClient } = ctx;
+    server.add(index_js_1.com.atproto.server.requestEmailUpdate, {
         rateLimit: [
             {
                 durationMs: common_1.DAY,
@@ -34,8 +34,11 @@ function default_1(server, ctx) {
             if (!account) {
                 throw new xrpc_server_1.InvalidRequestError('account not found');
             }
-            if (ctx.entrywayAgent) {
-                return (0, proxy_1.resultPassthru)(await ctx.entrywayAgent.com.atproto.server.requestEmailUpdate(undefined, await ctx.entrywayAuthHeaders(req, auth.credentials.did, lexicons_1.ids.ComAtprotoServerRequestEmailUpdate)));
+            if (entrywayClient) {
+                const { headers } = await ctx.entrywayAuthHeaders(req, auth.credentials.did, index_js_1.com.atproto.server.requestEmailUpdate.$lxm);
+                return entrywayClient.xrpc(index_js_1.com.atproto.server.requestEmailUpdate, {
+                    headers,
+                });
             }
             if (!account.email) {
                 throw new xrpc_server_1.InvalidRequestError('account does not have an email address');

package/dist/api/com/atproto/server/requestEmailUpdate.js.map

@@ -1 +1 @@
-{"version":3,"file":"requestEmailUpdate.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/requestEmailUpdate.ts"],"names":[],"mappings":";;AAOA,4BAgEC;AAvED,4CAA2C;AAC3C,sDAA0D;AAG1D,2DAAkD;AAClD,0CAA+C;AAE/C,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC3C,SAAS,EAAE;YACT;gBACE,UAAU,EAAE,YAAG;gBACf,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;aAC5C;YACD;gBACE,UAAU,EAAE,aAAI;gBAChB,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;aAC5C;SACF;QACD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;gBACzB,WAAW,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;YAChE,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAChC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE;gBACvD,kBAAkB,EAAE,IAAI;gBACxB,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAA;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,iCAAmB,CAAC,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,OAAO,IAAA,sBAAc,EACnB,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAC3D,SAAS,EACT,MAAM,GAAG,CAAC,mBAAmB,CAC3B,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,kCAAkC,CACvC,CACF,CACF,CAAA;YACH,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,IAAI,iCAAmB,CAAC,wCAAwC,CAAC,CAAA;YACzE,CAAC;YAED,MAAM,aAAa,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAA;YAChD,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,gBAAgB,CACrD,GAAG,EACH,cAAc,CACf,CAAA;gBACD,MAAM,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;YACpE,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,aAAa;iBACd;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { DAY, HOUR } from '@atproto/common'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport { ids } from '../../../../lexicon/lexicons'\nimport { resultPassthru } from '../../../proxy'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.server.requestEmailUpdate({\n    rateLimit: [\n      {\n        durationMs: DAY,\n        points: 15,\n        calcKey: ({ auth }) => auth.credentials.did,\n      },\n      {\n        durationMs: HOUR,\n        points: 5,\n        calcKey: ({ auth }) => auth.credentials.did,\n      },\n    ],\n    auth: ctx.authVerifier.authorization({\n      checkTakedown: true,\n      authorize: (permissions) => {\n        permissions.assertAccount({ attr: 'email', action: 'manage' })\n      },\n    }),\n    handler: async ({ auth, req }) => {\n      const did = auth.credentials.did\n      const account = await ctx.accountManager.getAccount(did, {\n        includeDeactivated: true,\n        includeTakenDown: true,\n      })\n      if (!account) {\n        throw new InvalidRequestError('account not found')\n      }\n\n      if (ctx.entrywayAgent) {\n        return resultPassthru(\n          await ctx.entrywayAgent.com.atproto.server.requestEmailUpdate(\n            undefined,\n            await ctx.entrywayAuthHeaders(\n              req,\n              auth.credentials.did,\n              ids.ComAtprotoServerRequestEmailUpdate,\n            ),\n          ),\n        )\n      }\n\n      if (!account.email) {\n        throw new InvalidRequestError('account does not have an email address')\n      }\n\n      const tokenRequired = !!account.emailConfirmedAt\n      if (tokenRequired) {\n        const token = await ctx.accountManager.createEmailToken(\n          did,\n          'update_email',\n        )\n        await ctx.mailer.sendUpdateEmail({ token }, { to: account.email })\n      }\n\n      return {\n        encoding: 'application/json',\n        body: {\n          tokenRequired,\n        },\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"requestEmailUpdate.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/requestEmailUpdate.ts"],"names":[],"mappings":";;AAKA,4BAgEC;AArED,4CAA2C;AAC3C,sDAAkE;AAElE,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAA;IAE9B,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE;QAChD,SAAS,EAAE;YACT;gBACE,UAAU,EAAE,YAAG;gBACf,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;aAC5C;YACD;gBACE,UAAU,EAAE,aAAI;gBAChB,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;aAC5C;SACF;QACD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;gBACzB,WAAW,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;YAChE,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAChC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE;gBACvD,kBAAkB,EAAE,IAAI;gBACxB,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAA;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,iCAAmB,CAAC,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAC/C,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAC3C,CAAA;gBACD,OAAO,cAAc,CAAC,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE;oBAChE,OAAO;iBACR,CAAC,CAAA;YACJ,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,IAAI,iCAAmB,CAAC,wCAAwC,CAAC,CAAA;YACzE,CAAC;YAED,MAAM,aAAa,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAA;YAChD,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,gBAAgB,CACrD,GAAG,EACH,cAAc,CACf,CAAA;gBACD,MAAM,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;YACpE,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,kBAA2B;gBACrC,IAAI,EAAE;oBACJ,aAAa;iBACd;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { DAY, HOUR } from '@atproto/common'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  const { entrywayClient } = ctx\n\n  server.add(com.atproto.server.requestEmailUpdate, {\n    rateLimit: [\n      {\n        durationMs: DAY,\n        points: 15,\n        calcKey: ({ auth }) => auth.credentials.did,\n      },\n      {\n        durationMs: HOUR,\n        points: 5,\n        calcKey: ({ auth }) => auth.credentials.did,\n      },\n    ],\n    auth: ctx.authVerifier.authorization({\n      checkTakedown: true,\n      authorize: (permissions) => {\n        permissions.assertAccount({ attr: 'email', action: 'manage' })\n      },\n    }),\n    handler: async ({ auth, req }) => {\n      const did = auth.credentials.did\n      const account = await ctx.accountManager.getAccount(did, {\n        includeDeactivated: true,\n        includeTakenDown: true,\n      })\n      if (!account) {\n        throw new InvalidRequestError('account not found')\n      }\n\n      if (entrywayClient) {\n        const { headers } = await ctx.entrywayAuthHeaders(\n          req,\n          auth.credentials.did,\n          com.atproto.server.requestEmailUpdate.$lxm,\n        )\n        return entrywayClient.xrpc(com.atproto.server.requestEmailUpdate, {\n          headers,\n        })\n      }\n\n      if (!account.email) {\n        throw new InvalidRequestError('account does not have an email address')\n      }\n\n      const tokenRequired = !!account.emailConfirmedAt\n      if (tokenRequired) {\n        const token = await ctx.accountManager.createEmailToken(\n          did,\n          'update_email',\n        )\n        await ctx.mailer.sendUpdateEmail({ token }, { to: account.email })\n      }\n\n      return {\n        encoding: 'application/json' as const,\n        body: {\n          tokenRequired,\n        },\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/server/requestPasswordReset.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=requestPasswordReset.d.ts.map

package/dist/api/com/atproto/server/requestPasswordReset.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"requestPasswordReset.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/requestPasswordReset.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAE5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAyCvD"}
+{"version":3,"file":"requestPasswordReset.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/requestPasswordReset.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA8CvD"}

package/dist/api/com/atproto/server/requestPasswordReset.js

@@ -3,8 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
 const common_1 = require("@atproto/common");
 const xrpc_server_1 = require("@atproto/xrpc-server");
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.server.requestPasswordReset({
+    const { entrywayClient } = ctx;
+    server.add(index_js_1.com.atproto.server.requestPasswordReset, {
         rateLimit: [
             {
                 durationMs: common_1.DAY,
@@ -15,21 +17,26 @@ function default_1(server, ctx) {
                 points: 15,
             },
         ],
-        handler: async ({ input, req }) => {
-            const email = input.body.email.toLowerCase();
+        handler: async ({ input: { body }, req }) => {
+            const email = body.email.toLowerCase();
             const account = await ctx.accountManager.getAccountByEmail(email, {
                 includeDeactivated: true,
                 includeTakenDown: true,
             });
-            if (!account?.email) {
-                if (ctx.entrywayAgent) {
-                    await ctx.entrywayAgent.com.atproto.server.requestPasswordReset(input.body, ctx.entrywayPassthruHeaders(req));
-                    return;
-                }
-                throw new xrpc_server_1.InvalidRequestError('account does not have an email address');
+            if (account?.email) {
+                const token = await ctx.accountManager.createEmailToken(account.did, 'reset_password');
+                await ctx.mailer.sendResetPassword({ handle: account.handle ?? account.email, token }, { to: account.email });
+                return;
             }
-            const token = await ctx.accountManager.createEmailToken(account.did, 'reset_password');
-            await ctx.mailer.sendResetPassword({ handle: account.handle ?? account.email, token }, { to: account.email });
+            if (entrywayClient) {
+                const { headers } = ctx.entrywayPassthruHeaders(req);
+                await entrywayClient.xrpc(index_js_1.com.atproto.server.requestPasswordReset, {
+                    headers,
+                    body,
+                });
+                return;
+            }
+            throw new xrpc_server_1.InvalidRequestError('account does not have an email address');
         },
     });
 }

package/dist/api/com/atproto/server/requestPasswordReset.js.map

@@ -1 +1 @@
-{"version":3,"file":"requestPasswordReset.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/requestPasswordReset.ts"],"names":[],"mappings":";;AAKA,4BAyCC;AA9CD,4CAA2C;AAC3C,sDAA0D;AAI1D,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC7C,SAAS,EAAE;YACT;gBACE,UAAU,EAAE,YAAG;gBACf,MAAM,EAAE,EAAE;aACX;YACD;gBACE,UAAU,EAAE,aAAI;gBAChB,MAAM,EAAE,EAAE;aACX;SACF;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAA;YAE5C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,KAAK,EAAE;gBAChE,kBAAkB,EAAE,IAAI;gBACxB,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAA;YAEF,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;gBACpB,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;oBACtB,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAC7D,KAAK,CAAC,IAAI,EACV,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CACjC,CAAA;oBACD,OAAM;gBACR,CAAC;gBACD,MAAM,IAAI,iCAAmB,CAAC,wCAAwC,CAAC,CAAA;YACzE,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,gBAAgB,CACrD,OAAO,CAAC,GAAG,EACX,gBAAgB,CACjB,CAAA;YACD,MAAM,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAChC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAClD,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,CACtB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { DAY, HOUR } from '@atproto/common'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.server.requestPasswordReset({\n    rateLimit: [\n      {\n        durationMs: DAY,\n        points: 50,\n      },\n      {\n        durationMs: HOUR,\n        points: 15,\n      },\n    ],\n    handler: async ({ input, req }) => {\n      const email = input.body.email.toLowerCase()\n\n      const account = await ctx.accountManager.getAccountByEmail(email, {\n        includeDeactivated: true,\n        includeTakenDown: true,\n      })\n\n      if (!account?.email) {\n        if (ctx.entrywayAgent) {\n          await ctx.entrywayAgent.com.atproto.server.requestPasswordReset(\n            input.body,\n            ctx.entrywayPassthruHeaders(req),\n          )\n          return\n        }\n        throw new InvalidRequestError('account does not have an email address')\n      }\n\n      const token = await ctx.accountManager.createEmailToken(\n        account.did,\n        'reset_password',\n      )\n      await ctx.mailer.sendResetPassword(\n        { handle: account.handle ?? account.email, token },\n        { to: account.email },\n      )\n    },\n  })\n}\n"]}
+{"version":3,"file":"requestPasswordReset.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/requestPasswordReset.ts"],"names":[],"mappings":";;AAKA,4BA8CC;AAnDD,4CAA2C;AAC3C,sDAAkE;AAElE,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAA;IAE9B,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE;QAClD,SAAS,EAAE;YACT;gBACE,UAAU,EAAE,YAAG;gBACf,MAAM,EAAE,EAAE;aACX;YACD;gBACE,UAAU,EAAE,aAAI;gBAChB,MAAM,EAAE,EAAE;aACX;SACF;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAA;YAEtC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,KAAK,EAAE;gBAChE,kBAAkB,EAAE,IAAI;gBACxB,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAA;YAEF,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;gBACnB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,gBAAgB,CACrD,OAAO,CAAC,GAAG,EACX,gBAAgB,CACjB,CAAA;gBACD,MAAM,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAChC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAClD,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,CACtB,CAAA;gBACD,OAAM;YACR,CAAC;YAED,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;gBACpD,MAAM,cAAc,CAAC,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE;oBACjE,OAAO;oBACP,IAAI;iBACL,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;YAED,MAAM,IAAI,iCAAmB,CAAC,wCAAwC,CAAC,CAAA;QACzE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { DAY, HOUR } from '@atproto/common'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  const { entrywayClient } = ctx\n\n  server.add(com.atproto.server.requestPasswordReset, {\n    rateLimit: [\n      {\n        durationMs: DAY,\n        points: 50,\n      },\n      {\n        durationMs: HOUR,\n        points: 15,\n      },\n    ],\n    handler: async ({ input: { body }, req }) => {\n      const email = body.email.toLowerCase()\n\n      const account = await ctx.accountManager.getAccountByEmail(email, {\n        includeDeactivated: true,\n        includeTakenDown: true,\n      })\n\n      if (account?.email) {\n        const token = await ctx.accountManager.createEmailToken(\n          account.did,\n          'reset_password',\n        )\n        await ctx.mailer.sendResetPassword(\n          { handle: account.handle ?? account.email, token },\n          { to: account.email },\n        )\n        return\n      }\n\n      if (entrywayClient) {\n        const { headers } = ctx.entrywayPassthruHeaders(req)\n        await entrywayClient.xrpc(com.atproto.server.requestPasswordReset, {\n          headers,\n          body,\n        })\n        return\n      }\n\n      throw new InvalidRequestError('account does not have an email address')\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/server/reserveSigningKey.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=reserveSigningKey.d.ts.map

package/dist/api/com/atproto/server/reserveSigningKey.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reserveSigningKey.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/reserveSigningKey.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAE5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAYvD"}
+{"version":3,"file":"reserveSigningKey.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/reserveSigningKey.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAUvD"}

package/dist/api/com/atproto/server/reserveSigningKey.js

@@ -1,15 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.server.reserveSigningKey({
+    server.add(index_js_1.com.atproto.server.reserveSigningKey, {
         handler: async ({ input }) => {
             const signingKey = await ctx.actorStore.reserveKeypair(input.body.did);
             return {
                 encoding: 'application/json',
-                body: {
-                    signingKey,
-                },
+                body: { signingKey },
             };
         },
     });

package/dist/api/com/atproto/server/reserveSigningKey.js.map

@@ -1 +1 @@
-{"version":3,"file":"reserveSigningKey.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/reserveSigningKey.ts"],"names":[],"mappings":";;AAGA,4BAYC;AAZD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACtE,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,UAAU;iBACX;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.server.reserveSigningKey({\n    handler: async ({ input }) => {\n      const signingKey = await ctx.actorStore.reserveKeypair(input.body.did)\n      return {\n        encoding: 'application/json',\n        body: {\n          signingKey,\n        },\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"reserveSigningKey.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/reserveSigningKey.ts"],"names":[],"mappings":";;AAIA,4BAUC;AAZD,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;QAC/C,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACtE,OAAO;gBACL,QAAQ,EAAE,kBAA2B;gBACrC,IAAI,EAAE,EAAE,UAAU,EAAE;aACrB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.server.reserveSigningKey, {\n    handler: async ({ input }) => {\n      const signingKey = await ctx.actorStore.reserveKeypair(input.body.did)\n      return {\n        encoding: 'application/json' as const,\n        body: { signingKey },\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/server/resetPassword.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=resetPassword.d.ts.map

package/dist/api/com/atproto/server/resetPassword.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resetPassword.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/resetPassword.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAE5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA0BvD"}
+{"version":3,"file":"resetPassword.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/resetPassword.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,MAAM,EACP,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAuCvD"}

package/dist/api/com/atproto/server/resetPassword.js

@@ -4,25 +4,38 @@ exports.default = default_1;
 const common_1 = require("@atproto/common");
 const xrpc_server_1 = require("@atproto/xrpc-server");
 const scrypt_1 = require("../../../../account-manager/helpers/scrypt");
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.server.resetPassword({
-        rateLimit: [
-            {
-                durationMs: 5 * common_1.MINUTE,
-                points: 50,
-            },
-        ],
-        handler: async ({ input, req }) => {
-            if (ctx.entrywayAgent) {
-                await ctx.entrywayAgent.com.atproto.server.resetPassword(input.body, ctx.entrywayPassthruHeaders(req));
-                return;
-            }
-            const { token, password } = input.body;
-            if (password.length > scrypt_1.NEW_PASSWORD_MAX_LENGTH) {
-                throw new xrpc_server_1.InvalidRequestError('Invalid password length.');
-            }
-            await ctx.accountManager.resetPassword({ token, password });
+    const { entrywayClient } = ctx;
+    const rateLimit = [
+        {
+            durationMs: 5 * common_1.MINUTE,
+            points: 50,
         },
-    });
+    ];
+    if (entrywayClient) {
+        server.add(index_js_1.com.atproto.server.resetPassword, {
+            rateLimit,
+            handler: async ({ input: { body }, req }) => {
+                const { headers } = ctx.entrywayPassthruHeaders(req);
+                await entrywayClient.xrpc(index_js_1.com.atproto.server.resetPassword, {
+                    headers,
+                    body,
+                });
+            },
+        });
+    }
+    else {
+        server.add(index_js_1.com.atproto.server.resetPassword, {
+            rateLimit,
+            handler: async ({ input: { body } }) => {
+                const { token, password } = body;
+                if (password.length > scrypt_1.NEW_PASSWORD_MAX_LENGTH) {
+                    throw new xrpc_server_1.InvalidRequestError('Invalid password length.');
+                }
+                await ctx.accountManager.resetPassword({ token, password });
+            },
+        });
+    }
 }
 //# sourceMappingURL=resetPassword.js.map

package/dist/api/com/atproto/server/resetPassword.js.map

@@ -1 +1 @@
-{"version":3,"file":"resetPassword.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/resetPassword.ts"],"names":[],"mappings":";;AAMA,4BA0BC;AAhCD,4CAAwC;AACxC,sDAA0D;AAC1D,uEAAoF;AAIpF,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;QACtC,SAAS,EAAE;YACT;gBACE,UAAU,EAAE,CAAC,GAAG,eAAM;gBACtB,MAAM,EAAE,EAAE;aACX;SACF;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YAChC,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CACtD,KAAK,CAAC,IAAI,EACV,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CACjC,CAAA;gBACD,OAAM;YACR,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YAEtC,IAAI,QAAQ,CAAC,MAAM,GAAG,gCAAuB,EAAE,CAAC;gBAC9C,MAAM,IAAI,iCAAmB,CAAC,0BAA0B,CAAC,CAAA;YAC3D,CAAC;YAED,MAAM,GAAG,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC7D,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { MINUTE } from '@atproto/common'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { NEW_PASSWORD_MAX_LENGTH } from '../../../../account-manager/helpers/scrypt'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.server.resetPassword({\n    rateLimit: [\n      {\n        durationMs: 5 * MINUTE,\n        points: 50,\n      },\n    ],\n    handler: async ({ input, req }) => {\n      if (ctx.entrywayAgent) {\n        await ctx.entrywayAgent.com.atproto.server.resetPassword(\n          input.body,\n          ctx.entrywayPassthruHeaders(req),\n        )\n        return\n      }\n\n      const { token, password } = input.body\n\n      if (password.length > NEW_PASSWORD_MAX_LENGTH) {\n        throw new InvalidRequestError('Invalid password length.')\n      }\n\n      await ctx.accountManager.resetPassword({ token, password })\n    },\n  })\n}\n"]}
+{"version":3,"file":"resetPassword.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/resetPassword.ts"],"names":[],"mappings":";;AAUA,4BAuCC;AAjDD,4CAAwC;AACxC,sDAI6B;AAC7B,uEAAoF;AAEpF,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAA;IAE9B,MAAM,SAAS,GAIX;QACF;YACE,UAAU,EAAE,CAAC,GAAG,eAAM;YACtB,MAAM,EAAE,EAAE;SACX;KACF,CAAA;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE;YAC3C,SAAS;YACT,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;gBACpD,MAAM,cAAc,CAAC,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE;oBAC1D,OAAO;oBACP,IAAI;iBACL,CAAC,CAAA;YACJ,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE;YAC3C,SAAS;YACT,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;gBACrC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;gBAEhC,IAAI,QAAQ,CAAC,MAAM,GAAG,gCAAuB,EAAE,CAAC;oBAC9C,MAAM,IAAI,iCAAmB,CAAC,0BAA0B,CAAC,CAAA;gBAC3D,CAAC;gBAED,MAAM,GAAG,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC7D,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { MINUTE } from '@atproto/common'\nimport {\n  InvalidRequestError,\n  MethodRateLimit,\n  Server,\n} from '@atproto/xrpc-server'\nimport { NEW_PASSWORD_MAX_LENGTH } from '../../../../account-manager/helpers/scrypt'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  const { entrywayClient } = ctx\n\n  const rateLimit: MethodRateLimit<\n    void,\n    com.atproto.server.resetPassword.$Params,\n    com.atproto.server.resetPassword.$Input\n  > = [\n    {\n      durationMs: 5 * MINUTE,\n      points: 50,\n    },\n  ]\n\n  if (entrywayClient) {\n    server.add(com.atproto.server.resetPassword, {\n      rateLimit,\n      handler: async ({ input: { body }, req }) => {\n        const { headers } = ctx.entrywayPassthruHeaders(req)\n        await entrywayClient.xrpc(com.atproto.server.resetPassword, {\n          headers,\n          body,\n        })\n      },\n    })\n  } else {\n    server.add(com.atproto.server.resetPassword, {\n      rateLimit,\n      handler: async ({ input: { body } }) => {\n        const { token, password } = body\n\n        if (password.length > NEW_PASSWORD_MAX_LENGTH) {\n          throw new InvalidRequestError('Invalid password length.')\n        }\n\n        await ctx.accountManager.resetPassword({ token, password })\n      },\n    })\n  }\n}\n"]}

package/dist/api/com/atproto/server/revokeAppPassword.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=revokeAppPassword.d.ts.map

package/dist/api/com/atproto/server/revokeAppPassword.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"revokeAppPassword.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/revokeAppPassword.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAG5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA4BvD"}
+{"version":3,"file":"revokeAppPassword.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/revokeAppPassword.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAqCvD"}

package/dist/api/com/atproto/server/revokeAppPassword.js

@@ -2,23 +2,34 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
 const xrpc_server_1 = require("@atproto/xrpc-server");
-const lexicons_1 = require("../../../../lexicon/lexicons");
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.server.revokeAppPassword({
-        auth: ctx.authVerifier.authorization({
-            authorize: () => {
-                throw new xrpc_server_1.ForbiddenError('OAuth credentials are not supported for this endpoint');
-            },
-        }),
-        handler: async ({ auth, input, req }) => {
-            if (ctx.entrywayAgent) {
-                await ctx.entrywayAgent.com.atproto.server.revokeAppPassword(input.body, await ctx.entrywayAuthHeaders(req, auth.credentials.did, lexicons_1.ids.ComAtprotoServerRevokeAppPassword));
-                return;
-            }
-            const requester = auth.credentials.did;
-            const { name } = input.body;
-            await ctx.accountManager.revokeAppPassword(requester, name);
+    const { entrywayClient } = ctx;
+    const auth = ctx.authVerifier.authorization({
+        authorize: () => {
+            throw new xrpc_server_1.ForbiddenError('OAuth credentials are not supported for this endpoint');
         },
     });
+    if (entrywayClient) {
+        server.add(index_js_1.com.atproto.server.revokeAppPassword, {
+            auth,
+            handler: async ({ auth, input: { body }, req }) => {
+                const { headers } = await ctx.entrywayAuthHeaders(req, auth.credentials.did, index_js_1.com.atproto.server.revokeAppPassword.$lxm);
+                await entrywayClient.xrpc(index_js_1.com.atproto.server.revokeAppPassword, {
+                    headers,
+                    body,
+                });
+            },
+        });
+    }
+    else {
+        server.add(index_js_1.com.atproto.server.revokeAppPassword, {
+            auth,
+            handler: async ({ auth, input: { body } }) => {
+                const requester = auth.credentials.did;
+                await ctx.accountManager.revokeAppPassword(requester, body.name);
+            },
+        });
+    }
 }
 //# sourceMappingURL=revokeAppPassword.js.map

package/dist/api/com/atproto/server/revokeAppPassword.js.map

@@ -1 +1 @@
-{"version":3,"file":"revokeAppPassword.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/revokeAppPassword.ts"],"names":[],"mappings":";;AAKA,4BA4BC;AAjCD,sDAAqD;AAGrD,2DAAkD;AAElD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC1C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,SAAS,EAAE,GAAG,EAAE;gBACd,MAAM,IAAI,4BAAc,CACtB,uDAAuD,CACxD,CAAA;YACH,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACtC,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAC1D,KAAK,CAAC,IAAI,EACV,MAAM,GAAG,CAAC,mBAAmB,CAC3B,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,iCAAiC,CACtC,CACF,CAAA;gBACD,OAAM;YACR,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YACtC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YAE3B,MAAM,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAC7D,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { ForbiddenError } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport { ids } from '../../../../lexicon/lexicons'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.server.revokeAppPassword({\n    auth: ctx.authVerifier.authorization({\n      authorize: () => {\n        throw new ForbiddenError(\n          'OAuth credentials are not supported for this endpoint',\n        )\n      },\n    }),\n    handler: async ({ auth, input, req }) => {\n      if (ctx.entrywayAgent) {\n        await ctx.entrywayAgent.com.atproto.server.revokeAppPassword(\n          input.body,\n          await ctx.entrywayAuthHeaders(\n            req,\n            auth.credentials.did,\n            ids.ComAtprotoServerRevokeAppPassword,\n          ),\n        )\n        return\n      }\n\n      const requester = auth.credentials.did\n      const { name } = input.body\n\n      await ctx.accountManager.revokeAppPassword(requester, name)\n    },\n  })\n}\n"]}
+{"version":3,"file":"revokeAppPassword.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/revokeAppPassword.ts"],"names":[],"mappings":";;AAIA,4BAqCC;AAzCD,sDAA6D;AAE7D,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAA;IAE9B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;QAC1C,SAAS,EAAE,GAAG,EAAE;YACd,MAAM,IAAI,4BAAc,CACtB,uDAAuD,CACxD,CAAA;QACH,CAAC;KACF,CAAC,CAAA;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAC/C,IAAI;YACJ,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAChD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAC/C,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC1C,CAAA;gBAED,MAAM,cAAc,CAAC,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;oBAC9D,OAAO;oBACP,IAAI;iBACL,CAAC,CAAA;YACJ,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAC/C,IAAI;YACJ,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;gBAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;gBAEtC,MAAM,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YAClE,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { ForbiddenError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  const { entrywayClient } = ctx\n\n  const auth = ctx.authVerifier.authorization({\n    authorize: () => {\n      throw new ForbiddenError(\n        'OAuth credentials are not supported for this endpoint',\n      )\n    },\n  })\n\n  if (entrywayClient) {\n    server.add(com.atproto.server.revokeAppPassword, {\n      auth,\n      handler: async ({ auth, input: { body }, req }) => {\n        const { headers } = await ctx.entrywayAuthHeaders(\n          req,\n          auth.credentials.did,\n          com.atproto.server.revokeAppPassword.$lxm,\n        )\n\n        await entrywayClient.xrpc(com.atproto.server.revokeAppPassword, {\n          headers,\n          body,\n        })\n      },\n    })\n  } else {\n    server.add(com.atproto.server.revokeAppPassword, {\n      auth,\n      handler: async ({ auth, input: { body } }) => {\n        const requester = auth.credentials.did\n\n        await ctx.accountManager.revokeAppPassword(requester, body.name)\n      },\n    })\n  }\n}\n"]}

package/dist/api/com/atproto/server/updateEmail.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=updateEmail.d.ts.map

package/dist/api/com/atproto/server/updateEmail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updateEmail.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/updateEmail.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAG5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAkEvD"}
+{"version":3,"file":"updateEmail.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/updateEmail.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,MAAM,EACP,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAqEvD"}

package/dist/api/com/atproto/server/updateEmail.js

@@ -6,9 +6,9 @@ const disposable_email_domains_js_1 = require("disposable-email-domains-js");
 const xrpc_server_1 = require("@atproto/xrpc-server");
 const account_1 = require("../../../../account-manager/helpers/account");
 const auth_scope_1 = require("../../../../auth-scope");
-const lexicons_1 = require("../../../../lexicon/lexicons");
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.server.updateEmail({
+    server.add(index_js_1.com.atproto.server.updateEmail, {
         auth: ctx.authVerifier.authorization({
             checkTakedown: true,
             scopes: auth_scope_1.ACCESS_FULL,
@@ -16,9 +16,9 @@ function default_1(server, ctx) {
                 throw new xrpc_server_1.ForbiddenError('OAuth credentials are not supported for this endpoint');
             },
         }),
-        handler: async ({ auth, input, req }) => {
+        handler: async ({ auth, input: { body }, req }) => {
             const did = auth.credentials.did;
-            const { token, email } = input.body;
+            const { token, email } = body;
             if (!(0, address_1.isEmailValid)(email) || (0, disposable_email_domains_js_1.isDisposableEmail)(email)) {
                 throw new xrpc_server_1.InvalidRequestError('This email address is not supported, please use a different email.');
             }
@@ -28,8 +28,12 @@ function default_1(server, ctx) {
             if (!account) {
                 throw new xrpc_server_1.InvalidRequestError('account not found');
             }
-            if (ctx.entrywayAgent) {
-                await ctx.entrywayAgent.com.atproto.server.updateEmail(input.body, await ctx.entrywayAuthHeaders(req, auth.credentials.did, lexicons_1.ids.ComAtprotoServerUpdateEmail));
+            if (ctx.entrywayClient) {
+                const { headers } = await ctx.entrywayAuthHeaders(req, auth.credentials.did, index_js_1.com.atproto.server.updateEmail.$lxm);
+                await ctx.entrywayClient.xrpc(index_js_1.com.atproto.server.updateEmail, {
+                    headers,
+                    body,
+                });
                 return;
             }
             // require valid token if account email is confirmed

package/dist/api/com/atproto/server/updateEmail.js.map

@@ -1 +1 @@
-{"version":3,"file":"updateEmail.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/updateEmail.ts"],"names":[],"mappings":";;AASA,4BAkEC;AA3ED,2CAA4C;AAC5C,6EAA+D;AAC/D,sDAA0E;AAC1E,yEAAoF;AACpF,uDAAoD;AAGpD,2DAAkD;AAElD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC;QACpC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,wBAAW;YACnB,SAAS,EAAE,GAAG,EAAE;gBACd,MAAM,IAAI,4BAAc,CACtB,uDAAuD,CACxD,CAAA;YACH,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAChC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YACnC,IAAI,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,IAAI,IAAA,+CAAiB,EAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,iCAAmB,CAC3B,oEAAoE,CACrE,CAAA;YACH,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE;gBACvD,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAA;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,iCAAmB,CAAC,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CACpD,KAAK,CAAC,IAAI,EACV,MAAM,GAAG,CAAC,mBAAmB,CAC3B,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,2BAA2B,CAChC,CACF,CAAA;gBACD,OAAM;YACR,CAAC;YAED,oDAAoD;YACpD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,iCAAmB,CAC3B,6BAA6B,EAC7B,eAAe,CAChB,CAAA;gBACH,CAAC;gBACD,MAAM,GAAG,CAAC,cAAc,CAAC,qBAAqB,CAC5C,GAAG,EACH,cAAc,EACd,KAAK,CACN,CAAA;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,gCAAsB,EAAE,CAAC;oBAC1C,MAAM,IAAI,iCAAmB,CAC3B,qEAAqE,CACtE,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAA;gBACX,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { isEmailValid } from '@hapi/address'\nimport { isDisposableEmail } from 'disposable-email-domains-js'\nimport { ForbiddenError, InvalidRequestError } from '@atproto/xrpc-server'\nimport { UserAlreadyExistsError } from '../../../../account-manager/helpers/account'\nimport { ACCESS_FULL } from '../../../../auth-scope'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport { ids } from '../../../../lexicon/lexicons'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.server.updateEmail({\n    auth: ctx.authVerifier.authorization({\n      checkTakedown: true,\n      scopes: ACCESS_FULL,\n      authorize: () => {\n        throw new ForbiddenError(\n          'OAuth credentials are not supported for this endpoint',\n        )\n      },\n    }),\n    handler: async ({ auth, input, req }) => {\n      const did = auth.credentials.did\n      const { token, email } = input.body\n      if (!isEmailValid(email) || isDisposableEmail(email)) {\n        throw new InvalidRequestError(\n          'This email address is not supported, please use a different email.',\n        )\n      }\n      const account = await ctx.accountManager.getAccount(did, {\n        includeDeactivated: true,\n      })\n      if (!account) {\n        throw new InvalidRequestError('account not found')\n      }\n\n      if (ctx.entrywayAgent) {\n        await ctx.entrywayAgent.com.atproto.server.updateEmail(\n          input.body,\n          await ctx.entrywayAuthHeaders(\n            req,\n            auth.credentials.did,\n            ids.ComAtprotoServerUpdateEmail,\n          ),\n        )\n        return\n      }\n\n      // require valid token if account email is confirmed\n      if (account.emailConfirmedAt) {\n        if (!token) {\n          throw new InvalidRequestError(\n            'confirmation token required',\n            'TokenRequired',\n          )\n        }\n        await ctx.accountManager.assertValidEmailToken(\n          did,\n          'update_email',\n          token,\n        )\n      }\n\n      try {\n        await ctx.accountManager.updateEmail({ did, email })\n      } catch (err) {\n        if (err instanceof UserAlreadyExistsError) {\n          throw new InvalidRequestError(\n            'This email address is already in use, please use a different email.',\n          )\n        } else {\n          throw err\n        }\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"updateEmail.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/updateEmail.ts"],"names":[],"mappings":";;AAYA,4BAqEC;AAjFD,2CAA4C;AAC5C,6EAA+D;AAC/D,sDAI6B;AAC7B,yEAAoF;AACpF,uDAAoD;AAEpD,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;QACzC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,wBAAW;YACnB,SAAS,EAAE,GAAG,EAAE;gBACd,MAAM,IAAI,4BAAc,CACtB,uDAAuD,CACxD,CAAA;YACH,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAChC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;YAC7B,IAAI,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,IAAI,IAAA,+CAAiB,EAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,iCAAmB,CAC3B,oEAAoE,CACrE,CAAA;YACH,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE;gBACvD,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAA;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,iCAAmB,CAAC,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;gBACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAC/C,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CACpC,CAAA;gBAED,MAAM,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBAC5D,OAAO;oBACP,IAAI;iBACL,CAAC,CAAA;gBAEF,OAAM;YACR,CAAC;YAED,oDAAoD;YACpD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,iCAAmB,CAC3B,6BAA6B,EAC7B,eAAe,CAChB,CAAA;gBACH,CAAC;gBACD,MAAM,GAAG,CAAC,cAAc,CAAC,qBAAqB,CAC5C,GAAG,EACH,cAAc,EACd,KAAK,CACN,CAAA;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,gCAAsB,EAAE,CAAC;oBAC1C,MAAM,IAAI,iCAAmB,CAC3B,qEAAqE,CACtE,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAA;gBACX,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { isEmailValid } from '@hapi/address'\nimport { isDisposableEmail } from 'disposable-email-domains-js'\nimport {\n  ForbiddenError,\n  InvalidRequestError,\n  Server,\n} from '@atproto/xrpc-server'\nimport { UserAlreadyExistsError } from '../../../../account-manager/helpers/account'\nimport { ACCESS_FULL } from '../../../../auth-scope'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.server.updateEmail, {\n    auth: ctx.authVerifier.authorization({\n      checkTakedown: true,\n      scopes: ACCESS_FULL,\n      authorize: () => {\n        throw new ForbiddenError(\n          'OAuth credentials are not supported for this endpoint',\n        )\n      },\n    }),\n    handler: async ({ auth, input: { body }, req }) => {\n      const did = auth.credentials.did\n      const { token, email } = body\n      if (!isEmailValid(email) || isDisposableEmail(email)) {\n        throw new InvalidRequestError(\n          'This email address is not supported, please use a different email.',\n        )\n      }\n      const account = await ctx.accountManager.getAccount(did, {\n        includeDeactivated: true,\n      })\n      if (!account) {\n        throw new InvalidRequestError('account not found')\n      }\n\n      if (ctx.entrywayClient) {\n        const { headers } = await ctx.entrywayAuthHeaders(\n          req,\n          auth.credentials.did,\n          com.atproto.server.updateEmail.$lxm,\n        )\n\n        await ctx.entrywayClient.xrpc(com.atproto.server.updateEmail, {\n          headers,\n          body,\n        })\n\n        return\n      }\n\n      // require valid token if account email is confirmed\n      if (account.emailConfirmedAt) {\n        if (!token) {\n          throw new InvalidRequestError(\n            'confirmation token required',\n            'TokenRequired',\n          )\n        }\n        await ctx.accountManager.assertValidEmailToken(\n          did,\n          'update_email',\n          token,\n        )\n      }\n\n      try {\n        await ctx.accountManager.updateEmail({ did, email })\n      } catch (err) {\n        if (err instanceof UserAlreadyExistsError) {\n          throw new InvalidRequestError(\n            'This email address is already in use, please use a different email.',\n          )\n        } else {\n          throw err\n        }\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/sync/deprecated/getCheckout.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../../context';
-import { Server } from '../../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getCheckout.d.ts.map

package/dist/api/com/atproto/sync/deprecated/getCheckout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getCheckout.d.ts","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getCheckout.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAI/C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAmBvD"}
+{"version":3,"file":"getCheckout.d.ts","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getCheckout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAKnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAmBvD"}

package/dist/api/com/atproto/sync/deprecated/getCheckout.js

@@ -2,10 +2,11 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
 const auth_verifier_1 = require("../../../../../auth-verifier");
+const index_js_1 = require("../../../../../lexicons/index.js");
 const getRepo_1 = require("../getRepo");
 const util_1 = require("../util");
 function default_1(server, ctx) {
-    server.com.atproto.sync.getCheckout({
+    server.add(index_js_1.com.atproto.sync.getCheckout, {
         auth: ctx.authVerifier.authorizationOrAdminTokenOptional({
             authorize: () => {
                 // always allow

package/dist/api/com/atproto/sync/deprecated/getCheckout.js.map

@@ -1 +1 @@
-{"version":3,"file":"getCheckout.js","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getCheckout.ts"],"names":[],"mappings":";;AAMA,4BAmBC;AAzBD,gEAA4D;AAG5D,wCAAyC;AACzC,kCAAgD;AAEhD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;QAClC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,IAAA,6BAAsB,EAAC,GAAG,EAAE,GAAG,EAAE,IAAA,6BAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,SAAS,GAAG,MAAM,IAAA,sBAAY,EAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAE9C,OAAO;gBACL,QAAQ,EAAE,0BAA0B;gBACpC,IAAI,EAAE,SAAS;aAChB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { isUserOrAdmin } from '../../../../../auth-verifier'\nimport { AppContext } from '../../../../../context'\nimport { Server } from '../../../../../lexicon'\nimport { getCarStream } from '../getRepo'\nimport { assertRepoAvailability } from '../util'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.sync.getCheckout({\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const carStream = await getCarStream(ctx, did)\n\n      return {\n        encoding: 'application/vnd.ipld.car',\n        body: carStream,\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"getCheckout.js","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getCheckout.ts"],"names":[],"mappings":";;AAOA,4BAmBC;AAzBD,gEAA4D;AAE5D,+DAAsD;AACtD,wCAAyC;AACzC,kCAAgD;AAEhD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;QACvC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,IAAA,6BAAsB,EAAC,GAAG,EAAE,GAAG,EAAE,IAAA,6BAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,SAAS,GAAG,MAAM,IAAA,sBAAY,EAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAE9C,OAAO;gBACL,QAAQ,EAAE,0BAAmC;gBAC7C,IAAI,EAAE,SAAS;aAChB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { isUserOrAdmin } from '../../../../../auth-verifier'\nimport { AppContext } from '../../../../../context'\nimport { com } from '../../../../../lexicons/index.js'\nimport { getCarStream } from '../getRepo'\nimport { assertRepoAvailability } from '../util'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.sync.getCheckout, {\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const carStream = await getCarStream(ctx, did)\n\n      return {\n        encoding: 'application/vnd.ipld.car' as const,\n        body: carStream,\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/sync/deprecated/getHead.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../../context';
-import { Server } from '../../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getHead.d.ts.map

package/dist/api/com/atproto/sync/deprecated/getHead.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getHead.d.ts","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getHead.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAG/C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA0BvD"}
+{"version":3,"file":"getHead.d.ts","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getHead.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAInD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA0BvD"}

package/dist/api/com/atproto/sync/deprecated/getHead.js

@@ -3,9 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
 const xrpc_server_1 = require("@atproto/xrpc-server");
 const auth_verifier_1 = require("../../../../../auth-verifier");
+const index_js_1 = require("../../../../../lexicons/index.js");
 const util_1 = require("../util");
 function default_1(server, ctx) {
-    server.com.atproto.sync.getHead({
+    server.add(index_js_1.com.atproto.sync.getHead, {
         auth: ctx.authVerifier.authorizationOrAdminTokenOptional({
             authorize: () => {
                 // always allow

package/dist/api/com/atproto/sync/deprecated/getHead.js.map

@@ -1 +1 @@
-{"version":3,"file":"getHead.js","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getHead.ts"],"names":[],"mappings":";;AAMA,4BA0BC;AAhCD,sDAA0D;AAC1D,gEAA4D;AAG5D,kCAAgD;AAEhD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,IAAA,6BAAsB,EAAC,GAAG,EAAE,GAAG,EAAE,IAAA,6BAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CACpD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAC7B,CAAA;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,iCAAmB,CAC3B,gCAAgC,GAAG,EAAE,EACrC,cAAc,CACf,CAAA;YACH,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;aAChC,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError } from '@atproto/xrpc-server'\nimport { isUserOrAdmin } from '../../../../../auth-verifier'\nimport { AppContext } from '../../../../../context'\nimport { Server } from '../../../../../lexicon'\nimport { assertRepoAvailability } from '../util'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.sync.getHead({\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const root = await ctx.actorStore.read(did, (store) =>\n        store.repo.storage.getRoot(),\n      )\n      if (root === null) {\n        throw new InvalidRequestError(\n          `Could not find root for DID: ${did}`,\n          'HeadNotFound',\n        )\n      }\n      return {\n        encoding: 'application/json',\n        body: { root: root.toString() },\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"getHead.js","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getHead.ts"],"names":[],"mappings":";;AAMA,4BA0BC;AAhCD,sDAAkE;AAClE,gEAA4D;AAE5D,+DAAsD;AACtD,kCAAgD;AAEhD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE;QACnC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,IAAA,6BAAsB,EAAC,GAAG,EAAE,GAAG,EAAE,IAAA,6BAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CACpD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAC7B,CAAA;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,iCAAmB,CAC3B,gCAAgC,GAAG,EAAE,EACrC,cAAc,CACf,CAAA;YACH,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,kBAA2B;gBACrC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;aAChC,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { isUserOrAdmin } from '../../../../../auth-verifier'\nimport { AppContext } from '../../../../../context'\nimport { com } from '../../../../../lexicons/index.js'\nimport { assertRepoAvailability } from '../util'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.sync.getHead, {\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const root = await ctx.actorStore.read(did, (store) =>\n        store.repo.storage.getRoot(),\n      )\n      if (root === null) {\n        throw new InvalidRequestError(\n          `Could not find root for DID: ${did}`,\n          'HeadNotFound',\n        )\n      }\n      return {\n        encoding: 'application/json' as const,\n        body: { root: root.toString() },\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/sync/getBlob.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getBlob.d.ts.map

package/dist/api/com/atproto/sync/getBlob.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getBlob.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/getBlob.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAG5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAoDvD"}
+{"version":3,"file":"getBlob.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/getBlob.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAGlE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAmDvD"}

package/dist/api/com/atproto/sync/getBlob.js

@@ -1,14 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
-const cid_1 = require("multiformats/cid");
+const lex_data_1 = require("@atproto/lex-data");
 const repo_1 = require("@atproto/repo");
 const xrpc_server_1 = require("@atproto/xrpc-server");
 const auth_scope_1 = require("../../../../auth-scope");
 const auth_verifier_1 = require("../../../../auth-verifier");
+const index_js_1 = require("../../../../lexicons/index.js");
 const util_1 = require("./util");
 function default_1(server, ctx) {
-    server.com.atproto.sync.getBlob({
+    server.add(index_js_1.com.atproto.sync.getBlob, {
         auth: ctx.authVerifier.authorizationOrAdminTokenOptional({
             additional: [auth_scope_1.AuthScope.Takendown],
             authorize: () => {
@@ -18,7 +19,7 @@ function default_1(server, ctx) {
         handler: async ({ params, res, auth }) => {
             const { did } = params;
             await (0, util_1.assertRepoAvailability)(ctx, did, (0, auth_verifier_1.isUserOrAdmin)(auth, did));
-            const cid = cid_1.CID.parse(params.cid);
+            const cid = (0, lex_data_1.parseCid)(params.cid);
             const found = await ctx.actorStore.read(params.did, async (store) => {
                 try {
                     return await store.repo.blob.getBlob(cid);
@@ -49,8 +50,7 @@ function default_1(server, ctx) {
             // This should prevent the browser from executing the blob in any way
             res.setHeader('content-security-policy', `default-src 'none'; sandbox`);
             return {
-                // @TODO better codegen for */* mimetype
-                encoding: (found.mimeType || 'application/octet-stream'),
+                encoding: found.mimeType || 'application/octet-stream',
                 body: found.stream,
             };
         },

package/dist/api/com/atproto/sync/getBlob.js.map

@@ -1 +1 @@
-{"version":3,"file":"getBlob.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/getBlob.ts"],"names":[],"mappings":";;AASA,4BAoDC;AA7DD,0CAAsC;AACtC,wCAAiD;AACjD,sDAA0D;AAC1D,uDAAkD;AAClD,6DAAyD;AAGzD,iCAA+C;AAE/C,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,UAAU,EAAE,CAAC,sBAAS,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;YACvC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,IAAA,6BAAsB,EAAC,GAAG,EAAE,GAAG,EAAE,IAAA,6BAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,GAAG,GAAG,SAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACjC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAClE,IAAI,CAAC;oBACH,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBAC3C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,wBAAiB,EAAE,CAAC;wBACrC,MAAM,IAAI,iCAAmB,CAAC,gBAAgB,CAAC,CAAA;oBACjD,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAA;oBACX,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAA;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,iCAAmB,CAAC,gBAAgB,CAAC,CAAA;YACjD,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAE3C,6BAA6B;YAE7B,kEAAkE;YAClE,uEAAuE;YACvE,4BAA4B;YAC5B,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;YAElD,oEAAoE;YACpE,oEAAoE;YACpE,yEAAyE;YACzE,qEAAqE;YACrE,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,yBAAyB,GAAG,GAAG,CAAC,CAAA;YAErE,qEAAqE;YACrE,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,6BAA6B,CAAC,CAAA;YAEvE,OAAO;gBACL,wCAAwC;gBACxC,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,0BAA0B,CAAU;gBACjE,IAAI,EAAE,KAAK,CAAC,MAAM;aACnB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { CID } from 'multiformats/cid'\nimport { BlobNotFoundError } from '@atproto/repo'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { AuthScope } from '../../../../auth-scope'\nimport { isUserOrAdmin } from '../../../../auth-verifier'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport { assertRepoAvailability } from './util'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.sync.getBlob({\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      additional: [AuthScope.Takendown],\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, res, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const cid = CID.parse(params.cid)\n      const found = await ctx.actorStore.read(params.did, async (store) => {\n        try {\n          return await store.repo.blob.getBlob(cid)\n        } catch (err) {\n          if (err instanceof BlobNotFoundError) {\n            throw new InvalidRequestError('Blob not found')\n          } else {\n            throw err\n          }\n        }\n      })\n      if (!found) {\n        throw new InvalidRequestError('Blob not found')\n      }\n      res.setHeader('content-length', found.size)\n\n      // Important Security headers\n\n      // This prevents the browser from trying to guess the content type\n      // and potentially loading the blob as executable code, or rendering it\n      // in some other unsafe way.\n      res.setHeader('x-content-type-options', 'nosniff')\n\n      // This forces the browser to download the blob instead of trying to\n      // render it when visiting the URL. This is important to prevent XSS\n      // attacks if the blob happens to be HTML. Even if JS is disabled via the\n      // CSP header below, a blob could still contain malicious HTML links.\n      res.setHeader('content-disposition', `attachment; filename=\"${cid}\"`)\n\n      // This should prevent the browser from executing the blob in any way\n      res.setHeader('content-security-policy', `default-src 'none'; sandbox`)\n\n      return {\n        // @TODO better codegen for */* mimetype\n        encoding: (found.mimeType || 'application/octet-stream') as '*/*',\n        body: found.stream,\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"getBlob.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/getBlob.ts"],"names":[],"mappings":";;AASA,4BAmDC;AA5DD,gDAA4C;AAC5C,wCAAiD;AACjD,sDAAkE;AAClE,uDAAkD;AAClD,6DAAyD;AAEzD,4DAAmD;AACnD,iCAA+C;AAE/C,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE;QACnC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,UAAU,EAAE,CAAC,sBAAS,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;YACvC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,IAAA,6BAAsB,EAAC,GAAG,EAAE,GAAG,EAAE,IAAA,6BAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,GAAG,GAAG,IAAA,mBAAQ,EAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAClE,IAAI,CAAC;oBACH,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBAC3C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,wBAAiB,EAAE,CAAC;wBACrC,MAAM,IAAI,iCAAmB,CAAC,gBAAgB,CAAC,CAAA;oBACjD,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAA;oBACX,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAA;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,iCAAmB,CAAC,gBAAgB,CAAC,CAAA;YACjD,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAE3C,6BAA6B;YAE7B,kEAAkE;YAClE,uEAAuE;YACvE,4BAA4B;YAC5B,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;YAElD,oEAAoE;YACpE,oEAAoE;YACpE,yEAAyE;YACzE,qEAAqE;YACrE,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,yBAAyB,GAAG,GAAG,CAAC,CAAA;YAErE,qEAAqE;YACrE,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,6BAA6B,CAAC,CAAA;YAEvE,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAK,0BAAoC;gBACjE,IAAI,EAAE,KAAK,CAAC,MAAM;aACnB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { parseCid } from '@atproto/lex-data'\nimport { BlobNotFoundError } from '@atproto/repo'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AuthScope } from '../../../../auth-scope'\nimport { isUserOrAdmin } from '../../../../auth-verifier'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\nimport { assertRepoAvailability } from './util'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.sync.getBlob, {\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      additional: [AuthScope.Takendown],\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, res, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const cid = parseCid(params.cid)\n      const found = await ctx.actorStore.read(params.did, async (store) => {\n        try {\n          return await store.repo.blob.getBlob(cid)\n        } catch (err) {\n          if (err instanceof BlobNotFoundError) {\n            throw new InvalidRequestError('Blob not found')\n          } else {\n            throw err\n          }\n        }\n      })\n      if (!found) {\n        throw new InvalidRequestError('Blob not found')\n      }\n      res.setHeader('content-length', found.size)\n\n      // Important Security headers\n\n      // This prevents the browser from trying to guess the content type\n      // and potentially loading the blob as executable code, or rendering it\n      // in some other unsafe way.\n      res.setHeader('x-content-type-options', 'nosniff')\n\n      // This forces the browser to download the blob instead of trying to\n      // render it when visiting the URL. This is important to prevent XSS\n      // attacks if the blob happens to be HTML. Even if JS is disabled via the\n      // CSP header below, a blob could still contain malicious HTML links.\n      res.setHeader('content-disposition', `attachment; filename=\"${cid}\"`)\n\n      // This should prevent the browser from executing the blob in any way\n      res.setHeader('content-security-policy', `default-src 'none'; sandbox`)\n\n      return {\n        encoding: found.mimeType || ('application/octet-stream' as const),\n        body: found.stream,\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/sync/getBlocks.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getBlocks.d.ts.map