@atproto/pds 0.4.223 → 0.4.225

package/dist/api/com/atproto/server/revokeAppPassword.js.map

@@ -1 +1 @@
-{"version":3,"file":"revokeAppPassword.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/revokeAppPassword.ts"],"names":[],"mappings":";;AAIA,4BAqCC;AAzCD,sDAA6D;AAE7D,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAA;IAE9B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;QAC1C,SAAS,EAAE,GAAG,EAAE;YACd,MAAM,IAAI,4BAAc,CACtB,uDAAuD,CACxD,CAAA;QACH,CAAC;KACF,CAAC,CAAA;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAC/C,IAAI;YACJ,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAChD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAC/C,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC1C,CAAA;gBAED,MAAM,cAAc,CAAC,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;oBAC9D,OAAO;oBACP,IAAI;iBACL,CAAC,CAAA;YACJ,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAC/C,IAAI;YACJ,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;gBAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;gBAEtC,MAAM,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YAClE,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { ForbiddenError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  const { entrywayClient } = ctx\n\n  const auth = ctx.authVerifier.authorization({\n    authorize: () => {\n      throw new ForbiddenError(\n        'OAuth credentials are not supported for this endpoint',\n      )\n    },\n  })\n\n  if (entrywayClient) {\n    server.add(com.atproto.server.revokeAppPassword, {\n      auth,\n      handler: async ({ auth, input: { body }, req }) => {\n        const { headers } = await ctx.entrywayAuthHeaders(\n          req,\n          auth.credentials.did,\n          com.atproto.server.revokeAppPassword.$lxm,\n        )\n\n        await entrywayClient.xrpc(com.atproto.server.revokeAppPassword, {\n          headers,\n          body,\n        })\n      },\n    })\n  } else {\n    server.add(com.atproto.server.revokeAppPassword, {\n      auth,\n      handler: async ({ auth, input: { body } }) => {\n        const requester = auth.credentials.did\n\n        await ctx.accountManager.revokeAppPassword(requester, body.name)\n      },\n    })\n  }\n}\n"]}
+{"version":3,"file":"revokeAppPassword.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/revokeAppPassword.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAU,MAAM,sBAAsB,CAAA;AAE7D,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAA;IAE9B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;QAC1C,SAAS,EAAE,GAAG,EAAE;YACd,MAAM,IAAI,cAAc,CACtB,uDAAuD,CACxD,CAAA;QACH,CAAC;KACF,CAAC,CAAA;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAC/C,IAAI;YACJ,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAChD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAC/C,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC1C,CAAA;gBAED,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;oBAC9D,OAAO;oBACP,IAAI;iBACL,CAAC,CAAA;YACJ,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAC/C,IAAI;YACJ,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;gBAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;gBAEtC,MAAM,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YAClE,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { ForbiddenError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  const { entrywayClient } = ctx\n\n  const auth = ctx.authVerifier.authorization({\n    authorize: () => {\n      throw new ForbiddenError(\n        'OAuth credentials are not supported for this endpoint',\n      )\n    },\n  })\n\n  if (entrywayClient) {\n    server.add(com.atproto.server.revokeAppPassword, {\n      auth,\n      handler: async ({ auth, input: { body }, req }) => {\n        const { headers } = await ctx.entrywayAuthHeaders(\n          req,\n          auth.credentials.did,\n          com.atproto.server.revokeAppPassword.$lxm,\n        )\n\n        await entrywayClient.xrpc(com.atproto.server.revokeAppPassword, {\n          headers,\n          body,\n        })\n      },\n    })\n  } else {\n    server.add(com.atproto.server.revokeAppPassword, {\n      auth,\n      handler: async ({ auth, input: { body } }) => {\n        const requester = auth.credentials.did\n\n        await ctx.accountManager.revokeAppPassword(requester, body.name)\n      },\n    })\n  }\n}\n"]}

package/dist/api/com/atproto/server/updateEmail.d.ts

@@ -1,4 +1,4 @@
 import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context';
+import { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=updateEmail.d.ts.map

package/dist/api/com/atproto/server/updateEmail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updateEmail.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/updateEmail.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,MAAM,EACP,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAqEvD"}
+{"version":3,"file":"updateEmail.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/updateEmail.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,MAAM,EACP,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAqEvD"}

package/dist/api/com/atproto/server/updateEmail.js

@@ -1,36 +1,33 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = default_1;
-const address_1 = require("@hapi/address");
-const disposable_email_domains_js_1 = require("disposable-email-domains-js");
-const xrpc_server_1 = require("@atproto/xrpc-server");
-const account_1 = require("../../../../account-manager/helpers/account");
-const auth_scope_1 = require("../../../../auth-scope");
-const index_js_1 = require("../../../../lexicons/index.js");
-function default_1(server, ctx) {
-    server.add(index_js_1.com.atproto.server.updateEmail, {
+import { isEmailValid } from '@hapi/address';
+import { isDisposableEmail } from 'disposable-email-domains-js';
+import { ForbiddenError, InvalidRequestError, } from '@atproto/xrpc-server';
+import { UserAlreadyExistsError } from '../../../../account-manager/helpers/account.js';
+import { ACCESS_FULL } from '../../../../auth-scope.js';
+import { com } from '../../../../lexicons/index.js';
+export default function (server, ctx) {
+    server.add(com.atproto.server.updateEmail, {
         auth: ctx.authVerifier.authorization({
             checkTakedown: true,
-            scopes: auth_scope_1.ACCESS_FULL,
+            scopes: ACCESS_FULL,
             authorize: () => {
-                throw new xrpc_server_1.ForbiddenError('OAuth credentials are not supported for this endpoint');
+                throw new ForbiddenError('OAuth credentials are not supported for this endpoint');
             },
         }),
         handler: async ({ auth, input: { body }, req }) => {
             const did = auth.credentials.did;
             const { token, email } = body;
-            if (!(0, address_1.isEmailValid)(email) || (0, disposable_email_domains_js_1.isDisposableEmail)(email)) {
-                throw new xrpc_server_1.InvalidRequestError('This email address is not supported, please use a different email.');
+            if (!isEmailValid(email) || isDisposableEmail(email)) {
+                throw new InvalidRequestError('This email address is not supported, please use a different email.');
             }
             const account = await ctx.accountManager.getAccount(did, {
                 includeDeactivated: true,
             });
             if (!account) {
-                throw new xrpc_server_1.InvalidRequestError('account not found');
+                throw new InvalidRequestError('account not found');
             }
             if (ctx.entrywayClient) {
-                const { headers } = await ctx.entrywayAuthHeaders(req, auth.credentials.did, index_js_1.com.atproto.server.updateEmail.$lxm);
-                await ctx.entrywayClient.xrpc(index_js_1.com.atproto.server.updateEmail, {
+                const { headers } = await ctx.entrywayAuthHeaders(req, auth.credentials.did, com.atproto.server.updateEmail.$lxm);
+                await ctx.entrywayClient.xrpc(com.atproto.server.updateEmail, {
                     headers,
                     body,
                 });
@@ -39,7 +36,7 @@ function default_1(server, ctx) {
             // require valid token if account email is confirmed
             if (account.emailConfirmedAt) {
                 if (!token) {
-                    throw new xrpc_server_1.InvalidRequestError('confirmation token required', 'TokenRequired');
+                    throw new InvalidRequestError('confirmation token required', 'TokenRequired');
                 }
                 await ctx.accountManager.assertValidEmailToken(did, 'update_email', token);
             }
@@ -47,8 +44,8 @@ function default_1(server, ctx) {
                 await ctx.accountManager.updateEmail({ did, email });
             }
             catch (err) {
-                if (err instanceof account_1.UserAlreadyExistsError) {
-                    throw new xrpc_server_1.InvalidRequestError('This email address is already in use, please use a different email.');
+                if (err instanceof UserAlreadyExistsError) {
+                    throw new InvalidRequestError('This email address is already in use, please use a different email.');
                 }
                 else {
                     throw err;

package/dist/api/com/atproto/server/updateEmail.js.map

@@ -1 +1 @@
-{"version":3,"file":"updateEmail.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/updateEmail.ts"],"names":[],"mappings":";;AAYA,4BAqEC;AAjFD,2CAA4C;AAC5C,6EAA+D;AAC/D,sDAI6B;AAC7B,yEAAoF;AACpF,uDAAoD;AAEpD,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;QACzC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,wBAAW;YACnB,SAAS,EAAE,GAAG,EAAE;gBACd,MAAM,IAAI,4BAAc,CACtB,uDAAuD,CACxD,CAAA;YACH,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAChC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;YAC7B,IAAI,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,IAAI,IAAA,+CAAiB,EAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,iCAAmB,CAC3B,oEAAoE,CACrE,CAAA;YACH,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE;gBACvD,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAA;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,iCAAmB,CAAC,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;gBACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAC/C,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CACpC,CAAA;gBAED,MAAM,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBAC5D,OAAO;oBACP,IAAI;iBACL,CAAC,CAAA;gBAEF,OAAM;YACR,CAAC;YAED,oDAAoD;YACpD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,iCAAmB,CAC3B,6BAA6B,EAC7B,eAAe,CAChB,CAAA;gBACH,CAAC;gBACD,MAAM,GAAG,CAAC,cAAc,CAAC,qBAAqB,CAC5C,GAAG,EACH,cAAc,EACd,KAAK,CACN,CAAA;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,gCAAsB,EAAE,CAAC;oBAC1C,MAAM,IAAI,iCAAmB,CAC3B,qEAAqE,CACtE,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAA;gBACX,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { isEmailValid } from '@hapi/address'\nimport { isDisposableEmail } from 'disposable-email-domains-js'\nimport {\n  ForbiddenError,\n  InvalidRequestError,\n  Server,\n} from '@atproto/xrpc-server'\nimport { UserAlreadyExistsError } from '../../../../account-manager/helpers/account'\nimport { ACCESS_FULL } from '../../../../auth-scope'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.server.updateEmail, {\n    auth: ctx.authVerifier.authorization({\n      checkTakedown: true,\n      scopes: ACCESS_FULL,\n      authorize: () => {\n        throw new ForbiddenError(\n          'OAuth credentials are not supported for this endpoint',\n        )\n      },\n    }),\n    handler: async ({ auth, input: { body }, req }) => {\n      const did = auth.credentials.did\n      const { token, email } = body\n      if (!isEmailValid(email) || isDisposableEmail(email)) {\n        throw new InvalidRequestError(\n          'This email address is not supported, please use a different email.',\n        )\n      }\n      const account = await ctx.accountManager.getAccount(did, {\n        includeDeactivated: true,\n      })\n      if (!account) {\n        throw new InvalidRequestError('account not found')\n      }\n\n      if (ctx.entrywayClient) {\n        const { headers } = await ctx.entrywayAuthHeaders(\n          req,\n          auth.credentials.did,\n          com.atproto.server.updateEmail.$lxm,\n        )\n\n        await ctx.entrywayClient.xrpc(com.atproto.server.updateEmail, {\n          headers,\n          body,\n        })\n\n        return\n      }\n\n      // require valid token if account email is confirmed\n      if (account.emailConfirmedAt) {\n        if (!token) {\n          throw new InvalidRequestError(\n            'confirmation token required',\n            'TokenRequired',\n          )\n        }\n        await ctx.accountManager.assertValidEmailToken(\n          did,\n          'update_email',\n          token,\n        )\n      }\n\n      try {\n        await ctx.accountManager.updateEmail({ did, email })\n      } catch (err) {\n        if (err instanceof UserAlreadyExistsError) {\n          throw new InvalidRequestError(\n            'This email address is already in use, please use a different email.',\n          )\n        } else {\n          throw err\n        }\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"updateEmail.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/updateEmail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EACL,cAAc,EACd,mBAAmB,GAEpB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAA;AACvF,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAEvD,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;QACzC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,GAAG,EAAE;gBACd,MAAM,IAAI,cAAc,CACtB,uDAAuD,CACxD,CAAA;YACH,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAA;YAChC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;YAC7B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,mBAAmB,CAC3B,oEAAoE,CACrE,CAAA;YACH,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE;gBACvD,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAA;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;gBACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAC/C,GAAG,EACH,IAAI,CAAC,WAAW,CAAC,GAAG,EACpB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CACpC,CAAA;gBAED,MAAM,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBAC5D,OAAO;oBACP,IAAI;iBACL,CAAC,CAAA;gBAEF,OAAM;YACR,CAAC;YAED,oDAAoD;YACpD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,mBAAmB,CAC3B,6BAA6B,EAC7B,eAAe,CAChB,CAAA;gBACH,CAAC;gBACD,MAAM,GAAG,CAAC,cAAc,CAAC,qBAAqB,CAC5C,GAAG,EACH,cAAc,EACd,KAAK,CACN,CAAA;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,sBAAsB,EAAE,CAAC;oBAC1C,MAAM,IAAI,mBAAmB,CAC3B,qEAAqE,CACtE,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAA;gBACX,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { isEmailValid } from '@hapi/address'\nimport { isDisposableEmail } from 'disposable-email-domains-js'\nimport {\n  ForbiddenError,\n  InvalidRequestError,\n  Server,\n} from '@atproto/xrpc-server'\nimport { UserAlreadyExistsError } from '../../../../account-manager/helpers/account.js'\nimport { ACCESS_FULL } from '../../../../auth-scope.js'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.server.updateEmail, {\n    auth: ctx.authVerifier.authorization({\n      checkTakedown: true,\n      scopes: ACCESS_FULL,\n      authorize: () => {\n        throw new ForbiddenError(\n          'OAuth credentials are not supported for this endpoint',\n        )\n      },\n    }),\n    handler: async ({ auth, input: { body }, req }) => {\n      const did = auth.credentials.did\n      const { token, email } = body\n      if (!isEmailValid(email) || isDisposableEmail(email)) {\n        throw new InvalidRequestError(\n          'This email address is not supported, please use a different email.',\n        )\n      }\n      const account = await ctx.accountManager.getAccount(did, {\n        includeDeactivated: true,\n      })\n      if (!account) {\n        throw new InvalidRequestError('account not found')\n      }\n\n      if (ctx.entrywayClient) {\n        const { headers } = await ctx.entrywayAuthHeaders(\n          req,\n          auth.credentials.did,\n          com.atproto.server.updateEmail.$lxm,\n        )\n\n        await ctx.entrywayClient.xrpc(com.atproto.server.updateEmail, {\n          headers,\n          body,\n        })\n\n        return\n      }\n\n      // require valid token if account email is confirmed\n      if (account.emailConfirmedAt) {\n        if (!token) {\n          throw new InvalidRequestError(\n            'confirmation token required',\n            'TokenRequired',\n          )\n        }\n        await ctx.accountManager.assertValidEmailToken(\n          did,\n          'update_email',\n          token,\n        )\n      }\n\n      try {\n        await ctx.accountManager.updateEmail({ did, email })\n      } catch (err) {\n        if (err instanceof UserAlreadyExistsError) {\n          throw new InvalidRequestError(\n            'This email address is already in use, please use a different email.',\n          )\n        } else {\n          throw err\n        }\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/server/util.d.ts

@@ -1,6 +1,6 @@
 import { DidDocument } from '@atproto/identity';
-import { ServerConfig } from '../../../../config';
-import { AppContext } from '../../../../context';
+import { ServerConfig } from '../../../../config/index.js';
+import { AppContext } from '../../../../context.js';
 export declare const genInvCode: (cfg: ServerConfig) => string;
 export declare const genInvCodes: (cfg: ServerConfig, count: number) => string[];
 export declare const getRandomToken: () => string;

package/dist/api/com/atproto/server/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/util.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAOhD,eAAO,MAAM,UAAU,GAAI,KAAK,YAAY,KAAG,MAE9C,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,KAAK,YAAY,EAAE,OAAO,MAAM,KAAG,MAAM,EAMpE,CAAA;AAGD,eAAO,MAAM,cAAc,cAG1B,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,KAAK,UAAU,EACf,KAAK,MAAM,EACX,eAAe,OAAO,KACrB,OAAO,CAAC,WAAW,GAAG,SAAS,CAOjC,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC3B,KAAK,UAAU,EACf,KAAK,MAAM,EACX,eAAe,OAAO,KACrB,OAAO,CAAC,WAAW,GAAG,SAAS,CAGjC,CAAA;AAED,eAAO,MAAM,uBAAuB,GAClC,KAAK,UAAU,EACf,KAAK,MAAM,KACV,OAAO,CAAC,OAAO,CAOjB,CAAA;AAED,eAAO,MAAM,gCAAgC,GAC3C,KAAK,UAAU,EACf,KAAK,MAAM,kBAmBZ,CAAA"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/util.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAOnD,eAAO,MAAM,UAAU,GAAI,KAAK,YAAY,KAAG,MAE9C,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,KAAK,YAAY,EAAE,OAAO,MAAM,KAAG,MAAM,EAMpE,CAAA;AAGD,eAAO,MAAM,cAAc,cAG1B,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,KAAK,UAAU,EACf,KAAK,MAAM,EACX,eAAe,OAAO,KACrB,OAAO,CAAC,WAAW,GAAG,SAAS,CAOjC,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC3B,KAAK,UAAU,EACf,KAAK,MAAM,EACX,eAAe,OAAO,KACrB,OAAO,CAAC,WAAW,GAAG,SAAS,CAGjC,CAAA;AAED,eAAO,MAAM,uBAAuB,GAClC,KAAK,UAAU,EACf,KAAK,MAAM,KACV,OAAO,CAAC,OAAO,CAOjB,CAAA;AAED,eAAO,MAAM,gCAAgC,GAC3C,KAAK,UAAU,EACf,KAAK,MAAM,kBAmBZ,CAAA"}

package/dist/api/com/atproto/server/util.js

@@ -1,92 +1,50 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertValidDidDocumentForService = exports.isValidDidDocForService = exports.didDocForSession = exports.safeResolveDidDoc = exports.getRandomToken = exports.genInvCodes = exports.genInvCode = void 0;
-const common_1 = require("@atproto/common");
-const crypto = __importStar(require("@atproto/crypto"));
-const xrpc_server_1 = require("@atproto/xrpc-server");
-const logger_1 = require("../../../../logger");
+import { getPdsEndpoint, getSigningDidKey } from '@atproto/common';
+import * as crypto from '@atproto/crypto';
+import { InvalidRequestError } from '@atproto/xrpc-server';
+import { httpLogger } from '../../../../logger.js';
 // generate an invite code preceded by the hostname
 // with '.'s replaced by '-'s so it is not mistakable for a link
 // ex: bsky-app-abc23-567xy
 // regex: bsky-app-[a-z2-7]{5}-[a-z2-7]{5}
-const genInvCode = (cfg) => {
-    return cfg.service.hostname.replaceAll('.', '-') + '-' + (0, exports.getRandomToken)();
+export const genInvCode = (cfg) => {
+    return cfg.service.hostname.replaceAll('.', '-') + '-' + getRandomToken();
 };
-exports.genInvCode = genInvCode;
-const genInvCodes = (cfg, count) => {
+export const genInvCodes = (cfg, count) => {
     const codes = [];
     for (let i = 0; i < count; i++) {
-        codes.push((0, exports.genInvCode)(cfg));
+        codes.push(genInvCode(cfg));
     }
     return codes;
 };
-exports.genInvCodes = genInvCodes;
 // Formatted xxxxx-xxxxx where digits are in base32
-const getRandomToken = () => {
+export const getRandomToken = () => {
     const token = crypto.randomStr(8, 'base32').slice(0, 10);
     return token.slice(0, 5) + '-' + token.slice(5, 10);
 };
-exports.getRandomToken = getRandomToken;
-const safeResolveDidDoc = async (ctx, did, forceRefresh) => {
+export const safeResolveDidDoc = async (ctx, did, forceRefresh) => {
     try {
         const didDoc = await ctx.idResolver.did.resolve(did, forceRefresh);
         return didDoc ?? undefined;
     }
     catch (err) {
-        logger_1.httpLogger.warn({ err, did }, 'failed to resolve did doc');
+        httpLogger.warn({ err, did }, 'failed to resolve did doc');
     }
 };
-exports.safeResolveDidDoc = safeResolveDidDoc;
-const didDocForSession = async (ctx, did, forceRefresh) => {
+export const didDocForSession = async (ctx, did, forceRefresh) => {
     if (!ctx.cfg.identity.enableDidDocWithSession)
         return;
-    return (0, exports.safeResolveDidDoc)(ctx, did, forceRefresh);
+    return safeResolveDidDoc(ctx, did, forceRefresh);
 };
-exports.didDocForSession = didDocForSession;
-const isValidDidDocForService = async (ctx, did) => {
+export const isValidDidDocForService = async (ctx, did) => {
     try {
-        await (0, exports.assertValidDidDocumentForService)(ctx, did);
+        await assertValidDidDocumentForService(ctx, did);
         return true;
     }
     catch {
         return false;
     }
 };
-exports.isValidDidDocForService = isValidDidDocForService;
-const assertValidDidDocumentForService = async (ctx, did) => {
+export const assertValidDidDocumentForService = async (ctx, did) => {
     if (did.startsWith('did:plc')) {
         const resolved = await ctx.plcClient.getDocumentData(did);
         await assertValidDocContents(ctx, did, {
@@ -98,27 +56,26 @@ const assertValidDidDocumentForService = async (ctx, did) => {
     else {
         const resolved = await ctx.idResolver.did.resolve(did, true);
         if (!resolved) {
-            throw new xrpc_server_1.InvalidRequestError('Could not resolve DID');
+            throw new InvalidRequestError('Could not resolve DID');
         }
         await assertValidDocContents(ctx, did, {
-            pdsEndpoint: (0, common_1.getPdsEndpoint)(resolved),
-            signingKey: (0, common_1.getSigningDidKey)(resolved),
+            pdsEndpoint: getPdsEndpoint(resolved),
+            signingKey: getSigningDidKey(resolved),
         });
     }
 };
-exports.assertValidDidDocumentForService = assertValidDidDocumentForService;
 const assertValidDocContents = async (ctx, did, contents) => {
     const { signingKey, pdsEndpoint, rotationKeys } = contents;
     const plcRotationKey = ctx.cfg.entryway?.plcRotationKey ?? ctx.plcRotationKey.did();
     if (rotationKeys !== undefined && !rotationKeys.includes(plcRotationKey)) {
-        throw new xrpc_server_1.InvalidRequestError('Server rotation key not included in PLC DID data');
+        throw new InvalidRequestError('Server rotation key not included in PLC DID data');
     }
     if (!pdsEndpoint || pdsEndpoint !== ctx.cfg.service.publicUrl) {
-        throw new xrpc_server_1.InvalidRequestError('DID document atproto_pds service endpoint does not match PDS public url');
+        throw new InvalidRequestError('DID document atproto_pds service endpoint does not match PDS public url');
     }
     const keypair = await ctx.actorStore.keypair(did);
     if (!signingKey || signingKey !== keypair.did()) {
-        throw new xrpc_server_1.InvalidRequestError('DID document verification method does not match expected signing key');
+        throw new InvalidRequestError('DID document verification method does not match expected signing key');
     }
 };
 //# sourceMappingURL=util.js.map

package/dist/api/com/atproto/server/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/util.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAAkE;AAClE,wDAAyC;AAEzC,sDAA0D;AAG1D,+CAA+C;AAE/C,mDAAmD;AACnD,gEAAgE;AAChE,2BAA2B;AAC3B,0CAA0C;AACnC,MAAM,UAAU,GAAG,CAAC,GAAiB,EAAU,EAAE;IACtD,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,GAAG,IAAA,sBAAc,GAAE,CAAA;AAC3E,CAAC,CAAA;AAFY,QAAA,UAAU,cAEtB;AAEM,MAAM,WAAW,GAAG,CAAC,GAAiB,EAAE,KAAa,EAAY,EAAE;IACxE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,IAAA,kBAAU,EAAC,GAAG,CAAC,CAAC,CAAA;IAC7B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AANY,QAAA,WAAW,eAMvB;AAED,mDAAmD;AAC5C,MAAM,cAAc,GAAG,GAAG,EAAE;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACxD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACrD,CAAC,CAAA;AAHY,QAAA,cAAc,kBAG1B;AAEM,MAAM,iBAAiB,GAAG,KAAK,EACpC,GAAe,EACf,GAAW,EACX,YAAsB,EACY,EAAE;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;QAClE,OAAO,MAAM,IAAI,SAAS,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC,CAAA;AAXY,QAAA,iBAAiB,qBAW7B;AAEM,MAAM,gBAAgB,GAAG,KAAK,EACnC,GAAe,EACf,GAAW,EACX,YAAsB,EACY,EAAE;IACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAAuB;QAAE,OAAM;IACrD,OAAO,IAAA,yBAAiB,EAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;AAClD,CAAC,CAAA;AAPY,QAAA,gBAAgB,oBAO5B;AAEM,MAAM,uBAAuB,GAAG,KAAK,EAC1C,GAAe,EACf,GAAW,EACO,EAAE;IACpB,IAAI,CAAC;QACH,MAAM,IAAA,wCAAgC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAChD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAVY,QAAA,uBAAuB,2BAUnC;AAEM,MAAM,gCAAgC,GAAG,KAAK,EACnD,GAAe,EACf,GAAW,EACX,EAAE;IACF,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QACzD,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;YACrC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ;YACvD,UAAU,EAAE,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAAC;YACnD,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,iCAAmB,CAAC,uBAAuB,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;YACrC,WAAW,EAAE,IAAA,uBAAc,EAAC,QAAQ,CAAC;YACrC,UAAU,EAAE,IAAA,yBAAgB,EAAC,QAAQ,CAAC;SACvC,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAA;AArBY,QAAA,gCAAgC,oCAqB5C;AAED,MAAM,sBAAsB,GAAG,KAAK,EAClC,GAAe,EACf,GAAW,EACX,QAIC,EACD,EAAE;IACF,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAA;IAE1D,MAAM,cAAc,GAClB,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,EAAE,CAAA;IAC9D,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,iCAAmB,CAC3B,kDAAkD,CACnD,CAAA;IACH,CAAC;IAED,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC9D,MAAM,IAAI,iCAAmB,CAC3B,yEAAyE,CAC1E,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjD,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,iCAAmB,CAC3B,sEAAsE,CACvE,CAAA;IACH,CAAC;AACH,CAAC,CAAA","sourcesContent":["import { getPdsEndpoint, getSigningDidKey } from '@atproto/common'\nimport * as crypto from '@atproto/crypto'\nimport { DidDocument } from '@atproto/identity'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { ServerConfig } from '../../../../config'\nimport { AppContext } from '../../../../context'\nimport { httpLogger } from '../../../../logger'\n\n// generate an invite code preceded by the hostname\n// with '.'s replaced by '-'s so it is not mistakable for a link\n// ex: bsky-app-abc23-567xy\n// regex: bsky-app-[a-z2-7]{5}-[a-z2-7]{5}\nexport const genInvCode = (cfg: ServerConfig): string => {\n  return cfg.service.hostname.replaceAll('.', '-') + '-' + getRandomToken()\n}\n\nexport const genInvCodes = (cfg: ServerConfig, count: number): string[] => {\n  const codes: string[] = []\n  for (let i = 0; i < count; i++) {\n    codes.push(genInvCode(cfg))\n  }\n  return codes\n}\n\n// Formatted xxxxx-xxxxx where digits are in base32\nexport const getRandomToken = () => {\n  const token = crypto.randomStr(8, 'base32').slice(0, 10)\n  return token.slice(0, 5) + '-' + token.slice(5, 10)\n}\n\nexport const safeResolveDidDoc = async (\n  ctx: AppContext,\n  did: string,\n  forceRefresh?: boolean,\n): Promise<DidDocument | undefined> => {\n  try {\n    const didDoc = await ctx.idResolver.did.resolve(did, forceRefresh)\n    return didDoc ?? undefined\n  } catch (err) {\n    httpLogger.warn({ err, did }, 'failed to resolve did doc')\n  }\n}\n\nexport const didDocForSession = async (\n  ctx: AppContext,\n  did: string,\n  forceRefresh?: boolean,\n): Promise<DidDocument | undefined> => {\n  if (!ctx.cfg.identity.enableDidDocWithSession) return\n  return safeResolveDidDoc(ctx, did, forceRefresh)\n}\n\nexport const isValidDidDocForService = async (\n  ctx: AppContext,\n  did: string,\n): Promise<boolean> => {\n  try {\n    await assertValidDidDocumentForService(ctx, did)\n    return true\n  } catch {\n    return false\n  }\n}\n\nexport const assertValidDidDocumentForService = async (\n  ctx: AppContext,\n  did: string,\n) => {\n  if (did.startsWith('did:plc')) {\n    const resolved = await ctx.plcClient.getDocumentData(did)\n    await assertValidDocContents(ctx, did, {\n      pdsEndpoint: resolved.services['atproto_pds']?.endpoint,\n      signingKey: resolved.verificationMethods['atproto'],\n      rotationKeys: resolved.rotationKeys,\n    })\n  } else {\n    const resolved = await ctx.idResolver.did.resolve(did, true)\n    if (!resolved) {\n      throw new InvalidRequestError('Could not resolve DID')\n    }\n    await assertValidDocContents(ctx, did, {\n      pdsEndpoint: getPdsEndpoint(resolved),\n      signingKey: getSigningDidKey(resolved),\n    })\n  }\n}\n\nconst assertValidDocContents = async (\n  ctx: AppContext,\n  did: string,\n  contents: {\n    signingKey?: string\n    pdsEndpoint?: string\n    rotationKeys?: string[]\n  },\n) => {\n  const { signingKey, pdsEndpoint, rotationKeys } = contents\n\n  const plcRotationKey =\n    ctx.cfg.entryway?.plcRotationKey ?? ctx.plcRotationKey.did()\n  if (rotationKeys !== undefined && !rotationKeys.includes(plcRotationKey)) {\n    throw new InvalidRequestError(\n      'Server rotation key not included in PLC DID data',\n    )\n  }\n\n  if (!pdsEndpoint || pdsEndpoint !== ctx.cfg.service.publicUrl) {\n    throw new InvalidRequestError(\n      'DID document atproto_pds service endpoint does not match PDS public url',\n    )\n  }\n\n  const keypair = await ctx.actorStore.keypair(did)\n  if (!signingKey || signingKey !== keypair.did()) {\n    throw new InvalidRequestError(\n      'DID document verification method does not match expected signing key',\n    )\n  }\n}\n"]}
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/server/util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClE,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAG1D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAElD,mDAAmD;AACnD,gEAAgE;AAChE,2BAA2B;AAC3B,0CAA0C;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAiB,EAAU,EAAE;IACtD,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,GAAG,cAAc,EAAE,CAAA;AAC3E,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAiB,EAAE,KAAa,EAAY,EAAE;IACxE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;IAC7B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,EAAE;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACxD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACrD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,GAAe,EACf,GAAW,EACX,YAAsB,EACY,EAAE;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;QAClE,OAAO,MAAM,IAAI,SAAS,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,GAAe,EACf,GAAW,EACX,YAAsB,EACY,EAAE;IACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAAuB;QAAE,OAAM;IACrD,OAAO,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;AAClD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAC1C,GAAe,EACf,GAAW,EACO,EAAE;IACpB,IAAI,CAAC;QACH,MAAM,gCAAgC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAChD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,EACnD,GAAe,EACf,GAAW,EACX,EAAE;IACF,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QACzD,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;YACrC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ;YACvD,UAAU,EAAE,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAAC;YACnD,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;YACrC,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC;YACrC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC;SACvC,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAA;AAED,MAAM,sBAAsB,GAAG,KAAK,EAClC,GAAe,EACf,GAAW,EACX,QAIC,EACD,EAAE;IACF,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAA;IAE1D,MAAM,cAAc,GAClB,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,EAAE,CAAA;IAC9D,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,mBAAmB,CAC3B,kDAAkD,CACnD,CAAA;IACH,CAAC;IAED,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC9D,MAAM,IAAI,mBAAmB,CAC3B,yEAAyE,CAC1E,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjD,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,mBAAmB,CAC3B,sEAAsE,CACvE,CAAA;IACH,CAAC;AACH,CAAC,CAAA","sourcesContent":["import { getPdsEndpoint, getSigningDidKey } from '@atproto/common'\nimport * as crypto from '@atproto/crypto'\nimport { DidDocument } from '@atproto/identity'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { ServerConfig } from '../../../../config/index.js'\nimport { AppContext } from '../../../../context.js'\nimport { httpLogger } from '../../../../logger.js'\n\n// generate an invite code preceded by the hostname\n// with '.'s replaced by '-'s so it is not mistakable for a link\n// ex: bsky-app-abc23-567xy\n// regex: bsky-app-[a-z2-7]{5}-[a-z2-7]{5}\nexport const genInvCode = (cfg: ServerConfig): string => {\n  return cfg.service.hostname.replaceAll('.', '-') + '-' + getRandomToken()\n}\n\nexport const genInvCodes = (cfg: ServerConfig, count: number): string[] => {\n  const codes: string[] = []\n  for (let i = 0; i < count; i++) {\n    codes.push(genInvCode(cfg))\n  }\n  return codes\n}\n\n// Formatted xxxxx-xxxxx where digits are in base32\nexport const getRandomToken = () => {\n  const token = crypto.randomStr(8, 'base32').slice(0, 10)\n  return token.slice(0, 5) + '-' + token.slice(5, 10)\n}\n\nexport const safeResolveDidDoc = async (\n  ctx: AppContext,\n  did: string,\n  forceRefresh?: boolean,\n): Promise<DidDocument | undefined> => {\n  try {\n    const didDoc = await ctx.idResolver.did.resolve(did, forceRefresh)\n    return didDoc ?? undefined\n  } catch (err) {\n    httpLogger.warn({ err, did }, 'failed to resolve did doc')\n  }\n}\n\nexport const didDocForSession = async (\n  ctx: AppContext,\n  did: string,\n  forceRefresh?: boolean,\n): Promise<DidDocument | undefined> => {\n  if (!ctx.cfg.identity.enableDidDocWithSession) return\n  return safeResolveDidDoc(ctx, did, forceRefresh)\n}\n\nexport const isValidDidDocForService = async (\n  ctx: AppContext,\n  did: string,\n): Promise<boolean> => {\n  try {\n    await assertValidDidDocumentForService(ctx, did)\n    return true\n  } catch {\n    return false\n  }\n}\n\nexport const assertValidDidDocumentForService = async (\n  ctx: AppContext,\n  did: string,\n) => {\n  if (did.startsWith('did:plc')) {\n    const resolved = await ctx.plcClient.getDocumentData(did)\n    await assertValidDocContents(ctx, did, {\n      pdsEndpoint: resolved.services['atproto_pds']?.endpoint,\n      signingKey: resolved.verificationMethods['atproto'],\n      rotationKeys: resolved.rotationKeys,\n    })\n  } else {\n    const resolved = await ctx.idResolver.did.resolve(did, true)\n    if (!resolved) {\n      throw new InvalidRequestError('Could not resolve DID')\n    }\n    await assertValidDocContents(ctx, did, {\n      pdsEndpoint: getPdsEndpoint(resolved),\n      signingKey: getSigningDidKey(resolved),\n    })\n  }\n}\n\nconst assertValidDocContents = async (\n  ctx: AppContext,\n  did: string,\n  contents: {\n    signingKey?: string\n    pdsEndpoint?: string\n    rotationKeys?: string[]\n  },\n) => {\n  const { signingKey, pdsEndpoint, rotationKeys } = contents\n\n  const plcRotationKey =\n    ctx.cfg.entryway?.plcRotationKey ?? ctx.plcRotationKey.did()\n  if (rotationKeys !== undefined && !rotationKeys.includes(plcRotationKey)) {\n    throw new InvalidRequestError(\n      'Server rotation key not included in PLC DID data',\n    )\n  }\n\n  if (!pdsEndpoint || pdsEndpoint !== ctx.cfg.service.publicUrl) {\n    throw new InvalidRequestError(\n      'DID document atproto_pds service endpoint does not match PDS public url',\n    )\n  }\n\n  const keypair = await ctx.actorStore.keypair(did)\n  if (!signingKey || signingKey !== keypair.did()) {\n    throw new InvalidRequestError(\n      'DID document verification method does not match expected signing key',\n    )\n  }\n}\n"]}

package/dist/api/com/atproto/sync/deprecated/getCheckout.d.ts

@@ -1,4 +1,4 @@
 import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../../context';
+import { AppContext } from '../../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getCheckout.d.ts.map

package/dist/api/com/atproto/sync/deprecated/getCheckout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getCheckout.d.ts","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getCheckout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAKnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAmBvD"}
+{"version":3,"file":"getCheckout.d.ts","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getCheckout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAKtD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAmBvD"}

package/dist/api/com/atproto/sync/deprecated/getCheckout.js

@@ -1,12 +1,9 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = default_1;
-const auth_verifier_1 = require("../../../../../auth-verifier");
-const index_js_1 = require("../../../../../lexicons/index.js");
-const getRepo_1 = require("../getRepo");
-const util_1 = require("../util");
-function default_1(server, ctx) {
-    server.add(index_js_1.com.atproto.sync.getCheckout, {
+import { isUserOrAdmin } from '../../../../../auth-verifier.js';
+import { com } from '../../../../../lexicons/index.js';
+import { getCarStream } from '../getRepo.js';
+import { assertRepoAvailability } from '../util.js';
+export default function (server, ctx) {
+    server.add(com.atproto.sync.getCheckout, {
         auth: ctx.authVerifier.authorizationOrAdminTokenOptional({
             authorize: () => {
                 // always allow
@@ -14,8 +11,8 @@ function default_1(server, ctx) {
         }),
         handler: async ({ params, auth }) => {
             const { did } = params;
-            await (0, util_1.assertRepoAvailability)(ctx, did, (0, auth_verifier_1.isUserOrAdmin)(auth, did));
-            const carStream = await (0, getRepo_1.getCarStream)(ctx, did);
+            await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did));
+            const carStream = await getCarStream(ctx, did);
             return {
                 encoding: 'application/vnd.ipld.car',
                 body: carStream,

package/dist/api/com/atproto/sync/deprecated/getCheckout.js.map

@@ -1 +1 @@
-{"version":3,"file":"getCheckout.js","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getCheckout.ts"],"names":[],"mappings":";;AAOA,4BAmBC;AAzBD,gEAA4D;AAE5D,+DAAsD;AACtD,wCAAyC;AACzC,kCAAgD;AAEhD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;QACvC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,IAAA,6BAAsB,EAAC,GAAG,EAAE,GAAG,EAAE,IAAA,6BAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,SAAS,GAAG,MAAM,IAAA,sBAAY,EAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAE9C,OAAO;gBACL,QAAQ,EAAE,0BAAmC;gBAC7C,IAAI,EAAE,SAAS;aAChB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { isUserOrAdmin } from '../../../../../auth-verifier'\nimport { AppContext } from '../../../../../context'\nimport { com } from '../../../../../lexicons/index.js'\nimport { getCarStream } from '../getRepo'\nimport { assertRepoAvailability } from '../util'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.sync.getCheckout, {\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const carStream = await getCarStream(ctx, did)\n\n      return {\n        encoding: 'application/vnd.ipld.car' as const,\n        body: carStream,\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"getCheckout.js","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getCheckout.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,OAAO,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;QACvC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAE9C,OAAO;gBACL,QAAQ,EAAE,0BAAmC;gBAC7C,IAAI,EAAE,SAAS;aAChB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { isUserOrAdmin } from '../../../../../auth-verifier.js'\nimport { AppContext } from '../../../../../context.js'\nimport { com } from '../../../../../lexicons/index.js'\nimport { getCarStream } from '../getRepo.js'\nimport { assertRepoAvailability } from '../util.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.sync.getCheckout, {\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const carStream = await getCarStream(ctx, did)\n\n      return {\n        encoding: 'application/vnd.ipld.car' as const,\n        body: carStream,\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/sync/deprecated/getHead.d.ts

@@ -1,4 +1,4 @@
 import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../../context';
+import { AppContext } from '../../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getHead.d.ts.map

package/dist/api/com/atproto/sync/deprecated/getHead.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getHead.d.ts","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getHead.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAInD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA0BvD"}
+{"version":3,"file":"getHead.d.ts","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getHead.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAItD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA0BvD"}

package/dist/api/com/atproto/sync/deprecated/getHead.js

@@ -1,12 +1,9 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = default_1;
-const xrpc_server_1 = require("@atproto/xrpc-server");
-const auth_verifier_1 = require("../../../../../auth-verifier");
-const index_js_1 = require("../../../../../lexicons/index.js");
-const util_1 = require("../util");
-function default_1(server, ctx) {
-    server.add(index_js_1.com.atproto.sync.getHead, {
+import { InvalidRequestError } from '@atproto/xrpc-server';
+import { isUserOrAdmin } from '../../../../../auth-verifier.js';
+import { com } from '../../../../../lexicons/index.js';
+import { assertRepoAvailability } from '../util.js';
+export default function (server, ctx) {
+    server.add(com.atproto.sync.getHead, {
         auth: ctx.authVerifier.authorizationOrAdminTokenOptional({
             authorize: () => {
                 // always allow
@@ -14,10 +11,10 @@ function default_1(server, ctx) {
         }),
         handler: async ({ params, auth }) => {
             const { did } = params;
-            await (0, util_1.assertRepoAvailability)(ctx, did, (0, auth_verifier_1.isUserOrAdmin)(auth, did));
+            await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did));
             const root = await ctx.actorStore.read(did, (store) => store.repo.storage.getRoot());
             if (root === null) {
-                throw new xrpc_server_1.InvalidRequestError(`Could not find root for DID: ${did}`, 'HeadNotFound');
+                throw new InvalidRequestError(`Could not find root for DID: ${did}`, 'HeadNotFound');
             }
             return {
                 encoding: 'application/json',

package/dist/api/com/atproto/sync/deprecated/getHead.js.map

@@ -1 +1 @@
-{"version":3,"file":"getHead.js","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getHead.ts"],"names":[],"mappings":";;AAMA,4BA0BC;AAhCD,sDAAkE;AAClE,gEAA4D;AAE5D,+DAAsD;AACtD,kCAAgD;AAEhD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE;QACnC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,IAAA,6BAAsB,EAAC,GAAG,EAAE,GAAG,EAAE,IAAA,6BAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CACpD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAC7B,CAAA;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,iCAAmB,CAC3B,gCAAgC,GAAG,EAAE,EACrC,cAAc,CACf,CAAA;YACH,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,kBAA2B;gBACrC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;aAChC,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { isUserOrAdmin } from '../../../../../auth-verifier'\nimport { AppContext } from '../../../../../context'\nimport { com } from '../../../../../lexicons/index.js'\nimport { assertRepoAvailability } from '../util'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.sync.getHead, {\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const root = await ctx.actorStore.read(did, (store) =>\n        store.repo.storage.getRoot(),\n      )\n      if (root === null) {\n        throw new InvalidRequestError(\n          `Could not find root for DID: ${did}`,\n          'HeadNotFound',\n        )\n      }\n      return {\n        encoding: 'application/json' as const,\n        body: { root: root.toString() },\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"getHead.js","sourceRoot":"","sources":["../../../../../../src/api/com/atproto/sync/deprecated/getHead.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAU,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAE/D,OAAO,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAA;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE;QACnC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CACpD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAC7B,CAAA;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,GAAG,EAAE,EACrC,cAAc,CACf,CAAA;YACH,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,kBAA2B;gBACrC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;aAChC,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { isUserOrAdmin } from '../../../../../auth-verifier.js'\nimport { AppContext } from '../../../../../context.js'\nimport { com } from '../../../../../lexicons/index.js'\nimport { assertRepoAvailability } from '../util.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.sync.getHead, {\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const root = await ctx.actorStore.read(did, (store) =>\n        store.repo.storage.getRoot(),\n      )\n      if (root === null) {\n        throw new InvalidRequestError(\n          `Could not find root for DID: ${did}`,\n          'HeadNotFound',\n        )\n      }\n      return {\n        encoding: 'application/json' as const,\n        body: { root: root.toString() },\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/sync/getBlob.d.ts

@@ -1,4 +1,4 @@
 import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context';
+import { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getBlob.d.ts.map

package/dist/api/com/atproto/sync/getBlob.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getBlob.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/getBlob.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAGlE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAmDvD"}
+{"version":3,"file":"getBlob.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/getBlob.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAGlE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAInD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAmDvD"}

package/dist/api/com/atproto/sync/getBlob.js

@@ -1,32 +1,29 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = default_1;
-const lex_data_1 = require("@atproto/lex-data");
-const repo_1 = require("@atproto/repo");
-const xrpc_server_1 = require("@atproto/xrpc-server");
-const auth_scope_1 = require("../../../../auth-scope");
-const auth_verifier_1 = require("../../../../auth-verifier");
-const index_js_1 = require("../../../../lexicons/index.js");
-const util_1 = require("./util");
-function default_1(server, ctx) {
-    server.add(index_js_1.com.atproto.sync.getBlob, {
+import { parseCid } from '@atproto/lex-data';
+import { BlobNotFoundError } from '@atproto/repo';
+import { InvalidRequestError } from '@atproto/xrpc-server';
+import { AuthScope } from '../../../../auth-scope.js';
+import { isUserOrAdmin } from '../../../../auth-verifier.js';
+import { com } from '../../../../lexicons/index.js';
+import { assertRepoAvailability } from './util.js';
+export default function (server, ctx) {
+    server.add(com.atproto.sync.getBlob, {
         auth: ctx.authVerifier.authorizationOrAdminTokenOptional({
-            additional: [auth_scope_1.AuthScope.Takendown],
+            additional: [AuthScope.Takendown],
             authorize: () => {
                 // always allow
             },
         }),
         handler: async ({ params, res, auth }) => {
             const { did } = params;
-            await (0, util_1.assertRepoAvailability)(ctx, did, (0, auth_verifier_1.isUserOrAdmin)(auth, did));
-            const cid = (0, lex_data_1.parseCid)(params.cid);
+            await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did));
+            const cid = parseCid(params.cid);
             const found = await ctx.actorStore.read(params.did, async (store) => {
                 try {
                     return await store.repo.blob.getBlob(cid);
                 }
                 catch (err) {
-                    if (err instanceof repo_1.BlobNotFoundError) {
-                        throw new xrpc_server_1.InvalidRequestError('Blob not found');
+                    if (err instanceof BlobNotFoundError) {
+                        throw new InvalidRequestError('Blob not found');
                     }
                     else {
                         throw err;
@@ -34,7 +31,7 @@ function default_1(server, ctx) {
                 }
             });
             if (!found) {
-                throw new xrpc_server_1.InvalidRequestError('Blob not found');
+                throw new InvalidRequestError('Blob not found');
             }
             res.setHeader('content-length', found.size);
             // Important Security headers

package/dist/api/com/atproto/sync/getBlob.js.map

@@ -1 +1 @@
-{"version":3,"file":"getBlob.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/getBlob.ts"],"names":[],"mappings":";;AASA,4BAmDC;AA5DD,gDAA4C;AAC5C,wCAAiD;AACjD,sDAAkE;AAClE,uDAAkD;AAClD,6DAAyD;AAEzD,4DAAmD;AACnD,iCAA+C;AAE/C,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE;QACnC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,UAAU,EAAE,CAAC,sBAAS,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;YACvC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,IAAA,6BAAsB,EAAC,GAAG,EAAE,GAAG,EAAE,IAAA,6BAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,GAAG,GAAG,IAAA,mBAAQ,EAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAClE,IAAI,CAAC;oBACH,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBAC3C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,wBAAiB,EAAE,CAAC;wBACrC,MAAM,IAAI,iCAAmB,CAAC,gBAAgB,CAAC,CAAA;oBACjD,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAA;oBACX,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAA;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,iCAAmB,CAAC,gBAAgB,CAAC,CAAA;YACjD,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAE3C,6BAA6B;YAE7B,kEAAkE;YAClE,uEAAuE;YACvE,4BAA4B;YAC5B,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;YAElD,oEAAoE;YACpE,oEAAoE;YACpE,yEAAyE;YACzE,qEAAqE;YACrE,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,yBAAyB,GAAG,GAAG,CAAC,CAAA;YAErE,qEAAqE;YACrE,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,6BAA6B,CAAC,CAAA;YAEvE,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAK,0BAAoC;gBACjE,IAAI,EAAE,KAAK,CAAC,MAAM;aACnB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { parseCid } from '@atproto/lex-data'\nimport { BlobNotFoundError } from '@atproto/repo'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AuthScope } from '../../../../auth-scope'\nimport { isUserOrAdmin } from '../../../../auth-verifier'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\nimport { assertRepoAvailability } from './util'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.sync.getBlob, {\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      additional: [AuthScope.Takendown],\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, res, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const cid = parseCid(params.cid)\n      const found = await ctx.actorStore.read(params.did, async (store) => {\n        try {\n          return await store.repo.blob.getBlob(cid)\n        } catch (err) {\n          if (err instanceof BlobNotFoundError) {\n            throw new InvalidRequestError('Blob not found')\n          } else {\n            throw err\n          }\n        }\n      })\n      if (!found) {\n        throw new InvalidRequestError('Blob not found')\n      }\n      res.setHeader('content-length', found.size)\n\n      // Important Security headers\n\n      // This prevents the browser from trying to guess the content type\n      // and potentially loading the blob as executable code, or rendering it\n      // in some other unsafe way.\n      res.setHeader('x-content-type-options', 'nosniff')\n\n      // This forces the browser to download the blob instead of trying to\n      // render it when visiting the URL. This is important to prevent XSS\n      // attacks if the blob happens to be HTML. Even if JS is disabled via the\n      // CSP header below, a blob could still contain malicious HTML links.\n      res.setHeader('content-disposition', `attachment; filename=\"${cid}\"`)\n\n      // This should prevent the browser from executing the blob in any way\n      res.setHeader('content-security-policy', `default-src 'none'; sandbox`)\n\n      return {\n        encoding: found.mimeType || ('application/octet-stream' as const),\n        body: found.stream,\n      }\n    },\n  })\n}\n"]}
+{"version":3,"file":"getBlob.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/getBlob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAU,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAE5D,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAElD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE;QACnC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACvD,UAAU,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,GAAG,EAAE;gBACd,eAAe;YACjB,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;YACvC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;YACtB,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAEhE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAClE,IAAI,CAAC;oBACH,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBAC3C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;wBACrC,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAA;oBACjD,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAA;oBACX,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAA;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAA;YACjD,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAE3C,6BAA6B;YAE7B,kEAAkE;YAClE,uEAAuE;YACvE,4BAA4B;YAC5B,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;YAElD,oEAAoE;YACpE,oEAAoE;YACpE,yEAAyE;YACzE,qEAAqE;YACrE,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,yBAAyB,GAAG,GAAG,CAAC,CAAA;YAErE,qEAAqE;YACrE,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,6BAA6B,CAAC,CAAA;YAEvE,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAK,0BAAoC;gBACjE,IAAI,EAAE,KAAK,CAAC,MAAM;aACnB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { parseCid } from '@atproto/lex-data'\nimport { BlobNotFoundError } from '@atproto/repo'\nimport { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AuthScope } from '../../../../auth-scope.js'\nimport { isUserOrAdmin } from '../../../../auth-verifier.js'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\nimport { assertRepoAvailability } from './util.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.sync.getBlob, {\n    auth: ctx.authVerifier.authorizationOrAdminTokenOptional({\n      additional: [AuthScope.Takendown],\n      authorize: () => {\n        // always allow\n      },\n    }),\n    handler: async ({ params, res, auth }) => {\n      const { did } = params\n      await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did))\n\n      const cid = parseCid(params.cid)\n      const found = await ctx.actorStore.read(params.did, async (store) => {\n        try {\n          return await store.repo.blob.getBlob(cid)\n        } catch (err) {\n          if (err instanceof BlobNotFoundError) {\n            throw new InvalidRequestError('Blob not found')\n          } else {\n            throw err\n          }\n        }\n      })\n      if (!found) {\n        throw new InvalidRequestError('Blob not found')\n      }\n      res.setHeader('content-length', found.size)\n\n      // Important Security headers\n\n      // This prevents the browser from trying to guess the content type\n      // and potentially loading the blob as executable code, or rendering it\n      // in some other unsafe way.\n      res.setHeader('x-content-type-options', 'nosniff')\n\n      // This forces the browser to download the blob instead of trying to\n      // render it when visiting the URL. This is important to prevent XSS\n      // attacks if the blob happens to be HTML. Even if JS is disabled via the\n      // CSP header below, a blob could still contain malicious HTML links.\n      res.setHeader('content-disposition', `attachment; filename=\"${cid}\"`)\n\n      // This should prevent the browser from executing the blob in any way\n      res.setHeader('content-security-policy', `default-src 'none'; sandbox`)\n\n      return {\n        encoding: found.mimeType || ('application/octet-stream' as const),\n        body: found.stream,\n      }\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/sync/getBlocks.d.ts

@@ -1,4 +1,4 @@
 import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context';
+import { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=getBlocks.d.ts.map

package/dist/api/com/atproto/sync/getBlocks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getBlocks.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/getBlocks.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA2BvD"}
+{"version":3,"file":"getBlocks.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/getBlocks.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAInD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA2BvD"}

package/dist/api/com/atproto/sync/getBlocks.js

@@ -1,15 +1,12 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = default_1;
-const common_1 = require("@atproto/common");
-const lex_data_1 = require("@atproto/lex-data");
-const repo_1 = require("@atproto/repo");
-const xrpc_server_1 = require("@atproto/xrpc-server");
-const auth_verifier_1 = require("../../../../auth-verifier");
-const index_js_1 = require("../../../../lexicons/index.js");
-const util_1 = require("./util");
-function default_1(server, ctx) {
-    server.add(index_js_1.com.atproto.sync.getBlocks, {
+import { byteIterableToStream } from '@atproto/common';
+import { parseCid } from '@atproto/lex-data';
+import { blocksToCarStream } from '@atproto/repo';
+import { InvalidRequestError } from '@atproto/xrpc-server';
+import { isUserOrAdmin } from '../../../../auth-verifier.js';
+import { com } from '../../../../lexicons/index.js';
+import { assertRepoAvailability } from './util.js';
+export default function (server, ctx) {
+    server.add(com.atproto.sync.getBlocks, {
         auth: ctx.authVerifier.authorizationOrAdminTokenOptional({
             authorize: () => {
                 // always allow
@@ -17,17 +14,17 @@ function default_1(server, ctx) {
         }),
         handler: async ({ params, auth }) => {
             const { did } = params;
-            await (0, util_1.assertRepoAvailability)(ctx, did, (0, auth_verifier_1.isUserOrAdmin)(auth, did));
-            const cids = params.cids.map(lex_data_1.parseCid);
+            await assertRepoAvailability(ctx, did, isUserOrAdmin(auth, did));
+            const cids = params.cids.map(parseCid);
             const got = await ctx.actorStore.read(did, (store) => store.repo.storage.getBlocks(cids));
             if (got.missing.length > 0) {
                 const missingStr = got.missing.map((c) => c.toString());
-                throw new xrpc_server_1.InvalidRequestError(`Could not find cids: ${missingStr}`);
+                throw new InvalidRequestError(`Could not find cids: ${missingStr}`);
             }
-            const car = (0, repo_1.blocksToCarStream)(null, got.blocks);
+            const car = blocksToCarStream(null, got.blocks);
             return {
                 encoding: 'application/vnd.ipld.car',
-                body: (0, common_1.byteIterableToStream)(car),
+                body: byteIterableToStream(car),
             };
         },
     });