@atproto/pds 0.4.34 → 0.4.36

package/dist/account-manager/helpers/authorization-request.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findByCodeQB = exports.removeByIdQB = exports.removeOldExpiredQB = exports.updateQB = exports.readQB = exports.createQB = exports.rowToFoundRequestResult = exports.rowToRequestData = void 0;
+const db_1 = require("../../db");
+const rowToRequestData = (row) => ({
+    clientId: row.clientId,
+    clientAuth: (0, db_1.fromJsonObject)(row.clientAuth),
+    parameters: (0, db_1.fromJsonObject)(row.parameters),
+    expiresAt: (0, db_1.fromDateISO)(row.expiresAt),
+    deviceId: row.deviceId,
+    sub: row.did,
+    code: row.code,
+});
+exports.rowToRequestData = rowToRequestData;
+const rowToFoundRequestResult = (row) => ({
+    id: row.id,
+    data: (0, exports.rowToRequestData)(row),
+});
+exports.rowToFoundRequestResult = rowToFoundRequestResult;
+const requestDataToRow = (id, data) => ({
+    id,
+    did: data.sub,
+    deviceId: data.deviceId,
+    clientId: data.clientId,
+    clientAuth: (0, db_1.toJsonObject)(data.clientAuth),
+    parameters: (0, db_1.toJsonObject)(data.parameters),
+    expiresAt: (0, db_1.toDateISO)(data.expiresAt),
+    code: data.code,
+});
+const createQB = (db, id, data) => db.db.insertInto('authorization_request').values(requestDataToRow(id, data));
+exports.createQB = createQB;
+const readQB = (db, id) => db.db.selectFrom('authorization_request').where('id', '=', id).selectAll();
+exports.readQB = readQB;
+const updateQB = (db, id, { code, sub, deviceId, expiresAt }) => db.db
+    .updateTable('authorization_request')
+    .if(code !== undefined, (qb) => qb.set({ code }))
+    .if(sub !== undefined, (qb) => qb.set({ did: sub }))
+    .if(deviceId !== undefined, (qb) => qb.set({ deviceId }))
+    .if(expiresAt != null, (qb) => qb.set({ expiresAt: (0, db_1.toDateISO)(expiresAt) }))
+    .where('id', '=', id);
+exports.updateQB = updateQB;
+const removeOldExpiredQB = (db, delay = 600e3) => 
+// We allow some delay for the expiration time so that expired requests
+// can still be returned to the OAuthProvider library for error handling.
+db.db
+    .deleteFrom('authorization_request')
+    // uses "authorization_request_expires_at_idx" index
+    .where('expiresAt', '<', (0, db_1.toDateISO)(new Date(Date.now() - delay)));
+exports.removeOldExpiredQB = removeOldExpiredQB;
+const removeByIdQB = (db, id) => db.db.deleteFrom('authorization_request').where('id', '=', id);
+exports.removeByIdQB = removeByIdQB;
+const findByCodeQB = (db, code) => db.db
+    .selectFrom('authorization_request')
+    // uses "authorization_request_code_idx" partial index (hence the null check)
+    .where('code', '=', code)
+    .where('code', 'is not', null)
+    .selectAll();
+exports.findByCodeQB = findByCodeQB;
+//# sourceMappingURL=authorization-request.js.map

package/dist/account-manager/helpers/authorization-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-request.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/authorization-request.ts"],"names":[],"mappings":";;;AAQA,iCAA+E;AAGxE,MAAM,gBAAgB,GAAG,CAC9B,GAAqC,EACxB,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ;IACtB,UAAU,EAAE,IAAA,mBAAc,EAAC,GAAG,CAAC,UAAU,CAAC;IAC1C,UAAU,EAAE,IAAA,mBAAc,EAAC,GAAG,CAAC,UAAU,CAAC;IAC1C,SAAS,EAAE,IAAA,gBAAW,EAAC,GAAG,CAAC,SAAS,CAAC;IACrC,QAAQ,EAAE,GAAG,CAAC,QAAQ;IACtB,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,IAAI,EAAE,GAAG,CAAC,IAAI;CACf,CAAC,CAAA;AAVW,QAAA,gBAAgB,oBAU3B;AAEK,MAAM,uBAAuB,GAAG,CACrC,GAAqC,EACjB,EAAE,CAAC,CAAC;IACxB,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,IAAI,EAAE,IAAA,wBAAgB,EAAC,GAAG,CAAC;CAC5B,CAAC,CAAA;AALW,QAAA,uBAAuB,2BAKlC;AAEF,MAAM,gBAAgB,GAAG,CACvB,EAAa,EACb,IAAiB,EACiB,EAAE,CAAC,CAAC;IACtC,EAAE;IACF,GAAG,EAAE,IAAI,CAAC,GAAG;IACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;IAEvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;IACvB,UAAU,EAAE,IAAA,iBAAY,EAAC,IAAI,CAAC,UAAU,CAAC;IACzC,UAAU,EAAE,IAAA,iBAAY,EAAC,IAAI,CAAC,UAAU,CAAC;IACzC,SAAS,EAAE,IAAA,cAAS,EAAC,IAAI,CAAC,SAAS,CAAC;IACpC,IAAI,EAAE,IAAI,CAAC,IAAI;CAChB,CAAC,CAAA;AAEK,MAAM,QAAQ,GAAG,CAAC,EAAa,EAAE,EAAa,EAAE,IAAiB,EAAE,EAAE,CAC1E,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;AADjE,QAAA,QAAQ,YACyD;AAEvE,MAAM,MAAM,GAAG,CAAC,EAAa,EAAE,EAAa,EAAE,EAAE,CACrD,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAA;AAD/D,QAAA,MAAM,UACyD;AAErE,MAAM,QAAQ,GAAG,CACtB,EAAa,EACb,EAAa,EACb,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAqB,EACrD,EAAE,CACF,EAAE,CAAC,EAAE;KACF,WAAW,CAAC,uBAAuB,CAAC;KACpC,EAAE,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;KAChD,EAAE,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;KACnD,EAAE,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;KACxD,EAAE,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAA,cAAS,EAAC,SAAU,CAAC,EAAE,CAAC,CAAC;KAC3E,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;AAXZ,QAAA,QAAQ,YAWI;AAElB,MAAM,kBAAkB,GAAG,CAAC,EAAa,EAAE,KAAK,GAAG,KAAK,EAAE,EAAE;AACjE,uEAAuE;AACvE,yEAAyE;AACzE,EAAE,CAAC,EAAE;KACF,UAAU,CAAC,uBAAuB,CAAC;IACpC,oDAAoD;KACnD,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAA,cAAS,EAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;AANxD,QAAA,kBAAkB,sBAMsC;AAE9D,MAAM,YAAY,GAAG,CAAC,EAAa,EAAE,EAAa,EAAE,EAAE,CAC3D,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;AADnD,QAAA,YAAY,gBACuC;AAEzD,MAAM,YAAY,GAAG,CAAC,EAAa,EAAE,IAAU,EAAE,EAAE,CACxD,EAAE,CAAC,EAAE;KACF,UAAU,CAAC,uBAAuB,CAAC;IACpC,6EAA6E;KAC5E,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;KACxB,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;KAC7B,SAAS,EAAE,CAAA;AANH,QAAA,YAAY,gBAMT"}

package/dist/account-manager/helpers/device-account.d.ts

@@ -0,0 +1,108 @@
+import { Account, DeviceAccountInfo, DeviceId, OAuthClientId } from '@atproto/oauth-provider';
+import { Selectable } from 'kysely';
+import { AccountDb } from '../db';
+import { DeviceAccount } from '../db/schema/device-account';
+import { ActorAccount } from './account';
+export type SelectableDeviceAccount = Pick<Selectable<DeviceAccount>, 'authenticatedAt' | 'authorizedClients' | 'remember'>;
+export type InsertableField = {
+    authenticatedAt: Date;
+    authorizedClients: OAuthClientId[];
+    remember: boolean;
+};
+export declare function toDeviceAccountInfo(row: SelectableDeviceAccount): DeviceAccountInfo;
+export declare function toAccount(row: Selectable<ActorAccount>, audience: string): Account;
+export declare const readQB: (db: AccountDb, deviceId: DeviceId, did: string) => import("kysely/dist/cjs/parser/select-parser").QueryBuilderWithSelection<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "device_account">, "device_account", {}, "authenticatedAt" | "remember" | "authorizedClients">;
+export declare const updateQB: (db: AccountDb, deviceId: DeviceId, did: string, entry: {
+    authenticatedAt?: Date;
+    authorizedClients?: OAuthClientId[];
+    remember?: boolean;
+}) => import("kysely").UpdateQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "device_account">, "device_account", "device_account", import("kysely").UpdateResult>;
+export declare const createOrUpdateQB: (db: AccountDb, deviceId: DeviceId, did: string, remember: boolean) => import("kysely").InsertQueryBuilder<import("../db").DatabaseSchema, "device_account", import("kysely").InsertResult>;
+export declare const getAccountInfoQB: (db: AccountDb, deviceId: DeviceId, did: string) => import("kysely").SelectQueryBuilder<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: import("../db").Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor" | "device" | "device_account", Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: import("../db").Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: import("../db").Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor" | "device" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients">>;
+export declare const listRememberedQB: (db: AccountDb, deviceId: DeviceId) => import("kysely").SelectQueryBuilder<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: import("../db").Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor" | "device" | "device_account", Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: import("../db").Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: import("../db").Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor" | "device" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients">>;
+export declare const removeQB: (db: AccountDb, deviceId: DeviceId, did: string) => import("kysely").DeleteQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "device_account">, "device_account", import("kysely").DeleteResult>;
+//# sourceMappingURL=device-account.d.ts.map

package/dist/account-manager/helpers/device-account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-account.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/device-account.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACd,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAc,UAAU,EAAE,MAAM,QAAQ,CAAA;AAG/C,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAmB,MAAM,WAAW,CAAA;AAEzD,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,UAAU,CAAC,aAAa,CAAC,EACzB,iBAAiB,GAAG,mBAAmB,GAAG,UAAU,CACrD,CAAA;AAcD,MAAM,MAAM,eAAe,GAAG;IAC5B,eAAe,EAAE,IAAI,CAAA;IACrB,iBAAiB,EAAE,aAAa,EAAE,CAAA;IAClC,QAAQ,EAAE,OAAO,CAAA;CAClB,CAAA;AAqBD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,uBAAuB,GAC3B,iBAAiB,CAMnB;AAED,wBAAgB,SAAS,CACvB,GAAG,EAAE,UAAU,CAAC,YAAY,CAAC,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO,CAQT;AAED,eAAO,MAAM,MAAM,4BAA6B,QAAQ,OAAO,MAAM,+PAKJ,CAAA;AAEjE,eAAO,MAAM,QAAQ,4BAET,QAAQ,OACb,MAAM,SACJ;IACL,eAAe,CAAC,EAAE,IAAI,CAAA;IACtB,iBAAiB,CAAC,EAAE,aAAa,EAAE,CAAA;IACnC,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,iNAMkC,CAAA;AAErC,eAAO,MAAM,gBAAgB,4BAEjB,QAAQ,OACb,MAAM,YACD,OAAO,yHAYlB,CAAA;AAED,eAAO,MAAM,gBAAgB,4BAEjB,QAAQ,OACb,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yJAGZ,CAAA;AAED,eAAO,MAAM,gBAAgB,4BAA6B,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yJACU,CAAA;AAE5E,eAAO,MAAM,QAAQ,4BAA6B,QAAQ,OAAO,MAAM,+LAI5C,CAAA"}

package/dist/account-manager/helpers/device-account.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removeQB = exports.listRememberedQB = exports.getAccountInfoQB = exports.createOrUpdateQB = exports.updateQB = exports.readQB = exports.toAccount = exports.toDeviceAccountInfo = void 0;
+const db_1 = require("../../db");
+const account_1 = require("./account");
+const selectAccountInfoQB = (db, deviceId) => (0, account_1.selectAccountQB)(db, { includeDeactivated: true })
+    // note: query planner should use "device_account_pk" index
+    .innerJoin('device_account', 'device_account.did', 'actor.did')
+    .innerJoin('device', 'device.id', 'device_account.deviceId')
+    .where('device.id', '=', deviceId)
+    .select([
+    'device_account.authenticatedAt',
+    'device_account.remember',
+    'device_account.authorizedClients',
+]);
+function toInsertable(values) {
+    const row = {};
+    if (values.authenticatedAt) {
+        row.authenticatedAt = (0, db_1.toDateISO)(values.authenticatedAt);
+    }
+    if (values.remember !== undefined) {
+        row.remember = values.remember === true ? 1 : 0;
+    }
+    if (values.authorizedClients) {
+        row.authorizedClients = (0, db_1.toJsonArray)(values.authorizedClients);
+    }
+    return row;
+}
+function toDeviceAccountInfo(row) {
+    return {
+        remembered: row.remember === 1,
+        authenticatedAt: (0, db_1.fromDateISO)(row.authenticatedAt),
+        authorizedClients: (0, db_1.fromJsonArray)(row.authorizedClients),
+    };
+}
+exports.toDeviceAccountInfo = toDeviceAccountInfo;
+function toAccount(row, audience) {
+    return {
+        sub: row.did,
+        aud: audience,
+        email: row.email || undefined,
+        email_verified: row.email ? row.emailConfirmedAt != null : undefined,
+        preferred_username: row.handle || undefined,
+    };
+}
+exports.toAccount = toAccount;
+const readQB = (db, deviceId, did) => db.db
+    .selectFrom('device_account')
+    .where('did', '=', did)
+    .where('deviceId', '=', deviceId)
+    .select(['remember', 'authorizedClients', 'authenticatedAt']);
+exports.readQB = readQB;
+const updateQB = (db, deviceId, did, entry) => db.db
+    .updateTable('device_account')
+    .set(toInsertable(entry))
+    .where('did', '=', did)
+    .where('deviceId', '=', deviceId);
+exports.updateQB = updateQB;
+const createOrUpdateQB = (db, deviceId, did, remember) => {
+    const { authorizedClients, ...values } = toInsertable({
+        remember,
+        authenticatedAt: new Date(),
+        authorizedClients: [],
+    });
+    return db.db
+        .insertInto('device_account')
+        .values({ did, deviceId, authorizedClients, ...values })
+        .onConflict((oc) => oc.columns(['deviceId', 'did']).doUpdateSet(values));
+};
+exports.createOrUpdateQB = createOrUpdateQB;
+const getAccountInfoQB = (db, deviceId, did) => {
+    return selectAccountInfoQB(db, deviceId).where('actor.did', '=', did);
+};
+exports.getAccountInfoQB = getAccountInfoQB;
+const listRememberedQB = (db, deviceId) => selectAccountInfoQB(db, deviceId).where('device_account.remember', '=', 1);
+exports.listRememberedQB = listRememberedQB;
+const removeQB = (db, deviceId, did) => db.db
+    .deleteFrom('device_account')
+    .where('deviceId', '=', deviceId)
+    .where('did', '=', did);
+exports.removeQB = removeQB;
+//# sourceMappingURL=device-account.js.map

package/dist/account-manager/helpers/device-account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-account.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/device-account.ts"],"names":[],"mappings":";;;AAQA,iCAA6E;AAG7E,uCAAyD;AAOzD,MAAM,mBAAmB,GAAG,CAAC,EAAa,EAAE,QAAkB,EAAE,EAAE,CAChE,IAAA,yBAAe,EAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAC/C,2DAA2D;KAC1D,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,CAAC;KAC9D,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,yBAAyB,CAAC;KAC3D,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC;KACjC,MAAM,CAAC;IACN,gCAAgC;IAChC,yBAAyB;IACzB,kCAAkC;CACnC,CAAC,CAAA;AAWN,SAAS,YAAY,CACnB,MAAgC;IAEhC,MAAM,GAAG,GAAuC,EAAE,CAAA;IAClD,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3B,GAAG,CAAC,eAAe,GAAG,IAAA,cAAS,EAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,GAAG,CAAC,iBAAiB,GAAG,IAAA,gBAAW,EAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAgB,mBAAmB,CACjC,GAA4B;IAE5B,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;QAC9B,eAAe,EAAE,IAAA,gBAAW,EAAC,GAAG,CAAC,eAAe,CAAC;QACjD,iBAAiB,EAAE,IAAA,kBAAa,EAAgB,GAAG,CAAC,iBAAiB,CAAC;KACvE,CAAA;AACH,CAAC;AARD,kDAQC;AAED,SAAgB,SAAS,CACvB,GAA6B,EAC7B,QAAgB;IAEhB,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS;QAC7B,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS;QACpE,kBAAkB,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;KAC5C,CAAA;AACH,CAAC;AAXD,8BAWC;AAEM,MAAM,MAAM,GAAG,CAAC,EAAa,EAAE,QAAkB,EAAE,GAAW,EAAE,EAAE,CACvE,EAAE,CAAC,EAAE;KACF,UAAU,CAAC,gBAAgB,CAAC;KAC5B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;KACtB,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC;KAChC,MAAM,CAAC,CAAC,UAAU,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,CAAC,CAAA;AALpD,QAAA,MAAM,UAK8C;AAE1D,MAAM,QAAQ,GAAG,CACtB,EAAa,EACb,QAAkB,EAClB,GAAW,EACX,KAIC,EACD,EAAE,CACF,EAAE,CAAC,EAAE;KACF,WAAW,CAAC,gBAAgB,CAAC;KAC7B,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;KACxB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;KACtB,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;AAdxB,QAAA,QAAQ,YAcgB;AAE9B,MAAM,gBAAgB,GAAG,CAC9B,EAAa,EACb,QAAkB,EAClB,GAAW,EACX,QAAiB,EACjB,EAAE;IACF,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC;QACpD,QAAQ;QACR,eAAe,EAAE,IAAI,IAAI,EAAE;QAC3B,iBAAiB,EAAE,EAAE;KACtB,CAAC,CAAA;IAEF,OAAO,EAAE,CAAC,EAAE;SACT,UAAU,CAAC,gBAAgB,CAAC;SAC5B,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,MAAM,EAAE,CAAC;SACvD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;AAC5E,CAAC,CAAA;AAhBY,QAAA,gBAAgB,oBAgB5B;AAEM,MAAM,gBAAgB,GAAG,CAC9B,EAAa,EACb,QAAkB,EAClB,GAAW,EACX,EAAE;IACF,OAAO,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AACvE,CAAC,CAAA;AANY,QAAA,gBAAgB,oBAM5B;AAEM,MAAM,gBAAgB,GAAG,CAAC,EAAa,EAAE,QAAkB,EAAE,EAAE,CACpE,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;AAD/D,QAAA,gBAAgB,oBAC+C;AAErE,MAAM,QAAQ,GAAG,CAAC,EAAa,EAAE,QAAkB,EAAE,GAAW,EAAE,EAAE,CACzE,EAAE,CAAC,EAAE;KACF,UAAU,CAAC,gBAAgB,CAAC;KAC5B,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC;KAChC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AAJd,QAAA,QAAQ,YAIM"}

package/dist/account-manager/helpers/device.d.ts

@@ -0,0 +1,9 @@
+import { DeviceId, DeviceData } from '@atproto/oauth-provider';
+import { AccountDb, Device } from '../db';
+import { Selectable } from 'kysely';
+export declare const rowToDeviceData: (row: Selectable<Device>) => DeviceData;
+export declare const createQB: (db: AccountDb, deviceId: DeviceId, { sessionId, userAgent, ipAddress, lastSeenAt }: DeviceData) => import("kysely").InsertQueryBuilder<import("../db").DatabaseSchema, "device", import("kysely").InsertResult>;
+export declare const readQB: (db: AccountDb, deviceId: DeviceId) => import("kysely/dist/cjs/parser/select-parser").SelectAllQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "device">, "device", {}, "device">;
+export declare const updateQB: (db: AccountDb, deviceId: DeviceId, { sessionId, userAgent, ipAddress, lastSeenAt }: Partial<DeviceData>) => import("kysely").UpdateQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "device">, "device", "device", import("kysely").UpdateResult>;
+export declare const removeQB: (db: AccountDb, deviceId: DeviceId) => import("kysely").DeleteQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "device">, "device", import("kysely").DeleteResult>;
+//# sourceMappingURL=device.d.ts.map

package/dist/account-manager/helpers/device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/device.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAA;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAEnC,eAAO,MAAM,eAAe,QAAS,WAAW,MAAM,CAAC,KAAG,UAKxD,CAAA;AAEF,eAAO,MAAM,QAAQ,4BAET,QAAQ,mDAC+B,UAAU,iHAQzD,CAAA;AAEJ,eAAO,MAAM,MAAM,4BAA6B,QAAQ,+LACW,CAAA;AAEnE,eAAO,MAAM,QAAQ,4BAET,QAAQ,mDAC+B,QAAQ,UAAU,CAAC,yLAUvC,CAAA;AAE/B,eAAO,MAAM,QAAQ,4BAA6B,QAAQ,+KACH,CAAA"}

package/dist/account-manager/helpers/device.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removeQB = exports.updateQB = exports.readQB = exports.createQB = exports.rowToDeviceData = void 0;
+const db_1 = require("../../db");
+const rowToDeviceData = (row) => ({
+    sessionId: row.sessionId,
+    userAgent: row.userAgent,
+    ipAddress: row.ipAddress,
+    lastSeenAt: (0, db_1.fromDateISO)(row.lastSeenAt),
+});
+exports.rowToDeviceData = rowToDeviceData;
+const createQB = (db, deviceId, { sessionId, userAgent, ipAddress, lastSeenAt }) => db.db.insertInto('device').values({
+    id: deviceId,
+    sessionId,
+    userAgent,
+    ipAddress,
+    lastSeenAt: (0, db_1.toDateISO)(lastSeenAt),
+});
+exports.createQB = createQB;
+const readQB = (db, deviceId) => db.db.selectFrom('device').where('id', '=', deviceId).selectAll();
+exports.readQB = readQB;
+const updateQB = (db, deviceId, { sessionId, userAgent, ipAddress, lastSeenAt }) => db.db
+    .updateTable('device')
+    .if(sessionId != null, (qb) => qb.set({ sessionId }))
+    .if(userAgent != null, (qb) => qb.set({ userAgent }))
+    .if(ipAddress != null, (qb) => qb.set({ ipAddress }))
+    .if(lastSeenAt != null, (qb) => qb.set({ lastSeenAt: (0, db_1.toDateISO)(lastSeenAt) }))
+    .where('id', '=', deviceId);
+exports.updateQB = updateQB;
+const removeQB = (db, deviceId) => db.db.deleteFrom('device').where('id', '=', deviceId);
+exports.removeQB = removeQB;
+//# sourceMappingURL=device.js.map

package/dist/account-manager/helpers/device.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/device.ts"],"names":[],"mappings":";;;AAEA,iCAAiD;AAG1C,MAAM,eAAe,GAAG,CAAC,GAAuB,EAAc,EAAE,CAAC,CAAC;IACvE,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,UAAU,EAAE,IAAA,gBAAW,EAAC,GAAG,CAAC,UAAU,CAAC;CACxC,CAAC,CAAA;AALW,QAAA,eAAe,mBAK1B;AAEK,MAAM,QAAQ,GAAG,CACtB,EAAa,EACb,QAAkB,EAClB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAc,EAC3D,EAAE,CACF,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,QAAQ;IACZ,SAAS;IACT,SAAS;IACT,SAAS;IACT,UAAU,EAAE,IAAA,cAAS,EAAC,UAAU,CAAC;CAClC,CAAC,CAAA;AAXS,QAAA,QAAQ,YAWjB;AAEG,MAAM,MAAM,GAAG,CAAC,EAAa,EAAE,QAAkB,EAAE,EAAE,CAC1D,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAA;AADtD,QAAA,MAAM,UACgD;AAE5D,MAAM,QAAQ,GAAG,CACtB,EAAa,EACb,QAAkB,EAClB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAuB,EACpE,EAAE,CACF,EAAE,CAAC,EAAE;KACF,WAAW,CAAC,QAAQ,CAAC;KACrB,EAAE,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;KACpD,EAAE,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;KACpD,EAAE,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;KACpD,EAAE,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAC7B,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAA,cAAS,EAAC,UAAW,CAAC,EAAE,CAAC,CAC/C;KACA,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;AAblB,QAAA,QAAQ,YAaU;AAExB,MAAM,QAAQ,GAAG,CAAC,EAAa,EAAE,QAAkB,EAAE,EAAE,CAC5D,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;AAD1C,QAAA,QAAQ,YACkC"}