@atproto/pds 0.5.51 → 0.5.55

package/dist/account-manager/helpers/account.js.map

@@ -1 +1 @@
-{"version":3,"file":"account.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/account.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AACrC,OAAO,EAKL,qBAAqB,EACrB,eAAe,GAChB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAI9E,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAE/C,YACE,OAAO,GAAG,qEAAqE,EAC/E,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QALzB,SAAI,GAAG,wBAAwB,CAAA;IAM/B,CAAC;CACF;AAcD,MAAM,CAAN,IAAY,aAMX;AAND,WAAY,aAAa;IACvB,kCAAiB,CAAA;IACjB,wCAAuB,CAAA;IACvB,wCAAuB,CAAA;IACvB,oCAAmB,CAAA;IACnB,4CAA2B,CAAA;AAC7B,CAAC,EANW,aAAa,KAAb,aAAa,QAMxB;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAa,EAAE,KAAyB,EAAE,EAAE;IAC1E,MAAM,EAAE,gBAAgB,GAAG,KAAK,EAAE,kBAAkB,GAAG,KAAK,EAAE,GAAG,KAAK,IAAI,EAAE,CAAA;IAC5E,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAA;IAC7B,OAAO,EAAE,CAAC,EAAE;SACT,UAAU,CAAC,OAAO,CAAC;SACnB,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC;SAC/C,QAAQ,CACP,2BAA2B,EAC3B,WAAW,EACX,+BAA+B,CAChC;SACA,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,EAAE,CAC7B,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAC7C;SACA,GAAG,CAAC,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAC/B,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,CAAC,CAC5C;SACA,MAAM,CAAC;QACN,WAAW;QACX,cAAc;QACd,iBAAiB;QACjB,mBAAmB;QACnB,qBAAqB;QACrB,mBAAmB;QACnB,eAAe;QACf,0BAA0B;QAC1B,yBAAyB;QACzB,yEAAyE;KAC1E,CAAC,CAAA;AACN,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,EAAa,EACb,WAA+B,EAC/B,KAAyB,EACK,EAAE;IAChC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;SAC3C,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE;QACZ,IAAI,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QAC1C,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC,CAAC;SACD,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,EAAa,EACb,IAAiB,EACjB,KAAyB,EACW,EAAE;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAE/C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;SAC9C,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,OAAO,EAAE,CAAA;IAEZ,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,KAAa,EACb,KAAyB,EACK,EAAE;IAChC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;SAC3C,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACxC,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,EAAa,EACb,IAIC,EACD,EAAE;IACF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC7C,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC5C,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,OAAO,CAAC;SACnB,MAAM,CAAC;QACN,GAAG;QACH,MAAM;QACN,SAAS;QACT,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC7C,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;KACxE,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;SAClC,SAAS,CAAC,KAAK,CAAC,CACpB,CAAA;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,sBAAsB,CAC9B,6DAA6D,CAC9D,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,EAAa,EACb,IAIC,EACD,EAAE;IACF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI,CAAA;IAC3C,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC5C,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,SAAS,CAAC;SACrB,MAAM,CAAC;QACN,GAAG;QACH,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;QAC1B,cAAc;KACf,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;SAClC,SAAS,CAAC,KAAK,CAAC,CACpB,CAAA;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,EAAa,EACb,GAAc,EACC,EAAE;IACjB,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACrD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACvD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACrE,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACzD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,CAC3D,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,CACvD,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,EAAa,EACb,GAAc,EACd,MAAoB,EACpB,EAAE;IACF,6EAA6E;IAC7E,wDAAwD;IACxD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;SACf,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CACzB,GAAG,CACD,MAAM,CACJ,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,OAAO,CAAC;SACnB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;SAC5B,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC;SACvB,SAAS,EAAE,CACf,CACF,CACF,CACJ,CAAA;IACD,IAAI,GAAG,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,sBAAsB,CAC9B,6DAA6D,CAC9D,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,EAAa,EACb,GAAc,EACd,KAAa,EACb,EAAE;IACF,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,SAAS,CAAC;aACtB,GAAG,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;YAC1B,gBAAgB,EAAE,IAAI;SACvB,CAAC;aACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,sBAAsB,EAAE,CAAA;QACpC,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,EAAa,EACb,GAAc,EACd,gBAAgC,EAChC,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC;SACzB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,EAAa,EACb,GAAc,EAIN,EAAE;IACV,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,OAAO,CAAC;SACnB,MAAM,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;SACxC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW;QAC9B,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;QACzC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACtB,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC9E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;AAClC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,EAC9C,EAAa,EACb,GAAc,EACd,QAA2C,EAC3C,EAAE;IACF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO;QAClC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAA;IACR,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACvE,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAc,EACd,WAA0B,EACR,EAAE;IACpB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC;QACH,aAAa,EAAE,qBAAqB,EAAE;QACtC,WAAW;KACZ,CAAC;SACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;IAED,OAAO,GAAG,CAAC,cAAc,GAAG,CAAC,CAAA;AAC/B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,EAAa,EACb,GAAc,EACd,KAAyB,EACP,EAAE;IACpB,MAAM,EAAE,gBAAgB,GAAG,KAAK,EAAE,kBAAkB,GAAG,IAAI,EAAE,GAAG,KAAK,IAAI,EAAE,CAAA;IAC3E,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAA;IAE7B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC;QACH,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;KAClB,CAAC;SACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC5B,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAC5C;SACA,GAAG,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,KAAK,CAAC,qBAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC/C,CACJ,CAAA;IAED,OAAO,GAAG,CAAC,cAAc,GAAG,CAAC,CAAA;AAC/B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,OAGC,EACD,EAAE;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,EAAW,CAAA;IAClE,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,SAAS,EAAW,CAAA;IACpE,CAAC;SAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,WAAW,EAAW,CAAA;IACtE,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAW,CAAA;IACrD,CAAC;AACH,CAAC,CAAA","sourcesContent":["import { DAY } from '@atproto/common'\nimport {\n  type AtIdentifierString,\n  type DatetimeString,\n  type DidString,\n  type HandleString,\n  currentDatetimeString,\n  isDidIdentifier,\n} from '@atproto/lex'\nimport { isErrUniqueViolation, notSoftDeletedClause } from '../../db/index.js'\nimport type { com } from '../../lexicons/index.js'\nimport type { AccountDb, ActorEntry } from '../db/index.js'\n\nexport class UserAlreadyExistsError extends Error {\n  name = 'UserAlreadyExistsError'\n  constructor(\n    message = 'This email address is already in use, please use a different email.',\n    options?: ErrorOptions,\n  ) {\n    super(message, options)\n  }\n}\n\nexport type ActorAccount = ActorEntry & {\n  email: string | null\n  emailConfirmedAt: string | null\n  emailAuthFactorAt: string | null\n  invitesDisabled: 0 | 1 | null\n}\n\nexport type AvailabilityFlags = {\n  includeTakenDown?: boolean\n  includeDeactivated?: boolean\n}\n\nexport enum AccountStatus {\n  Active = 'active',\n  Takendown = 'takendown',\n  Suspended = 'suspended',\n  Deleted = 'deleted',\n  Deactivated = 'deactivated',\n}\n\nexport const selectAccountQB = (db: AccountDb, flags?: AvailabilityFlags) => {\n  const { includeTakenDown = false, includeDeactivated = false } = flags ?? {}\n  const { ref } = db.db.dynamic\n  return db.db\n    .selectFrom('actor')\n    .leftJoin('account', 'actor.did', 'account.did')\n    .leftJoin(\n      'account_email_auth_factor',\n      'actor.did',\n      'account_email_auth_factor.did',\n    )\n    .$if(!includeTakenDown, (qb) =>\n      qb.where(notSoftDeletedClause(ref('actor'))),\n    )\n    .$if(!includeDeactivated, (qb) =>\n      qb.where('actor.deactivatedAt', 'is', null),\n    )\n    .select([\n      'actor.did',\n      'actor.handle',\n      'actor.createdAt',\n      'actor.takedownRef',\n      'actor.deactivatedAt',\n      'actor.deleteAfter',\n      'account.email',\n      'account.emailConfirmedAt',\n      'account.invitesDisabled',\n      'account_email_auth_factor.emailAuthFactorEnabledAt as emailAuthFactorAt',\n    ])\n}\n\nexport const getAccount = async (\n  db: AccountDb,\n  handleOrDid: AtIdentifierString,\n  flags?: AvailabilityFlags,\n): Promise<ActorAccount | null> => {\n  const found = await selectAccountQB(db, flags)\n    .where((eb) => {\n      if (isDidIdentifier(handleOrDid)) {\n        return eb('actor.did', '=', handleOrDid)\n      } else {\n        return eb('actor.handle', '=', handleOrDid)\n      }\n    })\n    .executeTakeFirst()\n  return found || null\n}\n\nexport const getAccounts = async (\n  db: AccountDb,\n  dids: DidString[],\n  flags?: AvailabilityFlags,\n): Promise<Map<string, ActorAccount>> => {\n  const results = new Map<string, ActorAccount>()\n\n  if (!dids.length) {\n    return results\n  }\n\n  const accounts = await selectAccountQB(db, flags)\n    .where('actor.did', 'in', dids)\n    .execute()\n\n  accounts.forEach((account) => {\n    results.set(account.did, account)\n  })\n\n  return results\n}\n\nexport const getAccountByEmail = async (\n  db: AccountDb,\n  email: string,\n  flags?: AvailabilityFlags,\n): Promise<ActorAccount | null> => {\n  const found = await selectAccountQB(db, flags)\n    .where('email', '=', email.toLowerCase())\n    .executeTakeFirst()\n  return found || null\n}\n\nexport const registerActor = async (\n  db: AccountDb,\n  opts: {\n    did: DidString\n    handle: HandleString\n    deactivated?: boolean\n  },\n) => {\n  const { did, handle, deactivated } = opts\n  const now = Date.now()\n  const createdAt = new Date(now).toISOString()\n  const [registered] = await db.executeWithRetry(\n    db.db\n      .insertInto('actor')\n      .values({\n        did,\n        handle,\n        createdAt,\n        deactivatedAt: deactivated ? createdAt : null,\n        deleteAfter: deactivated ? new Date(now + 3 * DAY).toISOString() : null,\n      })\n      .onConflict((oc) => oc.doNothing())\n      .returning('did'),\n  )\n  if (!registered) {\n    throw new UserAlreadyExistsError(\n      'Handle is already in use, please choose a different handle.',\n    )\n  }\n}\n\nexport const registerAccount = async (\n  db: AccountDb,\n  opts: {\n    did: string\n    email: string\n    passwordScrypt: string\n  },\n) => {\n  const { did, email, passwordScrypt } = opts\n  const [registered] = await db.executeWithRetry(\n    db.db\n      .insertInto('account')\n      .values({\n        did,\n        email: email.toLowerCase(),\n        passwordScrypt,\n      })\n      .onConflict((oc) => oc.doNothing())\n      .returning('did'),\n  )\n  if (!registered) {\n    throw new UserAlreadyExistsError()\n  }\n}\n\nexport const deleteAccount = async (\n  db: AccountDb,\n  did: DidString,\n): Promise<void> => {\n  // Not done in transaction because it would be too long, prone to contention.\n  // Also, this can safely be run multiple times if it fails.\n  await db.executeWithRetry(\n    db.db.deleteFrom('repo_root').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('email_token').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('account_email_auth_factor').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('refresh_token').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('account').where('account.did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('actor').where('actor.did', '=', did),\n  )\n}\n\nexport const updateHandle = async (\n  db: AccountDb,\n  did: DidString,\n  handle: HandleString,\n) => {\n  // No-op if the handle is the same, but still returns 1 row affected, so that\n  // it can be used to check for existence of the account.\n  const [res] = await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({ handle })\n      .where('did', '=', did)\n      .where(({ not, exists }) =>\n        not(\n          exists(\n            db.db\n              .selectFrom('actor')\n              .where('handle', '=', handle)\n              .where('did', '!=', did)\n              .selectAll(),\n          ),\n        ),\n      ),\n  )\n  if (res.numUpdatedRows < 1) {\n    throw new UserAlreadyExistsError(\n      'Handle is already in use, please choose a different handle.',\n    )\n  }\n}\n\nexport const updateEmail = async (\n  db: AccountDb,\n  did: DidString,\n  email: string,\n) => {\n  try {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('account')\n        .set({\n          email: email.toLowerCase(),\n          emailConfirmedAt: null,\n        })\n        .where('did', '=', did),\n    )\n  } catch (err) {\n    if (isErrUniqueViolation(err)) {\n      throw new UserAlreadyExistsError()\n    }\n    throw err\n  }\n}\n\nexport const setEmailConfirmedAt = async (\n  db: AccountDb,\n  did: DidString,\n  emailConfirmedAt: DatetimeString,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .set({ emailConfirmedAt })\n      .where('did', '=', did),\n  )\n}\n\nexport const getAccountAdminStatus = async (\n  db: AccountDb,\n  did: DidString,\n): Promise<{\n  takedown: com.atproto.admin.defs.StatusAttr\n  deactivated: com.atproto.admin.defs.StatusAttr\n} | null> => {\n  const res = await db.db\n    .selectFrom('actor')\n    .select(['takedownRef', 'deactivatedAt'])\n    .where('did', '=', did)\n    .executeTakeFirst()\n  if (!res) return null\n  const takedown = res.takedownRef\n    ? { applied: true, ref: res.takedownRef }\n    : { applied: false }\n  const deactivated = res.deactivatedAt ? { applied: true } : { applied: false }\n  return { takedown, deactivated }\n}\n\nexport const updateAccountTakedownStatus = async (\n  db: AccountDb,\n  did: DidString,\n  takedown: com.atproto.admin.defs.StatusAttr,\n) => {\n  const takedownRef = takedown.applied\n    ? (takedown.ref ?? currentDatetimeString())\n    : null\n  await db.executeWithRetry(\n    db.db.updateTable('actor').set({ takedownRef }).where('did', '=', did),\n  )\n}\n\nexport const deactivateAccount = async (\n  db: AccountDb,\n  did: DidString,\n  deleteAfter: string | null,\n): Promise<boolean> => {\n  const [res] = await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({\n        deactivatedAt: currentDatetimeString(),\n        deleteAfter,\n      })\n      .where('did', '=', did),\n  )\n\n  return res.numUpdatedRows > 0\n}\n\nexport const activateAccount = async (\n  db: AccountDb,\n  did: DidString,\n  flags?: AvailabilityFlags,\n): Promise<boolean> => {\n  const { includeTakenDown = false, includeDeactivated = true } = flags ?? {}\n  const { ref } = db.db.dynamic\n\n  const [res] = await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({\n        deactivatedAt: null,\n        deleteAfter: null,\n      })\n      .where('did', '=', did)\n      .$if(!includeTakenDown, (q) =>\n        q.where(notSoftDeletedClause(ref('actor'))),\n      )\n      .$if(!includeDeactivated, (q) =>\n        q.where('actor.deactivatedAt', 'is not', null),\n      ),\n  )\n\n  return res.numUpdatedRows > 0\n}\n\nexport const formatAccountStatus = (\n  account: null | {\n    takedownRef: string | null\n    deactivatedAt: string | null\n  },\n) => {\n  if (!account) {\n    return { active: false, status: AccountStatus.Deleted } as const\n  } else if (account.takedownRef) {\n    return { active: false, status: AccountStatus.Takendown } as const\n  } else if (account.deactivatedAt) {\n    return { active: false, status: AccountStatus.Deactivated } as const\n  } else {\n    return { active: true, status: undefined } as const\n  }\n}\n"]}
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/account.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AACrC,OAAO,EAKL,qBAAqB,EACrB,eAAe,GAChB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAI9E,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAE/C,YACE,OAAO,GAAG,qEAAqE,EAC/E,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QALzB,SAAI,GAAG,wBAAwB,CAAA;IAM/B,CAAC;CACF;AAcD,MAAM,CAAN,IAAY,aAMX;AAND,WAAY,aAAa;IACvB,kCAAiB,CAAA;IACjB,wCAAuB,CAAA;IACvB,wCAAuB,CAAA;IACvB,oCAAmB,CAAA;IACnB,4CAA2B,CAAA;AAC7B,CAAC,EANW,aAAa,KAAb,aAAa,QAMxB;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAa,EAAE,KAAyB,EAAE,EAAE;IAC1E,MAAM,EAAE,gBAAgB,GAAG,KAAK,EAAE,kBAAkB,GAAG,KAAK,EAAE,GAAG,KAAK,IAAI,EAAE,CAAA;IAC5E,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAA;IAC7B,OAAO,EAAE,CAAC,EAAE;SACT,UAAU,CAAC,OAAO,CAAC;SACnB,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC;SAC/C,QAAQ,CACP,2BAA2B,EAC3B,WAAW,EACX,+BAA+B,CAChC;SACA,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,EAAE,CAC7B,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAC7C;SACA,GAAG,CAAC,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAC/B,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,CAAC,CAC5C;SACA,MAAM,CAAC;QACN,WAAW;QACX,cAAc;QACd,iBAAiB;QACjB,mBAAmB;QACnB,qBAAqB;QACrB,mBAAmB;QACnB,eAAe;QACf,0BAA0B;QAC1B,yBAAyB;QACzB,yEAAyE;KAC1E,CAAC,CAAA;AACN,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,EAAa,EACb,WAA+B,EAC/B,KAAyB,EACK,EAAE;IAChC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;SAC3C,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE;QACZ,IAAI,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QAC1C,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC,CAAC;SACD,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,EAAa,EACb,IAAiB,EACjB,KAAyB,EACW,EAAE;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAE/C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;SAC9C,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,OAAO,EAAE,CAAA;IAEZ,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,KAAa,EACb,KAAyB,EACK,EAAE;IAChC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;SAC3C,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACxC,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,EAAa,EACb,IAIC,EACD,EAAE;IACF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC7C,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC5C,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,OAAO,CAAC;SACnB,MAAM,CAAC;QACN,GAAG;QACH,MAAM;QACN,SAAS;QACT,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC7C,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;KACxE,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;SAClC,SAAS,CAAC,KAAK,CAAC,CACpB,CAAA;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,sBAAsB,CAC9B,6DAA6D,CAC9D,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,EAAa,EACb,IAIC,EACD,EAAE;IACF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI,CAAA;IAC3C,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC5C,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,SAAS,CAAC;SACrB,MAAM,CAAC;QACN,GAAG;QACH,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;QAC1B,cAAc;KACf,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;SAClC,SAAS,CAAC,KAAK,CAAC,CACpB,CAAA;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,EAAa,EACb,GAAc,EACC,EAAE;IACjB,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACrD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACvD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACrE,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACzD,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,CAC3D,CAAA;IACD,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,CACvD,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,EAAa,EACb,GAAc,EACd,MAAoB,EACpB,EAAE;IACF,6EAA6E;IAC7E,wDAAwD;IACxD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;SACf,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CACzB,GAAG,CACD,MAAM,CACJ,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,OAAO,CAAC;SACnB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;SAC5B,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC;SACvB,SAAS,EAAE,CACf,CACF,CACF,CACJ,CAAA;IACD,IAAI,GAAG,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,sBAAsB,CAC9B,6DAA6D,CAC9D,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,EAAa,EACb,GAAc,EACd,KAAa,EACb,EAAE;IACF,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,SAAS,CAAC;aACtB,GAAG,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;YAC1B,gBAAgB,EAAE,IAAI;SACvB,CAAC;aACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,sBAAsB,EAAE,CAAA;QACpC,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,EAAa,EACb,GAAc,EACd,gBAAgC,EAChC,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC;SACzB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,EAAa,EACb,GAAc,EAIN,EAAE;IACV,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,OAAO,CAAC;SACnB,MAAM,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;SACxC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW;QAC9B,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;QACzC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACtB,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC9E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;AAClC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,EAC9C,EAAa,EACb,GAAc,EACd,QAA2C,EAC3C,EAAE;IACF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO;QAClC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAA;IACR,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACvE,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAc,EACd,WAA0B,EACR,EAAE;IACpB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC;QACH,aAAa,EAAE,qBAAqB,EAAE;QACtC,WAAW;KACZ,CAAC;SACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAC1B,CAAA;IAED,OAAO,GAAG,CAAC,cAAc,GAAG,CAAC,CAAA;AAC/B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,EAAa,EACb,GAAc,EACd,KAAyB,EACP,EAAE;IACpB,MAAM,EAAE,gBAAgB,GAAG,KAAK,EAAE,kBAAkB,GAAG,IAAI,EAAE,GAAG,KAAK,IAAI,EAAE,CAAA;IAC3E,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAA;IAE7B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,OAAO,CAAC;SACpB,GAAG,CAAC;QACH,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;KAClB,CAAC;SACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC5B,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAC5C;SACA,GAAG,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,KAAK,CAAC,qBAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC/C,CACJ,CAAA;IAED,OAAO,GAAG,CAAC,cAAc,GAAG,CAAC,CAAA;AAC/B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,OAGC,EACD,EAAE;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,EAAW,CAAA;IAClE,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,SAAS,EAAW,CAAA;IACpE,CAAC;SAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,WAAW,EAAW,CAAA;IACtE,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAW,CAAA;IACrD,CAAC;AACH,CAAC,CAAA","sourcesContent":["import { DAY } from '@atproto/common'\nimport {\n  type AtIdentifierString,\n  type DatetimeString,\n  type DidString,\n  type HandleString,\n  currentDatetimeString,\n  isDidIdentifier,\n} from '@atproto/lex-schema'\nimport { isErrUniqueViolation, notSoftDeletedClause } from '../../db/index.js'\nimport type { com } from '../../lexicons/index.js'\nimport type { AccountDb, ActorEntry } from '../db/index.js'\n\nexport class UserAlreadyExistsError extends Error {\n  name = 'UserAlreadyExistsError'\n  constructor(\n    message = 'This email address is already in use, please use a different email.',\n    options?: ErrorOptions,\n  ) {\n    super(message, options)\n  }\n}\n\nexport type ActorAccount = ActorEntry & {\n  email: string | null\n  emailConfirmedAt: string | null\n  emailAuthFactorAt: string | null\n  invitesDisabled: 0 | 1 | null\n}\n\nexport type AvailabilityFlags = {\n  includeTakenDown?: boolean\n  includeDeactivated?: boolean\n}\n\nexport enum AccountStatus {\n  Active = 'active',\n  Takendown = 'takendown',\n  Suspended = 'suspended',\n  Deleted = 'deleted',\n  Deactivated = 'deactivated',\n}\n\nexport const selectAccountQB = (db: AccountDb, flags?: AvailabilityFlags) => {\n  const { includeTakenDown = false, includeDeactivated = false } = flags ?? {}\n  const { ref } = db.db.dynamic\n  return db.db\n    .selectFrom('actor')\n    .leftJoin('account', 'actor.did', 'account.did')\n    .leftJoin(\n      'account_email_auth_factor',\n      'actor.did',\n      'account_email_auth_factor.did',\n    )\n    .$if(!includeTakenDown, (qb) =>\n      qb.where(notSoftDeletedClause(ref('actor'))),\n    )\n    .$if(!includeDeactivated, (qb) =>\n      qb.where('actor.deactivatedAt', 'is', null),\n    )\n    .select([\n      'actor.did',\n      'actor.handle',\n      'actor.createdAt',\n      'actor.takedownRef',\n      'actor.deactivatedAt',\n      'actor.deleteAfter',\n      'account.email',\n      'account.emailConfirmedAt',\n      'account.invitesDisabled',\n      'account_email_auth_factor.emailAuthFactorEnabledAt as emailAuthFactorAt',\n    ])\n}\n\nexport const getAccount = async (\n  db: AccountDb,\n  handleOrDid: AtIdentifierString,\n  flags?: AvailabilityFlags,\n): Promise<ActorAccount | null> => {\n  const found = await selectAccountQB(db, flags)\n    .where((eb) => {\n      if (isDidIdentifier(handleOrDid)) {\n        return eb('actor.did', '=', handleOrDid)\n      } else {\n        return eb('actor.handle', '=', handleOrDid)\n      }\n    })\n    .executeTakeFirst()\n  return found || null\n}\n\nexport const getAccounts = async (\n  db: AccountDb,\n  dids: DidString[],\n  flags?: AvailabilityFlags,\n): Promise<Map<string, ActorAccount>> => {\n  const results = new Map<string, ActorAccount>()\n\n  if (!dids.length) {\n    return results\n  }\n\n  const accounts = await selectAccountQB(db, flags)\n    .where('actor.did', 'in', dids)\n    .execute()\n\n  accounts.forEach((account) => {\n    results.set(account.did, account)\n  })\n\n  return results\n}\n\nexport const getAccountByEmail = async (\n  db: AccountDb,\n  email: string,\n  flags?: AvailabilityFlags,\n): Promise<ActorAccount | null> => {\n  const found = await selectAccountQB(db, flags)\n    .where('email', '=', email.toLowerCase())\n    .executeTakeFirst()\n  return found || null\n}\n\nexport const registerActor = async (\n  db: AccountDb,\n  opts: {\n    did: DidString\n    handle: HandleString\n    deactivated?: boolean\n  },\n) => {\n  const { did, handle, deactivated } = opts\n  const now = Date.now()\n  const createdAt = new Date(now).toISOString()\n  const [registered] = await db.executeWithRetry(\n    db.db\n      .insertInto('actor')\n      .values({\n        did,\n        handle,\n        createdAt,\n        deactivatedAt: deactivated ? createdAt : null,\n        deleteAfter: deactivated ? new Date(now + 3 * DAY).toISOString() : null,\n      })\n      .onConflict((oc) => oc.doNothing())\n      .returning('did'),\n  )\n  if (!registered) {\n    throw new UserAlreadyExistsError(\n      'Handle is already in use, please choose a different handle.',\n    )\n  }\n}\n\nexport const registerAccount = async (\n  db: AccountDb,\n  opts: {\n    did: string\n    email: string\n    passwordScrypt: string\n  },\n) => {\n  const { did, email, passwordScrypt } = opts\n  const [registered] = await db.executeWithRetry(\n    db.db\n      .insertInto('account')\n      .values({\n        did,\n        email: email.toLowerCase(),\n        passwordScrypt,\n      })\n      .onConflict((oc) => oc.doNothing())\n      .returning('did'),\n  )\n  if (!registered) {\n    throw new UserAlreadyExistsError()\n  }\n}\n\nexport const deleteAccount = async (\n  db: AccountDb,\n  did: DidString,\n): Promise<void> => {\n  // Not done in transaction because it would be too long, prone to contention.\n  // Also, this can safely be run multiple times if it fails.\n  await db.executeWithRetry(\n    db.db.deleteFrom('repo_root').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('email_token').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('account_email_auth_factor').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('refresh_token').where('did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('account').where('account.did', '=', did),\n  )\n  await db.executeWithRetry(\n    db.db.deleteFrom('actor').where('actor.did', '=', did),\n  )\n}\n\nexport const updateHandle = async (\n  db: AccountDb,\n  did: DidString,\n  handle: HandleString,\n) => {\n  // No-op if the handle is the same, but still returns 1 row affected, so that\n  // it can be used to check for existence of the account.\n  const [res] = await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({ handle })\n      .where('did', '=', did)\n      .where(({ not, exists }) =>\n        not(\n          exists(\n            db.db\n              .selectFrom('actor')\n              .where('handle', '=', handle)\n              .where('did', '!=', did)\n              .selectAll(),\n          ),\n        ),\n      ),\n  )\n  if (res.numUpdatedRows < 1) {\n    throw new UserAlreadyExistsError(\n      'Handle is already in use, please choose a different handle.',\n    )\n  }\n}\n\nexport const updateEmail = async (\n  db: AccountDb,\n  did: DidString,\n  email: string,\n) => {\n  try {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('account')\n        .set({\n          email: email.toLowerCase(),\n          emailConfirmedAt: null,\n        })\n        .where('did', '=', did),\n    )\n  } catch (err) {\n    if (isErrUniqueViolation(err)) {\n      throw new UserAlreadyExistsError()\n    }\n    throw err\n  }\n}\n\nexport const setEmailConfirmedAt = async (\n  db: AccountDb,\n  did: DidString,\n  emailConfirmedAt: DatetimeString,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .set({ emailConfirmedAt })\n      .where('did', '=', did),\n  )\n}\n\nexport const getAccountAdminStatus = async (\n  db: AccountDb,\n  did: DidString,\n): Promise<{\n  takedown: com.atproto.admin.defs.StatusAttr\n  deactivated: com.atproto.admin.defs.StatusAttr\n} | null> => {\n  const res = await db.db\n    .selectFrom('actor')\n    .select(['takedownRef', 'deactivatedAt'])\n    .where('did', '=', did)\n    .executeTakeFirst()\n  if (!res) return null\n  const takedown = res.takedownRef\n    ? { applied: true, ref: res.takedownRef }\n    : { applied: false }\n  const deactivated = res.deactivatedAt ? { applied: true } : { applied: false }\n  return { takedown, deactivated }\n}\n\nexport const updateAccountTakedownStatus = async (\n  db: AccountDb,\n  did: DidString,\n  takedown: com.atproto.admin.defs.StatusAttr,\n) => {\n  const takedownRef = takedown.applied\n    ? (takedown.ref ?? currentDatetimeString())\n    : null\n  await db.executeWithRetry(\n    db.db.updateTable('actor').set({ takedownRef }).where('did', '=', did),\n  )\n}\n\nexport const deactivateAccount = async (\n  db: AccountDb,\n  did: DidString,\n  deleteAfter: string | null,\n): Promise<boolean> => {\n  const [res] = await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({\n        deactivatedAt: currentDatetimeString(),\n        deleteAfter,\n      })\n      .where('did', '=', did),\n  )\n\n  return res.numUpdatedRows > 0\n}\n\nexport const activateAccount = async (\n  db: AccountDb,\n  did: DidString,\n  flags?: AvailabilityFlags,\n): Promise<boolean> => {\n  const { includeTakenDown = false, includeDeactivated = true } = flags ?? {}\n  const { ref } = db.db.dynamic\n\n  const [res] = await db.executeWithRetry(\n    db.db\n      .updateTable('actor')\n      .set({\n        deactivatedAt: null,\n        deleteAfter: null,\n      })\n      .where('did', '=', did)\n      .$if(!includeTakenDown, (q) =>\n        q.where(notSoftDeletedClause(ref('actor'))),\n      )\n      .$if(!includeDeactivated, (q) =>\n        q.where('actor.deactivatedAt', 'is not', null),\n      ),\n  )\n\n  return res.numUpdatedRows > 0\n}\n\nexport const formatAccountStatus = (\n  account: null | {\n    takedownRef: string | null\n    deactivatedAt: string | null\n  },\n) => {\n  if (!account) {\n    return { active: false, status: AccountStatus.Deleted } as const\n  } else if (account.takedownRef) {\n    return { active: false, status: AccountStatus.Takendown } as const\n  } else if (account.deactivatedAt) {\n    return { active: false, status: AccountStatus.Deactivated } as const\n  } else {\n    return { active: true, status: undefined } as const\n  }\n}\n"]}

package/dist/account-manager/helpers/email-auth-factor.d.ts

@@ -1,4 +1,4 @@
-import { type DatetimeString } from '@atproto/lex';
+import { type DatetimeString } from '@atproto/lex-schema';
 import type { AccountDb } from '../db/index.js';
 /**
  * Enables the email auth factor for `did`, provided `email` is still the

package/dist/account-manager/helpers/email-auth-factor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email-auth-factor.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/email-auth-factor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAyB,MAAM,cAAc,CAAA;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,MAAM,OACb,SAAS,OACR,MAAM,SACJ,MAAM,KACZ,OAAO,CAAC,cAAc,GAAG,IAAI,CA+B/B,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO,OACd,SAAS,OACR,MAAM,SACJ,MAAM,KACZ,OAAO,CAAC,OAAO,CAgBjB,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY,OACnB,SAAS,OACR,MAAM,KACV,OAAO,CAAC,IAAI,CAId,CAAA"}
+{"version":3,"file":"email-auth-factor.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/email-auth-factor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAyB,MAAM,qBAAqB,CAAA;AAChF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,MAAM,OACb,SAAS,OACR,MAAM,SACJ,MAAM,KACZ,OAAO,CAAC,cAAc,GAAG,IAAI,CA+B/B,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO,OACd,SAAS,OACR,MAAM,SACJ,MAAM,KACZ,OAAO,CAAC,OAAO,CAgBjB,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY,OACnB,SAAS,OACR,MAAM,KACV,OAAO,CAAC,IAAI,CAId,CAAA"}

package/dist/account-manager/helpers/email-auth-factor.js

@@ -1,4 +1,4 @@
-import { currentDatetimeString } from '@atproto/lex';
+import { currentDatetimeString } from '@atproto/lex-schema';
 /**
  * Enables the email auth factor for `did`, provided `email` is still the
  * account's address and is still confirmed.

package/dist/account-manager/helpers/email-auth-factor.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-auth-factor.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/email-auth-factor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAGzE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,KAAK,EACzB,EAAa,EACb,GAAW,EACX,KAAa,EACmB,EAAE;IAClC,MAAM,wBAAwB,GAAG,qBAAqB,EAAE,CAAA;IAExD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,2BAA2B,CAAC;SACvC,OAAO,CAAC,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;SAC5C,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE;SACC,UAAU,CAAC,SAAS,CAAC;SACrB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QACf,aAAa;QACb,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,0BAA0B,CAAC;KACjE,CAAC;SACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACxC,KAAK,CAAC,kBAAkB,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC7C;SACA,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,mEAAmE;QACnE,iEAAiE;QACjE,wBAAwB,EAAE,EAAE,CAAC,GAAG,CAC9B,oDAAoD,CACrD;KACF,CAAC,CAAC,CACJ;SACA,SAAS,CAAC,0BAA0B,CAAC,CACzC,CAAA;IAED,OAAO,GAAG,EAAE,wBAAwB,IAAI,IAAI,CAAA;AAC9C,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,EAC1B,EAAa,EACb,GAAW,EACX,KAAa,EACK,EAAE;IACpB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,2BAA2B,CAAC;SACvC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAChC,MAAM,CACJ,UAAU,CAAC,SAAS,CAAC;SAClB,SAAS,EAAE;SACX,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC;SAC9B,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CACpD,CACF,CACJ,CAAA;IAED,OAAO,GAAG,CAAC,cAAc,GAAG,CAAC,CAAA;AAC/B,CAAC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,EAAa,EACb,GAAW,EACI,EAAE;IACjB,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACrE,CAAA;AACH,CAAC,CAAA","sourcesContent":["import { type DatetimeString, currentDatetimeString } from '@atproto/lex'\nimport type { AccountDb } from '../db/index.js'\n\n/**\n * Enables the email auth factor for `did`, provided `email` is still the\n * account's address and is still confirmed.\n *\n * @NOTE `INSERT … SELECT` rather than a read followed by a write: the factor\n * lives in its own table, so that guard would otherwise be a separate query\n * with a window in between. Selecting *from* `account` keeps it a single\n * statement, so it holds atomically against a concurrent email change.\n *\n * Enabling an already-enabled factor is idempotent and keeps the original\n * timestamp: the conflict clause re-assigns the column to itself, which touches\n * the row so `RETURNING` still yields it without moving the clock. `DO NOTHING`\n * would skip the row and return nothing, making \"already enabled\" and \"guard\n * failed\" indistinguishable.\n *\n * @returns the stored timestamp, so callers mirror what the database actually\n * holds rather than a value they minted themselves. `null` means the guard\n * failed — no row was written and the account is unchanged.\n */\nexport const enable = async (\n  db: AccountDb,\n  did: string,\n  email: string,\n): Promise<DatetimeString | null> => {\n  const emailAuthFactorEnabledAt = currentDatetimeString()\n\n  const [row] = await db.executeWithRetry(\n    db.db\n      .insertInto('account_email_auth_factor')\n      .columns(['did', 'emailAuthFactorEnabledAt'])\n      .expression((eb) =>\n        eb\n          .selectFrom('account')\n          .select((eb2) => [\n            'account.did',\n            eb2.val(emailAuthFactorEnabledAt).as('emailAuthFactorEnabledAt'),\n          ])\n          .where('did', '=', did)\n          .where('email', '=', email.toLowerCase())\n          .where('emailConfirmedAt', 'is not', null),\n      )\n      .onConflict((oc) =>\n        oc.column('did').doUpdateSet((eb) => ({\n          // The bare column is the stored value; `excluded` would be the one\n          // just offered. Self-assigning preserves the original timestamp.\n          emailAuthFactorEnabledAt: eb.ref(\n            'account_email_auth_factor.emailAuthFactorEnabledAt',\n          ),\n        })),\n      )\n      .returning('emailAuthFactorEnabledAt'),\n  )\n\n  return row?.emailAuthFactorEnabledAt ?? null\n}\n\n/**\n * Disables the email auth factor for `did`, provided `email` is still the\n * account's address. Disabling an already-disabled factor is a no-op.\n *\n * Unlike enabling there is no `emailConfirmedAt` guard — turning a factor off\n * never needs the address to be confirmed.\n *\n * @returns whether a row was removed.\n */\nexport const disable = async (\n  db: AccountDb,\n  did: string,\n  email: string,\n): Promise<boolean> => {\n  const [res] = await db.executeWithRetry(\n    db.db\n      .deleteFrom('account_email_auth_factor')\n      .where('did', '=', did)\n      .where(({ exists, selectFrom }) =>\n        exists(\n          selectFrom('account')\n            .selectAll()\n            .where('account.did', '=', did)\n            .where('account.email', '=', email.toLowerCase()),\n        ),\n      ),\n  )\n\n  return res.numDeletedRows > 0\n}\n\n/**\n * Drops the email auth factor for `did` unconditionally.\n *\n * For the paths where the account's own state makes the factor invalid rather\n * than the user asking to turn it off: an email change (2FA on an unconfirmed\n * address can lock the user out) and account deletion. Callers changing the\n * email must do so in the same transaction as the email write, since the two\n * are no longer one row.\n *\n * TODO: Store unconfirmed emails separately, see note in context.ts — at which\n * point changing an email no longer needs to disable 2FA at all.\n */\nexport const deleteForDid = async (\n  db: AccountDb,\n  did: string,\n): Promise<void> => {\n  await db.executeWithRetry(\n    db.db.deleteFrom('account_email_auth_factor').where('did', '=', did),\n  )\n}\n"]}
+{"version":3,"file":"email-auth-factor.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/email-auth-factor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAGhF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,KAAK,EACzB,EAAa,EACb,GAAW,EACX,KAAa,EACmB,EAAE;IAClC,MAAM,wBAAwB,GAAG,qBAAqB,EAAE,CAAA;IAExD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,2BAA2B,CAAC;SACvC,OAAO,CAAC,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;SAC5C,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE;SACC,UAAU,CAAC,SAAS,CAAC;SACrB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QACf,aAAa;QACb,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,0BAA0B,CAAC;KACjE,CAAC;SACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACxC,KAAK,CAAC,kBAAkB,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC7C;SACA,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,mEAAmE;QACnE,iEAAiE;QACjE,wBAAwB,EAAE,EAAE,CAAC,GAAG,CAC9B,oDAAoD,CACrD;KACF,CAAC,CAAC,CACJ;SACA,SAAS,CAAC,0BAA0B,CAAC,CACzC,CAAA;IAED,OAAO,GAAG,EAAE,wBAAwB,IAAI,IAAI,CAAA;AAC9C,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,EAC1B,EAAa,EACb,GAAW,EACX,KAAa,EACK,EAAE;IACpB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,2BAA2B,CAAC;SACvC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAChC,MAAM,CACJ,UAAU,CAAC,SAAS,CAAC;SAClB,SAAS,EAAE;SACX,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC;SAC9B,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CACpD,CACF,CACJ,CAAA;IAED,OAAO,GAAG,CAAC,cAAc,GAAG,CAAC,CAAA;AAC/B,CAAC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,EAAa,EACb,GAAW,EACI,EAAE;IACjB,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACrE,CAAA;AACH,CAAC,CAAA","sourcesContent":["import { type DatetimeString, currentDatetimeString } from '@atproto/lex-schema'\nimport type { AccountDb } from '../db/index.js'\n\n/**\n * Enables the email auth factor for `did`, provided `email` is still the\n * account's address and is still confirmed.\n *\n * @NOTE `INSERT … SELECT` rather than a read followed by a write: the factor\n * lives in its own table, so that guard would otherwise be a separate query\n * with a window in between. Selecting *from* `account` keeps it a single\n * statement, so it holds atomically against a concurrent email change.\n *\n * Enabling an already-enabled factor is idempotent and keeps the original\n * timestamp: the conflict clause re-assigns the column to itself, which touches\n * the row so `RETURNING` still yields it without moving the clock. `DO NOTHING`\n * would skip the row and return nothing, making \"already enabled\" and \"guard\n * failed\" indistinguishable.\n *\n * @returns the stored timestamp, so callers mirror what the database actually\n * holds rather than a value they minted themselves. `null` means the guard\n * failed — no row was written and the account is unchanged.\n */\nexport const enable = async (\n  db: AccountDb,\n  did: string,\n  email: string,\n): Promise<DatetimeString | null> => {\n  const emailAuthFactorEnabledAt = currentDatetimeString()\n\n  const [row] = await db.executeWithRetry(\n    db.db\n      .insertInto('account_email_auth_factor')\n      .columns(['did', 'emailAuthFactorEnabledAt'])\n      .expression((eb) =>\n        eb\n          .selectFrom('account')\n          .select((eb2) => [\n            'account.did',\n            eb2.val(emailAuthFactorEnabledAt).as('emailAuthFactorEnabledAt'),\n          ])\n          .where('did', '=', did)\n          .where('email', '=', email.toLowerCase())\n          .where('emailConfirmedAt', 'is not', null),\n      )\n      .onConflict((oc) =>\n        oc.column('did').doUpdateSet((eb) => ({\n          // The bare column is the stored value; `excluded` would be the one\n          // just offered. Self-assigning preserves the original timestamp.\n          emailAuthFactorEnabledAt: eb.ref(\n            'account_email_auth_factor.emailAuthFactorEnabledAt',\n          ),\n        })),\n      )\n      .returning('emailAuthFactorEnabledAt'),\n  )\n\n  return row?.emailAuthFactorEnabledAt ?? null\n}\n\n/**\n * Disables the email auth factor for `did`, provided `email` is still the\n * account's address. Disabling an already-disabled factor is a no-op.\n *\n * Unlike enabling there is no `emailConfirmedAt` guard — turning a factor off\n * never needs the address to be confirmed.\n *\n * @returns whether a row was removed.\n */\nexport const disable = async (\n  db: AccountDb,\n  did: string,\n  email: string,\n): Promise<boolean> => {\n  const [res] = await db.executeWithRetry(\n    db.db\n      .deleteFrom('account_email_auth_factor')\n      .where('did', '=', did)\n      .where(({ exists, selectFrom }) =>\n        exists(\n          selectFrom('account')\n            .selectAll()\n            .where('account.did', '=', did)\n            .where('account.email', '=', email.toLowerCase()),\n        ),\n      ),\n  )\n\n  return res.numDeletedRows > 0\n}\n\n/**\n * Drops the email auth factor for `did` unconditionally.\n *\n * For the paths where the account's own state makes the factor invalid rather\n * than the user asking to turn it off: an email change (2FA on an unconfirmed\n * address can lock the user out) and account deletion. Callers changing the\n * email must do so in the same transaction as the email write, since the two\n * are no longer one row.\n *\n * TODO: Store unconfirmed emails separately, see note in context.ts — at which\n * point changing an email no longer needs to disable 2FA at all.\n */\nexport const deleteForDid = async (\n  db: AccountDb,\n  did: string,\n): Promise<void> => {\n  await db.executeWithRetry(\n    db.db.deleteFrom('account_email_auth_factor').where('did', '=', did),\n  )\n}\n"]}

package/dist/account-manager/helpers/email-token.d.ts

@@ -1,4 +1,4 @@
-import { type DidString } from '@atproto/lex';
+import { type DidString } from '@atproto/lex-schema';
 import type { AccountDb, EmailTokenPurpose } from '../db/index.js';
 export declare const createEmailToken: (db: AccountDb, did: DidString, purpose: EmailTokenPurpose) => Promise<string>;
 export declare const deleteEmailToken: (db: AccountDb, did: DidString, purpose: EmailTokenPurpose) => Promise<void>;

package/dist/account-manager/helpers/email-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email-token.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/email-token.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,SAAS,EAAyB,MAAM,cAAc,CAAA;AAGpE,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAElE,eAAO,MAAM,gBAAgB,OACvB,SAAS,OACR,SAAS,WACL,iBAAiB,KACzB,OAAO,CAAC,MAAM,CAYhB,CAAA;AAED,eAAO,MAAM,gBAAgB,OACvB,SAAS,OACR,SAAS,WACL,iBAAiB,kBAQ3B,CAAA;AAED,eAAO,MAAM,oBAAoB,OAAc,SAAS,OAAO,SAAS,kBAIvE,CAAA;AAED,eAAO,MAAM,gBAAgB,OACvB,SAAS,OACR,SAAS,WACL,iBAAiB,SACnB,MAAM,kBAgBd,CAAA;AAED,eAAO,MAAM,0BAA0B,OACjC,SAAS,WACJ,iBAAiB,SACnB,MAAM,KACZ,OAAO,CAAC,SAAS,CAenB,CAAA"}
+{"version":3,"file":"email-token.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/email-token.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,SAAS,EAAyB,MAAM,qBAAqB,CAAA;AAG3E,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAElE,eAAO,MAAM,gBAAgB,OACvB,SAAS,OACR,SAAS,WACL,iBAAiB,KACzB,OAAO,CAAC,MAAM,CAYhB,CAAA;AAED,eAAO,MAAM,gBAAgB,OACvB,SAAS,OACR,SAAS,WACL,iBAAiB,kBAQ3B,CAAA;AAED,eAAO,MAAM,oBAAoB,OAAc,SAAS,OAAO,SAAS,kBAIvE,CAAA;AAED,eAAO,MAAM,gBAAgB,OACvB,SAAS,OACR,SAAS,WACL,iBAAiB,SACnB,MAAM,kBAgBd,CAAA;AAED,eAAO,MAAM,0BAA0B,OACjC,SAAS,WACJ,iBAAiB,SACnB,MAAM,KACZ,OAAO,CAAC,SAAS,CAenB,CAAA"}

package/dist/account-manager/helpers/email-token.js

@@ -1,5 +1,5 @@
 import { MINUTE, lessThanAgoMs } from '@atproto/common';
-import { currentDatetimeString } from '@atproto/lex';
+import { currentDatetimeString } from '@atproto/lex-schema';
 import { InvalidRequestError } from '@atproto/xrpc-server';
 import { getRandomToken } from '../../api/com/atproto/server/util.js';
 export const createEmailToken = async (db, did, purpose) => {

package/dist/account-manager/helpers/email-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-token.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/email-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAkB,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AAGrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,EAAa,EACb,GAAc,EACd,OAA0B,EACT,EAAE;IACnB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC,WAAW,EAAE,CAAA;IAC5C,MAAM,GAAG,GAAG,qBAAqB,EAAE,CAAA;IACnC,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;SACjD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CACxE,CACJ,CAAA;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,EAAa,EACb,GAAc,EACd,OAA0B,EAC1B,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,aAAa,CAAC;SACzB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAClC,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EAAE,EAAa,EAAE,GAAc,EAAE,EAAE;IAC1E,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACvD,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,EAAa,EACb,GAAc,EACd,OAA0B,EAC1B,KAAa,EACb,EAAE;IACF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,EAAE;SACX,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC;SAC9B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACxC,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,CAAA;IACtE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;IACnE,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,EAC7C,EAAa,EACb,OAA0B,EAC1B,KAAa,EACO,EAAE;IACtB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;SAC9B,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC;SAC9B,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACxC,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,CAAA;IACtE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAA;AAChB,CAAC,CAAA","sourcesContent":["import { MINUTE, lessThanAgoMs } from '@atproto/common'\nimport { type DidString, currentDatetimeString } from '@atproto/lex'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { getRandomToken } from '../../api/com/atproto/server/util.js'\nimport type { AccountDb, EmailTokenPurpose } from '../db/index.js'\n\nexport const createEmailToken = async (\n  db: AccountDb,\n  did: DidString,\n  purpose: EmailTokenPurpose,\n): Promise<string> => {\n  const token = getRandomToken().toUpperCase()\n  const now = currentDatetimeString()\n  await db.executeWithRetry(\n    db.db\n      .insertInto('email_token')\n      .values({ purpose, did, token, requestedAt: now })\n      .onConflict((oc) =>\n        oc.columns(['purpose', 'did']).doUpdateSet({ token, requestedAt: now }),\n      ),\n  )\n  return token\n}\n\nexport const deleteEmailToken = async (\n  db: AccountDb,\n  did: DidString,\n  purpose: EmailTokenPurpose,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .deleteFrom('email_token')\n      .where('did', '=', did)\n      .where('purpose', '=', purpose),\n  )\n}\n\nexport const deleteAllEmailTokens = async (db: AccountDb, did: DidString) => {\n  await db.executeWithRetry(\n    db.db.deleteFrom('email_token').where('did', '=', did),\n  )\n}\n\nexport const assertValidToken = async (\n  db: AccountDb,\n  did: DidString,\n  purpose: EmailTokenPurpose,\n  token: string,\n) => {\n  const res = await db.db\n    .selectFrom('email_token')\n    .selectAll()\n    .where('purpose', '=', purpose)\n    .where('did', '=', did)\n    .where('token', '=', token.toUpperCase())\n    .executeTakeFirst()\n  if (!res) {\n    throw new InvalidRequestError('Token is invalid', 'InvalidToken')\n  }\n  const expired = !lessThanAgoMs(new Date(res.requestedAt), 15 * MINUTE)\n  if (expired) {\n    throw new InvalidRequestError('Token is expired', 'ExpiredToken')\n  }\n}\n\nexport const assertValidTokenAndFindDid = async (\n  db: AccountDb,\n  purpose: EmailTokenPurpose,\n  token: string,\n): Promise<DidString> => {\n  const res = await db.db\n    .selectFrom('email_token')\n    .select(['did', 'requestedAt'])\n    .where('purpose', '=', purpose)\n    .where('token', '=', token.toUpperCase())\n    .executeTakeFirst()\n  if (!res) {\n    throw new InvalidRequestError('Token is invalid', 'InvalidToken')\n  }\n  const expired = !lessThanAgoMs(new Date(res.requestedAt), 15 * MINUTE)\n  if (expired) {\n    throw new InvalidRequestError('Token is expired', 'ExpiredToken')\n  }\n  return res.did\n}\n"]}
+{"version":3,"file":"email-token.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/email-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAkB,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AAGrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,EAAa,EACb,GAAc,EACd,OAA0B,EACT,EAAE;IACnB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC,WAAW,EAAE,CAAA;IAC5C,MAAM,GAAG,GAAG,qBAAqB,EAAE,CAAA;IACnC,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;SACjD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CACxE,CACJ,CAAA;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,EAAa,EACb,GAAc,EACd,OAA0B,EAC1B,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,aAAa,CAAC;SACzB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAClC,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EAAE,EAAa,EAAE,GAAc,EAAE,EAAE;IAC1E,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACvD,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,EAAa,EACb,GAAc,EACd,OAA0B,EAC1B,KAAa,EACb,EAAE;IACF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,EAAE;SACX,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC;SAC9B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACxC,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,CAAA;IACtE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;IACnE,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,EAC7C,EAAa,EACb,OAA0B,EAC1B,KAAa,EACO,EAAE;IACtB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;SAC9B,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC;SAC9B,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACxC,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,CAAA;IACtE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAA;AAChB,CAAC,CAAA","sourcesContent":["import { MINUTE, lessThanAgoMs } from '@atproto/common'\nimport { type DidString, currentDatetimeString } from '@atproto/lex-schema'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { getRandomToken } from '../../api/com/atproto/server/util.js'\nimport type { AccountDb, EmailTokenPurpose } from '../db/index.js'\n\nexport const createEmailToken = async (\n  db: AccountDb,\n  did: DidString,\n  purpose: EmailTokenPurpose,\n): Promise<string> => {\n  const token = getRandomToken().toUpperCase()\n  const now = currentDatetimeString()\n  await db.executeWithRetry(\n    db.db\n      .insertInto('email_token')\n      .values({ purpose, did, token, requestedAt: now })\n      .onConflict((oc) =>\n        oc.columns(['purpose', 'did']).doUpdateSet({ token, requestedAt: now }),\n      ),\n  )\n  return token\n}\n\nexport const deleteEmailToken = async (\n  db: AccountDb,\n  did: DidString,\n  purpose: EmailTokenPurpose,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .deleteFrom('email_token')\n      .where('did', '=', did)\n      .where('purpose', '=', purpose),\n  )\n}\n\nexport const deleteAllEmailTokens = async (db: AccountDb, did: DidString) => {\n  await db.executeWithRetry(\n    db.db.deleteFrom('email_token').where('did', '=', did),\n  )\n}\n\nexport const assertValidToken = async (\n  db: AccountDb,\n  did: DidString,\n  purpose: EmailTokenPurpose,\n  token: string,\n) => {\n  const res = await db.db\n    .selectFrom('email_token')\n    .selectAll()\n    .where('purpose', '=', purpose)\n    .where('did', '=', did)\n    .where('token', '=', token.toUpperCase())\n    .executeTakeFirst()\n  if (!res) {\n    throw new InvalidRequestError('Token is invalid', 'InvalidToken')\n  }\n  const expired = !lessThanAgoMs(new Date(res.requestedAt), 15 * MINUTE)\n  if (expired) {\n    throw new InvalidRequestError('Token is expired', 'ExpiredToken')\n  }\n}\n\nexport const assertValidTokenAndFindDid = async (\n  db: AccountDb,\n  purpose: EmailTokenPurpose,\n  token: string,\n): Promise<DidString> => {\n  const res = await db.db\n    .selectFrom('email_token')\n    .select(['did', 'requestedAt'])\n    .where('purpose', '=', purpose)\n    .where('token', '=', token.toUpperCase())\n    .executeTakeFirst()\n  if (!res) {\n    throw new InvalidRequestError('Token is invalid', 'InvalidToken')\n  }\n  const expired = !lessThanAgoMs(new Date(res.requestedAt), 15 * MINUTE)\n  if (expired) {\n    throw new InvalidRequestError('Token is expired', 'ExpiredToken')\n  }\n  return res.did\n}\n"]}

package/dist/account-manager/helpers/invite.d.ts

@@ -1,4 +1,4 @@
-import { type DatetimeString, type DidString } from '@atproto/lex';
+import { type DatetimeString, type DidString } from '@atproto/lex-schema';
 import type { com } from '../../lexicons/index.js';
 import type { AccountDb, InviteCode } from '../db/index.js';
 export type CodeDetail = com.atproto.server.defs.InviteCode;

package/dist/account-manager/helpers/invite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invite.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/invite.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,SAAS,EAEf,MAAM,cAAc,CAAA;AAGrB,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAA;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAE3D,MAAM,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAA;AAC3D,MAAM,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;AAE3D,eAAO,MAAM,iBAAiB,OACxB,SAAS,YACH;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,YACtC,MAAM,kBAkBjB,CAAA;AAED,eAAO,MAAM,wBAAwB,OAC/B,SAAS,cACD,MAAM,SACX,MAAM,EAAE,iBACA,MAAM,YACX,CAAC,GAAG,CAAC,KACd,OAAO,CAAC,UAAU,EAAE,CA+BtB,CAAA;AAED,eAAO,MAAM,eAAe,OACtB,SAAS,QACP;IACJ,GAAG,EAAE,SAAS,CAAA;IACd,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,GAAG,EAAE,cAAc,CAAA;CACpB,kBAUF,CAAA;AAED,eAAO,MAAM,uBAAuB,OAC9B,SAAS,cACD,MAAM,KACjB,OAAO,CAAC,IAAI,CA4Bd,CAAA;AAED,eAAO,MAAM,mBAAmB,OAAQ,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBhD,CAAA;AAED,eAAO,MAAM,sBAAsB,OAC7B,SAAS,QACP,MAAM,EAAE,KACb,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAqBnC,CAAA;AAED,eAAO,MAAM,kBAAkB,OACzB,SAAS,SACN,MAAM,EAAE,KACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAgBnC,CAAA;AAED,eAAO,MAAM,uBAAuB,OAC9B,SAAS,QACP,SAAS,EAAE,KAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAiCpC,CAAA;AAED,eAAO,MAAM,kBAAkB,OACzB,SAAS,QACP;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,kBAmB9C,CAAA;AAED,eAAO,MAAM,yBAAyB,OAChC,SAAS,OACR,SAAS,YACJ,OAAO,kBAQlB,CAAA"}
+{"version":3,"file":"invite.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/invite.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,SAAS,EAEf,MAAM,qBAAqB,CAAA;AAG5B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAA;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAE3D,MAAM,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAA;AAC3D,MAAM,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;AAE3D,eAAO,MAAM,iBAAiB,OACxB,SAAS,YACH;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,YACtC,MAAM,kBAkBjB,CAAA;AAED,eAAO,MAAM,wBAAwB,OAC/B,SAAS,cACD,MAAM,SACX,MAAM,EAAE,iBACA,MAAM,YACX,CAAC,GAAG,CAAC,KACd,OAAO,CAAC,UAAU,EAAE,CA+BtB,CAAA;AAED,eAAO,MAAM,eAAe,OACtB,SAAS,QACP;IACJ,GAAG,EAAE,SAAS,CAAA;IACd,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,GAAG,EAAE,cAAc,CAAA;CACpB,kBAUF,CAAA;AAED,eAAO,MAAM,uBAAuB,OAC9B,SAAS,cACD,MAAM,KACjB,OAAO,CAAC,IAAI,CA4Bd,CAAA;AAED,eAAO,MAAM,mBAAmB,OAAQ,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBhD,CAAA;AAED,eAAO,MAAM,sBAAsB,OAC7B,SAAS,QACP,MAAM,EAAE,KACb,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAqBnC,CAAA;AAED,eAAO,MAAM,kBAAkB,OACzB,SAAS,SACN,MAAM,EAAE,KACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAgBnC,CAAA;AAED,eAAO,MAAM,uBAAuB,OAC9B,SAAS,QACP,SAAS,EAAE,KAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAiCpC,CAAA;AAED,eAAO,MAAM,kBAAkB,OACzB,SAAS,QACP;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,kBAmB9C,CAAA;AAED,eAAO,MAAM,yBAAyB,OAChC,SAAS,OACR,SAAS,YACJ,OAAO,kBAQlB,CAAA"}

package/dist/account-manager/helpers/invite.js

@@ -1,5 +1,5 @@
 import { chunkArray } from '@atproto/common';
-import { currentDatetimeString, } from '@atproto/lex';
+import { currentDatetimeString, } from '@atproto/lex-schema';
 import { InvalidRequestError } from '@atproto/xrpc-server';
 import { countAll } from '../../db/index.js';
 export const createInviteCodes = async (db, toCreate, useCount) => {

package/dist/account-manager/helpers/invite.js.map

@@ -1 +1 @@
-{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/invite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAGL,qBAAqB,GACtB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAO5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,QAAgD,EAChD,QAAgB,EAChB,EAAE;IACF,MAAM,GAAG,GAAG,qBAAqB,EAAE,CAAA;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,IAAI,EAAE,IAAI;QACV,aAAa,EAAE,QAAQ;QACvB,QAAQ,EAAE,CAAU;QACpB,UAAU,EAAE,OAAO,CAAC,OAAO;QAC3B,SAAS,EAAE,OAAO;QAClB,SAAS,EAAE,GAAG;KACf,CAAC,CAAC,CACJ,CAAA;IACD,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACnE,CACF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,EAAa,EACb,UAAkB,EAClB,KAAe,EACf,aAAqB,EACrB,QAAe,EACQ,EAAE;IACzB,MAAM,GAAG,GAAG,qBAAqB,EAAE,CAAA;IACnC,MAAM,IAAI,GAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI;QACJ,aAAa,EAAE,CAAC;QAChB,QAAQ;QACR,UAAU;QACV,SAAS,EAAE,UAAU;QACrB,SAAS,EAAE,GAAG;KACf,CAAC,CAAC,CAAA;IACH,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAEvE,MAAM,uBAAuB,GAAG,MAAM,EAAE,CAAC,EAAE;SACxC,UAAU,CAAC,aAAa,CAAC;SACzB,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,UAAU,CAAC;SACpC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,iDAAiD;SACnF,SAAS,EAAE;SACX,OAAO,EAAE,CAAA;IACZ,IAAI,uBAAuB,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,mBAAmB,CAC3B,yDAAyD,EACzD,iBAAiB,CAClB,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxB,GAAG,GAAG;QACN,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;QAC5B,IAAI,EAAE,EAAE;KACT,CAAC,CAAC,CAAA;AACL,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,EAAa,EACb,IAIC,EACD,EAAE;IACF,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAM;IAC5B,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;QACzC,IAAI,EAAE,IAAI,CAAC,UAAU;QACrB,MAAM,EAAE,IAAI,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,CAAC,GAAG;KACjB,CAAC,CACH,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAC1C,EAAa,EACb,UAAkB,EACH,EAAE;IACjB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE;SACvB,UAAU,CAAC,aAAa,CAAC;SACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,wBAAwB,CAAC;SACxD,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC;SAChC,SAAS,CAAC,aAAa,CAAC;SACxB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;SAC9B,gBAAgB,EAAE,CAAA;IAErB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,mBAAmB,CAC3B,oCAAoC,EACpC,mBAAmB,CACpB,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,EAAE;SACrB,UAAU,CAAC,iBAAiB,CAAC;SAC7B,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;SAC5B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;SAC9B,uBAAuB,EAAE,CAAA;IAE5B,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,IAAI,mBAAmB,CAC3B,oCAAoC,EACpC,mBAAmB,CACpB,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAAa,EAAE,EAAE;IACnD,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;IAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE;SAClB,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC;QACN,0BAA0B;QAC1B,wCAAwC;QACxC,kCAAkC;QAClC,sCAAsC;QACtC,oCAAoC;QACpC,oCAAoC;QACpC,EAAE,CAAC,EAAE;aACF,UAAU,CAAC,iBAAiB,CAAC;aAC7B,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;aAC5B,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;aAC9D,EAAE,CAAC,MAAM,CAAC;KACd,CAAC,CAAA;IACJ,OAAO,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;AAC1D,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EACzC,EAAa,EACb,IAAc,EACsB,EAAE;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC/C,2HAA2H;IAC3H,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAA;IAChC,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,EAAE,CAAC;SACtC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,OAAO,EAAE,CAAA;IACZ,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAChD,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;QAClD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE;YAC1B,GAAG,QAAQ;YACX;gBACE,GAAG,GAAG;gBACN,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;aACgB;SAC/C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,KAAe,EACqB,EAAE;IACtC,MAAM,IAAI,GAA8B,EAAE,CAAA;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,EAAE;aACxB,UAAU,CAAC,iBAAiB,CAAC;aAC7B,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;aAC1B,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC;aACzB,SAAS,EAAE;aACX,OAAO,EAAE,CAAA;QACZ,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;YACpC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA;YACjB,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAC1C,EAAa,EACb,IAAiB,EACoB,EAAE;IACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAC9B,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAAC,EAAE,CAAC;SACjD,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAC1B,EAAE;SACC,UAAU,CAAC,iBAAiB,CAAC;SAC7B,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC;SAC3B,MAAM,CAAC,MAAM,CAAC;SACd,QAAQ,EAAE,CACd;SACA,OAAO,EAAE,CAAA;IACZ,MAAM,IAAI,GAAG,MAAM,kBAAkB,CACnC,EAAE,EACF,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CACtC,CAAA;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CACpC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,EAAE,EAAc,EAAE,CAAC,CAAC;QACzD,GAAG,GAAG;QACN,SAAS;QACT,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,QAAQ,KAAK,CAAC;KACzB,CAAC,CACH,CAAA;IAED,MAAM,MAAM,GAA+B,EAAE,CAAA;IAE7C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,IAA6C,EAC7C,EAAE;IACF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;aACpB,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAC9B,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,QAAQ,CAAC,CACvC,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAC5C,EAAa,EACb,GAAc,EACd,QAAiB,EACjB,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,GAAG,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAA;AACH,CAAC,CAAA","sourcesContent":["import { chunkArray } from '@atproto/common'\nimport {\n  type DatetimeString,\n  type DidString,\n  currentDatetimeString,\n} from '@atproto/lex'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { countAll } from '../../db/index.js'\nimport type { com } from '../../lexicons/index.js'\nimport type { AccountDb, InviteCode } from '../db/index.js'\n\nexport type CodeDetail = com.atproto.server.defs.InviteCode\nexport type CodeUse = com.atproto.server.defs.InviteCodeUse\n\nexport const createInviteCodes = async (\n  db: AccountDb,\n  toCreate: { account: string; codes: string[] }[],\n  useCount: number,\n) => {\n  const now = currentDatetimeString()\n  const rows = toCreate.flatMap((account) =>\n    account.codes.map((code) => ({\n      code: code,\n      availableUses: useCount,\n      disabled: 0 as const,\n      forAccount: account.account,\n      createdBy: 'admin',\n      createdAt: now,\n    })),\n  )\n  await Promise.all(\n    chunkArray(rows, 50).map((chunk) =>\n      db.executeWithRetry(db.db.insertInto('invite_code').values(chunk)),\n    ),\n  )\n}\n\nexport const createAccountInviteCodes = async (\n  db: AccountDb,\n  forAccount: string,\n  codes: string[],\n  expectedTotal: number,\n  disabled: 0 | 1,\n): Promise<CodeDetail[]> => {\n  const now = currentDatetimeString()\n  const rows: InviteCode[] = codes.map((code) => ({\n    code,\n    availableUses: 1,\n    disabled,\n    forAccount,\n    createdBy: forAccount,\n    createdAt: now,\n  }))\n  await db.executeWithRetry(db.db.insertInto('invite_code').values(rows))\n\n  const finalRoutineInviteCodes = await db.db\n    .selectFrom('invite_code')\n    .where('forAccount', '=', forAccount)\n    .where('createdBy', '!=', 'admin') // dont count admin-gifted codes aginast the user\n    .selectAll()\n    .execute()\n  if (finalRoutineInviteCodes.length > expectedTotal) {\n    throw new InvalidRequestError(\n      'attempted to create additional codes in another request',\n      'DuplicateCreate',\n    )\n  }\n\n  return rows.map((row) => ({\n    ...row,\n    available: 1,\n    disabled: row.disabled === 1,\n    uses: [],\n  }))\n}\n\nexport const recordInviteUse = async (\n  db: AccountDb,\n  opts: {\n    did: DidString\n    inviteCode: string | undefined\n    now: DatetimeString\n  },\n) => {\n  if (!opts.inviteCode) return\n  await db.executeWithRetry(\n    db.db.insertInto('invite_code_use').values({\n      code: opts.inviteCode,\n      usedBy: opts.did,\n      usedAt: opts.now,\n    }),\n  )\n}\n\nexport const ensureInviteIsAvailable = async (\n  db: AccountDb,\n  inviteCode: string,\n): Promise<void> => {\n  const invite = await db.db\n    .selectFrom('invite_code')\n    .leftJoin('actor', 'actor.did', 'invite_code.forAccount')\n    .where('takedownRef', 'is', null)\n    .selectAll('invite_code')\n    .where('code', '=', inviteCode)\n    .executeTakeFirst()\n\n  if (!invite || invite.disabled) {\n    throw new InvalidRequestError(\n      'Provided invite code not available',\n      'InvalidInviteCode',\n    )\n  }\n\n  const uses = await db.db\n    .selectFrom('invite_code_use')\n    .select(countAll.as('count'))\n    .where('code', '=', inviteCode)\n    .executeTakeFirstOrThrow()\n\n  if (invite.availableUses <= uses.count) {\n    throw new InvalidRequestError(\n      'Provided invite code not available',\n      'InvalidInviteCode',\n    )\n  }\n}\n\nexport const selectInviteCodesQb = (db: AccountDb) => {\n  const ref = db.db.dynamic.ref\n  const builder = db.db\n    .selectFrom('invite_code')\n    .select([\n      'invite_code.code as code',\n      'invite_code.availableUses as available',\n      'invite_code.disabled as disabled',\n      'invite_code.forAccount as forAccount',\n      'invite_code.createdBy as createdBy',\n      'invite_code.createdAt as createdAt',\n      db.db\n        .selectFrom('invite_code_use')\n        .select(countAll.as('count'))\n        .whereRef('invite_code_use.code', '=', ref('invite_code.code'))\n        .as('uses'),\n    ])\n  return db.db.selectFrom(builder.as('codes')).selectAll()\n}\n\nexport const getAccountsInviteCodes = async (\n  db: AccountDb,\n  dids: string[],\n): Promise<Map<string, CodeDetail[]>> => {\n  const results = new Map<string, CodeDetail[]>()\n  // We don't want to pass an empty array to kysely and let's avoid running a query entirely if there is nothing to match for\n  if (!dids.length) return results\n  const res = await selectInviteCodesQb(db)\n    .where('forAccount', 'in', dids)\n    .execute()\n  const codes = res.map((row) => row.code)\n  const uses = await getInviteCodesUses(db, codes)\n  res.forEach((row) => {\n    const existing = results.get(row.forAccount) ?? []\n    results.set(row.forAccount, [\n      ...existing,\n      {\n        ...row,\n        uses: uses[row.code] ?? [],\n        disabled: row.disabled === 1,\n      } satisfies com.atproto.server.defs.InviteCode,\n    ])\n  })\n  return results\n}\n\nexport const getInviteCodesUses = async (\n  db: AccountDb,\n  codes: string[],\n): Promise<Record<string, CodeUse[]>> => {\n  const uses: Record<string, CodeUse[]> = {}\n  if (codes.length > 0) {\n    const usesRes = await db.db\n      .selectFrom('invite_code_use')\n      .where('code', 'in', codes)\n      .orderBy('usedAt', 'desc')\n      .selectAll()\n      .execute()\n    for (const use of usesRes) {\n      const { code, usedBy, usedAt } = use\n      uses[code] ??= []\n      uses[code].push({ usedBy, usedAt })\n    }\n  }\n  return uses\n}\n\nexport const getInvitedByForAccounts = async (\n  db: AccountDb,\n  dids: DidString[],\n): Promise<Record<string, CodeDetail>> => {\n  if (dids.length < 1) return {}\n  const codeDetailsRes = await selectInviteCodesQb(db)\n    .where('code', 'in', (qb) =>\n      qb\n        .selectFrom('invite_code_use')\n        .where('usedBy', 'in', dids)\n        .select('code')\n        .distinct(),\n    )\n    .execute()\n  const uses = await getInviteCodesUses(\n    db,\n    codeDetailsRes.map((row) => row.code),\n  )\n  const codeDetails = codeDetailsRes.map(\n    ({ uses: _, disabled, createdAt, ...row }): CodeDetail => ({\n      ...row,\n      createdAt,\n      uses: uses[row.code] ?? [],\n      disabled: disabled === 1,\n    }),\n  )\n\n  const result: Record<string, CodeDetail> = {}\n\n  for (const cur of codeDetails) {\n    for (const use of cur.uses) {\n      result[use.usedBy] = cur\n    }\n  }\n\n  return result\n}\n\nexport const disableInviteCodes = async (\n  db: AccountDb,\n  opts: { codes: string[]; accounts: string[] },\n) => {\n  const { codes, accounts } = opts\n  if (codes.length > 0) {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('invite_code')\n        .set({ disabled: 1 })\n        .where('code', 'in', codes),\n    )\n  }\n  if (accounts.length > 0) {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('invite_code')\n        .set({ disabled: 1 })\n        .where('forAccount', 'in', accounts),\n    )\n  }\n}\n\nexport const setAccountInvitesDisabled = async (\n  db: AccountDb,\n  did: DidString,\n  disabled: boolean,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .where('did', '=', did)\n      .set({ invitesDisabled: disabled ? 1 : 0 }),\n  )\n}\n"]}
+{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/invite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAGL,qBAAqB,GACtB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAO5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,QAAgD,EAChD,QAAgB,EAChB,EAAE;IACF,MAAM,GAAG,GAAG,qBAAqB,EAAE,CAAA;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,IAAI,EAAE,IAAI;QACV,aAAa,EAAE,QAAQ;QACvB,QAAQ,EAAE,CAAU;QACpB,UAAU,EAAE,OAAO,CAAC,OAAO;QAC3B,SAAS,EAAE,OAAO;QAClB,SAAS,EAAE,GAAG;KACf,CAAC,CAAC,CACJ,CAAA;IACD,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACnE,CACF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,EAAa,EACb,UAAkB,EAClB,KAAe,EACf,aAAqB,EACrB,QAAe,EACQ,EAAE;IACzB,MAAM,GAAG,GAAG,qBAAqB,EAAE,CAAA;IACnC,MAAM,IAAI,GAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI;QACJ,aAAa,EAAE,CAAC;QAChB,QAAQ;QACR,UAAU;QACV,SAAS,EAAE,UAAU;QACrB,SAAS,EAAE,GAAG;KACf,CAAC,CAAC,CAAA;IACH,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAEvE,MAAM,uBAAuB,GAAG,MAAM,EAAE,CAAC,EAAE;SACxC,UAAU,CAAC,aAAa,CAAC;SACzB,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,UAAU,CAAC;SACpC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,iDAAiD;SACnF,SAAS,EAAE;SACX,OAAO,EAAE,CAAA;IACZ,IAAI,uBAAuB,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,mBAAmB,CAC3B,yDAAyD,EACzD,iBAAiB,CAClB,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxB,GAAG,GAAG;QACN,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;QAC5B,IAAI,EAAE,EAAE;KACT,CAAC,CAAC,CAAA;AACL,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,EAAa,EACb,IAIC,EACD,EAAE;IACF,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAM;IAC5B,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;QACzC,IAAI,EAAE,IAAI,CAAC,UAAU;QACrB,MAAM,EAAE,IAAI,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,CAAC,GAAG;KACjB,CAAC,CACH,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAC1C,EAAa,EACb,UAAkB,EACH,EAAE;IACjB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE;SACvB,UAAU,CAAC,aAAa,CAAC;SACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,wBAAwB,CAAC;SACxD,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC;SAChC,SAAS,CAAC,aAAa,CAAC;SACxB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;SAC9B,gBAAgB,EAAE,CAAA;IAErB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,mBAAmB,CAC3B,oCAAoC,EACpC,mBAAmB,CACpB,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,EAAE;SACrB,UAAU,CAAC,iBAAiB,CAAC;SAC7B,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;SAC5B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;SAC9B,uBAAuB,EAAE,CAAA;IAE5B,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,IAAI,mBAAmB,CAC3B,oCAAoC,EACpC,mBAAmB,CACpB,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAAa,EAAE,EAAE;IACnD,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;IAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE;SAClB,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC;QACN,0BAA0B;QAC1B,wCAAwC;QACxC,kCAAkC;QAClC,sCAAsC;QACtC,oCAAoC;QACpC,oCAAoC;QACpC,EAAE,CAAC,EAAE;aACF,UAAU,CAAC,iBAAiB,CAAC;aAC7B,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;aAC5B,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;aAC9D,EAAE,CAAC,MAAM,CAAC;KACd,CAAC,CAAA;IACJ,OAAO,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;AAC1D,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EACzC,EAAa,EACb,IAAc,EACsB,EAAE;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC/C,2HAA2H;IAC3H,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAA;IAChC,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,EAAE,CAAC;SACtC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,OAAO,EAAE,CAAA;IACZ,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAChD,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;QAClD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE;YAC1B,GAAG,QAAQ;YACX;gBACE,GAAG,GAAG;gBACN,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;aACgB;SAC/C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,KAAe,EACqB,EAAE;IACtC,MAAM,IAAI,GAA8B,EAAE,CAAA;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,EAAE;aACxB,UAAU,CAAC,iBAAiB,CAAC;aAC7B,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;aAC1B,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC;aACzB,SAAS,EAAE;aACX,OAAO,EAAE,CAAA;QACZ,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;YACpC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA;YACjB,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAC1C,EAAa,EACb,IAAiB,EACoB,EAAE;IACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAC9B,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAAC,EAAE,CAAC;SACjD,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAC1B,EAAE;SACC,UAAU,CAAC,iBAAiB,CAAC;SAC7B,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC;SAC3B,MAAM,CAAC,MAAM,CAAC;SACd,QAAQ,EAAE,CACd;SACA,OAAO,EAAE,CAAA;IACZ,MAAM,IAAI,GAAG,MAAM,kBAAkB,CACnC,EAAE,EACF,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CACtC,CAAA;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CACpC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,EAAE,EAAc,EAAE,CAAC,CAAC;QACzD,GAAG,GAAG;QACN,SAAS;QACT,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,QAAQ,KAAK,CAAC;KACzB,CAAC,CACH,CAAA;IAED,MAAM,MAAM,GAA+B,EAAE,CAAA;IAE7C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,IAA6C,EAC7C,EAAE;IACF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;aACpB,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAC9B,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;aACF,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,QAAQ,CAAC,CACvC,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAC5C,EAAa,EACb,GAAc,EACd,QAAiB,EACjB,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,GAAG,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAA;AACH,CAAC,CAAA","sourcesContent":["import { chunkArray } from '@atproto/common'\nimport {\n  type DatetimeString,\n  type DidString,\n  currentDatetimeString,\n} from '@atproto/lex-schema'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport { countAll } from '../../db/index.js'\nimport type { com } from '../../lexicons/index.js'\nimport type { AccountDb, InviteCode } from '../db/index.js'\n\nexport type CodeDetail = com.atproto.server.defs.InviteCode\nexport type CodeUse = com.atproto.server.defs.InviteCodeUse\n\nexport const createInviteCodes = async (\n  db: AccountDb,\n  toCreate: { account: string; codes: string[] }[],\n  useCount: number,\n) => {\n  const now = currentDatetimeString()\n  const rows = toCreate.flatMap((account) =>\n    account.codes.map((code) => ({\n      code: code,\n      availableUses: useCount,\n      disabled: 0 as const,\n      forAccount: account.account,\n      createdBy: 'admin',\n      createdAt: now,\n    })),\n  )\n  await Promise.all(\n    chunkArray(rows, 50).map((chunk) =>\n      db.executeWithRetry(db.db.insertInto('invite_code').values(chunk)),\n    ),\n  )\n}\n\nexport const createAccountInviteCodes = async (\n  db: AccountDb,\n  forAccount: string,\n  codes: string[],\n  expectedTotal: number,\n  disabled: 0 | 1,\n): Promise<CodeDetail[]> => {\n  const now = currentDatetimeString()\n  const rows: InviteCode[] = codes.map((code) => ({\n    code,\n    availableUses: 1,\n    disabled,\n    forAccount,\n    createdBy: forAccount,\n    createdAt: now,\n  }))\n  await db.executeWithRetry(db.db.insertInto('invite_code').values(rows))\n\n  const finalRoutineInviteCodes = await db.db\n    .selectFrom('invite_code')\n    .where('forAccount', '=', forAccount)\n    .where('createdBy', '!=', 'admin') // dont count admin-gifted codes aginast the user\n    .selectAll()\n    .execute()\n  if (finalRoutineInviteCodes.length > expectedTotal) {\n    throw new InvalidRequestError(\n      'attempted to create additional codes in another request',\n      'DuplicateCreate',\n    )\n  }\n\n  return rows.map((row) => ({\n    ...row,\n    available: 1,\n    disabled: row.disabled === 1,\n    uses: [],\n  }))\n}\n\nexport const recordInviteUse = async (\n  db: AccountDb,\n  opts: {\n    did: DidString\n    inviteCode: string | undefined\n    now: DatetimeString\n  },\n) => {\n  if (!opts.inviteCode) return\n  await db.executeWithRetry(\n    db.db.insertInto('invite_code_use').values({\n      code: opts.inviteCode,\n      usedBy: opts.did,\n      usedAt: opts.now,\n    }),\n  )\n}\n\nexport const ensureInviteIsAvailable = async (\n  db: AccountDb,\n  inviteCode: string,\n): Promise<void> => {\n  const invite = await db.db\n    .selectFrom('invite_code')\n    .leftJoin('actor', 'actor.did', 'invite_code.forAccount')\n    .where('takedownRef', 'is', null)\n    .selectAll('invite_code')\n    .where('code', '=', inviteCode)\n    .executeTakeFirst()\n\n  if (!invite || invite.disabled) {\n    throw new InvalidRequestError(\n      'Provided invite code not available',\n      'InvalidInviteCode',\n    )\n  }\n\n  const uses = await db.db\n    .selectFrom('invite_code_use')\n    .select(countAll.as('count'))\n    .where('code', '=', inviteCode)\n    .executeTakeFirstOrThrow()\n\n  if (invite.availableUses <= uses.count) {\n    throw new InvalidRequestError(\n      'Provided invite code not available',\n      'InvalidInviteCode',\n    )\n  }\n}\n\nexport const selectInviteCodesQb = (db: AccountDb) => {\n  const ref = db.db.dynamic.ref\n  const builder = db.db\n    .selectFrom('invite_code')\n    .select([\n      'invite_code.code as code',\n      'invite_code.availableUses as available',\n      'invite_code.disabled as disabled',\n      'invite_code.forAccount as forAccount',\n      'invite_code.createdBy as createdBy',\n      'invite_code.createdAt as createdAt',\n      db.db\n        .selectFrom('invite_code_use')\n        .select(countAll.as('count'))\n        .whereRef('invite_code_use.code', '=', ref('invite_code.code'))\n        .as('uses'),\n    ])\n  return db.db.selectFrom(builder.as('codes')).selectAll()\n}\n\nexport const getAccountsInviteCodes = async (\n  db: AccountDb,\n  dids: string[],\n): Promise<Map<string, CodeDetail[]>> => {\n  const results = new Map<string, CodeDetail[]>()\n  // We don't want to pass an empty array to kysely and let's avoid running a query entirely if there is nothing to match for\n  if (!dids.length) return results\n  const res = await selectInviteCodesQb(db)\n    .where('forAccount', 'in', dids)\n    .execute()\n  const codes = res.map((row) => row.code)\n  const uses = await getInviteCodesUses(db, codes)\n  res.forEach((row) => {\n    const existing = results.get(row.forAccount) ?? []\n    results.set(row.forAccount, [\n      ...existing,\n      {\n        ...row,\n        uses: uses[row.code] ?? [],\n        disabled: row.disabled === 1,\n      } satisfies com.atproto.server.defs.InviteCode,\n    ])\n  })\n  return results\n}\n\nexport const getInviteCodesUses = async (\n  db: AccountDb,\n  codes: string[],\n): Promise<Record<string, CodeUse[]>> => {\n  const uses: Record<string, CodeUse[]> = {}\n  if (codes.length > 0) {\n    const usesRes = await db.db\n      .selectFrom('invite_code_use')\n      .where('code', 'in', codes)\n      .orderBy('usedAt', 'desc')\n      .selectAll()\n      .execute()\n    for (const use of usesRes) {\n      const { code, usedBy, usedAt } = use\n      uses[code] ??= []\n      uses[code].push({ usedBy, usedAt })\n    }\n  }\n  return uses\n}\n\nexport const getInvitedByForAccounts = async (\n  db: AccountDb,\n  dids: DidString[],\n): Promise<Record<string, CodeDetail>> => {\n  if (dids.length < 1) return {}\n  const codeDetailsRes = await selectInviteCodesQb(db)\n    .where('code', 'in', (qb) =>\n      qb\n        .selectFrom('invite_code_use')\n        .where('usedBy', 'in', dids)\n        .select('code')\n        .distinct(),\n    )\n    .execute()\n  const uses = await getInviteCodesUses(\n    db,\n    codeDetailsRes.map((row) => row.code),\n  )\n  const codeDetails = codeDetailsRes.map(\n    ({ uses: _, disabled, createdAt, ...row }): CodeDetail => ({\n      ...row,\n      createdAt,\n      uses: uses[row.code] ?? [],\n      disabled: disabled === 1,\n    }),\n  )\n\n  const result: Record<string, CodeDetail> = {}\n\n  for (const cur of codeDetails) {\n    for (const use of cur.uses) {\n      result[use.usedBy] = cur\n    }\n  }\n\n  return result\n}\n\nexport const disableInviteCodes = async (\n  db: AccountDb,\n  opts: { codes: string[]; accounts: string[] },\n) => {\n  const { codes, accounts } = opts\n  if (codes.length > 0) {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('invite_code')\n        .set({ disabled: 1 })\n        .where('code', 'in', codes),\n    )\n  }\n  if (accounts.length > 0) {\n    await db.executeWithRetry(\n      db.db\n        .updateTable('invite_code')\n        .set({ disabled: 1 })\n        .where('forAccount', 'in', accounts),\n    )\n  }\n}\n\nexport const setAccountInvitesDisabled = async (\n  db: AccountDb,\n  did: DidString,\n  disabled: boolean,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .where('did', '=', did)\n      .set({ invitesDisabled: disabled ? 1 : 0 }),\n  )\n}\n"]}

package/dist/account-manager/helpers/password.d.ts

@@ -1,4 +1,4 @@
-import { type DatetimeString } from '@atproto/lex';
+import { type DatetimeString } from '@atproto/lex-schema';
 import type { com } from '../../lexicons/index.js';
 import type { AccountDb } from '../db/index.js';
 export type AppPassDescript = {

package/dist/account-manager/helpers/password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/password.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,cAAc,EAAyB,MAAM,cAAc,CAAA;AAEzE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAA;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAG/C,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,OAAO,CAAA;CACpB,CAAA;AAED,eAAO,MAAM,qBAAqB,OAC5B,SAAS,OACR,MAAM,YACD,MAAM,KACf,OAAO,CAAC,OAAO,CAOjB,CAAA;AAED,eAAO,MAAM,iBAAiB,OACxB,SAAS,OACR,MAAM,YACD,MAAM,KACf,OAAO,CAAC,eAAe,GAAG,IAAI,CAahC,CAAA;AAED,eAAO,MAAM,kBAAkB,OACzB,SAAS,QACP;IACJ,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;CACvB,kBAQF,CAAA;AAED,eAAO,MAAM,iBAAiB,OACxB,SAAS,OACR,MAAM,QACL,MAAM,cACA,OAAO,KAClB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAiC1D,CAAA;AAED,eAAO,MAAM,gBAAgB,OACvB,SAAS,OACR,MAAM,KACV,OAAO,CACR;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,cAAc,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,EAAE,CAanE,CAAA;AAED,eAAO,MAAM,iBAAiB,OACxB,SAAS,OACR,MAAM,QACL,MAAM,kBAQb,CAAA;AAED,eAAO,MAAM,qBAAqB,OAAc,SAAS,OAAO,MAAM,kBAIrE,CAAA"}
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/password.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,cAAc,EAAyB,MAAM,qBAAqB,CAAA;AAEhF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAA;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAG/C,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,OAAO,CAAA;CACpB,CAAA;AAED,eAAO,MAAM,qBAAqB,OAC5B,SAAS,OACR,MAAM,YACD,MAAM,KACf,OAAO,CAAC,OAAO,CAOjB,CAAA;AAED,eAAO,MAAM,iBAAiB,OACxB,SAAS,OACR,MAAM,YACD,MAAM,KACf,OAAO,CAAC,eAAe,GAAG,IAAI,CAahC,CAAA;AAED,eAAO,MAAM,kBAAkB,OACzB,SAAS,QACP;IACJ,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;CACvB,kBAQF,CAAA;AAED,eAAO,MAAM,iBAAiB,OACxB,SAAS,OACR,MAAM,QACL,MAAM,cACA,OAAO,KAClB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAiC1D,CAAA;AAED,eAAO,MAAM,gBAAgB,OACvB,SAAS,OACR,MAAM,KACV,OAAO,CACR;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,cAAc,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,EAAE,CAanE,CAAA;AAED,eAAO,MAAM,iBAAiB,OACxB,SAAS,OACR,MAAM,QACL,MAAM,kBAQb,CAAA;AAED,eAAO,MAAM,qBAAqB,OAAc,SAAS,OAAO,MAAM,kBAIrE,CAAA"}

package/dist/account-manager/helpers/password.js

@@ -1,5 +1,5 @@
 import { randomStr } from '@atproto/crypto';
-import { currentDatetimeString } from '@atproto/lex';
+import { currentDatetimeString } from '@atproto/lex-schema';
 import { InvalidRequestError } from '@atproto/xrpc-server';
 import * as scrypt from './scrypt.js';
 export const verifyAccountPassword = async (db, did, password) => {

package/dist/account-manager/helpers/password.js.map

@@ -1 +1 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAuB,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAG1D,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAOrC,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,EAAa,EACb,GAAW,EACX,QAAgB,EACE,EAAE;IACpB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,EAAE;SACtB,UAAU,CAAC,SAAS,CAAC;SACrB,SAAS,EAAE;SACX,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAC5E,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,QAAgB,EACiB,EAAE;IACnC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,EAAE;SACtB,UAAU,CAAC,cAAc,CAAC;SAC1B,SAAS,EAAE;SACX,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,gBAAgB,EAAE,GAAG,EAAE,cAAc,CAAC;SAC5C,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;KAClD,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,IAGC,EACD,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,GAAG,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;SAC5C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAC/B,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,IAAY,EACZ,UAAmB,EACwC,EAAE;IAC7D,sCAAsC;IACtC,sBAAsB;IACtB,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAChB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KAClB,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,cAAc,CAAC;SAC1B,MAAM,CAAC;QACN,GAAG;QACH,IAAI;QACJ,cAAc;QACd,SAAS,EAAE,qBAAqB,EAAE;QAClC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,YAAY,EAAE,CAClB,CAAA;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAAC,wCAAwC,CAAC,CAAA;IACzE,CAAC;IACD,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU;KACX,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,EAAa,EACb,GAAW,EAGX,EAAE;IACF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,cAAc,CAAC;SAC1B,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;SAC3C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;SAC5B,OAAO,EAAE,CAAA;IACZ,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;KAChD,CAAC,CAAC,CAAA;AACL,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,IAAY,EACZ,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,cAAc,CAAC;SAC1B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAC5B,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,EAAa,EAAE,GAAW,EAAE,EAAE;IACxE,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACxD,CAAA;AACH,CAAC,CAAA","sourcesContent":["import { randomStr } from '@atproto/crypto'\nimport { type DatetimeString, currentDatetimeString } from '@atproto/lex'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport type { com } from '../../lexicons/index.js'\nimport type { AccountDb } from '../db/index.js'\nimport * as scrypt from './scrypt.js'\n\nexport type AppPassDescript = {\n  name: string\n  privileged: boolean\n}\n\nexport const verifyAccountPassword = async (\n  db: AccountDb,\n  did: string,\n  password: string,\n): Promise<boolean> => {\n  const found = await db.db\n    .selectFrom('account')\n    .selectAll()\n    .where('did', '=', did)\n    .executeTakeFirst()\n  return found ? await scrypt.verify(password, found.passwordScrypt) : false\n}\n\nexport const verifyAppPassword = async (\n  db: AccountDb,\n  did: string,\n  password: string,\n): Promise<AppPassDescript | null> => {\n  const passwordScrypt = await scrypt.hashAppPassword(did, password)\n  const found = await db.db\n    .selectFrom('app_password')\n    .selectAll()\n    .where('did', '=', did)\n    .where('passwordScrypt', '=', passwordScrypt)\n    .executeTakeFirst()\n  if (!found) return null\n  return {\n    name: found.name,\n    privileged: found.privileged === 1 ? true : false,\n  }\n}\n\nexport const updateUserPassword = async (\n  db: AccountDb,\n  opts: {\n    did: string\n    passwordScrypt: string\n  },\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .set({ passwordScrypt: opts.passwordScrypt })\n      .where('did', '=', opts.did),\n  )\n}\n\nexport const createAppPassword = async (\n  db: AccountDb,\n  did: string,\n  name: string,\n  privileged: boolean,\n): Promise<com.atproto.server.createAppPassword.AppPassword> => {\n  // create an app password with format:\n  // 1234-abcd-5678-efgh\n  const str = randomStr(16, 'base32').slice(0, 16)\n  const chunks = [\n    str.slice(0, 4),\n    str.slice(4, 8),\n    str.slice(8, 12),\n    str.slice(12, 16),\n  ]\n  const password = chunks.join('-')\n  const passwordScrypt = await scrypt.hashAppPassword(did, password)\n  const [got] = await db.executeWithRetry(\n    db.db\n      .insertInto('app_password')\n      .values({\n        did,\n        name,\n        passwordScrypt,\n        createdAt: currentDatetimeString(),\n        privileged: privileged ? 1 : 0,\n      })\n      .returningAll(),\n  )\n  if (!got) {\n    throw new InvalidRequestError('could not create app-specific password')\n  }\n  return {\n    name,\n    password,\n    createdAt: got.createdAt,\n    privileged,\n  }\n}\n\nexport const listAppPasswords = async (\n  db: AccountDb,\n  did: string,\n): Promise<\n  { name: string; createdAt: DatetimeString; privileged: boolean }[]\n> => {\n  const res = await db.db\n    .selectFrom('app_password')\n    .select(['name', 'createdAt', 'privileged'])\n    .where('did', '=', did)\n    .orderBy('createdAt', 'desc')\n    .execute()\n  return res.map((row) => ({\n    name: row.name,\n    createdAt: row.createdAt,\n    privileged: row.privileged === 1 ? true : false,\n  }))\n}\n\nexport const deleteAppPassword = async (\n  db: AccountDb,\n  did: string,\n  name: string,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .deleteFrom('app_password')\n      .where('did', '=', did)\n      .where('name', '=', name),\n  )\n}\n\nexport const deleteAllAppPasswords = async (db: AccountDb, did: string) => {\n  await db.executeWithRetry(\n    db.db.deleteFrom('app_password').where('did', '=', did),\n  )\n}\n"]}
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAuB,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAG1D,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAOrC,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,EAAa,EACb,GAAW,EACX,QAAgB,EACE,EAAE;IACpB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,EAAE;SACtB,UAAU,CAAC,SAAS,CAAC;SACrB,SAAS,EAAE;SACX,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,gBAAgB,EAAE,CAAA;IACrB,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAC5E,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,QAAgB,EACiB,EAAE;IACnC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,EAAE;SACtB,UAAU,CAAC,cAAc,CAAC;SAC1B,SAAS,EAAE;SACX,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,gBAAgB,EAAE,GAAG,EAAE,cAAc,CAAC;SAC5C,gBAAgB,EAAE,CAAA;IACrB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;KAClD,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,IAGC,EACD,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,WAAW,CAAC,SAAS,CAAC;SACtB,GAAG,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;SAC5C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAC/B,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,IAAY,EACZ,UAAmB,EACwC,EAAE;IAC7D,sCAAsC;IACtC,sBAAsB;IACtB,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAChB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KAClB,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACrC,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,cAAc,CAAC;SAC1B,MAAM,CAAC;QACN,GAAG;QACH,IAAI;QACJ,cAAc;QACd,SAAS,EAAE,qBAAqB,EAAE;QAClC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,YAAY,EAAE,CAClB,CAAA;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAAC,wCAAwC,CAAC,CAAA;IACzE,CAAC;IACD,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU;KACX,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,EAAa,EACb,GAAW,EAGX,EAAE;IACF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE;SACpB,UAAU,CAAC,cAAc,CAAC;SAC1B,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;SAC3C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;SAC5B,OAAO,EAAE,CAAA;IACZ,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;KAChD,CAAC,CAAC,CAAA;AACL,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,EAAa,EACb,GAAW,EACX,IAAY,EACZ,EAAE;IACF,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,cAAc,CAAC;SAC1B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAC5B,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,EAAa,EAAE,GAAW,EAAE,EAAE;IACxE,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CACxD,CAAA;AACH,CAAC,CAAA","sourcesContent":["import { randomStr } from '@atproto/crypto'\nimport { type DatetimeString, currentDatetimeString } from '@atproto/lex-schema'\nimport { InvalidRequestError } from '@atproto/xrpc-server'\nimport type { com } from '../../lexicons/index.js'\nimport type { AccountDb } from '../db/index.js'\nimport * as scrypt from './scrypt.js'\n\nexport type AppPassDescript = {\n  name: string\n  privileged: boolean\n}\n\nexport const verifyAccountPassword = async (\n  db: AccountDb,\n  did: string,\n  password: string,\n): Promise<boolean> => {\n  const found = await db.db\n    .selectFrom('account')\n    .selectAll()\n    .where('did', '=', did)\n    .executeTakeFirst()\n  return found ? await scrypt.verify(password, found.passwordScrypt) : false\n}\n\nexport const verifyAppPassword = async (\n  db: AccountDb,\n  did: string,\n  password: string,\n): Promise<AppPassDescript | null> => {\n  const passwordScrypt = await scrypt.hashAppPassword(did, password)\n  const found = await db.db\n    .selectFrom('app_password')\n    .selectAll()\n    .where('did', '=', did)\n    .where('passwordScrypt', '=', passwordScrypt)\n    .executeTakeFirst()\n  if (!found) return null\n  return {\n    name: found.name,\n    privileged: found.privileged === 1 ? true : false,\n  }\n}\n\nexport const updateUserPassword = async (\n  db: AccountDb,\n  opts: {\n    did: string\n    passwordScrypt: string\n  },\n) => {\n  await db.executeWithRetry(\n    db.db\n      .updateTable('account')\n      .set({ passwordScrypt: opts.passwordScrypt })\n      .where('did', '=', opts.did),\n  )\n}\n\nexport const createAppPassword = async (\n  db: AccountDb,\n  did: string,\n  name: string,\n  privileged: boolean,\n): Promise<com.atproto.server.createAppPassword.AppPassword> => {\n  // create an app password with format:\n  // 1234-abcd-5678-efgh\n  const str = randomStr(16, 'base32').slice(0, 16)\n  const chunks = [\n    str.slice(0, 4),\n    str.slice(4, 8),\n    str.slice(8, 12),\n    str.slice(12, 16),\n  ]\n  const password = chunks.join('-')\n  const passwordScrypt = await scrypt.hashAppPassword(did, password)\n  const [got] = await db.executeWithRetry(\n    db.db\n      .insertInto('app_password')\n      .values({\n        did,\n        name,\n        passwordScrypt,\n        createdAt: currentDatetimeString(),\n        privileged: privileged ? 1 : 0,\n      })\n      .returningAll(),\n  )\n  if (!got) {\n    throw new InvalidRequestError('could not create app-specific password')\n  }\n  return {\n    name,\n    password,\n    createdAt: got.createdAt,\n    privileged,\n  }\n}\n\nexport const listAppPasswords = async (\n  db: AccountDb,\n  did: string,\n): Promise<\n  { name: string; createdAt: DatetimeString; privileged: boolean }[]\n> => {\n  const res = await db.db\n    .selectFrom('app_password')\n    .select(['name', 'createdAt', 'privileged'])\n    .where('did', '=', did)\n    .orderBy('createdAt', 'desc')\n    .execute()\n  return res.map((row) => ({\n    name: row.name,\n    createdAt: row.createdAt,\n    privileged: row.privileged === 1 ? true : false,\n  }))\n}\n\nexport const deleteAppPassword = async (\n  db: AccountDb,\n  did: string,\n  name: string,\n) => {\n  await db.executeWithRetry(\n    db.db\n      .deleteFrom('app_password')\n      .where('did', '=', did)\n      .where('name', '=', name),\n  )\n}\n\nexport const deleteAllAppPasswords = async (db: AccountDb, did: string) => {\n  await db.executeWithRetry(\n    db.db.deleteFrom('app_password').where('did', '=', did),\n  )\n}\n"]}

package/dist/account-manager/helpers/repo.d.ts

@@ -1,4 +1,4 @@
-import { type Cid } from '@atproto/lex';
+import type { Cid } from '@atproto/lex-data';
 import type { AccountDb } from '../db/index.js';
 export declare const updateRoot: (db: AccountDb, did: string, cid: Cid, rev: string) => Promise<void>;
 //# sourceMappingURL=repo.d.ts.map

package/dist/account-manager/helpers/repo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/repo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,GAAG,EAAyB,MAAM,cAAc,CAAA;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C,eAAO,MAAM,UAAU,OACjB,SAAS,OACR,MAAM,OACN,GAAG,OACH,MAAM,kBAgBZ,CAAA"}
+{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/repo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAE5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C,eAAO,MAAM,UAAU,OACjB,SAAS,OACR,MAAM,OACN,GAAG,OACH,MAAM,kBAgBZ,CAAA"}

package/dist/account-manager/helpers/repo.js

@@ -1,4 +1,4 @@
-import { currentDatetimeString } from '@atproto/lex';
+import { currentDatetimeString } from '@atproto/lex-schema';
 export const updateRoot = async (db, did, cid, rev) => {
     // @TODO balance risk of a race in the case of a long retry
     await db.executeWithRetry(db.db

package/dist/account-manager/helpers/repo.js.map

@@ -1 +1 @@
-{"version":3,"file":"repo.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/repo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAG9D,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,EAAa,EACb,GAAW,EACX,GAAQ,EACR,GAAW,EACX,EAAE;IACF,2DAA2D;IAC3D,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,WAAW,CAAC;SACvB,MAAM,CAAC;QACN,GAAG;QACH,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;QACnB,GAAG;QACH,SAAS,EAAE,qBAAqB,EAAE;KACnC,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAC3D,CACJ,CAAA;AACH,CAAC,CAAA","sourcesContent":["import { type Cid, currentDatetimeString } from '@atproto/lex'\nimport type { AccountDb } from '../db/index.js'\n\nexport const updateRoot = async (\n  db: AccountDb,\n  did: string,\n  cid: Cid,\n  rev: string,\n) => {\n  // @TODO balance risk of a race in the case of a long retry\n  await db.executeWithRetry(\n    db.db\n      .insertInto('repo_root')\n      .values({\n        did,\n        cid: cid.toString(),\n        rev,\n        indexedAt: currentDatetimeString(),\n      })\n      .onConflict((oc) =>\n        oc.column('did').doUpdateSet({ cid: cid.toString(), rev }),\n      ),\n  )\n}\n"]}
+{"version":3,"file":"repo.js","sourceRoot":"","sources":["../../../src/account-manager/helpers/repo.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAG3D,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,EAAa,EACb,GAAW,EACX,GAAQ,EACR,GAAW,EACX,EAAE;IACF,2DAA2D;IAC3D,MAAM,EAAE,CAAC,gBAAgB,CACvB,EAAE,CAAC,EAAE;SACF,UAAU,CAAC,WAAW,CAAC;SACvB,MAAM,CAAC;QACN,GAAG;QACH,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;QACnB,GAAG;QACH,SAAS,EAAE,qBAAqB,EAAE;KACnC,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAC3D,CACJ,CAAA;AACH,CAAC,CAAA","sourcesContent":["import type { Cid } from '@atproto/lex-data'\nimport { currentDatetimeString } from '@atproto/lex-schema'\nimport type { AccountDb } from '../db/index.js'\n\nexport const updateRoot = async (\n  db: AccountDb,\n  did: string,\n  cid: Cid,\n  rev: string,\n) => {\n  // @TODO balance risk of a race in the case of a long retry\n  await db.executeWithRetry(\n    db.db\n      .insertInto('repo_root')\n      .values({\n        did,\n        cid: cid.toString(),\n        rev,\n        indexedAt: currentDatetimeString(),\n      })\n      .onConflict((oc) =>\n        oc.column('did').doUpdateSet({ cid: cid.toString(), rev }),\n      ),\n  )\n}\n"]}

package/dist/account-manager/oauth-store.d.ts

@@ -1,6 +1,6 @@
 import { type Client } from '@did-plc/lib';
 import { type Keypair } from '@atproto/crypto';
-import { type HandleString } from '@atproto/lex';
+import type { HandleString } from '@atproto/lex-schema';
 import type { Account, AccountStore, AtIdentifierString, AuthenticateAccountData, AuthorizedClientData, AuthorizedClients, ClientId, Code, DeactivateAccountData, DeleteAccountConfirmInput, DeleteAccountRequestInput, DeviceAccount, DeviceData, DeviceId, DeviceStore, Did, DisableEmailAuthFactorInput, EnableEmailAuthFactorInput, FoundRequestResult, LexiconData, LexiconStore, NewTokenData, ReactivateAccountData, RefreshToken, RequestData, RequestId, RequestStore, ResetPasswordConfirmInput, ResetPasswordRequestInput, SignUpData, TokenData, TokenId, TokenInfo, TokenStore, UpdateEmailConfirmInput, UpdateEmailRequestInput, UpdateEmailRequestOutput, UpdateHandleData, UpdateRequestData, VerifyEmailConfirmInput, VerifyEmailRequestInput } from '@atproto/oauth-provider/store';
 import type { ActorStore } from '../actor-store/actor-store.js';
 import type { BackgroundQueue } from '../background.js';

package/dist/account-manager/oauth-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-store.d.ts","sourceRoot":"","sources":["../../src/account-manager/oauth-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,MAAM,EAA2B,MAAM,cAAc,CAAA;AAGnE,OAAO,EAAE,KAAK,OAAO,EAAoB,MAAM,iBAAiB,CAAA;AAChE,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,cAAc,CAAA;AAOrB,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,QAAQ,EACR,IAAI,EACJ,qBAAqB,EACrB,yBAAyB,EACzB,yBAAyB,EACzB,aAAa,EACb,UAAU,EACV,QAAQ,EACR,WAAW,EACX,GAAG,EACH,2BAA2B,EAC3B,0BAA0B,EAC1B,kBAAkB,EAElB,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,YAAY,EACZ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,yBAAyB,EACzB,yBAAyB,EACzB,UAAU,EACV,SAAS,EACT,OAAO,EACP,SAAS,EACT,UAAU,EACV,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,+BAA+B,CAAA;AAMtC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAEvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EACL,KAAK,cAAc,EAGpB,MAAM,sBAAsB,CAAA;AAW7B;;;;;GAKG;AACH,qBAAa,UACX,YAAW,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU;IAG1E,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAVjC,YACmB,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,UAAU,EACtB,eAAe,EAAE,eAAe,EAChC,eAAe,EAAE,eAAe,EAChC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,OAAO,EACvB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,GAAG,IAAI,EAC5C;IAEJ,OAAO,KAAK,EAAE,GAIb;IAED,OAAO,KAAK,UAAU,GAErB;YAEa,uBAAuB;YAavB,gBAAgB;IAexB,aAAa,CAAC,EAClB,MAAM,EAAE,OAAO,EACf,UAAU,EACV,MAAM,EACN,KAAK,EACL,QAAQ,GACT,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAmG/B;IAEK,mBAAmB,CAAC,EACxB,MAAM,EACN,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,cAAc,GACf,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAyD5C;IAEK,mBAAmB,CACvB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,IAAI,CAAC,CAEf;IAEK,UAAU,CAAC,WAAW,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,GAAG;QAChE,OAAO,EAAE,OAAO,CAAA;QAChB,iBAAiB,EAAE,iBAAiB,CAAA;KACrC,CAAC,CAeD;IAEK,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIxE;IAEK,gBAAgB,CACpB,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAkB/B;IAEK,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAIrE;IAEK,kBAAkB,CACtB,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,QAAQ,CAAA;KAAE,GAC5C,OAAO,CAAC,aAAa,EAAE,CAAC,CA6B1B;IAEK,oBAAoB,CAAC,EACzB,UAAU,EACV,MAAM,GACP,EAAE,yBAAyB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CA4BrD;IAEK,oBAAoB,CACxB,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAgBzB;IAEK,wBAAwB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBlE;IAIK,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAInE;IAEK,WAAW,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAe5D;IAEK,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAIzE;IAEK,aAAa,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhD;IAEK,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAKvE;IAIK,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAItE;IAEK,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,GAAG,UAAU,CAAC,CAG/D;IAEK,YAAY,CAChB,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GACxB,OAAO,CAAC,IAAI,CAAC,CAIf;IAEK,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAGpD;IAIK,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAE3D;IAEK,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjE;IAEK,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;IAIK,WAAW,CACf,EAAE,EAAE,OAAO,EACX,IAAI,EAAE,SAAS,EACf,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,IAAI,CAAC,CAcf;IAEK,iBAAiB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAGtD;IAEK,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAK3D;IAEK,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAGjD;IAEK,WAAW,CACf,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,OAAO,EACnB,eAAe,EAAE,YAAY,EAC7B,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CA2Bf;IAEK,uBAAuB,CAC3B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAW3B;IAEK,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAG3D;IAEK,kBAAkB,CAAC,EACvB,GAAG,EACH,MAAM,GACP,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUzC;IAEK,kBAAkB,CAAC,EACvB,GAAG,EACH,KAAK,EACL,KAAK,GACN,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAYnD;IAEK,kBAAkB,CAAC,EACvB,GAAG,EACH,MAAM,GACP,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAE7D;IAEK,kBAAkB,CAAC,EACvB,GAAG,EACH,KAAK,EACL,KAAK,EACL,MAAM,GACP,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAenD;IAEK,qBAAqB,CAAC,EAC1B,GAAG,GACJ,EAAE,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/C;IAEK,sBAAsB,CAAC,EAC3B,GAAG,EACH,KAAK,EACL,MAAM,GACP,EAAE,2BAA2B,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBhD;IAEK,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAQtE;IAEK,iBAAiB,CAAC,EACtB,GAAG,EACH,WAAW,GACZ,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAO1C;IAEK,iBAAiB,CAAC,EAAE,GAAG,EAAE,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAYxE;IAEK,oBAAoB,CAAC,EACzB,GAAG,EACH,MAAM,GACP,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB3C;IAEK,oBAAoB,CAAC,EACzB,GAAG,EACH,KAAK,EACL,QAAQ,GACT,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoC3C;YAEa,WAAW;YAWX,YAAY;CAmC3B"}
+{"version":3,"file":"oauth-store.d.ts","sourceRoot":"","sources":["../../src/account-manager/oauth-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,MAAM,EAA2B,MAAM,cAAc,CAAA;AAGnE,OAAO,EAAE,KAAK,OAAO,EAAoB,MAAM,iBAAiB,CAAA;AAEhE,OAAO,KAAK,EAAa,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAOlE,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,QAAQ,EACR,IAAI,EACJ,qBAAqB,EACrB,yBAAyB,EACzB,yBAAyB,EACzB,aAAa,EACb,UAAU,EACV,QAAQ,EACR,WAAW,EACX,GAAG,EACH,2BAA2B,EAC3B,0BAA0B,EAC1B,kBAAkB,EAElB,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,YAAY,EACZ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,yBAAyB,EACzB,yBAAyB,EACzB,UAAU,EACV,SAAS,EACT,OAAO,EACP,SAAS,EACT,UAAU,EACV,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,+BAA+B,CAAA;AAMtC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAEvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EACL,KAAK,cAAc,EAGpB,MAAM,sBAAsB,CAAA;AAW7B;;;;;GAKG;AACH,qBAAa,UACX,YAAW,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU;IAG1E,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAVjC,YACmB,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,UAAU,EACtB,eAAe,EAAE,eAAe,EAChC,eAAe,EAAE,eAAe,EAChC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,OAAO,EACvB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,GAAG,IAAI,EAC5C;IAEJ,OAAO,KAAK,EAAE,GAIb;IAED,OAAO,KAAK,UAAU,GAErB;YAEa,uBAAuB;YAavB,gBAAgB;IAexB,aAAa,CAAC,EAClB,MAAM,EAAE,OAAO,EACf,UAAU,EACV,MAAM,EACN,KAAK,EACL,QAAQ,GACT,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAmG/B;IAEK,mBAAmB,CAAC,EACxB,MAAM,EACN,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,cAAc,GACf,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAyD5C;IAEK,mBAAmB,CACvB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,IAAI,CAAC,CAEf;IAEK,UAAU,CAAC,WAAW,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,GAAG;QAChE,OAAO,EAAE,OAAO,CAAA;QAChB,iBAAiB,EAAE,iBAAiB,CAAA;KACrC,CAAC,CAeD;IAEK,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIxE;IAEK,gBAAgB,CACpB,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAkB/B;IAEK,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAIrE;IAEK,kBAAkB,CACtB,MAAM,EAAE;QAAE,GAAG,EAAE,GAAG,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,QAAQ,CAAA;KAAE,GAC5C,OAAO,CAAC,aAAa,EAAE,CAAC,CA6B1B;IAEK,oBAAoB,CAAC,EACzB,UAAU,EACV,MAAM,GACP,EAAE,yBAAyB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CA4BrD;IAEK,oBAAoB,CACxB,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAgBzB;IAEK,wBAAwB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBlE;IAIK,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAInE;IAEK,WAAW,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAe5D;IAEK,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAIzE;IAEK,aAAa,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhD;IAEK,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAKvE;IAIK,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAItE;IAEK,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,GAAG,UAAU,CAAC,CAG/D;IAEK,YAAY,CAChB,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GACxB,OAAO,CAAC,IAAI,CAAC,CAIf;IAEK,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAGpD;IAIK,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAE3D;IAEK,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjE;IAEK,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;IAIK,WAAW,CACf,EAAE,EAAE,OAAO,EACX,IAAI,EAAE,SAAS,EACf,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,IAAI,CAAC,CAcf;IAEK,iBAAiB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAGtD;IAEK,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAK3D;IAEK,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAGjD;IAEK,WAAW,CACf,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,OAAO,EACnB,eAAe,EAAE,YAAY,EAC7B,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CA2Bf;IAEK,uBAAuB,CAC3B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAW3B;IAEK,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAG3D;IAEK,kBAAkB,CAAC,EACvB,GAAG,EACH,MAAM,GACP,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUzC;IAEK,kBAAkB,CAAC,EACvB,GAAG,EACH,KAAK,EACL,KAAK,GACN,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAYnD;IAEK,kBAAkB,CAAC,EACvB,GAAG,EACH,MAAM,GACP,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAE7D;IAEK,kBAAkB,CAAC,EACvB,GAAG,EACH,KAAK,EACL,KAAK,EACL,MAAM,GACP,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAenD;IAEK,qBAAqB,CAAC,EAC1B,GAAG,GACJ,EAAE,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/C;IAEK,sBAAsB,CAAC,EAC3B,GAAG,EACH,KAAK,EACL,MAAM,GACP,EAAE,2BAA2B,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBhD;IAEK,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAQtE;IAEK,iBAAiB,CAAC,EACtB,GAAG,EACH,WAAW,GACZ,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAO1C;IAEK,iBAAiB,CAAC,EAAE,GAAG,EAAE,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAYxE;IAEK,oBAAoB,CAAC,EACzB,GAAG,EACH,MAAM,GACP,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB3C;IAEK,oBAAoB,CAAC,EACzB,GAAG,EACH,KAAK,EACL,QAAQ,GACT,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoC3C;YAEa,WAAW;YAWX,YAAY;CAmC3B"}

package/dist/account-manager/oauth-store.js

@@ -2,7 +2,7 @@ import assert from 'node:assert';
 import { createOp as createPlcOp } from '@did-plc/lib';
 import { DAY } from '@atproto/common';
 import { Secp256k1Keypair } from '@atproto/crypto';
-import { getBlobCidString, } from '@atproto/lex';
+import { getBlobCidString } from '@atproto/lex-data';
 import { HandleUnavailableError, InvalidCredentialsError, InvalidRequestError, SecondAuthenticationFactorRequiredError, } from '@atproto/oauth-provider/errors';
 import { isAtIdentifierString } from '@atproto/oauth-provider/store';
 import { AuthRequiredError as XrpcAuthRequiredError, InvalidRequestError as XrpcInvalidRequestError, } from '@atproto/xrpc-server';