@atproto/pds 0.4.223 → 0.4.225

package/dist/api/com/atproto/sync/listRepos.js.map

@@ -1 +1 @@
-{"version":3,"file":"listRepos.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/listRepos.ts"],"names":[],"mappings":";;;AAMA,4BA2CC;AAjDD,sDAAkE;AAClE,iFAAiF;AAEjF,0DAA2E;AAC3E,4DAAmD;AAEnD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;QAChC,MAAM,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC,EAAE,CAAA;QAChC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAA;QAC7B,IAAI,OAAO,GAAG,EAAE,CAAC,EAAE;aAChB,UAAU,CAAC,OAAO,CAAC;aACnB,SAAS,CAAC,WAAW,EAAE,eAAe,EAAE,WAAW,CAAC;aACpD,MAAM,CAAC;YACN,kBAAkB;YAClB,uBAAuB;YACvB,sBAAsB;YACtB,8BAA8B;YAC9B,sCAAsC;YACtC,kCAAkC;SACnC,CAAC,CAAA;QACJ,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAA;QAC1E,OAAO,GAAG,IAAA,qBAAQ,EAAC,OAAO,EAAE;YAC1B,KAAK;YACL,MAAM;YACN,MAAM;YACN,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;QACnC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAmC,EAAE;YAC7D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,qCAAmB,EAAC,GAAG,CAAC,CAAA;YACnD,OAAO;gBACL,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;gBAClB,MAAM;gBACN,MAAM;aACP,CAAA;QACH,CAAC,CAAC,CAAA;QACF,OAAO;YACL,QAAQ,EAAE,kBAA2B;YACrC,IAAI,EAAE;gBACJ,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC;gBAClC,KAAK;aACN;SACF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAID,MAAa,aAAc,SAAQ,0BAAoC;IACrE,WAAW,CAAC,MAAqB;QAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;IAC7D,CAAC;IACD,qBAAqB,CAAC,OAAe;QACnC,OAAO;YACL,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YACvD,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAA;IACH,CAAC;IACD,qBAAqB,CAAC,MAAc;QAClC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1D,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,iCAAmB,CAAC,kBAAkB,CAAC,CAAA;QACnD,CAAC;QACD,OAAO;YACL,OAAO,EAAE,WAAW,CAAC,WAAW,EAAE;YAClC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAA;IACH,CAAC;CACF;AApBD,sCAoBC","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { formatAccountStatus } from '../../../../account-manager/account-manager'\nimport { AppContext } from '../../../../context'\nimport { Cursor, GenericKeyset, paginate } from '../../../../db/pagination'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.sync.listRepos, async ({ params }) => {\n    const { limit, cursor } = params\n    const db = ctx.accountManager.db\n    const { ref } = db.db.dynamic\n    let builder = db.db\n      .selectFrom('actor')\n      .innerJoin('repo_root', 'repo_root.did', 'actor.did')\n      .select([\n        'actor.did as did',\n        'repo_root.cid as head',\n        'repo_root.rev as rev',\n        'actor.createdAt as createdAt',\n        'actor.deactivatedAt as deactivatedAt',\n        'actor.takedownRef as takedownRef',\n      ])\n    const keyset = new TimeDidKeyset(ref('actor.createdAt'), ref('actor.did'))\n    builder = paginate(builder, {\n      limit,\n      cursor,\n      keyset,\n      direction: 'asc',\n      tryIndex: true,\n    })\n    const res = await builder.execute()\n    const repos = res.map((row): com.atproto.sync.listRepos.Repo => {\n      const { active, status } = formatAccountStatus(row)\n      return {\n        did: row.did,\n        head: row.head,\n        rev: row.rev ?? '',\n        active,\n        status,\n      }\n    })\n    return {\n      encoding: 'application/json' as const,\n      body: {\n        cursor: keyset.packFromResult(res),\n        repos,\n      },\n    }\n  })\n}\n\ntype TimeDidResult = { createdAt: string; did: string }\n\nexport class TimeDidKeyset extends GenericKeyset<TimeDidResult, Cursor> {\n  labelResult(result: TimeDidResult): Cursor {\n    return { primary: result.createdAt, secondary: result.did }\n  }\n  labeledResultToCursor(labeled: Cursor) {\n    return {\n      primary: new Date(labeled.primary).getTime().toString(),\n      secondary: labeled.secondary,\n    }\n  }\n  cursorToLabeledResult(cursor: Cursor) {\n    const primaryDate = new Date(parseInt(cursor.primary, 10))\n    if (isNaN(primaryDate.getTime())) {\n      throw new InvalidRequestError('Malformed cursor')\n    }\n    return {\n      primary: primaryDate.toISOString(),\n      secondary: cursor.secondary,\n    }\n  }\n}\n"]}
+{"version":3,"file":"listRepos.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/listRepos.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAU,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAA;AAEpF,OAAO,EAAU,aAAa,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC9E,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;QAChC,MAAM,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC,EAAE,CAAA;QAChC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAA;QAC7B,IAAI,OAAO,GAAG,EAAE,CAAC,EAAE;aAChB,UAAU,CAAC,OAAO,CAAC;aACnB,SAAS,CAAC,WAAW,EAAE,eAAe,EAAE,WAAW,CAAC;aACpD,MAAM,CAAC;YACN,kBAAkB;YAClB,uBAAuB;YACvB,sBAAsB;YACtB,8BAA8B;YAC9B,sCAAsC;YACtC,kCAAkC;SACnC,CAAC,CAAA;QACJ,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAA;QAC1E,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE;YAC1B,KAAK;YACL,MAAM;YACN,MAAM;YACN,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;QACnC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAmC,EAAE;YAC7D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;YACnD,OAAO;gBACL,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;gBAClB,MAAM;gBACN,MAAM;aACP,CAAA;QACH,CAAC,CAAC,CAAA;QACF,OAAO;YACL,QAAQ,EAAE,kBAA2B;YACrC,IAAI,EAAE;gBACJ,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC;gBAClC,KAAK;aACN;SACF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAID,MAAM,OAAO,aAAc,SAAQ,aAAoC;IACrE,WAAW,CAAC,MAAqB;QAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;IAC7D,CAAC;IACD,qBAAqB,CAAC,OAAe;QACnC,OAAO;YACL,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YACvD,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAA;IACH,CAAC;IACD,qBAAqB,CAAC,MAAc;QAClC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1D,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,CAAC,CAAA;QACnD,CAAC;QACD,OAAO;YACL,OAAO,EAAE,WAAW,CAAC,WAAW,EAAE;YAClC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAA;IACH,CAAC;CACF","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { formatAccountStatus } from '../../../../account-manager/account-manager.js'\nimport { AppContext } from '../../../../context.js'\nimport { Cursor, GenericKeyset, paginate } from '../../../../db/pagination.js'\nimport { com } from '../../../../lexicons/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.sync.listRepos, async ({ params }) => {\n    const { limit, cursor } = params\n    const db = ctx.accountManager.db\n    const { ref } = db.db.dynamic\n    let builder = db.db\n      .selectFrom('actor')\n      .innerJoin('repo_root', 'repo_root.did', 'actor.did')\n      .select([\n        'actor.did as did',\n        'repo_root.cid as head',\n        'repo_root.rev as rev',\n        'actor.createdAt as createdAt',\n        'actor.deactivatedAt as deactivatedAt',\n        'actor.takedownRef as takedownRef',\n      ])\n    const keyset = new TimeDidKeyset(ref('actor.createdAt'), ref('actor.did'))\n    builder = paginate(builder, {\n      limit,\n      cursor,\n      keyset,\n      direction: 'asc',\n      tryIndex: true,\n    })\n    const res = await builder.execute()\n    const repos = res.map((row): com.atproto.sync.listRepos.Repo => {\n      const { active, status } = formatAccountStatus(row)\n      return {\n        did: row.did,\n        head: row.head,\n        rev: row.rev ?? '',\n        active,\n        status,\n      }\n    })\n    return {\n      encoding: 'application/json' as const,\n      body: {\n        cursor: keyset.packFromResult(res),\n        repos,\n      },\n    }\n  })\n}\n\ntype TimeDidResult = { createdAt: string; did: string }\n\nexport class TimeDidKeyset extends GenericKeyset<TimeDidResult, Cursor> {\n  labelResult(result: TimeDidResult): Cursor {\n    return { primary: result.createdAt, secondary: result.did }\n  }\n  labeledResultToCursor(labeled: Cursor) {\n    return {\n      primary: new Date(labeled.primary).getTime().toString(),\n      secondary: labeled.secondary,\n    }\n  }\n  cursorToLabeledResult(cursor: Cursor) {\n    const primaryDate = new Date(parseInt(cursor.primary, 10))\n    if (isNaN(primaryDate.getTime())) {\n      throw new InvalidRequestError('Malformed cursor')\n    }\n    return {\n      primary: primaryDate.toISOString(),\n      secondary: cursor.secondary,\n    }\n  }\n}\n"]}

package/dist/api/com/atproto/sync/subscribeRepos.d.ts

@@ -1,4 +1,4 @@
 import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context';
+import { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=subscribeRepos.d.ts.map

package/dist/api/com/atproto/sync/subscribeRepos.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subscribeRepos.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/subscribeRepos.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAKhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAkEvD"}
+{"version":3,"file":"subscribeRepos.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/subscribeRepos.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAKnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAkEvD"}

package/dist/api/com/atproto/sync/subscribeRepos.js

@@ -1,17 +1,14 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = default_1;
-const xrpc_server_1 = require("@atproto/xrpc-server");
-const index_js_1 = require("../../../../lexicons/index.js");
-const logger_1 = require("../../../../logger");
-const outbox_1 = require("../../../../sequencer/outbox");
-function default_1(server, ctx) {
-    server.add(index_js_1.com.atproto.sync.subscribeRepos, async function* ({ params, signal, }) {
+import { InvalidRequestError } from '@atproto/xrpc-server';
+import { com } from '../../../../lexicons/index.js';
+import { httpLogger } from '../../../../logger.js';
+import { Outbox } from '../../../../sequencer/outbox.js';
+export default function (server, ctx) {
+    server.add(com.atproto.sync.subscribeRepos, async function* ({ params, signal, }) {
         const { cursor } = params;
-        const outbox = new outbox_1.Outbox(ctx.sequencer, {
+        const outbox = new Outbox(ctx.sequencer, {
             maxBufferSize: ctx.cfg.subscription.maxBuffer,
         });
-        logger_1.httpLogger.info({ cursor }, 'request to com.atproto.sync.subscribeRepos');
+        httpLogger.info({ cursor }, 'request to com.atproto.sync.subscribeRepos');
         const backfillTime = new Date(Date.now() - ctx.cfg.subscription.repoBackfillLimitMs).toISOString();
         let outboxCursor = undefined;
         if (cursor !== undefined) {
@@ -20,11 +17,11 @@ function default_1(server, ctx) {
                 ctx.sequencer.curr(),
             ]);
             if (cursor > (curr ?? 0)) {
-                throw new xrpc_server_1.InvalidRequestError('Cursor in the future.', 'FutureCursor');
+                throw new InvalidRequestError('Cursor in the future.', 'FutureCursor');
             }
             else if (next && next.sequencedAt < backfillTime) {
                 // if cursor is before backfill time, find earliest cursor from backfill window
-                yield index_js_1.com.atproto.sync.subscribeRepos.info.$build({
+                yield com.atproto.sync.subscribeRepos.info.$build({
                     name: 'OutdatedCursor',
                     message: 'Requested cursor exceeded limit. Possibly missing events',
                 });
@@ -37,28 +34,28 @@ function default_1(server, ctx) {
         }
         for await (const evt of outbox.events(outboxCursor, signal)) {
             if (evt.type === 'commit') {
-                yield index_js_1.com.atproto.sync.subscribeRepos.commit.$build({
+                yield com.atproto.sync.subscribeRepos.commit.$build({
                     seq: evt.seq,
                     time: evt.time,
                     ...evt.evt,
                 });
             }
             else if (evt.type === 'sync') {
-                yield index_js_1.com.atproto.sync.subscribeRepos.sync.$build({
+                yield com.atproto.sync.subscribeRepos.sync.$build({
                     seq: evt.seq,
                     time: evt.time,
                     ...evt.evt,
                 });
             }
             else if (evt.type === 'identity') {
-                yield index_js_1.com.atproto.sync.subscribeRepos.identity.$build({
+                yield com.atproto.sync.subscribeRepos.identity.$build({
                     seq: evt.seq,
                     time: evt.time,
                     ...evt.evt,
                 });
             }
             else if (evt.type === 'account') {
-                yield index_js_1.com.atproto.sync.subscribeRepos.account.$build({
+                yield com.atproto.sync.subscribeRepos.account.$build({
                     seq: evt.seq,
                     time: evt.time,
                     ...evt.evt,

package/dist/api/com/atproto/sync/subscribeRepos.js.map

@@ -1 +1 @@
-{"version":3,"file":"subscribeRepos.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/subscribeRepos.ts"],"names":[],"mappings":";;AAMA,4BAkEC;AAxED,sDAAkE;AAElE,4DAAmD;AACnD,+CAA+C;AAC/C,yDAAqD;AAErD,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CACR,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAC/B,KAAK,SAAS,CAAC,EAAE,EACf,MAAM,EACN,MAAM,GACP;QACC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;QACzB,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,GAAG,CAAC,SAAS,EAAE;YACvC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS;SAC9C,CAAC,CAAA;QACF,mBAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,4CAA4C,CAAC,CAAA;QAEzE,MAAM,YAAY,GAAG,IAAI,IAAI,CAC3B,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,mBAAmB,CACtD,CAAC,WAAW,EAAE,CAAA;QACf,IAAI,YAAY,GAAuB,SAAS,CAAA;QAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACrC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC1B,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE;aACrB,CAAC,CAAA;YACF,IAAI,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,iCAAmB,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAA;YACxE,CAAC;iBAAM,IAAI,IAAI,IAAI,IAAI,CAAC,WAAW,GAAG,YAAY,EAAE,CAAC;gBACnD,+EAA+E;gBAC/E,MAAM,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;oBAChD,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,0DAA0D;iBACpE,CAAC,CAAA;gBACF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAA;gBACpE,YAAY,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC7D,CAAC;iBAAM,CAAC;gBACN,YAAY,GAAG,MAAM,CAAA;YACvB,CAAC;QACH,CAAC;QAED,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5D,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;oBAClD,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,GAAG,CAAC,GAAG;iBACX,CAAC,CAAA;YACJ,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC/B,MAAM,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;oBAChD,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,GAAG,CAAC,GAAG;iBACX,CAAC,CAAA;YACJ,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACnC,MAAM,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACpD,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,GAAG,CAAC,GAAG;iBACX,CAAC,CAAA;YACJ,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;oBACnD,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,GAAG,CAAC,GAAG;iBACX,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CACF,CAAA;AACH,CAAC","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\nimport { httpLogger } from '../../../../logger'\nimport { Outbox } from '../../../../sequencer/outbox'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(\n    com.atproto.sync.subscribeRepos,\n    async function* ({\n      params,\n      signal,\n    }): AsyncGenerator<com.atproto.sync.subscribeRepos.$Message> {\n      const { cursor } = params\n      const outbox = new Outbox(ctx.sequencer, {\n        maxBufferSize: ctx.cfg.subscription.maxBuffer,\n      })\n      httpLogger.info({ cursor }, 'request to com.atproto.sync.subscribeRepos')\n\n      const backfillTime = new Date(\n        Date.now() - ctx.cfg.subscription.repoBackfillLimitMs,\n      ).toISOString()\n      let outboxCursor: number | undefined = undefined\n      if (cursor !== undefined) {\n        const [next, curr] = await Promise.all([\n          ctx.sequencer.next(cursor),\n          ctx.sequencer.curr(),\n        ])\n        if (cursor > (curr ?? 0)) {\n          throw new InvalidRequestError('Cursor in the future.', 'FutureCursor')\n        } else if (next && next.sequencedAt < backfillTime) {\n          // if cursor is before backfill time, find earliest cursor from backfill window\n          yield com.atproto.sync.subscribeRepos.info.$build({\n            name: 'OutdatedCursor',\n            message: 'Requested cursor exceeded limit. Possibly missing events',\n          })\n          const startEvt = await ctx.sequencer.earliestAfterTime(backfillTime)\n          outboxCursor = startEvt?.seq ? startEvt.seq - 1 : undefined\n        } else {\n          outboxCursor = cursor\n        }\n      }\n\n      for await (const evt of outbox.events(outboxCursor, signal)) {\n        if (evt.type === 'commit') {\n          yield com.atproto.sync.subscribeRepos.commit.$build({\n            seq: evt.seq,\n            time: evt.time,\n            ...evt.evt,\n          })\n        } else if (evt.type === 'sync') {\n          yield com.atproto.sync.subscribeRepos.sync.$build({\n            seq: evt.seq,\n            time: evt.time,\n            ...evt.evt,\n          })\n        } else if (evt.type === 'identity') {\n          yield com.atproto.sync.subscribeRepos.identity.$build({\n            seq: evt.seq,\n            time: evt.time,\n            ...evt.evt,\n          })\n        } else if (evt.type === 'account') {\n          yield com.atproto.sync.subscribeRepos.account.$build({\n            seq: evt.seq,\n            time: evt.time,\n            ...evt.evt,\n          })\n        }\n      }\n    },\n  )\n}\n"]}
+{"version":3,"file":"subscribeRepos.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/subscribeRepos.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAU,MAAM,sBAAsB,CAAA;AAElE,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAA;AAExD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CACR,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAC/B,KAAK,SAAS,CAAC,EAAE,EACf,MAAM,EACN,MAAM,GACP;QACC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;QACzB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE;YACvC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS;SAC9C,CAAC,CAAA;QACF,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,4CAA4C,CAAC,CAAA;QAEzE,MAAM,YAAY,GAAG,IAAI,IAAI,CAC3B,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,mBAAmB,CACtD,CAAC,WAAW,EAAE,CAAA;QACf,IAAI,YAAY,GAAuB,SAAS,CAAA;QAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACrC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC1B,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE;aACrB,CAAC,CAAA;YACF,IAAI,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAA;YACxE,CAAC;iBAAM,IAAI,IAAI,IAAI,IAAI,CAAC,WAAW,GAAG,YAAY,EAAE,CAAC;gBACnD,+EAA+E;gBAC/E,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;oBAChD,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,0DAA0D;iBACpE,CAAC,CAAA;gBACF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAA;gBACpE,YAAY,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC7D,CAAC;iBAAM,CAAC;gBACN,YAAY,GAAG,MAAM,CAAA;YACvB,CAAC;QACH,CAAC;QAED,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5D,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;oBAClD,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,GAAG,CAAC,GAAG;iBACX,CAAC,CAAA;YACJ,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC/B,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;oBAChD,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,GAAG,CAAC,GAAG;iBACX,CAAC,CAAA;YACJ,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACnC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACpD,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,GAAG,CAAC,GAAG;iBACX,CAAC,CAAA;YACJ,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;oBACnD,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,GAAG,CAAC,GAAG;iBACX,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CACF,CAAA;AACH,CAAC","sourcesContent":["import { InvalidRequestError, Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\nimport { httpLogger } from '../../../../logger.js'\nimport { Outbox } from '../../../../sequencer/outbox.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  server.add(\n    com.atproto.sync.subscribeRepos,\n    async function* ({\n      params,\n      signal,\n    }): AsyncGenerator<com.atproto.sync.subscribeRepos.$Message> {\n      const { cursor } = params\n      const outbox = new Outbox(ctx.sequencer, {\n        maxBufferSize: ctx.cfg.subscription.maxBuffer,\n      })\n      httpLogger.info({ cursor }, 'request to com.atproto.sync.subscribeRepos')\n\n      const backfillTime = new Date(\n        Date.now() - ctx.cfg.subscription.repoBackfillLimitMs,\n      ).toISOString()\n      let outboxCursor: number | undefined = undefined\n      if (cursor !== undefined) {\n        const [next, curr] = await Promise.all([\n          ctx.sequencer.next(cursor),\n          ctx.sequencer.curr(),\n        ])\n        if (cursor > (curr ?? 0)) {\n          throw new InvalidRequestError('Cursor in the future.', 'FutureCursor')\n        } else if (next && next.sequencedAt < backfillTime) {\n          // if cursor is before backfill time, find earliest cursor from backfill window\n          yield com.atproto.sync.subscribeRepos.info.$build({\n            name: 'OutdatedCursor',\n            message: 'Requested cursor exceeded limit. Possibly missing events',\n          })\n          const startEvt = await ctx.sequencer.earliestAfterTime(backfillTime)\n          outboxCursor = startEvt?.seq ? startEvt.seq - 1 : undefined\n        } else {\n          outboxCursor = cursor\n        }\n      }\n\n      for await (const evt of outbox.events(outboxCursor, signal)) {\n        if (evt.type === 'commit') {\n          yield com.atproto.sync.subscribeRepos.commit.$build({\n            seq: evt.seq,\n            time: evt.time,\n            ...evt.evt,\n          })\n        } else if (evt.type === 'sync') {\n          yield com.atproto.sync.subscribeRepos.sync.$build({\n            seq: evt.seq,\n            time: evt.time,\n            ...evt.evt,\n          })\n        } else if (evt.type === 'identity') {\n          yield com.atproto.sync.subscribeRepos.identity.$build({\n            seq: evt.seq,\n            time: evt.time,\n            ...evt.evt,\n          })\n        } else if (evt.type === 'account') {\n          yield com.atproto.sync.subscribeRepos.account.$build({\n            seq: evt.seq,\n            time: evt.time,\n            ...evt.evt,\n          })\n        }\n      }\n    },\n  )\n}\n"]}

package/dist/api/com/atproto/sync/util.d.ts

@@ -1,5 +1,5 @@
 import { AtIdentifierString } from '@atproto/syntax';
-import { ActorAccount } from '../../../../account-manager/helpers/account';
-import { AppContext } from '../../../../context';
+import { ActorAccount } from '../../../../account-manager/helpers/account.js';
+import { AppContext } from '../../../../context.js';
 export declare const assertRepoAvailability: (ctx: AppContext, handleOrDid: AtIdentifierString, isAdminOrSelf: boolean) => Promise<ActorAccount>;
 //# sourceMappingURL=util.d.ts.map

package/dist/api/com/atproto/sync/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAEpD,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAEhD,eAAO,MAAM,sBAAsB,GACjC,KAAK,UAAU,EACf,aAAa,kBAAkB,EAC/B,eAAe,OAAO,KACrB,OAAO,CAAC,YAAY,CA2BtB,CAAA"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAEpD,OAAO,EAAE,YAAY,EAAE,MAAM,gDAAgD,CAAA;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAEnD,eAAO,MAAM,sBAAsB,GACjC,KAAK,UAAU,EACf,aAAa,kBAAkB,EAC/B,eAAe,OAAO,KACrB,OAAO,CAAC,YAAY,CA2BtB,CAAA"}

package/dist/api/com/atproto/sync/util.js

@@ -1,25 +1,21 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertRepoAvailability = void 0;
-const xrpc_server_1 = require("@atproto/xrpc-server");
-const assertRepoAvailability = async (ctx, handleOrDid, isAdminOrSelf) => {
+import { InvalidRequestError } from '@atproto/xrpc-server';
+export const assertRepoAvailability = async (ctx, handleOrDid, isAdminOrSelf) => {
     const account = await ctx.accountManager.getAccount(handleOrDid, {
         includeDeactivated: true,
         includeTakenDown: true,
     });
     if (!account) {
-        throw new xrpc_server_1.InvalidRequestError(`Could not find repo for DID: ${handleOrDid}`, 'RepoNotFound');
+        throw new InvalidRequestError(`Could not find repo for DID: ${handleOrDid}`, 'RepoNotFound');
     }
     if (isAdminOrSelf) {
         return account;
     }
     if (account.takedownRef) {
-        throw new xrpc_server_1.InvalidRequestError(`Repo has been takendown: ${handleOrDid}`, 'RepoTakendown');
+        throw new InvalidRequestError(`Repo has been takendown: ${handleOrDid}`, 'RepoTakendown');
     }
     if (account.deactivatedAt) {
-        throw new xrpc_server_1.InvalidRequestError(`Repo has been deactivated: ${handleOrDid}`, 'RepoDeactivated');
+        throw new InvalidRequestError(`Repo has been deactivated: ${handleOrDid}`, 'RepoDeactivated');
     }
     return account;
 };
-exports.assertRepoAvailability = assertRepoAvailability;
 //# sourceMappingURL=util.js.map

package/dist/api/com/atproto/sync/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/util.ts"],"names":[],"mappings":";;;AACA,sDAA0D;AAInD,MAAM,sBAAsB,GAAG,KAAK,EACzC,GAAe,EACf,WAA+B,EAC/B,aAAsB,EACC,EAAE;IACzB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,WAAW,EAAE;QAC/D,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,iCAAmB,CAC3B,gCAAgC,WAAW,EAAE,EAC7C,cAAc,CACf,CAAA;IACH,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,iCAAmB,CAC3B,4BAA4B,WAAW,EAAE,EACzC,eAAe,CAChB,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,iCAAmB,CAC3B,8BAA8B,WAAW,EAAE,EAC3C,iBAAiB,CAClB,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AA/BY,QAAA,sBAAsB,0BA+BlC","sourcesContent":["import { AtIdentifierString } from '@atproto/syntax'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { ActorAccount } from '../../../../account-manager/helpers/account'\nimport { AppContext } from '../../../../context'\n\nexport const assertRepoAvailability = async (\n  ctx: AppContext,\n  handleOrDid: AtIdentifierString,\n  isAdminOrSelf: boolean,\n): Promise<ActorAccount> => {\n  const account = await ctx.accountManager.getAccount(handleOrDid, {\n    includeDeactivated: true,\n    includeTakenDown: true,\n  })\n  if (!account) {\n    throw new InvalidRequestError(\n      `Could not find repo for DID: ${handleOrDid}`,\n      'RepoNotFound',\n    )\n  }\n  if (isAdminOrSelf) {\n    return account\n  }\n  if (account.takedownRef) {\n    throw new InvalidRequestError(\n      `Repo has been takendown: ${handleOrDid}`,\n      'RepoTakendown',\n    )\n  }\n  if (account.deactivatedAt) {\n    throw new InvalidRequestError(\n      `Repo has been deactivated: ${handleOrDid}`,\n      'RepoDeactivated',\n    )\n  }\n  return account\n}\n"]}
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/sync/util.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAI1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EACzC,GAAe,EACf,WAA+B,EAC/B,aAAsB,EACC,EAAE;IACzB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,WAAW,EAAE;QAC/D,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,gCAAgC,WAAW,EAAE,EAC7C,cAAc,CACf,CAAA;IACH,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAC3B,4BAA4B,WAAW,EAAE,EACzC,eAAe,CAChB,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,mBAAmB,CAC3B,8BAA8B,WAAW,EAAE,EAC3C,iBAAiB,CAClB,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA","sourcesContent":["import { AtIdentifierString } from '@atproto/syntax'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { ActorAccount } from '../../../../account-manager/helpers/account.js'\nimport { AppContext } from '../../../../context.js'\n\nexport const assertRepoAvailability = async (\n  ctx: AppContext,\n  handleOrDid: AtIdentifierString,\n  isAdminOrSelf: boolean,\n): Promise<ActorAccount> => {\n  const account = await ctx.accountManager.getAccount(handleOrDid, {\n    includeDeactivated: true,\n    includeTakenDown: true,\n  })\n  if (!account) {\n    throw new InvalidRequestError(\n      `Could not find repo for DID: ${handleOrDid}`,\n      'RepoNotFound',\n    )\n  }\n  if (isAdminOrSelf) {\n    return account\n  }\n  if (account.takedownRef) {\n    throw new InvalidRequestError(\n      `Repo has been takendown: ${handleOrDid}`,\n      'RepoTakendown',\n    )\n  }\n  if (account.deactivatedAt) {\n    throw new InvalidRequestError(\n      `Repo has been deactivated: ${handleOrDid}`,\n      'RepoDeactivated',\n    )\n  }\n  return account\n}\n"]}

package/dist/api/com/atproto/temp/checkSignupQueue.d.ts

@@ -1,4 +1,4 @@
 import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context';
+import { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=checkSignupQueue.d.ts.map

package/dist/api/com/atproto/temp/checkSignupQueue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkSignupQueue.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/checkSignupQueue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA2BvD"}
+{"version":3,"file":"checkSignupQueue.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/checkSignupQueue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAInD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QA2BvD"}

package/dist/api/com/atproto/temp/checkSignupQueue.js

@@ -1,16 +1,13 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = default_1;
-const xrpc_server_1 = require("@atproto/xrpc-server");
-const auth_scope_1 = require("../../../../auth-scope");
-const index_js_1 = require("../../../../lexicons/index.js");
+import { ForbiddenError } from '@atproto/xrpc-server';
+import { AuthScope } from '../../../../auth-scope.js';
+import { com } from '../../../../lexicons/index.js';
 // THIS IS A TEMPORARY UNSPECCED ROUTE
-function default_1(server, ctx) {
-    server.add(index_js_1.com.atproto.temp.checkSignupQueue, {
+export default function (server, ctx) {
+    server.add(com.atproto.temp.checkSignupQueue, {
         auth: ctx.authVerifier.authorization({
-            additional: [auth_scope_1.AuthScope.SignupQueued],
+            additional: [AuthScope.SignupQueued],
             authorize: () => {
-                throw new xrpc_server_1.ForbiddenError('OAuth credentials are not supported for this endpoint');
+                throw new ForbiddenError('OAuth credentials are not supported for this endpoint');
             },
         }),
         handler: async ({ req }) => {
@@ -23,7 +20,7 @@ function default_1(server, ctx) {
                 };
             }
             const { headers } = ctx.entrywayPassthruHeaders(req);
-            return ctx.entrywayClient.xrpc(index_js_1.com.atproto.temp.checkSignupQueue, {
+            return ctx.entrywayClient.xrpc(com.atproto.temp.checkSignupQueue, {
                 headers,
             });
         },

package/dist/api/com/atproto/temp/checkSignupQueue.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkSignupQueue.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/checkSignupQueue.ts"],"names":[],"mappings":";;AAMA,4BA2BC;AAjCD,sDAA6D;AAC7D,uDAAkD;AAElD,4DAAmD;AAEnD,sCAAsC;AACtC,mBAAyB,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE;QAC5C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,UAAU,EAAE,CAAC,sBAAS,CAAC,YAAY,CAAC;YACpC,SAAS,EAAE,GAAG,EAAE;gBACd,MAAM,IAAI,4BAAc,CACtB,uDAAuD,CACxD,CAAA;YACH,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACzB,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;gBACxB,OAAO;oBACL,QAAQ,EAAE,kBAA2B;oBACrC,IAAI,EAAE;wBACJ,SAAS,EAAE,IAAI;qBAChB;iBACF,CAAA;YACH,CAAC;YAED,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;YAEpD,OAAO,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,cAAG,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAChE,OAAO;aACR,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { ForbiddenError, Server } from '@atproto/xrpc-server'\nimport { AuthScope } from '../../../../auth-scope'\nimport { AppContext } from '../../../../context'\nimport { com } from '../../../../lexicons/index.js'\n\n// THIS IS A TEMPORARY UNSPECCED ROUTE\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.temp.checkSignupQueue, {\n    auth: ctx.authVerifier.authorization({\n      additional: [AuthScope.SignupQueued],\n      authorize: () => {\n        throw new ForbiddenError(\n          'OAuth credentials are not supported for this endpoint',\n        )\n      },\n    }),\n    handler: async ({ req }) => {\n      if (!ctx.entrywayClient) {\n        return {\n          encoding: 'application/json' as const,\n          body: {\n            activated: true,\n          },\n        }\n      }\n\n      const { headers } = ctx.entrywayPassthruHeaders(req)\n\n      return ctx.entrywayClient.xrpc(com.atproto.temp.checkSignupQueue, {\n        headers,\n      })\n    },\n  })\n}\n"]}
+{"version":3,"file":"checkSignupQueue.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/checkSignupQueue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAU,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAErD,OAAO,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAA;AAEnD,sCAAsC;AACtC,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE;QAC5C,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC;YACnC,UAAU,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC;YACpC,SAAS,EAAE,GAAG,EAAE;gBACd,MAAM,IAAI,cAAc,CACtB,uDAAuD,CACxD,CAAA;YACH,CAAC;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACzB,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;gBACxB,OAAO;oBACL,QAAQ,EAAE,kBAA2B;oBACrC,IAAI,EAAE;wBACJ,SAAS,EAAE,IAAI;qBAChB;iBACF,CAAA;YACH,CAAC;YAED,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;YAEpD,OAAO,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAChE,OAAO;aACR,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { ForbiddenError, Server } from '@atproto/xrpc-server'\nimport { AuthScope } from '../../../../auth-scope.js'\nimport { AppContext } from '../../../../context.js'\nimport { com } from '../../../../lexicons/index.js'\n\n// THIS IS A TEMPORARY UNSPECCED ROUTE\nexport default function (server: Server, ctx: AppContext) {\n  server.add(com.atproto.temp.checkSignupQueue, {\n    auth: ctx.authVerifier.authorization({\n      additional: [AuthScope.SignupQueued],\n      authorize: () => {\n        throw new ForbiddenError(\n          'OAuth credentials are not supported for this endpoint',\n        )\n      },\n    }),\n    handler: async ({ req }) => {\n      if (!ctx.entrywayClient) {\n        return {\n          encoding: 'application/json' as const,\n          body: {\n            activated: true,\n          },\n        }\n      }\n\n      const { headers } = ctx.entrywayPassthruHeaders(req)\n\n      return ctx.entrywayClient.xrpc(com.atproto.temp.checkSignupQueue, {\n        headers,\n      })\n    },\n  })\n}\n"]}

package/dist/api/com/atproto/temp/index.d.ts

@@ -1,4 +1,4 @@
 import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../../../../context';
+import { AppContext } from '../../../../context.js';
 export default function (server: Server, ctx: AppContext): void;
 //# sourceMappingURL=index.d.ts.map

package/dist/api/com/atproto/temp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAEvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAGnD,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,QAEvD"}

package/dist/api/com/atproto/temp/index.js

@@ -1,11 +1,5 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = default_1;
-const checkSignupQueue_1 = __importDefault(require("./checkSignupQueue"));
-function default_1(server, ctx) {
-    (0, checkSignupQueue_1.default)(server, ctx);
+import checkSignupQueue from './checkSignupQueue.js';
+export default function (server, ctx) {
+    checkSignupQueue(server, ctx);
 }
 //# sourceMappingURL=index.js.map

package/dist/api/com/atproto/temp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/index.ts"],"names":[],"mappings":";;;;;AAIA,4BAEC;AAJD,0EAAiD;AAEjD,mBAAyB,MAAc,EAAE,GAAe;IACtD,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAC/B,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context'\nimport checkSignupQueue from './checkSignupQueue'\n\nexport default function (server: Server, ctx: AppContext) {\n  checkSignupQueue(server, ctx)\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/api/com/atproto/temp/index.ts"],"names":[],"mappings":"AAEA,OAAO,gBAAgB,MAAM,uBAAuB,CAAA;AAEpD,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAC/B,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../../../../context.js'\nimport checkSignupQueue from './checkSignupQueue.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  checkSignupQueue(server, ctx)\n}\n"]}

package/dist/api/index.d.ts

@@ -1,4 +1,4 @@
 import { Server } from '@atproto/xrpc-server';
-import { AppContext } from '../context';
+import { AppContext } from '../context.js';
 export default function (server: Server, ctx: AppContext): Server;
 //# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAIvC,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,UAIvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAI1C,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,UAIvD"}

package/dist/api/index.js

@@ -1,14 +1,8 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = default_1;
-const bsky_1 = __importDefault(require("./app/bsky"));
-const atproto_1 = __importDefault(require("./com/atproto"));
-function default_1(server, ctx) {
-    (0, atproto_1.default)(server, ctx);
-    (0, bsky_1.default)(server, ctx);
+import appBsky from './app/bsky/index.js';
+import comAtproto from './com/atproto/index.js';
+export default function (server, ctx) {
+    comAtproto(server, ctx);
+    appBsky(server, ctx);
     return server;
 }
 //# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":";;;;;AAKA,4BAIC;AAPD,sDAAgC;AAChC,4DAAsC;AAEtC,mBAAyB,MAAc,EAAE,GAAe;IACtD,IAAA,iBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,IAAA,cAAO,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACpB,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../context'\nimport appBsky from './app/bsky'\nimport comAtproto from './com/atproto'\n\nexport default function (server: Server, ctx: AppContext) {\n  comAtproto(server, ctx)\n  appBsky(server, ctx)\n  return server\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAEA,OAAO,OAAO,MAAM,qBAAqB,CAAA;AACzC,OAAO,UAAU,MAAM,wBAAwB,CAAA;AAE/C,MAAM,CAAC,OAAO,WAAW,MAAc,EAAE,GAAe;IACtD,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACpB,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import { Server } from '@atproto/xrpc-server'\nimport { AppContext } from '../context.js'\nimport appBsky from './app/bsky/index.js'\nimport comAtproto from './com/atproto/index.js'\n\nexport default function (server: Server, ctx: AppContext) {\n  comAtproto(server, ctx)\n  appBsky(server, ctx)\n  return server\n}\n"]}

package/dist/api/proxy.js

@@ -1,9 +1,5 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.forwardedFor = void 0;
-exports.authPassthru = authPassthru;
-const xrpc_server_1 = require("@atproto/xrpc-server");
-function authPassthru(req) {
+import { InvalidRequestError } from '@atproto/xrpc-server';
+export function authPassthru(req) {
     const { authorization } = req.headers;
     if (authorization) {
         // DPoP requests are bound to the endpoint being called. Allowing them to be
@@ -16,17 +12,17 @@ function authPassthru(req) {
         // case were DPoP is used.
         const [type] = authorization.split(' ', 1);
         if (!type) {
-            throw new xrpc_server_1.InvalidRequestError('Invalid authorization header');
+            throw new InvalidRequestError('Invalid authorization header');
         }
         if (type.toLowerCase() === 'dpop' || req.headers['dpop']) {
-            throw new xrpc_server_1.InvalidRequestError('DPoP requests cannot be proxied');
+            throw new InvalidRequestError('DPoP requests cannot be proxied');
         }
         return { headers: { authorization } };
     }
 }
 // @NOTE this function may mutate its params input
 // future improvement here would be to forward along all untrusted ips rather than just the first (req.ip)
-const forwardedFor = (req, params) => {
+export const forwardedFor = (req, params) => {
     const result = params ?? { headers: {} };
     const ip = req.ip;
     if (ip) {
@@ -34,5 +30,4 @@ const forwardedFor = (req, params) => {
     }
     return result;
 };
-exports.forwardedFor = forwardedFor;
 //# sourceMappingURL=proxy.js.map

package/dist/api/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/api/proxy.ts"],"names":[],"mappings":";;;AAIA,oCAuBC;AAzBD,sDAA0D;AAE1D,SAAgB,YAAY,CAAC,GAAoB;IAC/C,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,OAAO,CAAA;IAErC,IAAI,aAAa,EAAE,CAAC;QAClB,4EAA4E;QAC5E,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,qBAAqB;QAErB,wEAAwE;QACxE,2EAA2E;QAC3E,0BAA0B;QAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iCAAmB,CAAC,8BAA8B,CAAC,CAAA;QAC/D,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,iCAAmB,CAAC,iCAAiC,CAAC,CAAA;QAClE,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,CAAA;IACvC,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,0GAA0G;AACnG,MAAM,YAAY,GAAG,CAC1B,GAAoB,EACpB,MAAgC,EAChC,EAAE;IACF,MAAM,MAAM,GAAiB,MAAM,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IACtD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAA;IACjB,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAA;IACxC,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAVY,QAAA,YAAY,gBAUxB","sourcesContent":["import { IncomingMessage } from 'node:http'\nimport express from 'express'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\n\nexport function authPassthru(req: IncomingMessage) {\n  const { authorization } = req.headers\n\n  if (authorization) {\n    // DPoP requests are bound to the endpoint being called. Allowing them to be\n    // proxied would require that the receiving end allows DPoP proof not\n    // created for him. Since proxying is mainly there to support legacy\n    // clients, and DPoP is a new feature, we don't support DPoP requests\n    // through the proxy.\n\n    // This is fine since app views are usually called using the requester's\n    // credentials when \"auth.credentials.type === 'access'\", which is the only\n    // case were DPoP is used.\n    const [type] = authorization.split(' ', 1)\n    if (!type) {\n      throw new InvalidRequestError('Invalid authorization header')\n    }\n    if (type.toLowerCase() === 'dpop' || req.headers['dpop']) {\n      throw new InvalidRequestError('DPoP requests cannot be proxied')\n    }\n\n    return { headers: { authorization } }\n  }\n}\n\n// @NOTE this function may mutate its params input\n// future improvement here would be to forward along all untrusted ips rather than just the first (req.ip)\nexport const forwardedFor = (\n  req: express.Request,\n  params: HeadersParam | undefined,\n) => {\n  const result: HeadersParam = params ?? { headers: {} }\n  const ip = req.ip\n  if (ip) {\n    result.headers['x-forwarded-for'] = ip\n  }\n  return result\n}\n\ntype HeadersParam = { headers: Record<string, string> }\n"]}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/api/proxy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,UAAU,YAAY,CAAC,GAAoB;IAC/C,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,OAAO,CAAA;IAErC,IAAI,aAAa,EAAE,CAAC;QAClB,4EAA4E;QAC5E,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,qBAAqB;QAErB,wEAAwE;QACxE,2EAA2E;QAC3E,0BAA0B;QAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,mBAAmB,CAAC,8BAA8B,CAAC,CAAA;QAC/D,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,mBAAmB,CAAC,iCAAiC,CAAC,CAAA;QAClE,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,CAAA;IACvC,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,0GAA0G;AAC1G,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,GAAoB,EACpB,MAAgC,EAChC,EAAE;IACF,MAAM,MAAM,GAAiB,MAAM,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IACtD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAA;IACjB,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAA;IACxC,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA","sourcesContent":["import { IncomingMessage } from 'node:http'\nimport express from 'express'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\n\nexport function authPassthru(req: IncomingMessage) {\n  const { authorization } = req.headers\n\n  if (authorization) {\n    // DPoP requests are bound to the endpoint being called. Allowing them to be\n    // proxied would require that the receiving end allows DPoP proof not\n    // created for him. Since proxying is mainly there to support legacy\n    // clients, and DPoP is a new feature, we don't support DPoP requests\n    // through the proxy.\n\n    // This is fine since app views are usually called using the requester's\n    // credentials when \"auth.credentials.type === 'access'\", which is the only\n    // case were DPoP is used.\n    const [type] = authorization.split(' ', 1)\n    if (!type) {\n      throw new InvalidRequestError('Invalid authorization header')\n    }\n    if (type.toLowerCase() === 'dpop' || req.headers['dpop']) {\n      throw new InvalidRequestError('DPoP requests cannot be proxied')\n    }\n\n    return { headers: { authorization } }\n  }\n}\n\n// @NOTE this function may mutate its params input\n// future improvement here would be to forward along all untrusted ips rather than just the first (req.ip)\nexport const forwardedFor = (\n  req: express.Request,\n  params: HeadersParam | undefined,\n) => {\n  const result: HeadersParam = params ?? { headers: {} }\n  const ip = req.ip\n  if (ip) {\n    result.headers['x-forwarded-for'] = ip\n  }\n  return result\n}\n\ntype HeadersParam = { headers: Record<string, string> }\n"]}

package/dist/app-view.js

@@ -1,36 +1,14 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AppView = void 0;
-const node_util_1 = require("node:util");
-const lex_1 = require("@atproto/lex");
-class AppView {
+import { format } from 'node:util';
+import { Client } from '@atproto/lex';
+export class AppView {
     constructor(options) {
-        Object.defineProperty(this, "did", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: void 0
-        });
-        Object.defineProperty(this, "client", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: void 0
-        });
-        Object.defineProperty(this, "cdnUrlPattern", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: void 0
-        });
         this.did = options.did;
-        this.client = new lex_1.Client({ service: options.url });
+        this.client = new Client({ service: options.url });
         this.cdnUrlPattern = options.cdnUrlPattern;
     }
     getImageUrl(pattern, did, cid) {
         if (this.cdnUrlPattern)
-            return (0, node_util_1.format)(this.cdnUrlPattern, pattern, did, cid);
+            return format(this.cdnUrlPattern, pattern, did, cid);
     }
 }
-exports.AppView = AppView;
 //# sourceMappingURL=app-view.js.map

package/dist/app-view.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-view.js","sourceRoot":"","sources":["../src/app-view.ts"],"names":[],"mappings":";;;AAAA,yCAAkC;AAClC,sCAAqC;AAQrC,MAAa,OAAO;IAKlB,YAAY,OAAuB;QAJ5B;;;;;WAAW;QACX;;;;;WAAc;QACb;;;;;WAAsB;QAG5B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,YAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QAClD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAA;IAC5C,CAAC;IAED,WAAW,CAAC,OAAe,EAAE,GAAW,EAAE,GAAW;QACnD,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,IAAA,kBAAM,EAAC,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAC9E,CAAC;CACF;AAdD,0BAcC","sourcesContent":["import { format } from 'node:util'\nimport { Client } from '@atproto/lex'\n\nexport type AppViewOptions = {\n  url: string\n  did: string\n  cdnUrlPattern?: string\n}\n\nexport class AppView {\n  public did: string\n  public client: Client\n  private cdnUrlPattern?: string\n\n  constructor(options: AppViewOptions) {\n    this.did = options.did\n    this.client = new Client({ service: options.url })\n    this.cdnUrlPattern = options.cdnUrlPattern\n  }\n\n  getImageUrl(pattern: string, did: string, cid: string): string | undefined {\n    if (this.cdnUrlPattern) return format(this.cdnUrlPattern, pattern, did, cid)\n  }\n}\n"]}
+{"version":3,"file":"app-view.js","sourceRoot":"","sources":["../src/app-view.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAQrC,MAAM,OAAO,OAAO;IAKlB,YAAY,OAAuB;QACjC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QAClD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAA;IAC5C,CAAC;IAED,WAAW,CAAC,OAAe,EAAE,GAAW,EAAE,GAAW;QACnD,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAC9E,CAAC;CACF","sourcesContent":["import { format } from 'node:util'\nimport { Client } from '@atproto/lex'\n\nexport type AppViewOptions = {\n  url: string\n  did: string\n  cdnUrlPattern?: string\n}\n\nexport class AppView {\n  public did: string\n  public client: Client\n  private cdnUrlPattern?: string\n\n  constructor(options: AppViewOptions) {\n    this.did = options.did\n    this.client = new Client({ service: options.url })\n    this.cdnUrlPattern = options.cdnUrlPattern\n  }\n\n  getImageUrl(pattern: string, did: string, cid: string): string | undefined {\n    if (this.cdnUrlPattern) return format(this.cdnUrlPattern, pattern, did, cid)\n  }\n}\n"]}

package/dist/auth-output.d.ts

@@ -1,6 +1,6 @@
 import { ScopePermissions } from '@atproto/oauth-scopes';
 import { DidString } from '@atproto/syntax';
-import { AuthScope } from './auth-scope';
+import { AuthScope } from './auth-scope.js';
 export type UnauthenticatedOutput = {
     credentials: null;
 };

package/dist/auth-output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-output.d.ts","sourceRoot":"","sources":["../src/auth-output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAExC,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,IAAI,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAA;KACpB,CAAA;CACF,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAA;QACnB,GAAG,EAAE,SAAS,CAAA;KACf,CAAA;CACF,CAAA;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,IAAI;IAC1D,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAA;QACd,GAAG,EAAE,SAAS,CAAA;QACd,KAAK,EAAE,CAAC,CAAA;KACT,CAAA;CACF,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,WAAW,EAAE;QACX,IAAI,EAAE,OAAO,CAAA;QACb,GAAG,EAAE,SAAS,CAAA;QACd,WAAW,EAAE,gBAAgB,CAAA;KAC9B,CAAA;CACF,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE;QACX,IAAI,EAAE,SAAS,CAAA;QACf,GAAG,EAAE,SAAS,CAAA;QACd,KAAK,EAAE,SAAS,CAAC,OAAO,CAAA;QACxB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;CACF,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE;QACX,IAAI,EAAE,mBAAmB,CAAA;QACzB,GAAG,EAAE,SAAS,CAAA;KACf,CAAA;CACF,CAAA"}
+{"version":3,"file":"auth-output.d.ts","sourceRoot":"","sources":["../src/auth-output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,IAAI,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAA;KACpB,CAAA;CACF,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAA;QACnB,GAAG,EAAE,SAAS,CAAA;KACf,CAAA;CACF,CAAA;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,IAAI;IAC1D,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAA;QACd,GAAG,EAAE,SAAS,CAAA;QACd,KAAK,EAAE,CAAC,CAAA;KACT,CAAA;CACF,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,WAAW,EAAE;QACX,IAAI,EAAE,OAAO,CAAA;QACb,GAAG,EAAE,SAAS,CAAA;QACd,WAAW,EAAE,gBAAgB,CAAA;KAC9B,CAAA;CACF,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE;QACX,IAAI,EAAE,SAAS,CAAA;QACf,GAAG,EAAE,SAAS,CAAA;QACd,KAAK,EAAE,SAAS,CAAC,OAAO,CAAA;QACxB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;CACF,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE;QACX,IAAI,EAAE,mBAAmB,CAAA;QACzB,GAAG,EAAE,SAAS,CAAA;KACf,CAAA;CACF,CAAA"}

package/dist/auth-output.js

@@ -1,3 +1,2 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};
 //# sourceMappingURL=auth-output.js.map

package/dist/auth-output.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-output.js","sourceRoot":"","sources":["../src/auth-output.ts"],"names":[],"mappings":"","sourcesContent":["import { ScopePermissions } from '@atproto/oauth-scopes'\nimport { DidString } from '@atproto/syntax'\nimport { AuthScope } from './auth-scope'\n\nexport type UnauthenticatedOutput = {\n  credentials: null\n}\n\nexport type AdminTokenOutput = {\n  credentials: {\n    type: 'admin_token'\n  }\n}\n\nexport type ModServiceOutput = {\n  credentials: {\n    type: 'mod_service'\n    did: DidString\n  }\n}\n\nexport type AccessOutput<S extends AuthScope = AuthScope> = {\n  credentials: {\n    type: 'access'\n    did: DidString\n    scope: S\n  }\n}\n\nexport type OAuthOutput = {\n  credentials: {\n    type: 'oauth'\n    did: DidString\n    permissions: ScopePermissions\n  }\n}\n\nexport type RefreshOutput = {\n  credentials: {\n    type: 'refresh'\n    did: DidString\n    scope: AuthScope.Refresh\n    tokenId: string\n  }\n}\n\nexport type UserServiceAuthOutput = {\n  credentials: {\n    type: 'user_service_auth'\n    did: DidString\n  }\n}\n"]}
+{"version":3,"file":"auth-output.js","sourceRoot":"","sources":["../src/auth-output.ts"],"names":[],"mappings":"","sourcesContent":["import { ScopePermissions } from '@atproto/oauth-scopes'\nimport { DidString } from '@atproto/syntax'\nimport { AuthScope } from './auth-scope.js'\n\nexport type UnauthenticatedOutput = {\n  credentials: null\n}\n\nexport type AdminTokenOutput = {\n  credentials: {\n    type: 'admin_token'\n  }\n}\n\nexport type ModServiceOutput = {\n  credentials: {\n    type: 'mod_service'\n    did: DidString\n  }\n}\n\nexport type AccessOutput<S extends AuthScope = AuthScope> = {\n  credentials: {\n    type: 'access'\n    did: DidString\n    scope: S\n  }\n}\n\nexport type OAuthOutput = {\n  credentials: {\n    type: 'oauth'\n    did: DidString\n    permissions: ScopePermissions\n  }\n}\n\nexport type RefreshOutput = {\n  credentials: {\n    type: 'refresh'\n    did: DidString\n    scope: AuthScope.Refresh\n    tokenId: string\n  }\n}\n\nexport type UserServiceAuthOutput = {\n  credentials: {\n    type: 'user_service_auth'\n    did: DidString\n  }\n}\n"]}

package/dist/auth-routes.js

@@ -1,12 +1,9 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createRouter = void 0;
-const express_1 = require("express");
-const oauth_provider_1 = require("@atproto/oauth-provider");
-const logger_js_1 = require("./logger.js");
-const createRouter = ({ oauthProvider, cfg }) => {
-    const router = (0, express_1.Router)();
-    const oauthProtectedResourceMetadata = oauth_provider_1.oauthProtectedResourceMetadataSchema.parse({
+import { Router } from 'express';
+import { HandleUnavailableError, InvalidRequestError, SecondAuthenticationFactorRequiredError, UseDpopNonceError, oauthMiddleware, oauthProtectedResourceMetadataSchema, } from '@atproto/oauth-provider';
+import { oauthLogger, reqSerializer } from './logger.js';
+export const createRouter = ({ oauthProvider, cfg }) => {
+    const router = Router();
+    const oauthProtectedResourceMetadata = oauthProtectedResourceMetadataSchema.parse({
         resource: cfg.service.publicUrl,
         authorization_servers: [cfg.entryway?.url ?? cfg.service.publicUrl],
         bearer_methods_supported: ['header'],
@@ -24,23 +21,22 @@ const createRouter = ({ oauthProvider, cfg }) => {
         res.status(200).json(oauthProtectedResourceMetadata);
     });
     if (oauthProvider) {
-        router.use((0, oauth_provider_1.oauthMiddleware)(oauthProvider, {
+        router.use(oauthMiddleware(oauthProvider, {
             onError: (req, res, err, msg) => {
                 if (!ignoreError(err)) {
-                    logger_js_1.oauthLogger.error({ err, req: (0, logger_js_1.reqSerializer)(req) }, msg);
+                    oauthLogger.error({ err, req: reqSerializer(req) }, msg);
                 }
             },
         }));
     }
     return router;
 };
-exports.createRouter = createRouter;
 function ignoreError(err) {
-    if (err instanceof oauth_provider_1.InvalidRequestError) {
+    if (err instanceof InvalidRequestError) {
         return err.error_description === 'Invalid identifier or password';
     }
-    return (err instanceof oauth_provider_1.UseDpopNonceError ||
-        err instanceof oauth_provider_1.HandleUnavailableError ||
-        err instanceof oauth_provider_1.SecondAuthenticationFactorRequiredError);
+    return (err instanceof UseDpopNonceError ||
+        err instanceof HandleUnavailableError ||
+        err instanceof SecondAuthenticationFactorRequiredError);
 }
 //# sourceMappingURL=auth-routes.js.map

package/dist/auth-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-routes.js","sourceRoot":"","sources":["../src/auth-routes.ts"],"names":[],"mappings":";;;AAAA,qCAAgC;AAChC,4DAOgC;AAEhC,2CAAwD;AAEjD,MAAM,YAAY,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,EAAc,EAAU,EAAE;IACzE,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAA;IAEvB,MAAM,8BAA8B,GAClC,qDAAoC,CAAC,KAAK,CAAC;QACzC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS;QAC/B,qBAAqB,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QACnE,wBAAwB,EAAE,CAAC,QAAQ,CAAC;QACpC,gBAAgB,EAAE,EAAE;QACpB,sBAAsB,EAAE,qBAAqB;KAC9C,CAAC,CAAA;IAEJ,IACE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO;QACpB,CAAC,8BAA8B,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAC/D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,uCAAuC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/D,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAA;QACjD,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAA;QACjD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAA;QAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,CACR,IAAA,gCAAe,EAAC,aAAa,EAAE;YAC7B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC9B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,uBAAW,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAA,yBAAa,EAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;gBAC1D,CAAC;YACH,CAAC;SACF,CAAC,CACH,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAvCY,QAAA,YAAY,gBAuCxB;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,GAAG,YAAY,oCAAmB,EAAE,CAAC;QACvC,OAAO,GAAG,CAAC,iBAAiB,KAAK,gCAAgC,CAAA;IACnE,CAAC;IAED,OAAO,CACL,GAAG,YAAY,kCAAiB;QAChC,GAAG,YAAY,uCAAsB;QACrC,GAAG,YAAY,wDAAuC,CACvD,CAAA;AACH,CAAC","sourcesContent":["import { Router } from 'express'\nimport {\n  HandleUnavailableError,\n  InvalidRequestError,\n  SecondAuthenticationFactorRequiredError,\n  UseDpopNonceError,\n  oauthMiddleware,\n  oauthProtectedResourceMetadataSchema,\n} from '@atproto/oauth-provider'\nimport { AppContext } from './context.js'\nimport { oauthLogger, reqSerializer } from './logger.js'\n\nexport const createRouter = ({ oauthProvider, cfg }: AppContext): Router => {\n  const router = Router()\n\n  const oauthProtectedResourceMetadata =\n    oauthProtectedResourceMetadataSchema.parse({\n      resource: cfg.service.publicUrl,\n      authorization_servers: [cfg.entryway?.url ?? cfg.service.publicUrl],\n      bearer_methods_supported: ['header'],\n      scopes_supported: [],\n      resource_documentation: 'https://atproto.com',\n    })\n\n  if (\n    !cfg.service.devMode &&\n    !oauthProtectedResourceMetadata.resource.startsWith('https://')\n  ) {\n    throw new Error('Resource URL must use the https scheme')\n  }\n\n  router.get('/.well-known/oauth-protected-resource', (req, res) => {\n    res.setHeader('Access-Control-Allow-Origin', '*')\n    res.setHeader('Access-Control-Allow-Method', '*')\n    res.setHeader('Access-Control-Allow-Headers', '*')\n    res.status(200).json(oauthProtectedResourceMetadata)\n  })\n\n  if (oauthProvider) {\n    router.use(\n      oauthMiddleware(oauthProvider, {\n        onError: (req, res, err, msg) => {\n          if (!ignoreError(err)) {\n            oauthLogger.error({ err, req: reqSerializer(req) }, msg)\n          }\n        },\n      }),\n    )\n  }\n\n  return router\n}\n\nfunction ignoreError(err: unknown): boolean {\n  if (err instanceof InvalidRequestError) {\n    return err.error_description === 'Invalid identifier or password'\n  }\n\n  return (\n    err instanceof UseDpopNonceError ||\n    err instanceof HandleUnavailableError ||\n    err instanceof SecondAuthenticationFactorRequiredError\n  )\n}\n"]}
+{"version":3,"file":"auth-routes.js","sourceRoot":"","sources":["../src/auth-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,uCAAuC,EACvC,iBAAiB,EACjB,eAAe,EACf,oCAAoC,GACrC,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAExD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,EAAc,EAAU,EAAE;IACzE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAA;IAEvB,MAAM,8BAA8B,GAClC,oCAAoC,CAAC,KAAK,CAAC;QACzC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS;QAC/B,qBAAqB,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QACnE,wBAAwB,EAAE,CAAC,QAAQ,CAAC;QACpC,gBAAgB,EAAE,EAAE;QACpB,sBAAsB,EAAE,qBAAqB;KAC9C,CAAC,CAAA;IAEJ,IACE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO;QACpB,CAAC,8BAA8B,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAC/D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,uCAAuC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/D,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAA;QACjD,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAA;QACjD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAA;QAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,CACR,eAAe,CAAC,aAAa,EAAE;YAC7B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC9B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;gBAC1D,CAAC;YACH,CAAC;SACF,CAAC,CACH,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;QACvC,OAAO,GAAG,CAAC,iBAAiB,KAAK,gCAAgC,CAAA;IACnE,CAAC;IAED,OAAO,CACL,GAAG,YAAY,iBAAiB;QAChC,GAAG,YAAY,sBAAsB;QACrC,GAAG,YAAY,uCAAuC,CACvD,CAAA;AACH,CAAC","sourcesContent":["import { Router } from 'express'\nimport {\n  HandleUnavailableError,\n  InvalidRequestError,\n  SecondAuthenticationFactorRequiredError,\n  UseDpopNonceError,\n  oauthMiddleware,\n  oauthProtectedResourceMetadataSchema,\n} from '@atproto/oauth-provider'\nimport { AppContext } from './context.js'\nimport { oauthLogger, reqSerializer } from './logger.js'\n\nexport const createRouter = ({ oauthProvider, cfg }: AppContext): Router => {\n  const router = Router()\n\n  const oauthProtectedResourceMetadata =\n    oauthProtectedResourceMetadataSchema.parse({\n      resource: cfg.service.publicUrl,\n      authorization_servers: [cfg.entryway?.url ?? cfg.service.publicUrl],\n      bearer_methods_supported: ['header'],\n      scopes_supported: [],\n      resource_documentation: 'https://atproto.com',\n    })\n\n  if (\n    !cfg.service.devMode &&\n    !oauthProtectedResourceMetadata.resource.startsWith('https://')\n  ) {\n    throw new Error('Resource URL must use the https scheme')\n  }\n\n  router.get('/.well-known/oauth-protected-resource', (req, res) => {\n    res.setHeader('Access-Control-Allow-Origin', '*')\n    res.setHeader('Access-Control-Allow-Method', '*')\n    res.setHeader('Access-Control-Allow-Headers', '*')\n    res.status(200).json(oauthProtectedResourceMetadata)\n  })\n\n  if (oauthProvider) {\n    router.use(\n      oauthMiddleware(oauthProvider, {\n        onError: (req, res, err, msg) => {\n          if (!ignoreError(err)) {\n            oauthLogger.error({ err, req: reqSerializer(req) }, msg)\n          }\n        },\n      }),\n    )\n  }\n\n  return router\n}\n\nfunction ignoreError(err: unknown): boolean {\n  if (err instanceof InvalidRequestError) {\n    return err.error_description === 'Invalid identifier or password'\n  }\n\n  return (\n    err instanceof UseDpopNonceError ||\n    err instanceof HandleUnavailableError ||\n    err instanceof SecondAuthenticationFactorRequiredError\n  )\n}\n"]}