@keytrace/runner 0.0.3

package/dist/profile.js

@@ -0,0 +1,176 @@
+import { AtpAgent } from "@atproto/api";
+import { createClaim, verifyClaim } from "./claim.js";
+import { ClaimStatus } from "./types.js";
+import { COLLECTION_NSID, PUBLIC_API_URL, PLC_DIRECTORY_URL } from "./constants.js";
+/**
+ * Resolve the PDS endpoint from a DID document.
+ * For did:plc, fetches from plc.directory.
+ * For did:web, fetches from the well-known DID path.
+ * Falls back to PUBLIC_API_URL on failure.
+ */
+export async function resolvePds(did) {
+    try {
+        let url;
+        if (did.startsWith("did:plc:")) {
+            url = `${PLC_DIRECTORY_URL}/${did}`;
+        }
+        else if (did.startsWith("did:web:")) {
+            const host = did.replace("did:web:", "").replaceAll(":", "/");
+            url = `https://${host}/.well-known/did.json`;
+        }
+        else {
+            return PUBLIC_API_URL;
+        }
+        const response = await globalThis.fetch(url, {
+            headers: { Accept: "application/json" },
+        });
+        if (!response.ok) {
+            return PUBLIC_API_URL;
+        }
+        const doc = (await response.json());
+        const pdsService = doc.service?.find((s) => s.id === "#atproto_pds" || s.type === "AtprotoPersonalDataServer");
+        return pdsService?.serviceEndpoint ?? PUBLIC_API_URL;
+    }
+    catch {
+        return PUBLIC_API_URL;
+    }
+}
+/**
+ * Parse an AT URI and extract the rkey (record key).
+ * AT URIs have the format: at://did/collection/rkey
+ */
+function parseAtUriRkey(atUri) {
+    const match = atUri.match(/^at:\/\/[^/]+\/[^/]+\/(.+)$/);
+    return match?.[1] ?? "";
+}
+/**
+ * Internal: fetch profile data using an already-configured agent
+ */
+async function fetchWithAgent(agent, did) {
+    // Fetch Bluesky profile for display info via public API (not PDS)
+    // The PDS doesn't serve app.bsky.actor.getProfile - only the AppView does
+    let bskyProfile = null;
+    try {
+        const publicAgent = new AtpAgent({ service: PUBLIC_API_URL });
+        const profileRes = await publicAgent.getProfile({ actor: did });
+        bskyProfile = {
+            handle: profileRes.data.handle,
+            displayName: profileRes.data.displayName,
+            avatar: profileRes.data.avatar,
+        };
+    }
+    catch (err) {
+        // Profile fetch is optional - user may not have a Bluesky profile
+        // 404 is expected; log other errors at debug level
+        if (err instanceof Error && !err.message.includes("404")) {
+            console.debug(`Failed to fetch profile for ${did}: ${err.message}`);
+        }
+    }
+    // List all claim records with cursor-based pagination
+    const claims = [];
+    try {
+        let cursor;
+        do {
+            const records = await agent.com.atproto.repo.listRecords({
+                repo: did,
+                collection: COLLECTION_NSID,
+                limit: 100,
+                cursor,
+            });
+            for (const record of records.data.records) {
+                const value = record.value;
+                if (value.claimUri) {
+                    claims.push({
+                        uri: value.claimUri,
+                        did,
+                        type: value.type,
+                        comment: value.comment,
+                        createdAt: value.createdAt ?? new Date().toISOString(),
+                        rkey: parseAtUriRkey(record.uri),
+                        identity: value.identity,
+                    });
+                }
+            }
+            cursor = records.data.cursor;
+        } while (cursor);
+    }
+    catch (err) {
+        // 404 means no records yet; log other errors
+        if (err instanceof Error && !err.message.includes("404")) {
+            console.debug(`Failed to list claim records for ${did}: ${err.message}`);
+        }
+    }
+    return {
+        did,
+        handle: bskyProfile?.handle ?? did,
+        displayName: bskyProfile?.displayName,
+        avatar: bskyProfile?.avatar,
+        claims,
+        claimInstances: claims.map((c) => createClaim(c.uri, did)),
+    };
+}
+/**
+ * Fetch a profile from ATProto by DID or handle
+ */
+export async function fetchProfile(didOrHandle, serviceUrl) {
+    // Resolve PDS from DID document unless an explicit serviceUrl was provided
+    let resolvedServiceUrl;
+    let did = didOrHandle;
+    if (serviceUrl) {
+        resolvedServiceUrl = serviceUrl;
+    }
+    else if (didOrHandle.startsWith("did:")) {
+        resolvedServiceUrl = await resolvePds(didOrHandle);
+    }
+    else {
+        // Handle - we need to resolve via the public API first, then resolve PDS
+        resolvedServiceUrl = PUBLIC_API_URL;
+    }
+    const agent = new AtpAgent({ service: resolvedServiceUrl });
+    // Resolve handle to DID if needed
+    if (!didOrHandle.startsWith("did:")) {
+        const resolved = await agent.resolveHandle({ handle: didOrHandle });
+        did = resolved.data.did;
+        // Now that we have the DID, resolve the actual PDS if no explicit serviceUrl
+        if (!serviceUrl) {
+            const pdsUrl = await resolvePds(did);
+            if (pdsUrl !== resolvedServiceUrl) {
+                resolvedServiceUrl = pdsUrl;
+                // Re-create agent pointed at the user's actual PDS
+                const pdsAgent = new AtpAgent({ service: pdsUrl });
+                return fetchWithAgent(pdsAgent, did);
+            }
+        }
+    }
+    return fetchWithAgent(agent, did);
+}
+/**
+ * Verify all claims in a profile
+ */
+export async function verifyAllClaims(profile, opts) {
+    await Promise.all(profile.claimInstances.map((claim) => verifyClaim(claim, opts)));
+}
+/**
+ * Get verification summary for a profile
+ */
+export function getProfileSummary(profile) {
+    const claims = profile.claimInstances;
+    return {
+        total: claims.length,
+        verified: claims.filter((c) => c.status === ClaimStatus.VERIFIED).length,
+        failed: claims.filter((c) => c.status === ClaimStatus.FAILED || c.status === ClaimStatus.ERROR).length,
+        pending: claims.filter((c) => c.status === ClaimStatus.INIT || c.status === ClaimStatus.MATCHED).length,
+    };
+}
+/**
+ * Get claims grouped by status
+ */
+export function getClaimsByStatus(profile) {
+    const claims = profile.claimInstances;
+    return {
+        verified: claims.filter((c) => c.status === ClaimStatus.VERIFIED),
+        failed: claims.filter((c) => c.status === ClaimStatus.FAILED || c.status === ClaimStatus.ERROR),
+        pending: claims.filter((c) => c.status === ClaimStatus.INIT || c.status === ClaimStatus.MATCHED),
+    };
+}
+//# sourceMappingURL=profile.js.map

package/dist/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAmB,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AA4BpF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,IAAI,GAAW,CAAC;QAChB,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,GAAG,GAAG,GAAG,iBAAiB,IAAI,GAAG,EAAE,CAAC;QACtC,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9D,GAAG,GAAG,WAAW,IAAI,uBAAuB,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgB,CAAC;QACnD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,2BAA2B,CAAC,CAAC;QAE/G,OAAO,UAAU,EAAE,eAAe,IAAI,cAAc,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACzD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAAC,KAAe,EAAE,GAAW;IACxD,kEAAkE;IAClE,0EAA0E;IAC1E,IAAI,WAAW,GAAqE,IAAI,CAAC;IACzF,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,WAAW,GAAG;YACZ,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;YAC9B,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW;YACxC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;SAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,kEAAkE;QAClE,mDAAmD;QACnD,IAAI,GAAG,YAAY,KAAK,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,KAAK,CAAC,+BAA+B,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,MAA0B,CAAC;QAC/B,GAAG,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;gBACvD,IAAI,EAAE,GAAG;gBACT,UAAU,EAAE,eAAe;gBAC3B,KAAK,EAAE,GAAG;gBACV,MAAM;aACP,CAAC,CAAC;YAEH,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAMpB,CAAC;gBACF,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC;wBACV,GAAG,EAAE,KAAK,CAAC,QAAQ;wBACnB,GAAG;wBACH,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACtD,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC;wBAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;qBACzB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,CAAC,QAAQ,MAAM,EAAE;IACnB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,6CAA6C;QAC7C,IAAI,GAAG,YAAY,KAAK,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,KAAK,CAAC,oCAAoC,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG;QACH,MAAM,EAAE,WAAW,EAAE,MAAM,IAAI,GAAG;QAClC,WAAW,EAAE,WAAW,EAAE,WAAW;QACrC,MAAM,EAAE,WAAW,EAAE,MAAM;QAC3B,MAAM;QACN,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,WAAmB,EAAE,UAAmB;IACzE,2EAA2E;IAC3E,IAAI,kBAA0B,CAAC;IAC/B,IAAI,GAAG,GAAG,WAAW,CAAC;IAEtB,IAAI,UAAU,EAAE,CAAC;QACf,kBAAkB,GAAG,UAAU,CAAC;IAClC,CAAC;SAAM,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,kBAAkB,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,yEAAyE;QACzE,kBAAkB,GAAG,cAAc,CAAC;IACtC,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAE5D,kCAAkC;IAClC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACpE,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAExB,6EAA6E;QAC7E,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;gBAClC,kBAAkB,GAAG,MAAM,CAAC;gBAC5B,mDAAmD;gBACnD,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBACnD,OAAO,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAuB,EAAE,IAAoB;IACjF,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAuB;IAMvD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IACtC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM;QACxE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM;QACtG,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM;KACxG,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAuB;IAKvD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IACtC,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,QAAQ,CAAC;QACjE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,KAAK,CAAC;QAC/F,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,OAAO,CAAC;KACjG,CAAC;AACJ,CAAC"}

package/dist/recipes/dns-txt.d.ts

@@ -0,0 +1,9 @@
+import type { Recipe } from "../types.js";
+/**
+ * Built-in recipe: Domain verification via DNS TXT record.
+ *
+ * The user adds a TXT record to their domain containing their DID,
+ * then provides the domain name for verification.
+ */
+export declare const dnsTxtRecipe: Recipe;
+//# sourceMappingURL=dns-txt.d.ts.map

package/dist/recipes/dns-txt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-txt.d.ts","sourceRoot":"","sources":["../../src/recipes/dns-txt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,YAAY,EAAE,MAqC1B,CAAC"}

package/dist/recipes/dns-txt.js

@@ -0,0 +1,45 @@
+/**
+ * Built-in recipe: Domain verification via DNS TXT record.
+ *
+ * The user adds a TXT record to their domain containing their DID,
+ * then provides the domain name for verification.
+ */
+export const dnsTxtRecipe = {
+    $type: "dev.keytrace.recipe",
+    type: "dns",
+    version: 1,
+    displayName: "Domain (via DNS TXT)",
+    params: [
+        {
+            key: "domain",
+            label: "Domain name",
+            type: "domain",
+            placeholder: "example.com",
+            pattern: "^[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?(?:\\.[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?)+$",
+        },
+    ],
+    instructions: {
+        steps: [
+            "Log into your domain's DNS management panel",
+            "Add a new TXT record to the root domain (or _keytrace subdomain)",
+            "Set the value to the verification text below",
+            "Wait for DNS propagation (may take a few minutes)",
+        ],
+        proofTemplate: "keytrace-verification={did}",
+        proofLocation: "DNS TXT record on your domain",
+    },
+    verification: {
+        steps: [
+            {
+                action: "dns-txt",
+                url: "{domain}",
+            },
+            {
+                action: "regex-match",
+                pattern: "keytrace-verification=({did})",
+                expect: "equals:{did}",
+            },
+        ],
+    },
+};
+//# sourceMappingURL=dns-txt.js.map

package/dist/recipes/dns-txt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-txt.js","sourceRoot":"","sources":["../../src/recipes/dns-txt.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAW;IAClC,KAAK,EAAE,qBAAqB;IAC5B,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,sBAAsB;IACnC,MAAM,EAAE;QACN;YACE,GAAG,EAAE,QAAQ;YACb,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE,4FAA4F;SACtG;KACF;IACD,YAAY,EAAE;QACZ,KAAK,EAAE;YACL,6CAA6C;YAC7C,kEAAkE;YAClE,8CAA8C;YAC9C,mDAAmD;SACpD;QACD,aAAa,EAAE,6BAA6B;QAC5C,aAAa,EAAE,+BAA+B;KAC/C;IACD,YAAY,EAAE;QACZ,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,SAAS;gBACjB,GAAG,EAAE,UAAU;aAChB;YACD;gBACE,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,+BAA+B;gBACxC,MAAM,EAAE,cAAc;aACvB;SACF;KACF;CACF,CAAC"}

package/dist/recipes/github-gist.d.ts

@@ -0,0 +1,9 @@
+import type { Recipe } from "../types.js";
+/**
+ * Built-in recipe: GitHub Account verification via public Gist.
+ *
+ * The user creates a public gist named keytrace.json containing
+ * their claim ID and DID, then provides the gist URL for verification.
+ */
+export declare const githubGistRecipe: Recipe;
+//# sourceMappingURL=github-gist.d.ts.map

package/dist/recipes/github-gist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-gist.d.ts","sourceRoot":"","sources":["../../src/recipes/github-gist.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,MA4C9B,CAAC"}

package/dist/recipes/github-gist.js

@@ -0,0 +1,52 @@
+/**
+ * Built-in recipe: GitHub Account verification via public Gist.
+ *
+ * The user creates a public gist named keytrace.json containing
+ * their claim ID and DID, then provides the gist URL for verification.
+ */
+export const githubGistRecipe = {
+    $type: "dev.keytrace.recipe",
+    type: "github-gist",
+    version: 1,
+    displayName: "GitHub Account (via Gist)",
+    params: [
+        {
+            key: "gistUrl",
+            label: "Gist URL",
+            type: "url",
+            placeholder: "https://gist.github.com/octocat/abc123...",
+            pattern: "^https://gist\\.github\\.com/([^/]+)/([a-f0-9]+)$",
+            extractFrom: "^https://gist\\.github\\.com/([^/]+)/",
+        },
+    ],
+    instructions: {
+        steps: [
+            "Go to https://gist.github.com",
+            "Create a new public gist",
+            "Name the file `keytrace.json`",
+            "Paste the verification content below into the file",
+            "Save the gist and paste the URL below",
+        ],
+        proofTemplate: '{\n  "keytrace": "{claimId}",\n  "did": "{did}"\n}',
+        proofLocation: "Public gist with keytrace.json",
+    },
+    verification: {
+        steps: [
+            {
+                action: "http-get",
+                url: "{gistUrl}/raw/keytrace.json",
+            },
+            {
+                action: "json-path",
+                selector: "$.keytrace",
+                expect: "equals:{claimId}",
+            },
+            {
+                action: "json-path",
+                selector: "$.did",
+                expect: "equals:{did}",
+            },
+        ],
+    },
+};
+//# sourceMappingURL=github-gist.js.map

package/dist/recipes/github-gist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-gist.js","sourceRoot":"","sources":["../../src/recipes/github-gist.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAW;IACtC,KAAK,EAAE,qBAAqB;IAC5B,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,2BAA2B;IACxC,MAAM,EAAE;QACN;YACE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,2CAA2C;YACxD,OAAO,EAAE,mDAAmD;YAC5D,WAAW,EAAE,uCAAuC;SACrD;KACF;IACD,YAAY,EAAE;QACZ,KAAK,EAAE;YACL,+BAA+B;YAC/B,0BAA0B;YAC1B,+BAA+B;YAC/B,oDAAoD;YACpD,uCAAuC;SACxC;QACD,aAAa,EAAE,oDAAoD;QACnE,aAAa,EAAE,gCAAgC;KAChD;IACD,YAAY,EAAE;QACZ,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,UAAU;gBAClB,GAAG,EAAE,6BAA6B;aACnC;YACD;gBACE,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,kBAAkB;aAC3B;YACD;gBACE,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,cAAc;aACvB;SACF;KACF;CACF,CAAC"}

package/dist/recipes/index.d.ts

@@ -0,0 +1,3 @@
+export { githubGistRecipe } from "./github-gist.js";
+export { dnsTxtRecipe } from "./dns-txt.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/recipes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/recipes/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC"}

package/dist/recipes/index.js

@@ -0,0 +1,3 @@
+export { githubGistRecipe } from "./github-gist.js";
+export { dnsTxtRecipe } from "./dns-txt.js";
+//# sourceMappingURL=index.js.map

package/dist/recipes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/recipes/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC"}

package/dist/runner.d.ts

@@ -0,0 +1,7 @@
+import type { Recipe, ClaimContext, RunnerConfig, VerificationResult } from "./types.js";
+/**
+ * Execute a recipe's verification steps against a claim context.
+ * Returns a full result with per-step details. Stops on first failure.
+ */
+export declare function runRecipe(recipe: Recipe, context: ClaimContext, config?: RunnerConfig): Promise<VerificationResult>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAyC,MAAM,YAAY,CAAC;AAWhI;;;GAGG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAuCzH"}

package/dist/runner.js

@@ -0,0 +1,100 @@
+import { interpolate } from "./interpolate.js";
+import { checkExpect } from "./expect.js";
+import { httpGet } from "./actions/http-get.js";
+import { jsonPath } from "./actions/json-path.js";
+import { cssSelect } from "./actions/css-select.js";
+import { regexMatch } from "./actions/regex-match.js";
+import { dnsTxt } from "./actions/dns-txt.js";
+const DEFAULT_TIMEOUT = 10_000;
+/**
+ * Execute a recipe's verification steps against a claim context.
+ * Returns a full result with per-step details. Stops on first failure.
+ */
+export async function runRecipe(recipe, context, config) {
+    const fetchFn = config?.fetch ?? globalThis.fetch;
+    const timeout = config?.timeout ?? DEFAULT_TIMEOUT;
+    const steps = [];
+    // Extract subject from params if a param defines extractFrom
+    let subject;
+    if (recipe.params) {
+        for (const param of recipe.params) {
+            if (param.extractFrom && context.params[param.key]) {
+                const regex = new RegExp(param.extractFrom);
+                const match = context.params[param.key].match(regex);
+                if (match?.[1]) {
+                    subject = `${recipe.type.split("-")[0]}:${match[1]}`;
+                }
+            }
+        }
+    }
+    // Tracks the last "fetch" output (http-get, dns-txt) for extraction steps to use.
+    // Extraction steps (json-path, css-select, regex-match) always operate on the
+    // last fetch output, not on each other's output.
+    let lastFetchOutput = undefined;
+    for (const step of recipe.verification.steps) {
+        const isFetchAction = step.action === "http-get" || step.action === "dns-txt";
+        const result = await executeStep(step, context, lastFetchOutput, fetchFn, timeout);
+        steps.push(result);
+        if (!result.success) {
+            return { success: false, steps, subject, error: result.error };
+        }
+        if (isFetchAction) {
+            lastFetchOutput = result.data;
+        }
+    }
+    return { success: true, steps, subject };
+}
+async function executeStep(step, context, previousOutput, fetchFn, timeout) {
+    try {
+        let data;
+        switch (step.action) {
+            case "http-get": {
+                const url = interpolate(step.url, context);
+                data = await httpGet(url, fetchFn, timeout);
+                break;
+            }
+            case "json-path": {
+                const selector = interpolate(step.selector, context);
+                const input = previousOutput ?? "";
+                data = jsonPath(input, selector);
+                break;
+            }
+            case "css-select": {
+                const selector = interpolate(step.selector, context);
+                const input = previousOutput;
+                if (typeof input !== "string") {
+                    throw new Error("css-select requires string input from a previous step");
+                }
+                data = cssSelect(input, selector);
+                break;
+            }
+            case "regex-match": {
+                const pattern = interpolate(step.pattern, context);
+                const input = typeof previousOutput === "string" ? previousOutput : String(previousOutput ?? "");
+                data = regexMatch(input, pattern);
+                break;
+            }
+            case "dns-txt": {
+                const domain = step.url ? interpolate(step.url, context) : interpolate(step.pattern, context);
+                data = await dnsTxt(domain);
+                break;
+            }
+            default:
+                throw new Error(`Unknown action: "${step.action}"`);
+        }
+        // Check expect if defined
+        if (step.expect) {
+            const expectStr = interpolate(step.expect, context);
+            const result = checkExpect(expectStr, data);
+            if (!result.pass) {
+                return { action: step.action, success: false, data, error: result.message };
+            }
+        }
+        return { action: step.action, success: true, data };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { action: step.action, success: false, error: message };
+    }
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,OAAqB,EAAE,MAAqB;IAC1F,MAAM,OAAO,GAAY,MAAM,EAAE,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAC3D,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,eAAe,CAAC;IACnD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,6DAA6D;IAC7D,IAAI,OAA2B,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACf,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,8EAA8E;IAC9E,iDAAiD;IACjD,IAAI,eAAe,GAAY,SAAS,CAAC;IAEzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACnF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjE,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAsB,EAAE,OAAqB,EAAE,cAAuB,EAAE,OAAgB,EAAE,OAAe;IAClI,IAAI,CAAC;QACH,IAAI,IAAa,CAAC;QAElB,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,GAAI,EAAE,OAAO,CAAC,CAAC;gBAC5C,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,MAAM;YACR,CAAC;YAED,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAS,EAAE,OAAO,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,cAAc,IAAI,EAAE,CAAC;gBACnC,IAAI,GAAG,QAAQ,CAAC,KAAwB,EAAE,QAAQ,CAAC,CAAC;gBACpD,MAAM;YACR,CAAC;YAED,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAS,EAAE,OAAO,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,cAAwB,CAAC;gBACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBAC3E,CAAC;gBACD,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAClC,MAAM;YACR,CAAC;YAED,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAQ,EAAE,OAAO,CAAC,CAAC;gBACpD,MAAM,KAAK,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;gBACjG,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAClC,MAAM;YACR,CAAC;YAED,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,OAAQ,EAAE,OAAO,CAAC,CAAC;gBAC/F,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM;YACR,CAAC;YAED;gBACE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACxD,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9E,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/serviceProviders/activitypub.d.ts

@@ -0,0 +1,10 @@
+import type { ServiceProvider } from "./types.js";
+/**
+ * ActivityPub (Mastodon/Fediverse) service provider
+ *
+ * Users prove ownership by adding their DID to their profile bio or fields.
+ * The claim URI is the profile URL (e.g., https://mastodon.social/@username)
+ */
+declare const activitypub: ServiceProvider;
+export default activitypub;
+//# sourceMappingURL=activitypub.d.ts.map

package/dist/serviceProviders/activitypub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activitypub.d.ts","sourceRoot":"","sources":["../../src/serviceProviders/activitypub.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;;;GAKG;AACH,QAAA,MAAM,WAAW,EAAE,eAyElB,CAAC;AAEF,eAAe,WAAW,CAAC"}

package/dist/serviceProviders/activitypub.js

@@ -0,0 +1,73 @@
+/**
+ * ActivityPub (Mastodon/Fediverse) service provider
+ *
+ * Users prove ownership by adding their DID to their profile bio or fields.
+ * The claim URI is the profile URL (e.g., https://mastodon.social/@username)
+ */
+const activitypub = {
+    id: "activitypub",
+    name: "Mastodon",
+    homepage: "https://joinmastodon.org",
+    // Match Mastodon-style profile URLs: https://instance/@username
+    reUri: /^https:\/\/([^/]+)\/@([^/]+)\/?$/,
+    // Could match other ActivityPub software with same URL pattern
+    isAmbiguous: true,
+    ui: {
+        description: "Link your Mastodon or Fediverse account",
+        icon: "at-sign",
+        inputLabel: "Profile URL",
+        inputPlaceholder: "https://mastodon.social/@username",
+        instructions: [
+            "Go to your Mastodon instance and open **Edit profile**",
+            "Add your DID to your **bio** or create a new **profile metadata field**",
+            "For metadata fields, set the label to `keytrace` and paste your DID as the value",
+            "Save your profile changes",
+            "Paste your full profile URL below (e.g., `https://mastodon.social/@username`)",
+        ],
+        proofTemplate: "{did}",
+    },
+    processURI(uri, match) {
+        const [, domain, username] = match;
+        return {
+            profile: {
+                display: `@${username}@${domain}`,
+                uri,
+            },
+            proof: {
+                request: {
+                    uri,
+                    fetcher: "activitypub",
+                    format: "json",
+                },
+                target: [
+                    // Check profile bio/summary (HTML content)
+                    { path: ["summary"], relation: "contains", format: "text" },
+                    // Check profile fields (Mastodon-style verification fields)
+                    { path: ["attachment", "*", "value"], relation: "contains", format: "text" },
+                ],
+            },
+        };
+    },
+    postprocess(data) {
+        const actor = data;
+        return {
+            displayName: actor.name || actor.preferredUsername,
+            avatarUrl: actor.icon?.url,
+        };
+    },
+    getProofText(did) {
+        return did;
+    },
+    getProofLocation() {
+        return `Add to your profile bio or a profile metadata field`;
+    },
+    tests: [
+        { uri: "https://mastodon.social/@alice", shouldMatch: true },
+        { uri: "https://fosstodon.org/@bob/", shouldMatch: true },
+        { uri: "https://hachyderm.io/@user", shouldMatch: true },
+        { uri: "https://twitter.com/alice", shouldMatch: false },
+        { uri: "https://mastodon.social/alice", shouldMatch: false },
+    ],
+};
+export default activitypub;
+//# sourceMappingURL=activitypub.js.map

package/dist/serviceProviders/activitypub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activitypub.js","sourceRoot":"","sources":["../../src/serviceProviders/activitypub.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,WAAW,GAAoB;IACnC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,0BAA0B;IAEpC,gEAAgE;IAChE,KAAK,EAAE,kCAAkC;IAEzC,+DAA+D;IAC/D,WAAW,EAAE,IAAI;IAEjB,EAAE,EAAE;QACF,WAAW,EAAE,yCAAyC;QACtD,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,aAAa;QACzB,gBAAgB,EAAE,mCAAmC;QACrD,YAAY,EAAE;YACZ,wDAAwD;YACxD,yEAAyE;YACzE,kFAAkF;YAClF,2BAA2B;YAC3B,+EAA+E;SAChF;QACD,aAAa,EAAE,OAAO;KACvB;IAED,UAAU,CAAC,GAAG,EAAE,KAAK;QACnB,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;QAEnC,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI,QAAQ,IAAI,MAAM,EAAE;gBACjC,GAAG;aACJ;YACD,KAAK,EAAE;gBACL,OAAO,EAAE;oBACP,GAAG;oBACH,OAAO,EAAE,aAAa;oBACtB,MAAM,EAAE,MAAM;iBACf;gBACD,MAAM,EAAE;oBACN,2CAA2C;oBAC3C,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC3D,4DAA4D;oBAC5D,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE;iBAC7E;aACF;SACF,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,IAAI;QACd,MAAM,KAAK,GAAG,IAA8E,CAAC;QAC7F,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,iBAAiB;YAClD,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG;SAC3B,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,GAAG;QACd,OAAO,GAAG,CAAC;IACb,CAAC;IAED,gBAAgB;QACd,OAAO,qDAAqD,CAAC;IAC/D,CAAC;IAED,KAAK,EAAE;QACL,EAAE,GAAG,EAAE,gCAAgC,EAAE,WAAW,EAAE,IAAI,EAAE;QAC5D,EAAE,GAAG,EAAE,6BAA6B,EAAE,WAAW,EAAE,IAAI,EAAE;QACzD,EAAE,GAAG,EAAE,4BAA4B,EAAE,WAAW,EAAE,IAAI,EAAE;QACxD,EAAE,GAAG,EAAE,2BAA2B,EAAE,WAAW,EAAE,KAAK,EAAE;QACxD,EAAE,GAAG,EAAE,+BAA+B,EAAE,WAAW,EAAE,KAAK,EAAE;KAC7D;CACF,CAAC;AAEF,eAAe,WAAW,CAAC"}

package/dist/serviceProviders/bsky.d.ts

@@ -0,0 +1,10 @@
+import type { ServiceProvider } from "./types.js";
+/**
+ * Bluesky service provider
+ *
+ * Users prove ownership of another Bluesky account by adding their DID to the profile bio.
+ * The claim URI is the bsky.app profile URL.
+ */
+declare const bsky: ServiceProvider;
+export default bsky;
+//# sourceMappingURL=bsky.d.ts.map

package/dist/serviceProviders/bsky.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bsky.d.ts","sourceRoot":"","sources":["../../src/serviceProviders/bsky.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;;;GAKG;AACH,QAAA,MAAM,IAAI,EAAE,eA8DX,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/serviceProviders/bsky.js

@@ -0,0 +1,63 @@
+/**
+ * Bluesky service provider
+ *
+ * Users prove ownership of another Bluesky account by adding their DID to the profile bio.
+ * The claim URI is the bsky.app profile URL.
+ */
+const bsky = {
+    id: "bsky",
+    name: "Bluesky",
+    homepage: "https://bsky.app",
+    // Match Bluesky profile URLs: https://bsky.app/profile/handle or did
+    reUri: /^https:\/\/bsky\.app\/profile\/([^/]+)\/?$/,
+    isAmbiguous: false,
+    ui: {
+        description: "Link another Bluesky account",
+        icon: "cloud",
+        inputLabel: "Profile URL",
+        inputPlaceholder: "https://bsky.app/profile/username.bsky.social",
+        instructions: [
+            "Log into the Bluesky account you want to link",
+            "Go to **Settings** → **Edit Profile**",
+            "Add your DID to your **bio** (the verification DID, not this account's DID)",
+            "Save your profile changes",
+            "Paste the profile URL below",
+        ],
+        proofTemplate: "{did}",
+    },
+    processURI(uri, match) {
+        const [, handle] = match;
+        return {
+            profile: {
+                display: handle.startsWith("did:") ? handle : `@${handle}`,
+                uri,
+            },
+            proof: {
+                request: {
+                    uri: `https://public.api.bsky.app/xrpc/app.bsky.actor.getProfile?actor=${encodeURIComponent(handle)}`,
+                    fetcher: "http",
+                    format: "json",
+                },
+                target: [
+                    // Check profile description/bio
+                    { path: ["description"], relation: "contains", format: "text" },
+                ],
+            },
+        };
+    },
+    getProofText(did) {
+        return did;
+    },
+    getProofLocation() {
+        return `Add to your profile bio`;
+    },
+    tests: [
+        { uri: "https://bsky.app/profile/alice.bsky.social", shouldMatch: true },
+        { uri: "https://bsky.app/profile/did:plc:abc123", shouldMatch: true },
+        { uri: "https://bsky.app/profile/alice.bsky.social/", shouldMatch: true },
+        { uri: "https://bsky.app/profile/alice/post/123", shouldMatch: false },
+        { uri: "https://bsky.social/profile/alice", shouldMatch: false },
+    ],
+};
+export default bsky;
+//# sourceMappingURL=bsky.js.map

package/dist/serviceProviders/bsky.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bsky.js","sourceRoot":"","sources":["../../src/serviceProviders/bsky.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,IAAI,GAAoB;IAC5B,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,kBAAkB;IAE5B,qEAAqE;IACrE,KAAK,EAAE,4CAA4C;IAEnD,WAAW,EAAE,KAAK;IAElB,EAAE,EAAE;QACF,WAAW,EAAE,8BAA8B;QAC3C,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,aAAa;QACzB,gBAAgB,EAAE,+CAA+C;QACjE,YAAY,EAAE;YACZ,+CAA+C;YAC/C,uCAAuC;YACvC,6EAA6E;YAC7E,2BAA2B;YAC3B,6BAA6B;SAC9B;QACD,aAAa,EAAE,OAAO;KACvB;IAED,UAAU,CAAC,GAAG,EAAE,KAAK;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;QAEzB,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE;gBAC1D,GAAG;aACJ;YACD,KAAK,EAAE;gBACL,OAAO,EAAE;oBACP,GAAG,EAAE,oEAAoE,kBAAkB,CAAC,MAAM,CAAC,EAAE;oBACrG,OAAO,EAAE,MAAM;oBACf,MAAM,EAAE,MAAM;iBACf;gBACD,MAAM,EAAE;oBACN,gCAAgC;oBAChC,EAAE,IAAI,EAAE,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE;iBAChE;aACF;SACF,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,GAAG;QACd,OAAO,GAAG,CAAC;IACb,CAAC;IAED,gBAAgB;QACd,OAAO,yBAAyB,CAAC;IACnC,CAAC;IAED,KAAK,EAAE;QACL,EAAE,GAAG,EAAE,4CAA4C,EAAE,WAAW,EAAE,IAAI,EAAE;QACxE,EAAE,GAAG,EAAE,yCAAyC,EAAE,WAAW,EAAE,IAAI,EAAE;QACrE,EAAE,GAAG,EAAE,6CAA6C,EAAE,WAAW,EAAE,IAAI,EAAE;QACzE,EAAE,GAAG,EAAE,yCAAyC,EAAE,WAAW,EAAE,KAAK,EAAE;QACtE,EAAE,GAAG,EAAE,mCAAmC,EAAE,WAAW,EAAE,KAAK,EAAE;KACjE;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}