@atproto/pds 0.5.50 → 0.5.52

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # @atproto/pds
 
+## 0.5.52
+
+### Patch Changes
+
+- [#5756](https://github.com/bluesky-social/atproto/pull/5756) [`54f54ea`](https://github.com/bluesky-social/atproto/commit/54f54ea831f37fe9f722844177f7e1bed8ae8bdc) Thanks [@gcwill70](https://github.com/gcwill70)! - Protect assigned and escalated reports from broad moderation-event and batch report closure, including owned subjects.
+
+- [#5746](https://github.com/bluesky-social/atproto/pull/5746) [`1c8c3a3`](https://github.com/bluesky-social/atproto/commit/1c8c3a3a8ea27a060f38cda71172339aa1728113) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Update to OpenTelemetry JS SDK 3.x (`@opentelemetry/api` 1.10), which requires Node.js `>=22.15.0`. Event log records are now emitted through `@opentelemetry/api` (`@opentelemetry/api-logs` was removed upstream). The HTTP instrumentation only reports the stable `http.server.request.duration` and `http.client.request.duration` metrics: the legacy `http.server.duration` and `http.client.duration` metrics are gone, and `OTEL_SEMCONV_STABILITY_OPT_IN=http` no longer has any effect. Instrumentations passed to `setup()` now also instrument modules loaded through ESM imports, not only `require()`d ones, when built on the same `@opentelemetry/instrumentation` as `@atproto-labs/opentelemetry-node`; otherwise `setup()` now throws an `InstrumentationMismatchError` instead of silently missing them. The new `@atproto-labs/opentelemetry-node/better-sqlite3-plugin` export, a port of `opentelemetry-plugin-better-sqlite3` producing identical spans, replaces that package in the PDS.
+
+- [#5753](https://github.com/bluesky-social/atproto/pull/5753) [`3bfd00f`](https://github.com/bluesky-social/atproto/commit/3bfd00f484dc144482c82a4ed248adc49e6be769) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Bound the decoded size of every stage of a multi-coding `content-encoding` chain, and reject bodies listing too many content-codings
+- Updated dependencies [[`3bfd00f`](https://github.com/bluesky-social/atproto/commit/3bfd00f484dc144482c82a4ed248adc49e6be769), [`63bc474`](https://github.com/bluesky-social/atproto/commit/63bc4747175c82497596e9ffaeaaaf83804b0311), [`3bfd00f`](https://github.com/bluesky-social/atproto/commit/3bfd00f484dc144482c82a4ed248adc49e6be769), [`1c8c3a3`](https://github.com/bluesky-social/atproto/commit/1c8c3a3a8ea27a060f38cda71172339aa1728113), [`1c8c3a3`](https://github.com/bluesky-social/atproto/commit/1c8c3a3a8ea27a060f38cda71172339aa1728113), [`1c8c3a3`](https://github.com/bluesky-social/atproto/commit/1c8c3a3a8ea27a060f38cda71172339aa1728113), [`3bfd00f`](https://github.com/bluesky-social/atproto/commit/3bfd00f484dc144482c82a4ed248adc49e6be769), [`3bfd00f`](https://github.com/bluesky-social/atproto/commit/3bfd00f484dc144482c82a4ed248adc49e6be769), [`3bfd00f`](https://github.com/bluesky-social/atproto/commit/3bfd00f484dc144482c82a4ed248adc49e6be769)]:
+  - @atproto/common@0.8.7
+  - @atproto/oauth-provider@0.25.2
+  - @atproto-labs/opentelemetry-node@0.5.0
+  - @atproto/xrpc-server@0.13.7
+  - @atproto/aws@0.3.21
+  - @atproto/repo@0.11.2
+  - @atproto-labs/xrpc-utils@0.1.28
+  - @atproto/lex@0.4.4
+
+## 0.5.51
+
+### Patch Changes
+
+- Updated dependencies [[`8656303`](https://github.com/bluesky-social/atproto/commit/86563037e8233162165fc455f926569386536dd1)]:
+  - @atproto/oauth-provider@0.25.1
+
 ## 0.5.50
 
 ### Patch Changes

package/dist/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAMxC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,cAAM,aAAa;;IAgDjB,cAAc,CAAC,EACb,MAAM,EACN,GAAG,EACH,OAAO,EACP,WAAW,EACX,QAAQ,GACT,EAAE;QACD,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,GAAG,OAAO,CAAA;QACvD,GAAG,EAAE,SAAS,CAAA;QACd,OAAO,EAAE,OAAO,CAAA;QAChB,WAAW,EAAE,OAAO,CAAA;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,QASA;IAED,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,QAEhE;IAED,cAAc,CAAC,EACb,MAAM,EACN,GAAG,EACH,QAAQ,GACT,EAAE;QACD,MAAM,EACF,OAAO,GACP,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,GACrC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAA;QACzC,GAAG,EAAE,SAAS,CAAA;QACd,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,QAGA;IAED,gBAAgB,CAAC,EACf,MAAM,EACN,GAAG,EACH,QAAQ,GACT,EAAE;QACD,MAAM,EAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAA;QACxD,GAAG,EAAE,SAAS,CAAA;QACd,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,QAEA;IAED,eAAe,CAAC,EACd,GAAG,EACH,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GACnB,EAAE;QACD,GAAG,EAAE,SAAS,CAAA;QACd,QAAQ,EAAE,MAAM,CAAA;QAChB,aAAa,EAAE,OAAO,CAAA;QACtB,gBAAgB,EAAE,OAAO,CAAA;QACzB,kBAAkB,EAAE,OAAO,CAAA;KAC5B,QASA;CACF;AAED,eAAO,MAAM,MAAM,eAAsB,CAAA"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAMxC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,cAAM,aAAa;;IAgDjB,cAAc,CAAC,EACb,MAAM,EACN,GAAG,EACH,OAAO,EACP,WAAW,EACX,QAAQ,GACT,EAAE;QACD,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,GAAG,OAAO,CAAA;QACvD,GAAG,EAAE,SAAS,CAAA;QACd,OAAO,EAAE,OAAO,CAAA;QAChB,WAAW,EAAE,OAAO,CAAA;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,QASA;IAED,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,QAEhE;IAED,cAAc,CAAC,EACb,MAAM,EACN,GAAG,EACH,QAAQ,GACT,EAAE;QACD,MAAM,EACF,OAAO,GACP,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,GACrC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAA;QACzC,GAAG,EAAE,SAAS,CAAA;QACd,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,QAGA;IAED,gBAAgB,CAAC,EACf,MAAM,EACN,GAAG,EACH,QAAQ,GACT,EAAE;QACD,MAAM,EAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAA;QACxD,GAAG,EAAE,SAAS,CAAA;QACd,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,QAEA;IAED,eAAe,CAAC,EACd,GAAG,EACH,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GACnB,EAAE;QACD,GAAG,EAAE,SAAS,CAAA;QACd,QAAQ,EAAE,MAAM,CAAA;QAChB,aAAa,EAAE,OAAO,CAAA;QACtB,gBAAgB,EAAE,OAAO,CAAA;QACzB,kBAAkB,EAAE,OAAO,CAAA;KAC5B,QASA;CACF;AAED,eAAO,MAAM,MAAM,eAAsB,CAAA"}

package/dist/events.js

@@ -1,5 +1,4 @@
-import { ValueType, diag, metrics } from '@opentelemetry/api';
-import { SeverityNumber, logs } from '@opentelemetry/api-logs';
+import { SeverityNumber, ValueType, diag, logs, metrics, } from '@opentelemetry/api';
 import { eventsLogger } from './logger.js';
 const meter = metrics.getMeter('@atproto/pds');
 const logger = logs.getLogger('@atproto/pds');

package/dist/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACzE,OAAO,EAAe,cAAc,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAA;AAG3E,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,MAAM,KAAK,GAAU,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;AACrD,MAAM,MAAM,GAAW,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;AAErD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,aAAa;IACjB,sBAAsB,GAAG,KAAK,CAAC,aAAa,CAGzC,iBAAiB,EAAE;QACpB,WAAW,EAAE,wCAAwC;QACrD,SAAS,EAAE,SAAS,CAAC,GAAG;KACzB,CAAC,CAAA;IAEF,sBAAsB,GAAG,KAAK,CAAC,aAAa,CAKzC,iBAAiB,EAAE;QACpB,WAAW,EAAE,wCAAwC;QACrD,SAAS,EAAE,SAAS,CAAC,GAAG;KACzB,CAAC,CAAA;IAEF,0BAA0B,GAAG,KAAK,CAAC,aAAa,CAE7C,qBAAqB,EAAE;QACxB,WAAW,EAAE,8DAA8D;QAC3E,SAAS,EAAE,SAAS,CAAC,GAAG;KACzB,CAAC,CAAA;IAEF;;;;;OAKG;IACH,IAAI,CACF,SAAiB,EACjB,UAAiE;QAEjE,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS;gBACT,cAAc,EAAE,cAAc,CAAC,IAAI;gBACnC,UAAU;aACX,CAAC,CAAA;YACF,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,CAAC,CAAA;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,uBAAuB,SAAS,GAAG,EAAE,GAAG,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAED,cAAc,CAAC,EACb,MAAM,EACN,GAAG,EACH,OAAO,EACP,WAAW,EACX,QAAQ,GAOT;QACC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC3B,MAAM;YACN,GAAG;YACH,OAAO;YACP,WAAW;YACX,QAAQ;SACT,CAAC,CAAA;QACF,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAyC;QAC/D,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;IACnD,CAAC;IAED,cAAc,CAAC,EACb,MAAM,EACN,GAAG,EACH,QAAQ,GAQT;QACC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;QACvD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAChD,CAAC;IAED,gBAAgB,CAAC,EACf,MAAM,EACN,GAAG,EACH,QAAQ,GAKT;QACC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,eAAe,CAAC,EACd,GAAG,EACH,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GAOnB;QACC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAC5B,GAAG;YACH,QAAQ;YACR,aAAa;YACb,gBAAgB;YAChB,kBAAkB;SACnB,CAAC,CAAA;QACF,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAC9D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAA","sourcesContent":["import { type Meter, ValueType, diag, metrics } from '@opentelemetry/api'\nimport { type Logger, SeverityNumber, logs } from '@opentelemetry/api-logs'\nimport type { DidString } from '@atproto/syntax'\nimport type { com } from './lexicons.js'\nimport { eventsLogger } from './logger.js'\n\nconst meter: Meter = metrics.getMeter('@atproto/pds')\nconst logger: Logger = logs.getLogger('@atproto/pds')\n\n/**\n * Central hub for reporting PDS business events. Each method reports a single\n * event to every relevant sink in one call:\n *\n *  1. a pino logger      → stdout/stderr (docker logs)\n *  2. an OTEL counter    → aggregated metric (low-cardinality dimensions only)\n *  3. the OTEL Logs SDK  → structured, trace-correlated log record (full detail)\n *\n * This keeps the three concerns in sync: there is exactly one call site per\n * event, and the counter / log / attribute definitions live together here\n * rather than being duplicated and drifting across handlers.\n *\n * @note High-cardinality attributes (e.g. `did`, `clientId`) are included in\n * the pino and OTEL log records but deliberately kept OUT of the counters,\n * whose attributes must stay low-cardinality to avoid a metric-series\n * explosion.\n *\n * @note The OTEL counters and log records are no-ops unless the corresponding\n * OTEL exporter is configured (see ./telemetry.ts), so calling these methods is\n * always safe and essentially free when telemetry is disabled. Because the OTEL\n * logger's `emit()` captures the active span context, log records are\n * trace-correlated too.\n */\nclass EventReporter {\n  #accountCreatedCounter = meter.createCounter<{\n    source: com.atproto.server.createAccount.$lxm | 'oauth'\n    deactivated: boolean\n  }>('account.created', {\n    description: 'Number of accounts created on this PDS',\n    valueType: ValueType.INT,\n  })\n\n  #sessionCreatedCounter = meter.createCounter<{\n    source:\n      | com.atproto.server.createAccount.$lxm\n      | com.atproto.server.createSession.$lxm\n      | 'oauth'\n  }>('session.created', {\n    description: 'Number of sessions created on this PDS',\n    valueType: ValueType.INT,\n  })\n\n  #oauthAuthorizationCounter = meter.createCounter<{\n    clientFirstParty: boolean\n  }>('oauth.authorization', {\n    description: 'Increased when an OAuth authorization is granted on this PDS',\n    valueType: ValueType.INT,\n  })\n\n  /**\n   * Fans a single event out to both the pino logger (stdout/stderr) and the\n   * OTEL Logs SDK (structured record).\n   *\n   * @note this method should never throw\n   */\n  #log(\n    eventName: string,\n    attributes: Record<string, string | number | boolean | undefined>,\n  ) {\n    try {\n      logger.emit({\n        eventName,\n        severityNumber: SeverityNumber.INFO,\n        attributes,\n      })\n      eventsLogger.info({ eventName, ...attributes })\n    } catch (err) {\n      diag.error(`Failed to log event ${eventName}:`, err)\n    }\n  }\n\n  accountCreated({\n    source,\n    did,\n    invited,\n    deactivated,\n    clientId,\n  }: {\n    source: com.atproto.server.createAccount.$lxm | 'oauth'\n    did: DidString\n    invited: boolean\n    deactivated: boolean\n    clientId?: string\n  }) {\n    this.#log('account.created', {\n      source,\n      did,\n      invited,\n      deactivated,\n      clientId,\n    })\n    this.#accountCreatedCounter.add(1, { source, deactivated })\n  }\n\n  signedIn({ did, clientId }: { did: DidString; clientId?: string }) {\n    this.#log('account.signed-in', { did, clientId })\n  }\n\n  sessionCreated({\n    source,\n    did,\n    clientId,\n  }: {\n    source:\n      | 'oauth'\n      | com.atproto.server.createAccount.$lxm\n      | com.atproto.server.createSession.$lxm\n    did: DidString\n    clientId?: string\n  }) {\n    this.#log('session.created', { source, did, clientId })\n    this.#sessionCreatedCounter.add(1, { source })\n  }\n\n  sessionRefreshed({\n    source,\n    did,\n    clientId,\n  }: {\n    source: 'oauth' | com.atproto.server.refreshSession.$lxm\n    did: DidString\n    clientId?: string\n  }) {\n    this.#log('session.refreshed', { source, did, clientId })\n  }\n\n  oauthAuthorized({\n    did,\n    clientId,\n    clientTrusted,\n    clientFirstParty,\n    clientConfidential,\n  }: {\n    did: DidString\n    clientId: string\n    clientTrusted: boolean\n    clientFirstParty: boolean\n    clientConfidential: boolean\n  }) {\n    this.#log('oauth.authorized', {\n      did,\n      clientId,\n      clientTrusted,\n      clientFirstParty,\n      clientConfidential,\n    })\n    this.#oauthAuthorizationCounter.add(1, { clientFirstParty })\n  }\n}\n\nexport const events = new EventReporter()\n"]}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,cAAc,EACd,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,OAAO,GACR,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,MAAM,KAAK,GAAU,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;AACrD,MAAM,MAAM,GAAW,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;AAErD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,aAAa;IACjB,sBAAsB,GAAG,KAAK,CAAC,aAAa,CAGzC,iBAAiB,EAAE;QACpB,WAAW,EAAE,wCAAwC;QACrD,SAAS,EAAE,SAAS,CAAC,GAAG;KACzB,CAAC,CAAA;IAEF,sBAAsB,GAAG,KAAK,CAAC,aAAa,CAKzC,iBAAiB,EAAE;QACpB,WAAW,EAAE,wCAAwC;QACrD,SAAS,EAAE,SAAS,CAAC,GAAG;KACzB,CAAC,CAAA;IAEF,0BAA0B,GAAG,KAAK,CAAC,aAAa,CAE7C,qBAAqB,EAAE;QACxB,WAAW,EAAE,8DAA8D;QAC3E,SAAS,EAAE,SAAS,CAAC,GAAG;KACzB,CAAC,CAAA;IAEF;;;;;OAKG;IACH,IAAI,CACF,SAAiB,EACjB,UAAiE;QAEjE,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS;gBACT,cAAc,EAAE,cAAc,CAAC,IAAI;gBACnC,UAAU;aACX,CAAC,CAAA;YACF,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,CAAC,CAAA;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,uBAAuB,SAAS,GAAG,EAAE,GAAG,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAED,cAAc,CAAC,EACb,MAAM,EACN,GAAG,EACH,OAAO,EACP,WAAW,EACX,QAAQ,GAOT;QACC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC3B,MAAM;YACN,GAAG;YACH,OAAO;YACP,WAAW;YACX,QAAQ;SACT,CAAC,CAAA;QACF,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAyC;QAC/D,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;IACnD,CAAC;IAED,cAAc,CAAC,EACb,MAAM,EACN,GAAG,EACH,QAAQ,GAQT;QACC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;QACvD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAChD,CAAC;IAED,gBAAgB,CAAC,EACf,MAAM,EACN,GAAG,EACH,QAAQ,GAKT;QACC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,eAAe,CAAC,EACd,GAAG,EACH,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GAOnB;QACC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAC5B,GAAG;YACH,QAAQ;YACR,aAAa;YACb,gBAAgB;YAChB,kBAAkB;SACnB,CAAC,CAAA;QACF,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAC9D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAA","sourcesContent":["import {\n  type Logger,\n  type Meter,\n  SeverityNumber,\n  ValueType,\n  diag,\n  logs,\n  metrics,\n} from '@opentelemetry/api'\nimport type { DidString } from '@atproto/syntax'\nimport type { com } from './lexicons.js'\nimport { eventsLogger } from './logger.js'\n\nconst meter: Meter = metrics.getMeter('@atproto/pds')\nconst logger: Logger = logs.getLogger('@atproto/pds')\n\n/**\n * Central hub for reporting PDS business events. Each method reports a single\n * event to every relevant sink in one call:\n *\n *  1. a pino logger      → stdout/stderr (docker logs)\n *  2. an OTEL counter    → aggregated metric (low-cardinality dimensions only)\n *  3. the OTEL Logs SDK  → structured, trace-correlated log record (full detail)\n *\n * This keeps the three concerns in sync: there is exactly one call site per\n * event, and the counter / log / attribute definitions live together here\n * rather than being duplicated and drifting across handlers.\n *\n * @note High-cardinality attributes (e.g. `did`, `clientId`) are included in\n * the pino and OTEL log records but deliberately kept OUT of the counters,\n * whose attributes must stay low-cardinality to avoid a metric-series\n * explosion.\n *\n * @note The OTEL counters and log records are no-ops unless the corresponding\n * OTEL exporter is configured (see ./telemetry.ts), so calling these methods is\n * always safe and essentially free when telemetry is disabled. Because the OTEL\n * logger's `emit()` captures the active span context, log records are\n * trace-correlated too.\n */\nclass EventReporter {\n  #accountCreatedCounter = meter.createCounter<{\n    source: com.atproto.server.createAccount.$lxm | 'oauth'\n    deactivated: boolean\n  }>('account.created', {\n    description: 'Number of accounts created on this PDS',\n    valueType: ValueType.INT,\n  })\n\n  #sessionCreatedCounter = meter.createCounter<{\n    source:\n      | com.atproto.server.createAccount.$lxm\n      | com.atproto.server.createSession.$lxm\n      | 'oauth'\n  }>('session.created', {\n    description: 'Number of sessions created on this PDS',\n    valueType: ValueType.INT,\n  })\n\n  #oauthAuthorizationCounter = meter.createCounter<{\n    clientFirstParty: boolean\n  }>('oauth.authorization', {\n    description: 'Increased when an OAuth authorization is granted on this PDS',\n    valueType: ValueType.INT,\n  })\n\n  /**\n   * Fans a single event out to both the pino logger (stdout/stderr) and the\n   * OTEL Logs SDK (structured record).\n   *\n   * @note this method should never throw\n   */\n  #log(\n    eventName: string,\n    attributes: Record<string, string | number | boolean | undefined>,\n  ) {\n    try {\n      logger.emit({\n        eventName,\n        severityNumber: SeverityNumber.INFO,\n        attributes,\n      })\n      eventsLogger.info({ eventName, ...attributes })\n    } catch (err) {\n      diag.error(`Failed to log event ${eventName}:`, err)\n    }\n  }\n\n  accountCreated({\n    source,\n    did,\n    invited,\n    deactivated,\n    clientId,\n  }: {\n    source: com.atproto.server.createAccount.$lxm | 'oauth'\n    did: DidString\n    invited: boolean\n    deactivated: boolean\n    clientId?: string\n  }) {\n    this.#log('account.created', {\n      source,\n      did,\n      invited,\n      deactivated,\n      clientId,\n    })\n    this.#accountCreatedCounter.add(1, { source, deactivated })\n  }\n\n  signedIn({ did, clientId }: { did: DidString; clientId?: string }) {\n    this.#log('account.signed-in', { did, clientId })\n  }\n\n  sessionCreated({\n    source,\n    did,\n    clientId,\n  }: {\n    source:\n      | 'oauth'\n      | com.atproto.server.createAccount.$lxm\n      | com.atproto.server.createSession.$lxm\n    did: DidString\n    clientId?: string\n  }) {\n    this.#log('session.created', { source, did, clientId })\n    this.#sessionCreatedCounter.add(1, { source })\n  }\n\n  sessionRefreshed({\n    source,\n    did,\n    clientId,\n  }: {\n    source: 'oauth' | com.atproto.server.refreshSession.$lxm\n    did: DidString\n    clientId?: string\n  }) {\n    this.#log('session.refreshed', { source, did, clientId })\n  }\n\n  oauthAuthorized({\n    did,\n    clientId,\n    clientTrusted,\n    clientFirstParty,\n    clientConfidential,\n  }: {\n    did: DidString\n    clientId: string\n    clientTrusted: boolean\n    clientFirstParty: boolean\n    clientConfidential: boolean\n  }) {\n    this.#log('oauth.authorized', {\n      did,\n      clientId,\n      clientTrusted,\n      clientFirstParty,\n      clientConfidential,\n    })\n    this.#oauthAuthorizationCounter.add(1, { clientFirstParty })\n  }\n}\n\nexport const events = new EventReporter()\n"]}

package/dist/lexicons/tools/ozone/moderation/emitEvent.defs.d.ts

@@ -51,11 +51,11 @@ type ReportAction = {
      */
     "ids"?: (number)[];
     /**
-     * Target reports matching these report types on the subject (fully qualified NSIDs)
+     * Target reports matching these report types on the subject (fully qualified NSIDs). Excludes assigned and escalated reports.
      */
     "types"?: (string)[];
     /**
-     * Target ALL reports on the subject
+     * Target ALL reports on the subject. Excludes assigned and escalated reports.
      */
     "all"?: boolean;
     /**

package/dist/lexicons/tools/ozone/moderation/emitEvent.defs.js.map

@@ -1 +1 @@
-{"version":3,"file":"emitEvent.defs.js","sourceRoot":"","sources":["../../../../../src/lexicons/tools/ozone/moderation/emitEvent.defs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AACjC,OAAO,KAAK,cAAc,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,SAAS,MAAM,yCAAyC,CAAC;AACrE,OAAO,KAAK,aAAa,MAAM,6CAA6C,CAAC;AAE7E,MAAM,KAAK,GAAG,kCAAkC,CAAC;AAIjD,OAAO,EAAE,KAAK,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AAIhD,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,EAAC,OAAO,EAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAkC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,gBAAgB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAqC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,mBAAmB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAkC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,gBAAgB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAiC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,eAAe,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA+B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,aAAa,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAgC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,cAAc,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA8B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,YAAY,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAgC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,cAAc,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAsC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAwC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,sBAAsB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAyC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,uBAAuB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAuC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA+B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,aAAa,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAgC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,cAAc,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA6B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,WAAW,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA8B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,YAAY,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA+B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,aAAa,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA6B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,WAAW,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAuC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAmC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,iBAAiB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA2C,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,yBAAyB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAwC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,sBAAsB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA+C,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,6BAA6B,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAuC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA8C,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,4BAA4B,CAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,EAAC,SAAS,EAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAoB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAqB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,EAAC,iBAAiB,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,CAAG,CAAC,EAAC,WAAW,EAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,EAAC,SAAS,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAyB,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAQ,CAAC,CAAC,EAAC,YAAY,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAC,cAAc,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAe,CAAC,GAAG,EAAE,CAAC,YAAY,CAAQ,CAAC,CAAC,EAAC,CAAC,CAAC;AAK/5G,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAA8B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,YAAY,CAAQ,CAAC,CAAC,CAAC;AAKjK,4CAA4C;AAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,kBAAkB,EAAC,qBAAqB,CAAC,CAAC,CAAC;AAEpH,OAAO,EAAE,IAAI,EAAE,CAAC;AAEhB,MAAM,IAAI,GAAG,KAAK,CAAC;AAInB,OAAO,EAAE,IAAI,EAAE,CAAC;AAgChB,+DAA+D;AAC/D,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAe,KAAK,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,CAAG,CAAC,EAAC,OAAO,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAG,CAAC,EAAC,KAAK,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAC,MAAM,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAC,aAAa,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;AAE9c,OAAO,EAAE,YAAY,EAAE,CAAC","sourcesContent":["/*\n * THIS FILE WAS GENERATED BY \"@atproto/lex\". DO NOT EDIT.\n */\n\nimport { l } from \"@atproto/lex\";\nimport * as ModerationDefs from \"./defs.defs.js\";\nimport * as AdminDefs from \"../../../com/atproto/admin/defs.defs.js\";\nimport * as RepoStrongRef from \"../../../com/atproto/repo/strongRef.defs.js\";\n\nconst $nsid = \"tools.ozone.moderation.emitEvent\";\n\ntype $nsid = typeof $nsid;\n\nexport { $nsid };\n\nexport const $params = /*#__PURE__*/ l.params();\n\nexport type $Params = l.InferOutput<typeof $params>;\n\nexport const $input = /*#__PURE__*/ l.jsonPayload({\"event\":/*#__PURE__*/ l.typedUnion([/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventTakedown>((() => ModerationDefs.modEventTakedown) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventAcknowledge>((() => ModerationDefs.modEventAcknowledge) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventEscalate>((() => ModerationDefs.modEventEscalate) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventComment>((() => ModerationDefs.modEventComment) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventLabel>((() => ModerationDefs.modEventLabel) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventReport>((() => ModerationDefs.modEventReport) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventMute>((() => ModerationDefs.modEventMute) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventUnmute>((() => ModerationDefs.modEventUnmute) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventMuteReporter>((() => ModerationDefs.modEventMuteReporter) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventUnmuteReporter>((() => ModerationDefs.modEventUnmuteReporter) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventReverseTakedown>((() => ModerationDefs.modEventReverseTakedown) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventResolveAppeal>((() => ModerationDefs.modEventResolveAppeal) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventEmail>((() => ModerationDefs.modEventEmail) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventDivert>((() => ModerationDefs.modEventDivert) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventTag>((() => ModerationDefs.modEventTag) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.AccountEvent>((() => ModerationDefs.accountEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.IdentityEvent>((() => ModerationDefs.identityEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.RecordEvent>((() => ModerationDefs.recordEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventPriorityScore>((() => ModerationDefs.modEventPriorityScore) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.AgeAssuranceEvent>((() => ModerationDefs.ageAssuranceEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.AgeAssuranceOverrideEvent>((() => ModerationDefs.ageAssuranceOverrideEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.AgeAssurancePurgeEvent>((() => ModerationDefs.ageAssurancePurgeEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.RevokeAccountCredentialsEvent>((() => ModerationDefs.revokeAccountCredentialsEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ScheduleTakedownEvent>((() => ModerationDefs.scheduleTakedownEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.CancelScheduledTakedownEvent>((() => ModerationDefs.cancelScheduledTakedownEvent) as any)], false),\"subject\":/*#__PURE__*/ l.typedUnion([/*#__PURE__*/ l.typedRef<AdminDefs.RepoRef>((() => AdminDefs.repoRef) as any),/*#__PURE__*/ l.typedRef<RepoStrongRef.Main>((() => RepoStrongRef.main) as any)], false),\"subjectBlobCids\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.array(/*#__PURE__*/ l.string({\"format\":\"cid\"}), )),\"createdBy\":/*#__PURE__*/ l.string({\"format\":\"did\"}),\"modTool\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.ref<ModerationDefs.ModTool>((() => ModerationDefs.modTool) as any)),\"externalId\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\"reportAction\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.ref<ReportAction>((() => reportAction) as any))});\n\nexport type $Input<B = l.BinaryData> = l.InferPayload<typeof $input, B>;\nexport type $InputBody<B = l.BinaryData> = l.InferPayloadBody<typeof $input, B>;\n\nexport const $output = /*#__PURE__*/ l.payload(\"application/json\", /*#__PURE__*/ l.ref<ModerationDefs.ModEventView>((() => ModerationDefs.modEventView) as any));\n\nexport type $Output<B = l.BinaryData> = l.InferPayload<typeof $output, B>;\nexport type $OutputBody<B = l.BinaryData> = l.InferPayloadBody<typeof $output, B>;\n\n/** Take a moderation action on an actor. */\nconst main = /*#__PURE__*/ l.procedure($nsid, $params, $input, $output, [\"SubjectHasAction\",\"DuplicateExternalId\"]);\n\nexport { main };\n\nconst $lxm = $nsid;\n\ntype $lxm = typeof $lxm;\n\nexport { $lxm };\n\n/** Target specific reports when emitting a moderation event */\ntype ReportAction = { $type?: \"tools.ozone.moderation.emitEvent#reportAction\";\n\n  /**\n   * Target specific report IDs\n   */\n  \"ids\"?:(number)[];\n\n  /**\n   * Target reports matching these report types on the subject (fully qualified NSIDs)\n   */\n  \"types\"?:(string)[];\n\n  /**\n   * Target ALL reports on the subject\n   */\n  \"all\"?:boolean;\n\n  /**\n   * Note to send to reporter(s) when actioning their report\n   */\n  \"note\"?:string;\n\n  /**\n   * Set true when the report activities are created by an automated process.\n   */\n  \"isAutomated\"?:boolean };\n\nexport type { ReportAction };\n\n/** Target specific reports when emitting a moderation event */\nconst reportAction = /*#__PURE__*/ l.typedObject<ReportAction>($nsid, \"reportAction\", /*#__PURE__*/ l.object({\"ids\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.array(/*#__PURE__*/ l.integer(), )),\"types\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.array(/*#__PURE__*/ l.string(), )),\"all\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.boolean()),\"note\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\"isAutomated\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.boolean())}));\n\nexport { reportAction };\n"]}
+{"version":3,"file":"emitEvent.defs.js","sourceRoot":"","sources":["../../../../../src/lexicons/tools/ozone/moderation/emitEvent.defs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AACjC,OAAO,KAAK,cAAc,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,SAAS,MAAM,yCAAyC,CAAC;AACrE,OAAO,KAAK,aAAa,MAAM,6CAA6C,CAAC;AAE7E,MAAM,KAAK,GAAG,kCAAkC,CAAC;AAIjD,OAAO,EAAE,KAAK,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AAIhD,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,EAAC,OAAO,EAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAkC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,gBAAgB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAqC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,mBAAmB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAkC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,gBAAgB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAiC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,eAAe,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA+B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,aAAa,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAgC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,cAAc,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA8B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,YAAY,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAgC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,cAAc,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAsC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAwC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,sBAAsB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAyC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,uBAAuB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAuC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA+B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,aAAa,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAgC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,cAAc,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA6B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,WAAW,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA8B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,YAAY,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA+B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,aAAa,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA6B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,WAAW,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAuC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAmC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,iBAAiB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA2C,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,yBAAyB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAwC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,sBAAsB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA+C,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,6BAA6B,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAuC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAA8C,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,4BAA4B,CAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,EAAC,SAAS,EAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAoB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAQ,CAAC,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAqB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,EAAC,iBAAiB,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,CAAG,CAAC,EAAC,WAAW,EAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,EAAC,SAAS,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAyB,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAQ,CAAC,CAAC,EAAC,YAAY,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAC,cAAc,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAe,CAAC,GAAG,EAAE,CAAC,YAAY,CAAQ,CAAC,CAAC,EAAC,CAAC,CAAC;AAK/5G,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAA8B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,YAAY,CAAQ,CAAC,CAAC,CAAC;AAKjK,4CAA4C;AAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,kBAAkB,EAAC,qBAAqB,CAAC,CAAC,CAAC;AAEpH,OAAO,EAAE,IAAI,EAAE,CAAC;AAEhB,MAAM,IAAI,GAAG,KAAK,CAAC;AAInB,OAAO,EAAE,IAAI,EAAE,CAAC;AAgChB,+DAA+D;AAC/D,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAe,KAAK,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,CAAG,CAAC,EAAC,OAAO,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAG,CAAC,EAAC,KAAK,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAC,MAAM,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAC,aAAa,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;AAE9c,OAAO,EAAE,YAAY,EAAE,CAAC","sourcesContent":["/*\n * THIS FILE WAS GENERATED BY \"@atproto/lex\". DO NOT EDIT.\n */\n\nimport { l } from \"@atproto/lex\";\nimport * as ModerationDefs from \"./defs.defs.js\";\nimport * as AdminDefs from \"../../../com/atproto/admin/defs.defs.js\";\nimport * as RepoStrongRef from \"../../../com/atproto/repo/strongRef.defs.js\";\n\nconst $nsid = \"tools.ozone.moderation.emitEvent\";\n\ntype $nsid = typeof $nsid;\n\nexport { $nsid };\n\nexport const $params = /*#__PURE__*/ l.params();\n\nexport type $Params = l.InferOutput<typeof $params>;\n\nexport const $input = /*#__PURE__*/ l.jsonPayload({\"event\":/*#__PURE__*/ l.typedUnion([/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventTakedown>((() => ModerationDefs.modEventTakedown) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventAcknowledge>((() => ModerationDefs.modEventAcknowledge) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventEscalate>((() => ModerationDefs.modEventEscalate) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventComment>((() => ModerationDefs.modEventComment) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventLabel>((() => ModerationDefs.modEventLabel) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventReport>((() => ModerationDefs.modEventReport) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventMute>((() => ModerationDefs.modEventMute) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventUnmute>((() => ModerationDefs.modEventUnmute) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventMuteReporter>((() => ModerationDefs.modEventMuteReporter) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventUnmuteReporter>((() => ModerationDefs.modEventUnmuteReporter) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventReverseTakedown>((() => ModerationDefs.modEventReverseTakedown) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventResolveAppeal>((() => ModerationDefs.modEventResolveAppeal) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventEmail>((() => ModerationDefs.modEventEmail) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventDivert>((() => ModerationDefs.modEventDivert) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventTag>((() => ModerationDefs.modEventTag) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.AccountEvent>((() => ModerationDefs.accountEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.IdentityEvent>((() => ModerationDefs.identityEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.RecordEvent>((() => ModerationDefs.recordEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ModEventPriorityScore>((() => ModerationDefs.modEventPriorityScore) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.AgeAssuranceEvent>((() => ModerationDefs.ageAssuranceEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.AgeAssuranceOverrideEvent>((() => ModerationDefs.ageAssuranceOverrideEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.AgeAssurancePurgeEvent>((() => ModerationDefs.ageAssurancePurgeEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.RevokeAccountCredentialsEvent>((() => ModerationDefs.revokeAccountCredentialsEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.ScheduleTakedownEvent>((() => ModerationDefs.scheduleTakedownEvent) as any),/*#__PURE__*/ l.typedRef<ModerationDefs.CancelScheduledTakedownEvent>((() => ModerationDefs.cancelScheduledTakedownEvent) as any)], false),\"subject\":/*#__PURE__*/ l.typedUnion([/*#__PURE__*/ l.typedRef<AdminDefs.RepoRef>((() => AdminDefs.repoRef) as any),/*#__PURE__*/ l.typedRef<RepoStrongRef.Main>((() => RepoStrongRef.main) as any)], false),\"subjectBlobCids\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.array(/*#__PURE__*/ l.string({\"format\":\"cid\"}), )),\"createdBy\":/*#__PURE__*/ l.string({\"format\":\"did\"}),\"modTool\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.ref<ModerationDefs.ModTool>((() => ModerationDefs.modTool) as any)),\"externalId\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\"reportAction\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.ref<ReportAction>((() => reportAction) as any))});\n\nexport type $Input<B = l.BinaryData> = l.InferPayload<typeof $input, B>;\nexport type $InputBody<B = l.BinaryData> = l.InferPayloadBody<typeof $input, B>;\n\nexport const $output = /*#__PURE__*/ l.payload(\"application/json\", /*#__PURE__*/ l.ref<ModerationDefs.ModEventView>((() => ModerationDefs.modEventView) as any));\n\nexport type $Output<B = l.BinaryData> = l.InferPayload<typeof $output, B>;\nexport type $OutputBody<B = l.BinaryData> = l.InferPayloadBody<typeof $output, B>;\n\n/** Take a moderation action on an actor. */\nconst main = /*#__PURE__*/ l.procedure($nsid, $params, $input, $output, [\"SubjectHasAction\",\"DuplicateExternalId\"]);\n\nexport { main };\n\nconst $lxm = $nsid;\n\ntype $lxm = typeof $lxm;\n\nexport { $lxm };\n\n/** Target specific reports when emitting a moderation event */\ntype ReportAction = { $type?: \"tools.ozone.moderation.emitEvent#reportAction\";\n\n  /**\n   * Target specific report IDs\n   */\n  \"ids\"?:(number)[];\n\n  /**\n   * Target reports matching these report types on the subject (fully qualified NSIDs). Excludes assigned and escalated reports.\n   */\n  \"types\"?:(string)[];\n\n  /**\n   * Target ALL reports on the subject. Excludes assigned and escalated reports.\n   */\n  \"all\"?:boolean;\n\n  /**\n   * Note to send to reporter(s) when actioning their report\n   */\n  \"note\"?:string;\n\n  /**\n   * Set true when the report activities are created by an automated process.\n   */\n  \"isAutomated\"?:boolean };\n\nexport type { ReportAction };\n\n/** Target specific reports when emitting a moderation event */\nconst reportAction = /*#__PURE__*/ l.typedObject<ReportAction>($nsid, \"reportAction\", /*#__PURE__*/ l.object({\"ids\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.array(/*#__PURE__*/ l.integer(), )),\"types\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.array(/*#__PURE__*/ l.string(), )),\"all\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.boolean()),\"note\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.string()),\"isAutomated\":/*#__PURE__*/ l.optional(/*#__PURE__*/ l.boolean())}));\n\nexport { reportAction };\n"]}

package/dist/pipethrough.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pipethrough.d.ts","sourceRoot":"","sources":["../src/pipethrough.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAkB,MAAM,WAAW,CAAA;AACpE,OAAO,EAGL,KAAK,QAAQ,EAGd,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAS,KAAK,UAAU,EAAsB,MAAM,QAAQ,CAAA;AASnE,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAI7B,SAAS,IAAI,eAAe,EAG7B,MAAM,sBAAsB,CAAA;AAI7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAI9C,wBAAgB,eAAe,CAAC,GAAG,EAAE,WAAW,GAAG,UAAU,CAiC5D;AAED,eAAO,MAAM,YAAY,QAAS,UAAU,KAAG,eAyG9C,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IAEZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IAEZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,CAAA;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,OAAO,EACZ,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CACR,wBAAwB,GAAG;IACzB,MAAM,EAAE,QAAQ,CAAA;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAA;CACjB,CACF,CAwDA;AAoBD,wBAAgB,cAAc,CAC5B,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,MAAM,GACV,MAAM,CAUR;AAID,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAU1D;AAED,eAAO,MAAM,gBAAgB,QAEtB,IAAI,CAAC,UAAU,EAAE,KAAK,GAAG,YAAY,CAAC,WAClC,MAAM,KACd,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CA6CzD,CAAA;AA4GD,wBAAgB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAG3E;AAqFD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,EAC/B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,wBAAwB,CAAC,CAUnC;AA2CD;;;GAGG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,KAAK,CAAa;IAC1B,YAAY,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAElC;IACD,GAAG,CAAC,GAAG,EAAE,MAAM,WAEd;CACF;AAED,8DAA8D;AAC9D,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,YAAY,SAAS,EAAE,MAAM,EAE5B;IACD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAExB;CACF;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,UAEvC;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEvD;AAOD,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEtD;AAsFD,qBAAa,wBAAyB,SAAQ,eAAe;IAEzD,QAAQ,CAAC,QAAQ,EAAE;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,OAAO,EAAE,mBAAmB,CAAA;KAC7B;IAJH,YACW,QAAQ,EAAE;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,OAAO,EAAE,mBAAmB,CAAA;KAC7B,EACD,OAAO,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAC7C,OAAO,CAAC,EAAE,YAAY,EAQvB;IAED,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEpC;IAED,IAAI,KAAK,uBAER;CACF"}
+{"version":3,"file":"pipethrough.d.ts","sourceRoot":"","sources":["../src/pipethrough.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAkB,MAAM,WAAW,CAAA;AACpE,OAAO,EAGL,KAAK,QAAQ,EAGd,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAS,KAAK,UAAU,EAAsB,MAAM,QAAQ,CAAA;AAQnE,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAI7B,SAAS,IAAI,eAAe,EAG7B,MAAM,sBAAsB,CAAA;AAI7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAI9C,wBAAgB,eAAe,CAAC,GAAG,EAAE,WAAW,GAAG,UAAU,CAiC5D;AAED,eAAO,MAAM,YAAY,QAAS,UAAU,KAAG,eAyG9C,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IAEZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IAEZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,CAAA;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,OAAO,EACZ,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CACR,wBAAwB,GAAG;IACzB,MAAM,EAAE,QAAQ,CAAA;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAA;CACjB,CACF,CAwDA;AAoBD,wBAAgB,cAAc,CAC5B,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,MAAM,GACV,MAAM,CAUR;AAID,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAU1D;AAED,eAAO,MAAM,gBAAgB,QAEtB,IAAI,CAAC,UAAU,EAAE,KAAK,GAAG,YAAY,CAAC,WAClC,MAAM,KACd,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CA6CzD,CAAA;AA4GD,wBAAgB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAG3E;AAoFD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,EAC/B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,wBAAwB,CAAC,CAUnC;AA2CD;;;GAGG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,KAAK,CAAa;IAC1B,YAAY,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAElC;IACD,GAAG,CAAC,GAAG,EAAE,MAAM,WAEd;CACF;AAED,8DAA8D;AAC9D,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,YAAY,SAAS,EAAE,MAAM,EAE5B;IACD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAExB;CACF;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,UAEvC;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEvD;AAOD,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEtD;AAsFD,qBAAa,wBAAyB,SAAQ,eAAe;IAEzD,QAAQ,CAAC,QAAQ,EAAE;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,OAAO,EAAE,mBAAmB,CAAA;KAC7B;IAJH,YACW,QAAQ,EAAE;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,OAAO,EAAE,mBAAmB,CAAA;KAC7B,EACD,OAAO,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAC7C,OAAO,CAAC,EAAE,YAAY,EAQvB;IAED,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEpC;IAED,IAAI,KAAK,uBAER;CACF"}

package/dist/pipethrough.js

@@ -1,6 +1,6 @@
 import { PassThrough, finished, pipeline, } from 'node:stream';
 import { Agent, Pool, interceptors } from 'undici';
-import { MaxSizeChecker, createDecoders, getServiceEndpoint, omit, streamToNodeBuffer, } from '@atproto/common';
+import { createDecoders, getServiceEndpoint, omit, streamToNodeBuffer, } from '@atproto/common';
 import { InternalServerError, InvalidRequestError, ResponseType, XRPCError as XRPCServerError, excludeErrorResult, parseReqNsid, } from '@atproto/xrpc-server';
 import { isUnicastIp, unicastLookup } from '@atproto-labs/fetch-node';
 import { buildProxiedContentEncoding } from '@atproto-labs/xrpc-utils';
@@ -347,12 +347,14 @@ async function bufferUpstreamResponse(readable, contentEncoding, maxSize) {
     try {
         // @NOTE maxResponseSize bounds the wire stream that undici reads, and
         // decoding it can yield a much larger buffer, so the decoded stream needs
-        // its own bound. The checker is applied even when there is no
+        // its own bound. `createDecoders` applies it even when there is no
         // content-encoding, so that an identity-encoded body is bounded too.
         return await streamToNodeBuffer(pipeline([
             readable,
-            ...createDecoders(contentEncoding),
-            new MaxSizeChecker(maxSize, () => new TypeError('upstream response too large')),
+            ...createDecoders(contentEncoding, {
+                maxSize,
+                maxSizeError: () => new TypeError('upstream response too large'),
+            }),
         ], () => { }));
     }
     catch (err) {

package/dist/pipethrough.js.map

@@ -1 +1 @@
-{"version":3,"file":"pipethrough.js","sourceRoot":"","sources":["../src/pipethrough.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,WAAW,EAEX,QAAQ,EACR,QAAQ,GACT,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,KAAK,EAAmB,IAAI,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACnE,OAAO,EACL,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,IAAI,EACJ,kBAAkB,GACnB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAIL,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,SAAS,IAAI,eAAe,EAC5B,kBAAkB,EAClB,YAAY,GACb,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAG/D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,MAAM,UAAU,eAAe,CAAC,GAAgB;IAC9C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,OAAO,EAAE,GAAG,CAAC,UAAU;QACvB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,qBAAqB;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;gBACf,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAC1B,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;gBAClD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,GAAG,CAAC,CAAA;gBACrD,CAAC;gBACD,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBAC7D,CAAC;gBACD,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC/B,CAAC;QACL,OAAO,EAAE;YACP,MAAM,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;SAC9D;KACF,CAAC,CAAA;IAEF,OAAO,KAAK,CAAC,OAAO,CAClB,GAAG,CAAC,UAAU,GAAG,CAAC;QAChB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;YACjB,WAAW,EAAE,EAAE,EAAE,8BAA8B;YAC/C,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;YACxB,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC;QACJ,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAC3B,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAe,EAAmB,EAAE;IAC/D,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAqB;QACrE,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC;KACtE,CAAC,CAAA;IACF,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAqB;QAC1E,UAAU,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC;QACjC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC;KACtE,CAAC,CAAA;IAEF,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,eAAe;QACf,IAAI,CAAC;YACH,IACE,GAAG,CAAC,MAAM,KAAK,KAAK;gBACpB,GAAG,CAAC,MAAM,KAAK,MAAM;gBACrB,GAAG,CAAC,MAAM,KAAK,MAAM,EACrB,CAAC;gBACD,MAAM,IAAI,eAAe,CACvB,YAAY,CAAC,cAAc,EAC3B,0CAA0C,CAC3C,CAAA;YACH,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;YACpD,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnC,qDAAqD;gBACrD,MAAM,IAAI,mBAAmB,CAAC,8BAA8B,CAAC,CAAA;YAC/D,CAAC;YAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;YAC7B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;YACnE,CAAC;YAED,MAAM,EACJ,GAAG,EAAE,MAAM,EACX,GAAG,EACH,SAAS,GACV,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;YACvC,qEAAqE;YACrE,oEAAoE;YACpE,iEAAiE;YACjE,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,SAAS,EAAE,CAAA;YACtC,MAAM,QAAQ,GAAG,GAAG,CAAA;YAEpB,MAAM,UAAU,GAAG,MAAM,CACvB,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CACtE,CAAC;gBACA,GAAG;gBACH,GAAG;gBACH,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE;aAC/B,CAAC,CAAA;YAEF,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;YAEtD,IACE,WAAW,CAAC,IAAI,KAAK,QAAQ;gBAC7B,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC;gBACtC,kBAAkB,CAAC,GAAG,CAAC,EACvB,CAAC;gBACD,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;YACnE,CAAC;YAED,MAAM,OAAO,GAAwB;gBACnC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,UAAU;gBAC/D,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC;gBACjD,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC;gBACjE,GAAG,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC5C,gDAAgD;gBAChD,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC;gBAE7C,cAAc,EAAE,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;gBACnD,kBAAkB,EAAE,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC;gBAC3D,gBAAgB,EAAE,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAEvD,aAAa,EAAE,UAAU,MAAM,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE;aACpF,CAAA;YAED,MAAM,eAAe,GAA8B;gBACjD,MAAM;gBACN,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,WAAW;gBACrB,IAAI;gBACJ,OAAO;aACR,CAAA;YAED,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC9D,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;gBAE/B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5D,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;gBAC1B,CAAC;gBAED,uEAAuE;gBACvE,wEAAwE;gBACxE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;gBAEjC,sEAAsE;gBACtE,OAAO,GAAG,CAAA;YACZ,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAA;QACX,CAAC;IACH,CAAC,CAAA;AACH,CAAC,CAAA;AAsBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAe,EACf,GAAY,EACZ,OAA4B;IAQ5B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClD,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,sEAAsE;QACtE,iEAAiE;QACjE,eAAe;QACf,MAAM,IAAI,mBAAmB,CAC3B,eAAe,GAAG,CAAC,MAAM,4BAA4B,CACtD,CAAA;IACH,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAE7B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAErE,MAAM,eAAe,GAA8B;QACjD,MAAM;QACN,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,WAAW;QACrB,OAAO,EAAE;YACP,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC;YACjD,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC;YACjE,GAAG,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC;YAC5C,gDAAgD;YAChD,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC;YAE7C,mEAAmE;YACnE,uEAAuE;YACvE,0EAA0E;YAC1E,wEAAwE;YACxE,kEAAkE;YAClE,iBAAiB,EAAE,2BAA2B,CAC5C,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAC9B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAC/B;YAED,aAAa,EAAE,OAAO,EAAE,GAAG;gBACzB,CAAC,CAAC,UAAU,MAAM,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE;gBAC3F,CAAC,CAAC,SAAS;SACd;QAED,mEAAmE;QACnE,uEAAuE;QACvE,gDAAgD;QAChD,aAAa,EAAE,CAAC,GAAG,KAAK,EAAE,4BAA4B;KACvD,CAAA;IAED,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,CAAA;IAE7E,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,kBAAkB;QACnE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,EAAE,IAAI;KACb,CAAA;AACH,CAAC;AAED,2BAA2B;AAC3B,sBAAsB;AAEtB,SAAS,4BAA4B,CACnC,OAA4B;IAE5B,wEAAwE;IACxE,4EAA4E;IAC5E,qEAAqE;IACrE,MAAM,MAAM,GAAwB,EAAE,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,GAAe,EACf,GAAY,EACZ,GAAW;IAEX,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACjD,IAAI,aAAa;QAAE,OAAO,aAAa,CAAA;IAEvC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACxC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,SAAS,EAAE,CAAA;IAC1D,CAAC;IAED,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,yEAAyE;AACzE,qCAAqC;AACrC,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACtC,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAe,EACf,GAAY,EACZ,GAAW;IAEX,eAAe;IAEf,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACjD,IAAI,aAAa;QAAE,OAAO,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAE9D,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC3D,IAAI,WAAW;QAAE,OAAO,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,CAAA;IAErD,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK;AACnC,kDAAkD;AAClD,GAA2C,EAC3C,OAAe,EAC2C,EAAE;IAC5D,eAAe;IAEf,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAEtC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,CAAC,CAAA;IACnE,CAAC;IAED,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,SAAS,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,mBAAmB,CAAC,yCAAyC,CAAC,CAAA;IAC1E,CAAC;IAED,qBAAqB;IACrB,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,CAAC,CAAA;IAC9D,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,mBAAmB,CAAC,oCAAoC,CAAC,CAAA;IACrE,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;IAE9C,sFAAsF;IACtF,IACE,GAAG,CAAC,GAAG,CAAC,WAAW;QACnB,OAAO,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,eAAe,EACrD,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,CAAA;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,SAAS,EAAE,EAAE,CAAC,CAAA;IAC/D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAAC,yCAAyC,CAAC,CAAA;IAC1E,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;AAChC,CAAC,CAAA;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAe,EACf,GAAY,EACZ,eAA0C,EAC1C,oBAA8C;IAE9C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,KAAK,GAAG,CAAC,UAAU;aAChB,MAAM,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,EAAE;YACpC,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBAC/B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;gBAErC,KAAK,eAAe,CAClB,QAAQ,CAAC,OAAO,EAChB,WAAW,EACX,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAC9B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBAChB,MAAM,SAAS,GAAG,IAAI,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE;wBAC/D,KAAK,EAAE,eAAe;qBACvB,CAAC,CAAA;oBAEF,MAAM,CAAC,SAAS,CAAC,CAAA;gBACnB,CAAC,EAAE,MAAM,CAAC,CAAA;gBAEV,OAAO,WAAW,CAAA;YACpB,CAAC;YAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;YAE/C,oEAAoE;YACpE,uEAAuE;YACvE,wEAAwE;YACxE,mEAAmE;YACnE,sEAAsE;YACtE,0CAA0C;YAC1C,OAAO,EAAE,CAAA;YAET,OAAO,QAAQ,CAAA;QACjB,CAAC,CAAC;YACF,yEAAyE;YACzE,0EAA0E;YAC1E,yEAAyE;YACzE,sEAAsE;aACrE,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aAC3C,KAAK,CAAC,MAAM,CAAC,CAAA;IAClB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAC/B,GAAe,EACf,GAAY,EACZ,eAA0C;IAE1C,4EAA4E;IAC5E,uDAAuD;IAEvD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,UAAU;SAClC,OAAO,CAAC,eAAe,CAAC;SACxB,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAE9C,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,IAAI,EACb,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAC9B,CAAA;QAED,MAAM,IAAI,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE;YACnD,KAAK,EAAE,eAAe;SACvB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,0BAA0B,CAEjC,GAAY,EACZ,OAAO,GAAG,8BAA8B;IAExC,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAA;IAC9D,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;IAC9B,MAAM,IAAI,eAAe,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;QAC1E,KAAK,EAAE,GAAG;KACX,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IAGrC,OAAO,OAAQ,GAAqB,CAAC,GAAG,EAAE,KAAK,KAAK,UAAU,CAAA;AAChE,CAAC;AAED,6BAA6B;AAC7B,sBAAsB;AAEtB,MAAM,UAAU,iBAAiB,CAAC,WAAoB;IACpD,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAA;IAClC,OAAO,8BAA8B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;AACzD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAA4B,EAC5B,QAAkB,EAClB,OAAe;IAEf,IAAI,iBAAiB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACzD,2EAA2E;QAC3E,kBAAkB;QAElB,yEAAyE;QACzE,wEAAwE;QACxE,4EAA4E;QAC5E,uEAAuE;QACvE,8DAA8D;QAE9D,qEAAqE;QACrE,4EAA4E;QAC5E,kDAAkD;QAElD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,QAAQ,CAAC,OAAO,EAAE,CAAA;QACpB,CAAC,EAAE,GAAG,CAAC,CAAA;QACP,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,YAAY,CAAC,EAAE,CAAC,CAAA;QAClB,CAAC,CAAC,CAAA;QACF,QAAQ,CAAC,MAAM,EAAE,CAAA;QAEjB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,QAAQ,EACR,OAAO,CAAC,kBAAkB,CAAC,EAC3B,OAAO,CACR,CAAA;QAED,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5D,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;YACrC,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;SAC1C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wDAAwD;QACxD,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,QAAkB,EAClB,eAA8C,EAC9C,OAAe;IAEf,IAAI,CAAC;QACH,sEAAsE;QACtE,0EAA0E;QAC1E,8DAA8D;QAC9D,qEAAqE;QACrE,OAAO,MAAM,kBAAkB,CAC7B,QAAQ,CACN;YACE,QAAQ;YACR,GAAG,cAAc,CAAC,eAAe,CAAC;YAClC,IAAI,cAAc,CAChB,OAAO,EACP,GAAG,EAAE,CAAC,IAAI,SAAS,CAAC,6BAA6B,CAAC,CACnD;SACF,EACD,GAAG,EAAE,GAAE,CAAC,CACC,CACZ,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,CAAC,SAAS;YAAE,QAAQ,CAAC,OAAO,EAAE,CAAA;QAE3C,MAAM,IAAI,eAAe,CACvB,YAAY,CAAC,eAAe,EAC5B,GAAG,YAAY,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,EACxE,SAAS,EACT,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA+B,EAC/B,OAAe;IAEf,OAAO;QACL,MAAM,EAAE,MAAM,sBAAsB,CAClC,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EACnC,OAAO,CACR;QACD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;QACpE,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAA;AACH,CAAC;AAED,8BAA8B;AAC9B,sBAAsB;AAEtB,MAAM,sBAAsB,GAAG;IAC7B,kBAAkB;IAClB,0BAA0B;IAC1B,aAAa;CACd,CAAA;AAED,QAAQ,CAAC,CAAC,eAAe,CACvB,OAA4B,EAC5B,qBAAqB,GAAG,IAAI;IAE5B,IAAI,qBAAqB,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACxC,IAAI,MAAM;YAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;QAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;QAC5C,IAAI,QAAQ;YAAE,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAA;QAElD,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;QACpC,IAAI,IAAI;YAAE,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;QAEtC,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;QAC5C,IAAI,QAAQ;YAAE,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAEzB,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YAChB,MAAM,KAAK,GAAW,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;YAC9D,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,QAAQ;AACR,sBAAsB;AAEtB;;;GAGG;AACH,MAAM,OAAO,MAAM;IAEjB,YAAY,KAAuB;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,OAAO,SAAS;IAEpB,YAAY,SAAiB;QAC3B,IAAI,CAAC,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAA;IAC7C,CAAC;IACD,GAAG,CAAC,GAAW;QACb,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClD,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,WAAW,EAAE,CAAA;AAC1B,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAC9E,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,SAAS,CAAC,WAAW,CAAC,CAAA;AAC1D,MAAM,wBAAwB,GAAG,IAAI,MAAM,CAAC;IAC1C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI;CACtC,CAAC,CAAA;AAEF,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AACnC,CAAC;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,8BAA8B;AAC9B,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC;IACnC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI;IAChC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,IAAI;IACtD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI;IAC1C,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI;IACtC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI;IACvC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI;IACpC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI;IACzC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI;IACzC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI;IAC7C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI;IAClC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI;IACxC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI;IAC5C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC,IAAI;IAChD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI;IAC1C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI;IACzC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;CACpC,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,CACrB,GAAe,EACf,IAAY,EAIZ,EAAE;IACF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC;QAClD,KAAK,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC;QACnD,KAAK,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC;QACnD,KAAK,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC;QAClD,KAAK,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC;QACnD,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,IAAI,CAAC;QACxD,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3C,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC;QACpD,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1C,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3C,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;QACzC,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC;QACtD,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;QAC7C,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC;QAC/C,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC;QAChD,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;QAC7C,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;QAC3C,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1C,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1C,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1C,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1C,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QACrC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QACxC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QACvC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QACxC,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC;QACtD,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC;QACrD,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI;YACpD,OAAO;gBACL,SAAS,EAAE,iBAAiB;gBAC5B,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU;aAChC,CAAA;QACH,KAAK,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI;YAC3C,OAAO;gBACL,SAAS,EAAE,iBAAiB;gBAC5B,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa;aACnC,CAAA;QACH;YACE,OAAO;gBACL,SAAS,EAAE,cAAc;gBACzB,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW;aACjC,CAAA;IACL,CAAC;AACH,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,GAAY,EAAsB,EAAE;IACtD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AAClD,CAAC,CAAA;AAED,SAAS,gBAAgB,CAAuB,GAAY;IAC1D,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,oCAAoC,CAAC,CAAA;AAChE,CAAC;AAED,MAAM,OAAO,wBAAyB,SAAQ,eAAe;IAC3D,YACW,QAGR,EACD,OAA6C,EAC7C,OAAsB;QAEtB,MAAM,MAAM,GACV,QAAQ,CAAC,UAAU,KAAK,GAAG;YACzB,CAAC,CAAC,YAAY,CAAC,eAAe;YAC9B,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAA;QAEzB,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;wBAZ7C,QAAQ;IAanB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;IAC1E,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,QAAQ,CAAA;IAC9C,CAAC;CACF","sourcesContent":["import type { IncomingHttpHeaders, ServerResponse } from 'node:http'\nimport {\n  type Duplex,\n  PassThrough,\n  type Readable,\n  finished,\n  pipeline,\n} from 'node:stream'\nimport type { Request } from 'express'\nimport { Agent, type Dispatcher, Pool, interceptors } from 'undici'\nimport {\n  MaxSizeChecker,\n  createDecoders,\n  getServiceEndpoint,\n  omit,\n  streamToNodeBuffer,\n} from '@atproto/common'\nimport type { RpcPermissionMatch } from '@atproto/oauth-scopes'\nimport {\n  type CatchallHandler,\n  type HandlerPipeThroughBuffer,\n  type HandlerPipeThroughStream,\n  InternalServerError,\n  InvalidRequestError,\n  ResponseType,\n  XRPCError as XRPCServerError,\n  excludeErrorResult,\n  parseReqNsid,\n} from '@atproto/xrpc-server'\nimport { isUnicastIp, unicastLookup } from '@atproto-labs/fetch-node'\nimport { buildProxiedContentEncoding } from '@atproto-labs/xrpc-utils'\nimport { AuthScope, isAccessPrivileged } from './auth-scope.js'\nimport type { ProxyConfig } from './config/config.js'\nimport type { AppContext } from './context.js'\nimport { com, tools } from './lexicons/index.js'\nimport { httpLogger } from './logger.js'\n\nexport function buildProxyAgent(cfg: ProxyConfig): Dispatcher {\n  const agent = new Agent({\n    allowH2: cfg.allowHTTP2,\n    headersTimeout: cfg.headersTimeout,\n    maxResponseSize: cfg.maxResponseSize,\n    bodyTimeout: cfg.bodyTimeout,\n    factory: cfg.disableSsrfProtection\n      ? undefined\n      : (origin, opts) => {\n          const { protocol, hostname } =\n            origin instanceof URL ? origin : new URL(origin)\n          if (protocol !== 'https:') {\n            throw new Error(`Forbidden protocol \"${protocol}\"`)\n          }\n          if (isUnicastIp(hostname) === false) {\n            throw new Error('Hostname resolved to non-unicast address')\n          }\n          return new Pool(origin, opts)\n        },\n    connect: {\n      lookup: cfg.disableSsrfProtection ? undefined : unicastLookup,\n    },\n  })\n\n  return agent.compose(\n    cfg.maxRetries > 0\n      ? interceptors.retry({\n          statusCodes: [], // Only retry on socket errors\n          methods: ['GET', 'HEAD'],\n          maxRetries: cfg.maxRetries,\n        })\n      : (dispatch) => dispatch,\n  )\n}\n\nexport const proxyHandler = (ctx: AppContext): CatchallHandler => {\n  const performAuth = ctx.authVerifier.authorization<RpcPermissionMatch>({\n    authorize: (permissions, { params }) => permissions.assertRpc(params),\n  })\n  const performInboxAuth = ctx.authVerifier.authorization<RpcPermissionMatch>({\n    additional: [AuthScope.Takendown],\n    authorize: (permissions, { params }) => permissions.assertRpc(params),\n  })\n\n  return async (req, res, next) => {\n    // /!\\ Hot path\n    try {\n      if (\n        req.method !== 'GET' &&\n        req.method !== 'HEAD' &&\n        req.method !== 'POST'\n      ) {\n        throw new XRPCServerError(\n          ResponseType.InvalidRequest,\n          'XRPC requests only supports GET and POST',\n        )\n      }\n\n      const body = req.method === 'POST' ? req : undefined\n      if (body != null && !body.readable) {\n        // Body was already consumed by a previous middleware\n        throw new InternalServerError('Request body is not readable')\n      }\n\n      const lxm = parseReqNsid(req)\n      if (isProtectedMethod(lxm)) {\n        throw new InvalidRequestError('Bad token method', 'InvalidToken')\n      }\n\n      const {\n        url: origin,\n        did,\n        serviceId,\n      } = await parseProxyInfo(ctx, req, lxm)\n      // Phase 1 of service auth updates: the scope check sees the combined\n      // did#serviceId form (so OAuth callers' rpc:?aud=did#service scopes\n      // match), while the outbound service-auth JWT keeps bare-DID aud\n      // regardless of session type.\n      const scopeAud = `${did}#${serviceId}`\n      const tokenAud = did\n\n      const authResult = await (\n        lxm.startsWith('tools.ozone.inbox.') ? performInboxAuth : performAuth\n      )({\n        req,\n        res,\n        params: { lxm, aud: scopeAud },\n      })\n\n      const { credentials } = excludeErrorResult(authResult)\n\n      if (\n        credentials.type === 'access' &&\n        !isAccessPrivileged(credentials.scope) &&\n        isPrivilegedMethod(lxm)\n      ) {\n        throw new InvalidRequestError('Bad token method', 'InvalidToken')\n      }\n\n      const headers: IncomingHttpHeaders = {\n        'accept-encoding': req.headers['accept-encoding'] || 'identity',\n        'accept-language': req.headers['accept-language'],\n        'atproto-accept-labelers': req.headers['atproto-accept-labelers'],\n        ...getAtprotoPassthroughHeaders(req.headers),\n        // @NOTE deprecated; use `x-atproto-bsky-topics`\n        'x-bsky-topics': req.headers['x-bsky-topics'],\n\n        'content-type': body && req.headers['content-type'],\n        'content-encoding': body && req.headers['content-encoding'],\n        'content-length': body && req.headers['content-length'],\n\n        authorization: `Bearer ${await ctx.serviceAuthJwt(credentials.did, tokenAud, lxm)}`,\n      }\n\n      const dispatchOptions: Dispatcher.RequestOptions = {\n        origin,\n        method: req.method,\n        path: req.originalUrl,\n        body,\n        headers,\n      }\n\n      await pipethroughStream(ctx, req, dispatchOptions, (upstream) => {\n        res.status(upstream.statusCode)\n\n        for (const [name, val] of responseHeaders(upstream.headers)) {\n          res.setHeader(name, val)\n        }\n\n        // Note that we should not need to manually handle errors here (e.g. by\n        // destroying the response), as the http server will handle them for us.\n        res.on('error', logResponseError)\n\n        // Tell undici to write the upstream response directly to the response\n        return res\n      })\n    } catch (err) {\n      next(err)\n    }\n  }\n}\n\nexport type PipethroughOptions = {\n  /**\n   * Specify the issuer (requester) for service auth. If not provided, no\n   * authorization headers will be added to the request.\n   */\n  iss?: string\n\n  /**\n   * Override the audience for service auth. If not provided, the audience will\n   * be determined based on the proxy service.\n   */\n  aud?: string\n\n  /**\n   * Override the lexicon method for service auth. If not provided, the lexicon\n   * method will be determined based on the request path.\n   */\n  lxm?: string\n}\n\nexport async function pipethrough(\n  ctx: AppContext,\n  req: Request,\n  options?: PipethroughOptions,\n): Promise<\n  HandlerPipeThroughStream & {\n    stream: Readable\n    headers: Record<string, string>\n    encoding: string\n  }\n> {\n  if (req.method !== 'GET' && req.method !== 'HEAD') {\n    // pipethrough() is used from within xrpcServer handlers, which means that\n    // the request body either has been parsed or is a readable stream that has\n    // been piped for decoding & size limiting. Because of this, forwarding the\n    // request body requires re-encoding it. Since we currently do not use\n    // pipethrough() with procedures, proxying of request body is not\n    // implemented.\n    throw new InternalServerError(\n      `Proxying of ${req.method} requests is not supported`,\n    )\n  }\n\n  const lxm = parseReqNsid(req)\n\n  const { url: origin, did: aud } = await parseProxyInfo(ctx, req, lxm)\n\n  const dispatchOptions: Dispatcher.RequestOptions = {\n    origin,\n    method: req.method,\n    path: req.originalUrl,\n    headers: {\n      'accept-language': req.headers['accept-language'],\n      'atproto-accept-labelers': req.headers['atproto-accept-labelers'],\n      ...getAtprotoPassthroughHeaders(req.headers),\n      // @NOTE deprecated; use `x-atproto-bsky-topics`\n      'x-bsky-topics': req.headers['x-bsky-topics'],\n\n      // Because we sometimes need to interpret the response (e.g. during\n      // read-after-write, through asPipeThroughBuffer()), we need to ask the\n      // upstream server for an encoding that both the requester and the PDS can\n      // understand. Since we might have to do the decoding ourselves, we will\n      // use our own preferences (and weight) to negotiate the encoding.\n      'accept-encoding': buildProxiedContentEncoding(\n        req.headers['accept-encoding'],\n        ctx.cfg.proxy.preferCompressed,\n      ),\n\n      authorization: options?.iss\n        ? `Bearer ${await ctx.serviceAuthJwt(options.iss, options.aud ?? aud, options.lxm ?? lxm)}`\n        : undefined,\n    },\n\n    // Use a high water mark to buffer more data while performing async\n    // operations before this stream is consumed. This is especially useful\n    // while processing read-after-write operations.\n    highWaterMark: 2 * 65536, // twice the default (64KiB)\n  }\n\n  const { headers, body } = await pipethroughRequest(ctx, req, dispatchOptions)\n\n  return {\n    encoding: safeString(headers['content-type']) ?? 'application/json',\n    headers: Object.fromEntries(responseHeaders(headers)),\n    stream: body,\n  }\n}\n\n// Request setup/formatting\n// -------------------\n\nfunction getAtprotoPassthroughHeaders(\n  headers: IncomingHttpHeaders,\n): IncomingHttpHeaders {\n  // @NOTE node lower-cases all incoming header names, so a case-sensitive\n  // prefix check is sufficient here. This runs on the request hot path, so we\n  // build the result imperatively rather than via intermediate arrays.\n  const result: IncomingHttpHeaders = {}\n  for (const name in headers) {\n    if (name.startsWith('x-atproto-')) {\n      result[name] = headers[name]\n    }\n  }\n  return result\n}\n\nexport function computeProxyTo(\n  ctx: AppContext,\n  req: Request,\n  lxm: string,\n): string {\n  const proxyToHeader = req.header('atproto-proxy')\n  if (proxyToHeader) return proxyToHeader\n\n  const service = defaultService(ctx, lxm)\n  if (service.serviceInfo) {\n    return `${service.serviceInfo.did}#${service.serviceId}`\n  }\n\n  throw new InvalidRequestError(`No service configured for ${lxm}`)\n}\n\n// Bare-DID portion of `proxyTo`, suitable as a service-auth JWT audience\n// (Phase 1 of service auth updates).\nexport function bareDidFromProxyTo(proxyTo: string): string {\n  const hashIndex = proxyTo.indexOf('#')\n  return hashIndex === -1 ? proxyTo : proxyTo.slice(0, hashIndex)\n}\n\nexport async function parseProxyInfo(\n  ctx: AppContext,\n  req: Request,\n  lxm: string,\n): Promise<{ url: string; did: string; serviceId: string }> {\n  // /!\\ Hot path\n\n  const proxyToHeader = req.header('atproto-proxy')\n  if (proxyToHeader) return parseProxyHeader(ctx, proxyToHeader)\n\n  const { serviceId, serviceInfo } = defaultService(ctx, lxm)\n  if (serviceInfo) return { ...serviceInfo, serviceId }\n\n  throw new InvalidRequestError(`No service configured for ${lxm}`)\n}\n\nexport const parseProxyHeader = async (\n  // Using subset of AppContext for testing purposes\n  ctx: Pick<AppContext, 'cfg' | 'idResolver'>,\n  proxyTo: string,\n): Promise<{ did: string; url: string; serviceId: string }> => {\n  // /!\\ Hot path\n\n  const hashIndex = proxyTo.indexOf('#')\n\n  if (hashIndex === 0) {\n    throw new InvalidRequestError('no did specified in proxy header')\n  }\n\n  if (hashIndex === -1 || hashIndex === proxyTo.length - 1) {\n    throw new InvalidRequestError('no service id specified in proxy header')\n  }\n\n  // More than one hash\n  if (proxyTo.indexOf('#', hashIndex + 1) !== -1) {\n    throw new InvalidRequestError('invalid proxy header format')\n  }\n\n  // Basic validation\n  if (proxyTo.includes(' ')) {\n    throw new InvalidRequestError('proxy header cannot contain spaces')\n  }\n\n  const did = proxyTo.slice(0, hashIndex)\n  const serviceId = proxyTo.slice(hashIndex + 1)\n\n  // Special case a configured appview, while still proxying correctly any other appview\n  if (\n    ctx.cfg.bskyAppView &&\n    proxyTo === `${ctx.cfg.bskyAppView.did}#bsky_appview`\n  ) {\n    return { did, url: ctx.cfg.bskyAppView.url, serviceId }\n  }\n\n  const didDoc = await ctx.idResolver.did.resolve(did)\n  if (!didDoc) {\n    throw new InvalidRequestError('could not resolve proxy did')\n  }\n\n  const url = getServiceEndpoint(didDoc, { id: `#${serviceId}` })\n  if (!url) {\n    throw new InvalidRequestError('could not resolve proxy did service url')\n  }\n\n  return { did, url, serviceId }\n}\n\n/**\n * Utility function that wraps the undici stream() function and handles request\n * and response errors by wrapping them in XRPCError instances. This function is\n * more efficient than \"pipethroughRequest\" when a writable stream to pipe the\n * upstream response to is available.\n */\nasync function pipethroughStream(\n  ctx: AppContext,\n  req: Request,\n  dispatchOptions: Dispatcher.RequestOptions,\n  successStreamFactory: Dispatcher.StreamFactory,\n): Promise<void> {\n  return new Promise<void>((resolve, reject) => {\n    void ctx.proxyAgent\n      .stream(dispatchOptions, (upstream) => {\n        if (upstream.statusCode >= 400) {\n          const passThrough = new PassThrough()\n\n          void tryParsingError(\n            upstream.headers,\n            passThrough,\n            ctx.cfg.proxy.maxResponseSize,\n          ).then((parsed) => {\n            const xrpcError = new PipethroughUpstreamError(upstream, parsed, {\n              cause: dispatchOptions,\n            })\n\n            reject(xrpcError)\n          }, reject)\n\n          return passThrough\n        }\n\n        const writable = successStreamFactory(upstream)\n\n        // As soon as the control was passed to the writable stream (i.e. by\n        // returning the writable hereafter), pipethroughStream() is considered\n        // to have succeeded. Any error occurring while writing upstream data to\n        // the writable stream should be handled through the stream's error\n        // state (i.e. successStreamFactory() must ensure that error events on\n        // the returned writable will be handled).\n        resolve()\n\n        return writable\n      })\n      // The following catch block will be triggered with either network errors\n      // or writable stream errors. In the latter case, the promise will already\n      // be resolved, and reject()ing it there after will have no effect. Those\n      // error would still be logged by the successStreamFactory() function.\n      .catch(handleUpstreamRequestError.bind(req))\n      .catch(reject)\n  })\n}\n\n/**\n * Utility function that wraps the undici request() function and handles request\n * and response errors by wrapping them in XRPCError instances.\n */\nasync function pipethroughRequest(\n  ctx: AppContext,\n  req: Request,\n  dispatchOptions: Dispatcher.RequestOptions,\n) {\n  // HandlerPipeThroughStream requires a readable stream to be returned, so we\n  // use the (less efficient) request() function instead.\n\n  const upstream = await ctx.proxyAgent\n    .request(dispatchOptions)\n    .catch(handleUpstreamRequestError.bind(req))\n\n  if (upstream.statusCode >= 400) {\n    const parsed = await tryParsingError(\n      upstream.headers,\n      upstream.body,\n      ctx.cfg.proxy.maxResponseSize,\n    )\n\n    throw new PipethroughUpstreamError(upstream, parsed, {\n      cause: dispatchOptions,\n    })\n  }\n\n  return upstream\n}\n\nfunction handleUpstreamRequestError(\n  this: Request,\n  err: unknown,\n  message = 'Upstream service unreachable',\n): never {\n  const logger = isPinoHttpRequest(this) ? this.log : httpLogger\n  logger.error({ err }, message)\n  throw new XRPCServerError(ResponseType.UpstreamFailure, message, undefined, {\n    cause: err,\n  })\n}\n\nfunction isPinoHttpRequest(req: Request): req is Request & {\n  log: { error: (obj: unknown, msg: string) => void }\n} {\n  return typeof (req as { log?: any }).log?.error === 'function'\n}\n\n// Request parsing/forwarding\n// -------------------\n\nexport function isJsonContentType(contentType?: string): boolean | undefined {\n  if (!contentType) return undefined\n  return /application\\/(?:\\w+\\+)?json/i.test(contentType)\n}\n\nasync function tryParsingError(\n  headers: IncomingHttpHeaders,\n  readable: Readable,\n  maxSize: number,\n): Promise<{ error?: string; message?: string }> {\n  if (isJsonContentType(headers['content-type']) === false) {\n    // We don't known how to parse non JSON content types so we can discard the\n    // whole response.\n\n    // Since we don't care about the response, we would normally just destroy\n    // the stream. However, if the underlying HTTP connection is an HTTP/1.1\n    // connection, this also destroys the underlying (keep-alive) TCP socket. In\n    // order to avoid destroying the TCP socket, while avoiding the cost of\n    // consuming too much IO, we give it a chance to finish first.\n\n    // @NOTE we need to listen (and ignore) \"error\" events, otherwise the\n    // process could crash (since we drain the stream asynchronously here). This\n    // is performed through the \"finished\" call below.\n\n    const to = setTimeout(() => {\n      readable.destroy()\n    }, 100)\n    finished(readable, (_err) => {\n      clearTimeout(to)\n    })\n    readable.resume()\n\n    return {}\n  }\n\n  try {\n    const buffer = await bufferUpstreamResponse(\n      readable,\n      headers['content-encoding'],\n      maxSize,\n    )\n\n    const errInfo: unknown = JSON.parse(buffer.toString('utf8'))\n    return {\n      error: safeString(errInfo?.['error']),\n      message: safeString(errInfo?.['message']),\n    }\n  } catch (err) {\n    // Failed to read, decode, buffer or parse. No big deal.\n    return {}\n  }\n}\n\nasync function bufferUpstreamResponse(\n  readable: Readable,\n  contentEncoding: string | string[] | undefined,\n  maxSize: number,\n): Promise<Buffer> {\n  try {\n    // @NOTE maxResponseSize bounds the wire stream that undici reads, and\n    // decoding it can yield a much larger buffer, so the decoded stream needs\n    // its own bound. The checker is applied even when there is no\n    // content-encoding, so that an identity-encoded body is bounded too.\n    return await streamToNodeBuffer(\n      pipeline(\n        [\n          readable,\n          ...createDecoders(contentEncoding),\n          new MaxSizeChecker(\n            maxSize,\n            () => new TypeError('upstream response too large'),\n          ),\n        ],\n        () => {},\n      ) as Duplex,\n    )\n  } catch (err) {\n    if (!readable.destroyed) readable.destroy()\n\n    throw new XRPCServerError(\n      ResponseType.UpstreamFailure,\n      err instanceof TypeError ? err.message : 'unable to decode request body',\n      undefined,\n      { cause: err },\n    )\n  }\n}\n\nexport async function asPipeThroughBuffer(\n  input: HandlerPipeThroughStream,\n  maxSize: number,\n): Promise<HandlerPipeThroughBuffer> {\n  return {\n    buffer: await bufferUpstreamResponse(\n      input.stream,\n      input.headers?.['content-encoding'],\n      maxSize,\n    ),\n    headers: omit(input.headers, ['content-encoding', 'content-length']),\n    encoding: input.encoding,\n  }\n}\n\n// Response parsing/forwarding\n// -------------------\n\nconst RES_HEADERS_TO_FORWARD = [\n  'atproto-repo-rev',\n  'atproto-content-labelers',\n  'retry-after',\n]\n\nfunction* responseHeaders(\n  headers: IncomingHttpHeaders,\n  includeContentHeaders = true,\n): Generator<[string, string]> {\n  if (includeContentHeaders) {\n    const length = headers['content-length']\n    if (length) yield ['content-length', length]\n\n    const encoding = headers['content-encoding']\n    if (encoding) yield ['content-encoding', encoding]\n\n    const type = headers['content-type']\n    if (type) yield ['content-type', type]\n\n    const language = headers['content-language']\n    if (language) yield ['content-language', language]\n  }\n\n  for (let i = 0; i < RES_HEADERS_TO_FORWARD.length; i++) {\n    const name = RES_HEADERS_TO_FORWARD[i]\n    const val = headers[name]\n\n    if (val != null) {\n      const value: string = Array.isArray(val) ? val.join(',') : val\n      yield [name, value]\n    }\n  }\n}\n\n// Utils\n// -------------------\n\n/**\n * Performs lexicon method matching on a set of methods,\n * taking into account that they are treated case-insensitively.\n */\nexport class LxmSet {\n  private inner: Set<string>\n  constructor(items: Iterable<string>) {\n    this.inner = new Set(Array.from(items, normalizeLxm))\n  }\n  has(lxm: string) {\n    return this.inner.has(normalizeLxm(lxm))\n  }\n}\n\n/** Matches methods within a namespace, case-insensitively. */\nexport class LxmPrefix {\n  private readonly prefix: string\n  constructor(namespace: string) {\n    this.prefix = `${normalizeLxm(namespace)}.`\n  }\n  has(lxm: string): boolean {\n    return normalizeLxm(lxm).startsWith(this.prefix)\n  }\n}\n\nexport function normalizeLxm(lxm: string) {\n  return lxm.toLowerCase()\n}\n\n/** Whether a method requires full access or a privileged app password. */\nexport function isPrivilegedMethod(lxm: string): boolean {\n  return CHAT_PRIVILEGED_METHODS.has(lxm) || LOCAL_PRIVILEGED_METHODS.has(lxm)\n}\n\nconst CHAT_PRIVILEGED_METHODS = new LxmPrefix('chat.bsky')\nconst LOCAL_PRIVILEGED_METHODS = new LxmSet([\n  com.atproto.server.createAccount.$lxm,\n])\n\n/** Whether a method is reserved for direct account-management requests. */\nexport function isProtectedMethod(lxm: string): boolean {\n  return PROTECTED_METHODS.has(lxm)\n}\n\n// These endpoints are related to account management and must be used directly,\n// not proxied or service-authed. Service auth may be utilized between PDS and\n// entryway for these methods.\nconst PROTECTED_METHODS = new LxmSet([\n  com.atproto.admin.sendEmail.$lxm,\n  com.atproto.identity.requestPlcOperationSignature.$lxm,\n  com.atproto.identity.signPlcOperation.$lxm,\n  com.atproto.identity.updateHandle.$lxm,\n  com.atproto.server.activateAccount.$lxm,\n  com.atproto.server.confirmEmail.$lxm,\n  com.atproto.server.createAppPassword.$lxm,\n  com.atproto.server.deactivateAccount.$lxm,\n  com.atproto.server.getAccountInviteCodes.$lxm,\n  com.atproto.server.getSession.$lxm,\n  com.atproto.server.listAppPasswords.$lxm,\n  com.atproto.server.requestAccountDelete.$lxm,\n  com.atproto.server.requestEmailConfirmation.$lxm,\n  com.atproto.server.requestEmailUpdate.$lxm,\n  com.atproto.server.revokeAppPassword.$lxm,\n  com.atproto.server.updateEmail.$lxm,\n])\n\nconst defaultService = (\n  ctx: AppContext,\n  nsid: string,\n): {\n  serviceId: string\n  serviceInfo: { url: string; did: string } | null\n} => {\n  switch (nsid) {\n    case tools.ozone.inbox.appealActionedSubject.$lxm:\n    case tools.ozone.communication.createTemplate.$lxm:\n    case tools.ozone.communication.deleteTemplate.$lxm:\n    case tools.ozone.communication.listTemplates.$lxm:\n    case tools.ozone.communication.updateTemplate.$lxm:\n    case tools.ozone.moderation.cancelScheduledActions.$lxm:\n    case tools.ozone.moderation.emitEvent.$lxm:\n    case tools.ozone.moderation.getAccountTimeline.$lxm:\n    case tools.ozone.moderation.getEvent.$lxm:\n    case tools.ozone.moderation.getRecord.$lxm:\n    case tools.ozone.moderation.getRepo.$lxm:\n    case tools.ozone.moderation.listScheduledActions.$lxm:\n    case tools.ozone.moderation.queryEvents.$lxm:\n    case tools.ozone.moderation.queryStatuses.$lxm:\n    case tools.ozone.moderation.scheduleAction.$lxm:\n    case tools.ozone.moderation.searchRepos.$lxm:\n    case tools.ozone.safelink.addRule.$lxm:\n    case tools.ozone.safelink.queryEvents.$lxm:\n    case tools.ozone.safelink.queryRules.$lxm:\n    case tools.ozone.safelink.removeRule.$lxm:\n    case tools.ozone.safelink.syncSource.$lxm:\n    case tools.ozone.safelink.updateRule.$lxm:\n    case tools.ozone.team.addMember.$lxm:\n    case tools.ozone.team.deleteMember.$lxm:\n    case tools.ozone.team.listMembers.$lxm:\n    case tools.ozone.team.updateMember.$lxm:\n    case tools.ozone.verification.grantVerifications.$lxm:\n    case tools.ozone.verification.listVerifications.$lxm:\n    case tools.ozone.verification.revokeVerifications.$lxm:\n      return {\n        serviceId: 'atproto_labeler',\n        serviceInfo: ctx.cfg.modService,\n      }\n    case com.atproto.moderation.createReport.$lxm:\n      return {\n        serviceId: 'atproto_labeler',\n        serviceInfo: ctx.cfg.reportService,\n      }\n    default:\n      return {\n        serviceId: 'bsky_appview',\n        serviceInfo: ctx.cfg.bskyAppView,\n      }\n  }\n}\n\nconst safeString = (str: unknown): string | undefined => {\n  return typeof str === 'string' ? str : undefined\n}\n\nfunction logResponseError(this: ServerResponse, err: unknown): void {\n  httpLogger.warn({ err }, 'error forwarding upstream response')\n}\n\nexport class PipethroughUpstreamError extends XRPCServerError {\n  constructor(\n    readonly upstream: {\n      statusCode: number\n      headers: IncomingHttpHeaders\n    },\n    payload: { message?: string; error?: string },\n    options?: ErrorOptions,\n  ) {\n    const status =\n      upstream.statusCode === 500\n        ? ResponseType.UpstreamFailure\n        : upstream.statusCode\n\n    super(status, payload.message, payload.error, options)\n  }\n\n  get headers(): Record<string, string> {\n    return Object.fromEntries(responseHeaders(this.upstream.headers, false))\n  }\n\n  get error() {\n    return this.customErrorName ?? this.typeName\n  }\n}\n"]}
+{"version":3,"file":"pipethrough.js","sourceRoot":"","sources":["../src/pipethrough.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,WAAW,EAEX,QAAQ,EACR,QAAQ,GACT,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,KAAK,EAAmB,IAAI,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACnE,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,IAAI,EACJ,kBAAkB,GACnB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAIL,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,SAAS,IAAI,eAAe,EAC5B,kBAAkB,EAClB,YAAY,GACb,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAG/D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,MAAM,UAAU,eAAe,CAAC,GAAgB;IAC9C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,OAAO,EAAE,GAAG,CAAC,UAAU;QACvB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,qBAAqB;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;gBACf,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAC1B,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;gBAClD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,GAAG,CAAC,CAAA;gBACrD,CAAC;gBACD,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBAC7D,CAAC;gBACD,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC/B,CAAC;QACL,OAAO,EAAE;YACP,MAAM,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;SAC9D;KACF,CAAC,CAAA;IAEF,OAAO,KAAK,CAAC,OAAO,CAClB,GAAG,CAAC,UAAU,GAAG,CAAC;QAChB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;YACjB,WAAW,EAAE,EAAE,EAAE,8BAA8B;YAC/C,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;YACxB,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC;QACJ,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAC3B,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAe,EAAmB,EAAE;IAC/D,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAqB;QACrE,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC;KACtE,CAAC,CAAA;IACF,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAqB;QAC1E,UAAU,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC;QACjC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC;KACtE,CAAC,CAAA;IAEF,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,eAAe;QACf,IAAI,CAAC;YACH,IACE,GAAG,CAAC,MAAM,KAAK,KAAK;gBACpB,GAAG,CAAC,MAAM,KAAK,MAAM;gBACrB,GAAG,CAAC,MAAM,KAAK,MAAM,EACrB,CAAC;gBACD,MAAM,IAAI,eAAe,CACvB,YAAY,CAAC,cAAc,EAC3B,0CAA0C,CAC3C,CAAA;YACH,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;YACpD,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnC,qDAAqD;gBACrD,MAAM,IAAI,mBAAmB,CAAC,8BAA8B,CAAC,CAAA;YAC/D,CAAC;YAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;YAC7B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;YACnE,CAAC;YAED,MAAM,EACJ,GAAG,EAAE,MAAM,EACX,GAAG,EACH,SAAS,GACV,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;YACvC,qEAAqE;YACrE,oEAAoE;YACpE,iEAAiE;YACjE,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,SAAS,EAAE,CAAA;YACtC,MAAM,QAAQ,GAAG,GAAG,CAAA;YAEpB,MAAM,UAAU,GAAG,MAAM,CACvB,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CACtE,CAAC;gBACA,GAAG;gBACH,GAAG;gBACH,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE;aAC/B,CAAC,CAAA;YAEF,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;YAEtD,IACE,WAAW,CAAC,IAAI,KAAK,QAAQ;gBAC7B,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC;gBACtC,kBAAkB,CAAC,GAAG,CAAC,EACvB,CAAC;gBACD,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;YACnE,CAAC;YAED,MAAM,OAAO,GAAwB;gBACnC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,UAAU;gBAC/D,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC;gBACjD,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC;gBACjE,GAAG,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC5C,gDAAgD;gBAChD,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC;gBAE7C,cAAc,EAAE,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;gBACnD,kBAAkB,EAAE,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC;gBAC3D,gBAAgB,EAAE,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAEvD,aAAa,EAAE,UAAU,MAAM,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE;aACpF,CAAA;YAED,MAAM,eAAe,GAA8B;gBACjD,MAAM;gBACN,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,WAAW;gBACrB,IAAI;gBACJ,OAAO;aACR,CAAA;YAED,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC9D,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;gBAE/B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5D,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;gBAC1B,CAAC;gBAED,uEAAuE;gBACvE,wEAAwE;gBACxE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;gBAEjC,sEAAsE;gBACtE,OAAO,GAAG,CAAA;YACZ,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAA;QACX,CAAC;IACH,CAAC,CAAA;AACH,CAAC,CAAA;AAsBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAe,EACf,GAAY,EACZ,OAA4B;IAQ5B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClD,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,sEAAsE;QACtE,iEAAiE;QACjE,eAAe;QACf,MAAM,IAAI,mBAAmB,CAC3B,eAAe,GAAG,CAAC,MAAM,4BAA4B,CACtD,CAAA;IACH,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAE7B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAErE,MAAM,eAAe,GAA8B;QACjD,MAAM;QACN,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,WAAW;QACrB,OAAO,EAAE;YACP,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC;YACjD,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC;YACjE,GAAG,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC;YAC5C,gDAAgD;YAChD,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC;YAE7C,mEAAmE;YACnE,uEAAuE;YACvE,0EAA0E;YAC1E,wEAAwE;YACxE,kEAAkE;YAClE,iBAAiB,EAAE,2BAA2B,CAC5C,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAC9B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAC/B;YAED,aAAa,EAAE,OAAO,EAAE,GAAG;gBACzB,CAAC,CAAC,UAAU,MAAM,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE;gBAC3F,CAAC,CAAC,SAAS;SACd;QAED,mEAAmE;QACnE,uEAAuE;QACvE,gDAAgD;QAChD,aAAa,EAAE,CAAC,GAAG,KAAK,EAAE,4BAA4B;KACvD,CAAA;IAED,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,CAAA;IAE7E,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,kBAAkB;QACnE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,EAAE,IAAI;KACb,CAAA;AACH,CAAC;AAED,2BAA2B;AAC3B,sBAAsB;AAEtB,SAAS,4BAA4B,CACnC,OAA4B;IAE5B,wEAAwE;IACxE,4EAA4E;IAC5E,qEAAqE;IACrE,MAAM,MAAM,GAAwB,EAAE,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,GAAe,EACf,GAAY,EACZ,GAAW;IAEX,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACjD,IAAI,aAAa;QAAE,OAAO,aAAa,CAAA;IAEvC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACxC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,SAAS,EAAE,CAAA;IAC1D,CAAC;IAED,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,yEAAyE;AACzE,qCAAqC;AACrC,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACtC,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAe,EACf,GAAY,EACZ,GAAW;IAEX,eAAe;IAEf,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACjD,IAAI,aAAa;QAAE,OAAO,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAE9D,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC3D,IAAI,WAAW;QAAE,OAAO,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,CAAA;IAErD,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK;AACnC,kDAAkD;AAClD,GAA2C,EAC3C,OAAe,EAC2C,EAAE;IAC5D,eAAe;IAEf,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAEtC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,CAAC,CAAA;IACnE,CAAC;IAED,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,SAAS,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,mBAAmB,CAAC,yCAAyC,CAAC,CAAA;IAC1E,CAAC;IAED,qBAAqB;IACrB,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,CAAC,CAAA;IAC9D,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,mBAAmB,CAAC,oCAAoC,CAAC,CAAA;IACrE,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;IAE9C,sFAAsF;IACtF,IACE,GAAG,CAAC,GAAG,CAAC,WAAW;QACnB,OAAO,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,eAAe,EACrD,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,CAAA;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,SAAS,EAAE,EAAE,CAAC,CAAA;IAC/D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAAC,yCAAyC,CAAC,CAAA;IAC1E,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;AAChC,CAAC,CAAA;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAe,EACf,GAAY,EACZ,eAA0C,EAC1C,oBAA8C;IAE9C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,KAAK,GAAG,CAAC,UAAU;aAChB,MAAM,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,EAAE;YACpC,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBAC/B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;gBAErC,KAAK,eAAe,CAClB,QAAQ,CAAC,OAAO,EAChB,WAAW,EACX,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAC9B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBAChB,MAAM,SAAS,GAAG,IAAI,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE;wBAC/D,KAAK,EAAE,eAAe;qBACvB,CAAC,CAAA;oBAEF,MAAM,CAAC,SAAS,CAAC,CAAA;gBACnB,CAAC,EAAE,MAAM,CAAC,CAAA;gBAEV,OAAO,WAAW,CAAA;YACpB,CAAC;YAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;YAE/C,oEAAoE;YACpE,uEAAuE;YACvE,wEAAwE;YACxE,mEAAmE;YACnE,sEAAsE;YACtE,0CAA0C;YAC1C,OAAO,EAAE,CAAA;YAET,OAAO,QAAQ,CAAA;QACjB,CAAC,CAAC;YACF,yEAAyE;YACzE,0EAA0E;YAC1E,yEAAyE;YACzE,sEAAsE;aACrE,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aAC3C,KAAK,CAAC,MAAM,CAAC,CAAA;IAClB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAC/B,GAAe,EACf,GAAY,EACZ,eAA0C;IAE1C,4EAA4E;IAC5E,uDAAuD;IAEvD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,UAAU;SAClC,OAAO,CAAC,eAAe,CAAC;SACxB,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAE9C,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,IAAI,EACb,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAC9B,CAAA;QAED,MAAM,IAAI,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE;YACnD,KAAK,EAAE,eAAe;SACvB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,0BAA0B,CAEjC,GAAY,EACZ,OAAO,GAAG,8BAA8B;IAExC,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAA;IAC9D,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;IAC9B,MAAM,IAAI,eAAe,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;QAC1E,KAAK,EAAE,GAAG;KACX,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IAGrC,OAAO,OAAQ,GAAqB,CAAC,GAAG,EAAE,KAAK,KAAK,UAAU,CAAA;AAChE,CAAC;AAED,6BAA6B;AAC7B,sBAAsB;AAEtB,MAAM,UAAU,iBAAiB,CAAC,WAAoB;IACpD,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAA;IAClC,OAAO,8BAA8B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;AACzD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAA4B,EAC5B,QAAkB,EAClB,OAAe;IAEf,IAAI,iBAAiB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACzD,2EAA2E;QAC3E,kBAAkB;QAElB,yEAAyE;QACzE,wEAAwE;QACxE,4EAA4E;QAC5E,uEAAuE;QACvE,8DAA8D;QAE9D,qEAAqE;QACrE,4EAA4E;QAC5E,kDAAkD;QAElD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,QAAQ,CAAC,OAAO,EAAE,CAAA;QACpB,CAAC,EAAE,GAAG,CAAC,CAAA;QACP,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,YAAY,CAAC,EAAE,CAAC,CAAA;QAClB,CAAC,CAAC,CAAA;QACF,QAAQ,CAAC,MAAM,EAAE,CAAA;QAEjB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,QAAQ,EACR,OAAO,CAAC,kBAAkB,CAAC,EAC3B,OAAO,CACR,CAAA;QAED,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5D,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;YACrC,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;SAC1C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wDAAwD;QACxD,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,QAAkB,EAClB,eAA8C,EAC9C,OAAe;IAEf,IAAI,CAAC;QACH,sEAAsE;QACtE,0EAA0E;QAC1E,mEAAmE;QACnE,qEAAqE;QACrE,OAAO,MAAM,kBAAkB,CAC7B,QAAQ,CACN;YACE,QAAQ;YACR,GAAG,cAAc,CAAC,eAAe,EAAE;gBACjC,OAAO;gBACP,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,SAAS,CAAC,6BAA6B,CAAC;aACjE,CAAC;SACH,EACD,GAAG,EAAE,GAAE,CAAC,CACC,CACZ,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,CAAC,SAAS;YAAE,QAAQ,CAAC,OAAO,EAAE,CAAA;QAE3C,MAAM,IAAI,eAAe,CACvB,YAAY,CAAC,eAAe,EAC5B,GAAG,YAAY,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,EACxE,SAAS,EACT,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA+B,EAC/B,OAAe;IAEf,OAAO;QACL,MAAM,EAAE,MAAM,sBAAsB,CAClC,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EACnC,OAAO,CACR;QACD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;QACpE,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAA;AACH,CAAC;AAED,8BAA8B;AAC9B,sBAAsB;AAEtB,MAAM,sBAAsB,GAAG;IAC7B,kBAAkB;IAClB,0BAA0B;IAC1B,aAAa;CACd,CAAA;AAED,QAAQ,CAAC,CAAC,eAAe,CACvB,OAA4B,EAC5B,qBAAqB,GAAG,IAAI;IAE5B,IAAI,qBAAqB,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACxC,IAAI,MAAM;YAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;QAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;QAC5C,IAAI,QAAQ;YAAE,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAA;QAElD,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;QACpC,IAAI,IAAI;YAAE,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;QAEtC,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;QAC5C,IAAI,QAAQ;YAAE,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAEzB,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YAChB,MAAM,KAAK,GAAW,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;YAC9D,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,QAAQ;AACR,sBAAsB;AAEtB;;;GAGG;AACH,MAAM,OAAO,MAAM;IAEjB,YAAY,KAAuB;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,OAAO,SAAS;IAEpB,YAAY,SAAiB;QAC3B,IAAI,CAAC,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAA;IAC7C,CAAC;IACD,GAAG,CAAC,GAAW;QACb,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClD,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,WAAW,EAAE,CAAA;AAC1B,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAC9E,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,SAAS,CAAC,WAAW,CAAC,CAAA;AAC1D,MAAM,wBAAwB,GAAG,IAAI,MAAM,CAAC;IAC1C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI;CACtC,CAAC,CAAA;AAEF,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AACnC,CAAC;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,8BAA8B;AAC9B,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC;IACnC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI;IAChC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,IAAI;IACtD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI;IAC1C,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI;IACtC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI;IACvC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI;IACpC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI;IACzC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI;IACzC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI;IAC7C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI;IAClC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI;IACxC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI;IAC5C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC,IAAI;IAChD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI;IAC1C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI;IACzC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;CACpC,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,CACrB,GAAe,EACf,IAAY,EAIZ,EAAE;IACF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC;QAClD,KAAK,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC;QACnD,KAAK,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC;QACnD,KAAK,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC;QAClD,KAAK,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC;QACnD,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,IAAI,CAAC;QACxD,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3C,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC;QACpD,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1C,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3C,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;QACzC,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC;QACtD,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;QAC7C,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC;QAC/C,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC;QAChD,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;QAC7C,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;QAC3C,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1C,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1C,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1C,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1C,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QACrC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QACxC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QACvC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QACxC,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC;QACtD,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC;QACrD,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI;YACpD,OAAO;gBACL,SAAS,EAAE,iBAAiB;gBAC5B,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU;aAChC,CAAA;QACH,KAAK,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI;YAC3C,OAAO;gBACL,SAAS,EAAE,iBAAiB;gBAC5B,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa;aACnC,CAAA;QACH;YACE,OAAO;gBACL,SAAS,EAAE,cAAc;gBACzB,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW;aACjC,CAAA;IACL,CAAC;AACH,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,GAAY,EAAsB,EAAE;IACtD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AAClD,CAAC,CAAA;AAED,SAAS,gBAAgB,CAAuB,GAAY;IAC1D,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,oCAAoC,CAAC,CAAA;AAChE,CAAC;AAED,MAAM,OAAO,wBAAyB,SAAQ,eAAe;IAC3D,YACW,QAGR,EACD,OAA6C,EAC7C,OAAsB;QAEtB,MAAM,MAAM,GACV,QAAQ,CAAC,UAAU,KAAK,GAAG;YACzB,CAAC,CAAC,YAAY,CAAC,eAAe;YAC9B,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAA;QAEzB,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;wBAZ7C,QAAQ;IAanB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;IAC1E,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,QAAQ,CAAA;IAC9C,CAAC;CACF","sourcesContent":["import type { IncomingHttpHeaders, ServerResponse } from 'node:http'\nimport {\n  type Duplex,\n  PassThrough,\n  type Readable,\n  finished,\n  pipeline,\n} from 'node:stream'\nimport type { Request } from 'express'\nimport { Agent, type Dispatcher, Pool, interceptors } from 'undici'\nimport {\n  createDecoders,\n  getServiceEndpoint,\n  omit,\n  streamToNodeBuffer,\n} from '@atproto/common'\nimport type { RpcPermissionMatch } from '@atproto/oauth-scopes'\nimport {\n  type CatchallHandler,\n  type HandlerPipeThroughBuffer,\n  type HandlerPipeThroughStream,\n  InternalServerError,\n  InvalidRequestError,\n  ResponseType,\n  XRPCError as XRPCServerError,\n  excludeErrorResult,\n  parseReqNsid,\n} from '@atproto/xrpc-server'\nimport { isUnicastIp, unicastLookup } from '@atproto-labs/fetch-node'\nimport { buildProxiedContentEncoding } from '@atproto-labs/xrpc-utils'\nimport { AuthScope, isAccessPrivileged } from './auth-scope.js'\nimport type { ProxyConfig } from './config/config.js'\nimport type { AppContext } from './context.js'\nimport { com, tools } from './lexicons/index.js'\nimport { httpLogger } from './logger.js'\n\nexport function buildProxyAgent(cfg: ProxyConfig): Dispatcher {\n  const agent = new Agent({\n    allowH2: cfg.allowHTTP2,\n    headersTimeout: cfg.headersTimeout,\n    maxResponseSize: cfg.maxResponseSize,\n    bodyTimeout: cfg.bodyTimeout,\n    factory: cfg.disableSsrfProtection\n      ? undefined\n      : (origin, opts) => {\n          const { protocol, hostname } =\n            origin instanceof URL ? origin : new URL(origin)\n          if (protocol !== 'https:') {\n            throw new Error(`Forbidden protocol \"${protocol}\"`)\n          }\n          if (isUnicastIp(hostname) === false) {\n            throw new Error('Hostname resolved to non-unicast address')\n          }\n          return new Pool(origin, opts)\n        },\n    connect: {\n      lookup: cfg.disableSsrfProtection ? undefined : unicastLookup,\n    },\n  })\n\n  return agent.compose(\n    cfg.maxRetries > 0\n      ? interceptors.retry({\n          statusCodes: [], // Only retry on socket errors\n          methods: ['GET', 'HEAD'],\n          maxRetries: cfg.maxRetries,\n        })\n      : (dispatch) => dispatch,\n  )\n}\n\nexport const proxyHandler = (ctx: AppContext): CatchallHandler => {\n  const performAuth = ctx.authVerifier.authorization<RpcPermissionMatch>({\n    authorize: (permissions, { params }) => permissions.assertRpc(params),\n  })\n  const performInboxAuth = ctx.authVerifier.authorization<RpcPermissionMatch>({\n    additional: [AuthScope.Takendown],\n    authorize: (permissions, { params }) => permissions.assertRpc(params),\n  })\n\n  return async (req, res, next) => {\n    // /!\\ Hot path\n    try {\n      if (\n        req.method !== 'GET' &&\n        req.method !== 'HEAD' &&\n        req.method !== 'POST'\n      ) {\n        throw new XRPCServerError(\n          ResponseType.InvalidRequest,\n          'XRPC requests only supports GET and POST',\n        )\n      }\n\n      const body = req.method === 'POST' ? req : undefined\n      if (body != null && !body.readable) {\n        // Body was already consumed by a previous middleware\n        throw new InternalServerError('Request body is not readable')\n      }\n\n      const lxm = parseReqNsid(req)\n      if (isProtectedMethod(lxm)) {\n        throw new InvalidRequestError('Bad token method', 'InvalidToken')\n      }\n\n      const {\n        url: origin,\n        did,\n        serviceId,\n      } = await parseProxyInfo(ctx, req, lxm)\n      // Phase 1 of service auth updates: the scope check sees the combined\n      // did#serviceId form (so OAuth callers' rpc:?aud=did#service scopes\n      // match), while the outbound service-auth JWT keeps bare-DID aud\n      // regardless of session type.\n      const scopeAud = `${did}#${serviceId}`\n      const tokenAud = did\n\n      const authResult = await (\n        lxm.startsWith('tools.ozone.inbox.') ? performInboxAuth : performAuth\n      )({\n        req,\n        res,\n        params: { lxm, aud: scopeAud },\n      })\n\n      const { credentials } = excludeErrorResult(authResult)\n\n      if (\n        credentials.type === 'access' &&\n        !isAccessPrivileged(credentials.scope) &&\n        isPrivilegedMethod(lxm)\n      ) {\n        throw new InvalidRequestError('Bad token method', 'InvalidToken')\n      }\n\n      const headers: IncomingHttpHeaders = {\n        'accept-encoding': req.headers['accept-encoding'] || 'identity',\n        'accept-language': req.headers['accept-language'],\n        'atproto-accept-labelers': req.headers['atproto-accept-labelers'],\n        ...getAtprotoPassthroughHeaders(req.headers),\n        // @NOTE deprecated; use `x-atproto-bsky-topics`\n        'x-bsky-topics': req.headers['x-bsky-topics'],\n\n        'content-type': body && req.headers['content-type'],\n        'content-encoding': body && req.headers['content-encoding'],\n        'content-length': body && req.headers['content-length'],\n\n        authorization: `Bearer ${await ctx.serviceAuthJwt(credentials.did, tokenAud, lxm)}`,\n      }\n\n      const dispatchOptions: Dispatcher.RequestOptions = {\n        origin,\n        method: req.method,\n        path: req.originalUrl,\n        body,\n        headers,\n      }\n\n      await pipethroughStream(ctx, req, dispatchOptions, (upstream) => {\n        res.status(upstream.statusCode)\n\n        for (const [name, val] of responseHeaders(upstream.headers)) {\n          res.setHeader(name, val)\n        }\n\n        // Note that we should not need to manually handle errors here (e.g. by\n        // destroying the response), as the http server will handle them for us.\n        res.on('error', logResponseError)\n\n        // Tell undici to write the upstream response directly to the response\n        return res\n      })\n    } catch (err) {\n      next(err)\n    }\n  }\n}\n\nexport type PipethroughOptions = {\n  /**\n   * Specify the issuer (requester) for service auth. If not provided, no\n   * authorization headers will be added to the request.\n   */\n  iss?: string\n\n  /**\n   * Override the audience for service auth. If not provided, the audience will\n   * be determined based on the proxy service.\n   */\n  aud?: string\n\n  /**\n   * Override the lexicon method for service auth. If not provided, the lexicon\n   * method will be determined based on the request path.\n   */\n  lxm?: string\n}\n\nexport async function pipethrough(\n  ctx: AppContext,\n  req: Request,\n  options?: PipethroughOptions,\n): Promise<\n  HandlerPipeThroughStream & {\n    stream: Readable\n    headers: Record<string, string>\n    encoding: string\n  }\n> {\n  if (req.method !== 'GET' && req.method !== 'HEAD') {\n    // pipethrough() is used from within xrpcServer handlers, which means that\n    // the request body either has been parsed or is a readable stream that has\n    // been piped for decoding & size limiting. Because of this, forwarding the\n    // request body requires re-encoding it. Since we currently do not use\n    // pipethrough() with procedures, proxying of request body is not\n    // implemented.\n    throw new InternalServerError(\n      `Proxying of ${req.method} requests is not supported`,\n    )\n  }\n\n  const lxm = parseReqNsid(req)\n\n  const { url: origin, did: aud } = await parseProxyInfo(ctx, req, lxm)\n\n  const dispatchOptions: Dispatcher.RequestOptions = {\n    origin,\n    method: req.method,\n    path: req.originalUrl,\n    headers: {\n      'accept-language': req.headers['accept-language'],\n      'atproto-accept-labelers': req.headers['atproto-accept-labelers'],\n      ...getAtprotoPassthroughHeaders(req.headers),\n      // @NOTE deprecated; use `x-atproto-bsky-topics`\n      'x-bsky-topics': req.headers['x-bsky-topics'],\n\n      // Because we sometimes need to interpret the response (e.g. during\n      // read-after-write, through asPipeThroughBuffer()), we need to ask the\n      // upstream server for an encoding that both the requester and the PDS can\n      // understand. Since we might have to do the decoding ourselves, we will\n      // use our own preferences (and weight) to negotiate the encoding.\n      'accept-encoding': buildProxiedContentEncoding(\n        req.headers['accept-encoding'],\n        ctx.cfg.proxy.preferCompressed,\n      ),\n\n      authorization: options?.iss\n        ? `Bearer ${await ctx.serviceAuthJwt(options.iss, options.aud ?? aud, options.lxm ?? lxm)}`\n        : undefined,\n    },\n\n    // Use a high water mark to buffer more data while performing async\n    // operations before this stream is consumed. This is especially useful\n    // while processing read-after-write operations.\n    highWaterMark: 2 * 65536, // twice the default (64KiB)\n  }\n\n  const { headers, body } = await pipethroughRequest(ctx, req, dispatchOptions)\n\n  return {\n    encoding: safeString(headers['content-type']) ?? 'application/json',\n    headers: Object.fromEntries(responseHeaders(headers)),\n    stream: body,\n  }\n}\n\n// Request setup/formatting\n// -------------------\n\nfunction getAtprotoPassthroughHeaders(\n  headers: IncomingHttpHeaders,\n): IncomingHttpHeaders {\n  // @NOTE node lower-cases all incoming header names, so a case-sensitive\n  // prefix check is sufficient here. This runs on the request hot path, so we\n  // build the result imperatively rather than via intermediate arrays.\n  const result: IncomingHttpHeaders = {}\n  for (const name in headers) {\n    if (name.startsWith('x-atproto-')) {\n      result[name] = headers[name]\n    }\n  }\n  return result\n}\n\nexport function computeProxyTo(\n  ctx: AppContext,\n  req: Request,\n  lxm: string,\n): string {\n  const proxyToHeader = req.header('atproto-proxy')\n  if (proxyToHeader) return proxyToHeader\n\n  const service = defaultService(ctx, lxm)\n  if (service.serviceInfo) {\n    return `${service.serviceInfo.did}#${service.serviceId}`\n  }\n\n  throw new InvalidRequestError(`No service configured for ${lxm}`)\n}\n\n// Bare-DID portion of `proxyTo`, suitable as a service-auth JWT audience\n// (Phase 1 of service auth updates).\nexport function bareDidFromProxyTo(proxyTo: string): string {\n  const hashIndex = proxyTo.indexOf('#')\n  return hashIndex === -1 ? proxyTo : proxyTo.slice(0, hashIndex)\n}\n\nexport async function parseProxyInfo(\n  ctx: AppContext,\n  req: Request,\n  lxm: string,\n): Promise<{ url: string; did: string; serviceId: string }> {\n  // /!\\ Hot path\n\n  const proxyToHeader = req.header('atproto-proxy')\n  if (proxyToHeader) return parseProxyHeader(ctx, proxyToHeader)\n\n  const { serviceId, serviceInfo } = defaultService(ctx, lxm)\n  if (serviceInfo) return { ...serviceInfo, serviceId }\n\n  throw new InvalidRequestError(`No service configured for ${lxm}`)\n}\n\nexport const parseProxyHeader = async (\n  // Using subset of AppContext for testing purposes\n  ctx: Pick<AppContext, 'cfg' | 'idResolver'>,\n  proxyTo: string,\n): Promise<{ did: string; url: string; serviceId: string }> => {\n  // /!\\ Hot path\n\n  const hashIndex = proxyTo.indexOf('#')\n\n  if (hashIndex === 0) {\n    throw new InvalidRequestError('no did specified in proxy header')\n  }\n\n  if (hashIndex === -1 || hashIndex === proxyTo.length - 1) {\n    throw new InvalidRequestError('no service id specified in proxy header')\n  }\n\n  // More than one hash\n  if (proxyTo.indexOf('#', hashIndex + 1) !== -1) {\n    throw new InvalidRequestError('invalid proxy header format')\n  }\n\n  // Basic validation\n  if (proxyTo.includes(' ')) {\n    throw new InvalidRequestError('proxy header cannot contain spaces')\n  }\n\n  const did = proxyTo.slice(0, hashIndex)\n  const serviceId = proxyTo.slice(hashIndex + 1)\n\n  // Special case a configured appview, while still proxying correctly any other appview\n  if (\n    ctx.cfg.bskyAppView &&\n    proxyTo === `${ctx.cfg.bskyAppView.did}#bsky_appview`\n  ) {\n    return { did, url: ctx.cfg.bskyAppView.url, serviceId }\n  }\n\n  const didDoc = await ctx.idResolver.did.resolve(did)\n  if (!didDoc) {\n    throw new InvalidRequestError('could not resolve proxy did')\n  }\n\n  const url = getServiceEndpoint(didDoc, { id: `#${serviceId}` })\n  if (!url) {\n    throw new InvalidRequestError('could not resolve proxy did service url')\n  }\n\n  return { did, url, serviceId }\n}\n\n/**\n * Utility function that wraps the undici stream() function and handles request\n * and response errors by wrapping them in XRPCError instances. This function is\n * more efficient than \"pipethroughRequest\" when a writable stream to pipe the\n * upstream response to is available.\n */\nasync function pipethroughStream(\n  ctx: AppContext,\n  req: Request,\n  dispatchOptions: Dispatcher.RequestOptions,\n  successStreamFactory: Dispatcher.StreamFactory,\n): Promise<void> {\n  return new Promise<void>((resolve, reject) => {\n    void ctx.proxyAgent\n      .stream(dispatchOptions, (upstream) => {\n        if (upstream.statusCode >= 400) {\n          const passThrough = new PassThrough()\n\n          void tryParsingError(\n            upstream.headers,\n            passThrough,\n            ctx.cfg.proxy.maxResponseSize,\n          ).then((parsed) => {\n            const xrpcError = new PipethroughUpstreamError(upstream, parsed, {\n              cause: dispatchOptions,\n            })\n\n            reject(xrpcError)\n          }, reject)\n\n          return passThrough\n        }\n\n        const writable = successStreamFactory(upstream)\n\n        // As soon as the control was passed to the writable stream (i.e. by\n        // returning the writable hereafter), pipethroughStream() is considered\n        // to have succeeded. Any error occurring while writing upstream data to\n        // the writable stream should be handled through the stream's error\n        // state (i.e. successStreamFactory() must ensure that error events on\n        // the returned writable will be handled).\n        resolve()\n\n        return writable\n      })\n      // The following catch block will be triggered with either network errors\n      // or writable stream errors. In the latter case, the promise will already\n      // be resolved, and reject()ing it there after will have no effect. Those\n      // error would still be logged by the successStreamFactory() function.\n      .catch(handleUpstreamRequestError.bind(req))\n      .catch(reject)\n  })\n}\n\n/**\n * Utility function that wraps the undici request() function and handles request\n * and response errors by wrapping them in XRPCError instances.\n */\nasync function pipethroughRequest(\n  ctx: AppContext,\n  req: Request,\n  dispatchOptions: Dispatcher.RequestOptions,\n) {\n  // HandlerPipeThroughStream requires a readable stream to be returned, so we\n  // use the (less efficient) request() function instead.\n\n  const upstream = await ctx.proxyAgent\n    .request(dispatchOptions)\n    .catch(handleUpstreamRequestError.bind(req))\n\n  if (upstream.statusCode >= 400) {\n    const parsed = await tryParsingError(\n      upstream.headers,\n      upstream.body,\n      ctx.cfg.proxy.maxResponseSize,\n    )\n\n    throw new PipethroughUpstreamError(upstream, parsed, {\n      cause: dispatchOptions,\n    })\n  }\n\n  return upstream\n}\n\nfunction handleUpstreamRequestError(\n  this: Request,\n  err: unknown,\n  message = 'Upstream service unreachable',\n): never {\n  const logger = isPinoHttpRequest(this) ? this.log : httpLogger\n  logger.error({ err }, message)\n  throw new XRPCServerError(ResponseType.UpstreamFailure, message, undefined, {\n    cause: err,\n  })\n}\n\nfunction isPinoHttpRequest(req: Request): req is Request & {\n  log: { error: (obj: unknown, msg: string) => void }\n} {\n  return typeof (req as { log?: any }).log?.error === 'function'\n}\n\n// Request parsing/forwarding\n// -------------------\n\nexport function isJsonContentType(contentType?: string): boolean | undefined {\n  if (!contentType) return undefined\n  return /application\\/(?:\\w+\\+)?json/i.test(contentType)\n}\n\nasync function tryParsingError(\n  headers: IncomingHttpHeaders,\n  readable: Readable,\n  maxSize: number,\n): Promise<{ error?: string; message?: string }> {\n  if (isJsonContentType(headers['content-type']) === false) {\n    // We don't known how to parse non JSON content types so we can discard the\n    // whole response.\n\n    // Since we don't care about the response, we would normally just destroy\n    // the stream. However, if the underlying HTTP connection is an HTTP/1.1\n    // connection, this also destroys the underlying (keep-alive) TCP socket. In\n    // order to avoid destroying the TCP socket, while avoiding the cost of\n    // consuming too much IO, we give it a chance to finish first.\n\n    // @NOTE we need to listen (and ignore) \"error\" events, otherwise the\n    // process could crash (since we drain the stream asynchronously here). This\n    // is performed through the \"finished\" call below.\n\n    const to = setTimeout(() => {\n      readable.destroy()\n    }, 100)\n    finished(readable, (_err) => {\n      clearTimeout(to)\n    })\n    readable.resume()\n\n    return {}\n  }\n\n  try {\n    const buffer = await bufferUpstreamResponse(\n      readable,\n      headers['content-encoding'],\n      maxSize,\n    )\n\n    const errInfo: unknown = JSON.parse(buffer.toString('utf8'))\n    return {\n      error: safeString(errInfo?.['error']),\n      message: safeString(errInfo?.['message']),\n    }\n  } catch (err) {\n    // Failed to read, decode, buffer or parse. No big deal.\n    return {}\n  }\n}\n\nasync function bufferUpstreamResponse(\n  readable: Readable,\n  contentEncoding: string | string[] | undefined,\n  maxSize: number,\n): Promise<Buffer> {\n  try {\n    // @NOTE maxResponseSize bounds the wire stream that undici reads, and\n    // decoding it can yield a much larger buffer, so the decoded stream needs\n    // its own bound. `createDecoders` applies it even when there is no\n    // content-encoding, so that an identity-encoded body is bounded too.\n    return await streamToNodeBuffer(\n      pipeline(\n        [\n          readable,\n          ...createDecoders(contentEncoding, {\n            maxSize,\n            maxSizeError: () => new TypeError('upstream response too large'),\n          }),\n        ],\n        () => {},\n      ) as Duplex,\n    )\n  } catch (err) {\n    if (!readable.destroyed) readable.destroy()\n\n    throw new XRPCServerError(\n      ResponseType.UpstreamFailure,\n      err instanceof TypeError ? err.message : 'unable to decode request body',\n      undefined,\n      { cause: err },\n    )\n  }\n}\n\nexport async function asPipeThroughBuffer(\n  input: HandlerPipeThroughStream,\n  maxSize: number,\n): Promise<HandlerPipeThroughBuffer> {\n  return {\n    buffer: await bufferUpstreamResponse(\n      input.stream,\n      input.headers?.['content-encoding'],\n      maxSize,\n    ),\n    headers: omit(input.headers, ['content-encoding', 'content-length']),\n    encoding: input.encoding,\n  }\n}\n\n// Response parsing/forwarding\n// -------------------\n\nconst RES_HEADERS_TO_FORWARD = [\n  'atproto-repo-rev',\n  'atproto-content-labelers',\n  'retry-after',\n]\n\nfunction* responseHeaders(\n  headers: IncomingHttpHeaders,\n  includeContentHeaders = true,\n): Generator<[string, string]> {\n  if (includeContentHeaders) {\n    const length = headers['content-length']\n    if (length) yield ['content-length', length]\n\n    const encoding = headers['content-encoding']\n    if (encoding) yield ['content-encoding', encoding]\n\n    const type = headers['content-type']\n    if (type) yield ['content-type', type]\n\n    const language = headers['content-language']\n    if (language) yield ['content-language', language]\n  }\n\n  for (let i = 0; i < RES_HEADERS_TO_FORWARD.length; i++) {\n    const name = RES_HEADERS_TO_FORWARD[i]\n    const val = headers[name]\n\n    if (val != null) {\n      const value: string = Array.isArray(val) ? val.join(',') : val\n      yield [name, value]\n    }\n  }\n}\n\n// Utils\n// -------------------\n\n/**\n * Performs lexicon method matching on a set of methods,\n * taking into account that they are treated case-insensitively.\n */\nexport class LxmSet {\n  private inner: Set<string>\n  constructor(items: Iterable<string>) {\n    this.inner = new Set(Array.from(items, normalizeLxm))\n  }\n  has(lxm: string) {\n    return this.inner.has(normalizeLxm(lxm))\n  }\n}\n\n/** Matches methods within a namespace, case-insensitively. */\nexport class LxmPrefix {\n  private readonly prefix: string\n  constructor(namespace: string) {\n    this.prefix = `${normalizeLxm(namespace)}.`\n  }\n  has(lxm: string): boolean {\n    return normalizeLxm(lxm).startsWith(this.prefix)\n  }\n}\n\nexport function normalizeLxm(lxm: string) {\n  return lxm.toLowerCase()\n}\n\n/** Whether a method requires full access or a privileged app password. */\nexport function isPrivilegedMethod(lxm: string): boolean {\n  return CHAT_PRIVILEGED_METHODS.has(lxm) || LOCAL_PRIVILEGED_METHODS.has(lxm)\n}\n\nconst CHAT_PRIVILEGED_METHODS = new LxmPrefix('chat.bsky')\nconst LOCAL_PRIVILEGED_METHODS = new LxmSet([\n  com.atproto.server.createAccount.$lxm,\n])\n\n/** Whether a method is reserved for direct account-management requests. */\nexport function isProtectedMethod(lxm: string): boolean {\n  return PROTECTED_METHODS.has(lxm)\n}\n\n// These endpoints are related to account management and must be used directly,\n// not proxied or service-authed. Service auth may be utilized between PDS and\n// entryway for these methods.\nconst PROTECTED_METHODS = new LxmSet([\n  com.atproto.admin.sendEmail.$lxm,\n  com.atproto.identity.requestPlcOperationSignature.$lxm,\n  com.atproto.identity.signPlcOperation.$lxm,\n  com.atproto.identity.updateHandle.$lxm,\n  com.atproto.server.activateAccount.$lxm,\n  com.atproto.server.confirmEmail.$lxm,\n  com.atproto.server.createAppPassword.$lxm,\n  com.atproto.server.deactivateAccount.$lxm,\n  com.atproto.server.getAccountInviteCodes.$lxm,\n  com.atproto.server.getSession.$lxm,\n  com.atproto.server.listAppPasswords.$lxm,\n  com.atproto.server.requestAccountDelete.$lxm,\n  com.atproto.server.requestEmailConfirmation.$lxm,\n  com.atproto.server.requestEmailUpdate.$lxm,\n  com.atproto.server.revokeAppPassword.$lxm,\n  com.atproto.server.updateEmail.$lxm,\n])\n\nconst defaultService = (\n  ctx: AppContext,\n  nsid: string,\n): {\n  serviceId: string\n  serviceInfo: { url: string; did: string } | null\n} => {\n  switch (nsid) {\n    case tools.ozone.inbox.appealActionedSubject.$lxm:\n    case tools.ozone.communication.createTemplate.$lxm:\n    case tools.ozone.communication.deleteTemplate.$lxm:\n    case tools.ozone.communication.listTemplates.$lxm:\n    case tools.ozone.communication.updateTemplate.$lxm:\n    case tools.ozone.moderation.cancelScheduledActions.$lxm:\n    case tools.ozone.moderation.emitEvent.$lxm:\n    case tools.ozone.moderation.getAccountTimeline.$lxm:\n    case tools.ozone.moderation.getEvent.$lxm:\n    case tools.ozone.moderation.getRecord.$lxm:\n    case tools.ozone.moderation.getRepo.$lxm:\n    case tools.ozone.moderation.listScheduledActions.$lxm:\n    case tools.ozone.moderation.queryEvents.$lxm:\n    case tools.ozone.moderation.queryStatuses.$lxm:\n    case tools.ozone.moderation.scheduleAction.$lxm:\n    case tools.ozone.moderation.searchRepos.$lxm:\n    case tools.ozone.safelink.addRule.$lxm:\n    case tools.ozone.safelink.queryEvents.$lxm:\n    case tools.ozone.safelink.queryRules.$lxm:\n    case tools.ozone.safelink.removeRule.$lxm:\n    case tools.ozone.safelink.syncSource.$lxm:\n    case tools.ozone.safelink.updateRule.$lxm:\n    case tools.ozone.team.addMember.$lxm:\n    case tools.ozone.team.deleteMember.$lxm:\n    case tools.ozone.team.listMembers.$lxm:\n    case tools.ozone.team.updateMember.$lxm:\n    case tools.ozone.verification.grantVerifications.$lxm:\n    case tools.ozone.verification.listVerifications.$lxm:\n    case tools.ozone.verification.revokeVerifications.$lxm:\n      return {\n        serviceId: 'atproto_labeler',\n        serviceInfo: ctx.cfg.modService,\n      }\n    case com.atproto.moderation.createReport.$lxm:\n      return {\n        serviceId: 'atproto_labeler',\n        serviceInfo: ctx.cfg.reportService,\n      }\n    default:\n      return {\n        serviceId: 'bsky_appview',\n        serviceInfo: ctx.cfg.bskyAppView,\n      }\n  }\n}\n\nconst safeString = (str: unknown): string | undefined => {\n  return typeof str === 'string' ? str : undefined\n}\n\nfunction logResponseError(this: ServerResponse, err: unknown): void {\n  httpLogger.warn({ err }, 'error forwarding upstream response')\n}\n\nexport class PipethroughUpstreamError extends XRPCServerError {\n  constructor(\n    readonly upstream: {\n      statusCode: number\n      headers: IncomingHttpHeaders\n    },\n    payload: { message?: string; error?: string },\n    options?: ErrorOptions,\n  ) {\n    const status =\n      upstream.statusCode === 500\n        ? ResponseType.UpstreamFailure\n        : upstream.statusCode\n\n    super(status, payload.message, payload.error, options)\n  }\n\n  get headers(): Record<string, string> {\n    return Object.fromEntries(responseHeaders(this.upstream.headers, false))\n  }\n\n  get error() {\n    return this.customErrorName ?? this.typeName\n  }\n}\n"]}

package/dist/telemetry.js

@@ -1,8 +1,8 @@
 import { AwsInstrumentation } from '@opentelemetry/instrumentation-aws-sdk';
 import { IORedisInstrumentation } from '@opentelemetry/instrumentation-ioredis';
-import { BetterSqlite3Instrumentation } from 'opentelemetry-plugin-better-sqlite3';
 import pkg from '@atproto/pds/package.json' with { type: 'json' };
 import { setup } from '@atproto-labs/opentelemetry-node';
+import { BetterSqlite3Instrumentation } from '@atproto-labs/opentelemetry-node/better-sqlite3-plugin';
 await setup(() => ({
     name: pkg.name,
     version: pkg.version,

package/dist/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAA;AAC/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAA;AAClF,OAAO,GAAG,MAAM,2BAA2B,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AACjE,OAAO,EAAE,KAAK,EAAE,MAAM,kCAAkC,CAAA;AAExD,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACjB,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,OAAO,EAAE,GAAG,CAAC,OAAO;IACpB,gBAAgB,EAAE;QAChB,IAAI,kBAAkB,EAAE;QACxB,IAAI,sBAAsB,EAAE;QAC5B,IAAI,4BAA4B,EAAE;KACnC;CACF,CAAC,CAAC,CAAA","sourcesContent":["import { AwsInstrumentation } from '@opentelemetry/instrumentation-aws-sdk'\nimport { IORedisInstrumentation } from '@opentelemetry/instrumentation-ioredis'\nimport { BetterSqlite3Instrumentation } from 'opentelemetry-plugin-better-sqlite3'\nimport pkg from '@atproto/pds/package.json' with { type: 'json' }\nimport { setup } from '@atproto-labs/opentelemetry-node'\n\nawait setup(() => ({\n  name: pkg.name,\n  version: pkg.version,\n  instrumentations: [\n    new AwsInstrumentation(),\n    new IORedisInstrumentation(),\n    new BetterSqlite3Instrumentation(),\n  ],\n}))\n"]}
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAA;AAC/E,OAAO,GAAG,MAAM,2BAA2B,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AACjE,OAAO,EAAE,KAAK,EAAE,MAAM,kCAAkC,CAAA;AACxD,OAAO,EAAE,4BAA4B,EAAE,MAAM,wDAAwD,CAAA;AAErG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACjB,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,OAAO,EAAE,GAAG,CAAC,OAAO;IACpB,gBAAgB,EAAE;QAChB,IAAI,kBAAkB,EAAE;QACxB,IAAI,sBAAsB,EAAE;QAC5B,IAAI,4BAA4B,EAAE;KACnC;CACF,CAAC,CAAC,CAAA","sourcesContent":["import { AwsInstrumentation } from '@opentelemetry/instrumentation-aws-sdk'\nimport { IORedisInstrumentation } from '@opentelemetry/instrumentation-ioredis'\nimport pkg from '@atproto/pds/package.json' with { type: 'json' }\nimport { setup } from '@atproto-labs/opentelemetry-node'\nimport { BetterSqlite3Instrumentation } from '@atproto-labs/opentelemetry-node/better-sqlite3-plugin'\n\nawait setup(() => ({\n  name: pkg.name,\n  version: pkg.version,\n  instrumentations: [\n    new AwsInstrumentation(),\n    new IORedisInstrumentation(),\n    new BetterSqlite3Instrumentation(),\n  ],\n}))\n"]}

package/example.env

@@ -52,4 +52,3 @@ PDS_DISABLE_SSRF_PROTECTION=0
 #OTEL_NODE_RESOURCE_DETECTORS="container,env,host"
 #OTEL_EXPORTER_OTLP_ENDPOINT="https://otel-collector.example.com"
 #OTEL_EXPORTER_OTLP_PROTOCOL="http/protobuf"
-#OTEL_SEMCONV_STABILITY_OPT_IN="http"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atproto/pds",
-  "version": "0.5.50",
+  "version": "0.5.52",
   "license": "MIT",
   "description": "Reference implementation of atproto Personal Data Server (PDS)",
   "keywords": [
@@ -38,10 +38,9 @@
     "@did-plc/lib": "^0.0.4",
     "@hapi/address": "^5.1.1",
     "@noble/curves": "^1.7.0",
-    "@opentelemetry/api": "^1.9.1",
-    "@opentelemetry/api-logs": "^0.219.0",
-    "@opentelemetry/instrumentation-aws-sdk": "^0.74.0",
-    "@opentelemetry/instrumentation-ioredis": "^0.67.0",
+    "@opentelemetry/api": "^1.10.0",
+    "@opentelemetry/instrumentation-aws-sdk": "^0.79.0",
+    "@opentelemetry/instrumentation-ioredis": "^0.72.0",
     "better-sqlite3": "^12.0.0",
     "compression": "^1.7.4",
     "cors": "^2.8.5",
@@ -56,7 +55,6 @@
     "kysely": "^0.29.2",
     "nodemailer": "^6.8.0",
     "nodemailer-html-to-text": "^3.2.0",
-    "opentelemetry-plugin-better-sqlite3": "^1.13.0",
     "p-queue": "^8.0.0",
     "pino": "^10.3.1",
     "pino-http": "^11.0.0",
@@ -65,26 +63,26 @@
     "undici": "^8.12.2",
     "zod": "^3.23.8",
     "@atproto-labs/fetch-node": "^0.4.3",
-    "@atproto-labs/opentelemetry-node": "^0.4.0",
+    "@atproto-labs/opentelemetry-node": "^0.5.0",
     "@atproto-labs/simple-store": "^0.5.1",
-    "@atproto-labs/simple-store-memory": "^0.2.6",
     "@atproto-labs/simple-store-redis": "^0.1.6",
-    "@atproto-labs/xrpc-utils": "^0.1.27",
-    "@atproto/common": "^0.8.6",
-    "@atproto/aws": "^0.3.20",
+    "@atproto-labs/xrpc-utils": "^0.1.28",
+    "@atproto-labs/simple-store-memory": "^0.2.6",
+    "@atproto/aws": "^0.3.21",
+    "@atproto/common": "^0.8.7",
     "@atproto/crypto": "^0.5.7",
     "@atproto/did": "^0.5.6",
     "@atproto/identity": "^0.5.20",
-    "@atproto/lex": "^0.4.3",
+    "@atproto/lex": "^0.4.4",
     "@atproto/lex-cbor": "^0.1.7",
     "@atproto/lex-data": "^0.1.8",
     "@atproto/lex-document": "^0.1.14",
     "@atproto/lex-json": "^0.1.7",
-    "@atproto/oauth-provider": "^0.25.0",
+    "@atproto/oauth-provider": "^0.25.2",
     "@atproto/oauth-scopes": "^0.5.14",
-    "@atproto/repo": "^0.11.1",
+    "@atproto/repo": "^0.11.2",
     "@atproto/syntax": "^0.7.7",
-    "@atproto/xrpc-server": "^0.13.6"
+    "@atproto/xrpc-server": "^0.13.7"
   },
   "devDependencies": {
     "@did-plc/server": "^0.0.1",
@@ -98,7 +96,7 @@
     "jest": "^30.5.2",
     "puppeteer": "^25.16.0",
     "ws": "^8.12.0",
-    "@atproto/api": "^0.29.5",
+    "@atproto/api": "^0.29.6",
     "@atproto/oauth-client-browser-example": "^0.2.1",
     "@atproto/oauth-client-node": "^0.5.13"
   },