@atproto/pds 0.4.216 → 0.4.218

package/dist/api/com/atproto/admin/updateAccountPassword.js

@@ -3,20 +3,32 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
 const xrpc_server_1 = require("@atproto/xrpc-server");
 const scrypt_1 = require("../../../../account-manager/helpers/scrypt");
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.admin.updateAccountPassword({
-        auth: ctx.authVerifier.adminToken,
-        handler: async ({ input, req }) => {
-            if (ctx.entrywayAgent) {
-                await ctx.entrywayAgent.com.atproto.admin.updateAccountPassword(input.body, ctx.entrywayPassthruHeaders(req));
-                return;
-            }
-            const { did, password } = input.body;
-            if (password.length > scrypt_1.NEW_PASSWORD_MAX_LENGTH) {
-                throw new xrpc_server_1.InvalidRequestError('Invalid password length.');
-            }
-            await ctx.accountManager.updateAccountPassword({ did, password });
-        },
-    });
+    const { entrywayClient } = ctx;
+    if (entrywayClient) {
+        server.add(index_js_1.com.atproto.admin.updateAccountPassword, {
+            auth: ctx.authVerifier.adminToken,
+            handler: async ({ input: { body }, req }) => {
+                const { headers } = ctx.entrywayPassthruHeaders(req);
+                await entrywayClient.xrpc(index_js_1.com.atproto.admin.updateAccountPassword, {
+                    body,
+                    headers,
+                });
+            },
+        });
+    }
+    else {
+        server.add(index_js_1.com.atproto.admin.updateAccountPassword, {
+            auth: ctx.authVerifier.adminToken,
+            handler: async ({ input: { body } }) => {
+                const { did, password } = body;
+                if (password.length > scrypt_1.NEW_PASSWORD_MAX_LENGTH) {
+                    throw new xrpc_server_1.InvalidRequestError('Invalid password length.');
+                }
+                await ctx.accountManager.updateAccountPassword({ did, password });
+            },
+        });
+    }
 }
 //# sourceMappingURL=updateAccountPassword.js.map

package/dist/api/com/atproto/admin/updateAccountPassword.js.map

@@ -1 +1 @@
-{"version":3,"file":"updateAccountPassword.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/updateAccountPassword.ts"],"names":[],"mappings":";;AAKA,4BAqBC;AA1BD,sDAA0D;AAC1D,uEAAoF;AAIpF,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC;QAC7C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,UAAU;QACjC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YAChC,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAC7D,KAAK,CAAC,IAAI,EACV,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CACjC,CAAA;gBACD,OAAM;YACR,CAAC;YAED,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YAEpC,IAAI,QAAQ,CAAC,MAAM,GAAG,gCAAuB,EAAE,CAAC;gBAC9C,MAAM,IAAI,iCAAmB,CAAC,0BAA0B,CAAC,CAAA;YAC3D,CAAC;YAED,MAAM,GAAG,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;QACnE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError } from '@atproto/xrpc-server'\nimport { NEW_PASSWORD_MAX_LENGTH } from '../../../../account-manager/helpers/scrypt'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.admin.updateAccountPassword({\n    auth: ctx.authVerifier.adminToken,\n    handler: async ({ input, req }) => {\n      if (ctx.entrywayAgent) {\n        await ctx.entrywayAgent.com.atproto.admin.updateAccountPassword(\n          input.body,\n          ctx.entrywayPassthruHeaders(req),\n        )\n        return\n      }\n\n      const { did, password } = input.body\n\n      if (password.length > NEW_PASSWORD_MAX_LENGTH) {\n        throw new InvalidRequestError('Invalid password length.')\n      }\n\n      await ctx.accountManager.updateAccountPassword({ did, password })\n    },\n  })\n}\n"]}
+{"version":3,"file":"updateAccountPassword.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/updateAccountPassword.ts"],"names":[],"mappings":";;AAKA,4BA4BC;AAjCD,sDAAkE;AAClE,uEAAoF;AAEpF,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAA;IAE9B,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE;YAClD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,UAAU;YACjC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;gBACpD,MAAM,cAAc,CAAC,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBACjE,IAAI;oBACJ,OAAO;iBACR,CAAC,CAAA;YACJ,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE;YAClD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,UAAU;YACjC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;gBACrC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;gBAE9B,IAAI,QAAQ,CAAC,MAAM,GAAG,gCAAuB,EAAE,CAAC;oBAC9C,MAAM,IAAI,iCAAmB,CAAC,0BAA0B,CAAC,CAAA;gBAC3D,CAAC;gBAED,MAAM,GAAG,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;YACnE,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { NEW_PASSWORD_MAX_LENGTH } from '../../../../account-manager/helpers/scrypt'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  const { entrywayClient } = ctx\n\n  if (entrywayClient) {\n    server.add(com.atproto.admin.updateAccountPassword, {\n      auth: ctx.authVerifier.adminToken,\n      handler: async ({ input: { body }, req }) => {\n        const { headers } = ctx.entrywayPassthruHeaders(req)\n        await entrywayClient.xrpc(com.atproto.admin.updateAccountPassword, {\n          body,\n          headers,\n        })\n      },\n    })\n  } else {\n    server.add(com.atproto.admin.updateAccountPassword, {\n      auth: ctx.authVerifier.adminToken,\n      handler: async ({ input: { body } }) => {\n        const { did, password } = body\n\n        if (password.length > NEW_PASSWORD_MAX_LENGTH) {\n          throw new InvalidRequestError('Invalid password length.')\n        }\n\n        await ctx.accountManager.updateAccountPassword({ did, password })\n      },\n    })\n  }\n}\n"]}

package/dist/api/com/atproto/admin/updateSubjectStatus.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=updateSubjectStatus.d.ts.map

package/dist/api/com/atproto/admin/updateSubjectStatus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updateSubjectStatus.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/updateSubjectStatus.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAO5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAiDvD"}
+{"version":3,"file":"updateSubjectStatus.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/updateSubjectStatus.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAiDvD"}

package/dist/api/com/atproto/admin/updateSubjectStatus.js

@@ -1,37 +1,36 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
-const cid_1 = require("multiformats/cid");
+const lex_data_1 = require("@atproto/lex-data");
 const syntax_1 = require("@atproto/syntax");
 const xrpc_server_1 = require("@atproto/xrpc-server");
-const defs_1 = require("../../../../lexicon/types/com/atproto/admin/defs");
-const strongRef_1 = require("../../../../lexicon/types/com/atproto/repo/strongRef");
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.admin.updateSubjectStatus({
+    server.add(index_js_1.com.atproto.admin.updateSubjectStatus, {
         auth: ctx.authVerifier.moderator,
         handler: async ({ input }) => {
             const { subject, takedown, deactivated } = input.body;
             if (takedown) {
-                if ((0, defs_1.isRepoRef)(subject)) {
+                if (index_js_1.com.atproto.admin.defs.repoRef.$isTypeOf(subject)) {
                     await ctx.accountManager.takedownAccount(subject.did, takedown);
                 }
-                else if ((0, strongRef_1.isMain)(subject)) {
+                else if (index_js_1.com.atproto.repo.strongRef.$isTypeOf(subject)) {
                     const uri = new syntax_1.AtUri(subject.uri);
                     await ctx.actorStore.transact(uri.hostname, async (store) => {
                         await store.record.updateRecordTakedownStatus(uri, takedown);
                     });
                 }
-                else if ((0, defs_1.isRepoBlobRef)(subject)) {
+                else if (index_js_1.com.atproto.admin.defs.repoBlobRef.$isTypeOf(subject)) {
                     await ctx.actorStore.transact(subject.did, async (store) => {
-                        await store.repo.blob.updateBlobTakedownStatus(cid_1.CID.parse(subject.cid), takedown);
+                        await store.repo.blob.updateBlobTakedownStatus((0, lex_data_1.parseCid)(subject.cid), takedown);
                     });
                 }
                 else {
-                    throw new xrpc_server_1.InvalidRequestError('Invalid subject');
+                    throw new xrpc_server_1.InvalidRequestError(`Invalid subject (${subject.$type})`);
                 }
             }
             if (deactivated) {
-                if ((0, defs_1.isRepoRef)(subject)) {
+                if (index_js_1.com.atproto.admin.defs.repoRef.$isTypeOf(subject)) {
                     if (deactivated.applied) {
                         await ctx.accountManager.deactivateAccount(subject.did, null);
                     }
@@ -40,7 +39,7 @@ function default_1(server, ctx) {
                     }
                 }
             }
-            if ((0, defs_1.isRepoRef)(subject)) {
+            if (index_js_1.com.atproto.admin.defs.repoRef.$isTypeOf(subject)) {
                 const status = await ctx.accountManager.getAccountStatus(subject.did);
                 await ctx.sequencer.sequenceAccountEvt(subject.did, status);
             }

package/dist/api/com/atproto/admin/updateSubjectStatus.js.map

@@ -1 +1 @@
-{"version":3,"file":"updateSubjectStatus.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/updateSubjectStatus.ts"],"names":[],"mappings":";;AAWA,4BAiDC;AA5DD,0CAAsC;AACtC,4CAAuC;AACvC,sDAA0D;AAG1D,2EAGyD;AACzD,oFAA4F;AAE5F,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAC3C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,SAAS;QAChC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YACrD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,IAAA,gBAAS,EAAC,OAAO,CAAC,EAAE,CAAC;oBACvB,MAAM,GAAG,CAAC,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;gBACjE,CAAC;qBAAM,IAAI,IAAA,kBAAW,EAAC,OAAO,CAAC,EAAE,CAAC;oBAChC,MAAM,GAAG,GAAG,IAAI,cAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;oBAClC,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;wBAC1D,MAAM,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;oBAC9D,CAAC,CAAC,CAAA;gBACJ,CAAC;qBAAM,IAAI,IAAA,oBAAa,EAAC,OAAO,CAAC,EAAE,CAAC;oBAClC,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;wBACzD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAC5C,SAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EACtB,QAAQ,CACT,CAAA;oBACH,CAAC,CAAC,CAAA;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,iCAAmB,CAAC,iBAAiB,CAAC,CAAA;gBAClD,CAAC;YACH,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,IAAA,gBAAS,EAAC,OAAO,CAAC,EAAE,CAAC;oBACvB,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;wBACxB,MAAM,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;oBAC/D,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAC,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;oBACvD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,IAAA,gBAAS,EAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACrE,MAAM,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAC7D,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,OAAO;oBACP,QAAQ;iBACT;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { CID } from 'multiformats/cid'\nimport { AtUri } from '@atproto/syntax'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport {\n  isRepoBlobRef,\n  isRepoRef,\n} from '../../../../lexicon/types/com/atproto/admin/defs'\nimport { isMain as isStrongRef } from '../../../../lexicon/types/com/atproto/repo/strongRef'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.admin.updateSubjectStatus({\n    auth: ctx.authVerifier.moderator,\n    handler: async ({ input }) => {\n      const { subject, takedown, deactivated } = input.body\n      if (takedown) {\n        if (isRepoRef(subject)) {\n          await ctx.accountManager.takedownAccount(subject.did, takedown)\n        } else if (isStrongRef(subject)) {\n          const uri = new AtUri(subject.uri)\n          await ctx.actorStore.transact(uri.hostname, async (store) => {\n            await store.record.updateRecordTakedownStatus(uri, takedown)\n          })\n        } else if (isRepoBlobRef(subject)) {\n          await ctx.actorStore.transact(subject.did, async (store) => {\n            await store.repo.blob.updateBlobTakedownStatus(\n              CID.parse(subject.cid),\n              takedown,\n            )\n          })\n        } else {\n          throw new InvalidRequestError('Invalid subject')\n        }\n      }\n\n      if (deactivated) {\n        if (isRepoRef(subject)) {\n          if (deactivated.applied) {\n            await ctx.accountManager.deactivateAccount(subject.did, null)\n          } else {\n            await ctx.accountManager.activateAccount(subject.did)\n          }\n        }\n      }\n\n      if (isRepoRef(subject)) {\n        const status = await ctx.accountManager.getAccountStatus(subject.did)\n        await ctx.sequencer.sequenceAccountEvt(subject.did, status)\n      }\n\n      return {\n        encoding: 'application/json',\n        body: {\n          subject,\n          takedown,\n        },\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"updateSubjectStatus.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/updateSubjectStatus.ts"],"names":[],"mappings":";;AAMA,4BAiDC;AAvDD,gDAA4C;AAC5C,4CAAuC;AACvC,sDAAkE;AAElE,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE;QAChD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,SAAS;QAChC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YACrD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,cAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtD,MAAM,GAAG,CAAC,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;gBACjE,CAAC;qBAAM,IAAI,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzD,MAAM,GAAG,GAAG,IAAI,cAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;oBAClC,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;wBAC1D,MAAM,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;oBAC9D,CAAC,CAAC,CAAA;gBACJ,CAAC;qBAAM,IAAI,cAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjE,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;wBACzD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAC5C,IAAA,mBAAQ,EAAC,OAAO,CAAC,GAAG,CAAC,EACrB,QAAQ,CACT,CAAA;oBACH,CAAC,CAAC,CAAA;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,iCAAmB,CAAC,oBAAoB,OAAO,CAAC,KAAK,GAAG,CAAC,CAAA;gBACrE,CAAC;YACH,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,cAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtD,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;wBACxB,MAAM,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;oBAC/D,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAC,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;oBACvD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,cAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACrE,MAAM,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAC7D,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,kBAA2B;gBACrC,IAAI,EAAE;oBACJ,OAAO;oBACP,QAAQ;iBACT;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { parseCid } from '@atproto/lex-data'\nimport { AtUri } from '@atproto/syntax'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.admin.updateSubjectStatus, {\n    auth: ctx.authVerifier.moderator,\n    handler: async ({ input }) => {\n      const { subject, takedown, deactivated } = input.body\n      if (takedown) {\n        if (com.atproto.admin.defs.repoRef.$isTypeOf(subject)) {\n          await ctx.accountManager.takedownAccount(subject.did, takedown)\n        } else if (com.atproto.repo.strongRef.$isTypeOf(subject)) {\n          const uri = new AtUri(subject.uri)\n          await ctx.actorStore.transact(uri.hostname, async (store) => {\n            await store.record.updateRecordTakedownStatus(uri, takedown)\n          })\n        } else if (com.atproto.admin.defs.repoBlobRef.$isTypeOf(subject)) {\n          await ctx.actorStore.transact(subject.did, async (store) => {\n            await store.repo.blob.updateBlobTakedownStatus(\n              parseCid(subject.cid),\n              takedown,\n            )\n          })\n        } else {\n          throw new InvalidRequestError(`Invalid subject (${subject.$type})`)\n        }\n      }\n\n      if (deactivated) {\n        if (com.atproto.admin.defs.repoRef.$isTypeOf(subject)) {\n          if (deactivated.applied) {\n            await ctx.accountManager.deactivateAccount(subject.did, null)\n          } else {\n            await ctx.accountManager.activateAccount(subject.did)\n          }\n        }\n      }\n\n      if (com.atproto.admin.defs.repoRef.$isTypeOf(subject)) {\n        const status = await ctx.accountManager.getAccountStatus(subject.did)\n        await ctx.sequencer.sequenceAccountEvt(subject.did, status)\n      }\n\n      return {\n        encoding: 'application/json' as const,\n        body: {\n          subject,\n          takedown,\n        },\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/admin/util.d.ts

@@ -1,6 +1,7 @@
 import express from 'express';
 import { ActorAccount } from '../../../../account-manager/helpers/account';
 import { CodeDetail } from '../../../../account-manager/helpers/invite';
+import { com } from '../../../../lexicons/index.js';
 export declare function authPassthru(req: express.Request, withEncoding?: false): {
     headers: {
         authorization: string;
@@ -17,15 +18,5 @@ export declare function formatAccountInfo(account: ActorAccount, { managesOwnInv
     managesOwnInvites: boolean;
     invites: Map<string, CodeDetail[]> | CodeDetail[];
     invitedBy: Record<string, CodeDetail>;
-}): {
-    did: string;
-    handle: string;
-    email: string | undefined;
-    indexedAt: string;
-    emailConfirmedAt: string | undefined;
-    invitedBy: CodeDetail | undefined;
-    invites: CodeDetail[] | undefined;
-    invitesDisabled: boolean | undefined;
-    deactivatedAt: string | undefined;
-};
+}): com.atproto.admin.defs.AccountView;
 //# sourceMappingURL=util.d.ts.map

package/dist/api/com/atproto/admin/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/util.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAA;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,4CAA4C,CAAA;AAIvE,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,YAAY,CAAC,EAAE,KAAK,GACnB;IAAE,OAAO,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,QAAQ,EAAE,SAAS,CAAA;CAAE,GAAG,SAAS,CAAA;AAE1E,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,YAAY,EAAE,IAAI,GAEhB;IAAE,OAAO,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,GACpE,SAAS,CAAA;AAWb,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,YAAY,EACrB,EACE,iBAAiB,EACjB,SAAS,EACT,OAAO,GACR,EAAE;IACD,iBAAiB,EAAE,OAAO,CAAA;IAC1B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,CAAA;IACjD,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;CACtC;;;;;;;;;;EAuBF"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/util.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAA;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,4CAA4C,CAAA;AACvE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAInD,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,YAAY,CAAC,EAAE,KAAK,GACnB;IAAE,OAAO,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,QAAQ,EAAE,SAAS,CAAA;CAAE,GAAG,SAAS,CAAA;AAE1E,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,YAAY,EAAE,IAAI,GAEhB;IAAE,OAAO,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,GACpE,SAAS,CAAA;AAWb,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,YAAY,EACrB,EACE,iBAAiB,EACjB,SAAS,EACT,OAAO,GACR,EAAE;IACD,iBAAiB,EAAE,OAAO,CAAA;IAC1B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,CAAA;IACjD,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;CACtC,GACA,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAwBpC"}

package/dist/api/com/atproto/admin/util.js

@@ -23,7 +23,7 @@ function formatAccountInfo(account, { managesOwnInvites, invitedBy, invites, })
     }
     return {
         did: account.did,
-        handle: account.handle ?? syntax_1.INVALID_HANDLE,
+        handle: (account.handle ?? syntax_1.INVALID_HANDLE),
         email: account.email ?? undefined,
         indexedAt: account.createdAt,
         emailConfirmedAt: account.emailConfirmedAt ?? undefined,

package/dist/api/com/atproto/admin/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/util.ts"],"names":[],"mappings":";;AAmBA,oCAOC;AAED,8CAiCC;AA5DD,4CAAgD;AAkBhD,SAAgB,YAAY,CAAC,GAAoB,EAAE,YAAsB;IACvE,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YACrD,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;SACxD,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAC/B,OAAqB,EACrB,EACE,iBAAiB,EACjB,SAAS,EACT,OAAO,GAKR;IAED,IAAI,cAAwC,CAAA;IAC5C,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,cAAc,GAAG,OAAO,CAAA;QAC1B,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QACjD,CAAC;IACH,CAAC;IACD,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,uBAAc;QACxC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,SAAS;QACvD,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QACjE,OAAO,EAAE,cAAc;QACvB,eAAe,EAAE,iBAAiB;YAChC,CAAC,CAAC,OAAO,CAAC,eAAe,KAAK,CAAC;YAC/B,CAAC,CAAC,SAAS;QACb,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,SAAS;KAClD,CAAA;AACH,CAAC","sourcesContent":["import express from 'express'\nimport { INVALID_HANDLE } from '@atproto/syntax'\nimport { ActorAccount } from '../../../../account-manager/helpers/account'\nimport { CodeDetail } from '../../../../account-manager/helpers/invite'\n\n// Output designed to passed as second arg to AtpAgent methods.\n// The encoding field here is a quirk of the AtpAgent.\nexport function authPassthru(\n  req: express.Request,\n  withEncoding?: false,\n): { headers: { authorization: string }; encoding: undefined } | undefined\n\nexport function authPassthru(\n  req: express.Request,\n  withEncoding: true,\n):\n  | { headers: { authorization: string }; encoding: 'application/json' }\n  | undefined\n\nexport function authPassthru(req: express.Request, withEncoding?: boolean) {\n  if (req.headers.authorization) {\n    return {\n      headers: { authorization: req.headers.authorization },\n      encoding: withEncoding ? 'application/json' : undefined,\n    }\n  }\n}\n\nexport function formatAccountInfo(\n  account: ActorAccount,\n  {\n    managesOwnInvites,\n    invitedBy,\n    invites,\n  }: {\n    managesOwnInvites: boolean\n    invites: Map<string, CodeDetail[]> | CodeDetail[]\n    invitedBy: Record<string, CodeDetail>\n  },\n) {\n  let invitesResults: CodeDetail[] | undefined\n  if (managesOwnInvites) {\n    if (Array.isArray(invites)) {\n      invitesResults = invites\n    } else {\n      invitesResults = invites.get(account.did) || []\n    }\n  }\n  return {\n    did: account.did,\n    handle: account.handle ?? INVALID_HANDLE,\n    email: account.email ?? undefined,\n    indexedAt: account.createdAt,\n    emailConfirmedAt: account.emailConfirmedAt ?? undefined,\n    invitedBy: managesOwnInvites ? invitedBy[account.did] : undefined,\n    invites: invitesResults,\n    invitesDisabled: managesOwnInvites\n      ? account.invitesDisabled === 1\n      : undefined,\n    deactivatedAt: account.deactivatedAt ?? undefined,\n  }\n}\n"]}
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/admin/util.ts"],"names":[],"mappings":";;AAqBA,oCAOC;AAED,8CAmCC;AA/DD,4CAAgD;AAmBhD,SAAgB,YAAY,CAAC,GAAoB,EAAE,YAAsB;IACvE,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YACrD,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;SACxD,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAC/B,OAAqB,EACrB,EACE,iBAAiB,EACjB,SAAS,EACT,OAAO,GAKR;IAED,IAAI,cAAwC,CAAA;IAC5C,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,cAAc,GAAG,OAAO,CAAA;QAC1B,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QACjD,CAAC;IACH,CAAC;IACD,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAkB;QAC/B,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,uBAAc,CAAmB;QAC5D,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;QACjC,SAAS,EAAE,OAAO,CAAC,SAA6B;QAChD,gBAAgB,EACb,OAAO,CAAC,gBAAiD,IAAI,SAAS;QACzE,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QACjE,OAAO,EAAE,cAAc;QACvB,eAAe,EAAE,iBAAiB;YAChC,CAAC,CAAC,OAAO,CAAC,eAAe,KAAK,CAAC;YAC/B,CAAC,CAAC,SAAS;QACb,aAAa,EACV,OAAO,CAAC,aAA8C,IAAI,SAAS;KACvE,CAAA;AACH,CAAC","sourcesContent":["import express from 'express'\nimport { l } from '@atproto/lex'\nimport { INVALID_HANDLE } from '@atproto/syntax'\nimport { ActorAccount } from '../../../../account-manager/helpers/account'\nimport { CodeDetail } from '../../../../account-manager/helpers/invite'\nimport { com } from '../../../../lexicons/index.js'\n\n// Output designed to passed as second arg to AtpAgent methods.\n// The encoding field here is a quirk of the AtpAgent.\nexport function authPassthru(\n  req: express.Request,\n  withEncoding?: false,\n): { headers: { authorization: string }; encoding: undefined } | undefined\n\nexport function authPassthru(\n  req: express.Request,\n  withEncoding: true,\n):\n  | { headers: { authorization: string }; encoding: 'application/json' }\n  | undefined\n\nexport function authPassthru(req: express.Request, withEncoding?: boolean) {\n  if (req.headers.authorization) {\n    return {\n      headers: { authorization: req.headers.authorization },\n      encoding: withEncoding ? 'application/json' : undefined,\n    }\n  }\n}\n\nexport function formatAccountInfo(\n  account: ActorAccount,\n  {\n    managesOwnInvites,\n    invitedBy,\n    invites,\n  }: {\n    managesOwnInvites: boolean\n    invites: Map<string, CodeDetail[]> | CodeDetail[]\n    invitedBy: Record<string, CodeDetail>\n  },\n): com.atproto.admin.defs.AccountView {\n  let invitesResults: CodeDetail[] | undefined\n  if (managesOwnInvites) {\n    if (Array.isArray(invites)) {\n      invitesResults = invites\n    } else {\n      invitesResults = invites.get(account.did) || []\n    }\n  }\n  return {\n    did: account.did as l.DidString,\n    handle: (account.handle ?? INVALID_HANDLE) as l.HandleString,\n    email: account.email ?? undefined,\n    indexedAt: account.createdAt as l.DatetimeString,\n    emailConfirmedAt:\n      (account.emailConfirmedAt as l.DatetimeString | undefined) ?? undefined,\n    invitedBy: managesOwnInvites ? invitedBy[account.did] : undefined,\n    invites: invitesResults,\n    invitesDisabled: managesOwnInvites\n      ? account.invitesDisabled === 1\n      : undefined,\n    deactivatedAt:\n      (account.deactivatedAt as l.DatetimeString | undefined) ?? undefined,\n  }\n}\n"]}

package/dist/api/com/atproto/identity/getRecommendedDidCredentials.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getRecommendedDidCredentials.d.ts.map

package/dist/api/com/atproto/identity/getRecommendedDidCredentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getRecommendedDidCredentials.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/getRecommendedDidCredentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAE5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA6CvD"}
+{"version":3,"file":"getRecommendedDidCredentials.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/getRecommendedDidCredentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA6CvD"}

package/dist/api/com/atproto/identity/getRecommendedDidCredentials.js

@@ -1,8 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.identity.getRecommendedDidCredentials({
+    server.add(index_js_1.com.atproto.identity.getRecommendedDidCredentials, {
         auth: ctx.authVerifier.authorization({
             authorize: () => {
                 // always allow

package/dist/api/com/atproto/identity/getRecommendedDidCredentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"getRecommendedDidCredentials.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/getRecommendedDidCredentials.ts"],"names":[],"mappings":";;AAGA,4BA6CC;AA7CD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACvD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YACtC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC1D,MAAM,mBAAmB,GAAG;gBAC1B,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE;aAC1B,CAAA;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE;gBAC7D,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAA;YACF,MAAM,WAAW,GAAG,OAAO,EAAE,MAAM;gBACjC,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC5B,CAAC,CAAC,SAAS,CAAA;YAEb,MAAM,cAAc,GAClB,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,EAAE,CAAA;YAC9D,MAAM,YAAY,GAAG,CAAC,cAAc,CAAC,CAAA;YACrC,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBACpC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;YACvD,CAAC;YAED,MAAM,QAAQ,GAAG;gBACf,WAAW,EAAE;oBACX,IAAI,EAAE,2BAA2B;oBACjC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS;iBACpC;aACF,CAAA;YAED,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACJ,WAAW;oBACX,mBAAmB;oBACnB,YAAY;oBACZ,QAAQ;iBACT;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.identity.getRecommendedDidCredentials({\n    auth: ctx.authVerifier.authorization({\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ auth }) => {\n      const requester = auth.credentials.did\n      const signingKey = await ctx.actorStore.keypair(requester)\n      const verificationMethods = {\n        atproto: signingKey.did(),\n      }\n      const account = await ctx.accountManager.getAccount(requester, {\n        includeDeactivated: true,\n      })\n      const alsoKnownAs = account?.handle\n        ? [`at://${account.handle}`]\n        : undefined\n\n      const plcRotationKey =\n        ctx.cfg.entryway?.plcRotationKey ?? ctx.plcRotationKey.did()\n      const rotationKeys = [plcRotationKey]\n      if (ctx.cfg.identity.recoveryDidKey) {\n        rotationKeys.unshift(ctx.cfg.identity.recoveryDidKey)\n      }\n\n      const services = {\n        atproto_pds: {\n          type: 'AtprotoPersonalDataServer',\n          endpoint: ctx.cfg.service.publicUrl,\n        },\n      }\n\n      return {\n        encoding: 'application/json',\n        body: {\n          alsoKnownAs,\n          verificationMethods,\n          rotationKeys,\n          services,\n        },\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"getRecommendedDidCredentials.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/getRecommendedDidCredentials.ts"],"names":[],"mappings":";;AAIA,4BA6CC;AA/CD,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,EAAE;QAC5D,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YACtC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC1D,MAAM,mBAAmB,GAAG;gBAC1B,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE;aAC1B,CAAA;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE;gBAC7D,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAA;YACF,MAAM,WAAW,GAAG,OAAO,EAAE,MAAM;gBACjC,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC5B,CAAC,CAAC,SAAS,CAAA;YAEb,MAAM,cAAc,GAClB,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,EAAE,CAAA;YAC9D,MAAM,YAAY,GAAG,CAAC,cAAc,CAAC,CAAA;YACrC,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBACpC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;YACvD,CAAC;YAED,MAAM,QAAQ,GAAG;gBACf,WAAW,EAAE;oBACX,IAAI,EAAE,2BAA2B;oBACjC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS;iBACpC;aACF,CAAA;YAED,OAAO;gBACL,QAAQ,EAAE,kBAA2B;gBACrC,IAAI,EAAE;oBACJ,WAAW;oBACX,mBAAmB;oBACnB,YAAY;oBACZ,QAAQ;iBACT;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.identity.getRecommendedDidCredentials, {\n    auth: ctx.authVerifier.authorization({\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ auth }) => {\n      const requester = auth.credentials.did\n      const signingKey = await ctx.actorStore.keypair(requester)\n      const verificationMethods = {\n        atproto: signingKey.did(),\n      }\n      const account = await ctx.accountManager.getAccount(requester, {\n        includeDeactivated: true,\n      })\n      const alsoKnownAs = account?.handle\n        ? [`at://${account.handle}`]\n        : undefined\n\n      const plcRotationKey =\n        ctx.cfg.entryway?.plcRotationKey ?? ctx.plcRotationKey.did()\n      const rotationKeys = [plcRotationKey]\n      if (ctx.cfg.identity.recoveryDidKey) {\n        rotationKeys.unshift(ctx.cfg.identity.recoveryDidKey)\n      }\n\n      const services = {\n        atproto_pds: {\n          type: 'AtprotoPersonalDataServer',\n          endpoint: ctx.cfg.service.publicUrl,\n        },\n      }\n\n      return {\n        encoding: 'application/json' as const,\n        body: {\n          alsoKnownAs,\n          verificationMethods,\n          rotationKeys,\n          services,\n        },\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/identity/index.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=index.d.ts.map

package/dist/api/com/atproto/identity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAQ5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAOvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAQhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAOvD"}

package/dist/api/com/atproto/identity/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/index.ts"],"names":[],"mappings":";;;;;AASA,4BAOC;AAdD,kGAAyE;AACzE,kGAAyE;AACzE,oEAA2C;AAC3C,0EAAiD;AACjD,8EAAqD;AACrD,kEAAyC;AAEzC,mBAAyB,MAAc,EAAE,GAAe;IACtD,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,sCAA4B,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzC,IAAA,sCAA4B,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzC,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,IAAA,4BAAkB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACjC,CAAC","sourcesContent":["import { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport getRecommendedDidCredentials from './getRecommendedDidCredentials'\nimport requestPlcOperationSignature from './requestPlcOperationSignature'\nimport resolveHandle from './resolveHandle'\nimport signPlcOperation from './signPlcOperation'\nimport submitPlcOperation from './submitPlcOperation'\nimport updateHandle from './updateHandle'\n\nexport default function (server: Server, ctx: AppContext) {\n  resolveHandle(server, ctx)\n  updateHandle(server, ctx)\n  getRecommendedDidCredentials(server, ctx)\n  requestPlcOperationSignature(server, ctx)\n  signPlcOperation(server, ctx)\n  submitPlcOperation(server, ctx)\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/index.ts"],"names":[],"mappings":";;;;;AASA,4BAOC;AAdD,kGAAyE;AACzE,kGAAyE;AACzE,oEAA2C;AAC3C,0EAAiD;AACjD,8EAAqD;AACrD,kEAAyC;AAEzC,mBAAyB,MAAc,EAAE,GAAe;IACtD,IAAA,uBAAa,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAA,sBAAY,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzB,IAAA,sCAA4B,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzC,IAAA,sCAA4B,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzC,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,IAAA,4BAAkB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACjC,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport getRecommendedDidCredentials from './getRecommendedDidCredentials'\nimport requestPlcOperationSignature from './requestPlcOperationSignature'\nimport resolveHandle from './resolveHandle'\nimport signPlcOperation from './signPlcOperation'\nimport submitPlcOperation from './submitPlcOperation'\nimport updateHandle from './updateHandle'\n\nexport default function (server: Server, ctx: AppContext) {\n  resolveHandle(server, ctx)\n  updateHandle(server, ctx)\n  getRecommendedDidCredentials(server, ctx)\n  requestPlcOperationSignature(server, ctx)\n  signPlcOperation(server, ctx)\n  submitPlcOperation(server, ctx)\n}\n"]}

package/dist/api/com/atproto/identity/requestPlcOperationSignature.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=requestPlcOperationSignature.d.ts.map

package/dist/api/com/atproto/identity/requestPlcOperationSignature.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"requestPlcOperationSignature.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/requestPlcOperationSignature.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAG5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAwCvD"}
+{"version":3,"file":"requestPlcOperationSignature.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/requestPlcOperationSignature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAqDvD"}

package/dist/api/com/atproto/identity/requestPlcOperationSignature.js

@@ -3,36 +3,47 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
 const xrpc_server_1 = require("@atproto/xrpc-server");
 const auth_scope_1 = require("../../../../auth-scope");
-const lexicons_1 = require("../../../../lexicon/lexicons");
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.identity.requestPlcOperationSignature({
-        auth: ctx.authVerifier.authorization({
-            // @NOTE Reflect any change in signPlcOperation
-            scopes: auth_scope_1.ACCESS_FULL,
-            additional: [auth_scope_1.AuthScope.Takendown],
-            authorize: (permissions) => {
-                permissions.assertIdentity({ attr: '*' });
-            },
-        }),
-        handler: async ({ auth, req }) => {
-            if (ctx.entrywayAgent) {
-                await ctx.entrywayAgent.com.atproto.identity.requestPlcOperationSignature(undefined, await ctx.entrywayAuthHeaders(req, auth.credentials.did, lexicons_1.ids.ComAtprotoIdentityRequestPlcOperationSignature));
-                return;
-            }
-            const did = auth.credentials.did;
-            const account = await ctx.accountManager.getAccount(did, {
-                includeDeactivated: true,
-                includeTakenDown: true,
-            });
-            if (!account) {
-                throw new xrpc_server_1.InvalidRequestError('account not found');
-            }
-            else if (!account.email) {
-                throw new xrpc_server_1.InvalidRequestError('account does not have an email address');
-            }
-            const token = await ctx.accountManager.createEmailToken(did, 'plc_operation');
-            await ctx.mailer.sendPlcOperation({ token }, { to: account.email });
+    const { entrywayClient } = ctx;
+    const auth = ctx.authVerifier.authorization({
+        // @NOTE Reflect any change in signPlcOperation
+        scopes: auth_scope_1.ACCESS_FULL,
+        additional: [auth_scope_1.AuthScope.Takendown],
+        authorize: (permissions) => {
+            permissions.assertIdentity({ attr: '*' });
         },
     });
+    if (entrywayClient) {
+        // @TODO we should have a higher level way of defining these "passthrough"
+        // handlers
+        server.add(index_js_1.com.atproto.identity.requestPlcOperationSignature, {
+            auth,
+            handler: async ({ auth, req }) => {
+                const { headers } = await ctx.entrywayAuthHeaders(req, auth.credentials.did, index_js_1.com.atproto.identity.requestPlcOperationSignature.$lxm);
+                await entrywayClient.xrpc(index_js_1.com.atproto.identity.requestPlcOperationSignature, { headers });
+            },
+        });
+    }
+    else {
+        server.add(index_js_1.com.atproto.identity.requestPlcOperationSignature, {
+            auth,
+            handler: async ({ auth }) => {
+                const did = auth.credentials.did;
+                const account = await ctx.accountManager.getAccount(did, {
+                    includeDeactivated: true,
+                    includeTakenDown: true,
+                });
+                if (!account) {
+                    throw new xrpc_server_1.InvalidRequestError('account not found');
+                }
+                else if (!account.email) {
+                    throw new xrpc_server_1.InvalidRequestError('account does not have an email address');
+                }
+                const token = await ctx.accountManager.createEmailToken(did, 'plc_operation');
+                await ctx.mailer.sendPlcOperation({ token }, { to: account.email });
+            },
+        });
+    }
 }
 //# sourceMappingURL=requestPlcOperationSignature.js.map

package/dist/api/com/atproto/identity/requestPlcOperationSignature.js.map

@@ -1 +1 @@
-{"version":3,"file":"requestPlcOperationSignature.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/requestPlcOperationSignature.ts"],"names":[],"mappings":";;AAMA,4BAwCC;AA9CD,sDAA0D;AAC1D,uDAA+D;AAG/D,2DAAkD;AAElD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACvD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,+CAA+C;YAC/C,MAAM,EAAE,wBAAW;YACnB,UAAU,EAAE,CAAC,sBAAS,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;gBACzB,WAAW,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3C,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;YAC/B,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CACvE,SAAS,EACT,MAAM,GAAG,CAAC,mBAAmB,CAC3B,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,8CAA8C,CACnD,CACF,CAAA;gBACD,OAAM;YACR,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAChC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE;gBACvD,kBAAkB,EAAE,IAAI;gBACxB,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAA;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,iCAAmB,CAAC,mBAAmB,CAAC,CAAA;YACpD,CAAC;iBAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC1B,MAAM,IAAI,iCAAmB,CAAC,wCAAwC,CAAC,CAAA;YACzE,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,gBAAgB,CACrD,GAAG,EACH,eAAe,CAChB,CAAA;YACD,MAAM,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;QACrE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError } from '@atproto/xrpc-server'\nimport { ACCESS_FULL, AuthScope } from '../../../../auth-scope'\nimport { AppContext } from '../../../../context'\nimport { Server } from '../../../../lexicon'\nimport { ids } from '../../../../lexicon/lexicons'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.identity.requestPlcOperationSignature({\n    auth: ctx.authVerifier.authorization({\n      // @NOTE Reflect any change in signPlcOperation\n      scopes: ACCESS_FULL,\n      additional: [AuthScope.Takendown],\n      authorize: (permissions) => {\n        permissions.assertIdentity({ attr: '*' })\n      },\n    }),\n    handler: async ({ auth, req }) => {\n      if (ctx.entrywayAgent) {\n        await ctx.entrywayAgent.com.atproto.identity.requestPlcOperationSignature(\n          undefined,\n          await ctx.entrywayAuthHeaders(\n            req,\n            auth.credentials.did,\n            ids.ComAtprotoIdentityRequestPlcOperationSignature,\n          ),\n        )\n        return\n      }\n\n      const did = auth.credentials.did\n      const account = await ctx.accountManager.getAccount(did, {\n        includeDeactivated: true,\n        includeTakenDown: true,\n      })\n      if (!account) {\n        throw new InvalidRequestError('account not found')\n      } else if (!account.email) {\n        throw new InvalidRequestError('account does not have an email address')\n      }\n      const token = await ctx.accountManager.createEmailToken(\n        did,\n        'plc_operation',\n      )\n      await ctx.mailer.sendPlcOperation({ token }, { to: account.email })\n    },\n  })\n}\n"]}
+{"version":3,"file":"requestPlcOperationSignature.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/requestPlcOperationSignature.ts"],"names":[],"mappings":";;AAKA,4BAqDC;AA1DD,sDAAkE;AAClE,uDAA+D;AAE/D,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAA;IAE9B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;QAC1C,+CAA+C;QAC/C,MAAM,EAAE,wBAAW;QACnB,UAAU,EAAE,CAAC,sBAAS,CAAC,SAAS,CAAC;QACjC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;YACzB,WAAW,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QAC3C,CAAC;KACF,CAAC,CAAA;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,0EAA0E;QAC1E,WAAW;QACX,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,EAAE;YAC5D,IAAI;YACJ,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAC/C,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,IAAI,CACvD,CAAA;gBACD,MAAM,cAAc,CAAC,IAAI,CACvB,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,EACjD,EAAE,OAAO,EAAE,CACZ,CAAA;YACH,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,EAAE;YAC5D,IAAI;YACJ,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;gBAChC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE;oBACvD,kBAAkB,EAAE,IAAI;oBACxB,gBAAgB,EAAE,IAAI;iBACvB,CAAC,CAAA;gBACF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,iCAAmB,CAAC,mBAAmB,CAAC,CAAA;gBACpD,CAAC;qBAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBAC1B,MAAM,IAAI,iCAAmB,CAC3B,wCAAwC,CACzC,CAAA;gBACH,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,gBAAgB,CACrD,GAAG,EACH,eAAe,CAChB,CAAA;gBACD,MAAM,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;YACrE,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { ACCESS_FULL, AuthScope } from '../../../../auth-scope'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  const { entrywayClient } = ctx\n\n  const auth = ctx.authVerifier.authorization({\n    // @NOTE Reflect any change in signPlcOperation\n    scopes: ACCESS_FULL,\n    additional: [AuthScope.Takendown],\n    authorize: (permissions) => {\n      permissions.assertIdentity({ attr: '*' })\n    },\n  })\n\n  if (entrywayClient) {\n    // @TODO we should have a higher level way of defining these \"passthrough\"\n    // handlers\n    server.add(com.atproto.identity.requestPlcOperationSignature, {\n      auth,\n      handler: async ({ auth, req }) => {\n        const { headers } = await ctx.entrywayAuthHeaders(\n          req,\n          auth.credentials.did,\n          com.atproto.identity.requestPlcOperationSignature.$lxm,\n        )\n        await entrywayClient.xrpc(\n          com.atproto.identity.requestPlcOperationSignature,\n          { headers },\n        )\n      },\n    })\n  } else {\n    server.add(com.atproto.identity.requestPlcOperationSignature, {\n      auth,\n      handler: async ({ auth }) => {\n        const did = auth.credentials.did\n        const account = await ctx.accountManager.getAccount(did, {\n          includeDeactivated: true,\n          includeTakenDown: true,\n        })\n        if (!account) {\n          throw new InvalidRequestError('account not found')\n        } else if (!account.email) {\n          throw new InvalidRequestError(\n            'account does not have an email address',\n          )\n        }\n        const token = await ctx.accountManager.createEmailToken(\n          did,\n          'plc_operation',\n        )\n        await ctx.mailer.sendPlcOperation({ token }, { to: account.email })\n      },\n    })\n  }\n}\n"]}

package/dist/api/com/atproto/identity/resolveHandle.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=resolveHandle.d.ts.map

package/dist/api/com/atproto/identity/resolveHandle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolveHandle.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/resolveHandle.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAEhD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAE5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA+CvD"}
+{"version":3,"file":"resolveHandle.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/resolveHandle.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAoCvD"}

package/dist/api/com/atproto/identity/resolveHandle.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.default = default_1;
+const lex_1 = require("@atproto/lex");
 const xrpc_server_1 = require("@atproto/xrpc-server");
 const handle_1 = require("../../../../handle");
+const index_js_1 = require("../../../../lexicons/index.js");
 function default_1(server, ctx) {
-    server.com.atproto.identity.resolveHandle(async ({ params }) => {
+    server.add(index_js_1.com.atproto.identity.resolveHandle, async ({ params }) => {
         const handle = (0, handle_1.baseNormalizeAndValidate)(params.handle);
         const user = await ctx.accountManager.getAccount(handle);
         if (user) {
@@ -18,30 +20,22 @@ function default_1(server, ctx) {
         if (supportedHandle) {
             throw new xrpc_server_1.InvalidRequestError('Unable to resolve handle');
         }
-        // This is not someone on our server, but we help with resolving anyway
-        let did;
-        // Either ask appview to resolve, or perform resolution, but don't do both.
-        if (ctx.bskyAppView) {
-            try {
-                const result = await ctx.bskyAppView.agent.com.atproto.identity.resolveHandle({
-                    handle,
-                });
-                did = result.data.did;
-            }
-            catch {
-                // Ignore
-            }
-        }
-        else {
-            did = await ctx.idResolver.handle.resolve(handle);
-        }
-        if (!did) {
-            throw new xrpc_server_1.InvalidRequestError('Unable to resolve handle');
-        }
+        const did = ctx.bskyAppView
+            ? await ctx.bskyAppView.client
+                .call(index_js_1.com.atproto.identity.resolveHandle, { handle })
+                .then((r) => r.did, throwInvalidRequestError)
+            : await ctx.idResolver.handle
+                .resolve(handle)
+                .then((v) => (v && (0, lex_1.isDidString)(v) ? v : throwInvalidRequestError()), throwInvalidRequestError);
         return {
             encoding: 'application/json',
             body: { did },
         };
     });
 }
+function throwInvalidRequestError(cause) {
+    throw new xrpc_server_1.InvalidRequestError('Unable to resolve handle', undefined, {
+        cause,
+    });
+}
 //# sourceMappingURL=resolveHandle.js.map

package/dist/api/com/atproto/identity/resolveHandle.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolveHandle.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/resolveHandle.ts"],"names":[],"mappings":";;AAKA,4BA+CC;AApDD,sDAA0D;AAE1D,+CAA6D;AAG7D,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC7D,MAAM,MAAM,GAAG,IAAA,iCAAwB,EAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAEtD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QACxD,IAAI,IAAI,EAAE,CAAC;YACT,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;aACxB,CAAA;QACH,CAAC;QAED,MAAM,eAAe,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAChE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAC5D,CAAA;QACD,0DAA0D;QAC1D,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,IAAI,iCAAmB,CAAC,0BAA0B,CAAC,CAAA;QAC3D,CAAC;QAED,uEAAuE;QACvE,IAAI,GAAuB,CAAA;QAE3B,2EAA2E;QAC3E,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,GACV,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;oBAC7D,MAAM;iBACP,CAAC,CAAA;gBACJ,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAA;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACnD,CAAC;QAED,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,iCAAmB,CAAC,0BAA0B,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,EAAE,GAAG,EAAE;SACd,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { baseNormalizeAndValidate } from '../../../../handle'\nimport { Server } from '../../../../lexicon'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.com.atproto.identity.resolveHandle(async ({ params }) => {\n    const handle = baseNormalizeAndValidate(params.handle)\n\n    const user = await ctx.accountManager.getAccount(handle)\n    if (user) {\n      return {\n        encoding: 'application/json',\n        body: { did: user.did },\n      }\n    }\n\n    const supportedHandle = ctx.cfg.identity.serviceHandleDomains.some(\n      (host) => handle.endsWith(host) || handle === host.slice(1),\n    )\n    // this should be in our DB & we couldn't find it, so fail\n    if (supportedHandle) {\n      throw new InvalidRequestError('Unable to resolve handle')\n    }\n\n    // This is not someone on our server, but we help with resolving anyway\n    let did: string | undefined\n\n    // Either ask appview to resolve, or perform resolution, but don't do both.\n    if (ctx.bskyAppView) {\n      try {\n        const result =\n          await ctx.bskyAppView.agent.com.atproto.identity.resolveHandle({\n            handle,\n          })\n        did = result.data.did\n      } catch {\n        // Ignore\n      }\n    } else {\n      did = await ctx.idResolver.handle.resolve(handle)\n    }\n\n    if (!did) {\n      throw new InvalidRequestError('Unable to resolve handle')\n    }\n\n    return {\n      encoding: 'application/json',\n      body: { did },\n    }\n  })\n}\n"]}
+{"version":3,"file":"resolveHandle.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/resolveHandle.ts"],"names":[],"mappings":";;AAOA,4BAoCC;AA3CD,sCAA0C;AAE1C,sDAAkE;AAElE,+CAA6D;AAC7D,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAClE,MAAM,MAAM,GAAG,IAAA,iCAAwB,EAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAEtD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QACxD,IAAI,IAAI,EAAE,CAAC;YACT,OAAO;gBACL,QAAQ,EAAE,kBAA2B;gBACrC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAgB,EAAE;aACrC,CAAA;QACH,CAAC;QAED,MAAM,eAAe,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAChE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAC5D,CAAA;QACD,0DAA0D;QAC1D,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,IAAI,iCAAmB,CAAC,0BAA0B,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,GAAG,GAAc,GAAG,CAAC,WAAW;YACpC,CAAC,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM;iBACzB,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC;iBACpD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,wBAAwB,CAAC;YACjD,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM;iBACxB,OAAO,CAAC,MAAM,CAAC;iBACf,IAAI,CACH,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAA,iBAAW,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC,EAC7D,wBAAwB,CACzB,CAAA;QAEP,OAAO;YACL,QAAQ,EAAE,kBAA2B;YACrC,IAAI,EAAE,EAAE,GAAG,EAAE;SACd,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAe;IAC/C,MAAM,IAAI,iCAAmB,CAAC,0BAA0B,EAAE,SAAS,EAAE;QACnE,KAAK;KACN,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { isDidString } from '@atproto/lex'\nimport { DidString } from '@atproto/syntax'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { baseNormalizeAndValidate } from '../../../../handle'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.identity.resolveHandle, async ({ params }) => {\n    const handle = baseNormalizeAndValidate(params.handle)\n\n    const user = await ctx.accountManager.getAccount(handle)\n    if (user) {\n      return {\n        encoding: 'application/json' as const,\n        body: { did: user.did as DidString },\n      }\n    }\n\n    const supportedHandle = ctx.cfg.identity.serviceHandleDomains.some(\n      (host) => handle.endsWith(host) || handle === host.slice(1),\n    )\n    // this should be in our DB & we couldn't find it, so fail\n    if (supportedHandle) {\n      throw new InvalidRequestError('Unable to resolve handle')\n    }\n\n    const did: DidString = ctx.bskyAppView\n      ? await ctx.bskyAppView.client\n          .call(com.atproto.identity.resolveHandle, { handle })\n          .then((r) => r.did, throwInvalidRequestError)\n      : await ctx.idResolver.handle\n          .resolve(handle)\n          .then(\n            (v) => (v && isDidString(v) ? v : throwInvalidRequestError()),\n            throwInvalidRequestError,\n          )\n\n    return {\n      encoding: 'application/json' as const,\n      body: { did },\n    }\n  })\n}\n\nfunction throwInvalidRequestError(cause?: unknown): never {\n  throw new InvalidRequestError('Unable to resolve handle', undefined, {\n    cause,\n  })\n}\n"]}

package/dist/api/com/atproto/identity/signPlcOperation.d.ts

@@ -1,4 +1,4 @@
+import { Server } from '@atproto/xrpc-server';
 import { AppContext } from '../../../../context';
-import { Server } from '../../../../lexicon';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=signPlcOperation.d.ts.map

package/dist/api/com/atproto/identity/signPlcOperation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signPlcOperation.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/signPlcOperation.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAI5C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAqEvD"}
+{"version":3,"file":"signPlcOperation.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/identity/signPlcOperation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA6EvD"}