@atproto/pds 0.5.24 → 0.5.26

package/dist/config/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAKnD,OAAO,EAAkB,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAK5E,iCAAiC;AACjC,gEAAgE;AAEhE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAsB,EAAgB,EAAE;IAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,CAAA;IAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAA;IAC5C,MAAM,SAAS,GACb,QAAQ,KAAK,WAAW;QACtB,CAAC,CAAC,oBAAoB,IAAI,EAAE;QAC5B,CAAC,CAAC,WAAW,QAAQ,EAAE,CAAA;IAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,IAAI,WAAW,QAAQ,EAAE,CAAA;IAEnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAA;IAChD,CAAC;IAED,MAAM,UAAU,GAA4B;QAC1C,IAAI;QACJ,QAAQ;QACR,SAAS;QACT,GAAG;QACH,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW;QACjC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI;QAC9C,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,MAAM;QAC/D,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,KAAK;KAC9B,CAAA;IAED,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,OAAO,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtE,CAAC,CAAA;IAED,MAAM,wBAAwB,GAAG,GAAG,CAAC,wBAAwB,IAAI,KAAK,CAAA;IAEtE,MAAM,KAAK,GAAuB;QAChC,YAAY,EAAE,GAAG,CAAC,iBAAiB,IAAI,KAAK,CAAC,gBAAgB,CAAC;QAC9D,cAAc,EAAE,GAAG,CAAC,mBAAmB,IAAI,KAAK,CAAC,kBAAkB,CAAC;QACpE,aAAa,EAAE,GAAG,CAAC,kBAAkB,IAAI,KAAK,CAAC,kBAAkB,CAAC;QAClE,wBAAwB;KACzB,CAAA;IAED,MAAM,aAAa,GAA+B;QAChD,SAAS,EAAE,GAAG,CAAC,mBAAmB,IAAI,KAAK,CAAC,QAAQ,CAAC;QACrD,SAAS,EAAE,GAAG,CAAC,mBAAmB,IAAI,GAAG;QACzC,wBAAwB;KACzB,CAAA;IAED,IAAI,YAAuC,CAAA;IAC3C,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC1B,YAAY,GAAG;YACb,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,iBAAiB;YAC7B,eAAe,EAAE,GAAG,CAAC,0BAA0B,IAAI,KAAK;YACxD,gBAAgB,EAAE,GAAG,CAAC,2BAA2B;YACjD,MAAM,EAAE,GAAG,CAAC,iBAAiB;YAC7B,QAAQ,EAAE,GAAG,CAAC,mBAAmB;YACjC,cAAc,EAAE,GAAG,CAAC,yBAAyB;SAC9C,CAAA;QACD,IAAI,GAAG,CAAC,sBAAsB,IAAI,GAAG,CAAC,0BAA0B,EAAE,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC;gBACnE,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAA;YACH,CAAC;YACD,YAAY,CAAC,WAAW,GAAG;gBACzB,WAAW,EAAE,GAAG,CAAC,sBAAsB;gBACvC,eAAe,EAAE,GAAG,CAAC,0BAA0B;aAChD,CAAA;QACH,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;QACrC,YAAY,GAAG;YACb,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,GAAG,CAAC,qBAAqB;YACnC,YAAY,EAAE,GAAG,CAAC,wBAAwB;SAC3C,CAAA;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC/D,CAAC;IAED,2FAA2F;IAC3F,IAAI,oBAA8B,CAAA;IAClC,IAAI,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,oBAAoB,GAAG,GAAG,CAAC,oBAAoB,CAAA;IACjD,CAAC;SAAM,CAAC;QACN,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,oBAAoB,GAAG,CAAC,OAAO,CAAC,CAAA;QAClC,CAAC;aAAM,CAAC;YACN,oBAAoB,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,oBAAoB,CAAC,IAAI,CAC7C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CACzD,CAAA;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,0BAA0B,aAAa,EAAE,CAAC,CAAA;IAC5D,CAAC;IAED,MAAM,WAAW,GAA6B;QAC5C,MAAM,EAAE,GAAG,CAAC,SAAS,IAAI,uBAAuB;QAChD,WAAW,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG;QACtC,aAAa,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI;QAC3C,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,CAAC,GAAG,MAAM;QAClD,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;QAC1C,oBAAoB;QACpB,uBAAuB,EAAE,GAAG,CAAC,uBAAuB;QACpD,uBAAuB,EAAE,CAAC,CAAC,GAAG,CAAC,uBAAuB;KACvD,CAAA;IAED,IAAI,WAAW,GAA6B,IAAI,CAAA;IAChD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,MAAM,CACJ,GAAG,CAAC,oCAAoC;YACtC,GAAG,CAAC,sBAAsB;YAC1B,GAAG,CAAC,WAAW,EACjB,iFAAiF,CAClF,CAAA;QACD,WAAW,GAAG;YACZ,GAAG,EAAE,GAAG,CAAC,WAAW;YACpB,GAAG,EAAE,GAAG,CAAC,WAAW;YACpB,eAAe,EAAE,GAAG,CAAC,oCAAoC;YACzD,cAAc,EAAE,GAAG,CAAC,sBAAsB;SAC3C,CAAA;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,UAAU,GACd,GAAG,CAAC,cAAc,KAAK,KAAK;QAC1B,CAAC,CAAC;YACE,QAAQ,EAAE,KAAK;SAChB;QACH,CAAC,CAAC;YACE,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;YACpC,KAAK,EAAE,GAAG,CAAC,WAAW,IAAI,CAAC;SAC5B,CAAA;IAEP,IAAI,QAA+B,CAAA;IACnC,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC/C,QAAQ,GAAG,IAAI,CAAA;IACjB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAA;QACH,CAAC;QACD,QAAQ,GAAG;YACT,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,WAAW,EAAE,GAAG,CAAC,gBAAgB;YACjC,uBAAuB,EAAE,GAAG,CAAC,4BAA4B,IAAI,KAAK;SACnE,CAAA;IACH,CAAC;IAED,IAAI,kBAAmD,CAAA;IACvD,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAC/D,kBAAkB,GAAG,IAAI,CAAA;IAC3B,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAA;QACH,CAAC;QACD,kBAAkB,GAAG;YACnB,OAAO,EAAE,GAAG,CAAC,sBAAsB;YACnC,WAAW,EAAE,GAAG,CAAC,sBAAsB;YACvC,uBAAuB,EAAE,KAAK;SAC/B,CAAA;IACH,CAAC;IAED,MAAM,eAAe,GAAiC;QACpD,SAAS,EAAE,GAAG,CAAC,qBAAqB,IAAI,GAAG;QAC3C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,GAAG;KACpD,CAAA;IAED,IAAI,cAAc,GAAgC,IAAI,CAAA;IACtD,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvB,MAAM,CACJ,GAAG,CAAC,cAAc,EAClB,4EAA4E,CAC7E,CAAA;QACD,cAAc,GAAG;YACf,GAAG,EAAE,GAAG,CAAC,cAAc;YACvB,GAAG,EAAE,GAAG,CAAC,cAAc;YACvB,aAAa,EAAE,GAAG,CAAC,wBAAwB;SAC5C,CAAA;IACH,CAAC;IAED,IAAI,aAAa,GAA+B,IAAI,CAAA;IACpD,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;QACtB,MAAM,CACJ,GAAG,CAAC,aAAa,EACjB,mEAAmE,CACpE,CAAA;QACD,aAAa,GAAG;YACd,GAAG,EAAE,GAAG,CAAC,aAAa;YACtB,GAAG,EAAE,GAAG,CAAC,aAAa;SACvB,CAAA;IACH,CAAC;IAED,IAAI,gBAAgB,GAAkC,IAAI,CAAA;IAC1D,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,MAAM,CACJ,GAAG,CAAC,gBAAgB,EACpB,sEAAsE,CACvE,CAAA;QACD,gBAAgB,GAAG;YACjB,GAAG,EAAE,GAAG,CAAC,gBAAgB;YACzB,GAAG,EAAE,GAAG,CAAC,gBAAgB;SAC1B,CAAA;IACH,CAAC;IAED,2DAA2D;IAC3D,IAAI,aAAa,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvC,gBAAgB,GAAG,aAAa,CAAA;IAClC,CAAC;IAED,MAAM,QAAQ,GAA0B,GAAG,CAAC,mBAAmB;QAC7D,CAAC,CAAC;YACE,OAAO,EAAE,GAAG,CAAC,mBAAmB;YAChC,QAAQ,EAAE,GAAG,CAAC,oBAAoB;SACnC;QACH,CAAC,CAAC,IAAI,CAAA;IAER,MAAM,aAAa,GAA+B,GAAG,CAAC,iBAAiB;QACrE,CAAC,CAAC;YACE,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,GAAG,CAAC,kBAAkB;YACjC,SAAS,EAAE,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAClD,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAC/B;SACF;QACH,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAEtB,MAAM,WAAW,GAA6B,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAA;IAEhE,MAAM,QAAQ,GAA0B;QACtC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,OAAO,IAAI,KAAK;QACxE,eAAe,EAAE,GAAG,CAAC,oBAAoB,IAAI,GAAG,GAAG,IAAI,EAAE,QAAQ;KAClE,CAAA;IAED,MAAM,QAAQ,GAA0B;QACtC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,OAAO,IAAI,KAAK;QACxE,UAAU,EAAE,GAAG,CAAC,eAAe,IAAI,KAAK;QACxC,cAAc,EAAE,GAAG,CAAC,mBAAmB,IAAI,IAAI;QAC/C,WAAW,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI;QACzC,eAAe,EAAE,GAAG,CAAC,oBAAoB,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;QACtE,UAAU,EACR,GAAG,CAAC,eAAe,IAAI,IAAI,IAAI,GAAG,CAAC,eAAe,GAAG,CAAC;YACpD,CAAC,CAAC,GAAG,CAAC,eAAe;YACrB,CAAC,CAAC,CAAC;QACP,gBAAgB,EAAE,GAAG,CAAC,qBAAqB,IAAI,KAAK;KACrD,CAAA;IAED,MAAM,WAAW,GAAG;QAClB,IAAI,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,QAAQ,MAAM;QAC1C,IAAI,EAAE,GAAG,CAAC,OAAO;QACjB,MAAM,EAAE;YACN,KAAK,EAAE,GAAG,CAAC,UAAU;YACrB,IAAI,EAAE,GAAG,CAAC,SAAS;YAEnB,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;YAE1C,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,eAAe,EAAE,GAAG,CAAC,oBAAoB;YACzC,UAAU,EAAE,GAAG,CAAC,eAAe;YAE/B,KAAK,EAAE,GAAG,CAAC,UAAU;YACrB,aAAa,EAAE,GAAG,CAAC,kBAAkB;YACrC,QAAQ,EAAE,GAAG,CAAC,aAAa;YAE3B,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,eAAe,EAAE,GAAG,CAAC,oBAAoB;YACzC,UAAU,EAAE,GAAG,CAAC,eAAe;YAE/B,IAAI,EAAE,GAAG,CAAC,SAAS;YACnB,YAAY,EAAE,GAAG,CAAC,iBAAiB;YACnC,OAAO,EAAE,GAAG,CAAC,YAAY;YAEzB,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,eAAe,EAAE,GAAG,CAAC,oBAAoB;YACzC,UAAU,EAAE,GAAG,CAAC,eAAe;SAChC;QACD,KAAK,EAAE;YACL;gBACE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE;gBACpC,IAAI,EAAE,GAAG,CAAC,OAAO;gBACjB,GAAG,EAAE,WAAoB,EAAE,yCAAyC;aACrE;YACD;gBACE,KAAK,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE;gBACjC,IAAI,EAAE,GAAG,CAAC,iBAAiB;gBAC3B,GAAG,EAAE,kBAA2B;aACjC;YACD;gBACE,KAAK,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE;gBAC/B,IAAI,EAAE,GAAG,CAAC,gBAAgB;gBAC1B,GAAG,EAAE,gBAAyB;aAC/B;YACD;gBACE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE;gBACxB,IAAI,EAAE,GAAG,CAAC,UAAU;gBACpB,GAAG,EAAE,MAAe;aACrB;SACF,CAAC,MAAM,CACN,CAA8B,CAAI,EAA6B,EAAE,CAC/D,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAClC;KACF,CAAA;IAED,MAAM,QAAQ,GAA0B,WAAW;QACjD,CAAC,CAAC;YACE,MAAM,EAAE,WAAW,CAAC,GAAG;YACvB,QAAQ,EAAE,SAAS;SACpB;QACH,CAAC,CAAC;YACE,MAAM,EAAE,UAAU,CAAC,SAAS;YAC5B,QAAQ,EAAE;gBACR,QAAQ,EACN,GAAG,CAAC,eAAe;oBACnB,GAAG,CAAC,iBAAiB;oBACrB,GAAG,CAAC,iBAAiB;oBACnB,CAAC,CAAC;wBACE,OAAO,EAAE,GAAG,CAAC,eAAe;wBAC5B,SAAS,EAAE,GAAG,CAAC,iBAAiB;wBAChC,SAAS,EAAE,GAAG,CAAC,iBAAiB;qBACjC;oBACH,CAAC,CAAC,SAAS;gBACf,QAAQ,EAAE,WAAW;gBACrB,cAAc,EAAE,GAAG,CAAC,mBAAmB;aACxC;SACF,CAAA;IAEL,MAAM,UAAU,GAA0B,EAAE,CAAA;IAE5C,IAAI,GAAG,CAAC,mBAAmB,IAAI,IAAI,EAAE,CAAC;QACpC,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QACvC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,mBAAmB,CAAA;IACnD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,EAAE,EAAE,KAAK;QACT,UAAU,EAAE,aAAa;QACzB,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,QAAQ;QACf,eAAe,EAAE,kBAAkB;QACnC,YAAY,EAAE,eAAe;QAC7B,WAAW,EAAE,cAAc;QAC3B,UAAU,EAAE,aAAa;QACzB,aAAa,EAAE,gBAAgB;QAC/B,KAAK,EAAE,QAAQ;QACf,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,QAAQ;KAChB,CAAA;AACH,CAAC,CAAA","sourcesContent":["import assert from 'node:assert'\nimport path from 'node:path'\nimport { DAY, HOUR, SECOND } from '@atproto/common'\nimport type {\n  BrandingConfig,\n  HcaptchaConfig,\n} from '@atproto/oauth-provider/provider'\nimport { type DidString, ensureValidDid, isValidDid } from '@atproto/syntax'\nimport type { ServerEnvironment } from './env.js'\n\nexport type { BrandingConfig }\n\n// off-config but still from env:\n// logging: LOG_LEVEL, LOG_SYSTEMS, LOG_ENABLED, LOG_DESTINATION\n\nexport const envToCfg = (env: ServerEnvironment): ServerConfig => {\n  const port = env.port ?? 2583\n  const hostname = env.hostname ?? 'localhost'\n  const publicUrl =\n    hostname === 'localhost'\n      ? `http://localhost:${port}`\n      : `https://${hostname}`\n  const did = env.serviceDid ?? `did:web:${hostname}`\n\n  if (!isValidDid(did)) {\n    throw new Error(`Invalid service DID: ${did}`)\n  }\n\n  const serviceCfg: ServerConfig['service'] = {\n    port,\n    hostname,\n    publicUrl,\n    did,\n    version: env.version, // default?\n    privacyPolicyUrl: env.privacyPolicyUrl,\n    termsOfServiceUrl: env.termsOfServiceUrl,\n    contactEmailAddress: env.contactEmailAddress,\n    acceptingImports: env.acceptingImports ?? true,\n    maxImportSize: env.maxImportSize,\n    blobUploadLimit: env.blobUploadLimit ?? 5 * 1024 * 1024, // 5mb\n    devMode: env.devMode ?? false,\n  }\n\n  const dbLoc = (name: string) => {\n    return env.dataDirectory ? path.join(env.dataDirectory, name) : name\n  }\n\n  const disableWalAutoCheckpoint = env.disableWalAutoCheckpoint ?? false\n\n  const dbCfg: ServerConfig['db'] = {\n    accountDbLoc: env.accountDbLocation ?? dbLoc('account.sqlite'),\n    sequencerDbLoc: env.sequencerDbLocation ?? dbLoc('sequencer.sqlite'),\n    didCacheDbLoc: env.didCacheDbLocation ?? dbLoc('did_cache.sqlite'),\n    disableWalAutoCheckpoint,\n  }\n\n  const actorStoreCfg: ServerConfig['actorStore'] = {\n    directory: env.actorStoreDirectory ?? dbLoc('actors'),\n    cacheSize: env.actorStoreCacheSize ?? 100,\n    disableWalAutoCheckpoint,\n  }\n\n  let blobstoreCfg: ServerConfig['blobstore']\n  if (env.blobstoreS3Bucket && env.blobstoreDiskLocation) {\n    throw new Error('Cannot set both S3 and disk blobstore env vars')\n  }\n  if (env.blobstoreS3Bucket) {\n    blobstoreCfg = {\n      provider: 's3',\n      bucket: env.blobstoreS3Bucket,\n      uploadTimeoutMs: env.blobstoreS3UploadTimeoutMs || 20000,\n      requestTimeoutMs: env.blobstoreS3RequestTimeoutMs,\n      region: env.blobstoreS3Region,\n      endpoint: env.blobstoreS3Endpoint,\n      forcePathStyle: env.blobstoreS3ForcePathStyle,\n    }\n    if (env.blobstoreS3AccessKeyId || env.blobstoreS3SecretAccessKey) {\n      if (!env.blobstoreS3AccessKeyId || !env.blobstoreS3SecretAccessKey) {\n        throw new Error(\n          'Must specify both S3 access key id and secret access key blobstore env vars',\n        )\n      }\n      blobstoreCfg.credentials = {\n        accessKeyId: env.blobstoreS3AccessKeyId,\n        secretAccessKey: env.blobstoreS3SecretAccessKey,\n      }\n    }\n  } else if (env.blobstoreDiskLocation) {\n    blobstoreCfg = {\n      provider: 'disk',\n      location: env.blobstoreDiskLocation,\n      tempLocation: env.blobstoreDiskTmpLocation,\n    }\n  } else {\n    throw new Error('Must configure either S3 or disk blobstore')\n  }\n\n  // @NOTE when behind an entryway, this should be configured to match the entryway's domains\n  let serviceHandleDomains: string[]\n  if (env.serviceHandleDomains && env.serviceHandleDomains.length > 0) {\n    serviceHandleDomains = env.serviceHandleDomains\n  } else {\n    if (hostname === 'localhost') {\n      serviceHandleDomains = ['.test']\n    } else {\n      serviceHandleDomains = [`.${hostname}`]\n    }\n  }\n  const invalidDomain = serviceHandleDomains.find(\n    (domain) => domain.length < 1 || !domain.startsWith('.'),\n  )\n  if (invalidDomain) {\n    throw new Error(`Invalid handle domain: ${invalidDomain}`)\n  }\n\n  const identityCfg: ServerConfig['identity'] = {\n    plcUrl: env.didPlcUrl ?? 'https://plc.directory',\n    cacheMaxTTL: env.didCacheMaxTTL ?? DAY,\n    cacheStaleTTL: env.didCacheStaleTTL ?? HOUR,\n    resolverTimeout: env.resolverTimeout ?? 3 * SECOND,\n    recoveryDidKey: env.recoveryDidKey ?? null,\n    serviceHandleDomains,\n    handleBackupNameservers: env.handleBackupNameservers,\n    enableDidDocWithSession: !!env.enableDidDocWithSession,\n  }\n\n  let entrywayCfg: ServerConfig['entryway'] = null\n  if (env.entrywayUrl) {\n    assert(\n      env.entrywayJwtVerifyKeyK256PublicKeyHex &&\n        env.entrywayPlcRotationKey &&\n        env.entrywayDid,\n      'if entryway url is configured, must include all required entryway configuration',\n    )\n    entrywayCfg = {\n      url: env.entrywayUrl,\n      did: env.entrywayDid,\n      jwtPublicKeyHex: env.entrywayJwtVerifyKeyK256PublicKeyHex,\n      plcRotationKey: env.entrywayPlcRotationKey,\n    }\n  }\n\n  // default to being required if left undefined\n  const invitesCfg: ServerConfig['invites'] =\n    env.inviteRequired === false\n      ? {\n          required: false,\n        }\n      : {\n          required: true,\n          interval: env.inviteInterval ?? null,\n          epoch: env.inviteEpoch ?? 0,\n        }\n\n  let emailCfg: ServerConfig['email']\n  if (!env.emailFromAddress && !env.emailSmtpUrl) {\n    emailCfg = null\n  } else {\n    if (!env.emailFromAddress || !env.emailSmtpUrl) {\n      throw new Error(\n        'Partial email config, must set both emailFromAddress and emailSmtpUrl',\n      )\n    }\n    emailCfg = {\n      smtpUrl: env.emailSmtpUrl,\n      fromAddress: env.emailFromAddress,\n      disableConfirmationLink: env.emailDisableConfirmationLink ?? false,\n    }\n  }\n\n  let moderationEmailCfg: ServerConfig['moderationEmail']\n  if (!env.moderationEmailAddress && !env.moderationEmailSmtpUrl) {\n    moderationEmailCfg = null\n  } else {\n    if (!env.moderationEmailAddress || !env.moderationEmailSmtpUrl) {\n      throw new Error(\n        'Partial moderation email config, must set both emailFromAddress and emailSmtpUrl',\n      )\n    }\n    moderationEmailCfg = {\n      smtpUrl: env.moderationEmailSmtpUrl,\n      fromAddress: env.moderationEmailAddress,\n      disableConfirmationLink: false,\n    }\n  }\n\n  const subscriptionCfg: ServerConfig['subscription'] = {\n    maxBuffer: env.maxSubscriptionBuffer ?? 500,\n    repoBackfillLimitMs: env.repoBackfillLimitMs ?? DAY,\n  }\n\n  let bskyAppViewCfg: ServerConfig['bskyAppView'] = null\n  if (env.bskyAppViewUrl) {\n    assert(\n      env.bskyAppViewDid,\n      'if bsky appview service url is configured, must configure its did as well.',\n    )\n    bskyAppViewCfg = {\n      url: env.bskyAppViewUrl,\n      did: env.bskyAppViewDid,\n      cdnUrlPattern: env.bskyAppViewCdnUrlPattern,\n    }\n  }\n\n  let modServiceCfg: ServerConfig['modService'] = null\n  if (env.modServiceUrl) {\n    assert(\n      env.modServiceDid,\n      'if mod service url is configured, must configure its did as well.',\n    )\n    modServiceCfg = {\n      url: env.modServiceUrl,\n      did: env.modServiceDid,\n    }\n  }\n\n  let reportServiceCfg: ServerConfig['reportService'] = null\n  if (env.reportServiceUrl) {\n    assert(\n      env.reportServiceDid,\n      'if report service url is configured, must configure its did as well.',\n    )\n    reportServiceCfg = {\n      url: env.reportServiceUrl,\n      did: env.reportServiceDid,\n    }\n  }\n\n  // if there's a mod service, default report service into it\n  if (modServiceCfg && !reportServiceCfg) {\n    reportServiceCfg = modServiceCfg\n  }\n\n  const redisCfg: ServerConfig['redis'] = env.redisScratchAddress\n    ? {\n        address: env.redisScratchAddress,\n        password: env.redisScratchPassword,\n      }\n    : null\n\n  const rateLimitsCfg: ServerConfig['rateLimits'] = env.rateLimitsEnabled\n    ? {\n        enabled: true,\n        bypassKey: env.rateLimitBypassKey,\n        bypassIps: env.rateLimitBypassIps?.map((ipOrCidr) =>\n          ipOrCidr.split('/')[0]?.trim(),\n        ),\n      }\n    : { enabled: false }\n\n  const crawlersCfg: ServerConfig['crawlers'] = env.crawlers ?? []\n\n  const fetchCfg: ServerConfig['fetch'] = {\n    disableSsrfProtection: env.disableSsrfProtection ?? env.devMode ?? false,\n    maxResponseSize: env.fetchMaxResponseSize ?? 512 * 1024, // 512kb\n  }\n\n  const proxyCfg: ServerConfig['proxy'] = {\n    disableSsrfProtection: env.disableSsrfProtection ?? env.devMode ?? false,\n    allowHTTP2: env.proxyAllowHTTP2 ?? false,\n    headersTimeout: env.proxyHeadersTimeout ?? 10e3,\n    bodyTimeout: env.proxyBodyTimeout ?? 30e3,\n    maxResponseSize: env.proxyMaxResponseSize ?? 10 * 1024 * 1024, // 10mb\n    maxRetries:\n      env.proxyMaxRetries != null && env.proxyMaxRetries > 0\n        ? env.proxyMaxRetries\n        : 0,\n    preferCompressed: env.proxyPreferCompressed ?? false,\n  }\n\n  const brandingCfg = {\n    name: env.serviceName ?? `${hostname} PDS`,\n    logo: env.logoUrl,\n    colors: {\n      light: env.lightColor,\n      dark: env.darkColor,\n\n      contrastSaturation: env.contrastSaturation,\n\n      primary: env.primaryColor,\n      primaryContrast: env.primaryColorContrast,\n      primaryHue: env.primaryColorHue,\n\n      error: env.errorColor,\n      errorContrast: env.errorColorContrast,\n      errorHue: env.errorColorHue,\n\n      warning: env.warningColor,\n      warningContrast: env.warningColorContrast,\n      warningHue: env.warningColorHue,\n\n      info: env.infoColor,\n      infoContrast: env.infoColorContrast,\n      infoHue: env.infoColorHue,\n\n      success: env.successColor,\n      successContrast: env.successColorContrast,\n      successHue: env.successColorHue,\n    },\n    links: [\n      {\n        title: { en: 'Home', fr: 'Accueil' },\n        href: env.homeUrl,\n        rel: 'canonical' as const, // Prevents login page from being indexed\n      },\n      {\n        title: { en: 'Terms of Service' },\n        href: env.termsOfServiceUrl,\n        rel: 'terms-of-service' as const,\n      },\n      {\n        title: { en: 'Privacy Policy' },\n        href: env.privacyPolicyUrl,\n        rel: 'privacy-policy' as const,\n      },\n      {\n        title: { en: 'Support' },\n        href: env.supportUrl,\n        rel: 'help' as const,\n      },\n    ].filter(\n      <T extends { href?: string }>(f: T): f is T & { href: string } =>\n        f.href != null && f.href !== '',\n    ),\n  }\n\n  const oauthCfg: ServerConfig['oauth'] = entrywayCfg\n    ? {\n        issuer: entrywayCfg.url,\n        provider: undefined,\n      }\n    : {\n        issuer: serviceCfg.publicUrl,\n        provider: {\n          hcaptcha:\n            env.hcaptchaSiteKey &&\n            env.hcaptchaSecretKey &&\n            env.hcaptchaTokenSalt\n              ? {\n                  siteKey: env.hcaptchaSiteKey,\n                  secretKey: env.hcaptchaSecretKey,\n                  tokenSalt: env.hcaptchaTokenSalt,\n                }\n              : undefined,\n          branding: brandingCfg,\n          trustedClients: env.trustedOAuthClients,\n        },\n      }\n\n  const lexiconCfg: LexiconResolverConfig = {}\n\n  if (env.lexiconDidAuthority != null) {\n    ensureValidDid(env.lexiconDidAuthority)\n    lexiconCfg.didAuthority = env.lexiconDidAuthority\n  }\n\n  return {\n    service: serviceCfg,\n    db: dbCfg,\n    actorStore: actorStoreCfg,\n    blobstore: blobstoreCfg,\n    identity: identityCfg,\n    entryway: entrywayCfg,\n    invites: invitesCfg,\n    email: emailCfg,\n    moderationEmail: moderationEmailCfg,\n    subscription: subscriptionCfg,\n    bskyAppView: bskyAppViewCfg,\n    modService: modServiceCfg,\n    reportService: reportServiceCfg,\n    redis: redisCfg,\n    rateLimits: rateLimitsCfg,\n    crawlers: crawlersCfg,\n    fetch: fetchCfg,\n    lexicon: lexiconCfg,\n    proxy: proxyCfg,\n    branding: brandingCfg,\n    oauth: oauthCfg,\n  }\n}\n\nexport type ServerConfig = {\n  service: ServiceConfig\n  db: DatabaseConfig\n  actorStore: ActorStoreConfig\n  blobstore: S3BlobstoreConfig | DiskBlobstoreConfig\n  identity: IdentityConfig\n  entryway: EntrywayConfig | null\n  invites: InvitesConfig\n  email: EmailConfig | null\n  moderationEmail: EmailConfig | null\n  subscription: SubscriptionConfig\n  bskyAppView: BksyAppViewConfig | null\n  modService: ModServiceConfig | null\n  reportService: ReportServiceConfig | null\n  redis: RedisScratchConfig | null\n  rateLimits: RateLimitsConfig\n  crawlers: string[]\n  fetch: FetchConfig\n  proxy: ProxyConfig\n  branding: BrandingConfig\n  oauth: OAuthConfig\n  lexicon: LexiconResolverConfig\n}\n\nexport type ServiceConfig = {\n  port: number\n  hostname: string\n  publicUrl: string\n  did: DidString\n  version?: string\n  privacyPolicyUrl?: string\n  termsOfServiceUrl?: string\n  acceptingImports: boolean\n  maxImportSize?: number\n  blobUploadLimit: number\n  contactEmailAddress?: string\n  devMode: boolean\n}\n\nexport type DatabaseConfig = {\n  accountDbLoc: string\n  sequencerDbLoc: string\n  didCacheDbLoc: string\n  disableWalAutoCheckpoint: boolean\n}\n\nexport type ActorStoreConfig = {\n  directory: string\n  cacheSize: number\n  disableWalAutoCheckpoint: boolean\n}\n\nexport type S3BlobstoreConfig = {\n  provider: 's3'\n  bucket: string\n  region?: string\n  endpoint?: string\n  forcePathStyle?: boolean\n  uploadTimeoutMs?: number\n  requestTimeoutMs?: number\n  credentials?: {\n    accessKeyId: string\n    secretAccessKey: string\n  }\n}\n\nexport type DiskBlobstoreConfig = {\n  provider: 'disk'\n  location: string\n  tempLocation?: string\n}\n\nexport type IdentityConfig = {\n  plcUrl: string\n  resolverTimeout: number\n  cacheStaleTTL: number\n  cacheMaxTTL: number\n  recoveryDidKey: string | null\n  serviceHandleDomains: string[]\n  handleBackupNameservers?: string[]\n  enableDidDocWithSession: boolean\n}\n\nexport type EntrywayConfig = {\n  url: string\n  did: string\n  jwtPublicKeyHex: string\n  plcRotationKey: string\n}\n\nexport type FetchConfig = {\n  disableSsrfProtection: boolean\n  maxResponseSize: number\n}\n\nexport type ProxyConfig = {\n  disableSsrfProtection: boolean\n  allowHTTP2: boolean\n  headersTimeout: number\n  bodyTimeout: number\n  maxResponseSize: number\n  maxRetries: number\n\n  /**\n   * When proxying requests that might get intercepted (for read-after-write) we\n   * negotiate the encoding based on the client's preferences. We will however\n   * use or own weights in order to be able to better control if the PDS will\n   * need to perform content decoding. This settings allows to prefer compressed\n   * content over uncompressed one.\n   */\n  preferCompressed: boolean\n}\n\nexport type OAuthConfig = {\n  issuer: string\n  provider?: {\n    hcaptcha?: HcaptchaConfig\n    branding: BrandingConfig\n    trustedClients?: string[]\n  }\n}\n\nexport type LexiconResolverConfig = {\n  didAuthority?: `did:${string}:${string}`\n}\n\nexport type InvitesConfig =\n  | {\n      required: true\n      interval: number | null\n      epoch: number\n    }\n  | {\n      required: false\n    }\n\nexport type EmailConfig = {\n  smtpUrl: string\n  fromAddress: string\n  disableConfirmationLink: boolean\n}\n\nexport type SubscriptionConfig = {\n  maxBuffer: number\n  repoBackfillLimitMs: number\n}\n\nexport type RedisScratchConfig = {\n  address: string\n  password?: string\n}\n\nexport type RateLimitsConfig =\n  | {\n      enabled: true\n      bypassKey?: string\n      bypassIps?: string[]\n    }\n  | { enabled: false }\n\nexport type BksyAppViewConfig = {\n  url: string\n  did: string\n  cdnUrlPattern?: string\n}\n\nexport type ModServiceConfig = {\n  url: string\n  did: string\n}\n\nexport type ReportServiceConfig = {\n  url: string\n  did: string\n}\n"]}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAKnD,OAAO,EAAkB,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5E,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AAK1D,iCAAiC;AACjC,gEAAgE;AAEhE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAsB,EAAgB,EAAE;IAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,CAAA;IAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAA;IAC5C,MAAM,SAAS,GACb,QAAQ,KAAK,WAAW;QACtB,CAAC,CAAC,oBAAoB,IAAI,EAAE;QAC5B,CAAC,CAAC,WAAW,QAAQ,EAAE,CAAA;IAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,IAAI,WAAW,QAAQ,EAAE,CAAA;IAEnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAA;IAChD,CAAC;IAED,MAAM,UAAU,GAA4B;QAC1C,IAAI;QACJ,QAAQ;QACR,SAAS;QACT,GAAG;QACH,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO;QACnC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI;QAC9C,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,MAAM;QAC/D,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,KAAK;KAC9B,CAAA;IAED,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,OAAO,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtE,CAAC,CAAA;IAED,MAAM,wBAAwB,GAAG,GAAG,CAAC,wBAAwB,IAAI,KAAK,CAAA;IAEtE,MAAM,KAAK,GAAuB;QAChC,YAAY,EAAE,GAAG,CAAC,iBAAiB,IAAI,KAAK,CAAC,gBAAgB,CAAC;QAC9D,cAAc,EAAE,GAAG,CAAC,mBAAmB,IAAI,KAAK,CAAC,kBAAkB,CAAC;QACpE,aAAa,EAAE,GAAG,CAAC,kBAAkB,IAAI,KAAK,CAAC,kBAAkB,CAAC;QAClE,wBAAwB;KACzB,CAAA;IAED,MAAM,aAAa,GAA+B;QAChD,SAAS,EAAE,GAAG,CAAC,mBAAmB,IAAI,KAAK,CAAC,QAAQ,CAAC;QACrD,SAAS,EAAE,GAAG,CAAC,mBAAmB,IAAI,GAAG;QACzC,wBAAwB;KACzB,CAAA;IAED,IAAI,YAAuC,CAAA;IAC3C,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC1B,YAAY,GAAG;YACb,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,iBAAiB;YAC7B,eAAe,EAAE,GAAG,CAAC,0BAA0B,IAAI,KAAK;YACxD,gBAAgB,EAAE,GAAG,CAAC,2BAA2B;YACjD,MAAM,EAAE,GAAG,CAAC,iBAAiB;YAC7B,QAAQ,EAAE,GAAG,CAAC,mBAAmB;YACjC,cAAc,EAAE,GAAG,CAAC,yBAAyB;SAC9C,CAAA;QACD,IAAI,GAAG,CAAC,sBAAsB,IAAI,GAAG,CAAC,0BAA0B,EAAE,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC;gBACnE,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAA;YACH,CAAC;YACD,YAAY,CAAC,WAAW,GAAG;gBACzB,WAAW,EAAE,GAAG,CAAC,sBAAsB;gBACvC,eAAe,EAAE,GAAG,CAAC,0BAA0B;aAChD,CAAA;QACH,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;QACrC,YAAY,GAAG;YACb,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,GAAG,CAAC,qBAAqB;YACnC,YAAY,EAAE,GAAG,CAAC,wBAAwB;SAC3C,CAAA;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC/D,CAAC;IAED,2FAA2F;IAC3F,IAAI,oBAA8B,CAAA;IAClC,IAAI,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,oBAAoB,GAAG,GAAG,CAAC,oBAAoB,CAAA;IACjD,CAAC;SAAM,CAAC;QACN,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,oBAAoB,GAAG,CAAC,OAAO,CAAC,CAAA;QAClC,CAAC;aAAM,CAAC;YACN,oBAAoB,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,oBAAoB,CAAC,IAAI,CAC7C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CACzD,CAAA;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,0BAA0B,aAAa,EAAE,CAAC,CAAA;IAC5D,CAAC;IAED,MAAM,WAAW,GAA6B;QAC5C,MAAM,EAAE,GAAG,CAAC,SAAS,IAAI,uBAAuB;QAChD,WAAW,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG;QACtC,aAAa,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI;QAC3C,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,CAAC,GAAG,MAAM;QAClD,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;QAC1C,oBAAoB;QACpB,uBAAuB,EAAE,GAAG,CAAC,uBAAuB;QACpD,uBAAuB,EAAE,CAAC,CAAC,GAAG,CAAC,uBAAuB;KACvD,CAAA;IAED,IAAI,WAAW,GAA6B,IAAI,CAAA;IAChD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,MAAM,CACJ,GAAG,CAAC,oCAAoC;YACtC,GAAG,CAAC,sBAAsB;YAC1B,GAAG,CAAC,WAAW,EACjB,iFAAiF,CAClF,CAAA;QACD,WAAW,GAAG;YACZ,GAAG,EAAE,GAAG,CAAC,WAAW;YACpB,GAAG,EAAE,GAAG,CAAC,WAAW;YACpB,eAAe,EAAE,GAAG,CAAC,oCAAoC;YACzD,cAAc,EAAE,GAAG,CAAC,sBAAsB;SAC3C,CAAA;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,UAAU,GACd,GAAG,CAAC,cAAc,KAAK,KAAK;QAC1B,CAAC,CAAC;YACE,QAAQ,EAAE,KAAK;SAChB;QACH,CAAC,CAAC;YACE,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;YACpC,KAAK,EAAE,GAAG,CAAC,WAAW,IAAI,CAAC;SAC5B,CAAA;IAEP,IAAI,QAA+B,CAAA;IACnC,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC/C,QAAQ,GAAG,IAAI,CAAA;IACjB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAA;QACH,CAAC;QACD,QAAQ,GAAG;YACT,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,WAAW,EAAE,GAAG,CAAC,gBAAgB;YACjC,uBAAuB,EAAE,GAAG,CAAC,4BAA4B,IAAI,KAAK;SACnE,CAAA;IACH,CAAC;IAED,IAAI,kBAAmD,CAAA;IACvD,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAC/D,kBAAkB,GAAG,IAAI,CAAA;IAC3B,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAA;QACH,CAAC;QACD,kBAAkB,GAAG;YACnB,OAAO,EAAE,GAAG,CAAC,sBAAsB;YACnC,WAAW,EAAE,GAAG,CAAC,sBAAsB;YACvC,uBAAuB,EAAE,KAAK;SAC/B,CAAA;IACH,CAAC;IAED,MAAM,eAAe,GAAiC;QACpD,SAAS,EAAE,GAAG,CAAC,qBAAqB,IAAI,GAAG;QAC3C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,GAAG;KACpD,CAAA;IAED,IAAI,cAAc,GAAgC,IAAI,CAAA;IACtD,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvB,MAAM,CACJ,GAAG,CAAC,cAAc,EAClB,4EAA4E,CAC7E,CAAA;QACD,cAAc,GAAG;YACf,GAAG,EAAE,GAAG,CAAC,cAAc;YACvB,GAAG,EAAE,GAAG,CAAC,cAAc;YACvB,aAAa,EAAE,GAAG,CAAC,wBAAwB;SAC5C,CAAA;IACH,CAAC;IAED,IAAI,aAAa,GAA+B,IAAI,CAAA;IACpD,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;QACtB,MAAM,CACJ,GAAG,CAAC,aAAa,EACjB,mEAAmE,CACpE,CAAA;QACD,aAAa,GAAG;YACd,GAAG,EAAE,GAAG,CAAC,aAAa;YACtB,GAAG,EAAE,GAAG,CAAC,aAAa;SACvB,CAAA;IACH,CAAC;IAED,IAAI,gBAAgB,GAAkC,IAAI,CAAA;IAC1D,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,MAAM,CACJ,GAAG,CAAC,gBAAgB,EACpB,sEAAsE,CACvE,CAAA;QACD,gBAAgB,GAAG;YACjB,GAAG,EAAE,GAAG,CAAC,gBAAgB;YACzB,GAAG,EAAE,GAAG,CAAC,gBAAgB;SAC1B,CAAA;IACH,CAAC;IAED,2DAA2D;IAC3D,IAAI,aAAa,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvC,gBAAgB,GAAG,aAAa,CAAA;IAClC,CAAC;IAED,MAAM,QAAQ,GAA0B,GAAG,CAAC,mBAAmB;QAC7D,CAAC,CAAC;YACE,OAAO,EAAE,GAAG,CAAC,mBAAmB;YAChC,QAAQ,EAAE,GAAG,CAAC,oBAAoB;SACnC;QACH,CAAC,CAAC,IAAI,CAAA;IAER,MAAM,aAAa,GAA+B,GAAG,CAAC,iBAAiB;QACrE,CAAC,CAAC;YACE,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,GAAG,CAAC,kBAAkB;YACjC,SAAS,EAAE,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAClD,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAC/B;SACF;QACH,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAEtB,MAAM,WAAW,GAA6B,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAA;IAEhE,MAAM,QAAQ,GAA0B;QACtC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,OAAO,IAAI,KAAK;QACxE,eAAe,EAAE,GAAG,CAAC,oBAAoB,IAAI,GAAG,GAAG,IAAI,EAAE,QAAQ;KAClE,CAAA;IAED,MAAM,QAAQ,GAA0B;QACtC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,OAAO,IAAI,KAAK;QACxE,UAAU,EAAE,GAAG,CAAC,eAAe,IAAI,KAAK;QACxC,cAAc,EAAE,GAAG,CAAC,mBAAmB,IAAI,IAAI;QAC/C,WAAW,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI;QACzC,eAAe,EAAE,GAAG,CAAC,oBAAoB,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;QACtE,UAAU,EACR,GAAG,CAAC,eAAe,IAAI,IAAI,IAAI,GAAG,CAAC,eAAe,GAAG,CAAC;YACpD,CAAC,CAAC,GAAG,CAAC,eAAe;YACrB,CAAC,CAAC,CAAC;QACP,gBAAgB,EAAE,GAAG,CAAC,qBAAqB,IAAI,KAAK;KACrD,CAAA;IAED,MAAM,WAAW,GAAG;QAClB,IAAI,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,QAAQ,MAAM;QAC1C,IAAI,EAAE,GAAG,CAAC,OAAO;QACjB,MAAM,EAAE;YACN,OAAO,EAAE,GAAG,CAAC,YAAY;YAEzB,KAAK,EAAE,GAAG,CAAC,UAAU;YACrB,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,IAAI,EAAE,GAAG,CAAC,SAAS;YACnB,OAAO,EAAE,GAAG,CAAC,YAAY;SAC1B;QACD,UAAU,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,kBAAkB;YAC7B,IAAI,EAAE,GAAG,CAAC,iBAAiB;SAC5B;QACD,KAAK,EAAE;YACL;gBACE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE;gBACpC,IAAI,EAAE,GAAG,CAAC,OAAO;gBACjB,GAAG,EAAE,WAAoB,EAAE,yCAAyC;aACrE;YACD;gBACE,KAAK,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE;gBACjC,IAAI,EAAE,GAAG,CAAC,iBAAiB;gBAC3B,GAAG,EAAE,kBAA2B;aACjC;YACD;gBACE,KAAK,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE;gBAC/B,IAAI,EAAE,GAAG,CAAC,gBAAgB;gBAC1B,GAAG,EAAE,gBAAyB;aAC/B;YACD;gBACE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE;gBACxB,IAAI,EAAE,GAAG,CAAC,UAAU;gBACpB,GAAG,EAAE,MAAe;aACrB;SACF,CAAC,MAAM,CACN,CAA8B,CAAI,EAA6B,EAAE,CAC/D,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAClC;KACF,CAAA;IAED,MAAM,QAAQ,GAA0B,WAAW;QACjD,CAAC,CAAC;YACE,MAAM,EAAE,WAAW,CAAC,GAAG;YACvB,QAAQ,EAAE,SAAS;SACpB;QACH,CAAC,CAAC;YACE,MAAM,EAAE,UAAU,CAAC,SAAS;YAC5B,QAAQ,EAAE;gBACR,QAAQ,EACN,GAAG,CAAC,eAAe;oBACnB,GAAG,CAAC,iBAAiB;oBACrB,GAAG,CAAC,iBAAiB;oBACnB,CAAC,CAAC;wBACE,OAAO,EAAE,GAAG,CAAC,eAAe;wBAC5B,SAAS,EAAE,GAAG,CAAC,iBAAiB;wBAChC,SAAS,EAAE,GAAG,CAAC,iBAAiB;qBACjC;oBACH,CAAC,CAAC,SAAS;gBACf,QAAQ,EAAE,WAAW;gBACrB,cAAc,EAAE,GAAG,CAAC,mBAAmB;aACxC;SACF,CAAA;IAEL,MAAM,UAAU,GAA0B,EAAE,CAAA;IAE5C,IAAI,GAAG,CAAC,mBAAmB,IAAI,IAAI,EAAE,CAAC;QACpC,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QACvC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,mBAAmB,CAAA;IACnD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,EAAE,EAAE,KAAK;QACT,UAAU,EAAE,aAAa;QACzB,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,QAAQ;QACf,eAAe,EAAE,kBAAkB;QACnC,YAAY,EAAE,eAAe;QAC7B,WAAW,EAAE,cAAc;QAC3B,UAAU,EAAE,aAAa;QACzB,aAAa,EAAE,gBAAgB;QAC/B,KAAK,EAAE,QAAQ;QACf,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,QAAQ;KAChB,CAAA;AACH,CAAC,CAAA","sourcesContent":["import assert from 'node:assert'\nimport path from 'node:path'\nimport { DAY, HOUR, SECOND } from '@atproto/common'\nimport type {\n  BrandingConfig,\n  HcaptchaConfig,\n} from '@atproto/oauth-provider/provider'\nimport { type DidString, ensureValidDid, isValidDid } from '@atproto/syntax'\nimport pkg from '../../package.json' with { type: 'json' }\nimport type { ServerEnvironment } from './env.js'\n\nexport type { BrandingConfig }\n\n// off-config but still from env:\n// logging: LOG_LEVEL, LOG_SYSTEMS, LOG_ENABLED, LOG_DESTINATION\n\nexport const envToCfg = (env: ServerEnvironment): ServerConfig => {\n  const port = env.port ?? 2583\n  const hostname = env.hostname ?? 'localhost'\n  const publicUrl =\n    hostname === 'localhost'\n      ? `http://localhost:${port}`\n      : `https://${hostname}`\n  const did = env.serviceDid ?? `did:web:${hostname}`\n\n  if (!isValidDid(did)) {\n    throw new Error(`Invalid service DID: ${did}`)\n  }\n\n  const serviceCfg: ServerConfig['service'] = {\n    port,\n    hostname,\n    publicUrl,\n    did,\n    version: env.version || pkg.version,\n    privacyPolicyUrl: env.privacyPolicyUrl,\n    termsOfServiceUrl: env.termsOfServiceUrl,\n    contactEmailAddress: env.contactEmailAddress,\n    acceptingImports: env.acceptingImports ?? true,\n    maxImportSize: env.maxImportSize,\n    blobUploadLimit: env.blobUploadLimit ?? 5 * 1024 * 1024, // 5mb\n    devMode: env.devMode ?? false,\n  }\n\n  const dbLoc = (name: string) => {\n    return env.dataDirectory ? path.join(env.dataDirectory, name) : name\n  }\n\n  const disableWalAutoCheckpoint = env.disableWalAutoCheckpoint ?? false\n\n  const dbCfg: ServerConfig['db'] = {\n    accountDbLoc: env.accountDbLocation ?? dbLoc('account.sqlite'),\n    sequencerDbLoc: env.sequencerDbLocation ?? dbLoc('sequencer.sqlite'),\n    didCacheDbLoc: env.didCacheDbLocation ?? dbLoc('did_cache.sqlite'),\n    disableWalAutoCheckpoint,\n  }\n\n  const actorStoreCfg: ServerConfig['actorStore'] = {\n    directory: env.actorStoreDirectory ?? dbLoc('actors'),\n    cacheSize: env.actorStoreCacheSize ?? 100,\n    disableWalAutoCheckpoint,\n  }\n\n  let blobstoreCfg: ServerConfig['blobstore']\n  if (env.blobstoreS3Bucket && env.blobstoreDiskLocation) {\n    throw new Error('Cannot set both S3 and disk blobstore env vars')\n  }\n  if (env.blobstoreS3Bucket) {\n    blobstoreCfg = {\n      provider: 's3',\n      bucket: env.blobstoreS3Bucket,\n      uploadTimeoutMs: env.blobstoreS3UploadTimeoutMs || 20000,\n      requestTimeoutMs: env.blobstoreS3RequestTimeoutMs,\n      region: env.blobstoreS3Region,\n      endpoint: env.blobstoreS3Endpoint,\n      forcePathStyle: env.blobstoreS3ForcePathStyle,\n    }\n    if (env.blobstoreS3AccessKeyId || env.blobstoreS3SecretAccessKey) {\n      if (!env.blobstoreS3AccessKeyId || !env.blobstoreS3SecretAccessKey) {\n        throw new Error(\n          'Must specify both S3 access key id and secret access key blobstore env vars',\n        )\n      }\n      blobstoreCfg.credentials = {\n        accessKeyId: env.blobstoreS3AccessKeyId,\n        secretAccessKey: env.blobstoreS3SecretAccessKey,\n      }\n    }\n  } else if (env.blobstoreDiskLocation) {\n    blobstoreCfg = {\n      provider: 'disk',\n      location: env.blobstoreDiskLocation,\n      tempLocation: env.blobstoreDiskTmpLocation,\n    }\n  } else {\n    throw new Error('Must configure either S3 or disk blobstore')\n  }\n\n  // @NOTE when behind an entryway, this should be configured to match the entryway's domains\n  let serviceHandleDomains: string[]\n  if (env.serviceHandleDomains && env.serviceHandleDomains.length > 0) {\n    serviceHandleDomains = env.serviceHandleDomains\n  } else {\n    if (hostname === 'localhost') {\n      serviceHandleDomains = ['.test']\n    } else {\n      serviceHandleDomains = [`.${hostname}`]\n    }\n  }\n  const invalidDomain = serviceHandleDomains.find(\n    (domain) => domain.length < 1 || !domain.startsWith('.'),\n  )\n  if (invalidDomain) {\n    throw new Error(`Invalid handle domain: ${invalidDomain}`)\n  }\n\n  const identityCfg: ServerConfig['identity'] = {\n    plcUrl: env.didPlcUrl ?? 'https://plc.directory',\n    cacheMaxTTL: env.didCacheMaxTTL ?? DAY,\n    cacheStaleTTL: env.didCacheStaleTTL ?? HOUR,\n    resolverTimeout: env.resolverTimeout ?? 3 * SECOND,\n    recoveryDidKey: env.recoveryDidKey ?? null,\n    serviceHandleDomains,\n    handleBackupNameservers: env.handleBackupNameservers,\n    enableDidDocWithSession: !!env.enableDidDocWithSession,\n  }\n\n  let entrywayCfg: ServerConfig['entryway'] = null\n  if (env.entrywayUrl) {\n    assert(\n      env.entrywayJwtVerifyKeyK256PublicKeyHex &&\n        env.entrywayPlcRotationKey &&\n        env.entrywayDid,\n      'if entryway url is configured, must include all required entryway configuration',\n    )\n    entrywayCfg = {\n      url: env.entrywayUrl,\n      did: env.entrywayDid,\n      jwtPublicKeyHex: env.entrywayJwtVerifyKeyK256PublicKeyHex,\n      plcRotationKey: env.entrywayPlcRotationKey,\n    }\n  }\n\n  // default to being required if left undefined\n  const invitesCfg: ServerConfig['invites'] =\n    env.inviteRequired === false\n      ? {\n          required: false,\n        }\n      : {\n          required: true,\n          interval: env.inviteInterval ?? null,\n          epoch: env.inviteEpoch ?? 0,\n        }\n\n  let emailCfg: ServerConfig['email']\n  if (!env.emailFromAddress && !env.emailSmtpUrl) {\n    emailCfg = null\n  } else {\n    if (!env.emailFromAddress || !env.emailSmtpUrl) {\n      throw new Error(\n        'Partial email config, must set both emailFromAddress and emailSmtpUrl',\n      )\n    }\n    emailCfg = {\n      smtpUrl: env.emailSmtpUrl,\n      fromAddress: env.emailFromAddress,\n      disableConfirmationLink: env.emailDisableConfirmationLink ?? false,\n    }\n  }\n\n  let moderationEmailCfg: ServerConfig['moderationEmail']\n  if (!env.moderationEmailAddress && !env.moderationEmailSmtpUrl) {\n    moderationEmailCfg = null\n  } else {\n    if (!env.moderationEmailAddress || !env.moderationEmailSmtpUrl) {\n      throw new Error(\n        'Partial moderation email config, must set both emailFromAddress and emailSmtpUrl',\n      )\n    }\n    moderationEmailCfg = {\n      smtpUrl: env.moderationEmailSmtpUrl,\n      fromAddress: env.moderationEmailAddress,\n      disableConfirmationLink: false,\n    }\n  }\n\n  const subscriptionCfg: ServerConfig['subscription'] = {\n    maxBuffer: env.maxSubscriptionBuffer ?? 500,\n    repoBackfillLimitMs: env.repoBackfillLimitMs ?? DAY,\n  }\n\n  let bskyAppViewCfg: ServerConfig['bskyAppView'] = null\n  if (env.bskyAppViewUrl) {\n    assert(\n      env.bskyAppViewDid,\n      'if bsky appview service url is configured, must configure its did as well.',\n    )\n    bskyAppViewCfg = {\n      url: env.bskyAppViewUrl,\n      did: env.bskyAppViewDid,\n      cdnUrlPattern: env.bskyAppViewCdnUrlPattern,\n    }\n  }\n\n  let modServiceCfg: ServerConfig['modService'] = null\n  if (env.modServiceUrl) {\n    assert(\n      env.modServiceDid,\n      'if mod service url is configured, must configure its did as well.',\n    )\n    modServiceCfg = {\n      url: env.modServiceUrl,\n      did: env.modServiceDid,\n    }\n  }\n\n  let reportServiceCfg: ServerConfig['reportService'] = null\n  if (env.reportServiceUrl) {\n    assert(\n      env.reportServiceDid,\n      'if report service url is configured, must configure its did as well.',\n    )\n    reportServiceCfg = {\n      url: env.reportServiceUrl,\n      did: env.reportServiceDid,\n    }\n  }\n\n  // if there's a mod service, default report service into it\n  if (modServiceCfg && !reportServiceCfg) {\n    reportServiceCfg = modServiceCfg\n  }\n\n  const redisCfg: ServerConfig['redis'] = env.redisScratchAddress\n    ? {\n        address: env.redisScratchAddress,\n        password: env.redisScratchPassword,\n      }\n    : null\n\n  const rateLimitsCfg: ServerConfig['rateLimits'] = env.rateLimitsEnabled\n    ? {\n        enabled: true,\n        bypassKey: env.rateLimitBypassKey,\n        bypassIps: env.rateLimitBypassIps?.map((ipOrCidr) =>\n          ipOrCidr.split('/')[0]?.trim(),\n        ),\n      }\n    : { enabled: false }\n\n  const crawlersCfg: ServerConfig['crawlers'] = env.crawlers ?? []\n\n  const fetchCfg: ServerConfig['fetch'] = {\n    disableSsrfProtection: env.disableSsrfProtection ?? env.devMode ?? false,\n    maxResponseSize: env.fetchMaxResponseSize ?? 512 * 1024, // 512kb\n  }\n\n  const proxyCfg: ServerConfig['proxy'] = {\n    disableSsrfProtection: env.disableSsrfProtection ?? env.devMode ?? false,\n    allowHTTP2: env.proxyAllowHTTP2 ?? false,\n    headersTimeout: env.proxyHeadersTimeout ?? 10e3,\n    bodyTimeout: env.proxyBodyTimeout ?? 30e3,\n    maxResponseSize: env.proxyMaxResponseSize ?? 10 * 1024 * 1024, // 10mb\n    maxRetries:\n      env.proxyMaxRetries != null && env.proxyMaxRetries > 0\n        ? env.proxyMaxRetries\n        : 0,\n    preferCompressed: env.proxyPreferCompressed ?? false,\n  }\n\n  const brandingCfg = {\n    name: env.serviceName ?? `${hostname} PDS`,\n    logo: env.logoUrl,\n    colors: {\n      primary: env.primaryColor,\n\n      error: env.errorColor,\n      warning: env.warningColor,\n      info: env.infoColor,\n      success: env.successColor,\n    },\n    background: {\n      light: env.backgroundLightUrl,\n      dark: env.backgroundDarkUrl,\n    },\n    links: [\n      {\n        title: { en: 'Home', fr: 'Accueil' },\n        href: env.homeUrl,\n        rel: 'canonical' as const, // Prevents login page from being indexed\n      },\n      {\n        title: { en: 'Terms of Service' },\n        href: env.termsOfServiceUrl,\n        rel: 'terms-of-service' as const,\n      },\n      {\n        title: { en: 'Privacy Policy' },\n        href: env.privacyPolicyUrl,\n        rel: 'privacy-policy' as const,\n      },\n      {\n        title: { en: 'Support' },\n        href: env.supportUrl,\n        rel: 'help' as const,\n      },\n    ].filter(\n      <T extends { href?: string }>(f: T): f is T & { href: string } =>\n        f.href != null && f.href !== '',\n    ),\n  }\n\n  const oauthCfg: ServerConfig['oauth'] = entrywayCfg\n    ? {\n        issuer: entrywayCfg.url,\n        provider: undefined,\n      }\n    : {\n        issuer: serviceCfg.publicUrl,\n        provider: {\n          hcaptcha:\n            env.hcaptchaSiteKey &&\n            env.hcaptchaSecretKey &&\n            env.hcaptchaTokenSalt\n              ? {\n                  siteKey: env.hcaptchaSiteKey,\n                  secretKey: env.hcaptchaSecretKey,\n                  tokenSalt: env.hcaptchaTokenSalt,\n                }\n              : undefined,\n          branding: brandingCfg,\n          trustedClients: env.trustedOAuthClients,\n        },\n      }\n\n  const lexiconCfg: LexiconResolverConfig = {}\n\n  if (env.lexiconDidAuthority != null) {\n    ensureValidDid(env.lexiconDidAuthority)\n    lexiconCfg.didAuthority = env.lexiconDidAuthority\n  }\n\n  return {\n    service: serviceCfg,\n    db: dbCfg,\n    actorStore: actorStoreCfg,\n    blobstore: blobstoreCfg,\n    identity: identityCfg,\n    entryway: entrywayCfg,\n    invites: invitesCfg,\n    email: emailCfg,\n    moderationEmail: moderationEmailCfg,\n    subscription: subscriptionCfg,\n    bskyAppView: bskyAppViewCfg,\n    modService: modServiceCfg,\n    reportService: reportServiceCfg,\n    redis: redisCfg,\n    rateLimits: rateLimitsCfg,\n    crawlers: crawlersCfg,\n    fetch: fetchCfg,\n    lexicon: lexiconCfg,\n    proxy: proxyCfg,\n    branding: brandingCfg,\n    oauth: oauthCfg,\n  }\n}\n\nexport type ServerConfig = {\n  service: ServiceConfig\n  db: DatabaseConfig\n  actorStore: ActorStoreConfig\n  blobstore: S3BlobstoreConfig | DiskBlobstoreConfig\n  identity: IdentityConfig\n  entryway: EntrywayConfig | null\n  invites: InvitesConfig\n  email: EmailConfig | null\n  moderationEmail: EmailConfig | null\n  subscription: SubscriptionConfig\n  bskyAppView: BksyAppViewConfig | null\n  modService: ModServiceConfig | null\n  reportService: ReportServiceConfig | null\n  redis: RedisScratchConfig | null\n  rateLimits: RateLimitsConfig\n  crawlers: string[]\n  fetch: FetchConfig\n  proxy: ProxyConfig\n  branding: BrandingConfig\n  oauth: OAuthConfig\n  lexicon: LexiconResolverConfig\n}\n\nexport type ServiceConfig = {\n  port: number\n  hostname: string\n  publicUrl: string\n  did: DidString\n  version: string\n  privacyPolicyUrl?: string\n  termsOfServiceUrl?: string\n  acceptingImports: boolean\n  maxImportSize?: number\n  blobUploadLimit: number\n  contactEmailAddress?: string\n  devMode: boolean\n}\n\nexport type DatabaseConfig = {\n  accountDbLoc: string\n  sequencerDbLoc: string\n  didCacheDbLoc: string\n  disableWalAutoCheckpoint: boolean\n}\n\nexport type ActorStoreConfig = {\n  directory: string\n  cacheSize: number\n  disableWalAutoCheckpoint: boolean\n}\n\nexport type S3BlobstoreConfig = {\n  provider: 's3'\n  bucket: string\n  region?: string\n  endpoint?: string\n  forcePathStyle?: boolean\n  uploadTimeoutMs?: number\n  requestTimeoutMs?: number\n  credentials?: {\n    accessKeyId: string\n    secretAccessKey: string\n  }\n}\n\nexport type DiskBlobstoreConfig = {\n  provider: 'disk'\n  location: string\n  tempLocation?: string\n}\n\nexport type IdentityConfig = {\n  plcUrl: string\n  resolverTimeout: number\n  cacheStaleTTL: number\n  cacheMaxTTL: number\n  recoveryDidKey: string | null\n  serviceHandleDomains: string[]\n  handleBackupNameservers?: string[]\n  enableDidDocWithSession: boolean\n}\n\nexport type EntrywayConfig = {\n  url: string\n  did: string\n  jwtPublicKeyHex: string\n  plcRotationKey: string\n}\n\nexport type FetchConfig = {\n  disableSsrfProtection: boolean\n  maxResponseSize: number\n}\n\nexport type ProxyConfig = {\n  disableSsrfProtection: boolean\n  allowHTTP2: boolean\n  headersTimeout: number\n  bodyTimeout: number\n  maxResponseSize: number\n  maxRetries: number\n\n  /**\n   * When proxying requests that might get intercepted (for read-after-write) we\n   * negotiate the encoding based on the client's preferences. We will however\n   * use or own weights in order to be able to better control if the PDS will\n   * need to perform content decoding. This settings allows to prefer compressed\n   * content over uncompressed one.\n   */\n  preferCompressed: boolean\n}\n\nexport type OAuthConfig = {\n  issuer: string\n  provider?: {\n    hcaptcha?: HcaptchaConfig\n    branding: BrandingConfig\n    trustedClients?: string[]\n  }\n}\n\nexport type LexiconResolverConfig = {\n  didAuthority?: `did:${string}:${string}`\n}\n\nexport type InvitesConfig =\n  | {\n      required: true\n      interval: number | null\n      epoch: number\n    }\n  | {\n      required: false\n    }\n\nexport type EmailConfig = {\n  smtpUrl: string\n  fromAddress: string\n  disableConfirmationLink: boolean\n}\n\nexport type SubscriptionConfig = {\n  maxBuffer: number\n  repoBackfillLimitMs: number\n}\n\nexport type RedisScratchConfig = {\n  address: string\n  password?: string\n}\n\nexport type RateLimitsConfig =\n  | {\n      enabled: true\n      bypassKey?: string\n      bypassIps?: string[]\n    }\n  | { enabled: false }\n\nexport type BksyAppViewConfig = {\n  url: string\n  did: string\n  cdnUrlPattern?: string\n}\n\nexport type ModServiceConfig = {\n  url: string\n  did: string\n}\n\nexport type ReportServiceConfig = {\n  url: string\n  did: string\n}\n"]}

package/dist/config/env.d.ts

@@ -18,24 +18,13 @@ export declare function readEnv(): {
     hcaptchaSecretKey: string | undefined;
     hcaptchaTokenSalt: string | undefined;
     trustedOAuthClients: string[];
-    lightColor: string | undefined;
-    darkColor: string | undefined;
-    contrastSaturation: number | undefined;
     primaryColor: string | undefined;
-    primaryColorContrast: string | undefined;
-    primaryColorHue: number | undefined;
     errorColor: string | undefined;
-    errorColorContrast: string | undefined;
-    errorColorHue: number | undefined;
     warningColor: string | undefined;
-    warningColorContrast: string | undefined;
-    warningColorHue: number | undefined;
     infoColor: string | undefined;
-    infoColorContrast: string | undefined;
-    infoColorHue: number | undefined;
     successColor: string | undefined;
-    successColorContrast: string | undefined;
-    successColorHue: number | undefined;
+    backgroundLightUrl: string | undefined;
+    backgroundDarkUrl: string | undefined;
     dataDirectory: string | undefined;
     disableWalAutoCheckpoint: boolean | undefined;
     accountDbLocation: string | undefined;

package/dist/config/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAEA,wBAAgB,OAAO;IAGnB,IAAI;IACJ,QAAQ;IACR,UAAU;IACV,WAAW;IACX,OAAO;IACP,OAAO;IACP,OAAO;IACP,gBAAgB;IAChB,UAAU;IACV,iBAAiB;IACjB,mBAAmB;IACnB,gBAAgB;IAChB,aAAa;IACb,eAAe;IACf,OAAO;IAGP,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IAGjB,mBAAmB;IAGnB,UAAU;IACV,SAAS;IACT,kBAAkB;IAClB,YAAY;IACZ,oBAAoB;IACpB,eAAe;IACf,UAAU;IACV,kBAAkB;IAClB,aAAa;IACb,YAAY;IACZ,oBAAoB;IACpB,eAAe;IACf,SAAS;IACT,iBAAiB;IACjB,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,eAAe;IAGf,aAAa;IACb,wBAAwB;IACxB,iBAAiB;IACjB,mBAAmB;IACnB,kBAAkB;IAGlB,mBAAmB;IACnB,mBAAmB;IAInB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,yBAAyB;IACzB,sBAAsB;IACtB,0BAA0B;IAC1B,0BAA0B;IAC1B,2BAA2B;IAE3B,qBAAqB;IACrB,wBAAwB;IAGxB,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB,uBAAuB;IACvB,uBAAuB;IAGvB,WAAW;IACX,WAAW;IACX,oCAAoC;IAGpC,sBAAsB;IAGtB,cAAc;IACd,cAAc;IACd,WAAW;IAGX,YAAY;IACZ,gBAAgB;IAChB,4BAA4B;IAG5B,sBAAsB;IACtB,sBAAsB;IAGtB,qBAAqB;IACrB,mBAAmB;IAGnB,cAAc;IACd,cAAc;IACd,wBAAwB;IAGxB,aAAa;IACb,aAAa;IAGb,gBAAgB;IAChB,gBAAgB;IAGhB,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAGlB,mBAAmB;IACnB,oBAAoB;IAGpB,QAAQ;IAGR,UAAU;IACV,SAAS;IACT,aAAa;IACb,kBAAkB;IAGlB,sBAAsB;IAEtB,+BAA+B;IAK/B,qBAAqB;IAGrB,oBAAoB;IAGpB,eAAe;IACf,mBAAmB;IACnB,gBAAgB;IAChB,oBAAoB;IACpB,eAAe;IACf,qBAAqB;IAGrB,mBAAmB;EAEtB;AAED,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC,CAAA"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAEA,wBAAgB,OAAO;IAGnB,IAAI;IACJ,QAAQ;IACR,UAAU;IACV,WAAW;IACX,OAAO;IACP,OAAO;IACP,OAAO;IACP,gBAAgB;IAChB,UAAU;IACV,iBAAiB;IACjB,mBAAmB;IACnB,gBAAgB;IAChB,aAAa;IACb,eAAe;IACf,OAAO;IAGP,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IAGjB,mBAAmB;IAGnB,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,SAAS;IACT,YAAY;IAEZ,kBAAkB;IAClB,iBAAiB;IAGjB,aAAa;IACb,wBAAwB;IACxB,iBAAiB;IACjB,mBAAmB;IACnB,kBAAkB;IAGlB,mBAAmB;IACnB,mBAAmB;IAInB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,yBAAyB;IACzB,sBAAsB;IACtB,0BAA0B;IAC1B,0BAA0B;IAC1B,2BAA2B;IAE3B,qBAAqB;IACrB,wBAAwB;IAGxB,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB,uBAAuB;IACvB,uBAAuB;IAGvB,WAAW;IACX,WAAW;IACX,oCAAoC;IAGpC,sBAAsB;IAGtB,cAAc;IACd,cAAc;IACd,WAAW;IAGX,YAAY;IACZ,gBAAgB;IAChB,4BAA4B;IAG5B,sBAAsB;IACtB,sBAAsB;IAGtB,qBAAqB;IACrB,mBAAmB;IAGnB,cAAc;IACd,cAAc;IACd,wBAAwB;IAGxB,aAAa;IACb,aAAa;IAGb,gBAAgB;IAChB,gBAAgB;IAGhB,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAGlB,mBAAmB;IACnB,oBAAoB;IAGpB,QAAQ;IAGR,UAAU;IACV,SAAS;IACT,aAAa;IACb,kBAAkB;IAGlB,sBAAsB;IAEtB,+BAA+B;IAK/B,qBAAqB;IAGrB,oBAAoB;IAGpB,eAAe;IACf,mBAAmB;IACnB,gBAAgB;IAChB,oBAAoB;IACpB,eAAe;IACf,qBAAqB;IAGrB,mBAAmB;EAEtB;AAED,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC,CAAA"}

package/dist/config/env.js

@@ -24,24 +24,13 @@ export function readEnv() {
         // OAuth
         trustedOAuthClients: envList('PDS_OAUTH_TRUSTED_CLIENTS'),
         // branding
-        lightColor: envStr('PDS_LIGHT_COLOR'),
-        darkColor: envStr('PDS_DARK_COLOR'),
-        contrastSaturation: envInt('PDS_CONTRAST_SATURATION'),
         primaryColor: envStr('PDS_PRIMARY_COLOR'),
-        primaryColorContrast: envStr('PDS_PRIMARY_COLOR_CONTRAST'),
-        primaryColorHue: envInt('PDS_PRIMARY_COLOR_HUE'),
         errorColor: envStr('PDS_ERROR_COLOR'),
-        errorColorContrast: envStr('PDS_ERROR_COLOR_CONTRAST'),
-        errorColorHue: envInt('PDS_ERROR_COLOR_HUE'),
         warningColor: envStr('PDS_WARNING_COLOR'),
-        warningColorContrast: envStr('PDS_WARNING_COLOR_CONTRAST'),
-        warningColorHue: envInt('PDS_WARNING_COLOR_HUE'),
         infoColor: envStr('PDS_INFO_COLOR'),
-        infoColorContrast: envStr('PDS_INFO_COLOR_CONTRAST'),
-        infoColorHue: envInt('PDS_INFO_COLOR_HUE'),
         successColor: envStr('PDS_SUCCESS_COLOR'),
-        successColorContrast: envStr('PDS_SUCCESS_COLOR_CONTRAST'),
-        successColorHue: envInt('PDS_SUCCESS_COLOR_HUE'),
+        backgroundLightUrl: envStr('PDS_BACKGROUND_LIGHT_URL'),
+        backgroundDarkUrl: envStr('PDS_BACKGROUND_DARK_URL'),
         // database
         dataDirectory: envStr('PDS_DATA_DIRECTORY'),
         disableWalAutoCheckpoint: envBool('PDS_SQLITE_DISABLE_WAL_AUTO_CHECKPOINT'),

package/dist/config/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAElE,MAAM,UAAU,OAAO;IACrB,OAAO;QACL,UAAU;QACV,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC;QAChC,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACrC,WAAW,EAAE,MAAM,CAAC,kBAAkB,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC;QAC9B,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC;QAC/B,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC;QAC/B,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC;QAClD,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACrC,iBAAiB,EAAE,MAAM,CAAC,0BAA0B,CAAC;QACrD,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,gBAAgB,EAAE,OAAO,CAAC,4BAA4B,CAAC;QACvD,aAAa,EAAE,MAAM,CAAC,0BAA0B,CAAC;QACjD,eAAe,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAChD,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC;QAEhC,WAAW;QACX,eAAe,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAChD,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACpD,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QAEpD,QAAQ;QACR,mBAAmB,EAAE,OAAO,CAAC,2BAA2B,CAAC;QAEzD,WAAW;QACX,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC;QACnC,kBAAkB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACrD,YAAY,EAAE,MAAM,CAAC,mBAAmB,CAAC;QACzC,oBAAoB,EAAE,MAAM,CAAC,4BAA4B,CAAC;QAC1D,eAAe,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAChD,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACrC,kBAAkB,EAAE,MAAM,CAAC,0BAA0B,CAAC;QACtD,aAAa,EAAE,MAAM,CAAC,qBAAqB,CAAC;QAC5C,YAAY,EAAE,MAAM,CAAC,mBAAmB,CAAC;QACzC,oBAAoB,EAAE,MAAM,CAAC,4BAA4B,CAAC;QAC1D,eAAe,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAChD,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC;QACnC,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACpD,YAAY,EAAE,MAAM,CAAC,oBAAoB,CAAC;QAC1C,YAAY,EAAE,MAAM,CAAC,mBAAmB,CAAC;QACzC,oBAAoB,EAAE,MAAM,CAAC,4BAA4B,CAAC;QAC1D,eAAe,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAEhD,WAAW;QACX,aAAa,EAAE,MAAM,CAAC,oBAAoB,CAAC;QAC3C,wBAAwB,EAAE,OAAO,CAAC,wCAAwC,CAAC;QAC3E,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACpD,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,kBAAkB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QAEvD,cAAc;QACd,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,mBAAmB,EAAE,MAAM,CAAC,4BAA4B,CAAC;QAEzD,0BAA0B;QAC1B,KAAK;QACL,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACpD,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACpD,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,yBAAyB,EAAE,OAAO,CAAC,mCAAmC,CAAC;QACvE,sBAAsB,EAAE,MAAM,CAAC,gCAAgC,CAAC;QAChE,0BAA0B,EAAE,MAAM,CAAC,oCAAoC,CAAC;QACxE,0BAA0B,EAAE,MAAM,CAAC,oCAAoC,CAAC;QACxE,2BAA2B,EAAE,MAAM,CAAC,qCAAqC,CAAC;QAC1E,OAAO;QACP,qBAAqB,EAAE,MAAM,CAAC,6BAA6B,CAAC;QAC5D,wBAAwB,EAAE,MAAM,CAAC,iCAAiC,CAAC;QAEnE,WAAW;QACX,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACpC,gBAAgB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACnD,cAAc,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAC/C,eAAe,EAAE,MAAM,CAAC,yBAAyB,CAAC;QAClD,cAAc,EAAE,MAAM,CAAC,sBAAsB,CAAC;QAC9C,oBAAoB,EAAE,OAAO,CAAC,4BAA4B,CAAC,EAAE,6BAA6B;QAC1F,uBAAuB,EAAE,OAAO,CAAC,+BAA+B,CAAC;QACjE,uBAAuB,EAAE,OAAO,CAAC,iCAAiC,CAAC;QAEnE,WAAW;QACX,WAAW,EAAE,MAAM,CAAC,kBAAkB,CAAC;QACvC,WAAW,EAAE,MAAM,CAAC,kBAAkB,CAAC;QACvC,oCAAoC,EAAE,MAAM,CAC1C,iDAAiD,CAClD;QACD,sBAAsB,EAAE,MAAM,CAAC,+BAA+B,CAAC;QAE/D,UAAU;QACV,cAAc,EAAE,OAAO,CAAC,qBAAqB,CAAC;QAC9C,cAAc,EAAE,MAAM,CAAC,qBAAqB,CAAC;QAC7C,WAAW,EAAE,MAAM,CAAC,kBAAkB,CAAC;QAEvC,QAAQ;QACR,YAAY,EAAE,MAAM,CAAC,oBAAoB,CAAC;QAC1C,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC;QAClD,4BAA4B,EAAE,OAAO,CACnC,qCAAqC,CACtC;QACD,sBAAsB,EAAE,MAAM,CAAC,+BAA+B,CAAC;QAC/D,sBAAsB,EAAE,MAAM,CAAC,8BAA8B,CAAC;QAE9D,eAAe;QACf,qBAAqB,EAAE,MAAM,CAAC,6BAA6B,CAAC;QAC5D,mBAAmB,EAAE,MAAM,CAAC,4BAA4B,CAAC;QAEzD,UAAU;QACV,cAAc,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAC/C,cAAc,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAC/C,wBAAwB,EAAE,MAAM,CAAC,mCAAmC,CAAC;QAErE,cAAc;QACd,aAAa,EAAE,MAAM,CAAC,qBAAqB,CAAC;QAC5C,aAAa,EAAE,MAAM,CAAC,qBAAqB,CAAC;QAE5C,iBAAiB;QACjB,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC;QAClD,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC;QAElD,cAAc;QACd,iBAAiB,EAAE,OAAO,CAAC,yBAAyB,CAAC;QACrD,kBAAkB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACvD,kBAAkB,EAAE,OAAO,CAAC,2BAA2B,CAAC;QAExD,QAAQ;QACR,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,oBAAoB,EAAE,MAAM,CAAC,4BAA4B,CAAC;QAE1D,WAAW;QACX,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC;QAEjC,UAAU;QACV,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC;QACnC,aAAa,EAAE,MAAM,CAAC,oBAAoB,CAAC;QAC3C,kBAAkB,EAAE,MAAM,CAAC,0BAA0B,CAAC;QAEtD,MAAM;QACN,sBAAsB,EAAE,MAAM,CAAC,iCAAiC,CAAC;QACjE,SAAS;QACT,+BAA+B,EAAE,MAAM,CACrC,2CAA2C,CAC5C;QAED,kCAAkC;QAClC,qBAAqB,EAAE,OAAO,CAAC,6BAA6B,CAAC;QAE7D,QAAQ;QACR,oBAAoB,EAAE,MAAM,CAAC,6BAA6B,CAAC;QAE3D,QAAQ;QACR,eAAe,EAAE,OAAO,CAAC,uBAAuB,CAAC;QACjD,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC;QAClD,oBAAoB,EAAE,MAAM,CAAC,6BAA6B,CAAC;QAC3D,eAAe,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAChD,qBAAqB,EAAE,OAAO,CAAC,6BAA6B,CAAC;QAE7D,qBAAqB;QACrB,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;KACzD,CAAA;AACH,CAAC","sourcesContent":["import { envBool, envInt, envList, envStr } from '@atproto/common'\n\nexport function readEnv() {\n  return {\n    // service\n    port: envInt('PDS_PORT'),\n    hostname: envStr('PDS_HOSTNAME'),\n    serviceDid: envStr('PDS_SERVICE_DID'),\n    serviceName: envStr('PDS_SERVICE_NAME'),\n    version: envStr('PDS_VERSION'),\n    homeUrl: envStr('PDS_HOME_URL'),\n    logoUrl: envStr('PDS_LOGO_URL'),\n    privacyPolicyUrl: envStr('PDS_PRIVACY_POLICY_URL'),\n    supportUrl: envStr('PDS_SUPPORT_URL'),\n    termsOfServiceUrl: envStr('PDS_TERMS_OF_SERVICE_URL'),\n    contactEmailAddress: envStr('PDS_CONTACT_EMAIL_ADDRESS'),\n    acceptingImports: envBool('PDS_ACCEPTING_REPO_IMPORTS'),\n    maxImportSize: envInt('PDS_MAX_REPO_IMPORT_SIZE'),\n    blobUploadLimit: envInt('PDS_BLOB_UPLOAD_LIMIT'),\n    devMode: envBool('PDS_DEV_MODE'),\n\n    // hCaptcha\n    hcaptchaSiteKey: envStr('PDS_HCAPTCHA_SITE_KEY'),\n    hcaptchaSecretKey: envStr('PDS_HCAPTCHA_SECRET_KEY'),\n    hcaptchaTokenSalt: envStr('PDS_HCAPTCHA_TOKEN_SALT'),\n\n    // OAuth\n    trustedOAuthClients: envList('PDS_OAUTH_TRUSTED_CLIENTS'),\n\n    // branding\n    lightColor: envStr('PDS_LIGHT_COLOR'),\n    darkColor: envStr('PDS_DARK_COLOR'),\n    contrastSaturation: envInt('PDS_CONTRAST_SATURATION'),\n    primaryColor: envStr('PDS_PRIMARY_COLOR'),\n    primaryColorContrast: envStr('PDS_PRIMARY_COLOR_CONTRAST'),\n    primaryColorHue: envInt('PDS_PRIMARY_COLOR_HUE'),\n    errorColor: envStr('PDS_ERROR_COLOR'),\n    errorColorContrast: envStr('PDS_ERROR_COLOR_CONTRAST'),\n    errorColorHue: envInt('PDS_ERROR_COLOR_HUE'),\n    warningColor: envStr('PDS_WARNING_COLOR'),\n    warningColorContrast: envStr('PDS_WARNING_COLOR_CONTRAST'),\n    warningColorHue: envInt('PDS_WARNING_COLOR_HUE'),\n    infoColor: envStr('PDS_INFO_COLOR'),\n    infoColorContrast: envStr('PDS_INFO_COLOR_CONTRAST'),\n    infoColorHue: envInt('PDS_INFO_COLOR_HUE'),\n    successColor: envStr('PDS_SUCCESS_COLOR'),\n    successColorContrast: envStr('PDS_SUCCESS_COLOR_CONTRAST'),\n    successColorHue: envInt('PDS_SUCCESS_COLOR_HUE'),\n\n    // database\n    dataDirectory: envStr('PDS_DATA_DIRECTORY'),\n    disableWalAutoCheckpoint: envBool('PDS_SQLITE_DISABLE_WAL_AUTO_CHECKPOINT'),\n    accountDbLocation: envStr('PDS_ACCOUNT_DB_LOCATION'),\n    sequencerDbLocation: envStr('PDS_SEQUENCER_DB_LOCATION'),\n    didCacheDbLocation: envStr('PDS_DID_CACHE_DB_LOCATION'),\n\n    // actor store\n    actorStoreDirectory: envStr('PDS_ACTOR_STORE_DIRECTORY'),\n    actorStoreCacheSize: envInt('PDS_ACTOR_STORE_CACHE_SIZE'),\n\n    // blobstore: one required\n    // s3\n    blobstoreS3Bucket: envStr('PDS_BLOBSTORE_S3_BUCKET'),\n    blobstoreS3Region: envStr('PDS_BLOBSTORE_S3_REGION'),\n    blobstoreS3Endpoint: envStr('PDS_BLOBSTORE_S3_ENDPOINT'),\n    blobstoreS3ForcePathStyle: envBool('PDS_BLOBSTORE_S3_FORCE_PATH_STYLE'),\n    blobstoreS3AccessKeyId: envStr('PDS_BLOBSTORE_S3_ACCESS_KEY_ID'),\n    blobstoreS3SecretAccessKey: envStr('PDS_BLOBSTORE_S3_SECRET_ACCESS_KEY'),\n    blobstoreS3UploadTimeoutMs: envInt('PDS_BLOBSTORE_S3_UPLOAD_TIMEOUT_MS'),\n    blobstoreS3RequestTimeoutMs: envInt('PDS_BLOBSTORE_S3_REQUEST_TIMEOUT_MS'),\n    // disk\n    blobstoreDiskLocation: envStr('PDS_BLOBSTORE_DISK_LOCATION'),\n    blobstoreDiskTmpLocation: envStr('PDS_BLOBSTORE_DISK_TMP_LOCATION'),\n\n    // identity\n    didPlcUrl: envStr('PDS_DID_PLC_URL'),\n    didCacheStaleTTL: envInt('PDS_DID_CACHE_STALE_TTL'),\n    didCacheMaxTTL: envInt('PDS_DID_CACHE_MAX_TTL'),\n    resolverTimeout: envInt('PDS_ID_RESOLVER_TIMEOUT'),\n    recoveryDidKey: envStr('PDS_RECOVERY_DID_KEY'),\n    serviceHandleDomains: envList('PDS_SERVICE_HANDLE_DOMAINS'), // public hostname by default\n    handleBackupNameservers: envList('PDS_HANDLE_BACKUP_NAMESERVERS'),\n    enableDidDocWithSession: envBool('PDS_ENABLE_DID_DOC_WITH_SESSION'),\n\n    // entryway\n    entrywayUrl: envStr('PDS_ENTRYWAY_URL'),\n    entrywayDid: envStr('PDS_ENTRYWAY_DID'),\n    entrywayJwtVerifyKeyK256PublicKeyHex: envStr(\n      'PDS_ENTRYWAY_JWT_VERIFY_KEY_K256_PUBLIC_KEY_HEX',\n    ),\n    entrywayPlcRotationKey: envStr('PDS_ENTRYWAY_PLC_ROTATION_KEY'),\n\n    // invites\n    inviteRequired: envBool('PDS_INVITE_REQUIRED'),\n    inviteInterval: envInt('PDS_INVITE_INTERVAL'),\n    inviteEpoch: envInt('PDS_INVITE_EPOCH'),\n\n    // email\n    emailSmtpUrl: envStr('PDS_EMAIL_SMTP_URL'),\n    emailFromAddress: envStr('PDS_EMAIL_FROM_ADDRESS'),\n    emailDisableConfirmationLink: envBool(\n      'PDS_EMAIL_DISABLE_CONFIRMATION_LINK',\n    ),\n    moderationEmailSmtpUrl: envStr('PDS_MODERATION_EMAIL_SMTP_URL'),\n    moderationEmailAddress: envStr('PDS_MODERATION_EMAIL_ADDRESS'),\n\n    // subscription\n    maxSubscriptionBuffer: envInt('PDS_MAX_SUBSCRIPTION_BUFFER'),\n    repoBackfillLimitMs: envInt('PDS_REPO_BACKFILL_LIMIT_MS'),\n\n    // appview\n    bskyAppViewUrl: envStr('PDS_BSKY_APP_VIEW_URL'),\n    bskyAppViewDid: envStr('PDS_BSKY_APP_VIEW_DID'),\n    bskyAppViewCdnUrlPattern: envStr('PDS_BSKY_APP_VIEW_CDN_URL_PATTERN'),\n\n    // mod service\n    modServiceUrl: envStr('PDS_MOD_SERVICE_URL'),\n    modServiceDid: envStr('PDS_MOD_SERVICE_DID'),\n\n    // report service\n    reportServiceUrl: envStr('PDS_REPORT_SERVICE_URL'),\n    reportServiceDid: envStr('PDS_REPORT_SERVICE_DID'),\n\n    // rate limits\n    rateLimitsEnabled: envBool('PDS_RATE_LIMITS_ENABLED'),\n    rateLimitBypassKey: envStr('PDS_RATE_LIMIT_BYPASS_KEY'),\n    rateLimitBypassIps: envList('PDS_RATE_LIMIT_BYPASS_IPS'),\n\n    // redis\n    redisScratchAddress: envStr('PDS_REDIS_SCRATCH_ADDRESS'),\n    redisScratchPassword: envStr('PDS_REDIS_SCRATCH_PASSWORD'),\n\n    // crawlers\n    crawlers: envList('PDS_CRAWLERS'),\n\n    // secrets\n    dpopSecret: envStr('PDS_DPOP_SECRET'),\n    jwtSecret: envStr('PDS_JWT_SECRET'),\n    adminPassword: envStr('PDS_ADMIN_PASSWORD'),\n    entrywayAdminToken: envStr('PDS_ENTRYWAY_ADMIN_TOKEN'),\n\n    // kms\n    plcRotationKeyKmsKeyId: envStr('PDS_PLC_ROTATION_KEY_KMS_KEY_ID'),\n    // memory\n    plcRotationKeyK256PrivateKeyHex: envStr(\n      'PDS_PLC_ROTATION_KEY_K256_PRIVATE_KEY_HEX',\n    ),\n\n    // user provided url http requests\n    disableSsrfProtection: envBool('PDS_DISABLE_SSRF_PROTECTION'),\n\n    // fetch\n    fetchMaxResponseSize: envInt('PDS_FETCH_MAX_RESPONSE_SIZE'),\n\n    // proxy\n    proxyAllowHTTP2: envBool('PDS_PROXY_ALLOW_HTTP2'),\n    proxyHeadersTimeout: envInt('PDS_PROXY_HEADERS_TIMEOUT'),\n    proxyBodyTimeout: envInt('PDS_PROXY_BODY_TIMEOUT'),\n    proxyMaxResponseSize: envInt('PDS_PROXY_MAX_RESPONSE_SIZE'),\n    proxyMaxRetries: envInt('PDS_PROXY_MAX_RETRIES'),\n    proxyPreferCompressed: envBool('PDS_PROXY_PREFER_COMPRESSED'),\n\n    // lexicon resolution\n    lexiconDidAuthority: envStr('PDS_LEXICON_AUTHORITY_DID'),\n  }\n}\n\nexport type ServerEnvironment = Partial<ReturnType<typeof readEnv>>\n"]}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAElE,MAAM,UAAU,OAAO;IACrB,OAAO;QACL,UAAU;QACV,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC;QAChC,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACrC,WAAW,EAAE,MAAM,CAAC,kBAAkB,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC;QAC9B,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC;QAC/B,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC;QAC/B,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC;QAClD,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACrC,iBAAiB,EAAE,MAAM,CAAC,0BAA0B,CAAC;QACrD,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,gBAAgB,EAAE,OAAO,CAAC,4BAA4B,CAAC;QACvD,aAAa,EAAE,MAAM,CAAC,0BAA0B,CAAC;QACjD,eAAe,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAChD,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC;QAEhC,WAAW;QACX,eAAe,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAChD,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACpD,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QAEpD,QAAQ;QACR,mBAAmB,EAAE,OAAO,CAAC,2BAA2B,CAAC;QAEzD,WAAW;QACX,YAAY,EAAE,MAAM,CAAC,mBAAmB,CAAC;QACzC,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACrC,YAAY,EAAE,MAAM,CAAC,mBAAmB,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC;QACnC,YAAY,EAAE,MAAM,CAAC,mBAAmB,CAAC;QAEzC,kBAAkB,EAAE,MAAM,CAAC,0BAA0B,CAAC;QACtD,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QAEpD,WAAW;QACX,aAAa,EAAE,MAAM,CAAC,oBAAoB,CAAC;QAC3C,wBAAwB,EAAE,OAAO,CAAC,wCAAwC,CAAC;QAC3E,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACpD,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,kBAAkB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QAEvD,cAAc;QACd,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,mBAAmB,EAAE,MAAM,CAAC,4BAA4B,CAAC;QAEzD,0BAA0B;QAC1B,KAAK;QACL,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACpD,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACpD,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,yBAAyB,EAAE,OAAO,CAAC,mCAAmC,CAAC;QACvE,sBAAsB,EAAE,MAAM,CAAC,gCAAgC,CAAC;QAChE,0BAA0B,EAAE,MAAM,CAAC,oCAAoC,CAAC;QACxE,0BAA0B,EAAE,MAAM,CAAC,oCAAoC,CAAC;QACxE,2BAA2B,EAAE,MAAM,CAAC,qCAAqC,CAAC;QAC1E,OAAO;QACP,qBAAqB,EAAE,MAAM,CAAC,6BAA6B,CAAC;QAC5D,wBAAwB,EAAE,MAAM,CAAC,iCAAiC,CAAC;QAEnE,WAAW;QACX,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACpC,gBAAgB,EAAE,MAAM,CAAC,yBAAyB,CAAC;QACnD,cAAc,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAC/C,eAAe,EAAE,MAAM,CAAC,yBAAyB,CAAC;QAClD,cAAc,EAAE,MAAM,CAAC,sBAAsB,CAAC;QAC9C,oBAAoB,EAAE,OAAO,CAAC,4BAA4B,CAAC,EAAE,6BAA6B;QAC1F,uBAAuB,EAAE,OAAO,CAAC,+BAA+B,CAAC;QACjE,uBAAuB,EAAE,OAAO,CAAC,iCAAiC,CAAC;QAEnE,WAAW;QACX,WAAW,EAAE,MAAM,CAAC,kBAAkB,CAAC;QACvC,WAAW,EAAE,MAAM,CAAC,kBAAkB,CAAC;QACvC,oCAAoC,EAAE,MAAM,CAC1C,iDAAiD,CAClD;QACD,sBAAsB,EAAE,MAAM,CAAC,+BAA+B,CAAC;QAE/D,UAAU;QACV,cAAc,EAAE,OAAO,CAAC,qBAAqB,CAAC;QAC9C,cAAc,EAAE,MAAM,CAAC,qBAAqB,CAAC;QAC7C,WAAW,EAAE,MAAM,CAAC,kBAAkB,CAAC;QAEvC,QAAQ;QACR,YAAY,EAAE,MAAM,CAAC,oBAAoB,CAAC;QAC1C,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC;QAClD,4BAA4B,EAAE,OAAO,CACnC,qCAAqC,CACtC;QACD,sBAAsB,EAAE,MAAM,CAAC,+BAA+B,CAAC;QAC/D,sBAAsB,EAAE,MAAM,CAAC,8BAA8B,CAAC;QAE9D,eAAe;QACf,qBAAqB,EAAE,MAAM,CAAC,6BAA6B,CAAC;QAC5D,mBAAmB,EAAE,MAAM,CAAC,4BAA4B,CAAC;QAEzD,UAAU;QACV,cAAc,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAC/C,cAAc,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAC/C,wBAAwB,EAAE,MAAM,CAAC,mCAAmC,CAAC;QAErE,cAAc;QACd,aAAa,EAAE,MAAM,CAAC,qBAAqB,CAAC;QAC5C,aAAa,EAAE,MAAM,CAAC,qBAAqB,CAAC;QAE5C,iBAAiB;QACjB,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC;QAClD,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC;QAElD,cAAc;QACd,iBAAiB,EAAE,OAAO,CAAC,yBAAyB,CAAC;QACrD,kBAAkB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACvD,kBAAkB,EAAE,OAAO,CAAC,2BAA2B,CAAC;QAExD,QAAQ;QACR,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,oBAAoB,EAAE,MAAM,CAAC,4BAA4B,CAAC;QAE1D,WAAW;QACX,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC;QAEjC,UAAU;QACV,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC;QACnC,aAAa,EAAE,MAAM,CAAC,oBAAoB,CAAC;QAC3C,kBAAkB,EAAE,MAAM,CAAC,0BAA0B,CAAC;QAEtD,MAAM;QACN,sBAAsB,EAAE,MAAM,CAAC,iCAAiC,CAAC;QACjE,SAAS;QACT,+BAA+B,EAAE,MAAM,CACrC,2CAA2C,CAC5C;QAED,kCAAkC;QAClC,qBAAqB,EAAE,OAAO,CAAC,6BAA6B,CAAC;QAE7D,QAAQ;QACR,oBAAoB,EAAE,MAAM,CAAC,6BAA6B,CAAC;QAE3D,QAAQ;QACR,eAAe,EAAE,OAAO,CAAC,uBAAuB,CAAC;QACjD,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;QACxD,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC;QAClD,oBAAoB,EAAE,MAAM,CAAC,6BAA6B,CAAC;QAC3D,eAAe,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAChD,qBAAqB,EAAE,OAAO,CAAC,6BAA6B,CAAC;QAE7D,qBAAqB;QACrB,mBAAmB,EAAE,MAAM,CAAC,2BAA2B,CAAC;KACzD,CAAA;AACH,CAAC","sourcesContent":["import { envBool, envInt, envList, envStr } from '@atproto/common'\n\nexport function readEnv() {\n  return {\n    // service\n    port: envInt('PDS_PORT'),\n    hostname: envStr('PDS_HOSTNAME'),\n    serviceDid: envStr('PDS_SERVICE_DID'),\n    serviceName: envStr('PDS_SERVICE_NAME'),\n    version: envStr('PDS_VERSION'),\n    homeUrl: envStr('PDS_HOME_URL'),\n    logoUrl: envStr('PDS_LOGO_URL'),\n    privacyPolicyUrl: envStr('PDS_PRIVACY_POLICY_URL'),\n    supportUrl: envStr('PDS_SUPPORT_URL'),\n    termsOfServiceUrl: envStr('PDS_TERMS_OF_SERVICE_URL'),\n    contactEmailAddress: envStr('PDS_CONTACT_EMAIL_ADDRESS'),\n    acceptingImports: envBool('PDS_ACCEPTING_REPO_IMPORTS'),\n    maxImportSize: envInt('PDS_MAX_REPO_IMPORT_SIZE'),\n    blobUploadLimit: envInt('PDS_BLOB_UPLOAD_LIMIT'),\n    devMode: envBool('PDS_DEV_MODE'),\n\n    // hCaptcha\n    hcaptchaSiteKey: envStr('PDS_HCAPTCHA_SITE_KEY'),\n    hcaptchaSecretKey: envStr('PDS_HCAPTCHA_SECRET_KEY'),\n    hcaptchaTokenSalt: envStr('PDS_HCAPTCHA_TOKEN_SALT'),\n\n    // OAuth\n    trustedOAuthClients: envList('PDS_OAUTH_TRUSTED_CLIENTS'),\n\n    // branding\n    primaryColor: envStr('PDS_PRIMARY_COLOR'),\n    errorColor: envStr('PDS_ERROR_COLOR'),\n    warningColor: envStr('PDS_WARNING_COLOR'),\n    infoColor: envStr('PDS_INFO_COLOR'),\n    successColor: envStr('PDS_SUCCESS_COLOR'),\n\n    backgroundLightUrl: envStr('PDS_BACKGROUND_LIGHT_URL'),\n    backgroundDarkUrl: envStr('PDS_BACKGROUND_DARK_URL'),\n\n    // database\n    dataDirectory: envStr('PDS_DATA_DIRECTORY'),\n    disableWalAutoCheckpoint: envBool('PDS_SQLITE_DISABLE_WAL_AUTO_CHECKPOINT'),\n    accountDbLocation: envStr('PDS_ACCOUNT_DB_LOCATION'),\n    sequencerDbLocation: envStr('PDS_SEQUENCER_DB_LOCATION'),\n    didCacheDbLocation: envStr('PDS_DID_CACHE_DB_LOCATION'),\n\n    // actor store\n    actorStoreDirectory: envStr('PDS_ACTOR_STORE_DIRECTORY'),\n    actorStoreCacheSize: envInt('PDS_ACTOR_STORE_CACHE_SIZE'),\n\n    // blobstore: one required\n    // s3\n    blobstoreS3Bucket: envStr('PDS_BLOBSTORE_S3_BUCKET'),\n    blobstoreS3Region: envStr('PDS_BLOBSTORE_S3_REGION'),\n    blobstoreS3Endpoint: envStr('PDS_BLOBSTORE_S3_ENDPOINT'),\n    blobstoreS3ForcePathStyle: envBool('PDS_BLOBSTORE_S3_FORCE_PATH_STYLE'),\n    blobstoreS3AccessKeyId: envStr('PDS_BLOBSTORE_S3_ACCESS_KEY_ID'),\n    blobstoreS3SecretAccessKey: envStr('PDS_BLOBSTORE_S3_SECRET_ACCESS_KEY'),\n    blobstoreS3UploadTimeoutMs: envInt('PDS_BLOBSTORE_S3_UPLOAD_TIMEOUT_MS'),\n    blobstoreS3RequestTimeoutMs: envInt('PDS_BLOBSTORE_S3_REQUEST_TIMEOUT_MS'),\n    // disk\n    blobstoreDiskLocation: envStr('PDS_BLOBSTORE_DISK_LOCATION'),\n    blobstoreDiskTmpLocation: envStr('PDS_BLOBSTORE_DISK_TMP_LOCATION'),\n\n    // identity\n    didPlcUrl: envStr('PDS_DID_PLC_URL'),\n    didCacheStaleTTL: envInt('PDS_DID_CACHE_STALE_TTL'),\n    didCacheMaxTTL: envInt('PDS_DID_CACHE_MAX_TTL'),\n    resolverTimeout: envInt('PDS_ID_RESOLVER_TIMEOUT'),\n    recoveryDidKey: envStr('PDS_RECOVERY_DID_KEY'),\n    serviceHandleDomains: envList('PDS_SERVICE_HANDLE_DOMAINS'), // public hostname by default\n    handleBackupNameservers: envList('PDS_HANDLE_BACKUP_NAMESERVERS'),\n    enableDidDocWithSession: envBool('PDS_ENABLE_DID_DOC_WITH_SESSION'),\n\n    // entryway\n    entrywayUrl: envStr('PDS_ENTRYWAY_URL'),\n    entrywayDid: envStr('PDS_ENTRYWAY_DID'),\n    entrywayJwtVerifyKeyK256PublicKeyHex: envStr(\n      'PDS_ENTRYWAY_JWT_VERIFY_KEY_K256_PUBLIC_KEY_HEX',\n    ),\n    entrywayPlcRotationKey: envStr('PDS_ENTRYWAY_PLC_ROTATION_KEY'),\n\n    // invites\n    inviteRequired: envBool('PDS_INVITE_REQUIRED'),\n    inviteInterval: envInt('PDS_INVITE_INTERVAL'),\n    inviteEpoch: envInt('PDS_INVITE_EPOCH'),\n\n    // email\n    emailSmtpUrl: envStr('PDS_EMAIL_SMTP_URL'),\n    emailFromAddress: envStr('PDS_EMAIL_FROM_ADDRESS'),\n    emailDisableConfirmationLink: envBool(\n      'PDS_EMAIL_DISABLE_CONFIRMATION_LINK',\n    ),\n    moderationEmailSmtpUrl: envStr('PDS_MODERATION_EMAIL_SMTP_URL'),\n    moderationEmailAddress: envStr('PDS_MODERATION_EMAIL_ADDRESS'),\n\n    // subscription\n    maxSubscriptionBuffer: envInt('PDS_MAX_SUBSCRIPTION_BUFFER'),\n    repoBackfillLimitMs: envInt('PDS_REPO_BACKFILL_LIMIT_MS'),\n\n    // appview\n    bskyAppViewUrl: envStr('PDS_BSKY_APP_VIEW_URL'),\n    bskyAppViewDid: envStr('PDS_BSKY_APP_VIEW_DID'),\n    bskyAppViewCdnUrlPattern: envStr('PDS_BSKY_APP_VIEW_CDN_URL_PATTERN'),\n\n    // mod service\n    modServiceUrl: envStr('PDS_MOD_SERVICE_URL'),\n    modServiceDid: envStr('PDS_MOD_SERVICE_DID'),\n\n    // report service\n    reportServiceUrl: envStr('PDS_REPORT_SERVICE_URL'),\n    reportServiceDid: envStr('PDS_REPORT_SERVICE_DID'),\n\n    // rate limits\n    rateLimitsEnabled: envBool('PDS_RATE_LIMITS_ENABLED'),\n    rateLimitBypassKey: envStr('PDS_RATE_LIMIT_BYPASS_KEY'),\n    rateLimitBypassIps: envList('PDS_RATE_LIMIT_BYPASS_IPS'),\n\n    // redis\n    redisScratchAddress: envStr('PDS_REDIS_SCRATCH_ADDRESS'),\n    redisScratchPassword: envStr('PDS_REDIS_SCRATCH_PASSWORD'),\n\n    // crawlers\n    crawlers: envList('PDS_CRAWLERS'),\n\n    // secrets\n    dpopSecret: envStr('PDS_DPOP_SECRET'),\n    jwtSecret: envStr('PDS_JWT_SECRET'),\n    adminPassword: envStr('PDS_ADMIN_PASSWORD'),\n    entrywayAdminToken: envStr('PDS_ENTRYWAY_ADMIN_TOKEN'),\n\n    // kms\n    plcRotationKeyKmsKeyId: envStr('PDS_PLC_ROTATION_KEY_KMS_KEY_ID'),\n    // memory\n    plcRotationKeyK256PrivateKeyHex: envStr(\n      'PDS_PLC_ROTATION_KEY_K256_PRIVATE_KEY_HEX',\n    ),\n\n    // user provided url http requests\n    disableSsrfProtection: envBool('PDS_DISABLE_SSRF_PROTECTION'),\n\n    // fetch\n    fetchMaxResponseSize: envInt('PDS_FETCH_MAX_RESPONSE_SIZE'),\n\n    // proxy\n    proxyAllowHTTP2: envBool('PDS_PROXY_ALLOW_HTTP2'),\n    proxyHeadersTimeout: envInt('PDS_PROXY_HEADERS_TIMEOUT'),\n    proxyBodyTimeout: envInt('PDS_PROXY_BODY_TIMEOUT'),\n    proxyMaxResponseSize: envInt('PDS_PROXY_MAX_RESPONSE_SIZE'),\n    proxyMaxRetries: envInt('PDS_PROXY_MAX_RETRIES'),\n    proxyPreferCompressed: envBool('PDS_PROXY_PREFER_COMPRESSED'),\n\n    // lexicon resolution\n    lexiconDidAuthority: envStr('PDS_LEXICON_AUTHORITY_DID'),\n  }\n}\n\nexport type ServerEnvironment = Partial<ReturnType<typeof readEnv>>\n"]}

package/dist/context.d.ts

@@ -46,7 +46,7 @@ export type AppContextOptions = {
     plcRotationKey: crypto.Keypair;
     cfg: ServerConfig;
 };
-export declare class AppContext {
+export declare class AppContext implements AsyncDisposable {
     actorStore: ActorStore;
     blobstore: (did: string) => BlobStore;
     localViewer: LocalViewerCreator;
@@ -90,6 +90,8 @@ export declare class AppContext {
         };
     }>;
     serviceAuthJwt(did: string, aud: string, lxm: string): Promise<string>;
+    destroy(): Promise<void>;
+    [Symbol.asyncDispose](): Promise<void>;
 }
 export default AppContext;
 //# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,GAAG,MAAM,cAAc,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAClC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAGpC,OAAO,KAAK,KAAK,MAAM,MAAM,QAAQ,CAAA;AAErC,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAIL,aAAa,EACd,MAAM,kCAAkC,CAAA;AAEzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAK9C,OAAO,EAAE,KAAK,KAAK,EAAiB,MAAM,0BAA0B,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AAGrE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAA;AAEzD,OAAO,EACL,YAAY,EAGb,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAEzD,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,8BAA8B,CAAA;AAErC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAEhD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAA;IACrC,WAAW,EAAE,kBAAkB,CAAA;IAC/B,MAAM,EAAE,YAAY,CAAA;IACpB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAA;IACrB,cAAc,EAAE,cAAc,CAAA;IAC9B,SAAS,EAAE,SAAS,CAAA;IACpB,eAAe,EAAE,eAAe,CAAA;IAChC,YAAY,CAAC,EAAE,KAAK,CAAA;IACpB,QAAQ,EAAE,QAAQ,CAAA;IAClB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAC,UAAU,CAAA;IAC7B,SAAS,EAAE,KAAK,CAAA;IAChB,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,YAAY,EAAE,YAAY,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAC,OAAO,CAAA;IAC9B,GAAG,EAAE,YAAY,CAAA;CAClB,CAAA;AAED,qBAAa,UAAU;IACd,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAA;IACrC,WAAW,EAAE,kBAAkB,CAAA;IAC/B,MAAM,EAAE,YAAY,CAAA;IACpB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAA;IACrB,cAAc,EAAE,cAAc,CAAA;IAC9B,SAAS,EAAE,SAAS,CAAA;IACpB,eAAe,EAAE,eAAe,CAAA;IAChC,YAAY,CAAC,EAAE,KAAK,CAAA;IACpB,QAAQ,EAAE,QAAQ,CAAA;IAClB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAA;IAC7B,SAAS,EAAE,KAAK,CAAA;IAChB,YAAY,EAAE,YAAY,CAAA;IAC1B,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,cAAc,EAAE,MAAM,CAAC,OAAO,CAAA;IAC9B,GAAG,EAAE,YAAY,CAAA;IAExB,YAAY,IAAI,EAAE,iBAAiB,EAyBlC;IAED,OAAa,UAAU,CACrB,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,aAAa,EACtB,SAAS,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GACrC,OAAO,CAAC,UAAU,CAAC,CAsVrB;IAEK,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;;;;OAGhD;IAEK,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;;OAQvE;IAED,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO;;MAE3C;IAEK,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;;;;OAQ7D;IAEK,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,mBAQzD;CACF;eAUc,UAAU"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,GAAG,MAAM,cAAc,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAClC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAGpC,OAAO,KAAK,KAAK,MAAM,MAAM,QAAQ,CAAA;AAErC,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAIL,aAAa,EACd,MAAM,kCAAkC,CAAA;AAEzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAK9C,OAAO,EAAE,KAAK,KAAK,EAAiB,MAAM,0BAA0B,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AAGrE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAA;AAEzD,OAAO,EACL,YAAY,EAGb,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAKrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAEzD,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,8BAA8B,CAAA;AAErC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAEhD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAA;IACrC,WAAW,EAAE,kBAAkB,CAAA;IAC/B,MAAM,EAAE,YAAY,CAAA;IACpB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAA;IACrB,cAAc,EAAE,cAAc,CAAA;IAC9B,SAAS,EAAE,SAAS,CAAA;IACpB,eAAe,EAAE,eAAe,CAAA;IAChC,YAAY,CAAC,EAAE,KAAK,CAAA;IACpB,QAAQ,EAAE,QAAQ,CAAA;IAClB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAC,UAAU,CAAA;IAC7B,SAAS,EAAE,KAAK,CAAA;IAChB,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,YAAY,EAAE,YAAY,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAC,OAAO,CAAA;IAC9B,GAAG,EAAE,YAAY,CAAA;CAClB,CAAA;AAED,qBAAa,UAAW,YAAW,eAAe;IACzC,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAA;IACrC,WAAW,EAAE,kBAAkB,CAAA;IAC/B,MAAM,EAAE,YAAY,CAAA;IACpB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAA;IACrB,cAAc,EAAE,cAAc,CAAA;IAC9B,SAAS,EAAE,SAAS,CAAA;IACpB,eAAe,EAAE,eAAe,CAAA;IAChC,YAAY,CAAC,EAAE,KAAK,CAAA;IACpB,QAAQ,EAAE,QAAQ,CAAA;IAClB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAA;IAC7B,SAAS,EAAE,KAAK,CAAA;IAChB,YAAY,EAAE,YAAY,CAAA;IAC1B,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,cAAc,EAAE,MAAM,CAAC,OAAO,CAAA;IAC9B,GAAG,EAAE,YAAY,CAAA;IAExB,YAAY,IAAI,EAAE,iBAAiB,EAyBlC;IAED,OAAa,UAAU,CACrB,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,aAAa,EACtB,SAAS,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GACrC,OAAO,CAAC,UAAU,CAAC,CA8XrB;IAEK,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;;;;OAGhD;IAEK,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;;OAQvE;IAED,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO;;MAE3C;IAEK,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;;;;OAQ7D;IAEK,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,mBAQzD;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAkB7B;IAEK,CAAC,MAAM,CAAC,YAAY,CAAC,kBAE1B;CACF;eAUc,UAAU"}

package/dist/context.js

@@ -21,6 +21,7 @@ import { BskyAppView } from './bsky-app-view.js';
 import { Crawlers } from './crawlers.js';
 import { DidSqliteCache } from './did-cache/index.js';
 import { DiskBlobStore } from './disk-blobstore.js';
+import { events } from './events.js';
 import { ImageUrlBuilder } from './image/image-url-builder.js';
 import { fetchLogger, lexiconResolverLogger, oauthLogger } from './logger.js';
 import { ServerMailer } from './mailer/index.js';
@@ -57,6 +58,7 @@ export class AppContext {
         this.cfg = opts.cfg;
     }
     static async fromConfig(cfg, secrets, overrides) {
+        // @TODO Implement using an AsyncDisposableStack
         const blobstore = cfg.blobstore.provider === 's3'
             ? S3BlobStore.creator({
                 bucket: cfg.blobstore.bucket,
@@ -219,6 +221,44 @@ export class AppContext {
                         isTrusted: cfg.oauth.provider?.trustedClients?.includes(clientId),
                     };
                 },
+                onSignedUp({ account, data, clientId }) {
+                    events.accountCreated({
+                        source: 'oauth',
+                        did: account.did,
+                        clientId,
+                        invited: data.inviteCode != null,
+                        deactivated: false,
+                    });
+                },
+                onSignedIn({ account, clientId }) {
+                    events.signedIn({
+                        did: account.did,
+                        clientId,
+                    });
+                },
+                onAuthorized({ account, client }) {
+                    events.oauthAuthorized({
+                        did: account.did,
+                        clientId: client.id,
+                        clientFirstParty: client.isFirstParty,
+                        clientTrusted: client.isTrusted,
+                        clientConfidential: client.isConfidential,
+                    });
+                },
+                onTokenCreated({ account, client }) {
+                    events.sessionCreated({
+                        source: 'oauth',
+                        did: account.did,
+                        clientId: client.id,
+                    });
+                },
+                onTokenRefreshed({ account, client }) {
+                    events.sessionRefreshed({
+                        source: 'oauth',
+                        did: account.did,
+                        clientId: client.id,
+                    });
+                },
             })
             : undefined;
         const scopeRefGetter = entrywayClient
@@ -310,6 +350,32 @@ export class AppContext {
             keypair,
         });
     }
+    async destroy() {
+        try {
+            await this.backgroundQueue.destroy();
+        }
+        finally {
+            try {
+                await this.sequencer.destroy();
+            }
+            finally {
+                try {
+                    await this.accountManager.close();
+                }
+                finally {
+                    try {
+                        await this.redisScratch?.quit();
+                    }
+                    finally {
+                        await this.proxyAgent.destroy();
+                    }
+                }
+            }
+        }
+    }
+    async [Symbol.asyncDispose]() {
+        await this.destroy();
+    }
 }
 const basicAuthHeader = (username, password) => {
     const encoded = ui8.toString(ui8.fromString(`${username}:${password}`, 'utf8'), 'base64pad');

package/dist/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,KAAK,GAAG,MAAM,cAAc,CAAA;AAGnC,OAAO,KAAK,UAAU,MAAM,YAAY,CAAA;AACxC,OAAO,KAAK,GAAG,MAAM,aAAa,CAAA;AAElC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EACL,eAAe,EACf,OAAO,EACP,WAAW,EACX,aAAa,GACd,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAA;AAEhE,OAAO,EACL,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAc,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAA;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAA;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC3D,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEhD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EACL,WAAW,GAEZ,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AA6BhD,MAAM,OAAO,UAAU;IA0BrB,YAAY,IAAuB;QACjC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAA;QAC7C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QACzC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAA;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAA;QACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAA;QAC7C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAA;QAC3C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QACzC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;QACnD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAA;QACrC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;QACvC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QACzC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;IACrB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,UAAU,CACrB,GAAiB,EACjB,OAAsB,EACtB,SAAsC;QAEtC,MAAM,SAAS,GACb,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;YAC7B,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;gBAClB,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM;gBAC5B,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM;gBAC5B,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ;gBAChC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,cAAc;gBAC5C,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW;gBACtC,eAAe,EAAE,GAAG,CAAC,SAAS,CAAC,eAAe;gBAC9C,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC,gBAAgB;aACjD,CAAC;YACJ,CAAC,CAAC,aAAa,CAAC,OAAO,CACnB,GAAG,CAAC,SAAS,CAAC,QAAQ,EACtB,GAAG,CAAC,SAAS,CAAC,YAAY,CAC3B,CAAA;QAEP,MAAM,aAAa,GACjB,GAAG,CAAC,KAAK,KAAK,IAAI;YAChB,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAC/C,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAEzD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;QAEvE,MAAM,gBAAgB,GACpB,GAAG,CAAC,eAAe,KAAK,IAAI;YAC1B,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC;YACzD,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAEzD,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QAEpE,MAAM,QAAQ,GAAG,IAAI,cAAc,CACjC,GAAG,CAAC,EAAE,CAAC,aAAa,EACpB,GAAG,CAAC,QAAQ,CAAC,aAAa,EAC1B,GAAG,CAAC,QAAQ,CAAC,WAAW,EACxB,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAChC,CAAA;QACD,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAA;QAE/B,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;YAChC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;YAC3B,QAAQ;YACR,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,eAAe;YACrC,iBAAiB,EAAE,GAAG,CAAC,QAAQ,CAAC,uBAAuB;SACxD,CAAC,CAAA;QACF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAErD,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1E,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAC3B,eAAe,EACf,GAAG,CAAC,OAAO,CAAC,QAAQ,EACpB,GAAG,CAAC,QAAQ,CACb,CAAA;QACD,MAAM,SAAS,GAAG,IAAI,SAAS,CAC7B,GAAG,CAAC,EAAE,CAAC,cAAc,EACrB,QAAQ,EACR,SAAS,EACT,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAChC,CAAA;QACD,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK;YAC5B,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YACvD,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW;YACjC,CAAC,CAAC,IAAI,WAAW,CAAC;gBACd,GAAG,GAAG,CAAC,WAAW;gBAClB,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;aACtC,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,gBAAgB,GAAG,GAAG,CAAC,UAAU;YACrC,CAAC,CAAC,IAAI,MAAM,CACR,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,EAC/B;gBACE,2DAA2D;gBAC3D,wBAAwB,EAAE,KAAK;gBAC/B,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;aACtC,CACF;YACH,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,eAAe,GAAG,GAAG,CAAC,aAAa;YACvC,CAAC,CAAC,IAAI,MAAM,CACR,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,EAClC;gBACE,2DAA2D;gBAC3D,wBAAwB,EAAE,KAAK;gBAC/B,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;aACtC,CACF;YACH,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ;YACjC,CAAC,CAAC,IAAI,MAAM,CACR,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,EAC7B;gBACE,2DAA2D;gBAC3D,wBAAwB,EAAE,KAAK;gBAC/B,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;aACtC,CACF;YACH,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,mBAAmB,GACvB,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,kBAAkB;YACxC,CAAC,CAAC,IAAI,MAAM,CACR;gBACE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG;gBACzB,OAAO,EAAE;oBACP,aAAa,EAAE,eAAe,CAC5B,OAAO,EACP,OAAO,CAAC,kBAAkB,CAC3B;iBACF;aACF,EACD;gBACE,2DAA2D;gBAC3D,wBAAwB,EAAE,KAAK;gBAC/B,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;aACtC,CACF;YACH,CAAC,CAAC,SAAS,CAAA;QAEf,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC7D,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ;YAC/B,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YACrD,CAAC,CAAC,IAAI,CAAA;QAER,MAAM,eAAe,GAAG,IAAI,eAAe,CACzC,GAAG,CAAC,OAAO,CAAC,QAAQ,EACpB,WAAW,CACZ,CAAA;QAED,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE;YAChD,SAAS;YACT,eAAe;SAChB,CAAC,CAAA;QAEF,MAAM,cAAc,GAClB,OAAO,CAAC,cAAc,CAAC,QAAQ,KAAK,KAAK;YACvC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,KAAK;aACpC,CAAC;YACJ,CAAC,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAClC,OAAO,CAAC,cAAc,CAAC,aAAa,CACrC,CAAA;QAEP,MAAM,cAAc,GAAG,IAAI,cAAc,CACvC,GAAG,EACH,UAAU,EACV,UAAU,EACV,YAAY,EACZ,MAAM,EACN,SAAS,EACT,SAAS,EACT,cAAc,CACf,CAAA;QACD,MAAM,cAAc,CAAC,cAAc,EAAE,CAAA;QAErC,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CACrC,cAAc,EACd,eAAe,EACf,WAAW,CACZ,CAAA;QAED,qEAAqE;QACrE,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAE7C;;;;;;;;WAQG;QACH,MAAM,SAAS,GAAG,aAAa,CAAC;YAC9B,WAAW,EAAE,KAAK;YAClB,qBAAqB,EAAE,KAAK;YAC5B,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,eAAe;YAC1C,cAAc,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,qBAAqB;YAEhD,KAAK,EAAE,UAAU,KAAK,EAAE,IAAI;gBAC1B,MAAM,MAAM,GACV,IAAI,EAAE,MAAM,IAAI,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;gBACnE,MAAM,GAAG,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAEhE,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;gBAE1C,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;YACjD,CAAC;SACF,CAAC,CAAA;QAEF,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ;YACtC,CAAC,CAAC,IAAI,aAAa,CAAC;gBAChB,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;gBACxB,MAAM,EAAE,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;gBACrE,KAAK,EAAE,IAAI,UAAU,CACnB,cAAc,EACd,UAAU,EACV,eAAe,EACf,eAAe,EACf,MAAM,EACN,SAAS,EACT,SAAS,EACT,cAAc,EACd,GAAG,CAAC,OAAO,CAAC,SAAS,EACrB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAC5B;gBACD,KAAK,EAAE,YAAY;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;gBACxC,oBAAoB,EAAE,GAAG,CAAC,QAAQ,CAAC,oBAAoB;gBACvD,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ;gBACrC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ;gBACrC,SAAS;gBACT,WAAW,EAAE,IAAI,WAAW,CAAC;oBAC3B,KAAK,EAAE,SAAS;oBAChB,eAAe,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;oBACpC,KAAK,EAAE;wBACL,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;4BAC/B,qBAAqB,CAAC,KAAK,CACzB,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EACzB,iCAAiC,CAClC,CAAA;4BACD,+DAA+D;4BAC/D,OAAO,GAAG,CAAC,OAAO,CAAC,YAAY,CAAA;wBACjC,CAAC;wBACD,wBAAwB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;4BACpC,qBAAqB,CAAC,IAAI,CACxB,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAC9B,sBAAsB,CACvB,CAAA;wBACH,CAAC;wBACD,uBAAuB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;4BACnC,qBAAqB,CAAC,KAAK,CACzB,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAC9B,8BAA8B,CAC/B,CAAA;wBACH,CAAC;wBACD,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE;4BACxB,qBAAqB,CAAC,IAAI,CACxB,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,EAC5C,iBAAiB,CAClB,CAAA;wBACH,CAAC;wBACD,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE;4BACvB,qBAAqB,CAAC,KAAK,CACzB,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAC5B,qBAAqB,CACtB,CAAA;wBACH,CAAC;qBACF;iBACF,CAAC;gBACF,QAAQ,EAAE;oBACR,mBAAmB,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;iBACxD;gBACD,mEAAmE;gBACnE,gEAAgE;gBAChE,kEAAkE;gBAClE,oEAAoE;gBACpE,0DAA0D;gBAC1D,eAAe,EAAE,eAAe,CAAC,QAAQ;gBAEzC,aAAa,CAAC,QAAQ;oBACpB,OAAO;wBACL,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC;qBAClE,CAAA;gBACH,CAAC;aACF,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,cAAc,GAAG,cAAc;YACnC,CAAC,CAAC,IAAI,oBAAoB,CAAC,cAAc,EAAE,YAAY,CAAC;YACxD,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,aAAa,GACjB,aAAa,IAAI,sCAAsC;YACvD,IAAI,aAAa,CAAC;gBAChB,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;gBACxB,MAAM,EAAE,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,YAAa,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACvE,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,YAAY;gBACnB,aAAa,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;oBAC9C,wEAAwE;oBACxE,oCAAoC;oBACpC,IAAI,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;wBACjC,WAAW,CAAC,IAAI,CACd,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EACpD,6CAA6C,CAC9C,CAAA;oBACH,CAAC;oBAED,IAAI,cAAc,EAAE,CAAC;wBACnB,OAAO,CAAC,KAAK,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;oBACjE,CAAC;oBAED,OAAO,OAAO,CAAA;gBAChB,CAAC;aACF,CAAC,CAAA;QAEJ,MAAM,YAAY,GAAG,IAAI,YAAY,CACnC,cAAc,EACd,UAAU,EACV,aAAa,EACb;YACE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS;YAChC,MAAM,EAAE,YAAY,IAAI,YAAY;YACpC,SAAS,EAAE,OAAO,CAAC,aAAa;YAChC,IAAI,EAAE;gBACJ,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG;gBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG;gBAC3B,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG;aAChC;SACF,CACF,CAAA;QAED,OAAO,IAAI,UAAU,CAAC;YACpB,UAAU;YACV,SAAS;YACT,WAAW;YACX,MAAM;YACN,gBAAgB;YAChB,QAAQ;YACR,UAAU;YACV,SAAS;YACT,cAAc;YACd,SAAS;YACT,eAAe;YACf,YAAY;YACZ,QAAQ;YACR,WAAW;YACX,gBAAgB;YAChB,eAAe;YACf,cAAc;YACd,mBAAmB;YACnB,UAAU;YACV,SAAS;YACT,YAAY;YACZ,aAAa;YACb,cAAc;YACd,GAAG;YACH,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;SACrB,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,GAAW;QAC/C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACxB,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAChE,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAoB,EAAE,GAAW,EAAE,GAAW;QACtE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC3C,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EACrB,GAAG,CACJ,CAAA;QACD,OAAO,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACnC,CAAC;IAED,uBAAuB,CAAC,GAAoB;QAC1C,OAAO,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,GAAW,EAAE,GAAW;QAC5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClD,OAAO,wBAAwB,CAAC;YAC9B,GAAG,EAAE,GAAG;YACR,GAAG;YACH,GAAG;YACH,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAW,EAAE,GAAW,EAAE,GAAW;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClD,OAAO,gBAAgB,CAAC;YACtB,GAAG,EAAE,GAAG;YACR,GAAG;YACH,GAAG;YACH,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;CACF;AAED,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAE,EAAE;IAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAC1B,GAAG,CAAC,UAAU,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,EACjD,WAAW,CACZ,CAAA;IACD,OAAO,SAAS,OAAO,EAAE,CAAA;AAC3B,CAAC,CAAA;AAED,eAAe,UAAU,CAAA","sourcesContent":["import assert from 'node:assert'\nimport * as plc from '@did-plc/lib'\nimport type express from 'express'\nimport type { Redis } from 'ioredis'\nimport * as nodemailer from 'nodemailer'\nimport * as ui8 from 'uint8arrays'\nimport type * as undici from 'undici'\nimport { KmsKeypair, S3BlobStore } from '@atproto/aws'\nimport * as crypto from '@atproto/crypto'\nimport { IdResolver } from '@atproto/identity'\nimport { Client } from '@atproto/lex'\nimport {\n  AccessTokenMode,\n  JoseKey,\n  LexResolver,\n  OAuthProvider,\n} from '@atproto/oauth-provider/provider'\nimport { OAuthVerifier } from '@atproto/oauth-provider/verifier'\nimport type { BlobStore } from '@atproto/repo'\nimport {\n  createServiceAuthHeaders,\n  createServiceJwt,\n} from '@atproto/xrpc-server'\nimport { type Fetch, safeFetchWrap } from '@atproto-labs/fetch-node'\nimport { AccountManager } from './account-manager/account-manager.js'\nimport { OAuthStore } from './account-manager/oauth-store.js'\nimport { ScopeReferenceGetter } from './account-manager/scope-reference-getter.js'\nimport { ActorStore } from './actor-store/actor-store.js'\nimport { authPassthru, forwardedFor } from './api/proxy.js'\nimport {\n  AuthVerifier,\n  createPublicKeyObject,\n  createSecretKeyObject,\n} from './auth-verifier.js'\nimport { BackgroundQueue } from './background.js'\nimport { BskyAppView } from './bsky-app-view.js'\nimport type { ServerConfig, ServerSecrets } from './config/index.js'\nimport { Crawlers } from './crawlers.js'\nimport { DidSqliteCache } from './did-cache/index.js'\nimport { DiskBlobStore } from './disk-blobstore.js'\nimport { ImageUrlBuilder } from './image/image-url-builder.js'\nimport { fetchLogger, lexiconResolverLogger, oauthLogger } from './logger.js'\nimport { ServerMailer } from './mailer/index.js'\nimport { ModerationMailer } from './mailer/moderation.js'\nimport { buildProxyAgent } from './pipethrough.js'\nimport {\n  LocalViewer,\n  type LocalViewerCreator,\n} from './read-after-write/viewer.js'\nimport { getRedisClient } from './redis.js'\nimport { Sequencer } from './sequencer/index.js'\n\nexport type AppContextOptions = {\n  actorStore: ActorStore\n  blobstore: (did: string) => BlobStore\n  localViewer: LocalViewerCreator\n  mailer: ServerMailer\n  moderationMailer: ModerationMailer\n  didCache: DidSqliteCache\n  idResolver: IdResolver\n  plcClient: plc.Client\n  accountManager: AccountManager\n  sequencer: Sequencer\n  backgroundQueue: BackgroundQueue\n  redisScratch?: Redis\n  crawlers: Crawlers\n  bskyAppView?: BskyAppView\n  moderationClient?: Client\n  reportingClient?: Client\n  entrywayClient?: Client\n  entrywayAdminClient?: Client\n  proxyAgent: undici.Dispatcher\n  safeFetch: Fetch\n  oauthProvider?: OAuthProvider\n  authVerifier: AuthVerifier\n  plcRotationKey: crypto.Keypair\n  cfg: ServerConfig\n}\n\nexport class AppContext {\n  public actorStore: ActorStore\n  public blobstore: (did: string) => BlobStore\n  public localViewer: LocalViewerCreator\n  public mailer: ServerMailer\n  public moderationMailer: ModerationMailer\n  public didCache: DidSqliteCache\n  public idResolver: IdResolver\n  public plcClient: plc.Client\n  public accountManager: AccountManager\n  public sequencer: Sequencer\n  public backgroundQueue: BackgroundQueue\n  public redisScratch?: Redis\n  public crawlers: Crawlers\n  public bskyAppView?: BskyAppView\n  public moderationClient: Client | undefined\n  public reportingClient: Client | undefined\n  public entrywayClient: Client | undefined\n  public entrywayAdminClient: Client | undefined\n  public proxyAgent: undici.Dispatcher\n  public safeFetch: Fetch\n  public authVerifier: AuthVerifier\n  public oauthProvider?: OAuthProvider\n  public plcRotationKey: crypto.Keypair\n  public cfg: ServerConfig\n\n  constructor(opts: AppContextOptions) {\n    this.actorStore = opts.actorStore\n    this.blobstore = opts.blobstore\n    this.localViewer = opts.localViewer\n    this.mailer = opts.mailer\n    this.moderationMailer = opts.moderationMailer\n    this.didCache = opts.didCache\n    this.idResolver = opts.idResolver\n    this.plcClient = opts.plcClient\n    this.accountManager = opts.accountManager\n    this.sequencer = opts.sequencer\n    this.backgroundQueue = opts.backgroundQueue\n    this.redisScratch = opts.redisScratch\n    this.crawlers = opts.crawlers\n    this.bskyAppView = opts.bskyAppView\n    this.moderationClient = opts.moderationClient\n    this.reportingClient = opts.reportingClient\n    this.entrywayClient = opts.entrywayClient\n    this.entrywayAdminClient = opts.entrywayAdminClient\n    this.proxyAgent = opts.proxyAgent\n    this.safeFetch = opts.safeFetch\n    this.authVerifier = opts.authVerifier\n    this.oauthProvider = opts.oauthProvider\n    this.plcRotationKey = opts.plcRotationKey\n    this.cfg = opts.cfg\n  }\n\n  static async fromConfig(\n    cfg: ServerConfig,\n    secrets: ServerSecrets,\n    overrides?: Partial<AppContextOptions>,\n  ): Promise<AppContext> {\n    const blobstore =\n      cfg.blobstore.provider === 's3'\n        ? S3BlobStore.creator({\n            bucket: cfg.blobstore.bucket,\n            region: cfg.blobstore.region,\n            endpoint: cfg.blobstore.endpoint,\n            forcePathStyle: cfg.blobstore.forcePathStyle,\n            credentials: cfg.blobstore.credentials,\n            uploadTimeoutMs: cfg.blobstore.uploadTimeoutMs,\n            requestTimeoutMs: cfg.blobstore.requestTimeoutMs,\n          })\n        : DiskBlobStore.creator(\n            cfg.blobstore.location,\n            cfg.blobstore.tempLocation,\n          )\n\n    const mailTransport =\n      cfg.email !== null\n        ? nodemailer.createTransport(cfg.email.smtpUrl)\n        : nodemailer.createTransport({ jsonTransport: true })\n\n    const mailer = new ServerMailer(mailTransport, cfg.email, cfg.branding)\n\n    const modMailTransport =\n      cfg.moderationEmail !== null\n        ? nodemailer.createTransport(cfg.moderationEmail.smtpUrl)\n        : nodemailer.createTransport({ jsonTransport: true })\n\n    const moderationMailer = new ModerationMailer(modMailTransport, cfg)\n\n    const didCache = new DidSqliteCache(\n      cfg.db.didCacheDbLoc,\n      cfg.identity.cacheStaleTTL,\n      cfg.identity.cacheMaxTTL,\n      cfg.db.disableWalAutoCheckpoint,\n    )\n    await didCache.migrateOrThrow()\n\n    const idResolver = new IdResolver({\n      plcUrl: cfg.identity.plcUrl,\n      didCache,\n      timeout: cfg.identity.resolverTimeout,\n      backupNameservers: cfg.identity.handleBackupNameservers,\n    })\n    const plcClient = new plc.Client(cfg.identity.plcUrl)\n\n    const backgroundQueue = new BackgroundQueue(undefined, { concurrency: 5 })\n    const crawlers = new Crawlers(\n      backgroundQueue,\n      cfg.service.hostname,\n      cfg.crawlers,\n    )\n    const sequencer = new Sequencer(\n      cfg.db.sequencerDbLoc,\n      crawlers,\n      undefined,\n      cfg.db.disableWalAutoCheckpoint,\n    )\n    const redisScratch = cfg.redis\n      ? getRedisClient(cfg.redis.address, cfg.redis.password)\n      : undefined\n\n    const bskyAppView = cfg.bskyAppView\n      ? new BskyAppView({\n          ...cfg.bskyAppView,\n          validateResponse: cfg.service.devMode,\n        })\n      : undefined\n\n    const moderationClient = cfg.modService\n      ? new Client(\n          { service: cfg.modService.url },\n          {\n            // Trust internal services to send us well-formed responses\n            strictResponseProcessing: false,\n            validateResponse: cfg.service.devMode,\n          },\n        )\n      : undefined\n    const reportingClient = cfg.reportService\n      ? new Client(\n          { service: cfg.reportService.url },\n          {\n            // Trust internal services to send us well-formed responses\n            strictResponseProcessing: false,\n            validateResponse: cfg.service.devMode,\n          },\n        )\n      : undefined\n    const entrywayClient = cfg.entryway\n      ? new Client(\n          { service: cfg.entryway.url },\n          {\n            // Trust internal services to send us well-formed responses\n            strictResponseProcessing: false,\n            validateResponse: cfg.service.devMode,\n          },\n        )\n      : undefined\n    const entrywayAdminClient =\n      cfg.entryway && secrets.entrywayAdminToken\n        ? new Client(\n            {\n              service: cfg.entryway.url,\n              headers: {\n                authorization: basicAuthHeader(\n                  'admin',\n                  secrets.entrywayAdminToken,\n                ),\n              },\n            },\n            {\n              // Trust internal services to send us well-formed responses\n              strictResponseProcessing: false,\n              validateResponse: cfg.service.devMode,\n            },\n          )\n        : undefined\n\n    const jwtSecretKey = createSecretKeyObject(secrets.jwtSecret)\n    const jwtPublicKey = cfg.entryway\n      ? createPublicKeyObject(cfg.entryway.jwtPublicKeyHex)\n      : null\n\n    const imageUrlBuilder = new ImageUrlBuilder(\n      cfg.service.hostname,\n      bskyAppView,\n    )\n\n    const actorStore = new ActorStore(cfg.actorStore, {\n      blobstore,\n      backgroundQueue,\n    })\n\n    const plcRotationKey =\n      secrets.plcRotationKey.provider === 'kms'\n        ? await KmsKeypair.load({\n            keyId: secrets.plcRotationKey.keyId,\n          })\n        : await crypto.Secp256k1Keypair.import(\n            secrets.plcRotationKey.privateKeyHex,\n          )\n\n    const accountManager = new AccountManager(\n      cfg,\n      actorStore,\n      idResolver,\n      jwtSecretKey,\n      mailer,\n      sequencer,\n      plcClient,\n      plcRotationKey,\n    )\n    await accountManager.migrateOrThrow()\n\n    const localViewer = LocalViewer.creator(\n      accountManager,\n      imageUrlBuilder,\n      bskyAppView,\n    )\n\n    // An agent for performing HTTP requests based on user provided URLs.\n    const proxyAgent = buildProxyAgent(cfg.proxy)\n\n    /**\n     * A fetch() function that protects against SSRF attacks, large responses &\n     * known bad domains. This function can safely be used to fetch user\n     * provided URLs (unless \"disableSsrfProtection\" is true, of course).\n     *\n     * @note **DO NOT** wrap `safeFetch` with any logging or other transforms as\n     * this might prevent the use of explicit `redirect: \"follow\"` init from\n     * working. See {@link safeFetchWrap}.\n     */\n    const safeFetch = safeFetchWrap({\n      allowIpHost: false,\n      allowImplicitRedirect: false,\n      responseMaxSize: cfg.fetch.maxResponseSize,\n      ssrfProtection: !cfg.fetch.disableSsrfProtection,\n\n      fetch: function (input, init) {\n        const method =\n          init?.method ?? (input instanceof Request ? input.method : 'GET')\n        const uri = input instanceof Request ? input.url : String(input)\n\n        fetchLogger.info({ method, uri }, 'fetch')\n\n        return globalThis.fetch.call(this, input, init)\n      },\n    })\n\n    const oauthProvider = cfg.oauth.provider\n      ? new OAuthProvider({\n          issuer: cfg.oauth.issuer,\n          keyset: [await JoseKey.fromKeyLike(jwtSecretKey, undefined, 'HS256')],\n          store: new OAuthStore(\n            accountManager,\n            actorStore,\n            imageUrlBuilder,\n            backgroundQueue,\n            mailer,\n            sequencer,\n            plcClient,\n            plcRotationKey,\n            cfg.service.publicUrl,\n            cfg.identity.recoveryDidKey,\n          ),\n          redis: redisScratch,\n          dpopSecret: secrets.dpopSecret,\n          inviteCodeRequired: cfg.invites.required,\n          availableUserDomains: cfg.identity.serviceHandleDomains,\n          hcaptcha: cfg.oauth.provider.hcaptcha,\n          branding: cfg.oauth.provider.branding,\n          safeFetch,\n          lexResolver: new LexResolver({\n            fetch: safeFetch,\n            plcDirectoryUrl: cfg.identity.plcUrl,\n            hooks: {\n              onResolveAuthority: ({ nsid }) => {\n                lexiconResolverLogger.debug(\n                  { nsid: nsid.toString() },\n                  'Resolving lexicon DID authority',\n                )\n                // Override the lexicon did resolution to point to a custom PDS\n                return cfg.lexicon.didAuthority\n              },\n              onResolveAuthorityResult({ nsid, did }) {\n                lexiconResolverLogger.info(\n                  { nsid: nsid.toString(), did },\n                  'Resolved lexicon DID',\n                )\n              },\n              onResolveAuthorityError({ nsid, err }) {\n                lexiconResolverLogger.error(\n                  { nsid: nsid.toString(), err },\n                  'Lexicon DID resolution error',\n                )\n              },\n              onFetchResult({ uri, cid }) {\n                lexiconResolverLogger.info(\n                  { uri: uri.toString(), cid: cid.toString() },\n                  'Fetched lexicon',\n                )\n              },\n              onFetchError({ err, uri }) {\n                lexiconResolverLogger.error(\n                  { uri: uri.toString(), err },\n                  'Lexicon fetch error',\n                )\n              },\n            },\n          }),\n          metadata: {\n            protected_resources: [new URL(cfg.oauth.issuer).origin],\n          },\n          // If the PDS is both an authorization server & resource server (no\n          // entryway), we can afford to check the token validity on every\n          // request. This allows revoked tokens to be rejected immediately.\n          // This also allows JWT to be shorter since some claims (notably the\n          // \"scope\" claim) do not need to be included in the token.\n          accessTokenMode: AccessTokenMode.stateful,\n\n          getClientInfo(clientId) {\n            return {\n              isTrusted: cfg.oauth.provider?.trustedClients?.includes(clientId),\n            }\n          },\n        })\n      : undefined\n\n    const scopeRefGetter = entrywayClient\n      ? new ScopeReferenceGetter(entrywayClient, redisScratch)\n      : undefined\n\n    const oauthVerifier: OAuthVerifier =\n      oauthProvider ?? // OAuthProvider extends OAuthVerifier\n      new OAuthVerifier({\n        issuer: cfg.oauth.issuer,\n        keyset: [await JoseKey.fromKeyLike(jwtPublicKey!, undefined, 'ES256K')],\n        dpopSecret: secrets.dpopSecret,\n        redis: redisScratch,\n        onDecodeToken: async ({ payload, dpopProof }) => {\n          // @TODO drop this once oauth provider no longer accepts DPoP proof with\n          // query or fragment in \"htu\" claim.\n          if (dpopProof?.htu.match(/[?#]/)) {\n            oauthLogger.info(\n              { htu: dpopProof.htu, client_id: payload.client_id },\n              'DPoP proof \"htu\" contains query or fragment',\n            )\n          }\n\n          if (scopeRefGetter) {\n            payload.scope = await scopeRefGetter.dereference(payload.scope)\n          }\n\n          return payload\n        },\n      })\n\n    const authVerifier = new AuthVerifier(\n      accountManager,\n      idResolver,\n      oauthVerifier,\n      {\n        publicUrl: cfg.service.publicUrl,\n        jwtKey: jwtPublicKey ?? jwtSecretKey,\n        adminPass: secrets.adminPassword,\n        dids: {\n          pds: cfg.service.did,\n          entryway: cfg.entryway?.did,\n          modService: cfg.modService?.did,\n        },\n      },\n    )\n\n    return new AppContext({\n      actorStore,\n      blobstore,\n      localViewer,\n      mailer,\n      moderationMailer,\n      didCache,\n      idResolver,\n      plcClient,\n      accountManager,\n      sequencer,\n      backgroundQueue,\n      redisScratch,\n      crawlers,\n      bskyAppView,\n      moderationClient,\n      reportingClient,\n      entrywayClient,\n      entrywayAdminClient,\n      proxyAgent,\n      safeFetch,\n      authVerifier,\n      oauthProvider,\n      plcRotationKey,\n      cfg,\n      ...(overrides ?? {}),\n    })\n  }\n\n  async appviewAuthHeaders(did: string, lxm: string) {\n    assert(this.bskyAppView)\n    return this.serviceAuthHeaders(did, this.bskyAppView.did, lxm)\n  }\n\n  async entrywayAuthHeaders(req: express.Request, did: string, lxm: string) {\n    assert(this.cfg.entryway)\n    const headers = await this.serviceAuthHeaders(\n      did,\n      this.cfg.entryway.did,\n      lxm,\n    )\n    return forwardedFor(req, headers)\n  }\n\n  entrywayPassthruHeaders(req: express.Request) {\n    return forwardedFor(req, authPassthru(req))\n  }\n\n  async serviceAuthHeaders(did: string, aud: string, lxm: string) {\n    const keypair = await this.actorStore.keypair(did)\n    return createServiceAuthHeaders({\n      iss: did,\n      aud,\n      lxm,\n      keypair,\n    })\n  }\n\n  async serviceAuthJwt(did: string, aud: string, lxm: string) {\n    const keypair = await this.actorStore.keypair(did)\n    return createServiceJwt({\n      iss: did,\n      aud,\n      lxm,\n      keypair,\n    })\n  }\n}\n\nconst basicAuthHeader = (username: string, password: string) => {\n  const encoded = ui8.toString(\n    ui8.fromString(`${username}:${password}`, 'utf8'),\n    'base64pad',\n  )\n  return `Basic ${encoded}`\n}\n\nexport default AppContext\n"]}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,KAAK,GAAG,MAAM,cAAc,CAAA;AAGnC,OAAO,KAAK,UAAU,MAAM,YAAY,CAAA;AACxC,OAAO,KAAK,GAAG,MAAM,aAAa,CAAA;AAElC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EACL,eAAe,EACf,OAAO,EACP,WAAW,EACX,aAAa,GACd,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAA;AAEhE,OAAO,EACL,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAc,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAA;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAA;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC3D,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEhD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EACL,WAAW,GAEZ,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AA6BhD,MAAM,OAAO,UAAU;IA0BrB,YAAY,IAAuB;QACjC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAA;QAC7C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QACzC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAA;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAA;QACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAA;QAC7C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAA;QAC3C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QACzC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;QACnD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAA;QACrC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;QACvC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QACzC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;IACrB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,UAAU,CACrB,GAAiB,EACjB,OAAsB,EACtB,SAAsC;QAEtC,gDAAgD;QAEhD,MAAM,SAAS,GACb,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI;YAC7B,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;gBAClB,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM;gBAC5B,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM;gBAC5B,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ;gBAChC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,cAAc;gBAC5C,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW;gBACtC,eAAe,EAAE,GAAG,CAAC,SAAS,CAAC,eAAe;gBAC9C,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC,gBAAgB;aACjD,CAAC;YACJ,CAAC,CAAC,aAAa,CAAC,OAAO,CACnB,GAAG,CAAC,SAAS,CAAC,QAAQ,EACtB,GAAG,CAAC,SAAS,CAAC,YAAY,CAC3B,CAAA;QAEP,MAAM,aAAa,GACjB,GAAG,CAAC,KAAK,KAAK,IAAI;YAChB,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAC/C,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAEzD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;QAEvE,MAAM,gBAAgB,GACpB,GAAG,CAAC,eAAe,KAAK,IAAI;YAC1B,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC;YACzD,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAEzD,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QAEpE,MAAM,QAAQ,GAAG,IAAI,cAAc,CACjC,GAAG,CAAC,EAAE,CAAC,aAAa,EACpB,GAAG,CAAC,QAAQ,CAAC,aAAa,EAC1B,GAAG,CAAC,QAAQ,CAAC,WAAW,EACxB,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAChC,CAAA;QACD,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAA;QAE/B,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;YAChC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;YAC3B,QAAQ;YACR,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,eAAe;YACrC,iBAAiB,EAAE,GAAG,CAAC,QAAQ,CAAC,uBAAuB;SACxD,CAAC,CAAA;QACF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAErD,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1E,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAC3B,eAAe,EACf,GAAG,CAAC,OAAO,CAAC,QAAQ,EACpB,GAAG,CAAC,QAAQ,CACb,CAAA;QACD,MAAM,SAAS,GAAG,IAAI,SAAS,CAC7B,GAAG,CAAC,EAAE,CAAC,cAAc,EACrB,QAAQ,EACR,SAAS,EACT,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAChC,CAAA;QACD,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK;YAC5B,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YACvD,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW;YACjC,CAAC,CAAC,IAAI,WAAW,CAAC;gBACd,GAAG,GAAG,CAAC,WAAW;gBAClB,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;aACtC,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,gBAAgB,GAAG,GAAG,CAAC,UAAU;YACrC,CAAC,CAAC,IAAI,MAAM,CACR,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,EAC/B;gBACE,2DAA2D;gBAC3D,wBAAwB,EAAE,KAAK;gBAC/B,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;aACtC,CACF;YACH,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,eAAe,GAAG,GAAG,CAAC,aAAa;YACvC,CAAC,CAAC,IAAI,MAAM,CACR,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,EAClC;gBACE,2DAA2D;gBAC3D,wBAAwB,EAAE,KAAK;gBAC/B,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;aACtC,CACF;YACH,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ;YACjC,CAAC,CAAC,IAAI,MAAM,CACR,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,EAC7B;gBACE,2DAA2D;gBAC3D,wBAAwB,EAAE,KAAK;gBAC/B,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;aACtC,CACF;YACH,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,mBAAmB,GACvB,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,kBAAkB;YACxC,CAAC,CAAC,IAAI,MAAM,CACR;gBACE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG;gBACzB,OAAO,EAAE;oBACP,aAAa,EAAE,eAAe,CAC5B,OAAO,EACP,OAAO,CAAC,kBAAkB,CAC3B;iBACF;aACF,EACD;gBACE,2DAA2D;gBAC3D,wBAAwB,EAAE,KAAK;gBAC/B,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;aACtC,CACF;YACH,CAAC,CAAC,SAAS,CAAA;QAEf,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC7D,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ;YAC/B,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YACrD,CAAC,CAAC,IAAI,CAAA;QAER,MAAM,eAAe,GAAG,IAAI,eAAe,CACzC,GAAG,CAAC,OAAO,CAAC,QAAQ,EACpB,WAAW,CACZ,CAAA;QAED,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE;YAChD,SAAS;YACT,eAAe;SAChB,CAAC,CAAA;QAEF,MAAM,cAAc,GAClB,OAAO,CAAC,cAAc,CAAC,QAAQ,KAAK,KAAK;YACvC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,KAAK;aACpC,CAAC;YACJ,CAAC,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAClC,OAAO,CAAC,cAAc,CAAC,aAAa,CACrC,CAAA;QAEP,MAAM,cAAc,GAAG,IAAI,cAAc,CACvC,GAAG,EACH,UAAU,EACV,UAAU,EACV,YAAY,EACZ,MAAM,EACN,SAAS,EACT,SAAS,EACT,cAAc,CACf,CAAA;QACD,MAAM,cAAc,CAAC,cAAc,EAAE,CAAA;QAErC,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CACrC,cAAc,EACd,eAAe,EACf,WAAW,CACZ,CAAA;QAED,qEAAqE;QACrE,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAE7C;;;;;;;;WAQG;QACH,MAAM,SAAS,GAAG,aAAa,CAAC;YAC9B,WAAW,EAAE,KAAK;YAClB,qBAAqB,EAAE,KAAK;YAC5B,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,eAAe;YAC1C,cAAc,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,qBAAqB;YAEhD,KAAK,EAAE,UAAU,KAAK,EAAE,IAAI;gBAC1B,MAAM,MAAM,GACV,IAAI,EAAE,MAAM,IAAI,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;gBACnE,MAAM,GAAG,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAEhE,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;gBAE1C,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;YACjD,CAAC;SACF,CAAC,CAAA;QAEF,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ;YACtC,CAAC,CAAC,IAAI,aAAa,CAAC;gBAChB,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;gBACxB,MAAM,EAAE,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;gBACrE,KAAK,EAAE,IAAI,UAAU,CACnB,cAAc,EACd,UAAU,EACV,eAAe,EACf,eAAe,EACf,MAAM,EACN,SAAS,EACT,SAAS,EACT,cAAc,EACd,GAAG,CAAC,OAAO,CAAC,SAAS,EACrB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAC5B;gBACD,KAAK,EAAE,YAAY;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;gBACxC,oBAAoB,EAAE,GAAG,CAAC,QAAQ,CAAC,oBAAoB;gBACvD,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ;gBACrC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ;gBACrC,SAAS;gBACT,WAAW,EAAE,IAAI,WAAW,CAAC;oBAC3B,KAAK,EAAE,SAAS;oBAChB,eAAe,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;oBACpC,KAAK,EAAE;wBACL,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;4BAC/B,qBAAqB,CAAC,KAAK,CACzB,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EACzB,iCAAiC,CAClC,CAAA;4BACD,+DAA+D;4BAC/D,OAAO,GAAG,CAAC,OAAO,CAAC,YAAY,CAAA;wBACjC,CAAC;wBACD,wBAAwB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;4BACpC,qBAAqB,CAAC,IAAI,CACxB,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAC9B,sBAAsB,CACvB,CAAA;wBACH,CAAC;wBACD,uBAAuB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;4BACnC,qBAAqB,CAAC,KAAK,CACzB,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAC9B,8BAA8B,CAC/B,CAAA;wBACH,CAAC;wBACD,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE;4BACxB,qBAAqB,CAAC,IAAI,CACxB,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,EAC5C,iBAAiB,CAClB,CAAA;wBACH,CAAC;wBACD,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE;4BACvB,qBAAqB,CAAC,KAAK,CACzB,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAC5B,qBAAqB,CACtB,CAAA;wBACH,CAAC;qBACF;iBACF,CAAC;gBACF,QAAQ,EAAE;oBACR,mBAAmB,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;iBACxD;gBACD,mEAAmE;gBACnE,gEAAgE;gBAChE,kEAAkE;gBAClE,oEAAoE;gBACpE,0DAA0D;gBAC1D,eAAe,EAAE,eAAe,CAAC,QAAQ;gBAEzC,aAAa,CAAC,QAAQ;oBACpB,OAAO;wBACL,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC;qBAClE,CAAA;gBACH,CAAC;gBACD,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACpC,MAAM,CAAC,cAAc,CAAC;wBACpB,MAAM,EAAE,OAAO;wBACf,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,QAAQ;wBACR,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;wBAChC,WAAW,EAAE,KAAK;qBACnB,CAAC,CAAA;gBACJ,CAAC;gBACD,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE;oBAC9B,MAAM,CAAC,QAAQ,CAAC;wBACd,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,QAAQ;qBACT,CAAC,CAAA;gBACJ,CAAC;gBACD,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;oBAC9B,MAAM,CAAC,eAAe,CAAC;wBACrB,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,QAAQ,EAAE,MAAM,CAAC,EAAE;wBACnB,gBAAgB,EAAE,MAAM,CAAC,YAAY;wBACrC,aAAa,EAAE,MAAM,CAAC,SAAS;wBAC/B,kBAAkB,EAAE,MAAM,CAAC,cAAc;qBAC1C,CAAC,CAAA;gBACJ,CAAC;gBACD,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;oBAChC,MAAM,CAAC,cAAc,CAAC;wBACpB,MAAM,EAAE,OAAO;wBACf,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,QAAQ,EAAE,MAAM,CAAC,EAAE;qBACpB,CAAC,CAAA;gBACJ,CAAC;gBACD,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;oBAClC,MAAM,CAAC,gBAAgB,CAAC;wBACtB,MAAM,EAAE,OAAO;wBACf,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,QAAQ,EAAE,MAAM,CAAC,EAAE;qBACpB,CAAC,CAAA;gBACJ,CAAC;aACF,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,cAAc,GAAG,cAAc;YACnC,CAAC,CAAC,IAAI,oBAAoB,CAAC,cAAc,EAAE,YAAY,CAAC;YACxD,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,aAAa,GACjB,aAAa,IAAI,sCAAsC;YACvD,IAAI,aAAa,CAAC;gBAChB,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;gBACxB,MAAM,EAAE,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,YAAa,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACvE,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,YAAY;gBACnB,aAAa,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;oBAC9C,wEAAwE;oBACxE,oCAAoC;oBACpC,IAAI,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;wBACjC,WAAW,CAAC,IAAI,CACd,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EACpD,6CAA6C,CAC9C,CAAA;oBACH,CAAC;oBAED,IAAI,cAAc,EAAE,CAAC;wBACnB,OAAO,CAAC,KAAK,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;oBACjE,CAAC;oBAED,OAAO,OAAO,CAAA;gBAChB,CAAC;aACF,CAAC,CAAA;QAEJ,MAAM,YAAY,GAAG,IAAI,YAAY,CACnC,cAAc,EACd,UAAU,EACV,aAAa,EACb;YACE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS;YAChC,MAAM,EAAE,YAAY,IAAI,YAAY;YACpC,SAAS,EAAE,OAAO,CAAC,aAAa;YAChC,IAAI,EAAE;gBACJ,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG;gBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG;gBAC3B,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG;aAChC;SACF,CACF,CAAA;QAED,OAAO,IAAI,UAAU,CAAC;YACpB,UAAU;YACV,SAAS;YACT,WAAW;YACX,MAAM;YACN,gBAAgB;YAChB,QAAQ;YACR,UAAU;YACV,SAAS;YACT,cAAc;YACd,SAAS;YACT,eAAe;YACf,YAAY;YACZ,QAAQ;YACR,WAAW;YACX,gBAAgB;YAChB,eAAe;YACf,cAAc;YACd,mBAAmB;YACnB,UAAU;YACV,SAAS;YACT,YAAY;YACZ,aAAa;YACb,cAAc;YACd,GAAG;YACH,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;SACrB,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,GAAW;QAC/C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACxB,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAChE,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAoB,EAAE,GAAW,EAAE,GAAW;QACtE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC3C,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EACrB,GAAG,CACJ,CAAA;QACD,OAAO,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACnC,CAAC;IAED,uBAAuB,CAAC,GAAoB;QAC1C,OAAO,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,GAAW,EAAE,GAAW;QAC5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClD,OAAO,wBAAwB,CAAC;YAC9B,GAAG,EAAE,GAAG;YACR,GAAG;YACH,GAAG;YACH,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAW,EAAE,GAAW,EAAE,GAAW;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClD,OAAO,gBAAgB,CAAC;YACtB,GAAG,EAAE,GAAG;YACR,GAAG;YACH,GAAG;YACH,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAA;QACtC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAA;YAChC,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAA;gBACnC,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAA;oBACjC,CAAC;4BAAS,CAAC;wBACT,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAA;oBACjC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QACzB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;IACtB,CAAC;CACF;AAED,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAE,EAAE;IAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAC1B,GAAG,CAAC,UAAU,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,EACjD,WAAW,CACZ,CAAA;IACD,OAAO,SAAS,OAAO,EAAE,CAAA;AAC3B,CAAC,CAAA;AAED,eAAe,UAAU,CAAA","sourcesContent":["import assert from 'node:assert'\nimport * as plc from '@did-plc/lib'\nimport type express from 'express'\nimport type { Redis } from 'ioredis'\nimport * as nodemailer from 'nodemailer'\nimport * as ui8 from 'uint8arrays'\nimport type * as undici from 'undici'\nimport { KmsKeypair, S3BlobStore } from '@atproto/aws'\nimport * as crypto from '@atproto/crypto'\nimport { IdResolver } from '@atproto/identity'\nimport { Client } from '@atproto/lex'\nimport {\n  AccessTokenMode,\n  JoseKey,\n  LexResolver,\n  OAuthProvider,\n} from '@atproto/oauth-provider/provider'\nimport { OAuthVerifier } from '@atproto/oauth-provider/verifier'\nimport type { BlobStore } from '@atproto/repo'\nimport {\n  createServiceAuthHeaders,\n  createServiceJwt,\n} from '@atproto/xrpc-server'\nimport { type Fetch, safeFetchWrap } from '@atproto-labs/fetch-node'\nimport { AccountManager } from './account-manager/account-manager.js'\nimport { OAuthStore } from './account-manager/oauth-store.js'\nimport { ScopeReferenceGetter } from './account-manager/scope-reference-getter.js'\nimport { ActorStore } from './actor-store/actor-store.js'\nimport { authPassthru, forwardedFor } from './api/proxy.js'\nimport {\n  AuthVerifier,\n  createPublicKeyObject,\n  createSecretKeyObject,\n} from './auth-verifier.js'\nimport { BackgroundQueue } from './background.js'\nimport { BskyAppView } from './bsky-app-view.js'\nimport type { ServerConfig, ServerSecrets } from './config/index.js'\nimport { Crawlers } from './crawlers.js'\nimport { DidSqliteCache } from './did-cache/index.js'\nimport { DiskBlobStore } from './disk-blobstore.js'\nimport { events } from './events.js'\nimport { ImageUrlBuilder } from './image/image-url-builder.js'\nimport { fetchLogger, lexiconResolverLogger, oauthLogger } from './logger.js'\nimport { ServerMailer } from './mailer/index.js'\nimport { ModerationMailer } from './mailer/moderation.js'\nimport { buildProxyAgent } from './pipethrough.js'\nimport {\n  LocalViewer,\n  type LocalViewerCreator,\n} from './read-after-write/viewer.js'\nimport { getRedisClient } from './redis.js'\nimport { Sequencer } from './sequencer/index.js'\n\nexport type AppContextOptions = {\n  actorStore: ActorStore\n  blobstore: (did: string) => BlobStore\n  localViewer: LocalViewerCreator\n  mailer: ServerMailer\n  moderationMailer: ModerationMailer\n  didCache: DidSqliteCache\n  idResolver: IdResolver\n  plcClient: plc.Client\n  accountManager: AccountManager\n  sequencer: Sequencer\n  backgroundQueue: BackgroundQueue\n  redisScratch?: Redis\n  crawlers: Crawlers\n  bskyAppView?: BskyAppView\n  moderationClient?: Client\n  reportingClient?: Client\n  entrywayClient?: Client\n  entrywayAdminClient?: Client\n  proxyAgent: undici.Dispatcher\n  safeFetch: Fetch\n  oauthProvider?: OAuthProvider\n  authVerifier: AuthVerifier\n  plcRotationKey: crypto.Keypair\n  cfg: ServerConfig\n}\n\nexport class AppContext implements AsyncDisposable {\n  public actorStore: ActorStore\n  public blobstore: (did: string) => BlobStore\n  public localViewer: LocalViewerCreator\n  public mailer: ServerMailer\n  public moderationMailer: ModerationMailer\n  public didCache: DidSqliteCache\n  public idResolver: IdResolver\n  public plcClient: plc.Client\n  public accountManager: AccountManager\n  public sequencer: Sequencer\n  public backgroundQueue: BackgroundQueue\n  public redisScratch?: Redis\n  public crawlers: Crawlers\n  public bskyAppView?: BskyAppView\n  public moderationClient: Client | undefined\n  public reportingClient: Client | undefined\n  public entrywayClient: Client | undefined\n  public entrywayAdminClient: Client | undefined\n  public proxyAgent: undici.Dispatcher\n  public safeFetch: Fetch\n  public authVerifier: AuthVerifier\n  public oauthProvider?: OAuthProvider\n  public plcRotationKey: crypto.Keypair\n  public cfg: ServerConfig\n\n  constructor(opts: AppContextOptions) {\n    this.actorStore = opts.actorStore\n    this.blobstore = opts.blobstore\n    this.localViewer = opts.localViewer\n    this.mailer = opts.mailer\n    this.moderationMailer = opts.moderationMailer\n    this.didCache = opts.didCache\n    this.idResolver = opts.idResolver\n    this.plcClient = opts.plcClient\n    this.accountManager = opts.accountManager\n    this.sequencer = opts.sequencer\n    this.backgroundQueue = opts.backgroundQueue\n    this.redisScratch = opts.redisScratch\n    this.crawlers = opts.crawlers\n    this.bskyAppView = opts.bskyAppView\n    this.moderationClient = opts.moderationClient\n    this.reportingClient = opts.reportingClient\n    this.entrywayClient = opts.entrywayClient\n    this.entrywayAdminClient = opts.entrywayAdminClient\n    this.proxyAgent = opts.proxyAgent\n    this.safeFetch = opts.safeFetch\n    this.authVerifier = opts.authVerifier\n    this.oauthProvider = opts.oauthProvider\n    this.plcRotationKey = opts.plcRotationKey\n    this.cfg = opts.cfg\n  }\n\n  static async fromConfig(\n    cfg: ServerConfig,\n    secrets: ServerSecrets,\n    overrides?: Partial<AppContextOptions>,\n  ): Promise<AppContext> {\n    // @TODO Implement using an AsyncDisposableStack\n\n    const blobstore =\n      cfg.blobstore.provider === 's3'\n        ? S3BlobStore.creator({\n            bucket: cfg.blobstore.bucket,\n            region: cfg.blobstore.region,\n            endpoint: cfg.blobstore.endpoint,\n            forcePathStyle: cfg.blobstore.forcePathStyle,\n            credentials: cfg.blobstore.credentials,\n            uploadTimeoutMs: cfg.blobstore.uploadTimeoutMs,\n            requestTimeoutMs: cfg.blobstore.requestTimeoutMs,\n          })\n        : DiskBlobStore.creator(\n            cfg.blobstore.location,\n            cfg.blobstore.tempLocation,\n          )\n\n    const mailTransport =\n      cfg.email !== null\n        ? nodemailer.createTransport(cfg.email.smtpUrl)\n        : nodemailer.createTransport({ jsonTransport: true })\n\n    const mailer = new ServerMailer(mailTransport, cfg.email, cfg.branding)\n\n    const modMailTransport =\n      cfg.moderationEmail !== null\n        ? nodemailer.createTransport(cfg.moderationEmail.smtpUrl)\n        : nodemailer.createTransport({ jsonTransport: true })\n\n    const moderationMailer = new ModerationMailer(modMailTransport, cfg)\n\n    const didCache = new DidSqliteCache(\n      cfg.db.didCacheDbLoc,\n      cfg.identity.cacheStaleTTL,\n      cfg.identity.cacheMaxTTL,\n      cfg.db.disableWalAutoCheckpoint,\n    )\n    await didCache.migrateOrThrow()\n\n    const idResolver = new IdResolver({\n      plcUrl: cfg.identity.plcUrl,\n      didCache,\n      timeout: cfg.identity.resolverTimeout,\n      backupNameservers: cfg.identity.handleBackupNameservers,\n    })\n    const plcClient = new plc.Client(cfg.identity.plcUrl)\n\n    const backgroundQueue = new BackgroundQueue(undefined, { concurrency: 5 })\n    const crawlers = new Crawlers(\n      backgroundQueue,\n      cfg.service.hostname,\n      cfg.crawlers,\n    )\n    const sequencer = new Sequencer(\n      cfg.db.sequencerDbLoc,\n      crawlers,\n      undefined,\n      cfg.db.disableWalAutoCheckpoint,\n    )\n    const redisScratch = cfg.redis\n      ? getRedisClient(cfg.redis.address, cfg.redis.password)\n      : undefined\n\n    const bskyAppView = cfg.bskyAppView\n      ? new BskyAppView({\n          ...cfg.bskyAppView,\n          validateResponse: cfg.service.devMode,\n        })\n      : undefined\n\n    const moderationClient = cfg.modService\n      ? new Client(\n          { service: cfg.modService.url },\n          {\n            // Trust internal services to send us well-formed responses\n            strictResponseProcessing: false,\n            validateResponse: cfg.service.devMode,\n          },\n        )\n      : undefined\n    const reportingClient = cfg.reportService\n      ? new Client(\n          { service: cfg.reportService.url },\n          {\n            // Trust internal services to send us well-formed responses\n            strictResponseProcessing: false,\n            validateResponse: cfg.service.devMode,\n          },\n        )\n      : undefined\n    const entrywayClient = cfg.entryway\n      ? new Client(\n          { service: cfg.entryway.url },\n          {\n            // Trust internal services to send us well-formed responses\n            strictResponseProcessing: false,\n            validateResponse: cfg.service.devMode,\n          },\n        )\n      : undefined\n    const entrywayAdminClient =\n      cfg.entryway && secrets.entrywayAdminToken\n        ? new Client(\n            {\n              service: cfg.entryway.url,\n              headers: {\n                authorization: basicAuthHeader(\n                  'admin',\n                  secrets.entrywayAdminToken,\n                ),\n              },\n            },\n            {\n              // Trust internal services to send us well-formed responses\n              strictResponseProcessing: false,\n              validateResponse: cfg.service.devMode,\n            },\n          )\n        : undefined\n\n    const jwtSecretKey = createSecretKeyObject(secrets.jwtSecret)\n    const jwtPublicKey = cfg.entryway\n      ? createPublicKeyObject(cfg.entryway.jwtPublicKeyHex)\n      : null\n\n    const imageUrlBuilder = new ImageUrlBuilder(\n      cfg.service.hostname,\n      bskyAppView,\n    )\n\n    const actorStore = new ActorStore(cfg.actorStore, {\n      blobstore,\n      backgroundQueue,\n    })\n\n    const plcRotationKey =\n      secrets.plcRotationKey.provider === 'kms'\n        ? await KmsKeypair.load({\n            keyId: secrets.plcRotationKey.keyId,\n          })\n        : await crypto.Secp256k1Keypair.import(\n            secrets.plcRotationKey.privateKeyHex,\n          )\n\n    const accountManager = new AccountManager(\n      cfg,\n      actorStore,\n      idResolver,\n      jwtSecretKey,\n      mailer,\n      sequencer,\n      plcClient,\n      plcRotationKey,\n    )\n    await accountManager.migrateOrThrow()\n\n    const localViewer = LocalViewer.creator(\n      accountManager,\n      imageUrlBuilder,\n      bskyAppView,\n    )\n\n    // An agent for performing HTTP requests based on user provided URLs.\n    const proxyAgent = buildProxyAgent(cfg.proxy)\n\n    /**\n     * A fetch() function that protects against SSRF attacks, large responses &\n     * known bad domains. This function can safely be used to fetch user\n     * provided URLs (unless \"disableSsrfProtection\" is true, of course).\n     *\n     * @note **DO NOT** wrap `safeFetch` with any logging or other transforms as\n     * this might prevent the use of explicit `redirect: \"follow\"` init from\n     * working. See {@link safeFetchWrap}.\n     */\n    const safeFetch = safeFetchWrap({\n      allowIpHost: false,\n      allowImplicitRedirect: false,\n      responseMaxSize: cfg.fetch.maxResponseSize,\n      ssrfProtection: !cfg.fetch.disableSsrfProtection,\n\n      fetch: function (input, init) {\n        const method =\n          init?.method ?? (input instanceof Request ? input.method : 'GET')\n        const uri = input instanceof Request ? input.url : String(input)\n\n        fetchLogger.info({ method, uri }, 'fetch')\n\n        return globalThis.fetch.call(this, input, init)\n      },\n    })\n\n    const oauthProvider = cfg.oauth.provider\n      ? new OAuthProvider({\n          issuer: cfg.oauth.issuer,\n          keyset: [await JoseKey.fromKeyLike(jwtSecretKey, undefined, 'HS256')],\n          store: new OAuthStore(\n            accountManager,\n            actorStore,\n            imageUrlBuilder,\n            backgroundQueue,\n            mailer,\n            sequencer,\n            plcClient,\n            plcRotationKey,\n            cfg.service.publicUrl,\n            cfg.identity.recoveryDidKey,\n          ),\n          redis: redisScratch,\n          dpopSecret: secrets.dpopSecret,\n          inviteCodeRequired: cfg.invites.required,\n          availableUserDomains: cfg.identity.serviceHandleDomains,\n          hcaptcha: cfg.oauth.provider.hcaptcha,\n          branding: cfg.oauth.provider.branding,\n          safeFetch,\n          lexResolver: new LexResolver({\n            fetch: safeFetch,\n            plcDirectoryUrl: cfg.identity.plcUrl,\n            hooks: {\n              onResolveAuthority: ({ nsid }) => {\n                lexiconResolverLogger.debug(\n                  { nsid: nsid.toString() },\n                  'Resolving lexicon DID authority',\n                )\n                // Override the lexicon did resolution to point to a custom PDS\n                return cfg.lexicon.didAuthority\n              },\n              onResolveAuthorityResult({ nsid, did }) {\n                lexiconResolverLogger.info(\n                  { nsid: nsid.toString(), did },\n                  'Resolved lexicon DID',\n                )\n              },\n              onResolveAuthorityError({ nsid, err }) {\n                lexiconResolverLogger.error(\n                  { nsid: nsid.toString(), err },\n                  'Lexicon DID resolution error',\n                )\n              },\n              onFetchResult({ uri, cid }) {\n                lexiconResolverLogger.info(\n                  { uri: uri.toString(), cid: cid.toString() },\n                  'Fetched lexicon',\n                )\n              },\n              onFetchError({ err, uri }) {\n                lexiconResolverLogger.error(\n                  { uri: uri.toString(), err },\n                  'Lexicon fetch error',\n                )\n              },\n            },\n          }),\n          metadata: {\n            protected_resources: [new URL(cfg.oauth.issuer).origin],\n          },\n          // If the PDS is both an authorization server & resource server (no\n          // entryway), we can afford to check the token validity on every\n          // request. This allows revoked tokens to be rejected immediately.\n          // This also allows JWT to be shorter since some claims (notably the\n          // \"scope\" claim) do not need to be included in the token.\n          accessTokenMode: AccessTokenMode.stateful,\n\n          getClientInfo(clientId) {\n            return {\n              isTrusted: cfg.oauth.provider?.trustedClients?.includes(clientId),\n            }\n          },\n          onSignedUp({ account, data, clientId }) {\n            events.accountCreated({\n              source: 'oauth',\n              did: account.did,\n              clientId,\n              invited: data.inviteCode != null,\n              deactivated: false,\n            })\n          },\n          onSignedIn({ account, clientId }) {\n            events.signedIn({\n              did: account.did,\n              clientId,\n            })\n          },\n          onAuthorized({ account, client }) {\n            events.oauthAuthorized({\n              did: account.did,\n              clientId: client.id,\n              clientFirstParty: client.isFirstParty,\n              clientTrusted: client.isTrusted,\n              clientConfidential: client.isConfidential,\n            })\n          },\n          onTokenCreated({ account, client }) {\n            events.sessionCreated({\n              source: 'oauth',\n              did: account.did,\n              clientId: client.id,\n            })\n          },\n          onTokenRefreshed({ account, client }) {\n            events.sessionRefreshed({\n              source: 'oauth',\n              did: account.did,\n              clientId: client.id,\n            })\n          },\n        })\n      : undefined\n\n    const scopeRefGetter = entrywayClient\n      ? new ScopeReferenceGetter(entrywayClient, redisScratch)\n      : undefined\n\n    const oauthVerifier: OAuthVerifier =\n      oauthProvider ?? // OAuthProvider extends OAuthVerifier\n      new OAuthVerifier({\n        issuer: cfg.oauth.issuer,\n        keyset: [await JoseKey.fromKeyLike(jwtPublicKey!, undefined, 'ES256K')],\n        dpopSecret: secrets.dpopSecret,\n        redis: redisScratch,\n        onDecodeToken: async ({ payload, dpopProof }) => {\n          // @TODO drop this once oauth provider no longer accepts DPoP proof with\n          // query or fragment in \"htu\" claim.\n          if (dpopProof?.htu.match(/[?#]/)) {\n            oauthLogger.info(\n              { htu: dpopProof.htu, client_id: payload.client_id },\n              'DPoP proof \"htu\" contains query or fragment',\n            )\n          }\n\n          if (scopeRefGetter) {\n            payload.scope = await scopeRefGetter.dereference(payload.scope)\n          }\n\n          return payload\n        },\n      })\n\n    const authVerifier = new AuthVerifier(\n      accountManager,\n      idResolver,\n      oauthVerifier,\n      {\n        publicUrl: cfg.service.publicUrl,\n        jwtKey: jwtPublicKey ?? jwtSecretKey,\n        adminPass: secrets.adminPassword,\n        dids: {\n          pds: cfg.service.did,\n          entryway: cfg.entryway?.did,\n          modService: cfg.modService?.did,\n        },\n      },\n    )\n\n    return new AppContext({\n      actorStore,\n      blobstore,\n      localViewer,\n      mailer,\n      moderationMailer,\n      didCache,\n      idResolver,\n      plcClient,\n      accountManager,\n      sequencer,\n      backgroundQueue,\n      redisScratch,\n      crawlers,\n      bskyAppView,\n      moderationClient,\n      reportingClient,\n      entrywayClient,\n      entrywayAdminClient,\n      proxyAgent,\n      safeFetch,\n      authVerifier,\n      oauthProvider,\n      plcRotationKey,\n      cfg,\n      ...(overrides ?? {}),\n    })\n  }\n\n  async appviewAuthHeaders(did: string, lxm: string) {\n    assert(this.bskyAppView)\n    return this.serviceAuthHeaders(did, this.bskyAppView.did, lxm)\n  }\n\n  async entrywayAuthHeaders(req: express.Request, did: string, lxm: string) {\n    assert(this.cfg.entryway)\n    const headers = await this.serviceAuthHeaders(\n      did,\n      this.cfg.entryway.did,\n      lxm,\n    )\n    return forwardedFor(req, headers)\n  }\n\n  entrywayPassthruHeaders(req: express.Request) {\n    return forwardedFor(req, authPassthru(req))\n  }\n\n  async serviceAuthHeaders(did: string, aud: string, lxm: string) {\n    const keypair = await this.actorStore.keypair(did)\n    return createServiceAuthHeaders({\n      iss: did,\n      aud,\n      lxm,\n      keypair,\n    })\n  }\n\n  async serviceAuthJwt(did: string, aud: string, lxm: string) {\n    const keypair = await this.actorStore.keypair(did)\n    return createServiceJwt({\n      iss: did,\n      aud,\n      lxm,\n      keypair,\n    })\n  }\n\n  async destroy(): Promise<void> {\n    try {\n      await this.backgroundQueue.destroy()\n    } finally {\n      try {\n        await this.sequencer.destroy()\n      } finally {\n        try {\n          await this.accountManager.close()\n        } finally {\n          try {\n            await this.redisScratch?.quit()\n          } finally {\n            await this.proxyAgent.destroy()\n          }\n        }\n      }\n    }\n  }\n\n  async [Symbol.asyncDispose]() {\n    await this.destroy()\n  }\n}\n\nconst basicAuthHeader = (username: string, password: string) => {\n  const encoded = ui8.toString(\n    ui8.fromString(`${username}:${password}`, 'utf8'),\n    'base64pad',\n  )\n  return `Basic ${encoded}`\n}\n\nexport default AppContext\n"]}

package/dist/events.d.ts

@@ -0,0 +1,59 @@
+import type { DidString } from '@atproto/syntax';
+import type { com } from './lexicons.js';
+/**
+ * Central hub for reporting PDS business events. Each method reports a single
+ * event to every relevant sink in one call:
+ *
+ *  1. a pino logger      → stdout/stderr (docker logs)
+ *  2. an OTEL counter    → aggregated metric (low-cardinality dimensions only)
+ *  3. the OTEL Logs SDK  → structured, trace-correlated log record (full detail)
+ *
+ * This keeps the three concerns in sync: there is exactly one call site per
+ * event, and the counter / log / attribute definitions live together here
+ * rather than being duplicated and drifting across handlers.
+ *
+ * @note High-cardinality attributes (e.g. `did`, `clientId`) are included in
+ * the pino and OTEL log records but deliberately kept OUT of the counters,
+ * whose attributes must stay low-cardinality to avoid a metric-series
+ * explosion.
+ *
+ * @note The OTEL counters and log records are no-ops unless the corresponding
+ * OTEL exporter is configured (see ./telemetry.ts), so calling these methods is
+ * always safe and essentially free when telemetry is disabled. Because the OTEL
+ * logger's `emit()` captures the active span context, log records are
+ * trace-correlated too.
+ */
+declare class EventReporter {
+    #private;
+    accountCreated({ source, did, invited, deactivated, clientId, }: {
+        source: com.atproto.server.createAccount.$lxm | 'oauth';
+        did: DidString;
+        invited: boolean;
+        deactivated: boolean;
+        clientId?: string;
+    }): void;
+    signedIn({ did, clientId }: {
+        did: DidString;
+        clientId?: string;
+    }): void;
+    sessionCreated({ source, did, clientId, }: {
+        source: 'oauth' | com.atproto.server.createAccount.$lxm | com.atproto.server.createSession.$lxm;
+        did: DidString;
+        clientId?: string;
+    }): void;
+    sessionRefreshed({ source, did, clientId, }: {
+        source: 'oauth' | com.atproto.server.refreshSession.$lxm;
+        did: DidString;
+        clientId?: string;
+    }): void;
+    oauthAuthorized({ did, clientId, clientTrusted, clientFirstParty, clientConfidential, }: {
+        did: DidString;
+        clientId: string;
+        clientTrusted: boolean;
+        clientFirstParty: boolean;
+        clientConfidential: boolean;
+    }): void;
+}
+export declare const events: EventReporter;
+export {};
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAMxC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,cAAM,aAAa;;IAgDjB,cAAc,CAAC,EACb,MAAM,EACN,GAAG,EACH,OAAO,EACP,WAAW,EACX,QAAQ,GACT,EAAE;QACD,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,GAAG,OAAO,CAAA;QACvD,GAAG,EAAE,SAAS,CAAA;QACd,OAAO,EAAE,OAAO,CAAA;QAChB,WAAW,EAAE,OAAO,CAAA;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,QASA;IAED,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,QAEhE;IAED,cAAc,CAAC,EACb,MAAM,EACN,GAAG,EACH,QAAQ,GACT,EAAE;QACD,MAAM,EACF,OAAO,GACP,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,GACrC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAA;QACzC,GAAG,EAAE,SAAS,CAAA;QACd,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,QAGA;IAED,gBAAgB,CAAC,EACf,MAAM,EACN,GAAG,EACH,QAAQ,GACT,EAAE;QACD,MAAM,EAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAA;QACxD,GAAG,EAAE,SAAS,CAAA;QACd,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,QAEA;IAED,eAAe,CAAC,EACd,GAAG,EACH,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GACnB,EAAE;QACD,GAAG,EAAE,SAAS,CAAA;QACd,QAAQ,EAAE,MAAM,CAAA;QAChB,aAAa,EAAE,OAAO,CAAA;QACtB,gBAAgB,EAAE,OAAO,CAAA;QACzB,kBAAkB,EAAE,OAAO,CAAA;KAC5B,QASA;CACF;AAED,eAAO,MAAM,MAAM,eAAsB,CAAA"}