@atproto/pds 0.4.215 → 0.4.217

package/dist/account-manager/helpers/invite.js

@@ -2,10 +2,11 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.setAccountInvitesDisabled = exports.disableInviteCodes = exports.getInvitedByForAccounts = exports.getInviteCodesUses = exports.getAccountsInviteCodes = exports.selectInviteCodesQb = exports.ensureInviteIsAvailable = exports.recordInviteUse = exports.createAccountInviteCodes = exports.createInviteCodes = void 0;
 const common_1 = require("@atproto/common");
+const lex_1 = require("@atproto/lex");
 const xrpc_server_1 = require("@atproto/xrpc-server");
 const db_1 = require("../../db");
 const createInviteCodes = async (db, toCreate, useCount) => {
-    const now = new Date().toISOString();
+    const now = (0, lex_1.currentDatetimeString)();
     const rows = toCreate.flatMap((account) => account.codes.map((code) => ({
         code: code,
         availableUses: useCount,
@@ -18,7 +19,7 @@ const createInviteCodes = async (db, toCreate, useCount) => {
 };
 exports.createInviteCodes = createInviteCodes;
 const createAccountInviteCodes = async (db, forAccount, codes, expectedTotal, disabled) => {
-    const now = new Date().toISOString();
+    const now = (0, lex_1.currentDatetimeString)();
     const rows = codes.map((code) => ({
         code,
         availableUses: 1,
@@ -149,17 +150,19 @@ const getInvitedByForAccounts = async (db, dids) => {
         .distinct())
         .execute();
     const uses = await (0, exports.getInviteCodesUses)(db, codeDetailsRes.map((row) => row.code));
-    const codeDetails = codeDetailsRes.map((row) => ({
+    const codeDetails = codeDetailsRes.map(({ uses: _, disabled, createdAt, ...row }) => ({
         ...row,
+        createdAt,
         uses: uses[row.code] ?? [],
-        disabled: row.disabled === 1,
+        disabled: disabled === 1,
     }));
-    return codeDetails.reduce((acc, cur) => {
+    const result = {};
+    for (const cur of codeDetails) {
         for (const use of cur.uses) {
-            acc[use.usedBy] = cur;
+            result[use.usedBy] = cur;
         }
-        return acc;
-    }, {});
+    }
+    return result;
 };
 exports.getInvitedByForAccounts = getInvitedByForAccounts;
 const disableInviteCodes = async (db, opts) => {

package/dist/account-manager/helpers/invite.js.map

@@ -1 +1 @@
-{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/invite.ts"],"names":[],"mappings":";;;AAAA,4CAA4C;AAC5C,sDAA0D;AAC1D,iCAAmC;AAG5B,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,QAAgD,EAChD,QAAgB,EAChB,EAAE;IACF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,IAAI,EAAE,IAAI;QACV,aAAa,EAAE,QAAQ;QACvB,QAAQ,EAAE,CAAU;QACpB,UAAU,EAAE,OAAO,CAAC,OAAO;QAC3B,SAAS,EAAE,OAAO;QAClB,SAAS,EAAE,GAAG;KACf,CAAC,CAAC,CACJ,CAAA;IACD,MAAM,OAAO,CAAC,GAAG,CACf,IAAA,mBAAU,EAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACnE,CACF,CAAA;AACH,CAAC,CAAA;AArBY,QAAA,iBAAiB,qBAqB7B;AAEM,MAAM,wBAAwB,GAAG,KAAK,EAC3C,EAAa,EACb,UAAkB,EAClB,KAAe,EACf,aAAqB,EACrB,QAAe,EACQ,EAAE;IACzB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CACpB,CAAC,IAAI,EAAE,EAAE,CACP,CAAC;QACC,IAAI;QACJ,aAAa,EAAE,CAAC;QAChB,QAAQ;QACR,UAAU;QACV,SAAS,EAAE,UAAU;QACrB,SAAS,EAAE,GAAG;KACf,CAAe,CACnB,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAEvE,MAAM,uBAAuB,GAAG,MAAM,EAAE,CAAC,EAAE;SACxC,UAAU,CAAC,aAAa,CAAC;SACzB,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,UAAU,CAAC;SACpC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,iDAAiD;SACnF,SAAS,EAAE;SACX,OAAO,EAAE,CAAA;IACZ,IAAI,uBAAuB,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,iCAAmB,CAC3B,yDAAyD,EACzD,iBAAiB,CAClB,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxB,GAAG,GAAG;QACN,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;QAC5B,IAAI,EAAE,EAAE;KACT,CAAC,CAAC,CAAA;AACL,CAAC,CAAA;AAxCY,QAAA,wBAAwB,4BAwCpC;AAEM,MAAM,eAAe,GAAG,KAAK,EAClC,EAAa,EACb,IAIC,EACD,EAAE;IACF,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAM;IAC5B,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;QACzC,IAAI,EAAE,IAAI,CAAC,UAAU;QACrB,MAAM,EAAE,IAAI,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,CAAC,GAAG;KACjB,CAAC,CACH,CAAA;AACH,CAAC,CAAA;AAhBY,QAAA,eAAe,mBAgB3B;AAEM,MAAM,uBAAuB,GAAG,KAAK,EAC1C,EAAa,EACb,UAAkB,EACH,EAAE;IACjB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE;SACvB,UAAU,CAAC,aAAa,CAAC;SACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,wBAAwB,CAAC;SACxD,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC;SAChC,SAAS,CAAC,aAAa,CAAC;SACxB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;SAC9B,gBAAgB,EAAE,CAAA;IAErB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,iCAAmB,CAC3B,oCAAoC,EACpC,mBAAmB,CACpB,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,EAAE;SACrB,UAAU,CAAC,iBAAiB,CAAC;SAC7B,MAAM,CAAC,aAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;SAC5B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;SAC9B,uBAAuB,EAAE,CAAA;IAE5B,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,IAAI,iCAAmB,CAC3B,oCAAoC,EACpC,mBAAmB,CACpB,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AA/BY,QAAA,uBAAuB,2BA+BnC;AAEM,MAAM,mBAAmB,GAAG,CAAC,EAAa,EAAE,EAAE;IACnD,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;IAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE;SAClB,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC;QACN,0BAA0B;QAC1B,wCAAwC;QACxC,kCAAkC;QAClC,sCAAsC;QACtC,oCAAoC;QACpC,oCAAoC;QACpC,EAAE,CAAC,EAAE;aACF,UAAU,CAAC,iBAAiB,CAAC;aAC7B,MAAM,CAAC,aAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;aAC5B,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;aAC9D,EAAE,CAAC,MAAM,CAAC;KACd,CAAC,CAAA;IACJ,OAAO,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;AAC1D,CAAC,CAAA;AAlBY,QAAA,mBAAmB,uBAkB/B;AAEM,MAAM,sBAAsB,GAAG,KAAK,EACzC,EAAa,EACb,IAAc,EACsB,EAAE;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC/C,2HAA2H;IAC3H,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAA;IAChC,MAAM,GAAG,GAAG,MAAM,IAAA,2BAAmB,EAAC,EAAE,CAAC;SACtC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,OAAO,EAAE,CAAA;IACZ,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAkB,EAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAChD,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;QAClD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE;YAC1B,GAAG,QAAQ;YACX;gBACE,GAAG,GAAG;gBACN,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;aAC7B;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAxBY,QAAA,sBAAsB,0BAwBlC;AAEM,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,KAAe,EACqB,EAAE;IACtC,MAAM,IAAI,GAA8B,EAAE,CAAA;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,EAAE;aACxB,UAAU,CAAC,iBAAiB,CAAC;aAC7B,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;aAC1B,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC;aACzB,SAAS,EAAE;aACX,OAAO,EAAE,CAAA;QACZ,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;YACpC,IAAI,CAAC,IAAI,MAAT,IAAI,CAAC,IAAI,IAAM,EAAE,EAAA;YACjB,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAnBY,QAAA,kBAAkB,sBAmB9B;AAEM,MAAM,uBAAuB,GAAG,KAAK,EAC1C,EAAa,EACb,IAAc,EACuB,EAAE;IACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAC9B,MAAM,cAAc,GAAG,MAAM,IAAA,2BAAmB,EAAC,EAAE,CAAC;SACjD,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAC1B,EAAE;SACC,UAAU,CAAC,iBAAiB,CAAC;SAC7B,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC;SAC3B,MAAM,CAAC,MAAM,CAAC;SACd,QAAQ,EAAE,CACd;SACA,OAAO,EAAE,CAAA;IACZ,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAkB,EACnC,EAAE,EACF,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CACtC,CAAA;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/C,GAAG,GAAG;QACN,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;KAC7B,CAAC,CAAC,CAAA;IACH,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACX,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAA;QACvB,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC,EACD,EAAgC,CACjC,CAAA;AACH,CAAC,CAAA;AAhCY,QAAA,uBAAuB,2BAgCnC;AAEM,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,IAA6C,EAC7C,EAAE;IACF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;aACpB,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAC9B,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,QAAQ,CAAC,CACvC,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AArBY,QAAA,kBAAkB,sBAqB9B;AAEM,MAAM,yBAAyB,GAAG,KAAK,EAC5C,EAAa,EACb,GAAW,EACX,QAAiB,EACjB,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,GAAG,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAA;AACH,CAAC,CAAA;AAXY,QAAA,yBAAyB,6BAWrC","sourcesContent":["import { chunkArray } from '@atproto/common'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { countAll } from '../../db'\nimport { AccountDb, InviteCode } from '../db'\n\nexport const createInviteCodes = async (\n  db: AccountDb,\n  toCreate: { account: string; codes: string[] }[],\n  useCount: number,\n) => {\n  const now = new Date().toISOString()\n  const rows = toCreate.flatMap((account) =>\n    account.codes.map((code) => ({\n      code: code,\n      availableUses: useCount,\n      disabled: 0 as const,\n      forAccount: account.account,\n      createdBy: 'admin',\n      createdAt: now,\n    })),\n  )\n  await Promise.all(\n    chunkArray(rows, 50).map((chunk) =>\n      db.executeWithRetry(db.db.insertInto('invite_code').values(chunk)),\n    ),\n  )\n}\n\nexport const createAccountInviteCodes = async (\n  db: AccountDb,\n  forAccount: string,\n  codes: string[],\n  expectedTotal: number,\n  disabled: 0 | 1,\n): Promise<CodeDetail[]> => {\n  const now = new Date().toISOString()\n  const rows = codes.map(\n    (code) =>\n      ({\n        code,\n        availableUses: 1,\n        disabled,\n        forAccount,\n        createdBy: forAccount,\n        createdAt: now,\n      }) as InviteCode,\n  )\n  await db.executeWithRetry(db.db.insertInto('invite_code').values(rows))\n\n  const finalRoutineInviteCodes = await db.db\n    .selectFrom('invite_code')\n    .where('forAccount', '=', forAccount)\n    .where('createdBy', '!=', 'admin') // dont count admin-gifted codes aginast the user\n    .selectAll()\n    .execute()\n  if (finalRoutineInviteCodes.length > expectedTotal) {\n    throw new InvalidRequestError(\n      'attempted to create additional codes in another request',\n      'DuplicateCreate',\n    )\n  }\n\n  return rows.map((row) => ({\n    ...row,\n    available: 1,\n    disabled: row.disabled === 1,\n    uses: [],\n  }))\n}\n\nexport const recordInviteUse = async (\n  db: AccountDb,\n  opts: {\n    did: string\n    inviteCode: string | undefined\n    now: string\n  },\n) => {\n  if (!opts.inviteCode) return\n  await db.executeWithRetry(\n    db.db.insertInto('invite_code_use').values({\n      code: opts.inviteCode,\n      usedBy: opts.did,\n      usedAt: opts.now,\n    }),\n  )\n}\n\nexport const ensureInviteIsAvailable = async (\n  db: AccountDb,\n  inviteCode: string,\n): Promise<void> => {\n  const invite = await db.db\n    .selectFrom('invite_code')\n    .leftJoin('actor', 'actor.did', 'invite_code.forAccount')\n    .where('takedownRef', 'is', null)\n    .selectAll('invite_code')\n    .where('code', '=', inviteCode)\n    .executeTakeFirst()\n\n  if (!invite || invite.disabled) {\n    throw new InvalidRequestError(\n      'Provided invite code not available',\n      'InvalidInviteCode',\n    )\n  }\n\n  const uses = await db.db\n    .selectFrom('invite_code_use')\n    .select(countAll.as('count'))\n    .where('code', '=', inviteCode)\n    .executeTakeFirstOrThrow()\n\n  if (invite.availableUses <= uses.count) {\n    throw new InvalidRequestError(\n      'Provided invite code not available',\n      'InvalidInviteCode',\n    )\n  }\n}\n\nexport const selectInviteCodesQb = (db: AccountDb) => {\n  const ref = db.db.dynamic.ref\n  const builder = db.db\n    .selectFrom('invite_code')\n    .select([\n      'invite_code.code as code',\n      'invite_code.availableUses as available',\n      'invite_code.disabled as disabled',\n      'invite_code.forAccount as forAccount',\n      'invite_code.createdBy as createdBy',\n      'invite_code.createdAt as createdAt',\n      db.db\n        .selectFrom('invite_code_use')\n        .select(countAll.as('count'))\n        .whereRef('invite_code_use.code', '=', ref('invite_code.code'))\n        .as('uses'),\n    ])\n  return db.db.selectFrom(builder.as('codes')).selectAll()\n}\n\nexport const getAccountsInviteCodes = async (\n  db: AccountDb,\n  dids: string[],\n): Promise<Map<string, CodeDetail[]>> => {\n  const results = new Map<string, CodeDetail[]>()\n  // We don't want to pass an empty array to kysely and let's avoid running a query entirely if there is nothing to match for\n  if (!dids.length) return results\n  const res = await selectInviteCodesQb(db)\n    .where('forAccount', 'in', dids)\n    .execute()\n  const codes = res.map((row) => row.code)\n  const uses = await getInviteCodesUses(db, codes)\n  res.forEach((row) => {\n    const existing = results.get(row.forAccount) ?? []\n    results.set(row.forAccount, [\n      ...existing,\n      {\n        ...row,\n        uses: uses[row.code] ?? [],\n        disabled: row.disabled === 1,\n      },\n    ])\n  })\n  return results\n}\n\nexport const getInviteCodesUses = async (\n  db: AccountDb,\n  codes: string[],\n): Promise<Record<string, CodeUse[]>> => {\n  const uses: Record<string, CodeUse[]> = {}\n  if (codes.length > 0) {\n    const usesRes = await db.db\n      .selectFrom('invite_code_use')\n      .where('code', 'in', codes)\n      .orderBy('usedAt', 'desc')\n      .selectAll()\n      .execute()\n    for (const use of usesRes) {\n      const { code, usedBy, usedAt } = use\n      uses[code] ??= []\n      uses[code].push({ usedBy, usedAt })\n    }\n  }\n  return uses\n}\n\nexport const getInvitedByForAccounts = async (\n  db: AccountDb,\n  dids: string[],\n): Promise<Record<string, CodeDetail>> => {\n  if (dids.length < 1) return {}\n  const codeDetailsRes = await selectInviteCodesQb(db)\n    .where('code', 'in', (qb) =>\n      qb\n        .selectFrom('invite_code_use')\n        .where('usedBy', 'in', dids)\n        .select('code')\n        .distinct(),\n    )\n    .execute()\n  const uses = await getInviteCodesUses(\n    db,\n    codeDetailsRes.map((row) => row.code),\n  )\n  const codeDetails = codeDetailsRes.map((row) => ({\n    ...row,\n    uses: uses[row.code] ?? [],\n    disabled: row.disabled === 1,\n  }))\n  return codeDetails.reduce(\n    (acc, cur) => {\n      for (const use of cur.uses) {\n        acc[use.usedBy] = cur\n      }\n      return acc\n    },\n    {} as Record<string, CodeDetail>,\n  )\n}\n\nexport const disableInviteCodes = async (\n  db: AccountDb,\n  opts: { codes: string[]; accounts: string[] },\n) => {\n  const { codes, accounts } = opts\n  if (codes.length > 0) {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('invite_code')\n        .set({ disabled: 1 })\n        .where('code', 'in', codes),\n    )\n  }\n  if (accounts.length > 0) {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('invite_code')\n        .set({ disabled: 1 })\n        .where('forAccount', 'in', accounts),\n    )\n  }\n}\n\nexport const setAccountInvitesDisabled = async (\n  db: AccountDb,\n  did: string,\n  disabled: boolean,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .where('did', '=', did)\n      .set({ invitesDisabled: disabled ? 1 : 0 }),\n  )\n}\n\nexport type CodeDetail = {\n  code: string\n  available: number\n  disabled: boolean\n  forAccount: string\n  createdBy: string\n  createdAt: string\n  uses: CodeUse[]\n}\n\ntype CodeUse = {\n  usedBy: string\n  usedAt: string\n}\n"]}
+{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/invite.ts"],"names":[],"mappings":";;;AAAA,4CAA4C;AAC5C,sCAA+E;AAC/E,sDAA0D;AAC1D,iCAAmC;AAO5B,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,QAAgD,EAChD,QAAgB,EAChB,EAAE;IACF,MAAM,GAAG,GAAG,IAAA,2BAAqB,GAAE,CAAA;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,IAAI,EAAE,IAAI;QACV,aAAa,EAAE,QAAQ;QACvB,QAAQ,EAAE,CAAU;QACpB,UAAU,EAAE,OAAO,CAAC,OAAO;QAC3B,SAAS,EAAE,OAAO;QAClB,SAAS,EAAE,GAAG;KACf,CAAC,CAAC,CACJ,CAAA;IACD,MAAM,OAAO,CAAC,GAAG,CACf,IAAA,mBAAU,EAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACnE,CACF,CAAA;AACH,CAAC,CAAA;AArBY,QAAA,iBAAiB,qBAqB7B;AAEM,MAAM,wBAAwB,GAAG,KAAK,EAC3C,EAAa,EACb,UAAkB,EAClB,KAAe,EACf,aAAqB,EACrB,QAAe,EACQ,EAAE;IACzB,MAAM,GAAG,GAAG,IAAA,2BAAqB,GAAE,CAAA;IACnC,MAAM,IAAI,GAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI;QACJ,aAAa,EAAE,CAAC;QAChB,QAAQ;QACR,UAAU;QACV,SAAS,EAAE,UAAU;QACrB,SAAS,EAAE,GAAG;KACf,CAAC,CAAC,CAAA;IACH,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAEvE,MAAM,uBAAuB,GAAG,MAAM,EAAE,CAAC,EAAE;SACxC,UAAU,CAAC,aAAa,CAAC;SACzB,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,UAAU,CAAC;SACpC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,iDAAiD;SACnF,SAAS,EAAE;SACX,OAAO,EAAE,CAAA;IACZ,IAAI,uBAAuB,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,iCAAmB,CAC3B,yDAAyD,EACzD,iBAAiB,CAClB,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxB,GAAG,GAAG;QACN,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;QAC5B,IAAI,EAAE,EAAE;KACT,CAAC,CAAC,CAAA;AACL,CAAC,CAAA;AArCY,QAAA,wBAAwB,4BAqCpC;AAEM,MAAM,eAAe,GAAG,KAAK,EAClC,EAAa,EACb,IAIC,EACD,EAAE;IACF,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAM;IAC5B,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;QACzC,IAAI,EAAE,IAAI,CAAC,UAAU;QACrB,MAAM,EAAE,IAAI,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,CAAC,GAAG;KACjB,CAAC,CACH,CAAA;AACH,CAAC,CAAA;AAhBY,QAAA,eAAe,mBAgB3B;AAEM,MAAM,uBAAuB,GAAG,KAAK,EAC1C,EAAa,EACb,UAAkB,EACH,EAAE;IACjB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE;SACvB,UAAU,CAAC,aAAa,CAAC;SACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,wBAAwB,CAAC;SACxD,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC;SAChC,SAAS,CAAC,aAAa,CAAC;SACxB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;SAC9B,gBAAgB,EAAE,CAAA;IAErB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,iCAAmB,CAC3B,oCAAoC,EACpC,mBAAmB,CACpB,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,EAAE;SACrB,UAAU,CAAC,iBAAiB,CAAC;SAC7B,MAAM,CAAC,aAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;SAC5B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;SAC9B,uBAAuB,EAAE,CAAA;IAE5B,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,IAAI,iCAAmB,CAC3B,oCAAoC,EACpC,mBAAmB,CACpB,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AA/BY,QAAA,uBAAuB,2BA+BnC;AAEM,MAAM,mBAAmB,GAAG,CAAC,EAAa,EAAE,EAAE;IACnD,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;IAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE;SAClB,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC;QACN,0BAA0B;QAC1B,wCAAwC;QACxC,kCAAkC;QAClC,sCAAsC;QACtC,oCAAoC;QACpC,oCAAoC;QACpC,EAAE,CAAC,EAAE;aACF,UAAU,CAAC,iBAAiB,CAAC;aAC7B,MAAM,CAAC,aAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;aAC5B,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;aAC9D,EAAE,CAAC,MAAM,CAAC;KACd,CAAC,CAAA;IACJ,OAAO,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;AAC1D,CAAC,CAAA;AAlBY,QAAA,mBAAmB,uBAkB/B;AAEM,MAAM,sBAAsB,GAAG,KAAK,EACzC,EAAa,EACb,IAAc,EACsB,EAAE;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC/C,2HAA2H;IAC3H,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAA;IAChC,MAAM,GAAG,GAAG,MAAM,IAAA,2BAAmB,EAAC,EAAE,CAAC;SACtC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,OAAO,EAAE,CAAA;IACZ,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAkB,EAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAChD,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;QAClD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE;YAC1B,GAAG,QAAQ;YACX;gBACE,GAAG,GAAG;gBACN,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;aACgB;SAC/C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAxBY,QAAA,sBAAsB,0BAwBlC;AAEM,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,KAAe,EACqB,EAAE;IACtC,MAAM,IAAI,GAA8B,EAAE,CAAA;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,EAAE;aACxB,UAAU,CAAC,iBAAiB,CAAC;aAC7B,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;aAC1B,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC;aACzB,SAAS,EAAE;aACX,OAAO,EAAE,CAAA;QACZ,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;YACpC,IAAI,CAAC,IAAI,MAAT,IAAI,CAAC,IAAI,IAAM,EAAE,EAAA;YACjB,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAnBY,QAAA,kBAAkB,sBAmB9B;AAEM,MAAM,uBAAuB,GAAG,KAAK,EAC1C,EAAa,EACb,IAAiB,EACoB,EAAE;IACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAC9B,MAAM,cAAc,GAAG,MAAM,IAAA,2BAAmB,EAAC,EAAE,CAAC;SACjD,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAC1B,EAAE;SACC,UAAU,CAAC,iBAAiB,CAAC;SAC7B,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC;SAC3B,MAAM,CAAC,MAAM,CAAC;SACd,QAAQ,EAAE,CACd;SACA,OAAO,EAAE,CAAA;IACZ,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAkB,EACnC,EAAE,EACF,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CACtC,CAAA;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CACpC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,EAAE,EAAc,EAAE,CAAC,CAAC;QACzD,GAAG,GAAG;QACN,SAAS;QACT,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,QAAQ,KAAK,CAAC;KACzB,CAAC,CACH,CAAA;IAED,MAAM,MAAM,GAA+B,EAAE,CAAA;IAE7C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AApCY,QAAA,uBAAuB,2BAoCnC;AAEM,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,IAA6C,EAC7C,EAAE;IACF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;aACpB,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAC9B,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,QAAQ,CAAC,CACvC,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AArBY,QAAA,kBAAkB,sBAqB9B;AAEM,MAAM,yBAAyB,GAAG,KAAK,EAC5C,EAAa,EACb,GAAc,EACd,QAAiB,EACjB,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,GAAG,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAA;AACH,CAAC,CAAA;AAXY,QAAA,yBAAyB,6BAWrC","sourcesContent":["import { chunkArray } from '@atproto/common'\nimport { DatetimeString, DidString, currentDatetimeString } from '@atproto/lex'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { countAll } from '../../db'\nimport { com } from '../../lexicons/index.js'\nimport { AccountDb, InviteCode } from '../db'\n\nexport type CodeDetail = com.atproto.server.defs.InviteCode\nexport type CodeUse = com.atproto.server.defs.InviteCodeUse\n\nexport const createInviteCodes = async (\n  db: AccountDb,\n  toCreate: { account: string; codes: string[] }[],\n  useCount: number,\n) => {\n  const now = currentDatetimeString()\n  const rows = toCreate.flatMap((account) =>\n    account.codes.map((code) => ({\n      code: code,\n      availableUses: useCount,\n      disabled: 0 as const,\n      forAccount: account.account,\n      createdBy: 'admin',\n      createdAt: now,\n    })),\n  )\n  await Promise.all(\n    chunkArray(rows, 50).map((chunk) =>\n      db.executeWithRetry(db.db.insertInto('invite_code').values(chunk)),\n    ),\n  )\n}\n\nexport const createAccountInviteCodes = async (\n  db: AccountDb,\n  forAccount: string,\n  codes: string[],\n  expectedTotal: number,\n  disabled: 0 | 1,\n): Promise<CodeDetail[]> => {\n  const now = currentDatetimeString()\n  const rows: InviteCode[] = codes.map((code) => ({\n    code,\n    availableUses: 1,\n    disabled,\n    forAccount,\n    createdBy: forAccount,\n    createdAt: now,\n  }))\n  await db.executeWithRetry(db.db.insertInto('invite_code').values(rows))\n\n  const finalRoutineInviteCodes = await db.db\n    .selectFrom('invite_code')\n    .where('forAccount', '=', forAccount)\n    .where('createdBy', '!=', 'admin') // dont count admin-gifted codes aginast the user\n    .selectAll()\n    .execute()\n  if (finalRoutineInviteCodes.length > expectedTotal) {\n    throw new InvalidRequestError(\n      'attempted to create additional codes in another request',\n      'DuplicateCreate',\n    )\n  }\n\n  return rows.map((row) => ({\n    ...row,\n    available: 1,\n    disabled: row.disabled === 1,\n    uses: [],\n  }))\n}\n\nexport const recordInviteUse = async (\n  db: AccountDb,\n  opts: {\n    did: DidString\n    inviteCode: string | undefined\n    now: DatetimeString\n  },\n) => {\n  if (!opts.inviteCode) return\n  await db.executeWithRetry(\n    db.db.insertInto('invite_code_use').values({\n      code: opts.inviteCode,\n      usedBy: opts.did,\n      usedAt: opts.now,\n    }),\n  )\n}\n\nexport const ensureInviteIsAvailable = async (\n  db: AccountDb,\n  inviteCode: string,\n): Promise<void> => {\n  const invite = await db.db\n    .selectFrom('invite_code')\n    .leftJoin('actor', 'actor.did', 'invite_code.forAccount')\n    .where('takedownRef', 'is', null)\n    .selectAll('invite_code')\n    .where('code', '=', inviteCode)\n    .executeTakeFirst()\n\n  if (!invite || invite.disabled) {\n    throw new InvalidRequestError(\n      'Provided invite code not available',\n      'InvalidInviteCode',\n    )\n  }\n\n  const uses = await db.db\n    .selectFrom('invite_code_use')\n    .select(countAll.as('count'))\n    .where('code', '=', inviteCode)\n    .executeTakeFirstOrThrow()\n\n  if (invite.availableUses <= uses.count) {\n    throw new InvalidRequestError(\n      'Provided invite code not available',\n      'InvalidInviteCode',\n    )\n  }\n}\n\nexport const selectInviteCodesQb = (db: AccountDb) => {\n  const ref = db.db.dynamic.ref\n  const builder = db.db\n    .selectFrom('invite_code')\n    .select([\n      'invite_code.code as code',\n      'invite_code.availableUses as available',\n      'invite_code.disabled as disabled',\n      'invite_code.forAccount as forAccount',\n      'invite_code.createdBy as createdBy',\n      'invite_code.createdAt as createdAt',\n      db.db\n        .selectFrom('invite_code_use')\n        .select(countAll.as('count'))\n        .whereRef('invite_code_use.code', '=', ref('invite_code.code'))\n        .as('uses'),\n    ])\n  return db.db.selectFrom(builder.as('codes')).selectAll()\n}\n\nexport const getAccountsInviteCodes = async (\n  db: AccountDb,\n  dids: string[],\n): Promise<Map<string, CodeDetail[]>> => {\n  const results = new Map<string, CodeDetail[]>()\n  // We don't want to pass an empty array to kysely and let's avoid running a query entirely if there is nothing to match for\n  if (!dids.length) return results\n  const res = await selectInviteCodesQb(db)\n    .where('forAccount', 'in', dids)\n    .execute()\n  const codes = res.map((row) => row.code)\n  const uses = await getInviteCodesUses(db, codes)\n  res.forEach((row) => {\n    const existing = results.get(row.forAccount) ?? []\n    results.set(row.forAccount, [\n      ...existing,\n      {\n        ...row,\n        uses: uses[row.code] ?? [],\n        disabled: row.disabled === 1,\n      } satisfies com.atproto.server.defs.InviteCode,\n    ])\n  })\n  return results\n}\n\nexport const getInviteCodesUses = async (\n  db: AccountDb,\n  codes: string[],\n): Promise<Record<string, CodeUse[]>> => {\n  const uses: Record<string, CodeUse[]> = {}\n  if (codes.length > 0) {\n    const usesRes = await db.db\n      .selectFrom('invite_code_use')\n      .where('code', 'in', codes)\n      .orderBy('usedAt', 'desc')\n      .selectAll()\n      .execute()\n    for (const use of usesRes) {\n      const { code, usedBy, usedAt } = use\n      uses[code] ??= []\n      uses[code].push({ usedBy, usedAt })\n    }\n  }\n  return uses\n}\n\nexport const getInvitedByForAccounts = async (\n  db: AccountDb,\n  dids: DidString[],\n): Promise<Record<string, CodeDetail>> => {\n  if (dids.length < 1) return {}\n  const codeDetailsRes = await selectInviteCodesQb(db)\n    .where('code', 'in', (qb) =>\n      qb\n        .selectFrom('invite_code_use')\n        .where('usedBy', 'in', dids)\n        .select('code')\n        .distinct(),\n    )\n    .execute()\n  const uses = await getInviteCodesUses(\n    db,\n    codeDetailsRes.map((row) => row.code),\n  )\n  const codeDetails = codeDetailsRes.map(\n    ({ uses: _, disabled, createdAt, ...row }): CodeDetail => ({\n      ...row,\n      createdAt,\n      uses: uses[row.code] ?? [],\n      disabled: disabled === 1,\n    }),\n  )\n\n  const result: Record<string, CodeDetail> = {}\n\n  for (const cur of codeDetails) {\n    for (const use of cur.uses) {\n      result[use.usedBy] = cur\n    }\n  }\n\n  return result\n}\n\nexport const disableInviteCodes = async (\n  db: AccountDb,\n  opts: { codes: string[]; accounts: string[] },\n) => {\n  const { codes, accounts } = opts\n  if (codes.length > 0) {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('invite_code')\n        .set({ disabled: 1 })\n        .where('code', 'in', codes),\n    )\n  }\n  if (accounts.length > 0) {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('invite_code')\n        .set({ disabled: 1 })\n        .where('forAccount', 'in', accounts),\n    )\n  }\n}\n\nexport const setAccountInvitesDisabled = async (\n  db: AccountDb,\n  did: DidString,\n  disabled: boolean,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .where('did', '=', did)\n      .set({ invitesDisabled: disabled ? 1 : 0 }),\n  )\n}\n"]}

package/dist/account-manager/helpers/password.d.ts

@@ -1,4 +1,5 @@
-import { AppPassword } from '../../lexicon/types/com/atproto/server/createAppPassword';
+import { DatetimeString } from '@atproto/lex';
+import { com } from '../../lexicons/index.js';
 import { AccountDb } from '../db';
 export type AppPassDescript = {
     name: string;
@@ -10,10 +11,10 @@ export declare const updateUserPassword: (db: AccountDb, opts: {
     did: string;
     passwordScrypt: string;
 }) => Promise<void>;
-export declare const createAppPassword: (db: AccountDb, did: string, name: string, privileged: boolean) => Promise<AppPassword>;
+export declare const createAppPassword: (db: AccountDb, did: string, name: string, privileged: boolean) => Promise<com.atproto.server.createAppPassword.AppPassword>;
 export declare const listAppPasswords: (db: AccountDb, did: string) => Promise<{
     name: string;
-    createdAt: string;
+    createdAt: DatetimeString;
     privileged: boolean;
 }[]>;
 export declare const deleteAppPassword: (db: AccountDb, did: string, name: string) => Promise<void>;

package/dist/account-manager/helpers/password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/password.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,0DAA0D,CAAA;AACtF,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGjC,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,OAAO,CAAA;CACpB,CAAA;AAED,eAAO,MAAM,qBAAqB,GAChC,IAAI,SAAS,EACb,KAAK,MAAM,EACX,UAAU,MAAM,KACf,OAAO,CAAC,OAAO,CAOjB,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,IAAI,SAAS,EACb,KAAK,MAAM,EACX,UAAU,MAAM,KACf,OAAO,CAAC,eAAe,GAAG,IAAI,CAahC,CAAA;AAED,eAAO,MAAM,kBAAkB,GAC7B,IAAI,SAAS,EACb,MAAM;IACJ,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;CACvB,kBAQF,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,IAAI,SAAS,EACb,KAAK,MAAM,EACX,MAAM,MAAM,EACZ,YAAY,OAAO,KAClB,OAAO,CAAC,WAAW,CAiCrB,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC3B,IAAI,SAAS,EACb,KAAK,MAAM,KACV,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,EAAE,CAYpE,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,IAAI,SAAS,EACb,KAAK,MAAM,EACX,MAAM,MAAM,kBAQb,CAAA"}
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/password.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAyB,MAAM,cAAc,CAAA;AAEpE,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGjC,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,OAAO,CAAA;CACpB,CAAA;AAED,eAAO,MAAM,qBAAqB,GAChC,IAAI,SAAS,EACb,KAAK,MAAM,EACX,UAAU,MAAM,KACf,OAAO,CAAC,OAAO,CAOjB,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,IAAI,SAAS,EACb,KAAK,MAAM,EACX,UAAU,MAAM,KACf,OAAO,CAAC,eAAe,GAAG,IAAI,CAahC,CAAA;AAED,eAAO,MAAM,kBAAkB,GAC7B,IAAI,SAAS,EACb,MAAM;IACJ,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;CACvB,kBAQF,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,IAAI,SAAS,EACb,KAAK,MAAM,EACX,MAAM,MAAM,EACZ,YAAY,OAAO,KAClB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAiC1D,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC3B,IAAI,SAAS,EACb,KAAK,MAAM,KACV,OAAO,CACR;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,cAAc,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,EAAE,CAanE,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,IAAI,SAAS,EACb,KAAK,MAAM,EACX,MAAM,MAAM,kBAQb,CAAA"}

package/dist/account-manager/helpers/password.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.deleteAppPassword = exports.listAppPasswords = exports.createAppPassword = exports.updateUserPassword = exports.verifyAppPassword = exports.verifyAccountPassword = void 0;
 const crypto_1 = require("@atproto/crypto");
+const lex_1 = require("@atproto/lex");
 const xrpc_server_1 = require("@atproto/xrpc-server");
 const scrypt = __importStar(require("./scrypt"));
 const verifyAccountPassword = async (db, did, password) => {
@@ -87,7 +88,7 @@ const createAppPassword = async (db, did, name, privileged) => {
         did,
         name,
         passwordScrypt,
-        createdAt: new Date().toISOString(),
+        createdAt: (0, lex_1.currentDatetimeString)(),
         privileged: privileged ? 1 : 0,
     })
         .returningAll());

package/dist/account-manager/helpers/password.js.map

@@ -1 +1 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/password.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA2C;AAC3C,sDAA0D;AAG1D,iDAAkC;AAO3B,MAAM,qBAAqB,GAAG,KAAK,EACxC,EAAa,EACb,GAAW,EACX,QAAgB,EACE,EAAE;IACpB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,EAAE;SACtB,UAAU,CAAC,SAAS,CAAC;SACrB,SAAS,EAAE;SACX,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAC5E,CAAC,CAAA;AAXY,QAAA,qBAAqB,yBAWjC;AAEM,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,QAAgB,EACiB,EAAE;IACnC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,EAAE;SACtB,UAAU,CAAC,cAAc,CAAC;SAC1B,SAAS,EAAE;SACX,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,gBAAgB,EAAE,GAAG,EAAE,cAAc,CAAC;SAC5C,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;KAClD,CAAA;AACH,CAAC,CAAA;AAjBY,QAAA,iBAAiB,qBAiB7B;AAEM,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,IAGC,EACD,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,GAAG,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;SAC5C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAC/B,CAAA;AACH,CAAC,CAAA;AAbY,QAAA,kBAAkB,sBAa9B;AAEM,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,IAAY,EACZ,UAAmB,EACG,EAAE;IACxB,sCAAsC;IACtC,sBAAsB;IACtB,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAChB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KAClB,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,cAAc,CAAC;SAC1B,MAAM,CAAC;QACN,GAAG;QACH,IAAI;QACJ,cAAc;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,YAAY,EAAE,CAClB,CAAA;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,iCAAmB,CAAC,wCAAwC,CAAC,CAAA;IACzE,CAAC;IACD,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU;KACX,CAAA;AACH,CAAC,CAAA;AAtCY,QAAA,iBAAiB,qBAsC7B;AAEM,MAAM,gBAAgB,GAAG,KAAK,EACnC,EAAa,EACb,GAAW,EAC0D,EAAE;IACvE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,cAAc,CAAC;SAC1B,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;SAC3C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;SAC5B,OAAO,EAAE,CAAA;IACZ,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;KAChD,CAAC,CAAC,CAAA;AACL,CAAC,CAAA;AAfY,QAAA,gBAAgB,oBAe5B;AAEM,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,IAAY,EACZ,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,cAAc,CAAC;SAC1B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAC5B,CAAA;AACH,CAAC,CAAA;AAXY,QAAA,iBAAiB,qBAW7B","sourcesContent":["import { randomStr } from '@atproto/crypto'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { AppPassword } from '../../lexicon/types/com/atproto/server/createAppPassword'\nimport { AccountDb } from '../db'\nimport * as scrypt from './scrypt'\n\nexport type AppPassDescript = {\n  name: string\n  privileged: boolean\n}\n\nexport const verifyAccountPassword = async (\n  db: AccountDb,\n  did: string,\n  password: string,\n): Promise<boolean> => {\n  const found = await db.db\n    .selectFrom('account')\n    .selectAll()\n    .where('did', '=', did)\n    .executeTakeFirst()\n  return found ? await scrypt.verify(password, found.passwordScrypt) : false\n}\n\nexport const verifyAppPassword = async (\n  db: AccountDb,\n  did: string,\n  password: string,\n): Promise<AppPassDescript | null> => {\n  const passwordScrypt = await scrypt.hashAppPassword(did, password)\n  const found = await db.db\n    .selectFrom('app_password')\n    .selectAll()\n    .where('did', '=', did)\n    .where('passwordScrypt', '=', passwordScrypt)\n    .executeTakeFirst()\n  if (!found) return null\n  return {\n    name: found.name,\n    privileged: found.privileged === 1 ? true : false,\n  }\n}\n\nexport const updateUserPassword = async (\n  db: AccountDb,\n  opts: {\n    did: string\n    passwordScrypt: string\n  },\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .set({ passwordScrypt: opts.passwordScrypt })\n      .where('did', '=', opts.did),\n  )\n}\n\nexport const createAppPassword = async (\n  db: AccountDb,\n  did: string,\n  name: string,\n  privileged: boolean,\n): Promise<AppPassword> => {\n  // create an app password with format:\n  // 1234-abcd-5678-efgh\n  const str = randomStr(16, 'base32').slice(0, 16)\n  const chunks = [\n    str.slice(0, 4),\n    str.slice(4, 8),\n    str.slice(8, 12),\n    str.slice(12, 16),\n  ]\n  const password = chunks.join('-')\n  const passwordScrypt = await scrypt.hashAppPassword(did, password)\n  const [got] = await db.executeWithRetry(\n    db.db\n      .insertInto('app_password')\n      .values({\n        did,\n        name,\n        passwordScrypt,\n        createdAt: new Date().toISOString(),\n        privileged: privileged ? 1 : 0,\n      })\n      .returningAll(),\n  )\n  if (!got) {\n    throw new InvalidRequestError('could not create app-specific password')\n  }\n  return {\n    name,\n    password,\n    createdAt: got.createdAt,\n    privileged,\n  }\n}\n\nexport const listAppPasswords = async (\n  db: AccountDb,\n  did: string,\n): Promise<{ name: string; createdAt: string; privileged: boolean }[]> => {\n  const res = await db.db\n    .selectFrom('app_password')\n    .select(['name', 'createdAt', 'privileged'])\n    .where('did', '=', did)\n    .orderBy('createdAt', 'desc')\n    .execute()\n  return res.map((row) => ({\n    name: row.name,\n    createdAt: row.createdAt,\n    privileged: row.privileged === 1 ? true : false,\n  }))\n}\n\nexport const deleteAppPassword = async (\n  db: AccountDb,\n  did: string,\n  name: string,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .deleteFrom('app_password')\n      .where('did', '=', did)\n      .where('name', '=', name),\n  )\n}\n"]}
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/password.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA2C;AAC3C,sCAAoE;AACpE,sDAA0D;AAG1D,iDAAkC;AAO3B,MAAM,qBAAqB,GAAG,KAAK,EACxC,EAAa,EACb,GAAW,EACX,QAAgB,EACE,EAAE;IACpB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,EAAE;SACtB,UAAU,CAAC,SAAS,CAAC;SACrB,SAAS,EAAE;SACX,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAC5E,CAAC,CAAA;AAXY,QAAA,qBAAqB,yBAWjC;AAEM,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,QAAgB,EACiB,EAAE;IACnC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,EAAE;SACtB,UAAU,CAAC,cAAc,CAAC;SAC1B,SAAS,EAAE;SACX,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,gBAAgB,EAAE,GAAG,EAAE,cAAc,CAAC;SAC5C,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;KAClD,CAAA;AACH,CAAC,CAAA;AAjBY,QAAA,iBAAiB,qBAiB7B;AAEM,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,IAGC,EACD,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,GAAG,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;SAC5C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAC/B,CAAA;AACH,CAAC,CAAA;AAbY,QAAA,kBAAkB,sBAa9B;AAEM,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,IAAY,EACZ,UAAmB,EACwC,EAAE;IAC7D,sCAAsC;IACtC,sBAAsB;IACtB,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAChB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KAClB,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,cAAc,CAAC;SAC1B,MAAM,CAAC;QACN,GAAG;QACH,IAAI;QACJ,cAAc;QACd,SAAS,EAAE,IAAA,2BAAqB,GAAE;QAClC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,YAAY,EAAE,CAClB,CAAA;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,iCAAmB,CAAC,wCAAwC,CAAC,CAAA;IACzE,CAAC;IACD,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU;KACX,CAAA;AACH,CAAC,CAAA;AAtCY,QAAA,iBAAiB,qBAsC7B;AAEM,MAAM,gBAAgB,GAAG,KAAK,EACnC,EAAa,EACb,GAAW,EAGX,EAAE;IACF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,cAAc,CAAC;SAC1B,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;SAC3C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;SAC5B,OAAO,EAAE,CAAA;IACZ,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;KAChD,CAAC,CAAC,CAAA;AACL,CAAC,CAAA;AAjBY,QAAA,gBAAgB,oBAiB5B;AAEM,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,IAAY,EACZ,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,cAAc,CAAC;SAC1B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAC5B,CAAA;AACH,CAAC,CAAA;AAXY,QAAA,iBAAiB,qBAW7B","sourcesContent":["import { randomStr } from '@atproto/crypto'\nimport { DatetimeString, currentDatetimeString } from '@atproto/lex'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { com } from '../../lexicons/index.js'\nimport { AccountDb } from '../db'\nimport * as scrypt from './scrypt'\n\nexport type AppPassDescript = {\n  name: string\n  privileged: boolean\n}\n\nexport const verifyAccountPassword = async (\n  db: AccountDb,\n  did: string,\n  password: string,\n): Promise<boolean> => {\n  const found = await db.db\n    .selectFrom('account')\n    .selectAll()\n    .where('did', '=', did)\n    .executeTakeFirst()\n  return found ? await scrypt.verify(password, found.passwordScrypt) : false\n}\n\nexport const verifyAppPassword = async (\n  db: AccountDb,\n  did: string,\n  password: string,\n): Promise<AppPassDescript | null> => {\n  const passwordScrypt = await scrypt.hashAppPassword(did, password)\n  const found = await db.db\n    .selectFrom('app_password')\n    .selectAll()\n    .where('did', '=', did)\n    .where('passwordScrypt', '=', passwordScrypt)\n    .executeTakeFirst()\n  if (!found) return null\n  return {\n    name: found.name,\n    privileged: found.privileged === 1 ? true : false,\n  }\n}\n\nexport const updateUserPassword = async (\n  db: AccountDb,\n  opts: {\n    did: string\n    passwordScrypt: string\n  },\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .set({ passwordScrypt: opts.passwordScrypt })\n      .where('did', '=', opts.did),\n  )\n}\n\nexport const createAppPassword = async (\n  db: AccountDb,\n  did: string,\n  name: string,\n  privileged: boolean,\n): Promise<com.atproto.server.createAppPassword.AppPassword> => {\n  // create an app password with format:\n  // 1234-abcd-5678-efgh\n  const str = randomStr(16, 'base32').slice(0, 16)\n  const chunks = [\n    str.slice(0, 4),\n    str.slice(4, 8),\n    str.slice(8, 12),\n    str.slice(12, 16),\n  ]\n  const password = chunks.join('-')\n  const passwordScrypt = await scrypt.hashAppPassword(did, password)\n  const [got] = await db.executeWithRetry(\n    db.db\n      .insertInto('app_password')\n      .values({\n        did,\n        name,\n        passwordScrypt,\n        createdAt: currentDatetimeString(),\n        privileged: privileged ? 1 : 0,\n      })\n      .returningAll(),\n  )\n  if (!got) {\n    throw new InvalidRequestError('could not create app-specific password')\n  }\n  return {\n    name,\n    password,\n    createdAt: got.createdAt,\n    privileged,\n  }\n}\n\nexport const listAppPasswords = async (\n  db: AccountDb,\n  did: string,\n): Promise<\n  { name: string; createdAt: DatetimeString; privileged: boolean }[]\n> => {\n  const res = await db.db\n    .selectFrom('app_password')\n    .select(['name', 'createdAt', 'privileged'])\n    .where('did', '=', did)\n    .orderBy('createdAt', 'desc')\n    .execute()\n  return res.map((row) => ({\n    name: row.name,\n    createdAt: row.createdAt,\n    privileged: row.privileged === 1 ? true : false,\n  }))\n}\n\nexport const deleteAppPassword = async (\n  db: AccountDb,\n  did: string,\n  name: string,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .deleteFrom('app_password')\n      .where('did', '=', did)\n      .where('name', '=', name),\n  )\n}\n"]}

package/dist/account-manager/helpers/repo.d.ts

@@ -1,4 +1,4 @@
-import { CID } from 'multiformats/cid';
+import { Cid } from '@atproto/lex';
 import { AccountDb } from '../db';
-export declare const updateRoot: (db: AccountDb, did: string, cid: CID, rev: string) => Promise<void>;
+export declare const updateRoot: (db: AccountDb, did: string, cid: Cid, rev: string) => Promise<void>;
 //# sourceMappingURL=repo.d.ts.map

package/dist/account-manager/helpers/repo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/repo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAEjC,eAAO,MAAM,UAAU,GACrB,IAAI,SAAS,EACb,KAAK,MAAM,EACX,KAAK,GAAG,EACR,KAAK,MAAM,kBAgBZ,CAAA"}
+{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/repo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAyB,MAAM,cAAc,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAEjC,eAAO,MAAM,UAAU,GACrB,IAAI,SAAS,EACb,KAAK,MAAM,EACX,KAAK,GAAG,EACR,KAAK,MAAM,kBAgBZ,CAAA"}

package/dist/account-manager/helpers/repo.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.updateRoot = void 0;
+const lex_1 = require("@atproto/lex");
 const updateRoot = async (db, did, cid, rev) => {
     // @TODO balance risk of a race in the case of a long retry
     await db.executeWithRetry(db.db
@@ -9,7 +10,7 @@ const updateRoot = async (db, did, cid, rev) => {
         did,
         cid: cid.toString(),
         rev,
-        indexedAt: new Date().toISOString(),
+        indexedAt: (0, lex_1.currentDatetimeString)(),
     })
         .onConflict((oc) => oc.column('did').doUpdateSet({ cid: cid.toString(), rev })));
 };

package/dist/account-manager/helpers/repo.js.map

@@ -1 +1 @@
-{"version":3,"file":"repo.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/repo.ts"],"names":[],"mappings":";;;AAGO,MAAM,UAAU,GAAG,KAAK,EAC7B,EAAa,EACb,GAAW,EACX,GAAQ,EACR,GAAW,EACX,EAAE;IACF,2DAA2D;IAC3D,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,WAAW,CAAC;SACvB,MAAM,CAAC;QACN,GAAG;QACH,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;QACnB,GAAG;QACH,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAC3D,CACJ,CAAA;AACH,CAAC,CAAA;AApBY,QAAA,UAAU,cAoBtB","sourcesContent":["import { CID } from 'multiformats/cid'\nimport { AccountDb } from '../db'\n\nexport const updateRoot = async (\n  db: AccountDb,\n  did: string,\n  cid: CID,\n  rev: string,\n) => {\n  // @TODO balance risk of a race in the case of a long retry\n  await db.executeWithRetry(\n    db.db\n      .insertInto('repo_root')\n      .values({\n        did,\n        cid: cid.toString(),\n        rev,\n        indexedAt: new Date().toISOString(),\n      })\n      .onConflict((oc) =>\n        oc.column('did').doUpdateSet({ cid: cid.toString(), rev }),\n      ),\n  )\n}\n"]}
+{"version":3,"file":"repo.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/repo.ts"],"names":[],"mappings":";;;AAAA,sCAAyD;AAGlD,MAAM,UAAU,GAAG,KAAK,EAC7B,EAAa,EACb,GAAW,EACX,GAAQ,EACR,GAAW,EACX,EAAE;IACF,2DAA2D;IAC3D,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,WAAW,CAAC;SACvB,MAAM,CAAC;QACN,GAAG;QACH,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;QACnB,GAAG;QACH,SAAS,EAAE,IAAA,2BAAqB,GAAE;KACnC,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAC3D,CACJ,CAAA;AACH,CAAC,CAAA;AApBY,QAAA,UAAU,cAoBtB","sourcesContent":["import { Cid, currentDatetimeString } from '@atproto/lex'\nimport { AccountDb } from '../db'\n\nexport const updateRoot = async (\n  db: AccountDb,\n  did: string,\n  cid: Cid,\n  rev: string,\n) => {\n  // @TODO balance risk of a race in the case of a long retry\n  await db.executeWithRetry(\n    db.db\n      .insertInto('repo_root')\n      .values({\n        did,\n        cid: cid.toString(),\n        rev,\n        indexedAt: currentDatetimeString(),\n      })\n      .onConflict((oc) =>\n        oc.column('did').doUpdateSet({ cid: cid.toString(), rev }),\n      ),\n  )\n}\n"]}