@atproto/pds 0.4.223 → 0.4.224

package/dist/account-manager/helpers/account.js

@@ -1,27 +1,23 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.formatAccountStatus = exports.activateAccount = exports.deactivateAccount = exports.updateAccountTakedownStatus = exports.getAccountAdminStatus = exports.setEmailConfirmedAt = exports.updateEmail = exports.updateHandle = exports.deleteAccount = exports.registerAccount = exports.registerActor = exports.getAccountByEmail = exports.getAccounts = exports.getAccount = exports.selectAccountQB = exports.AccountStatus = exports.UserAlreadyExistsError = void 0;
-const common_1 = require("@atproto/common");
-const lex_1 = require("@atproto/lex");
-const db_1 = require("../../db");
-class UserAlreadyExistsError extends Error {
+import { DAY } from '@atproto/common';
+import { currentDatetimeString, isDidIdentifier, } from '@atproto/lex';
+import { isErrUniqueViolation, notSoftDeletedClause } from '../../db/index.js';
+export class UserAlreadyExistsError extends Error {
 }
-exports.UserAlreadyExistsError = UserAlreadyExistsError;
-var AccountStatus;
+export var AccountStatus;
 (function (AccountStatus) {
     AccountStatus["Active"] = "active";
     AccountStatus["Takendown"] = "takendown";
     AccountStatus["Suspended"] = "suspended";
     AccountStatus["Deleted"] = "deleted";
     AccountStatus["Deactivated"] = "deactivated";
-})(AccountStatus || (exports.AccountStatus = AccountStatus = {}));
-const selectAccountQB = (db, flags) => {
+})(AccountStatus || (AccountStatus = {}));
+export const selectAccountQB = (db, flags) => {
     const { includeTakenDown = false, includeDeactivated = false } = flags ?? {};
     const { ref } = db.db.dynamic;
     return db.db
         .selectFrom('actor')
         .leftJoin('account', 'actor.did', 'account.did')
-        .if(!includeTakenDown, (qb) => qb.where((0, db_1.notSoftDeletedClause)(ref('actor'))))
+        .if(!includeTakenDown, (qb) => qb.where(notSoftDeletedClause(ref('actor'))))
         .if(!includeDeactivated, (qb) => qb.where('actor.deactivatedAt', 'is', null))
         .select([
         'actor.did',
@@ -35,11 +31,10 @@ const selectAccountQB = (db, flags) => {
         'account.invitesDisabled',
     ]);
 };
-exports.selectAccountQB = selectAccountQB;
-const getAccount = async (db, handleOrDid, flags) => {
-    const found = await (0, exports.selectAccountQB)(db, flags)
+export const getAccount = async (db, handleOrDid, flags) => {
+    const found = await selectAccountQB(db, flags)
         .where((qb) => {
-        if ((0, lex_1.isDidIdentifier)(handleOrDid)) {
+        if (isDidIdentifier(handleOrDid)) {
             return qb.where('actor.did', '=', handleOrDid);
         }
         else {
@@ -49,13 +44,12 @@ const getAccount = async (db, handleOrDid, flags) => {
         .executeTakeFirst();
     return found || null;
 };
-exports.getAccount = getAccount;
-const getAccounts = async (db, dids, flags) => {
+export const getAccounts = async (db, dids, flags) => {
     const results = new Map();
     if (!dids.length) {
         return results;
     }
-    const accounts = await (0, exports.selectAccountQB)(db, flags)
+    const accounts = await selectAccountQB(db, flags)
         .where('actor.did', 'in', dids)
         .execute();
     accounts.forEach((account) => {
@@ -63,15 +57,13 @@ const getAccounts = async (db, dids, flags) => {
     });
     return results;
 };
-exports.getAccounts = getAccounts;
-const getAccountByEmail = async (db, email, flags) => {
-    const found = await (0, exports.selectAccountQB)(db, flags)
+export const getAccountByEmail = async (db, email, flags) => {
+    const found = await selectAccountQB(db, flags)
         .where('email', '=', email.toLowerCase())
         .executeTakeFirst();
     return found || null;
 };
-exports.getAccountByEmail = getAccountByEmail;
-const registerActor = async (db, opts) => {
+export const registerActor = async (db, opts) => {
     const { did, handle, deactivated } = opts;
     const now = Date.now();
     const createdAt = new Date(now).toISOString();
@@ -82,7 +74,7 @@ const registerActor = async (db, opts) => {
         handle,
         createdAt,
         deactivatedAt: deactivated ? createdAt : null,
-        deleteAfter: deactivated ? new Date(now + 3 * common_1.DAY).toISOString() : null,
+        deleteAfter: deactivated ? new Date(now + 3 * DAY).toISOString() : null,
     })
         .onConflict((oc) => oc.doNothing())
         .returning('did'));
@@ -90,8 +82,7 @@ const registerActor = async (db, opts) => {
         throw new UserAlreadyExistsError();
     }
 };
-exports.registerActor = registerActor;
-const registerAccount = async (db, opts) => {
+export const registerAccount = async (db, opts) => {
     const { did, email, passwordScrypt } = opts;
     const [registered] = await db.executeWithRetry(db.db
         .insertInto('account')
@@ -106,8 +97,7 @@ const registerAccount = async (db, opts) => {
         throw new UserAlreadyExistsError();
     }
 };
-exports.registerAccount = registerAccount;
-const deleteAccount = async (db, did) => {
+export const deleteAccount = async (db, did) => {
     // Not done in transaction because it would be too long, prone to contention.
     // Also, this can safely be run multiple times if it fails.
     await db.executeWithRetry(db.db.deleteFrom('repo_root').where('did', '=', did));
@@ -116,8 +106,7 @@ const deleteAccount = async (db, did) => {
     await db.executeWithRetry(db.db.deleteFrom('account').where('account.did', '=', did));
     await db.executeWithRetry(db.db.deleteFrom('actor').where('actor.did', '=', did));
 };
-exports.deleteAccount = deleteAccount;
-const updateHandle = async (db, did, handle) => {
+export const updateHandle = async (db, did, handle) => {
     const [res] = await db.executeWithRetry(db.db
         .updateTable('actor')
         .set({ handle })
@@ -127,8 +116,7 @@ const updateHandle = async (db, did, handle) => {
         throw new UserAlreadyExistsError();
     }
 };
-exports.updateHandle = updateHandle;
-const updateEmail = async (db, did, email) => {
+export const updateEmail = async (db, did, email) => {
     try {
         await db.executeWithRetry(db.db
             .updateTable('account')
@@ -139,21 +127,19 @@ const updateEmail = async (db, did, email) => {
             .where('did', '=', did));
     }
     catch (err) {
-        if ((0, db_1.isErrUniqueViolation)(err)) {
+        if (isErrUniqueViolation(err)) {
             throw new UserAlreadyExistsError();
         }
         throw err;
     }
 };
-exports.updateEmail = updateEmail;
-const setEmailConfirmedAt = async (db, did, emailConfirmedAt) => {
+export const setEmailConfirmedAt = async (db, did, emailConfirmedAt) => {
     await db.executeWithRetry(db.db
         .updateTable('account')
         .set({ emailConfirmedAt })
         .where('did', '=', did));
 };
-exports.setEmailConfirmedAt = setEmailConfirmedAt;
-const getAccountAdminStatus = async (db, did) => {
+export const getAccountAdminStatus = async (db, did) => {
     const res = await db.db
         .selectFrom('actor')
         .select(['takedownRef', 'deactivatedAt'])
@@ -167,25 +153,22 @@ const getAccountAdminStatus = async (db, did) => {
     const deactivated = res.deactivatedAt ? { applied: true } : { applied: false };
     return { takedown, deactivated };
 };
-exports.getAccountAdminStatus = getAccountAdminStatus;
-const updateAccountTakedownStatus = async (db, did, takedown) => {
+export const updateAccountTakedownStatus = async (db, did, takedown) => {
     const takedownRef = takedown.applied
-        ? takedown.ref ?? (0, lex_1.currentDatetimeString)()
+        ? takedown.ref ?? currentDatetimeString()
         : null;
     await db.executeWithRetry(db.db.updateTable('actor').set({ takedownRef }).where('did', '=', did));
 };
-exports.updateAccountTakedownStatus = updateAccountTakedownStatus;
-const deactivateAccount = async (db, did, deleteAfter) => {
+export const deactivateAccount = async (db, did, deleteAfter) => {
     await db.executeWithRetry(db.db
         .updateTable('actor')
         .set({
-        deactivatedAt: (0, lex_1.currentDatetimeString)(),
+        deactivatedAt: currentDatetimeString(),
         deleteAfter,
     })
         .where('did', '=', did));
 };
-exports.deactivateAccount = deactivateAccount;
-const activateAccount = async (db, did) => {
+export const activateAccount = async (db, did) => {
     await db.executeWithRetry(db.db
         .updateTable('actor')
         .set({
@@ -194,8 +177,7 @@ const activateAccount = async (db, did) => {
     })
         .where('did', '=', did));
 };
-exports.activateAccount = activateAccount;
-const formatAccountStatus = (account) => {
+export const formatAccountStatus = (account) => {
     if (!account) {
         return { active: false, status: AccountStatus.Deleted };
     }
@@ -209,5 +191,4 @@ const formatAccountStatus = (account) => {
         return { active: true, status: undefined };
     }
 };
-exports.formatAccountStatus = formatAccountStatus;
 //# sourceMappingURL=account.js.map

package/dist/account-manager/helpers/account.js.map

@@ -1 +1 @@
-{"version":3,"file":"account.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/account.ts"],"names":[],"mappings":";;;AAAA,4CAAqC;AACrC,sCAOqB;AACrB,iCAAqE;AAIrE,MAAa,sBAAuB,SAAQ,KAAK;CAAG;AAApD,wDAAoD;AAapD,IAAY,aAMX;AAND,WAAY,aAAa;IACvB,kCAAiB,CAAA;IACjB,wCAAuB,CAAA;IACvB,wCAAuB,CAAA;IACvB,oCAAmB,CAAA;IACnB,4CAA2B,CAAA;AAC7B,CAAC,EANW,aAAa,6BAAb,aAAa,QAMxB;AAEM,MAAM,eAAe,GAAG,CAAC,EAAa,EAAE,KAAyB,EAAE,EAAE;IAC1E,MAAM,EAAE,gBAAgB,GAAG,KAAK,EAAE,kBAAkB,GAAG,KAAK,EAAE,GAAG,KAAK,IAAI,EAAE,CAAA;IAC5E,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAA;IAC7B,OAAO,EAAE,CAAC,EAAE;SACT,UAAU,CAAC,OAAO,CAAC;SACnB,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC;SAC/C,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAA,yBAAoB,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SAC3E,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAC9B,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,CAAC,CAC5C;SACA,MAAM,CAAC;QACN,WAAW;QACX,cAAc;QACd,iBAAiB;QACjB,mBAAmB;QACnB,qBAAqB;QACrB,mBAAmB;QACnB,eAAe;QACf,0BAA0B;QAC1B,yBAAyB;KAC1B,CAAC,CAAA;AACN,CAAC,CAAA;AArBY,QAAA,eAAe,mBAqB3B;AAEM,MAAM,UAAU,GAAG,KAAK,EAC7B,EAAa,EACb,WAA+B,EAC/B,KAAyB,EACK,EAAE;IAChC,MAAM,KAAK,GAAG,MAAM,IAAA,uBAAe,EAAC,EAAE,EAAE,KAAK,CAAC;SAC3C,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE;QACZ,IAAI,IAAA,qBAAe,EAAC,WAAW,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QAChD,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QACnD,CAAC;IACH,CAAC,CAAC;SACD,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC,CAAA;AAfY,QAAA,UAAU,cAetB;AAEM,MAAM,WAAW,GAAG,KAAK,EAC9B,EAAa,EACb,IAAiB,EACjB,KAAyB,EACW,EAAE;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAE/C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAe,EAAC,EAAE,EAAE,KAAK,CAAC;SAC9C,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,OAAO,EAAE,CAAA;IAEZ,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AApBY,QAAA,WAAW,eAoBvB;AAEM,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,KAAa,EACb,KAAyB,EACK,EAAE;IAChC,MAAM,KAAK,GAAG,MAAM,IAAA,uBAAe,EAAC,EAAE,EAAE,KAAK,CAAC;SAC3C,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACxC,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC,CAAA;AATY,QAAA,iBAAiB,qBAS7B;AAEM,MAAM,aAAa,GAAG,KAAK,EAChC,EAAa,EACb,IAIC,EACD,EAAE;IACF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC7C,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC5C,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,OAAO,CAAC;SACnB,MAAM,CAAC;QACN,GAAG;QACH,MAAM;QACN,SAAS;QACT,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC7C,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,YAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;KACxE,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;SAClC,SAAS,CAAC,KAAK,CAAC,CACpB,CAAA;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;AACH,CAAC,CAAA;AA3BY,QAAA,aAAa,iBA2BzB;AAEM,MAAM,eAAe,GAAG,KAAK,EAClC,EAAa,EACb,IAIC,EACD,EAAE;IACF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI,CAAA;IAC3C,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC5C,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,SAAS,CAAC;SACrB,MAAM,CAAC;QACN,GAAG;QACH,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;QAC1B,cAAc;KACf,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;SAClC,SAAS,CAAC,KAAK,CAAC,CACpB,CAAA;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;AACH,CAAC,CAAA;AAvBY,QAAA,eAAe,mBAuB3B;AAEM,MAAM,aAAa,GAAG,KAAK,EAChC,EAAa,EACb,GAAc,EACC,EAAE;IACjB,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACrD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACvD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACzD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,CAC3D,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,CACvD,CAAA;AACH,CAAC,CAAA;AArBY,QAAA,aAAa,iBAqBzB;AAEM,MAAM,YAAY,GAAG,KAAK,EAC/B,EAAa,EACb,GAAc,EACd,MAAoB,EACpB,EAAE;IACF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;SACf,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,cAAc,CACb,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,SAAS,EAAE,CACnE,CACJ,CAAA;IACD,IAAI,GAAG,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;AACH,CAAC,CAAA;AAjBY,QAAA,YAAY,gBAiBxB;AAEM,MAAM,WAAW,GAAG,KAAK,EAC9B,EAAa,EACb,GAAc,EACd,KAAa,EACb,EAAE;IACF,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,SAAS,CAAC;aACtB,GAAG,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;YAC1B,gBAAgB,EAAE,IAAI;SACvB,CAAC;aACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,IAAA,yBAAoB,EAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,sBAAsB,EAAE,CAAA;QACpC,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AArBY,QAAA,WAAW,eAqBvB;AAEM,MAAM,mBAAmB,GAAG,KAAK,EACtC,EAAa,EACb,GAAc,EACd,gBAAgC,EAChC,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC;SACzB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;AACH,CAAC,CAAA;AAXY,QAAA,mBAAmB,uBAW/B;AAEM,MAAM,qBAAqB,GAAG,KAAK,EACxC,EAAa,EACb,GAAc,EAIN,EAAE;IACV,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,OAAO,CAAC;SACnB,MAAM,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;SACxC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW;QAC9B,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;QACzC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACtB,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC9E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;AAClC,CAAC,CAAA;AAlBY,QAAA,qBAAqB,yBAkBjC;AAEM,MAAM,2BAA2B,GAAG,KAAK,EAC9C,EAAa,EACb,GAAc,EACd,QAA2C,EAC3C,EAAE;IACF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO;QAClC,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAA,2BAAqB,GAAE;QACzC,CAAC,CAAC,IAAI,CAAA;IACR,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACvE,CAAA;AACH,CAAC,CAAA;AAXY,QAAA,2BAA2B,+BAWvC;AAEM,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAc,EACd,WAA0B,EAC1B,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC;QACH,aAAa,EAAE,IAAA,2BAAqB,GAAE;QACtC,WAAW;KACZ,CAAC;SACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;AACH,CAAC,CAAA;AAdY,QAAA,iBAAiB,qBAc7B;AAEM,MAAM,eAAe,GAAG,KAAK,EAAE,EAAa,EAAE,GAAc,EAAE,EAAE;IACrE,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC;QACH,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;KAClB,CAAC;SACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;AACH,CAAC,CAAA;AAVY,QAAA,eAAe,mBAU3B;AAEM,MAAM,mBAAmB,GAAG,CACjC,OAGC,EACD,EAAE;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,EAAW,CAAA;IAClE,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,SAAS,EAAW,CAAA;IACpE,CAAC;SAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,WAAW,EAAW,CAAA;IACtE,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAW,CAAA;IACrD,CAAC;AACH,CAAC,CAAA;AAfY,QAAA,mBAAmB,uBAe/B","sourcesContent":["import { DAY } from '@atproto/common'\nimport {\n  AtIdentifierString,\n  DatetimeString,\n  DidString,\n  HandleString,\n  currentDatetimeString,\n  isDidIdentifier,\n} from '@atproto/lex'\nimport { isErrUniqueViolation, notSoftDeletedClause } from '../../db'\nimport { com } from '../../lexicons/index.js'\nimport { AccountDb, ActorEntry } from '../db'\n\nexport class UserAlreadyExistsError extends Error {}\n\nexport type ActorAccount = ActorEntry & {\n  email: string | null\n  emailConfirmedAt: string | null\n  invitesDisabled: 0 | 1 | null\n}\n\nexport type AvailabilityFlags = {\n  includeTakenDown?: boolean\n  includeDeactivated?: boolean\n}\n\nexport enum AccountStatus {\n  Active = 'active',\n  Takendown = 'takendown',\n  Suspended = 'suspended',\n  Deleted = 'deleted',\n  Deactivated = 'deactivated',\n}\n\nexport const selectAccountQB = (db: AccountDb, flags?: AvailabilityFlags) => {\n  const { includeTakenDown = false, includeDeactivated = false } = flags ?? {}\n  const { ref } = db.db.dynamic\n  return db.db\n    .selectFrom('actor')\n    .leftJoin('account', 'actor.did', 'account.did')\n    .if(!includeTakenDown, (qb) => qb.where(notSoftDeletedClause(ref('actor'))))\n    .if(!includeDeactivated, (qb) =>\n      qb.where('actor.deactivatedAt', 'is', null),\n    )\n    .select([\n      'actor.did',\n      'actor.handle',\n      'actor.createdAt',\n      'actor.takedownRef',\n      'actor.deactivatedAt',\n      'actor.deleteAfter',\n      'account.email',\n      'account.emailConfirmedAt',\n      'account.invitesDisabled',\n    ])\n}\n\nexport const getAccount = async (\n  db: AccountDb,\n  handleOrDid: AtIdentifierString,\n  flags?: AvailabilityFlags,\n): Promise<ActorAccount | null> => {\n  const found = await selectAccountQB(db, flags)\n    .where((qb) => {\n      if (isDidIdentifier(handleOrDid)) {\n        return qb.where('actor.did', '=', handleOrDid)\n      } else {\n        return qb.where('actor.handle', '=', handleOrDid)\n      }\n    })\n    .executeTakeFirst()\n  return found || null\n}\n\nexport const getAccounts = async (\n  db: AccountDb,\n  dids: DidString[],\n  flags?: AvailabilityFlags,\n): Promise<Map<string, ActorAccount>> => {\n  const results = new Map<string, ActorAccount>()\n\n  if (!dids.length) {\n    return results\n  }\n\n  const accounts = await selectAccountQB(db, flags)\n    .where('actor.did', 'in', dids)\n    .execute()\n\n  accounts.forEach((account) => {\n    results.set(account.did, account)\n  })\n\n  return results\n}\n\nexport const getAccountByEmail = async (\n  db: AccountDb,\n  email: string,\n  flags?: AvailabilityFlags,\n): Promise<ActorAccount | null> => {\n  const found = await selectAccountQB(db, flags)\n    .where('email', '=', email.toLowerCase())\n    .executeTakeFirst()\n  return found || null\n}\n\nexport const registerActor = async (\n  db: AccountDb,\n  opts: {\n    did: DidString\n    handle: HandleString\n    deactivated?: boolean\n  },\n) => {\n  const { did, handle, deactivated } = opts\n  const now = Date.now()\n  const createdAt = new Date(now).toISOString()\n  const [registered] = await db.executeWithRetry(\n    db.db\n      .insertInto('actor')\n      .values({\n        did,\n        handle,\n        createdAt,\n        deactivatedAt: deactivated ? createdAt : null,\n        deleteAfter: deactivated ? new Date(now + 3 * DAY).toISOString() : null,\n      })\n      .onConflict((oc) => oc.doNothing())\n      .returning('did'),\n  )\n  if (!registered) {\n    throw new UserAlreadyExistsError()\n  }\n}\n\nexport const registerAccount = async (\n  db: AccountDb,\n  opts: {\n    did: string\n    email: string\n    passwordScrypt: string\n  },\n) => {\n  const { did, email, passwordScrypt } = opts\n  const [registered] = await db.executeWithRetry(\n    db.db\n      .insertInto('account')\n      .values({\n        did,\n        email: email.toLowerCase(),\n        passwordScrypt,\n      })\n      .onConflict((oc) => oc.doNothing())\n      .returning('did'),\n  )\n  if (!registered) {\n    throw new UserAlreadyExistsError()\n  }\n}\n\nexport const deleteAccount = async (\n  db: AccountDb,\n  did: DidString,\n): Promise<void> => {\n  // Not done in transaction because it would be too long, prone to contention.\n  // Also, this can safely be run multiple times if it fails.\n  await db.executeWithRetry(\n    db.db.deleteFrom('repo_root').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('email_token').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('refresh_token').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('account').where('account.did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('actor').where('actor.did', '=', did),\n  )\n}\n\nexport const updateHandle = async (\n  db: AccountDb,\n  did: DidString,\n  handle: HandleString,\n) => {\n  const [res] = await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({ handle })\n      .where('did', '=', did)\n      .whereNotExists(\n        db.db.selectFrom('actor').where('handle', '=', handle).selectAll(),\n      ),\n  )\n  if (res.numUpdatedRows < 1) {\n    throw new UserAlreadyExistsError()\n  }\n}\n\nexport const updateEmail = async (\n  db: AccountDb,\n  did: DidString,\n  email: string,\n) => {\n  try {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('account')\n        .set({\n          email: email.toLowerCase(),\n          emailConfirmedAt: null,\n        })\n        .where('did', '=', did),\n    )\n  } catch (err) {\n    if (isErrUniqueViolation(err)) {\n      throw new UserAlreadyExistsError()\n    }\n    throw err\n  }\n}\n\nexport const setEmailConfirmedAt = async (\n  db: AccountDb,\n  did: DidString,\n  emailConfirmedAt: DatetimeString,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .set({ emailConfirmedAt })\n      .where('did', '=', did),\n  )\n}\n\nexport const getAccountAdminStatus = async (\n  db: AccountDb,\n  did: DidString,\n): Promise<{\n  takedown: com.atproto.admin.defs.StatusAttr\n  deactivated: com.atproto.admin.defs.StatusAttr\n} | null> => {\n  const res = await db.db\n    .selectFrom('actor')\n    .select(['takedownRef', 'deactivatedAt'])\n    .where('did', '=', did)\n    .executeTakeFirst()\n  if (!res) return null\n  const takedown = res.takedownRef\n    ? { applied: true, ref: res.takedownRef }\n    : { applied: false }\n  const deactivated = res.deactivatedAt ? { applied: true } : { applied: false }\n  return { takedown, deactivated }\n}\n\nexport const updateAccountTakedownStatus = async (\n  db: AccountDb,\n  did: DidString,\n  takedown: com.atproto.admin.defs.StatusAttr,\n) => {\n  const takedownRef = takedown.applied\n    ? takedown.ref ?? currentDatetimeString()\n    : null\n  await db.executeWithRetry(\n    db.db.updateTable('actor').set({ takedownRef }).where('did', '=', did),\n  )\n}\n\nexport const deactivateAccount = async (\n  db: AccountDb,\n  did: DidString,\n  deleteAfter: string | null,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({\n        deactivatedAt: currentDatetimeString(),\n        deleteAfter,\n      })\n      .where('did', '=', did),\n  )\n}\n\nexport const activateAccount = async (db: AccountDb, did: DidString) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({\n        deactivatedAt: null,\n        deleteAfter: null,\n      })\n      .where('did', '=', did),\n  )\n}\n\nexport const formatAccountStatus = (\n  account: null | {\n    takedownRef: string | null\n    deactivatedAt: string | null\n  },\n) => {\n  if (!account) {\n    return { active: false, status: AccountStatus.Deleted } as const\n  } else if (account.takedownRef) {\n    return { active: false, status: AccountStatus.Takendown } as const\n  } else if (account.deactivatedAt) {\n    return { active: false, status: AccountStatus.Deactivated } as const\n  } else {\n    return { active: true, status: undefined } as const\n  }\n}\n"]}
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/account.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AACrC,OAAO,EAKL,qBAAqB,EACrB,eAAe,GAChB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAI9E,MAAM,OAAO,sBAAuB,SAAQ,KAAK;CAAG;AAapD,MAAM,CAAN,IAAY,aAMX;AAND,WAAY,aAAa;IACvB,kCAAiB,CAAA;IACjB,wCAAuB,CAAA;IACvB,wCAAuB,CAAA;IACvB,oCAAmB,CAAA;IACnB,4CAA2B,CAAA;AAC7B,CAAC,EANW,aAAa,KAAb,aAAa,QAMxB;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAa,EAAE,KAAyB,EAAE,EAAE;IAC1E,MAAM,EAAE,gBAAgB,GAAG,KAAK,EAAE,kBAAkB,GAAG,KAAK,EAAE,GAAG,KAAK,IAAI,EAAE,CAAA;IAC5E,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAA;IAC7B,OAAO,EAAE,CAAC,EAAE;SACT,UAAU,CAAC,OAAO,CAAC;SACnB,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC;SAC/C,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SAC3E,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAC9B,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,CAAC,CAC5C;SACA,MAAM,CAAC;QACN,WAAW;QACX,cAAc;QACd,iBAAiB;QACjB,mBAAmB;QACnB,qBAAqB;QACrB,mBAAmB;QACnB,eAAe;QACf,0BAA0B;QAC1B,yBAAyB;KAC1B,CAAC,CAAA;AACN,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,EAAa,EACb,WAA+B,EAC/B,KAAyB,EACK,EAAE;IAChC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;SAC3C,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE;QACZ,IAAI,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QAChD,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QACnD,CAAC;IACH,CAAC,CAAC;SACD,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,EAAa,EACb,IAAiB,EACjB,KAAyB,EACW,EAAE;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAE/C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;SAC9C,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,OAAO,EAAE,CAAA;IAEZ,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,KAAa,EACb,KAAyB,EACK,EAAE;IAChC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;SAC3C,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACxC,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,EAAa,EACb,IAIC,EACD,EAAE;IACF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC7C,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC5C,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,OAAO,CAAC;SACnB,MAAM,CAAC;QACN,GAAG;QACH,MAAM;QACN,SAAS;QACT,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC7C,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;KACxE,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;SAClC,SAAS,CAAC,KAAK,CAAC,CACpB,CAAA;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,EAAa,EACb,IAIC,EACD,EAAE;IACF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI,CAAA;IAC3C,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC5C,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,SAAS,CAAC;SACrB,MAAM,CAAC;QACN,GAAG;QACH,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;QAC1B,cAAc;KACf,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;SAClC,SAAS,CAAC,KAAK,CAAC,CACpB,CAAA;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,EAAa,EACb,GAAc,EACC,EAAE;IACjB,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACrD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACvD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACzD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,CAC3D,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,CACvD,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,EAAa,EACb,GAAc,EACd,MAAoB,EACpB,EAAE;IACF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;SACf,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,cAAc,CACb,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,SAAS,EAAE,CACnE,CACJ,CAAA;IACD,IAAI,GAAG,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,EAAa,EACb,GAAc,EACd,KAAa,EACb,EAAE;IACF,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,SAAS,CAAC;aACtB,GAAG,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;YAC1B,gBAAgB,EAAE,IAAI;SACvB,CAAC;aACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,sBAAsB,EAAE,CAAA;QACpC,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,EAAa,EACb,GAAc,EACd,gBAAgC,EAChC,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC;SACzB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,EAAa,EACb,GAAc,EAIN,EAAE;IACV,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,OAAO,CAAC;SACnB,MAAM,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;SACxC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW;QAC9B,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;QACzC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACtB,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC9E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;AAClC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,EAC9C,EAAa,EACb,GAAc,EACd,QAA2C,EAC3C,EAAE;IACF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO;QAClC,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,qBAAqB,EAAE;QACzC,CAAC,CAAC,IAAI,CAAA;IACR,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACvE,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAc,EACd,WAA0B,EAC1B,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC;QACH,aAAa,EAAE,qBAAqB,EAAE;QACtC,WAAW;KACZ,CAAC;SACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,EAAa,EAAE,GAAc,EAAE,EAAE;IACrE,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC;QACH,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;KAClB,CAAC;SACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,OAGC,EACD,EAAE;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,EAAW,CAAA;IAClE,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,SAAS,EAAW,CAAA;IACpE,CAAC;SAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,WAAW,EAAW,CAAA;IACtE,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAW,CAAA;IACrD,CAAC;AACH,CAAC,CAAA","sourcesContent":["import { DAY } from '@atproto/common'\nimport {\n  AtIdentifierString,\n  DatetimeString,\n  DidString,\n  HandleString,\n  currentDatetimeString,\n  isDidIdentifier,\n} from '@atproto/lex'\nimport { isErrUniqueViolation, notSoftDeletedClause } from '../../db/index.js'\nimport { com } from '../../lexicons/index.js'\nimport { AccountDb, ActorEntry } from '../db/index.js'\n\nexport class UserAlreadyExistsError extends Error {}\n\nexport type ActorAccount = ActorEntry & {\n  email: string | null\n  emailConfirmedAt: string | null\n  invitesDisabled: 0 | 1 | null\n}\n\nexport type AvailabilityFlags = {\n  includeTakenDown?: boolean\n  includeDeactivated?: boolean\n}\n\nexport enum AccountStatus {\n  Active = 'active',\n  Takendown = 'takendown',\n  Suspended = 'suspended',\n  Deleted = 'deleted',\n  Deactivated = 'deactivated',\n}\n\nexport const selectAccountQB = (db: AccountDb, flags?: AvailabilityFlags) => {\n  const { includeTakenDown = false, includeDeactivated = false } = flags ?? {}\n  const { ref } = db.db.dynamic\n  return db.db\n    .selectFrom('actor')\n    .leftJoin('account', 'actor.did', 'account.did')\n    .if(!includeTakenDown, (qb) => qb.where(notSoftDeletedClause(ref('actor'))))\n    .if(!includeDeactivated, (qb) =>\n      qb.where('actor.deactivatedAt', 'is', null),\n    )\n    .select([\n      'actor.did',\n      'actor.handle',\n      'actor.createdAt',\n      'actor.takedownRef',\n      'actor.deactivatedAt',\n      'actor.deleteAfter',\n      'account.email',\n      'account.emailConfirmedAt',\n      'account.invitesDisabled',\n    ])\n}\n\nexport const getAccount = async (\n  db: AccountDb,\n  handleOrDid: AtIdentifierString,\n  flags?: AvailabilityFlags,\n): Promise<ActorAccount | null> => {\n  const found = await selectAccountQB(db, flags)\n    .where((qb) => {\n      if (isDidIdentifier(handleOrDid)) {\n        return qb.where('actor.did', '=', handleOrDid)\n      } else {\n        return qb.where('actor.handle', '=', handleOrDid)\n      }\n    })\n    .executeTakeFirst()\n  return found || null\n}\n\nexport const getAccounts = async (\n  db: AccountDb,\n  dids: DidString[],\n  flags?: AvailabilityFlags,\n): Promise<Map<string, ActorAccount>> => {\n  const results = new Map<string, ActorAccount>()\n\n  if (!dids.length) {\n    return results\n  }\n\n  const accounts = await selectAccountQB(db, flags)\n    .where('actor.did', 'in', dids)\n    .execute()\n\n  accounts.forEach((account) => {\n    results.set(account.did, account)\n  })\n\n  return results\n}\n\nexport const getAccountByEmail = async (\n  db: AccountDb,\n  email: string,\n  flags?: AvailabilityFlags,\n): Promise<ActorAccount | null> => {\n  const found = await selectAccountQB(db, flags)\n    .where('email', '=', email.toLowerCase())\n    .executeTakeFirst()\n  return found || null\n}\n\nexport const registerActor = async (\n  db: AccountDb,\n  opts: {\n    did: DidString\n    handle: HandleString\n    deactivated?: boolean\n  },\n) => {\n  const { did, handle, deactivated } = opts\n  const now = Date.now()\n  const createdAt = new Date(now).toISOString()\n  const [registered] = await db.executeWithRetry(\n    db.db\n      .insertInto('actor')\n      .values({\n        did,\n        handle,\n        createdAt,\n        deactivatedAt: deactivated ? createdAt : null,\n        deleteAfter: deactivated ? new Date(now + 3 * DAY).toISOString() : null,\n      })\n      .onConflict((oc) => oc.doNothing())\n      .returning('did'),\n  )\n  if (!registered) {\n    throw new UserAlreadyExistsError()\n  }\n}\n\nexport const registerAccount = async (\n  db: AccountDb,\n  opts: {\n    did: string\n    email: string\n    passwordScrypt: string\n  },\n) => {\n  const { did, email, passwordScrypt } = opts\n  const [registered] = await db.executeWithRetry(\n    db.db\n      .insertInto('account')\n      .values({\n        did,\n        email: email.toLowerCase(),\n        passwordScrypt,\n      })\n      .onConflict((oc) => oc.doNothing())\n      .returning('did'),\n  )\n  if (!registered) {\n    throw new UserAlreadyExistsError()\n  }\n}\n\nexport const deleteAccount = async (\n  db: AccountDb,\n  did: DidString,\n): Promise<void> => {\n  // Not done in transaction because it would be too long, prone to contention.\n  // Also, this can safely be run multiple times if it fails.\n  await db.executeWithRetry(\n    db.db.deleteFrom('repo_root').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('email_token').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('refresh_token').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('account').where('account.did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('actor').where('actor.did', '=', did),\n  )\n}\n\nexport const updateHandle = async (\n  db: AccountDb,\n  did: DidString,\n  handle: HandleString,\n) => {\n  const [res] = await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({ handle })\n      .where('did', '=', did)\n      .whereNotExists(\n        db.db.selectFrom('actor').where('handle', '=', handle).selectAll(),\n      ),\n  )\n  if (res.numUpdatedRows < 1) {\n    throw new UserAlreadyExistsError()\n  }\n}\n\nexport const updateEmail = async (\n  db: AccountDb,\n  did: DidString,\n  email: string,\n) => {\n  try {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('account')\n        .set({\n          email: email.toLowerCase(),\n          emailConfirmedAt: null,\n        })\n        .where('did', '=', did),\n    )\n  } catch (err) {\n    if (isErrUniqueViolation(err)) {\n      throw new UserAlreadyExistsError()\n    }\n    throw err\n  }\n}\n\nexport const setEmailConfirmedAt = async (\n  db: AccountDb,\n  did: DidString,\n  emailConfirmedAt: DatetimeString,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .set({ emailConfirmedAt })\n      .where('did', '=', did),\n  )\n}\n\nexport const getAccountAdminStatus = async (\n  db: AccountDb,\n  did: DidString,\n): Promise<{\n  takedown: com.atproto.admin.defs.StatusAttr\n  deactivated: com.atproto.admin.defs.StatusAttr\n} | null> => {\n  const res = await db.db\n    .selectFrom('actor')\n    .select(['takedownRef', 'deactivatedAt'])\n    .where('did', '=', did)\n    .executeTakeFirst()\n  if (!res) return null\n  const takedown = res.takedownRef\n    ? { applied: true, ref: res.takedownRef }\n    : { applied: false }\n  const deactivated = res.deactivatedAt ? { applied: true } : { applied: false }\n  return { takedown, deactivated }\n}\n\nexport const updateAccountTakedownStatus = async (\n  db: AccountDb,\n  did: DidString,\n  takedown: com.atproto.admin.defs.StatusAttr,\n) => {\n  const takedownRef = takedown.applied\n    ? takedown.ref ?? currentDatetimeString()\n    : null\n  await db.executeWithRetry(\n    db.db.updateTable('actor').set({ takedownRef }).where('did', '=', did),\n  )\n}\n\nexport const deactivateAccount = async (\n  db: AccountDb,\n  did: DidString,\n  deleteAfter: string | null,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({\n        deactivatedAt: currentDatetimeString(),\n        deleteAfter,\n      })\n      .where('did', '=', did),\n  )\n}\n\nexport const activateAccount = async (db: AccountDb, did: DidString) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({\n        deactivatedAt: null,\n        deleteAfter: null,\n      })\n      .where('did', '=', did),\n  )\n}\n\nexport const formatAccountStatus = (\n  account: null | {\n    takedownRef: string | null\n    deactivatedAt: string | null\n  },\n) => {\n  if (!account) {\n    return { active: false, status: AccountStatus.Deleted } as const\n  } else if (account.takedownRef) {\n    return { active: false, status: AccountStatus.Takendown } as const\n  } else if (account.deactivatedAt) {\n    return { active: false, status: AccountStatus.Deactivated } as const\n  } else {\n    return { active: true, status: undefined } as const\n  }\n}\n"]}

package/dist/account-manager/helpers/auth.d.ts

@@ -1,7 +1,7 @@
 import { KeyObject } from 'node:crypto';
-import { AuthScope } from '../../auth-scope';
-import { AccountDb } from '../db';
-import { AppPassDescript } from './password';
+import { AuthScope } from '../../auth-scope.js';
+import { AccountDb } from '../db/index.js';
+import { AppPassDescript } from './password.js';
 export type AuthToken = {
     scope: AuthScope;
     sub: string;

package/dist/account-manager/helpers/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAIvC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE5C,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,SAAS,CAAA;IAChB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ,CAAA;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG;IAAE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhF,eAAO,MAAM,YAAY,GAAU,MAAM;IACvC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,SAAS,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAC5B;;;EAOA,CAAA;AAED,eAAO,MAAM,iBAAiB,GAAI,MAAM;IACtC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,SAAS,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAC5B,KAAG,OAAO,CAAC,MAAM,CAkBjB,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,MAAM;IACvC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,SAAS,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAC5B,KAAG,OAAO,CAAC,MAAM,CAmBjB,CAAA;AAGD,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,KAG5B,YACjB,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,IAAI,SAAS,EACb,SAAS,YAAY,EACrB,aAAa,eAAe,GAAG,IAAI,2CAcpC,CAAA;AAED,eAAO,MAAM,eAAe,GAAU,IAAI,SAAS,EAAE,IAAI,MAAM;;;;;;;;;SA0B9D,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,IAAI,SAAS,EACb,KAAK,MAAM,EACX,KAAK,MAAM,kBAQZ,CAAA;AAED,eAAO,MAAM,qBAAqB,GAChC,IAAI,SAAS,EACb,MAAM;IACJ,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf,kBAgBF,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAU,IAAI,SAAS,EAAE,IAAI,MAAM,qBAKjE,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAU,IAAI,SAAS,EAAE,KAAK,MAAM,qBAKxE,CAAA;AAED,eAAO,MAAM,6BAA6B,GACxC,IAAI,SAAS,EACb,KAAK,MAAM,EACX,aAAa,MAAM,qBAUpB,CAAA;AAED,eAAO,MAAM,iBAAiB,cAE7B,CAAA;AAED,eAAO,MAAM,WAAW,GACtB,aAAa,eAAe,GAAG,IAAI,EACnC,gBAAgB,OAAO,KACtB,SAMF,CAAA;AAED,qBAAa,sBAAuB,SAAQ,KAAK;CAAG"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAIvC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,SAAS,CAAA;IAChB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ,CAAA;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG;IAAE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhF,eAAO,MAAM,YAAY,GAAU,MAAM;IACvC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,SAAS,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAC5B;;;EAOA,CAAA;AAED,eAAO,MAAM,iBAAiB,GAAI,MAAM;IACtC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,SAAS,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAC5B,KAAG,OAAO,CAAC,MAAM,CAkBjB,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,MAAM;IACvC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,SAAS,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAC5B,KAAG,OAAO,CAAC,MAAM,CAmBjB,CAAA;AAGD,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,KAG5B,YACjB,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,IAAI,SAAS,EACb,SAAS,YAAY,EACrB,aAAa,eAAe,GAAG,IAAI,2CAcpC,CAAA;AAED,eAAO,MAAM,eAAe,GAAU,IAAI,SAAS,EAAE,IAAI,MAAM;;;;;;;;;SA0B9D,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,IAAI,SAAS,EACb,KAAK,MAAM,EACX,KAAK,MAAM,kBAQZ,CAAA;AAED,eAAO,MAAM,qBAAqB,GAChC,IAAI,SAAS,EACb,MAAM;IACJ,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf,kBAgBF,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAU,IAAI,SAAS,EAAE,IAAI,MAAM,qBAKjE,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAU,IAAI,SAAS,EAAE,KAAK,MAAM,qBAKxE,CAAA;AAED,eAAO,MAAM,6BAA6B,GACxC,IAAI,SAAS,EACb,KAAK,MAAM,EACX,aAAa,MAAM,qBAUpB,CAAA;AAED,eAAO,MAAM,iBAAiB,cAE7B,CAAA;AAED,eAAO,MAAM,WAAW,GACtB,aAAa,eAAe,GAAG,IAAI,EACnC,gBAAgB,OAAO,KACtB,SAMF,CAAA;AAED,qBAAa,sBAAuB,SAAQ,KAAK;CAAG"}

package/dist/account-manager/helpers/auth.js

@@ -1,58 +1,18 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConcurrentRefreshError = exports.formatScope = exports.getRefreshTokenId = exports.revokeAppPasswordRefreshToken = exports.revokeRefreshTokensByDid = exports.revokeRefreshToken = exports.addRefreshGracePeriod = exports.deleteExpiredRefreshTokens = exports.getRefreshToken = exports.storeRefreshToken = exports.decodeRefreshToken = exports.createRefreshToken = exports.createAccessToken = exports.createTokens = void 0;
-const node_assert_1 = __importDefault(require("node:assert"));
-const jose = __importStar(require("jose"));
-const ui8 = __importStar(require("uint8arrays"));
-const crypto = __importStar(require("@atproto/crypto"));
-const auth_scope_1 = require("../../auth-scope");
-const createTokens = async (opts) => {
+import assert from 'node:assert';
+import * as jose from 'jose';
+import * as ui8 from 'uint8arrays';
+import * as crypto from '@atproto/crypto';
+import { AuthScope } from '../../auth-scope.js';
+export const createTokens = async (opts) => {
     const { did, jwtKey, serviceDid, scope, jti, expiresIn } = opts;
     const [accessJwt, refreshJwt] = await Promise.all([
-        (0, exports.createAccessToken)({ did, jwtKey, serviceDid, scope, expiresIn }),
-        (0, exports.createRefreshToken)({ did, jwtKey, serviceDid, jti, expiresIn }),
+        createAccessToken({ did, jwtKey, serviceDid, scope, expiresIn }),
+        createRefreshToken({ did, jwtKey, serviceDid, jti, expiresIn }),
     ]);
     return { accessJwt, refreshJwt };
 };
-exports.createTokens = createTokens;
-const createAccessToken = (opts) => {
-    const { did, jwtKey, serviceDid, scope = auth_scope_1.AuthScope.Access, expiresIn = '120mins', } = opts;
+export const createAccessToken = (opts) => {
+    const { did, jwtKey, serviceDid, scope = AuthScope.Access, expiresIn = '120mins', } = opts;
     const signer = new jose.SignJWT({ scope })
         .setProtectedHeader({
         typ: 'at+jwt', // https://www.rfc-editor.org/rfc/rfc9068.html
@@ -64,10 +24,9 @@ const createAccessToken = (opts) => {
         .setExpirationTime(expiresIn);
     return signer.sign(jwtKey);
 };
-exports.createAccessToken = createAccessToken;
-const createRefreshToken = (opts) => {
-    const { did, jwtKey, serviceDid, jti = (0, exports.getRefreshTokenId)(), expiresIn = '90days', } = opts;
-    const signer = new jose.SignJWT({ scope: auth_scope_1.AuthScope.Refresh })
+export const createRefreshToken = (opts) => {
+    const { did, jwtKey, serviceDid, jti = getRefreshTokenId(), expiresIn = '90days', } = opts;
+    const signer = new jose.SignJWT({ scope: AuthScope.Refresh })
         .setProtectedHeader({
         typ: 'refresh+jwt',
         alg: 'HS256', // only symmetric keys supported
@@ -79,15 +38,13 @@ const createRefreshToken = (opts) => {
         .setExpirationTime(expiresIn);
     return signer.sign(jwtKey);
 };
-exports.createRefreshToken = createRefreshToken;
 // @NOTE unsafe for verification, should only be used w/ direct output from createRefreshToken() or createTokens()
-const decodeRefreshToken = (jwt) => {
+export const decodeRefreshToken = (jwt) => {
     const token = jose.decodeJwt(jwt);
-    node_assert_1.default.ok(token.scope === auth_scope_1.AuthScope.Refresh, 'not a refresh token');
+    assert.ok(token.scope === AuthScope.Refresh, 'not a refresh token');
     return token;
 };
-exports.decodeRefreshToken = decodeRefreshToken;
-const storeRefreshToken = async (db, payload, appPassword) => {
+export const storeRefreshToken = async (db, payload, appPassword) => {
     const [result] = await db.executeWithRetry(db.db
         .insertInto('refresh_token')
         .values({
@@ -99,8 +56,7 @@ const storeRefreshToken = async (db, payload, appPassword) => {
         .onConflict((oc) => oc.doNothing()));
     return result;
 };
-exports.storeRefreshToken = storeRefreshToken;
-const getRefreshToken = async (db, id) => {
+export const getRefreshToken = async (db, id) => {
     const res = await db.db
         .selectFrom('refresh_token')
         .leftJoin('app_password', (join) => join
@@ -126,15 +82,13 @@ const getRefreshToken = async (db, id) => {
             : null,
     };
 };
-exports.getRefreshToken = getRefreshToken;
-const deleteExpiredRefreshTokens = async (db, did, now) => {
+export const deleteExpiredRefreshTokens = async (db, did, now) => {
     await db.executeWithRetry(db.db
         .deleteFrom('refresh_token')
         .where('did', '=', did)
         .where('expiresAt', '<=', now));
 };
-exports.deleteExpiredRefreshTokens = deleteExpiredRefreshTokens;
-const addRefreshGracePeriod = async (db, opts) => {
+export const addRefreshGracePeriod = async (db, opts) => {
     const { id, expiresAt, nextId } = opts;
     const [res] = await db.executeWithRetry(db.db
         .updateTable('refresh_token')
@@ -146,40 +100,33 @@ const addRefreshGracePeriod = async (db, opts) => {
         throw new ConcurrentRefreshError();
     }
 };
-exports.addRefreshGracePeriod = addRefreshGracePeriod;
-const revokeRefreshToken = async (db, id) => {
+export const revokeRefreshToken = async (db, id) => {
     const [{ numDeletedRows }] = await db.executeWithRetry(db.db.deleteFrom('refresh_token').where('id', '=', id));
     return numDeletedRows > 0;
 };
-exports.revokeRefreshToken = revokeRefreshToken;
-const revokeRefreshTokensByDid = async (db, did) => {
+export const revokeRefreshTokensByDid = async (db, did) => {
     const [{ numDeletedRows }] = await db.executeWithRetry(db.db.deleteFrom('refresh_token').where('did', '=', did));
     return numDeletedRows > 0;
 };
-exports.revokeRefreshTokensByDid = revokeRefreshTokensByDid;
-const revokeAppPasswordRefreshToken = async (db, did, appPassName) => {
+export const revokeAppPasswordRefreshToken = async (db, did, appPassName) => {
     const [{ numDeletedRows }] = await db.executeWithRetry(db.db
         .deleteFrom('refresh_token')
         .where('did', '=', did)
         .where('appPasswordName', '=', appPassName));
     return numDeletedRows > 0;
 };
-exports.revokeAppPasswordRefreshToken = revokeAppPasswordRefreshToken;
-const getRefreshTokenId = () => {
+export const getRefreshTokenId = () => {
     return ui8.toString(crypto.randomBytes(32), 'base64');
 };
-exports.getRefreshTokenId = getRefreshTokenId;
-const formatScope = (appPassword, isSoftDeleted) => {
+export const formatScope = (appPassword, isSoftDeleted) => {
     if (isSoftDeleted)
-        return auth_scope_1.AuthScope.Takendown;
+        return AuthScope.Takendown;
     if (!appPassword)
-        return auth_scope_1.AuthScope.Access;
+        return AuthScope.Access;
     return appPassword.privileged
-        ? auth_scope_1.AuthScope.AppPassPrivileged
-        : auth_scope_1.AuthScope.AppPass;
+        ? AuthScope.AppPassPrivileged
+        : AuthScope.AppPass;
 };
-exports.formatScope = formatScope;
-class ConcurrentRefreshError extends Error {
+export class ConcurrentRefreshError extends Error {
 }
-exports.ConcurrentRefreshError = ConcurrentRefreshError;
 //# sourceMappingURL=auth.js.map

package/dist/account-manager/helpers/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/auth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAAgC;AAEhC,2CAA4B;AAC5B,iDAAkC;AAClC,wDAAyC;AACzC,iDAA4C;AAYrC,MAAM,YAAY,GAAG,KAAK,EAAE,IAOlC,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAC/D,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChD,IAAA,yBAAiB,EAAC,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAChE,IAAA,0BAAkB,EAAC,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;KAChE,CAAC,CAAA;IACF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;AAClC,CAAC,CAAA;AAdY,QAAA,YAAY,gBAcxB;AAEM,MAAM,iBAAiB,GAAG,CAAC,IAMjC,EAAmB,EAAE;IACpB,MAAM,EACJ,GAAG,EACH,MAAM,EACN,UAAU,EACV,KAAK,GAAG,sBAAS,CAAC,MAAM,EACxB,SAAS,GAAG,SAAS,GACtB,GAAG,IAAI,CAAA;IACR,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;SACvC,kBAAkB,CAAC;QAClB,GAAG,EAAE,QAAQ,EAAE,8CAA8C;QAC7D,GAAG,EAAE,OAAO,EAAE,gCAAgC;KAC/C,CAAC;SACD,WAAW,CAAC,UAAU,CAAC;SACvB,UAAU,CAAC,GAAG,CAAC;SACf,WAAW,EAAE;SACb,iBAAiB,CAAC,SAAS,CAAC,CAAA;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC5B,CAAC,CAAA;AAxBY,QAAA,iBAAiB,qBAwB7B;AAEM,MAAM,kBAAkB,GAAG,CAAC,IAMlC,EAAmB,EAAE;IACpB,MAAM,EACJ,GAAG,EACH,MAAM,EACN,UAAU,EACV,GAAG,GAAG,IAAA,yBAAiB,GAAE,EACzB,SAAS,GAAG,QAAQ,GACrB,GAAG,IAAI,CAAA;IACR,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,sBAAS,CAAC,OAAO,EAAE,CAAC;SAC1D,kBAAkB,CAAC;QAClB,GAAG,EAAE,aAAa;QAClB,GAAG,EAAE,OAAO,EAAE,gCAAgC;KAC/C,CAAC;SACD,WAAW,CAAC,UAAU,CAAC;SACvB,UAAU,CAAC,GAAG,CAAC;SACf,MAAM,CAAC,GAAG,CAAC;SACX,WAAW,EAAE;SACb,iBAAiB,CAAC,SAAS,CAAC,CAAA;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC5B,CAAC,CAAA;AAzBY,QAAA,kBAAkB,sBAyB9B;AAED,kHAAkH;AAC3G,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAE,EAAE;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACjC,qBAAM,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,sBAAS,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAA;IACnE,OAAO,KAAqB,CAAA;AAC9B,CAAC,CAAA;AAJY,QAAA,kBAAkB,sBAI9B;AAEM,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,OAAqB,EACrB,WAAmC,EACnC,EAAE;IACF,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACxC,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,eAAe,CAAC;SAC3B,MAAM,CAAC;QACN,EAAE,EAAE,OAAO,CAAC,GAAG;QACf,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,eAAe,EAAE,WAAW,EAAE,IAAI;QAClC,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;KACtD,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CACtC,CAAA;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAjBY,QAAA,iBAAiB,qBAiB7B;AAEM,MAAM,eAAe,GAAG,KAAK,EAAE,EAAa,EAAE,EAAU,EAAE,EAAE;IACjE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,eAAe,CAAC;SAC3B,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CACjC,IAAI;SACD,KAAK,CAAC,kBAAkB,EAAE,GAAG,EAAE,mBAAmB,CAAC;SACnD,KAAK,CAAC,mBAAmB,EAAE,GAAG,EAAE,+BAA+B,CAAC,CACpE;SACA,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,SAAS,CAAC,eAAe,CAAC;SAC1B,MAAM,CAAC,yBAAyB,CAAC;SACjC,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAA;IACnE,OAAO;QACL,EAAE;QACF,GAAG;QACH,SAAS;QACT,MAAM;QACN,WAAW,EAAE,eAAe;YAC1B,CAAC,CAAC;gBACE,IAAI,EAAE,eAAe;gBACrB,UAAU,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;aAC5C;YACH,CAAC,CAAC,IAAI;KACT,CAAA;AACH,CAAC,CAAA;AA1BY,QAAA,eAAe,mBA0B3B;AAEM,MAAM,0BAA0B,GAAG,KAAK,EAC7C,EAAa,EACb,GAAW,EACX,GAAW,EACX,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,eAAe,CAAC;SAC3B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,CACjC,CAAA;AACH,CAAC,CAAA;AAXY,QAAA,0BAA0B,8BAWtC;AAEM,MAAM,qBAAqB,GAAG,KAAK,EACxC,EAAa,EACb,IAIC,EACD,EAAE;IACF,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IACtC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,eAAe,CAAC;SAC5B,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CACjE;SACA,GAAG,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;SAC1B,YAAY,EAAE,CAClB,CAAA;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;AACH,CAAC,CAAA;AAtBY,QAAA,qBAAqB,yBAsBjC;AAEM,MAAM,kBAAkB,GAAG,KAAK,EAAE,EAAa,EAAE,EAAU,EAAE,EAAE;IACpE,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACpD,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CACvD,CAAA;IACD,OAAO,cAAc,GAAG,CAAC,CAAA;AAC3B,CAAC,CAAA;AALY,QAAA,kBAAkB,sBAK9B;AAEM,MAAM,wBAAwB,GAAG,KAAK,EAAE,EAAa,EAAE,GAAW,EAAE,EAAE;IAC3E,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACpD,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACzD,CAAA;IACD,OAAO,cAAc,GAAG,CAAC,CAAA;AAC3B,CAAC,CAAA;AALY,QAAA,wBAAwB,4BAKpC;AAEM,MAAM,6BAA6B,GAAG,KAAK,EAChD,EAAa,EACb,GAAW,EACX,WAAmB,EACnB,EAAE;IACF,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACpD,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,eAAe,CAAC;SAC3B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,iBAAiB,EAAE,GAAG,EAAE,WAAW,CAAC,CAC9C,CAAA;IAED,OAAO,cAAc,GAAG,CAAC,CAAA;AAC3B,CAAC,CAAA;AAbY,QAAA,6BAA6B,iCAazC;AAEM,MAAM,iBAAiB,GAAG,GAAG,EAAE;IACpC,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;AACvD,CAAC,CAAA;AAFY,QAAA,iBAAiB,qBAE7B;AAEM,MAAM,WAAW,GAAG,CACzB,WAAmC,EACnC,aAAuB,EACZ,EAAE;IACb,IAAI,aAAa;QAAE,OAAO,sBAAS,CAAC,SAAS,CAAA;IAC7C,IAAI,CAAC,WAAW;QAAE,OAAO,sBAAS,CAAC,MAAM,CAAA;IACzC,OAAO,WAAW,CAAC,UAAU;QAC3B,CAAC,CAAC,sBAAS,CAAC,iBAAiB;QAC7B,CAAC,CAAC,sBAAS,CAAC,OAAO,CAAA;AACvB,CAAC,CAAA;AATY,QAAA,WAAW,eASvB;AAED,MAAa,sBAAuB,SAAQ,KAAK;CAAG;AAApD,wDAAoD","sourcesContent":["import assert from 'node:assert'\nimport { KeyObject } from 'node:crypto'\nimport * as jose from 'jose'\nimport * as ui8 from 'uint8arrays'\nimport * as crypto from '@atproto/crypto'\nimport { AuthScope } from '../../auth-scope'\nimport { AccountDb } from '../db'\nimport { AppPassDescript } from './password'\n\nexport type AuthToken = {\n  scope: AuthScope\n  sub: string\n  exp: number\n}\n\nexport type RefreshToken = AuthToken & { scope: AuthScope.Refresh; jti: string }\n\nexport const createTokens = async (opts: {\n  did: string\n  jwtKey: KeyObject\n  serviceDid: string\n  scope?: AuthScope\n  jti?: string\n  expiresIn?: string | number\n}) => {\n  const { did, jwtKey, serviceDid, scope, jti, expiresIn } = opts\n  const [accessJwt, refreshJwt] = await Promise.all([\n    createAccessToken({ did, jwtKey, serviceDid, scope, expiresIn }),\n    createRefreshToken({ did, jwtKey, serviceDid, jti, expiresIn }),\n  ])\n  return { accessJwt, refreshJwt }\n}\n\nexport const createAccessToken = (opts: {\n  did: string\n  jwtKey: KeyObject\n  serviceDid: string\n  scope?: AuthScope\n  expiresIn?: string | number\n}): Promise<string> => {\n  const {\n    did,\n    jwtKey,\n    serviceDid,\n    scope = AuthScope.Access,\n    expiresIn = '120mins',\n  } = opts\n  const signer = new jose.SignJWT({ scope })\n    .setProtectedHeader({\n      typ: 'at+jwt', // https://www.rfc-editor.org/rfc/rfc9068.html\n      alg: 'HS256', // only symmetric keys supported\n    })\n    .setAudience(serviceDid)\n    .setSubject(did)\n    .setIssuedAt()\n    .setExpirationTime(expiresIn)\n  return signer.sign(jwtKey)\n}\n\nexport const createRefreshToken = (opts: {\n  did: string\n  jwtKey: KeyObject\n  serviceDid: string\n  jti?: string\n  expiresIn?: string | number\n}): Promise<string> => {\n  const {\n    did,\n    jwtKey,\n    serviceDid,\n    jti = getRefreshTokenId(),\n    expiresIn = '90days',\n  } = opts\n  const signer = new jose.SignJWT({ scope: AuthScope.Refresh })\n    .setProtectedHeader({\n      typ: 'refresh+jwt',\n      alg: 'HS256', // only symmetric keys supported\n    })\n    .setAudience(serviceDid)\n    .setSubject(did)\n    .setJti(jti)\n    .setIssuedAt()\n    .setExpirationTime(expiresIn)\n  return signer.sign(jwtKey)\n}\n\n// @NOTE unsafe for verification, should only be used w/ direct output from createRefreshToken() or createTokens()\nexport const decodeRefreshToken = (jwt: string) => {\n  const token = jose.decodeJwt(jwt)\n  assert.ok(token.scope === AuthScope.Refresh, 'not a refresh token')\n  return token as RefreshToken\n}\n\nexport const storeRefreshToken = async (\n  db: AccountDb,\n  payload: RefreshToken,\n  appPassword: AppPassDescript | null,\n) => {\n  const [result] = await db.executeWithRetry(\n    db.db\n      .insertInto('refresh_token')\n      .values({\n        id: payload.jti,\n        did: payload.sub,\n        appPasswordName: appPassword?.name,\n        expiresAt: new Date(payload.exp * 1000).toISOString(),\n      })\n      .onConflict((oc) => oc.doNothing()), // E.g. when re-granting during a refresh grace period\n  )\n  return result\n}\n\nexport const getRefreshToken = async (db: AccountDb, id: string) => {\n  const res = await db.db\n    .selectFrom('refresh_token')\n    .leftJoin('app_password', (join) =>\n      join\n        .onRef('app_password.did', '=', 'refresh_token.did')\n        .onRef('app_password.name', '=', 'refresh_token.appPasswordName'),\n    )\n    .where('id', '=', id)\n    .selectAll('refresh_token')\n    .select('app_password.privileged')\n    .executeTakeFirst()\n  if (!res) return null\n  const { did, expiresAt, appPasswordName, nextId, privileged } = res\n  return {\n    id,\n    did,\n    expiresAt,\n    nextId,\n    appPassword: appPasswordName\n      ? {\n          name: appPasswordName,\n          privileged: privileged === 1 ? true : false,\n        }\n      : null,\n  }\n}\n\nexport const deleteExpiredRefreshTokens = async (\n  db: AccountDb,\n  did: string,\n  now: string,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .deleteFrom('refresh_token')\n      .where('did', '=', did)\n      .where('expiresAt', '<=', now),\n  )\n}\n\nexport const addRefreshGracePeriod = async (\n  db: AccountDb,\n  opts: {\n    id: string\n    expiresAt: string\n    nextId: string\n  },\n) => {\n  const { id, expiresAt, nextId } = opts\n  const [res] = await db.executeWithRetry(\n    db.db\n      .updateTable('refresh_token')\n      .where('id', '=', id)\n      .where((inner) =>\n        inner.where('nextId', 'is', null).orWhere('nextId', '=', nextId),\n      )\n      .set({ expiresAt, nextId })\n      .returningAll(),\n  )\n  if (!res) {\n    throw new ConcurrentRefreshError()\n  }\n}\n\nexport const revokeRefreshToken = async (db: AccountDb, id: string) => {\n  const [{ numDeletedRows }] = await db.executeWithRetry(\n    db.db.deleteFrom('refresh_token').where('id', '=', id),\n  )\n  return numDeletedRows > 0\n}\n\nexport const revokeRefreshTokensByDid = async (db: AccountDb, did: string) => {\n  const [{ numDeletedRows }] = await db.executeWithRetry(\n    db.db.deleteFrom('refresh_token').where('did', '=', did),\n  )\n  return numDeletedRows > 0\n}\n\nexport const revokeAppPasswordRefreshToken = async (\n  db: AccountDb,\n  did: string,\n  appPassName: string,\n) => {\n  const [{ numDeletedRows }] = await db.executeWithRetry(\n    db.db\n      .deleteFrom('refresh_token')\n      .where('did', '=', did)\n      .where('appPasswordName', '=', appPassName),\n  )\n\n  return numDeletedRows > 0\n}\n\nexport const getRefreshTokenId = () => {\n  return ui8.toString(crypto.randomBytes(32), 'base64')\n}\n\nexport const formatScope = (\n  appPassword: AppPassDescript | null,\n  isSoftDeleted?: boolean,\n): AuthScope => {\n  if (isSoftDeleted) return AuthScope.Takendown\n  if (!appPassword) return AuthScope.Access\n  return appPassword.privileged\n    ? AuthScope.AppPassPrivileged\n    : AuthScope.AppPass\n}\n\nexport class ConcurrentRefreshError extends Error {}\n"]}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAEhC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,GAAG,MAAM,aAAa,CAAA;AAClC,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAY/C,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,IAOlC,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAC/D,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChD,iBAAiB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAChE,kBAAkB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;KAChE,CAAC,CAAA;IACF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;AAClC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAMjC,EAAmB,EAAE;IACpB,MAAM,EACJ,GAAG,EACH,MAAM,EACN,UAAU,EACV,KAAK,GAAG,SAAS,CAAC,MAAM,EACxB,SAAS,GAAG,SAAS,GACtB,GAAG,IAAI,CAAA;IACR,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;SACvC,kBAAkB,CAAC;QAClB,GAAG,EAAE,QAAQ,EAAE,8CAA8C;QAC7D,GAAG,EAAE,OAAO,EAAE,gCAAgC;KAC/C,CAAC;SACD,WAAW,CAAC,UAAU,CAAC;SACvB,UAAU,CAAC,GAAG,CAAC;SACf,WAAW,EAAE;SACb,iBAAiB,CAAC,SAAS,CAAC,CAAA;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC5B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAMlC,EAAmB,EAAE;IACpB,MAAM,EACJ,GAAG,EACH,MAAM,EACN,UAAU,EACV,GAAG,GAAG,iBAAiB,EAAE,EACzB,SAAS,GAAG,QAAQ,GACrB,GAAG,IAAI,CAAA;IACR,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;SAC1D,kBAAkB,CAAC;QAClB,GAAG,EAAE,aAAa;QAClB,GAAG,EAAE,OAAO,EAAE,gCAAgC;KAC/C,CAAC;SACD,WAAW,CAAC,UAAU,CAAC;SACvB,UAAU,CAAC,GAAG,CAAC;SACf,MAAM,CAAC,GAAG,CAAC;SACX,WAAW,EAAE;SACb,iBAAiB,CAAC,SAAS,CAAC,CAAA;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC5B,CAAC,CAAA;AAED,kHAAkH;AAClH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAE,EAAE;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAA;IACnE,OAAO,KAAqB,CAAA;AAC9B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,OAAqB,EACrB,WAAmC,EACnC,EAAE;IACF,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACxC,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,eAAe,CAAC;SAC3B,MAAM,CAAC;QACN,EAAE,EAAE,OAAO,CAAC,GAAG;QACf,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,eAAe,EAAE,WAAW,EAAE,IAAI;QAClC,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;KACtD,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CACtC,CAAA;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,EAAa,EAAE,EAAU,EAAE,EAAE;IACjE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,eAAe,CAAC;SAC3B,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CACjC,IAAI;SACD,KAAK,CAAC,kBAAkB,EAAE,GAAG,EAAE,mBAAmB,CAAC;SACnD,KAAK,CAAC,mBAAmB,EAAE,GAAG,EAAE,+BAA+B,CAAC,CACpE;SACA,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,SAAS,CAAC,eAAe,CAAC;SAC1B,MAAM,CAAC,yBAAyB,CAAC;SACjC,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAA;IACnE,OAAO;QACL,EAAE;QACF,GAAG;QACH,SAAS;QACT,MAAM;QACN,WAAW,EAAE,eAAe;YAC1B,CAAC,CAAC;gBACE,IAAI,EAAE,eAAe;gBACrB,UAAU,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;aAC5C;YACH,CAAC,CAAC,IAAI;KACT,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,EAC7C,EAAa,EACb,GAAW,EACX,GAAW,EACX,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,eAAe,CAAC;SAC3B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,CACjC,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,EAAa,EACb,IAIC,EACD,EAAE;IACF,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IACtC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,eAAe,CAAC;SAC5B,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CACjE;SACA,GAAG,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;SAC1B,YAAY,EAAE,CAClB,CAAA;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,EAAa,EAAE,EAAU,EAAE,EAAE;IACpE,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACpD,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CACvD,CAAA;IACD,OAAO,cAAc,GAAG,CAAC,CAAA;AAC3B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAAE,EAAa,EAAE,GAAW,EAAE,EAAE;IAC3E,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACpD,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACzD,CAAA;IACD,OAAO,cAAc,GAAG,CAAC,CAAA;AAC3B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,EAChD,EAAa,EACb,GAAW,EACX,WAAmB,EACnB,EAAE;IACF,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACpD,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,eAAe,CAAC;SAC3B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,iBAAiB,EAAE,GAAG,EAAE,WAAW,CAAC,CAC9C,CAAA;IAED,OAAO,cAAc,GAAG,CAAC,CAAA;AAC3B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE;IACpC,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;AACvD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,WAAmC,EACnC,aAAuB,EACZ,EAAE;IACb,IAAI,aAAa;QAAE,OAAO,SAAS,CAAC,SAAS,CAAA;IAC7C,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC,MAAM,CAAA;IACzC,OAAO,WAAW,CAAC,UAAU;QAC3B,CAAC,CAAC,SAAS,CAAC,iBAAiB;QAC7B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAA;AACvB,CAAC,CAAA;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;CAAG","sourcesContent":["import assert from 'node:assert'\nimport { KeyObject } from 'node:crypto'\nimport * as jose from 'jose'\nimport * as ui8 from 'uint8arrays'\nimport * as crypto from '@atproto/crypto'\nimport { AuthScope } from '../../auth-scope.js'\nimport { AccountDb } from '../db/index.js'\nimport { AppPassDescript } from './password.js'\n\nexport type AuthToken = {\n  scope: AuthScope\n  sub: string\n  exp: number\n}\n\nexport type RefreshToken = AuthToken & { scope: AuthScope.Refresh; jti: string }\n\nexport const createTokens = async (opts: {\n  did: string\n  jwtKey: KeyObject\n  serviceDid: string\n  scope?: AuthScope\n  jti?: string\n  expiresIn?: string | number\n}) => {\n  const { did, jwtKey, serviceDid, scope, jti, expiresIn } = opts\n  const [accessJwt, refreshJwt] = await Promise.all([\n    createAccessToken({ did, jwtKey, serviceDid, scope, expiresIn }),\n    createRefreshToken({ did, jwtKey, serviceDid, jti, expiresIn }),\n  ])\n  return { accessJwt, refreshJwt }\n}\n\nexport const createAccessToken = (opts: {\n  did: string\n  jwtKey: KeyObject\n  serviceDid: string\n  scope?: AuthScope\n  expiresIn?: string | number\n}): Promise<string> => {\n  const {\n    did,\n    jwtKey,\n    serviceDid,\n    scope = AuthScope.Access,\n    expiresIn = '120mins',\n  } = opts\n  const signer = new jose.SignJWT({ scope })\n    .setProtectedHeader({\n      typ: 'at+jwt', // https://www.rfc-editor.org/rfc/rfc9068.html\n      alg: 'HS256', // only symmetric keys supported\n    })\n    .setAudience(serviceDid)\n    .setSubject(did)\n    .setIssuedAt()\n    .setExpirationTime(expiresIn)\n  return signer.sign(jwtKey)\n}\n\nexport const createRefreshToken = (opts: {\n  did: string\n  jwtKey: KeyObject\n  serviceDid: string\n  jti?: string\n  expiresIn?: string | number\n}): Promise<string> => {\n  const {\n    did,\n    jwtKey,\n    serviceDid,\n    jti = getRefreshTokenId(),\n    expiresIn = '90days',\n  } = opts\n  const signer = new jose.SignJWT({ scope: AuthScope.Refresh })\n    .setProtectedHeader({\n      typ: 'refresh+jwt',\n      alg: 'HS256', // only symmetric keys supported\n    })\n    .setAudience(serviceDid)\n    .setSubject(did)\n    .setJti(jti)\n    .setIssuedAt()\n    .setExpirationTime(expiresIn)\n  return signer.sign(jwtKey)\n}\n\n// @NOTE unsafe for verification, should only be used w/ direct output from createRefreshToken() or createTokens()\nexport const decodeRefreshToken = (jwt: string) => {\n  const token = jose.decodeJwt(jwt)\n  assert.ok(token.scope === AuthScope.Refresh, 'not a refresh token')\n  return token as RefreshToken\n}\n\nexport const storeRefreshToken = async (\n  db: AccountDb,\n  payload: RefreshToken,\n  appPassword: AppPassDescript | null,\n) => {\n  const [result] = await db.executeWithRetry(\n    db.db\n      .insertInto('refresh_token')\n      .values({\n        id: payload.jti,\n        did: payload.sub,\n        appPasswordName: appPassword?.name,\n        expiresAt: new Date(payload.exp * 1000).toISOString(),\n      })\n      .onConflict((oc) => oc.doNothing()), // E.g. when re-granting during a refresh grace period\n  )\n  return result\n}\n\nexport const getRefreshToken = async (db: AccountDb, id: string) => {\n  const res = await db.db\n    .selectFrom('refresh_token')\n    .leftJoin('app_password', (join) =>\n      join\n        .onRef('app_password.did', '=', 'refresh_token.did')\n        .onRef('app_password.name', '=', 'refresh_token.appPasswordName'),\n    )\n    .where('id', '=', id)\n    .selectAll('refresh_token')\n    .select('app_password.privileged')\n    .executeTakeFirst()\n  if (!res) return null\n  const { did, expiresAt, appPasswordName, nextId, privileged } = res\n  return {\n    id,\n    did,\n    expiresAt,\n    nextId,\n    appPassword: appPasswordName\n      ? {\n          name: appPasswordName,\n          privileged: privileged === 1 ? true : false,\n        }\n      : null,\n  }\n}\n\nexport const deleteExpiredRefreshTokens = async (\n  db: AccountDb,\n  did: string,\n  now: string,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .deleteFrom('refresh_token')\n      .where('did', '=', did)\n      .where('expiresAt', '<=', now),\n  )\n}\n\nexport const addRefreshGracePeriod = async (\n  db: AccountDb,\n  opts: {\n    id: string\n    expiresAt: string\n    nextId: string\n  },\n) => {\n  const { id, expiresAt, nextId } = opts\n  const [res] = await db.executeWithRetry(\n    db.db\n      .updateTable('refresh_token')\n      .where('id', '=', id)\n      .where((inner) =>\n        inner.where('nextId', 'is', null).orWhere('nextId', '=', nextId),\n      )\n      .set({ expiresAt, nextId })\n      .returningAll(),\n  )\n  if (!res) {\n    throw new ConcurrentRefreshError()\n  }\n}\n\nexport const revokeRefreshToken = async (db: AccountDb, id: string) => {\n  const [{ numDeletedRows }] = await db.executeWithRetry(\n    db.db.deleteFrom('refresh_token').where('id', '=', id),\n  )\n  return numDeletedRows > 0\n}\n\nexport const revokeRefreshTokensByDid = async (db: AccountDb, did: string) => {\n  const [{ numDeletedRows }] = await db.executeWithRetry(\n    db.db.deleteFrom('refresh_token').where('did', '=', did),\n  )\n  return numDeletedRows > 0\n}\n\nexport const revokeAppPasswordRefreshToken = async (\n  db: AccountDb,\n  did: string,\n  appPassName: string,\n) => {\n  const [{ numDeletedRows }] = await db.executeWithRetry(\n    db.db\n      .deleteFrom('refresh_token')\n      .where('did', '=', did)\n      .where('appPasswordName', '=', appPassName),\n  )\n\n  return numDeletedRows > 0\n}\n\nexport const getRefreshTokenId = () => {\n  return ui8.toString(crypto.randomBytes(32), 'base64')\n}\n\nexport const formatScope = (\n  appPassword: AppPassDescript | null,\n  isSoftDeleted?: boolean,\n): AuthScope => {\n  if (isSoftDeleted) return AuthScope.Takendown\n  if (!appPassword) return AuthScope.Access\n  return appPassword.privileged\n    ? AuthScope.AppPassPrivileged\n    : AuthScope.AppPass\n}\n\nexport class ConcurrentRefreshError extends Error {}\n"]}

package/dist/account-manager/helpers/authorization-request.d.ts

@@ -1,12 +1,12 @@
 import { Selectable } from 'kysely';
 import { Code, FoundRequestResult, RequestData, RequestId, UpdateRequestData } from '@atproto/oauth-provider';
-import { AccountDb, AuthorizationRequest } from '../db';
+import { AccountDb, AuthorizationRequest } from '../db/index.js';
 export declare const rowToRequestData: (row: Selectable<AuthorizationRequest>) => RequestData;
 export declare const rowToFoundRequestResult: (row: Selectable<AuthorizationRequest>) => FoundRequestResult;
-export declare const createQB: (db: AccountDb, id: RequestId, data: RequestData) => import("kysely").InsertQueryBuilder<import("../db").DatabaseSchema, "authorization_request", import("kysely").InsertResult>;
-export declare const readQB: (db: AccountDb, id: RequestId) => import("kysely/dist/cjs/parser/select-parser").SelectAllQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "authorization_request">, "authorization_request", {}, "authorization_request">;
-export declare const updateQB: (db: AccountDb, id: RequestId, { code, sub, deviceId, expiresAt, parameters, ...rest }: UpdateRequestData) => import("kysely").UpdateQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "authorization_request">, "authorization_request", "authorization_request", import("kysely").UpdateResult>;
-export declare const removeOldExpiredQB: (db: AccountDb, delay?: number) => import("kysely").DeleteQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "authorization_request">, "authorization_request", import("kysely").DeleteResult>;
-export declare const removeByIdQB: (db: AccountDb, id: RequestId) => import("kysely").DeleteQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "authorization_request">, "authorization_request", import("kysely").DeleteResult>;
-export declare const consumeByCodeQB: (db: AccountDb, code: Code) => import("kysely").DeleteQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "authorization_request">, "authorization_request", Selectable<AuthorizationRequest>>;
+export declare const createQB: (db: AccountDb, id: RequestId, data: RequestData) => import("kysely").InsertQueryBuilder<import("../db/index.js").DatabaseSchema, "authorization_request", import("kysely").InsertResult>;
+export declare const readQB: (db: AccountDb, id: RequestId) => import("kysely/dist/esm/parser/select-parser.js").SelectAllQueryBuilder<import("kysely/dist/esm/parser/table-parser.js").From<import("../db/index.js").DatabaseSchema, "authorization_request">, "authorization_request", {}, "authorization_request">;
+export declare const updateQB: (db: AccountDb, id: RequestId, { code, sub, deviceId, expiresAt, parameters, ...rest }: UpdateRequestData) => import("kysely").UpdateQueryBuilder<import("kysely/dist/esm/parser/table-parser.js").From<import("../db/index.js").DatabaseSchema, "authorization_request">, "authorization_request", "authorization_request", import("kysely").UpdateResult>;
+export declare const removeOldExpiredQB: (db: AccountDb, delay?: number) => import("kysely").DeleteQueryBuilder<import("kysely/dist/esm/parser/table-parser.js").From<import("../db/index.js").DatabaseSchema, "authorization_request">, "authorization_request", import("kysely").DeleteResult>;
+export declare const removeByIdQB: (db: AccountDb, id: RequestId) => import("kysely").DeleteQueryBuilder<import("kysely/dist/esm/parser/table-parser.js").From<import("../db/index.js").DatabaseSchema, "authorization_request">, "authorization_request", import("kysely").DeleteResult>;
+export declare const consumeByCodeQB: (db: AccountDb, code: Code) => import("kysely").DeleteQueryBuilder<import("kysely/dist/esm/parser/table-parser.js").From<import("../db/index.js").DatabaseSchema, "authorization_request">, "authorization_request", Selectable<AuthorizationRequest>>;
 //# sourceMappingURL=authorization-request.d.ts.map

package/dist/account-manager/helpers/authorization-request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-request.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/authorization-request.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC/C,OAAO,EACL,IAAI,EACJ,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAA;AAEvD,eAAO,MAAM,gBAAgB,GAC3B,KAAK,UAAU,CAAC,oBAAoB,CAAC,KACpC,WAQD,CAAA;AAEF,eAAO,MAAM,uBAAuB,GAClC,KAAK,UAAU,CAAC,oBAAoB,CAAC,KACpC,kBAGD,CAAA;AAiBF,eAAO,MAAM,QAAQ,GAAI,IAAI,SAAS,EAAE,IAAI,SAAS,EAAE,MAAM,WAAW,gIACM,CAAA;AAE9E,eAAO,MAAM,MAAM,GAAI,IAAI,SAAS,EAAE,IAAI,SAAS,4OACyB,CAAA;AAE5E,eAAO,MAAM,QAAQ,GACnB,IAAI,SAAS,EACb,IAAI,SAAS,EACb,yDAAyD,iBAAiB,sOAW3E,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,IAAI,SAAS,EAAE,cAAa,6MAMM,CAAA;AAErE,eAAO,MAAM,YAAY,GAAI,IAAI,SAAS,EAAE,IAAI,SAAS,6MACO,CAAA;AAEhE,eAAO,MAAM,eAAe,GAAI,IAAI,SAAS,EAAE,MAAM,IAAI,gNAMtC,CAAA"}
+{"version":3,"file":"authorization-request.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/authorization-request.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC/C,OAAO,EACL,IAAI,EACJ,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAEhE,eAAO,MAAM,gBAAgB,GAC3B,KAAK,UAAU,CAAC,oBAAoB,CAAC,KACpC,WAQD,CAAA;AAEF,eAAO,MAAM,uBAAuB,GAClC,KAAK,UAAU,CAAC,oBAAoB,CAAC,KACpC,kBAGD,CAAA;AAiBF,eAAO,MAAM,QAAQ,GAAI,IAAI,SAAS,EAAE,IAAI,SAAS,EAAE,MAAM,WAAW,yIACM,CAAA;AAE9E,eAAO,MAAM,MAAM,GAAI,IAAI,SAAS,EAAE,IAAI,SAAS,2PACyB,CAAA;AAE5E,eAAO,MAAM,QAAQ,GACnB,IAAI,SAAS,EACb,IAAI,SAAS,EACb,yDAAyD,iBAAiB,kPAW3E,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,IAAI,SAAS,EAAE,cAAa,yNAMM,CAAA;AAErE,eAAO,MAAM,YAAY,GAAI,IAAI,SAAS,EAAE,IAAI,SAAS,yNACO,CAAA;AAEhE,eAAO,MAAM,eAAe,GAAI,IAAI,SAAS,EAAE,MAAM,IAAI,4NAMtC,CAAA"}