Hi

\",\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport {\n readFile,\n serveFile,\n} from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", (c) => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use\n `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})`\n instead of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode\n symbols, or icon fonts/libraries instead\n- **AI Image:** To inline generate an AI image use:\n `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys)\n unless otherwise specified\n- **Error Debugging:** Add\n `` to HTML to capture\n client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local\n resolution; Avoid catches that merely log or return 500s. Let errors bubble up\n with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but\n generally prefer APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure\n compatibility on server and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer\n simple static client-side sites\n- **React Configuration:** When using React libraries, pin versions with\n `?deps=react@18.2.0,react-dom@18.2.0` and start the file with\n `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same\n version\n- **Styling:** Default to using TailwindCSS via\n `` unless otherwise\n specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- Do NOT use Hono serveStatic middleware\n- **Static asset serving:** Use the utility functions to read and serve project\n files:\n\n ```ts\n import { readFile, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\n\n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", (c) => serveFile(c.req.path, import.meta.url));\n\n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async (c) => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n\n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n\n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to\n see full stack traces:\n\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:**\n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of\n React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with\n `export default app.fetch // This is the entry point for HTTP vals`\n\n6. **Hono Peculiarities:**\n\n- NEVER EVER write this line:\n `import { serveStatic } from 'https://esm.sh/hono@3.11.7/middleware';`\n - Instead use:\n `import { readFile, serveFile } from \"https://esm.town/v/std/utils/index.ts\";`\n- NEVER EVER write this line:\n `import { cors } from \"https://esm.sh/@hono/cors@0.0.6\";`.\n - Val Town automatically handles CORS.\n- If you need cookies, use: import { deleteCookie, getCookie, setCookie } from\n \"npm:hono/cookie\";\n","children",[],[324],"8617183e-8094-11f0-a977-0224a6c84d84","deno.json","0198d9f8-487c-763c-a563-14831902914e",["D",1756003583839],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"include\": [\n \"backend/**/*\",\n \"frontend/**/*\",\n \"tests/**/*\",\n \"shared/**/*\",\n \"deno:/https/esm.town/**/*\"\n ],\n \"exclude\": [\n \"deno:/https/esm.town/node_modules/**/*\",\n \"deno:/https/esm.town/third_party/**/*\"\n ],\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n },\n \"tasks\": {\n \"quality\": \"deno fmt && deno lint && deno test --allow-import --allow-env\",\n \"deploy\": \"deno task quality && vt push\"\n }\n}\n",[],[332],"861715e6-8094-11f0-a977-0224a6c84d84","cronjob.ts","0198d9f8-487c-763c-a563-136fd8df53fe",["D",1756003583839],"interval","import { runMigrations } from \"./backend/database/migrations.ts\";\nimport { SyncService } from \"./backend/services/sync-service.ts\";\nimport { SQLiteStorageProvider } from \"./backend/storage/sqlite-storage.ts\";\nimport { ATProtoClientAdapter } from \"./backend/services/atproto-client-adapter.ts\";\nimport { MastodonClientMasto } from \"./backend/services/mastodon-client-masto.ts\";\n\n/**\n * Cron job for syncing posts from ATProto to Mastodon\n *\n * This function runs on a schedule (15 minutes for free tier)\n * and syncs posts for the single user.\n */\nexport default async function () {\n console.log(\"Cron job started:\", new Date().toISOString());\n\n try {\n // Ensure database is initialized\n await runMigrations();\n\n // Set up dependencies for the sync service\n const storage = new SQLiteStorageProvider();\n const syncService = new SyncService({\n storage,\n createATProtoClient: (\n pdsUrl,\n accessToken,\n refreshToken,\n did,\n onTokenRefresh,\n appPassword,\n ) =>\n new ATProtoClientAdapter(\n pdsUrl,\n accessToken,\n refreshToken,\n did,\n onTokenRefresh,\n appPassword,\n ),\n createMastodonClient: (instanceUrl, accessToken) =>\n new MastodonClientMasto(instanceUrl, accessToken),\n });\n\n // Run sync for the single user\n const result = await syncService.syncUser();\n\n if (!result.success) {\n console.error(\"Sync failed:\", result.errors);\n } else {\n console.log(\n `Sync completed: ${result.postsSuccessful} posts synced, ${result.postsFailed} failed`,\n );\n }\n\n // Clean up old post logs to prevent database bloat\n try {\n await storage.cullOldPostLogs(100); // Keep only the 100 most recent posts\n console.log(\"Old post logs cleaned up successfully\");\n } catch (error) {\n console.error(\"Failed to clean up old post logs:\", error);\n // Don't fail the cron job if cleanup fails\n }\n\n console.log(\"Cron job completed successfully\");\n } catch (error) {\n console.error(\"Cron job failed:\", error);\n\n // In a production environment, you might want to send an alert\n // or log to an external service here\n }\n}\n",[],[339],"861714ce-8094-11f0-a977-0224a6c84d84","config.ts","0198d9f8-487c-763c-a563-0e337e55becb",["D",1756003583839],"/**\n * Bridge Configuration\n *\n * Edit these settings to customize the behavior of your ATProto to Fediverse bridge.\n * This file contains all the configuration options that users might want to modify\n * when running their own instance.\n */\n\nexport const BRIDGE_CONFIG = {\n /**\n * Post Filtering Options\n * Configure which types of posts should be synced to Mastodon\n */\n filters: {\n // Skip posts that are replies to other posts\n skip_replies: true,\n\n // Skip posts that start with @mentions\n skip_mentions: true,\n\n // Skip reposts/quote posts (since Mastodon can't display the referenced content)\n skip_reposts: true,\n },\n\n /**\n * Media Handling Options\n * Configure how images and videos are processed\n */\n media: {\n // Include images and videos in synced posts\n include_media: true,\n\n // Compress images before uploading (reduces quality but saves bandwidth)\n compress_images: false,\n },\n\n /**\n * Sync Behavior Options\n * Configure general sync behavior\n */\n sync: {\n // Maximum number of posts to fetch in each sync operation\n max_posts_per_sync: 50,\n\n // Retry configuration for failed posts\n retry: {\n maxRetries: 3,\n baseDelay: 1000,\n maxDelay: 30000,\n backoffFactor: 2,\n },\n },\n} as const;\n\n/**\n * Type helper for the config object\n */\nexport type BridgeConfig = typeof BRIDGE_CONFIG;\n",[],[347],"86171366-8094-11f0-a977-0224a6c84d84","TODO.md","0198d9f8-487c-763c-a563-08fb5180a7da",["D",1756003583839],"# TODO\n\n## High Priority\n\n- [ ] fixing and testing handles in posts\n- [ ] making sure language settings for posts are saved for mastodon too (double\n check lang formats)\n\n## Backlog\n\n(Add future tasks here)\n",[],[354],"86170a74-8094-11f0-a977-0224a6c84d84","README.md","0198d9f8-487c-763c-a563-04992ab5c125",["D",1756003583839],"# ATProto to Fediverse Bridge\n\n[![Deno](https://github.com/tijs/atproto-to-fediverse/actions/workflows/deno.yml/badge.svg)](https://github.com/tijs/atproto-to-fediverse/actions/workflows/deno.yml)\n\nA single-user bridge service that automatically cross-posts from your Bluesky\naccount to your Mastodon account. Built specifically for\n[Val.town](https://val.town) with TypeScript and Deno.\n\n## What it does\n\n- **Connects your accounts**: Securely links your Bluesky and Mastodon accounts\n using OAuth\n- **Automatic syncing**: Checks for new Bluesky posts every 15 minutes and\n cross-posts them to Mastodon\n- **Smart filtering**: Only syncs regular posts, not replies, reposts, or posts\n that start with mentions, so hopefully only content that makes sense in the\n Mastodon context\n- **Smart transformations**: Converts Bluesky mentions (@handle.bsky.social) to\n profile links since they don't exist on Mastodon\n- **Media support**: Uploads images and videos from Bluesky to your Mastodon\n instance\n- **Duplicate prevention**: Tracks synced posts to avoid posting the same\n content twice\n- **Error handling**: Retries failed posts and logs errors for troubleshooting\n\n## Features\n\n✅ **OAuth authentication** for both Bluesky and Mastodon\\\n✅ **Media cross-posting** (images & videos)\\\n✅ **Mention transformation** (handles → profile links)\\\n✅ **Duplicate prevention** via content hashing\\\n✅ **Retry mechanism** with exponential backoff\\\n✅ **Error logging** and sync tracking\\\n✅ **Setup wizard** for easy configuration\n\n## Setup on Val.town\n\n### 1. Clone my Val\n\nJust clone my\n[https://www.val.town/x/tijs/atproto-to-fediverse](https://www.val.town/x/tijs/atproto-to-fediverse)\nval\n\n### 2. Configure Val.town Triggers\n\n**HTTP Trigger** (for the web interface and API):\n\n- Set `backend/index.ts` as an **HTTP val**\n- This serves the setup wizard and handles OAuth callbacks\n\n**Cron Trigger** (for automatic syncing):\n\n- Set `cronjob.ts` as a **Cron val**\n- Schedule: `*/15 * * * *` (every 15 minutes)\n- For paid accounts, you can use shorter intervals like `*/5 * * * *` (every 5\n minutes)\n\n### 3. Environment Variables\n\nSet these environment variables in your Val.town account:\n\n#### Required Variables\n\n```bash\n# Your Val.town deployment URL\nVALTOWN_URL=https://your-val-url.web.val.run\n\n# Bluesky App Password for sync service (services do not work with oauth yet on bsky)\nATPROTO_APP_PASSWORD=your-bluesky-app-password\n\n# Security: restrict login to specific handle only\nATPROTO_ALLOWED_HANDLE=your.handle.bsky.social\n```\n\n#### How to Get Your App Password\n\n1. Go to\n [Bluesky Settings > App Passwords](https://bsky.app/settings/app-passwords)\n2. Create a new App Password (name it something like \"Bridge Service\")\n3. Copy the generated password and set it as `ATPROTO_APP_PASSWORD`\n\n#### Security Configuration\n\nThe `ATPROTO_ALLOWED_HANDLE` variable restricts OAuth setup to only your Bluesky\nhandle, preventing others from hijacking your single-user bridge service.\n\n### 4. OAuth Setup\n\n#### For ATProto/Bluesky\n\nThe OAuth client metadata is automatically generated based on your `VALTOWN_URL`\nenvironment variable. No manual configuration is needed!\n\nThe client metadata will be available at:\n\n- `https://your-val-url.web.val.run/client`\n\n#### For Mastodon\n\nThe service automatically registers with your Mastodon instance during setup -\nno manual configuration needed.\n\n### 5. Run the Setup Wizard\n\n1. Visit your HTTP val URL (e.g., `https://your-val-url.web.val.run`)\n2. **Check the Setup Status**: The landing page shows a checklist of what\n environment variables need to be configured\n3. **Configure missing variables**: Set any missing environment variables in\n your Val.town settings\n4. Click \"Get Started\" to begin the setup wizard once all required variables are\n set\n5. Connect your Bluesky account by entering your handle\n6. Connect your Mastodon account by entering your instance URL\n7. Complete the setup - that's all!\n\n## Usage\n\nOnce configured, the service runs automatically:\n\n1. **Every 15 minutes** (or your configured interval), the cron job runs\n2. It fetches new posts from your Bluesky account\n3. Transforms the content (mentions become profile links)\n4. Uploads any media to your Mastodon instance\n5. Creates the cross-post on Mastodon\n6. Logs the result for your review\n\n## What Gets Cross-Posted\n\n**✅ Included:**\n\n- Regular posts with text\n- Posts with images/videos\n- Posts with links and hashtags\n- Posts with mentions (converted to profile links)\n\n**❌ Excluded:**\n\n- Replies to other posts\n- Posts that start with mentions (e.g., \"@handle.bsky.social blah blah\") - these\n are typically conversation starters\n- Empty posts\n- Posts you've already cross-posted\n- Re-posts (posts that embed another post)\n\n## Dashboard Features\n\n- **Connection Status**: See which accounts are connected\n- **Sync Controls**: Enable/disable auto-sync and trigger manual syncs\n- **Recent Activity**: View recently synced posts and their status\n- **Error Logs**: Track sync failures and troubleshoot issues\n- **Disconnect Options**: Disconnect individual accounts if needed\n\n## Monitoring\n\nVisit your val's dashboard to see:\n\n- Setup status and account connections\n- Recent sync activity and statistics\n- Error logs for troubleshooting\n- Post sync history\n\n## Limitations\n\n- **Free Val.town accounts**: 15-minute minimum sync interval\n- **Bluesky media limits**: 1MB images, 100MB videos\n- **Mastodon compatibility**: Works with all Mastodon instances\n- **Single user**: Designed for personal use (one Bluesky → one Mastodon)\n\n## Troubleshooting\n\n**Setup issues**: Check the setup status checklist on the landing page for\nmissing environment variables\\\n**OAuth failures**: Ensure your `VALTOWN_URL` is publicly accessible (client\nmetadata is auto-generated at `/client`)\\\n**\"Unauthorized\" errors**: Verify `ATPROTO_ALLOWED_HANDLE` matches your exact\nBluesky handle\\\n**App Password errors**: Generate a new App Password in Bluesky settings and\nupdate `ATPROTO_APP_PASSWORD`\\\n**Sync not working**: Verify both accounts are connected in the dashboard\\\n**Missing posts**: Check the sync logs for specific error messages\\\n**Media upload fails**: Bluesky/Mastodon may have different file size limits\n\n## Privacy & Security\n\n- All tokens are stored securely in SQLite\n- No data leaves your Val.town instance\n- OAuth follows security best practices (PKCE, DPoP)\n- **Single-user security**: `ATPROTO_ALLOWED_HANDLE` restricts access to your\n handle only\n- **App Password option**: More reliable than OAuth tokens for automated\n services\n- You can disconnect accounts anytime from the dashboard\n- Single-user architecture prevents data mixing\n\n## Support\n\nThis is an open-source project. For issues or feature requests, check the\nrepository or Val.town community forums.\n\n---\n\n## Built with ❤️ for the decentralized social web\n",[],[361],"8616ff98-8094-11f0-a977-0224a6c84d84","CLAUDE.md","0198d9f8-487c-763c-a563-022e0932832c",["D",1756003583839],"# CLAUDE.md\n\nThis file provides guidance to Claude Code (claude.ai/code) when working with\ncode in this repository.\n\n## Development Commands\n\n### Testing\n\n```bash\n# Run all tests\ndeno test --allow-import --allow-env\n\n# Run specific test file\ndeno test --allow-import --allow-env tests/sync-service.test.ts\ndeno test --allow-import --allow-env tests/post-transformer.test.ts\ndeno test --allow-import --allow-env tests/storage.test.ts\n\n# Run single test case\ndeno test --allow-import --allow-env tests/sync-service.test.ts --filter \"should sync posts successfully\"\n```\n\n### Linting\n\n```bash\n# Lint all files\ndeno lint\n\n# Format code\ndeno fmt\n\n# Type check\ndeno check backend/index.ts\ndeno check cronjob.ts\n```\n\n### Val.town Deployment\n\n- Set `backend/index.ts` as HTTP val (serves web interface and API)\n- Set `cronjob.ts` as Cron val with schedule `*/15 * * * *` (every 15 minutes)\n- You can `vt push` to push changes to valtown so you can test the updated\n online endpoints\n\n### Environment Setup\n\n- Set `VALTOWN_URL` environment variable to your Val.town URL (e.g.,\n `https://your-username--unique-id.web.val.run`)\n- Set `ATPROTO_APP_PASSWORD` environment variable to your Bluesky App Password\n for sync service\n- Set `ATPROTO_ALLOWED_HANDLE` environment variable to your Bluesky handle\n (e.g., `username.bsky.social`) to restrict OAuth setup to your account only\n- The client metadata is automatically generated at `/client` endpoint\n\n#### Creating a Bluesky App Password\n\n1. Go to Bluesky Settings → Privacy and Security → App Passwords\n2. Click \"Add App Password\"\n3. Give it a name like \"ATProto to Fediverse Sync\"\n4. Copy the generated password and set it as `ATPROTO_APP_PASSWORD` environment\n variable\n5. The sync service will automatically use App Password authentication when\n available\n\n#### Security Setup\n\nThis is a **single-user service**. To prevent unauthorized users from hijacking\nyour bridge:\n\n1. **Set `ATPROTO_ALLOWED_HANDLE`** to your Bluesky handle (e.g., `tijs.org` or\n `username.bsky.social`)\n2. **Keep your setup URL private** - anyone with the URL can attempt OAuth, but\n only your handle will be accepted\n3. **OAuth verification**: The service will reject OAuth attempts from any\n handle that doesn't match `ATPROTO_ALLOWED_HANDLE`\n\nExample rejection message:\n\n```\n\"This service is configured for tijs.org only. You are logged in as someone.else.bsky.social.\"\n```\n\n## Workflow Recommendations\n\n- Make it a point to run deno lint, test and fmt after any big change\n\n## Debugging Tips\n\n- You can use curl to check endpoints yourself if you are debugging\n\n## Architecture Overview\n\nThis is a **single-user bridge service** that cross-posts from Bluesky to\nMastodon, built specifically for Val.town with dependency injection for\ntestability.\n\n### Core Architecture Pattern\n\nThe codebase follows a **dependency injection pattern** with clear separation\nbetween:\n\n- **Interfaces** (`backend/interfaces/`) - Abstract contracts for storage and\n HTTP clients\n- **Implementations** (`backend/storage/`, `backend/services/`) - Concrete\n implementations\n- **Tests** (`tests/`) - Use in-memory mocks for fast, isolated testing\n\n### Key Architectural Components\n\n**Storage Layer**: Uses abstract `StorageProvider` interface with SQLite\nproduction implementation and in-memory test implementation. **Single-user\narchitecture** - all database tables enforce single-row constraints with\n`CHECK (id = 1)`.\n\n**HTTP Client Layer**: ATProto and Mastodon interactions are abstracted through\ninterfaces, allowing mock implementations for testing.\n\n**Service Layer**: `SyncService` (dependency injection version) accepts\ndependencies via constructor injection, making it fully testable without\nexternal dependencies. **No userId parameters** - all methods work with the\nsingle user.\n\n**OAuth Flow**: Two separate OAuth implementations (ATProto uses PKCE + DPoP,\nMastodon uses traditional OAuth2) handled in `backend/routes/oauth.ts`.\n\n**Session Management**: SQLite-backed sessions for Val.town persistence\n(serverless environment doesn't persist in-memory data).\n\n### Data Flow\n\n1. **Setup**: User runs setup wizard → OAuth tokens stored in SQLite (single\n user account)\n2. **Sync**: Cron job (`cronjob.ts`) → `SyncService.syncUser()` → fetches posts\n from ATProto → transforms content → posts to Mastodon\n3. **Transformation**: `PostTransformer` converts Bluesky mentions to profile\n links since Mastodon handles don't exist cross-platform\n4. **Tracking**: Every post sync is tracked in database with status\n (pending/success/failed) and retry logic\n\n### File Structure Logic\n\n- `backend/index.ts` - Main HTTP server (Hono app) serving setup wizard and\n OAuth callbacks\n- `cronjob.ts` - Scheduled sync job (runs every 15 minutes)\n- `backend/services/sync-service-di.ts` - **Main sync logic** with dependency\n injection (single-user)\n- `backend/services/sync-service.ts` - Alternative sync service (simplified,\n single-user)\n- `backend/interfaces/` - Abstract contracts for testability (single-user\n interfaces)\n- `backend/storage/` - SQLite (production) and in-memory (testing)\n implementations\n- `backend/database/` - Database schema and queries (single-user constraints)\n- `backend/lib/` - Session management and debug logging\n- `frontend/` - Multiple HTML pages and React components (landing, setup,\n dashboard)\n- `shared/types.ts` - TypeScript interfaces shared between frontend and backend\n\n### Testing Strategy\n\nTests use **in-memory storage** and **mock HTTP clients** for fast, isolated\ntesting:\n\n- `InMemoryStorageProvider` - Full single-user storage implementation in memory\n- `MockATProtoClient` / `MockMastodonClient` - Controllable mock API clients\n- Tests verify business logic without external dependencies\n- All tests updated for single-user architecture (no userId parameters)\n\n### Val.town Specifics\n\nBuilt for Val.town's serverless environment:\n\n- Uses Val.town's SQLite hosting (`https://esm.town/v/stevekrouse/sqlite`)\n- Uses Val.town utility functions (`https://esm.town/v/std/utils`)\n- Follows Val.town's file serving patterns for static assets\n- Environment variables for OAuth configuration\n- SQLite-backed sessions for persistence across serverless requests\n- Single-user architecture perfect for personal Val.town deployments\n\n### OAuth Implementation Details\n\n**ATProto OAuth**: Uses PKCE flow with DPoP (Demonstration of Proof of\nPossession) for enhanced security. Client metadata is automatically served at\n`/client` endpoint.\n\n**Mastodon OAuth**: Automatically registers app with user's Mastodon instance\nduring setup flow.\n\n**Session Management**: Cookie-based sessions stored in SQLite for persistence\nin serverless environment.\n\n### Content Transformation Logic\n\nThe `PostTransformer` handles the key business logic:\n\n- Converts `@handle.bsky.social` mentions to\n `https://bsky.app/profile/handle.bsky.social` links\n- Extracts and processes media (images/videos)\n- Generates content hashes for duplicate prevention\n- Handles ATProto facets (mentions, hashtags, links)\n\n### Error Handling & Retry Logic\n\nImplements exponential backoff retry mechanism:\n\n- 3 retry attempts by default\n- Base delay: 1 second, max delay: 30 seconds\n- Distinguishes between retryable (network, 5xx) and non-retryable errors\n- All errors logged to database for debugging\n- Debug logging system accessible via browser (`/api/debug/logs`) since Val.town\n doesn't provide server logs\n\n### Database Schema (Single-User)\n\n**Key principle**: All tables enforce single-row constraints with\n`CHECK (id = 1)`:\n\n- `bridge_user_accounts_v1` - Single user account (no user_id field)\n- `bridge_settings_v1` - Single user settings\n- `bridge_post_tracking_v1` - Post sync tracking (no user_id field)\n- `bridge_sync_logs_v1` - Sync operation logs (no user_id field)\n- `sessions` - Cookie-based sessions\n\n### Storage Interface Changes\n\n**Single-user methods** (no userId parameters):\n\n- `getUserAccount()` / `getSingle()` - Get the single user\n- `updateUserAccount(updates)` / `updateSingle(updates)` - Update single user\n- `getSettings()` / `getSingle()` - Get single user settings\n- `postTracking.getByUri(uri)` - Get post by URI (no userId)\n- `postTracking.updateByUri(uri, updates)` - Update post by URI\n",[],[368],"8616fe94-8094-11f0-a977-0224a6c84d84",".vtignore","0198d9f8-487c-763c-a562-ffa0ce2a48e8",["D",1756003583839],".git\n.vscode\n.cursorrules\n.DS_Store\nnode_modules\nvendor",[],[375],"8616fd68-8094-11f0-a977-0224a6c84d84",".gitignore","0198d9f8-487c-763c-a562-f96de660ef8e",["D",1756003583839],"# OS generated files\n.DS_Store\n.DS_Store?\n._*\n.Spotlight-V100\n.Trashes\nehthumbs.db\nThumbs.db\n\n# IDE/Editor files\n.vscode/\n.idea/\n*.swp\n*.swo\n*~\n.cursorrules\n\n# Node.js\nnode_modules/\nnpm-debug.log*\nyarn-debug.log*\nyarn-error.log*\npackage-lock.json\nyarn.lock\n\n# Deno\n.deno/\ndeno.lock\n\n# Environment files\n.env\n.env.local\n.env.production\n.env.test\n\n# Val.town specific\n.vt/\nvendor/\n\n# Logs\n*.log\nlogs/\n\n# Database files\n*.db\n*.sqlite\n*.sqlite3\n\n# Build outputs\ndist/\nbuild/\n*.tsbuildinfo\n\n# Test coverage\ncoverage/\n\n# Temporary files\n*.tmp\n*.temp\ntemp/\ntmp/\n\n# Git\n.git/\n\n# Local development\n.local/\nlocal/\n\n# Deployment-specific files\nclient-metadata.json",[],[382],["D",1756003583839],[],[18,79],["D",1756003583839],[],[18,91],["D",1756003583839],[],[18,97],["D",1756003583839],[],[18,103],["D",1756003583839],[],[18,109],["D",1756003583839],[],[18,115],["D",1756003583839],[],[18,120],["D",1756003583839],[307,308,309,310,311,312,313],[18],"8616c5aa-8094-11f0-a977-0224a6c84d84","types.ts","0198d9f8-487c-763c-a562-d04c76d57f4d","0198d9f8-487c-763c-a562-d4567737945e",["D",1756003583839],"// Shared types for ATProto-to-Fediverse bridge\n\nexport interface ATProtoOAuthConfig {\n clientId: string; // https URL to client metadata\n redirectUri: string;\n scope: string;\n pdsUrl?: string; // Discovered from handle\n}\n\nexport interface MastodonOAuthConfig {\n instanceUrl: string;\n clientId: string;\n clientSecret: string;\n redirectUri: string;\n scope: string;\n}\n\nexport interface ATProtoPost {\n uri: string; // at:// URI\n cid: string;\n author: {\n did: string;\n handle: string;\n displayName?: string;\n avatar?: string;\n };\n record: {\n text: string;\n createdAt: string;\n embed?: {\n $type: string;\n images?: Array<{\n alt?: string;\n image: {\n ref: string;\n mimeType: string;\n size: number;\n };\n }>;\n video?: {\n ref: string;\n mimeType: string;\n size: number;\n };\n external?: {\n uri: string;\n title?: string;\n description?: string;\n thumb?: {\n ref: string;\n mimeType: string;\n size: number;\n };\n };\n record?: {\n uri: string;\n cid: string;\n };\n };\n facets?: Array<{\n index: {\n byteStart: number;\n byteEnd: number;\n };\n features: Array<{\n $type: string;\n did?: string; // for mentions\n uri?: string; // for links\n tag?: string; // for hashtags\n }>;\n }>;\n reply?: {\n root: { uri: string; cid: string };\n parent: { uri: string; cid: string };\n };\n };\n indexedAt: string;\n}\n\nexport interface MastodonPost {\n id: string;\n uri: string;\n url: string;\n content: string;\n created_at: string;\n media_attachments?: Array<{\n id: string;\n type: \"image\" | \"video\" | \"audio\";\n url: string;\n description?: string;\n }>;\n}\n\nexport interface MediaUpload {\n id: string;\n type: \"image\" | \"video\" | \"audio\";\n url: string;\n description?: string;\n}\n\nexport interface PostTransformation {\n text: string;\n media?: Array<{\n url: string;\n type: \"image\" | \"video\";\n description?: string;\n }>;\n mentions: Array<{\n handle: string;\n profileUrl: string;\n }>;\n links: Array<{\n url: string;\n displayText: string;\n }>;\n hashtags: string[];\n}\n\nexport interface SyncResult {\n success: boolean;\n postsProcessed: number;\n postsSuccessful: number;\n postsFailed: number;\n errors: Array<{\n postUri: string;\n message: string;\n retryable: boolean;\n }>;\n cursor?: string;\n}\n\nexport interface RetryConfig {\n maxRetries: number;\n baseDelay: number; // ms\n maxDelay: number; // ms\n backoffFactor: number;\n}\n\nexport interface BridgeConfig {\n atproto: ATProtoOAuthConfig;\n mastodon: MastodonOAuthConfig;\n sync: {\n enabled: boolean;\n intervalMinutes: number;\n batchSize: number;\n skipReplies: boolean;\n includeMedia: boolean;\n };\n retry: RetryConfig;\n}\n\nexport interface SetupStep {\n id: string;\n title: string;\n description: string;\n completed: boolean;\n error?: string;\n}\n\nexport interface SetupState {\n currentStep: number;\n steps: SetupStep[];\n userId: string;\n atprotoConnected: boolean;\n mastodonConnected: boolean;\n setupCompleted: boolean;\n}\n\nexport interface DashboardStats {\n totalPosts: number;\n successfulPosts: number;\n failedPosts: number;\n pendingPosts: number;\n lastSyncAt?: number;\n isConnected: boolean;\n syncEnabled: boolean;\n nextSyncAt?: number;\n}\n\nexport interface PostStatus {\n atprotoUri: string;\n atprotoCreatedAt: number;\n mastodonId?: string;\n mastodonUrl?: string;\n status: \"pending\" | \"success\" | \"failed\" | \"skipped\";\n errorMessage?: string;\n retryCount: number;\n syncedAt?: number;\n contentPreview: string;\n}\n",[],[420,413],"shared","8616c8ac-8094-11f0-a977-0224a6c84d84",["D",1756003583839],[305],[420],"8616bdee-8094-11f0-a977-0224a6c84d84","setup.tsx","0198d9f8-487c-763c-a562-c94c7d23fc23","0198d9f8-487c-763c-a562-ccf05267342e",["D",1756003583839],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState } from \"https://esm.sh/react@18.2.0\";\nimport ReactDOM from \"https://esm.sh/react-dom@18.2.0/client\";\n\ninterface SetupState {\n step: \"start\" | \"connecting-bluesky\" | \"connecting-mastodon\" | \"complete\";\n userId: string | null;\n error: string | null;\n loading: boolean;\n}\n\nfunction SetupApp() {\n const [state, setState] = useState({\n step: \"start\",\n userId: null,\n error: null,\n loading: false,\n });\n\n const [blueskyHandle, setBlueskyHandle] = useState(\"\");\n const [mastodonInstance, setMastodonInstance] = useState(\"\");\n\n const apiCall = async (endpoint: string, options: RequestInit = {}) => {\n const response = await fetch(`/api${endpoint}`, {\n headers: {\n \"Content-Type\": \"application/json\",\n ...options.headers,\n },\n ...options,\n });\n\n if (!response.ok) {\n const error = await response.json();\n throw new Error(error.error || \"API call failed\");\n }\n\n return response.json();\n };\n\n const startSetup = async () => {\n setState({ ...state, loading: true, error: null });\n try {\n const result = await apiCall(\"/setup/start\", { method: \"POST\" });\n\n // Store user ID in localStorage for future visits\n localStorage.setItem(\"bridge_user_id\", result.userId);\n\n setState({\n ...state,\n userId: result.userId,\n step: \"connecting-bluesky\",\n loading: false,\n });\n } catch (error) {\n setState({\n ...state,\n error: error.message,\n loading: false,\n });\n }\n };\n\n const connectBluesky = async () => {\n if (!blueskyHandle) {\n setState({ ...state, error: \"Please enter your Bluesky handle\" });\n return;\n }\n\n setState({ ...state, loading: true, error: null });\n try {\n const result = await apiCall(\n `/oauth/atproto/start?handle=${\n encodeURIComponent(blueskyHandle)\n }&user_id=${state.userId}`,\n );\n globalThis.location.href = result.authUrl;\n } catch (error) {\n setState({\n ...state,\n error: error.message,\n loading: false,\n });\n }\n };\n\n const connectMastodon = async () => {\n if (!mastodonInstance) {\n setState({ ...state, error: \"Please enter your Mastodon instance\" });\n return;\n }\n\n setState({ ...state, loading: true, error: null });\n try {\n const result = await apiCall(\n `/oauth/mastodon/start?instance_url=${\n encodeURIComponent(mastodonInstance)\n }&user_id=${state.userId}`,\n );\n globalThis.location.href = result.authUrl;\n } catch (error) {\n setState({\n ...state,\n error: error.message,\n loading: false,\n });\n }\n };\n\n const completeSetup = async () => {\n setState({ ...state, loading: true, error: null });\n try {\n await apiCall(`/setup/complete/${state.userId}`, { method: \"POST\" });\n globalThis.location.href = `/dashboard?user_id=${state.userId}`;\n } catch (error) {\n setState({\n ...state,\n error: error.message,\n loading: false,\n });\n }\n };\n\n // Check URL params for OAuth callbacks and localStorage for user ID\n React.useEffect(() => {\n const params = new URLSearchParams(globalThis.location.search);\n const step = params.get(\"step\");\n const urlUserId = params.get(\"user_id\");\n\n // Check localStorage for stored user ID\n const storedUserId = localStorage.getItem(\"bridge_user_id\");\n\n // Use URL user ID if available, otherwise use stored user ID\n const userId = urlUserId || storedUserId;\n\n if (userId) {\n setState((prev) => ({ ...prev, userId }));\n // Update localStorage with the current user ID\n localStorage.setItem(\"bridge_user_id\", userId);\n }\n\n if (step === \"mastodon\") {\n setState((prev) => ({ ...prev, step: \"connecting-mastodon\" }));\n } else if (step === \"complete\") {\n setState((prev) => ({ ...prev, step: \"complete\" }));\n }\n }, []);\n\n return (\n

\n Setup Your Bridge\n

\n Connect your Bluesky account to Mastodon for automatic cross-posting\n

\n\n {state.error && (\n

\n {state.error}\n {state.error.includes(\"/login\") && (\n \n {\" \"}\n \n Click here to login\n \n \n )}\n

\n )}\n\n {state.step === \"start\" && (\n

\n \n {state.loading ? \"Starting...\" : \"Get Started\"}\n \n

\n )}\n\n {state.step === \"connecting-bluesky\" && (\n

Step 1: Connect Bluesky

\n Enter your Bluesky handle to connect your account\n

\n \n Bluesky Handle\n \n setBlueskyHandle(e.target.value)}\n placeholder=\"your-handle.bsky.social\"\n className=\"w-full p-3 border border-gray-300 rounded-lg focus:outline-none focus:ring-2 focus:ring-blue-500\"\n />\n

\n \n {state.loading ? \"Connecting...\" : \"Connect Bluesky Account\"}\n \n

\n )}\n\n {state.step === \"connecting-mastodon\" && (\n

\n Step 2: Connect Mastodon\n

\n Enter your Mastodon instance to connect your account\n

\n \n Mastodon Instance\n \n setMastodonInstance(e.target.value)}\n placeholder=\"mastodon.social\"\n className=\"w-full p-3 border border-gray-300 rounded-lg focus:outline-none focus:ring-2 focus:ring-blue-500\"\n />\n

\n \n {state.loading ? \"Connecting...\" : \"Connect Mastodon Account\"}\n \n

\n )}\n\n {state.step === \"complete\" && (\n

Setup Complete!

\n ✓ Both accounts connected successfully\n

\n Your bridge is ready to start syncing posts from Bluesky to\n Mastodon.\n

\n \n {state.loading ? \"Completing...\" : \"Go to Dashboard\"}\n \n

\n )}\n

\n );\n}\n\n// Initialize React app\nconst root = ReactDOM.createRoot(document.getElementById(\"root\")!);\nroot.render();\n",[],[433,426],"frontend","8616bcd6-8094-11f0-a977-0224a6c84d84","setup.html","0198d9f8-487c-763c-a562-c6e036d114e3",["D",1756003583839],"\n\n \n \n \n Setup - ATProto to Fediverse Bridge\n \n \n \n \n

\n \n \n\n",[],[433,435],"8616b880-8094-11f0-a977-0224a6c84d84","login.tsx","0198d9f8-487c-763c-a562-c32fec33dc66",["D",1756003583839],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState } from \"https://esm.sh/react@18.2.0\";\nimport ReactDOM from \"https://esm.sh/react-dom@18.2.0/client\";\n\ninterface LoginState {\n handle: string;\n loading: boolean;\n error: string | null;\n}\n\nfunction LoginApp() {\n const [state, setState] = useState({\n handle: \"\",\n loading: false,\n error: null,\n });\n\n const handleLogin = async (e: React.FormEvent) => {\n e.preventDefault();\n\n if (!state.handle) {\n setState({ ...state, error: \"Please enter your Bluesky handle\" });\n return;\n }\n\n setState({ ...state, loading: true, error: null });\n\n try {\n const response = await fetch(\"/api/auth/login\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n handle: state.handle,\n }),\n });\n\n const data = await response.json();\n\n if (!response.ok) {\n setState({\n ...state,\n error: data.error || \"Login failed\",\n loading: false,\n });\n return;\n }\n\n // Redirect to dashboard on success\n globalThis.location.href = \"/dashboard\";\n } catch (_error) {\n setState({\n ...state,\n error: \"Network error. Please try again.\",\n loading: false,\n });\n }\n };\n\n return (\n

\n Welcome Back\n

\n Sign in with your Bluesky handle to access your dashboard\n

\n\n {state.error && (\n

{state.error}

\n )}\n\n

\n );\n}\n\n// Initialize React app\nconst root = ReactDOM.createRoot(document.getElementById(\"root\")!);\nroot.render();\n",[],[433,442],"8616b736-8094-11f0-a977-0224a6c84d84","login.html","0198d9f8-487c-763c-a562-bd5c465c91e7",["D",1756003583839],"\n\n \n \n \n Login - ATProto to Fediverse Bridge\n \n \n \n

\n \n \n\n",[],[433,449],"8616ae26-8094-11f0-a977-0224a6c84d84","landing.tsx","0198d9f8-487c-763c-a562-bba0ade6a113",["D",1756003583839],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport ReactDOM from \"https://esm.sh/react-dom@18.2.0/client\";\n\ninterface User {\n userId: string;\n handle: string;\n authenticated: boolean;\n}\n\ninterface EnvironmentVar {\n set: boolean;\n description: string;\n required: boolean;\n}\n\ninterface SetupStep {\n id: string;\n title: string;\n completed: boolean;\n description: string;\n}\n\ninterface SetupStatus {\n environmentVars: Record;\n setupSteps: SetupStep[];\n overallReady: boolean;\n}\n\nfunction LandingApp() {\n const [_user, setUser] = useState(null);\n const [loading, setLoading] = useState(true);\n const [setupStatus, setSetupStatus] = useState(null);\n\n useEffect(() => {\n checkAuth();\n fetchSetupStatus();\n }, []);\n\n const checkAuth = async () => {\n try {\n const response = await fetch(\"/api/auth/me\");\n if (response.ok) {\n const userData = await response.json();\n setUser(userData);\n // Redirect authenticated users to dashboard\n globalThis.location.href = \"/dashboard\";\n }\n } catch (_error) {\n console.log(\"Not authenticated\");\n } finally {\n setLoading(false);\n }\n };\n\n const fetchSetupStatus = async () => {\n try {\n const response = await fetch(\"/api/setup/status\");\n if (response.ok) {\n const status = await response.json();\n setSetupStatus(status);\n }\n } catch (error) {\n console.error(\"Failed to fetch setup status:\", error);\n }\n };\n\n const handleGetStarted = () => {\n globalThis.location.href = \"/setup\";\n };\n\n const handleLogin = () => {\n globalThis.location.href = \"/login\";\n };\n\n if (loading) {\n return (\n

\n );\n }\n\n return (\n

\n ATProto to Fediverse Bridge\n

\n Connect your Bluesky account to Mastodon and automatically\n cross-post your content\n

\n\n

\n \n Get Started\n \n\n \n Sign In\n \n

\n\n {/* Setup Status Checklist */}\n {setupStatus && (\n

\n Setup Status\n

\n Here's what you need to configure to get your bridge running:\n

\n\n {/* Environment Variables Section */}\n

\n 🔧\n Environment Variables\n

\n {Object.entries(setupStatus.environmentVars).map((\n [key, env],\n ) => (\n

\n {env.set\n ? (\n \n \n )\n : (\n \n \n )}\n

\n {key}\n

\n {env.description}\n

\n {!env.set && env.required && (\n

\n ⚠️ Required - needs to be set in environment\n

\n )}\n

\n ))}\n

\n\n {/* Setup Steps Section */}\n

\n 📋\n Setup Steps\n

\n {setupStatus.setupSteps.map((step) => (\n

\n {step.completed\n ? (\n \n \n )\n : (\n \n \n )}\n

\n {step.title}\n

\n {step.description}\n

\n ))}\n

\n\n {/* Overall Status */}\n \n

\n \n {setupStatus.overallReady ? \"✅\" : \"⚠️\"}\n \n

\n {setupStatus.overallReady\n ? \"Ready to go!\"\n : \"Setup required\"}\n

\n {setupStatus.overallReady\n ? \"All environment variables are configured. You can start setting up your accounts.\"\n : \"Please configure the missing environment variables before proceeding.\"}\n

\n )}\n\n

🔗 Easy Setup

\n Connect your accounts with secure OAuth in just a few clicks\n

⚡ Automatic Sync

\n Your Bluesky posts automatically appear on Mastodon\n

📱 Media Support

\n Images and videos are cross-posted along with your text\n

🔒 Private & Secure

\n All data is encrypted and stored securely\n

\n \n );\n}\n\n// Initialize React app\nconst root = ReactDOM.createRoot(document.getElementById(\"root\")!);\nroot.render();\n",[],[433,456],"8616ad18-8094-11f0-a977-0224a6c84d84","index.html","0198d9f8-487c-763c-a562-b68035c83f66",["D",1756003583839],"\n\n \n \n \n ATProto to Fediverse Bridge\n \n \n \n

\n \n \n\n",[],[433,463],"8616a278-8094-11f0-a977-0224a6c84d84","dashboard.tsx","0198d9f8-487c-763c-a562-b1dc218d9fc9",["D",1756003583839],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport ReactDOM from \"https://esm.sh/react-dom@18.2.0/client\";\n\ninterface DashboardData {\n user: {\n id: string;\n atproto_handle?: string;\n mastodon_username?: string;\n setup_completed: boolean;\n };\n stats: {\n posts_synced: number;\n posts_failed: number;\n posts_pending: number;\n last_sync: string | null;\n last_sync_duration_ms: number | null;\n last_sync_posts_fetched: number;\n last_sync_posts_synced: number;\n last_sync_posts_failed: number;\n };\n recent_posts: Array<{\n id: number;\n atproto_uri: string;\n atproto_rkey: string;\n mastodon_url?: string;\n sync_status: \"success\" | \"failed\" | \"pending\";\n atproto_created_at: string | null;\n synced_at: string | null;\n error_message?: string;\n retry_count: number;\n }>;\n}\n\nfunction Dashboard() {\n const [data, setData] = useState(null);\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n\n useEffect(() => {\n fetchDashboardData();\n }, []);\n\n const fetchDashboardData = async () => {\n try {\n setLoading(true);\n const response = await fetch(\"/api/dashboard\", {\n credentials: \"include\",\n });\n\n if (!response.ok) {\n if (response.status === 401) {\n // Not authenticated, redirect to login\n globalThis.location.href = \"/login\";\n return;\n }\n throw new Error(`Dashboard data fetch failed: ${response.status}`);\n }\n\n const dashboardData = await response.json();\n setData(dashboardData);\n } catch (error) {\n console.error(\"Dashboard fetch error:\", error);\n setError(error.message || \"Failed to load dashboard\");\n } finally {\n setLoading(false);\n }\n };\n\n const triggerManualSync = async () => {\n try {\n const response = await fetch(\"/api/dashboard/sync\", {\n method: \"POST\",\n credentials: \"include\",\n });\n\n if (!response.ok) {\n if (response.status === 401) {\n globalThis.location.href = \"/login\";\n return;\n }\n throw new Error(\"Manual sync failed\");\n }\n\n // Refresh dashboard data after sync\n setTimeout(() => {\n fetchDashboardData();\n }, 2000);\n } catch (error) {\n console.error(\"Manual sync error:\", error);\n setError(error.message || \"Failed to trigger sync\");\n }\n };\n\n const handleLogout = async () => {\n try {\n await fetch(\"/api/auth/logout\", {\n method: \"POST\",\n credentials: \"include\",\n });\n globalThis.location.href = \"/\";\n } catch (error) {\n console.error(\"Logout error:\", error);\n // Redirect anyway\n globalThis.location.href = \"/\";\n }\n };\n\n const handleDisconnectBluesky = async () => {\n if (\n !confirm(\n \"Are you sure you want to disconnect your Bluesky account? This will stop syncing your posts.\",\n )\n ) {\n return;\n }\n\n try {\n const response = await fetch(\"/api/auth/disconnect/bluesky\", {\n method: \"POST\",\n credentials: \"include\",\n });\n\n if (response.ok) {\n // Refresh dashboard data\n await fetchDashboardData();\n } else {\n alert(\"Failed to disconnect Bluesky account\");\n }\n } catch (error) {\n console.error(\"Bluesky disconnect error:\", error);\n alert(\"Failed to disconnect Bluesky account\");\n }\n };\n\n const handleDisconnectMastodon = async () => {\n if (\n !confirm(\n \"Are you sure you want to disconnect your Mastodon account? This will stop syncing your posts.\",\n )\n ) {\n return;\n }\n\n try {\n const response = await fetch(\"/api/auth/disconnect/mastodon\", {\n method: \"POST\",\n credentials: \"include\",\n });\n\n if (response.ok) {\n // Refresh dashboard data\n await fetchDashboardData();\n } else {\n alert(\"Failed to disconnect Mastodon account\");\n }\n } catch (error) {\n console.error(\"Mastodon disconnect error:\", error);\n alert(\"Failed to disconnect Mastodon account\");\n }\n };\n\n if (loading) {\n return (\n

\n Loading Dashboard...\n

\n Please wait while we load your data\n

\n );\n }\n\n if (error) {\n return (\n

Error

{error}

\n globalThis.location.href = \"/setup\"}\n className=\"bg-blue-600 text-white px-4 py-2 rounded-lg hover:bg-blue-700\"\n >\n Back to Setup\n \n

\n );\n }\n\n if (!data) {\n return (\n

\n No Data Available\n

\n );\n }\n\n return (\n

\n Bridge Dashboard\n

\n globalThis.location.href = \"/setup\"}\n className=\"text-blue-600 hover:text-blue-800\"\n >\n Setup\n \n \n Logout\n \n

\n\n {/* Connection Status */}\n

Account Connections

\n Bluesky\n

\n \n {data.user.atproto_handle\n ? `@${data.user.atproto_handle}`\n : \"Not Connected\"}\n \n {data.user.atproto_handle\n ? (\n \n Disconnect\n \n )\n : (\n \n globalThis.location.href = \"/setup?step=bluesky\"}\n className=\"text-blue-600 hover:text-blue-800 text-sm font-medium\"\n >\n Connect\n \n )}\n

\n Mastodon\n

\n \n {data.user.mastodon_username\n ? `@${data.user.mastodon_username}`\n : \"Not Connected\"}\n \n {data.user.mastodon_username\n ? (\n \n Disconnect\n \n )\n : (\n \n globalThis.location.href = \"/setup?step=mastodon\"}\n className=\"text-blue-600 hover:text-blue-800 text-sm font-medium\"\n >\n Connect\n \n )}\n

\n\n

Manual Sync

\n Trigger a manual sync to check for new posts from Bluesky\n

\n \n Sync Now\n \n

\n\n {/* Stats */}\n

\n {data.stats.posts_synced}\n

Posts Synced

\n {data.stats.last_sync\n ? new Date(data.stats.last_sync).toLocaleString(\n navigator.language,\n {\n timeZone: Intl.DateTimeFormat().resolvedOptions().timeZone,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n },\n )\n : \"Never\"}\n

Last Sync

\n {data.stats.posts_failed}\n

Failed Posts

\n\n {/* Recent Posts */}\n

Last 25 synced posts

\n {data.recent_posts.length === 0\n ? (\n

\n No posts synced yet. Make a post on Bluesky to see it appear\n here!\n

\n )\n : (\n

\n {data.recent_posts.map((post) => (\n

\n \n Synced: {post.synced_at\n ? new Date(post.synced_at).toLocaleString(\n navigator.language,\n {\n timeZone:\n Intl.DateTimeFormat().resolvedOptions()\n .timeZone,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n },\n )\n : \"Unknown date\"}\n \n \n {post.sync_status}\n \n

\n Bluesky:\n \n {post.atproto_uri.replace(\n \"at://\",\n \"https://bsky.app/profile/\",\n ).replace(\"/app.bsky.feed.post/\", \"/post/\")}\n \n

\n {post.mastodon_url && (\n

\n Mastodon:\n \n {post.mastodon_url}\n \n

\n )}\n {post.error_message && (\n

\n Error: {post.error_message}\n

\n )}\n

\n ))}\n

\n )}\n

\n );\n}\n\n// Initialize React app\nconst root = ReactDOM.createRoot(document.getElementById(\"root\")!);\nroot.render();\n",[],[433,470],"8616a16a-8094-11f0-a977-0224a6c84d84","dashboard.html","0198d9f8-487c-763c-a562-ae5529afb732",["D",1756003583839],"\n\n \n \n \n Bridge Dashboard\n \n \n \n

\n \n \n\n",[],[433,477],"8616c492-8094-11f0-a977-0224a6c84d84",["D",1756003583839],[296,297,298,299,300,301,302,303],[433],"86169b70-8094-11f0-a977-0224a6c84d84","index.ts","0198d9f8-487c-763c-a562-a86c4a996d58",["D",1756003583839],"http","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport {\n readFile,\n serveFile,\n} from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport { runMigrations } from \"./database/migrations.ts\";\nimport oauthRoutes from \"./routes/oauth.ts\";\nimport setupRoutes from \"./routes/setup.ts\";\nimport dashboardRoutes from \"./routes/dashboard.ts\";\nimport authRoutes from \"./routes/auth.ts\";\nimport { initSessionsTable } from \"./lib/session-db.ts\";\n\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err, _c) => {\n throw err;\n});\n\n// Initialize database on startup\nawait runMigrations();\nawait initSessionsTable();\n\n// API routes\napp.route(\"/api/oauth\", oauthRoutes);\napp.route(\"/api/setup\", setupRoutes);\napp.route(\"/api/auth\", authRoutes);\napp.route(\"/api/dashboard\", dashboardRoutes);\n\n// Health check endpoint\napp.get(\"/api/health\", (c) => {\n return c.json({\n status: \"healthy\",\n timestamp: new Date().toISOString(),\n service: \"atproto-to-fediverse-bridge\",\n });\n});\n\n// Setup status endpoint - shows what environment variables and steps are needed\napp.get(\"/api/setup/status\", (c) => {\n const environmentVars = {\n ATPROTO_APP_PASSWORD: {\n set: !!Deno.env.get(\"ATPROTO_APP_PASSWORD\"),\n description: \"Bluesky App Password for sync service\",\n required: true,\n },\n ATPROTO_ALLOWED_HANDLE: {\n set: !!Deno.env.get(\"ATPROTO_ALLOWED_HANDLE\"),\n description: \"Allowed Bluesky handle for this single-user service\",\n required: true,\n },\n VALTOWN_URL: {\n set: !!Deno.env.get(\"VALTOWN_URL\"),\n description: \"Val.town deployment URL\",\n required: true,\n },\n };\n\n const setupSteps = [\n {\n id: \"env_vars\",\n title: \"Environment Variables\",\n completed: Object.values(environmentVars).every((env) =>\n !env.required || env.set\n ),\n description: \"Configure required environment variables\",\n },\n {\n id: \"oauth_setup\",\n title: \"Account Setup\",\n completed: false, // This will be checked separately by looking at database\n description: \"Connect your Bluesky and Mastodon accounts\",\n },\n ];\n\n return c.json({\n environmentVars,\n setupSteps,\n overallReady: setupSteps.every((step) => step.completed),\n });\n});\n\n// Serve client metadata for ATProto OAuth\napp.get(\"/client\", (c) => {\n const rawUrl = Deno.env.get(\"VALTOWN_URL\") || \"http://localhost:8080\";\n // Remove trailing slash to avoid double slashes in URLs\n const valtownUrl = rawUrl.replace(/\\/$/, \"\");\n const clientMetadata = {\n client_id: `${valtownUrl}/client`,\n client_name: \"ATProto to Fediverse Bridge\",\n redirect_uris: [\n `${valtownUrl}/api/oauth/atproto/callback`,\n ],\n scope: \"atproto transition:generic\",\n response_types: [\"code\"],\n grant_types: [\"authorization_code\", \"refresh_token\"],\n token_endpoint_auth_method: \"none\",\n dpop_bound_access_tokens: true,\n };\n return c.json(clientMetadata);\n});\n\n// Serve static files\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", (c) => serveFile(c.req.path, import.meta.url));\n\n// Serve main application\napp.get(\"/\", async (c) => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n\n // Basic data injection for initial page load\n const initialData = {\n appName: \"ATProto-to-Fediverse Bridge\",\n version: \"1.0.0\",\n };\n\n const dataScript = ``;\n\n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n});\n\n// Setup wizard routes\napp.get(\"/setup\", async (c) => {\n const html = await readFile(\"/frontend/setup.html\", import.meta.url);\n return c.html(html);\n});\n\n// Login route\napp.get(\"/login\", async (c) => {\n const html = await readFile(\"/frontend/login.html\", import.meta.url);\n return c.html(html);\n});\n\n// Dashboard route\napp.get(\"/dashboard\", async (c) => {\n const html = await readFile(\"/frontend/dashboard.html\", import.meta.url);\n return c.html(html);\n});\n\n// Catch-all route for unhandled API requests\napp.all(\"/api/*\", (c) => {\n return c.json({ error: \"Not found\" }, 404);\n});\n\n// This is the entry point for HTTP vals\nexport default app.fetch;\n",[],[495,488],"backend","8616959e-8094-11f0-a977-0224a6c84d84","sqlite-storage.ts","0198d9f8-487c-763c-a562-9c88abc5e11e","0198d9f8-487c-763c-a562-a273c08812ce",["D",1756003583839],"import {\n PostTracking,\n PostTrackingStorage,\n Settings,\n SettingsStorage,\n StorageProvider,\n SyncLog,\n SyncLogStorage,\n UserAccount,\n UserAccountStorage,\n} from \"../interfaces/storage.ts\";\n\nconst sqlite = (await import(\"https://esm.town/v/stevekrouse/sqlite\")).sqlite;\n\nclass SQLiteUserAccountStorage implements UserAccountStorage {\n async create(): Promise {\n const now = Date.now();\n const result = await sqlite.execute(\n `INSERT INTO bridge_user_accounts_v1 (id, setup_completed, created_at, updated_at) \n VALUES (1, FALSE, ?, ?) \n ON CONFLICT(id) DO UPDATE SET updated_at = ?\n RETURNING *`,\n [now, now, now],\n );\n return result.rows[0] as unknown as UserAccount;\n }\n\n async getSingle(): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM bridge_user_accounts_v1 WHERE id = 1`,\n );\n return result.rows.length > 0\n ? result.rows[0] as unknown as UserAccount\n : null;\n }\n\n async updateSingle(updates: Partial): Promise {\n const fields = Object.keys(updates).filter((key) => key !== \"id\");\n if (fields.length === 0) return;\n\n const setClause = fields.map((field) => `${field} = ?`).join(\", \");\n const values = fields.map((field) => (updates as any)[field]);\n\n await sqlite.execute(\n `UPDATE bridge_user_accounts_v1 SET ${setClause}, updated_at = ? WHERE id = 1`,\n [...values, Date.now()],\n );\n }\n}\n\nclass SQLiteSettingsStorage implements SettingsStorage {\n async create(): Promise {\n const now = Date.now();\n const result = await sqlite.execute(\n `INSERT INTO bridge_settings_v1 (id, sync_enabled, sync_interval_minutes, created_at, updated_at) \n VALUES (1, TRUE, 15, ?, ?) \n ON CONFLICT(id) DO UPDATE SET updated_at = ?\n RETURNING *`,\n [now, now, now],\n );\n return result.rows[0] as unknown as Settings;\n }\n\n async getSingle(): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM bridge_settings_v1 WHERE id = 1`,\n );\n return result.rows.length > 0\n ? result.rows[0] as unknown as Settings\n : null;\n }\n\n async updateSingle(updates: Partial): Promise {\n const fields = Object.keys(updates).filter((key) => key !== \"id\");\n if (fields.length === 0) return;\n\n const setClause = fields.map((field) => `${field} = ?`).join(\", \");\n const values = fields.map((field) => (updates as any)[field]);\n\n await sqlite.execute(\n `UPDATE bridge_settings_v1 SET ${setClause}, updated_at = ? WHERE id = 1`,\n [...values, Date.now()],\n );\n }\n}\n\nclass SQLitePostTrackingStorage implements PostTrackingStorage {\n async create(\n data: Omit,\n ): Promise {\n const now = Math.floor(Date.now() / 1000); // Convert to Unix seconds\n const result = await sqlite.execute(\n `INSERT INTO bridge_post_tracking_v1 \n (atproto_uri, atproto_cid, atproto_rkey, content_hash, atproto_created_at, sync_status, created_at, updated_at) \n VALUES (?, ?, ?, ?, ?, 'pending', ?, ?) \n RETURNING *`,\n [\n data.atproto_uri,\n data.atproto_cid,\n data.atproto_rkey,\n data.content_hash,\n data.atproto_created_at,\n now,\n now,\n ],\n );\n return result.rows[0] as unknown as PostTracking;\n }\n\n async getByUri(uri: string): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM bridge_post_tracking_v1 WHERE atproto_uri = ?`,\n [uri],\n );\n return result.rows.length > 0\n ? result.rows[0] as unknown as PostTracking\n : null;\n }\n\n async updateByUri(\n uri: string,\n updates: Partial,\n ): Promise {\n const fields = Object.keys(updates).filter((key) =>\n ![\"id\", \"atproto_uri\"].includes(key)\n );\n if (fields.length === 0) return;\n\n const setClause = fields.map((field) => `${field} = ?`).join(\", \");\n const values = fields.map((field) => (updates as any)[field]);\n\n await sqlite.execute(\n `UPDATE bridge_post_tracking_v1 SET ${setClause}, updated_at = ? WHERE atproto_uri = ?`,\n [...values, Math.floor(Date.now() / 1000), uri], // Convert to Unix seconds\n );\n }\n\n async getPending(): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM bridge_post_tracking_v1 WHERE sync_status = 'pending' ORDER BY created_at ASC`,\n );\n return result.rows as unknown as PostTracking[];\n }\n\n async getFailed(): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM bridge_post_tracking_v1 WHERE sync_status = 'failed' ORDER BY created_at DESC`,\n );\n return result.rows as unknown as PostTracking[];\n }\n\n async getRecent(limit: number = 20): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM bridge_post_tracking_v1 ORDER BY created_at DESC LIMIT ?`,\n [limit],\n );\n return result.rows as unknown as PostTracking[];\n }\n\n async getStats(): Promise {\n const result = await sqlite.execute(\n `SELECT \n COUNT(*) as total_posts,\n COUNT(CASE WHEN sync_status = 'success' THEN 1 END) as successful_posts,\n COUNT(CASE WHEN sync_status = 'failed' THEN 1 END) as failed_posts,\n COUNT(CASE WHEN sync_status = 'pending' THEN 1 END) as pending_posts,\n MAX(created_at) as last_sync\n FROM bridge_post_tracking_v1`,\n );\n return result.rows[0];\n }\n}\n\nclass SQLiteSyncLogStorage implements SyncLogStorage {\n async create(data: Omit): Promise {\n const now = Math.floor(Date.now() / 1000); // Convert to Unix seconds\n const result = await sqlite.execute(\n `INSERT INTO bridge_sync_logs_v1 \n (sync_type, posts_fetched, posts_synced, posts_failed, posts_skipped, error_message, duration_ms, created_at) \n VALUES (?, ?, ?, ?, ?, ?, ?, ?) \n RETURNING *`,\n [\n data.sync_type,\n data.posts_fetched,\n data.posts_synced,\n data.posts_failed,\n data.posts_skipped,\n data.error_message || null,\n data.duration_ms || null,\n now,\n ],\n );\n return result.rows[0] as unknown as SyncLog;\n }\n\n async getRecent(limit: number = 20): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM bridge_sync_logs_v1 ORDER BY created_at DESC LIMIT ?`,\n [limit],\n );\n return result.rows as unknown as SyncLog[];\n }\n}\n\nexport class SQLiteStorageProvider implements StorageProvider {\n userAccounts: UserAccountStorage;\n settings: SettingsStorage;\n postTracking: PostTrackingStorage;\n syncLogs: SyncLogStorage;\n\n constructor() {\n this.userAccounts = new SQLiteUserAccountStorage();\n this.settings = new SQLiteSettingsStorage();\n this.postTracking = new SQLitePostTrackingStorage();\n this.syncLogs = new SQLiteSyncLogStorage();\n }\n\n async initialize(): Promise {\n // Database migrations are handled separately\n // This method exists for interface compatibility\n }\n\n async cullOldPostLogs(keepCount: number = 100): Promise {\n // Import the cullOldPostLogs function and use it\n const { cullOldPostLogs } = await import(\"../database/queries.ts\");\n await cullOldPostLogs(keepCount);\n return keepCount; // Return the number we intended to keep\n }\n}\n",[],[495,504,497],"storage","86169058-8094-11f0-a977-0224a6c84d84","memory-storage.ts","0198d9f8-487c-763c-a562-988ce166731b",["D",1756003583839],"// In-memory implementation of storage interfaces for testing\n\nimport {\n PostTracking,\n PostTrackingStorage,\n Settings,\n SettingsStorage,\n StorageProvider,\n SyncLog,\n SyncLogStorage,\n SyncStats,\n UserAccount,\n UserAccountStorage,\n} from \"../interfaces/storage.ts\";\n\nexport class InMemoryUserAccountStorage implements UserAccountStorage {\n private account: UserAccount | null = null;\n\n create(): Promise {\n this.account = {\n id: 1,\n setup_completed: false,\n created_at: Date.now(),\n updated_at: Date.now(),\n };\n return Promise.resolve(this.account);\n }\n\n getSingle(): Promise {\n return Promise.resolve(this.account);\n }\n\n updateSingle(updates: Partial): Promise {\n if (this.account) {\n Object.assign(this.account, updates, { updated_at: Date.now() });\n }\n return Promise.resolve();\n }\n\n // Test helpers\n clear(): void {\n this.account = null;\n }\n\n size(): number {\n return this.account ? 1 : 0;\n }\n}\n\nexport class InMemorySettingsStorage implements SettingsStorage {\n private settings: Settings | null = null;\n\n create(): Promise {\n this.settings = {\n id: 1,\n sync_enabled: true,\n sync_interval_minutes: 15,\n skip_replies: true,\n skip_mentions: true,\n skip_reposts: false,\n include_media: true,\n compress_images: false,\n created_at: Date.now(),\n updated_at: Date.now(),\n };\n return Promise.resolve(this.settings);\n }\n\n getSingle(): Promise {\n return Promise.resolve(this.settings);\n }\n\n updateSingle(updates: Partial): Promise {\n if (this.settings) {\n Object.assign(this.settings, updates, { updated_at: Date.now() });\n }\n return Promise.resolve();\n }\n\n // Test helpers\n clear(): void {\n this.settings = null;\n }\n\n size(): number {\n return this.settings ? 1 : 0;\n }\n}\n\nexport class InMemoryPostTrackingStorage implements PostTrackingStorage {\n private posts = new Map();\n private nextId = 1;\n\n create(data: {\n atproto_uri: string;\n atproto_cid: string;\n atproto_rkey: string;\n content_hash: string;\n atproto_created_at: number;\n }): Promise {\n const post: PostTracking = {\n id: this.nextId++,\n atproto_uri: data.atproto_uri,\n atproto_cid: data.atproto_cid,\n atproto_rkey: data.atproto_rkey,\n content_hash: data.content_hash,\n sync_status: \"pending\",\n retry_count: 0,\n max_retries: 3,\n atproto_created_at: data.atproto_created_at,\n created_at: Date.now(),\n updated_at: Date.now(),\n };\n this.posts.set(data.atproto_uri, post);\n return Promise.resolve(post);\n }\n\n getByUri(atprotoUri: string): Promise {\n return Promise.resolve(this.posts.get(atprotoUri) || null);\n }\n\n updateByUri(\n atprotoUri: string,\n updates: Partial,\n ): Promise {\n const post = this.posts.get(atprotoUri);\n if (post) {\n Object.assign(post, updates, { updated_at: Date.now() });\n this.posts.set(atprotoUri, post);\n }\n return Promise.resolve();\n }\n\n getPending(): Promise {\n return Promise.resolve(\n Array.from(this.posts.values())\n .filter((post) =>\n post.sync_status === \"pending\" &&\n post.retry_count < post.max_retries\n )\n .sort((a, b) => a.atproto_created_at - b.atproto_created_at),\n );\n }\n\n getFailed(): Promise {\n return Promise.resolve(\n Array.from(this.posts.values())\n .filter((post) => post.sync_status === \"failed\")\n .sort((a, b) => b.updated_at - a.updated_at),\n );\n }\n\n getRecent(limit: number = 50): Promise {\n return Promise.resolve(\n Array.from(this.posts.values())\n .sort((a, b) => b.atproto_created_at - a.atproto_created_at)\n .slice(0, limit),\n );\n }\n\n getStats(): Promise {\n const allPosts = Array.from(this.posts.values());\n\n const stats = {\n total_posts: allPosts.length,\n successful_posts:\n allPosts.filter((p) => p.sync_status === \"success\").length,\n failed_posts: allPosts.filter((p) => p.sync_status === \"failed\").length,\n pending_posts: allPosts.filter((p) => p.sync_status === \"pending\").length,\n last_sync: allPosts\n .filter((p) => p.synced_at)\n .reduce((latest, post) => Math.max(latest, post.synced_at!), 0) || null,\n };\n\n return Promise.resolve(stats);\n }\n\n // Test helpers\n clear(): void {\n this.posts.clear();\n this.nextId = 1;\n }\n\n size(): number {\n return this.posts.size;\n }\n\n getAll(): PostTracking[] {\n return Array.from(this.posts.values());\n }\n}\n\nexport class InMemorySyncLogStorage implements SyncLogStorage {\n private logs = new Map();\n private nextId = 1;\n\n create(data: {\n sync_type: \"manual\" | \"cron\" | \"webhook\";\n posts_fetched: number;\n posts_synced: number;\n posts_failed: number;\n posts_skipped: number;\n error_message?: string;\n stack_trace?: string;\n duration_ms?: number;\n cursor_start?: string;\n cursor_end?: string;\n }): Promise {\n const log: SyncLog = {\n id: this.nextId++,\n sync_type: data.sync_type,\n posts_fetched: data.posts_fetched,\n posts_synced: data.posts_synced,\n posts_failed: data.posts_failed,\n posts_skipped: data.posts_skipped,\n error_message: data.error_message,\n stack_trace: data.stack_trace,\n duration_ms: data.duration_ms,\n cursor_start: data.cursor_start,\n cursor_end: data.cursor_end,\n created_at: Date.now(),\n };\n this.logs.set(log.id, log);\n return Promise.resolve(log);\n }\n\n getRecent(limit: number = 20): Promise {\n return Promise.resolve(\n Array.from(this.logs.values())\n .sort((a, b) => b.created_at - a.created_at)\n .slice(0, limit),\n );\n }\n\n // Test helpers\n clear(): void {\n this.logs.clear();\n this.nextId = 1;\n }\n\n size(): number {\n return this.logs.size;\n }\n\n getAll(): SyncLog[] {\n return Array.from(this.logs.values());\n }\n}\n\nexport class InMemoryStorageProvider implements StorageProvider {\n public userAccounts: InMemoryUserAccountStorage;\n public settings: InMemorySettingsStorage;\n public postTracking: InMemoryPostTrackingStorage;\n public syncLogs: InMemorySyncLogStorage;\n\n constructor() {\n this.userAccounts = new InMemoryUserAccountStorage();\n this.settings = new InMemorySettingsStorage();\n this.postTracking = new InMemoryPostTrackingStorage();\n this.syncLogs = new InMemorySyncLogStorage();\n }\n\n initialize(): Promise {\n // No initialization needed for in-memory storage\n return Promise.resolve();\n }\n\n // Test helpers\n clear(): void {\n this.userAccounts.clear();\n this.settings.clear();\n this.postTracking.clear();\n this.syncLogs.clear();\n }\n\n size(): { accounts: number; settings: number; posts: number; logs: number } {\n return {\n accounts: this.userAccounts.size(),\n settings: this.settings.size(),\n posts: this.postTracking.size(),\n logs: this.syncLogs.size(),\n };\n }\n}\n",[],[495,504,506],"86169a62-8094-11f0-a977-0224a6c84d84",["D",1756003583839],[292,293],[495,504],"86168824-8094-11f0-a977-0224a6c84d84","sync-service.ts","0198d9f8-487c-763c-a562-904160e8024d","0198d9f8-487c-763c-a562-96b52d02046f",["D",1756003583839],"// Dependency-injected sync service for better testability\n\nimport { StorageProvider } from \"../interfaces/storage.ts\";\nimport {\n ATProtoHttpClient,\n MastodonHttpClient,\n} from \"../interfaces/http-client.ts\";\nimport { ATProtoPost, RetryConfig, SyncResult } from \"../../shared/types.ts\";\nimport { BRIDGE_CONFIG } from \"../../config.ts\";\nimport { SetupValidator } from \"./setup-validator.ts\";\nimport { AuthenticationManager } from \"./authentication-manager.ts\";\nimport { PostFetcher } from \"./post-fetcher.ts\";\nimport { PostFilterManager } from \"./post-filter.ts\";\nimport { MastodonSyncer } from \"./mastodon-syncer.ts\";\n\nexport interface SyncServiceDependencies {\n storage: StorageProvider;\n createATProtoClient: (\n pdsUrl: string,\n accessToken: string,\n refreshToken: string,\n did: string,\n onTokenRefresh?: (\n tokens: { accessJwt: string; refreshJwt: string },\n ) => Promise,\n appPassword?: string,\n ) => ATProtoHttpClient;\n createMastodonClient: (\n instanceUrl: string,\n accessToken: string,\n ) => MastodonHttpClient;\n retryConfig?: RetryConfig;\n}\n\nexport class SyncService {\n private storage: StorageProvider;\n private setupValidator: SetupValidator;\n private authenticationManager: AuthenticationManager;\n private postFetcher: PostFetcher;\n private postFilterManager: PostFilterManager;\n private mastodonSyncer: MastodonSyncer;\n\n constructor(dependencies: SyncServiceDependencies) {\n this.storage = dependencies.storage;\n\n this.setupValidator = new SetupValidator(dependencies.storage);\n this.authenticationManager = new AuthenticationManager(\n dependencies.storage,\n dependencies.createATProtoClient,\n dependencies.createMastodonClient,\n );\n this.postFetcher = new PostFetcher();\n this.postFilterManager = new PostFilterManager();\n this.mastodonSyncer = new MastodonSyncer(\n dependencies.storage,\n dependencies.retryConfig,\n );\n }\n\n /**\n * Get the post filter manager (for customizing filters)\n */\n getPostFilterManager(): PostFilterManager {\n return this.postFilterManager;\n }\n\n /**\n * Filter posts based on config and existing tracking\n */\n private async filterPosts(\n posts: ATProtoPost[],\n ): Promise {\n const filteredPosts: ATProtoPost[] = [];\n\n for (const post of posts) {\n // Apply filtering rules using config\n if (!this.postFilterManager.shouldSyncPost(post, BRIDGE_CONFIG.filters)) {\n console.log(`Skipping post ${post.uri} (filtered by config)`);\n continue;\n }\n\n // Check if post already exists\n const existingPost = await this.storage.postTracking.getByUri(post.uri);\n if (existingPost) {\n console.log(`Post ${post.uri} already tracked`);\n continue;\n }\n\n filteredPosts.push(post);\n }\n\n return filteredPosts;\n }\n\n /**\n * Sync posts for the single user\n */\n async syncUser(): Promise {\n const startTime = Date.now();\n const result: SyncResult = {\n success: false,\n postsProcessed: 0,\n postsSuccessful: 0,\n postsFailed: 0,\n errors: [],\n };\n\n try {\n // Validate setup\n const { account, shouldProceed } = await this.setupValidator\n .validateSetup();\n if (!shouldProceed) {\n return { ...result, success: true };\n }\n\n // Validate authentication and create clients\n const { atprotoClient, mastodonClient } = this.authenticationManager\n .validateAuthenticationAndCreateClients(account);\n\n // Fetch posts from ATProto\n const { posts, cursor: newCursor } = await this.postFetcher.fetchPosts(\n atprotoClient,\n account,\n );\n result.postsProcessed = posts.length;\n\n console.log(`Found ${posts.length} posts for user`);\n\n // Filter posts\n const filteredPosts = await this.filterPosts(posts);\n\n console.log(`${filteredPosts.length} posts passed filtering`);\n\n // Sync filtered posts\n const syncResults = await this.mastodonSyncer.syncPosts(\n filteredPosts,\n atprotoClient,\n mastodonClient,\n );\n\n result.postsSuccessful += syncResults.successful;\n result.postsFailed += syncResults.failed;\n result.errors.push(...syncResults.errors);\n\n // Update last sync time and cursor\n await this.storage.userAccounts.updateSingle({\n last_sync_at: Date.now(),\n last_sync_cursor: newCursor,\n });\n\n result.success = true;\n } catch (error) {\n console.error(`User sync error:`, error);\n result.errors.push({\n postUri: \"general\",\n message: error instanceof Error ? error.message : \"Unknown error\",\n retryable: false,\n });\n }\n\n // Log sync operation\n await this.storage.syncLogs.create({\n sync_type: \"cron\",\n posts_fetched: result.postsProcessed,\n posts_synced: result.postsSuccessful,\n posts_failed: result.postsFailed,\n posts_skipped: result.postsProcessed - result.postsSuccessful -\n result.postsFailed,\n error_message: result.errors.length > 0\n ? result.errors[0].message\n : undefined,\n duration_ms: Date.now() - startTime,\n });\n\n return result;\n }\n}\n",[],[495,524,517],"services","8616869e-8094-11f0-a977-0224a6c84d84","setup-validator.ts","0198d9f8-487c-763c-a562-8f3b2d7321ec",["D",1756003583839],"import { StorageProvider } from \"../interfaces/storage.ts\";\n\nexport interface SetupValidationResult {\n account: any;\n shouldProceed: boolean;\n}\n\nexport class SetupValidator {\n constructor(private storage: StorageProvider) {}\n\n /**\n * Check if setup is complete and sync should proceed\n */\n async validateSetup(): Promise {\n // Get user account\n const account = await this.storage.userAccounts.getSingle();\n if (!account) {\n throw new Error(\"User account not found\");\n }\n\n // Check if user has completed setup\n if (!account.setup_completed) {\n console.log(\"User setup not completed - skipping sync\");\n return { account, shouldProceed: false };\n }\n\n // Check if user has required tokens\n if (!account.atproto_access_token || !account.mastodon_access_token) {\n console.log(\"User account not fully configured - skipping sync\");\n return { account, shouldProceed: false };\n }\n\n return { account, shouldProceed: true };\n }\n}\n",[],[495,524,526],"86167f1e-8094-11f0-a977-0224a6c84d84","post-transformer.ts","0198d9f8-487c-763c-a562-8a8352504c21",["D",1756003583839],"import { RichText } from \"https://esm.sh/@atproto/api@0.15.23\";\nimport { ATProtoPost, PostTransformation } from \"../../shared/types.ts\";\nimport { ATProtoValidator } from \"./atproto-validator.ts\";\n\nexport class PostTransformer {\n private static validator = new ATProtoValidator();\n\n /**\n * Transform an ATProto post to a format suitable for Mastodon\n */\n static transformPost(post: ATProtoPost): PostTransformation {\n // Validate the post before processing\n const validation = this.validator.validateATProtoPost(post);\n if (!validation.valid) {\n console.warn(\n `Post validation failed for ${post.uri}:`,\n validation.errors,\n );\n // Continue with sanitized post\n post = this.validator.sanitizePost(post);\n }\n const { record } = post;\n const mentions: PostTransformation[\"mentions\"] = [];\n const links: PostTransformation[\"links\"] = [];\n const hashtags: string[] = [];\n const media: PostTransformation[\"media\"] = [];\n\n // Use RichText for proper facet processing\n const richText = new RichText({\n text: record.text,\n facets: record.facets,\n });\n\n // Transform the text with RichText formatting\n let transformedText = \"\";\n let footnoteCounter = 1;\n\n for (const segment of richText.segments()) {\n if (segment.isMention() && segment.mention) {\n // Convert mention to Bluesky profile URL\n const handle = segment.text.replace(\"@\", \"\");\n // Use DID if available for more reliable profile URLs\n // DIDs work across all PDS instances, handles might change\n const did = segment.mention.did;\n const profileUrl = did\n ? `https://bsky.app/profile/${did}`\n : `https://bsky.app/profile/${handle}`;\n mentions.push({ handle, profileUrl });\n // Use footnote-style reference: @handle (1)\n transformedText += `@${handle} (${footnoteCounter})`;\n footnoteCounter++;\n } else if (segment.isLink() && segment.link) {\n // Keep the original link\n links.push({\n url: segment.link.uri,\n displayText: segment.text,\n });\n transformedText += segment.text;\n } else if (segment.isTag() && segment.tag) {\n // Keep hashtag as-is\n hashtags.push(segment.tag.tag);\n transformedText += segment.text;\n } else {\n // Plain text segment\n transformedText += segment.text;\n }\n }\n\n // Process media embeds\n if (record.embed) {\n switch (record.embed.$type) {\n case \"app.bsky.embed.images\":\n if (record.embed.images) {\n for (const image of record.embed.images) {\n media.push({\n url: `blob://${image.image.ref}`, // Will be resolved to actual URL later\n type: \"image\",\n description: image.alt || \"\",\n });\n }\n }\n break;\n\n case \"app.bsky.embed.video\":\n if (record.embed.video) {\n media.push({\n url: `blob://${record.embed.video.ref}`, // Will be resolved to actual URL later\n type: \"video\",\n description: \"\",\n });\n }\n break;\n\n case \"app.bsky.embed.external\":\n // Add external link preview information\n if (record.embed.external) {\n const external = record.embed.external;\n // Add the external URL if not already in links\n const externalUrl = external.uri;\n if (!links.some((link) => link.url === externalUrl)) {\n links.push({\n url: externalUrl,\n displayText: external.title || externalUrl,\n });\n }\n // Note: Mastodon will generate its own preview, so we don't need to handle description/thumb\n }\n break;\n }\n }\n\n return {\n text: transformedText.trim(),\n media,\n mentions,\n links,\n hashtags,\n };\n }\n\n /**\n * Generate a content hash for duplicate detection\n */\n static generateContentHash(post: ATProtoPost): string {\n const content = {\n text: post.record.text,\n createdAt: post.record.createdAt,\n author: post.author.did,\n embed: post.record.embed ? JSON.stringify(post.record.embed) : null,\n };\n\n return this.hashString(JSON.stringify(content));\n }\n\n /**\n * Simple hash function for content\n */\n private static hashString(str: string): string {\n let hash = 0;\n for (let i = 0; i < str.length; i++) {\n const char = str.charCodeAt(i);\n hash = ((hash << 5) - hash) + char;\n hash = hash & hash; // Convert to 32-bit integer\n }\n return hash.toString(16);\n }\n\n /**\n * Validate post structure and return validation results\n */\n static validatePost(post: ATProtoPost): { valid: boolean; errors: string[] } {\n return this.validator.validateATProtoPost(post);\n }\n\n /**\n * Resolve blob URLs using ATProto client\n */\n static resolveBlobUrls(\n transformation: PostTransformation,\n atprotoClient: { resolveBlobUrl: (blobRef: string) => string },\n ): PostTransformation {\n const resolvedMedia = transformation.media.map((item) => {\n if (item.url.startsWith(\"blob://\")) {\n const blobRef = item.url.replace(\"blob://\", \"\");\n try {\n // Use the official API to construct blob URLs\n const resolvedUrl = atprotoClient.resolveBlobUrl(blobRef);\n return {\n ...item,\n url: resolvedUrl,\n };\n } catch (error) {\n console.error(\"Failed to resolve blob URL:\", error);\n return item;\n }\n }\n return item;\n });\n\n return {\n ...transformation,\n media: resolvedMedia,\n };\n }\n\n /**\n * Get blob data for media uploads using ATProto client\n */\n static async getBlobsForUpload(\n transformation: PostTransformation,\n atprotoClient: { getBlob: (blobRef: string) => Promise },\n ): Promise {\n const blobData: Blob[] = [];\n\n for (const item of transformation.media) {\n if (item.url.startsWith(\"blob://\")) {\n const blobRef = item.url.replace(\"blob://\", \"\");\n try {\n const blob = await atprotoClient.getBlob(blobRef);\n blobData.push(blob);\n } catch (error) {\n console.error(\"Failed to get blob data:\", error);\n // Add empty blob as placeholder\n blobData.push(new Blob());\n }\n } else {\n // For non-blob URLs, we'd need to fetch them\n blobData.push(new Blob());\n }\n }\n\n return {\n ...transformation,\n blobData,\n };\n }\n\n /**\n * Format post for Mastodon (respecting character limits)\n */\n static formatForMastodon(transformation: PostTransformation): {\n status: string;\n media: PostTransformation[\"media\"];\n } {\n let status = transformation.text;\n\n // Replace display text with actual URLs to ensure links are clickable\n // This handles cases where Bluesky truncates URLs with ellipsis\n for (const link of transformation.links) {\n // Replace the display text with the actual URL\n // This ensures full URLs are used even if display text was truncated\n status = status.replace(link.displayText, link.url);\n }\n\n // Add footnotes for mentions at the bottom\n if (transformation.mentions.length > 0) {\n status += \"\\n\";\n transformation.mentions.forEach((mention, index) => {\n status += `\\n(${index + 1}) ${mention.profileUrl}`;\n });\n }\n\n // Mastodon has a 500 character limit by default\n // If post is too long, truncate and add indication\n const maxLength = 500;\n if (status.length > maxLength) {\n status = status.substring(0, maxLength - 4) + \"...\";\n }\n\n return {\n status,\n media: transformation.media,\n };\n }\n}\n",[],[495,524,533],"86167b36-8094-11f0-a977-0224a6c84d84","post-filter.ts","0198d9f8-487c-763c-a562-854d77167e0d",["D",1756003583839],"import { ATProtoPost } from \"../../shared/types.ts\";\nimport { ATProtoValidator } from \"./atproto-validator.ts\";\n\nexport interface PostFilter {\n shouldSyncPost(post: ATProtoPost, settings: any): boolean;\n}\n\n/**\n * Filter that skips replies\n */\nexport class ReplyFilter implements PostFilter {\n shouldSyncPost(post: ATProtoPost, _settings: any): boolean {\n return !post.record.reply;\n }\n}\n\n/**\n * Filter that skips reposts and quote posts\n */\nexport class RepostFilter implements PostFilter {\n shouldSyncPost(post: ATProtoPost, _settings: any): boolean {\n if (post.record.embed) {\n const embedType = post.record.embed.$type;\n\n if (embedType === \"app.bsky.embed.record\") {\n console.log(\n `Skipping repost/quote post ${post.uri} (referenced content not available on Mastodon)`,\n );\n return false;\n }\n\n if (embedType === \"app.bsky.embed.recordWithMedia\") {\n console.log(\n `Skipping quote post with media ${post.uri} (referenced content not available on Mastodon)`,\n );\n return false;\n }\n }\n return true;\n }\n}\n\n/**\n * Filter that skips posts starting with mentions when enabled\n */\nexport class MentionFilter implements PostFilter {\n shouldSyncPost(post: ATProtoPost, settings: any): boolean {\n if (!settings?.skip_mentions) return true;\n\n const text = post.record.text;\n const trimmedText = text.trimStart();\n\n // First check: Does the text start with @ (fallback for posts without facets)\n if (trimmedText.startsWith(\"@\")) {\n console.log(\n `Skipping mention post ${post.uri} (starts with @handle)`,\n );\n return false;\n }\n\n // Second check: For posts with facets, check if there's a mention facet at the start\n const facets = post.record.facets;\n if (facets && facets.length > 0) {\n // Calculate byte position of where actual content starts\n const textEncoder = new TextEncoder();\n const leadingWhitespaceChars = text.length - trimmedText.length;\n const leadingWhitespaceBytes = textEncoder.encode(\n text.substring(0, leadingWhitespaceChars),\n ).length;\n\n // Check if there's a mention facet that starts exactly at the beginning of actual content\n const mentionAtStart = facets.find((facet) =>\n facet.index.byteStart === leadingWhitespaceBytes &&\n facet.features?.some((feature: any) =>\n feature.$type === \"app.bsky.richtext.facet#mention\"\n )\n );\n\n if (mentionAtStart) {\n console.log(\n `Skipping mention post ${post.uri} (starts with @handle)`,\n );\n return false;\n }\n }\n return true;\n }\n}\n\n/**\n * Filter that skips invalid or empty posts\n */\nexport class ValidationFilter implements PostFilter {\n private validator = new ATProtoValidator();\n\n shouldSyncPost(post: ATProtoPost, _settings: any): boolean {\n // Validate post structure first\n const validation = this.validator.validateATProtoPost(post);\n if (!validation.valid) {\n console.warn(`Skipping invalid post ${post.uri}:`, validation.errors);\n return false;\n }\n\n // Skip if post has no content\n if (!post.record.text.trim() && !post.record.embed) {\n return false;\n }\n\n return true;\n }\n}\n\n/**\n * Default filter that combines all standard filtering rules\n */\nexport class DefaultPostFilter implements PostFilter {\n private filters: PostFilter[] = [\n new ValidationFilter(),\n new ReplyFilter(),\n new RepostFilter(),\n new MentionFilter(),\n ];\n\n shouldSyncPost(post: ATProtoPost, settings: any): boolean {\n return this.filters.every((filter) =>\n filter.shouldSyncPost(post, settings)\n );\n }\n\n /**\n * Get the individual filters for inspection or modification\n */\n getFilters(): PostFilter[] {\n return [...this.filters];\n }\n\n /**\n * Add an additional filter\n */\n addFilter(filter: PostFilter): void {\n this.filters.push(filter);\n }\n}\n\nexport class PostFilterManager {\n private filters: PostFilter[];\n\n constructor(filters: PostFilter[] = [new DefaultPostFilter()]) {\n this.filters = filters;\n }\n\n /**\n * Add a custom filter to the chain\n */\n addFilter(filter: PostFilter): void {\n this.filters.push(filter);\n }\n\n /**\n * Check if a post should be synced based on all active filters\n */\n shouldSyncPost(post: ATProtoPost, settings: any): boolean {\n return this.filters.every((filter) =>\n filter.shouldSyncPost(post, settings)\n );\n }\n\n /**\n * Remove all filters and add new ones\n */\n setFilters(filters: PostFilter[]): void {\n this.filters = filters;\n }\n\n /**\n * Get current filters\n */\n getFilters(): PostFilter[] {\n return [...this.filters];\n }\n}\n",[],[495,524,540],"86167712-8094-11f0-a977-0224a6c84d84","post-fetcher.ts","0198d9f8-487c-763c-a562-81ad6d6bc25e",["D",1756003583839],"import { ATProtoHttpClient } from \"../interfaces/http-client.ts\";\nimport { ATProtoPost } from \"../../shared/types.ts\";\n\nexport interface PostFetchResult {\n posts: ATProtoPost[];\n cursor?: string;\n}\n\nexport class PostFetcher {\n constructor() {}\n\n /**\n * Fetch posts from ATProto feed\n */\n async fetchPosts(\n atprotoClient: ATProtoHttpClient,\n account: any,\n ): Promise {\n return await this.fetchPostsWithCursor(\n atprotoClient,\n account.atproto_did,\n account.last_sync_cursor,\n account.last_sync_at,\n 50,\n );\n }\n\n /**\n * Fetch posts using cursor-based pagination\n */\n private async fetchPostsWithCursor(\n atprotoClient: ATProtoHttpClient,\n actorDid: string,\n lastCursor?: string,\n lastSyncAt?: number,\n limit: number = 50,\n ): Promise {\n let allPosts: ATProtoPost[] = [];\n let currentCursor = lastCursor;\n let hasMore = true;\n let finalCursor: string | undefined;\n\n // Calculate time filter - always limit to 24 hours ago to prevent going too far back\n const oneDayAgo = Date.now() - 24 * 60 * 60 * 1000;\n const fallbackTime = lastSyncAt && lastSyncAt > oneDayAgo\n ? new Date(lastSyncAt).toISOString()\n : new Date(oneDayAgo).toISOString();\n\n // Use the cursor-based method if available, otherwise fall back to regular fetch\n if (\"fetchPostsWithCursor\" in atprotoClient) {\n // Reset cursor if it's older than 1 day to get recent posts\n const cursorDate = lastCursor ? new Date(lastCursor).getTime() : 0;\n const shouldResetCursor = cursorDate < oneDayAgo;\n\n const result = await (atprotoClient as any).fetchPostsWithCursor({\n startCursor: shouldResetCursor ? undefined : lastCursor,\n sinceTime: fallbackTime, // Add back time filter to limit to 24 hours\n limit,\n });\n\n allPosts = result.posts.map((item: any) => ({\n uri: item.post.uri,\n cid: item.post.cid,\n author: item.post.author,\n record: item.post.record,\n indexedAt: item.post.indexedAt,\n }));\n\n finalCursor = result.cursor;\n } else {\n // Fallback to original pagination logic\n while (hasMore && allPosts.length < limit) {\n const response = await atprotoClient.fetchPosts({\n actor: actorDid,\n limit: Math.min(50, limit - allPosts.length),\n cursor: currentCursor,\n });\n\n if (!response.feed || response.feed.length === 0) {\n hasMore = false;\n break;\n }\n\n // Transform to ATProtoPost format\n const posts = response.feed.map((item: any) => ({\n uri: item.post.uri,\n cid: item.post.cid,\n author: item.post.author,\n record: item.post.record,\n indexedAt: item.post.indexedAt,\n }));\n\n // If we have a last sync time, filter out posts older than that\n const newPosts = lastSyncAt\n ? posts.filter((post) => post.record.createdAt > fallbackTime)\n : posts;\n\n allPosts = allPosts.concat(newPosts);\n finalCursor = response.cursor;\n currentCursor = response.cursor;\n\n // Stop if we got fewer posts than requested (end of feed)\n // or if we've reached posts older than our sync time\n if (\n response.feed.length < 50 ||\n (lastSyncAt && newPosts.length < posts.length)\n ) {\n hasMore = false;\n }\n\n // Stop if no cursor (end of feed)\n if (!response.cursor) {\n hasMore = false;\n }\n }\n }\n\n return {\n posts: allPosts.slice(0, limit),\n cursor: finalCursor,\n };\n }\n}\n",[],[495,524,547],"8616714a-8094-11f0-a977-0224a6c84d84","mastodon-syncer.ts","0198d9f8-487c-763c-a562-7eca3d29a1c6",["D",1756003583839],"import { StorageProvider } from \"../interfaces/storage.ts\";\nimport {\n ATProtoHttpClient,\n MastodonHttpClient,\n} from \"../interfaces/http-client.ts\";\nimport { ATProtoPost, RetryConfig } from \"../../shared/types.ts\";\nimport { PostTransformer } from \"./post-transformer.ts\";\nimport { BRIDGE_CONFIG } from \"../../config.ts\";\n\nexport interface SyncResult {\n successful: number;\n failed: number;\n errors: any[];\n}\n\nexport class MastodonSyncer {\n constructor(\n private storage: StorageProvider,\n private retryConfig: RetryConfig = BRIDGE_CONFIG.sync.retry,\n ) {}\n\n /**\n * Sync posts to Mastodon\n */\n async syncPosts(\n posts: ATProtoPost[],\n atprotoClient: ATProtoHttpClient,\n mastodonClient: MastodonHttpClient,\n ): Promise {\n let successful = 0;\n let failed = 0;\n const errors: any[] = [];\n\n for (const post of posts) {\n try {\n // Sync the post to Mastodon\n await this.syncPostToMastodon(post, atprotoClient, mastodonClient);\n successful++;\n console.log(`Successfully synced post ${post.uri}`);\n } catch (error) {\n failed++;\n const errorMessage = error instanceof Error\n ? error.message\n : \"Unknown error\";\n\n errors.push({\n postUri: post.uri,\n message: errorMessage,\n retryable: this.isRetryableError(error),\n });\n\n // Update tracking record with error\n await this.storage.postTracking.updateByUri(post.uri, {\n sync_status: \"failed\",\n error_message: errorMessage,\n retry_count: 0,\n });\n\n console.error(`Failed to sync post ${post.uri}:`, error);\n }\n }\n\n return { successful, failed, errors };\n }\n\n /**\n * Sync a single post to Mastodon\n */\n async syncPostToMastodon(\n post: ATProtoPost,\n atprotoClient: ATProtoHttpClient,\n mastodonClient: MastodonHttpClient,\n ): Promise {\n // Create tracking record\n const contentHash = PostTransformer.generateContentHash(post);\n await this.storage.postTracking.create({\n atproto_uri: post.uri,\n atproto_cid: post.cid,\n atproto_rkey: post.uri.split(\"/\").pop()!,\n content_hash: contentHash,\n atproto_created_at: Math.floor(\n new Date(post.record.createdAt).getTime() / 1000,\n ),\n });\n\n // Transform post\n const transformation = PostTransformer.transformPost(post);\n\n // Resolve blob URLs using the ATProto client\n const resolvedTransformation = PostTransformer.resolveBlobUrls(\n transformation,\n atprotoClient,\n );\n\n // Cross-post to Mastodon with retry logic\n const mastodonPost = await this.crossPostWithRetry(\n mastodonClient,\n resolvedTransformation,\n );\n\n // Update tracking record\n await this.storage.postTracking.updateByUri(post.uri, {\n mastodon_id: mastodonPost.id,\n mastodon_url: mastodonPost.url,\n sync_status: \"success\",\n synced_at: Math.floor(Date.now() / 1000),\n });\n }\n\n /**\n * Cross-post to Mastodon with retry logic\n */\n private async crossPostWithRetry(\n mastodonClient: MastodonHttpClient,\n transformation: any,\n ): Promise {\n let lastError: Error | null = null;\n\n for (let attempt = 0; attempt <= this.retryConfig.maxRetries; attempt++) {\n try {\n // Upload media if present\n const mediaIds: string[] = [];\n if (transformation.media.length > 0) {\n for (const media of transformation.media) {\n try {\n // Get actual blob data from the resolved URL\n const response = await fetch(media.url);\n const blob = await response.blob();\n console.log(`Fetched ${media.type} blob:`, {\n url: media.url,\n size: blob.size,\n type: blob.type,\n });\n\n const uploadedMedia = await mastodonClient.uploadMedia(\n blob,\n media.description,\n );\n mediaIds.push(uploadedMedia.id);\n console.log(\n `Successfully uploaded ${media.type} to Mastodon:`,\n uploadedMedia.id,\n );\n } catch (error) {\n console.error(`Failed to upload media: ${media.url}`, error);\n // Continue with post even if media upload fails\n }\n }\n }\n\n // Format the post for Mastodon (adds footnotes, handles character limits)\n const mastodonFormatted = PostTransformer.formatForMastodon(\n transformation,\n );\n\n // Create the post\n const post = await mastodonClient.createPost({\n status: mastodonFormatted.status,\n media_ids: mediaIds,\n visibility: \"public\",\n });\n\n return post;\n } catch (error) {\n lastError = error instanceof Error ? error : new Error(\"Unknown error\");\n\n if (attempt === this.retryConfig.maxRetries) {\n throw lastError;\n }\n\n if (!this.isRetryableError(error)) {\n throw lastError;\n }\n\n // Calculate delay with exponential backoff\n const delay = Math.min(\n this.retryConfig.baseDelay *\n Math.pow(this.retryConfig.backoffFactor, attempt),\n this.retryConfig.maxDelay,\n );\n\n console.log(`Retry attempt ${attempt + 1} in ${delay}ms`);\n await new Promise((resolve) => setTimeout(resolve, delay));\n }\n }\n\n throw lastError;\n }\n\n /**\n * Check if an error is retryable\n */\n private isRetryableError(error: unknown): boolean {\n if (!(error instanceof Error)) return false;\n\n const message = error.message.toLowerCase();\n\n // Network errors\n if (\n message.includes(\"fetch\") || message.includes(\"network\") ||\n message.includes(\"timeout\")\n ) {\n return true;\n }\n\n // HTTP 5xx errors\n if (\n message.includes(\"500\") || message.includes(\"502\") ||\n message.includes(\"503\") || message.includes(\"504\")\n ) {\n return true;\n }\n\n // Rate limiting\n if (message.includes(\"429\") || message.includes(\"rate limit\")) {\n return true;\n }\n\n // Media processing errors\n if (message.includes(\"media processing\")) {\n return true;\n }\n\n return false;\n }\n}\n",[],[495,524,554],"86166a4c-8094-11f0-a977-0224a6c84d84","mastodon-client-masto.ts","0198d9f8-487c-763c-a562-7bc52b71af3b",["D",1756003583839],"import { createRestAPIClient } from \"https://esm.sh/masto@7.2.0\";\nimport { MastodonHttpClient } from \"../interfaces/http-client.ts\";\n\n/**\n * Mastodon client using masto.js library for better reliability and media handling\n */\nexport class MastodonClientMasto implements MastodonHttpClient {\n private client: any;\n private instanceUrl: string;\n private accessToken: string;\n\n constructor(instanceUrl: string, accessToken: string) {\n this.instanceUrl = instanceUrl.replace(/\\/$/, \"\"); // Remove trailing slash\n this.accessToken = accessToken;\n\n this.client = createRestAPIClient({\n url: this.instanceUrl,\n accessToken: this.accessToken,\n });\n }\n\n async verifyCredentials(): Promise {\n try {\n return await this.client.v1.accounts.verifyCredentials();\n } catch (error) {\n console.error(\"Failed to verify Mastodon credentials:\", error);\n throw error;\n }\n }\n\n async getAccount(): Promise {\n return await this.verifyCredentials();\n }\n\n async getInstance(): Promise {\n try {\n return await this.client.v1.instance.fetch();\n } catch (error) {\n console.error(\"Failed to get Mastodon instance info:\", error);\n throw error;\n }\n }\n\n async uploadMedia(file: Blob, description?: string): Promise {\n try {\n console.log(\"Uploading media to Mastodon:\", {\n size: file.size,\n type: file.type,\n description: description?.substring(0, 50),\n });\n\n const mediaAttachment = await this.client.v1.media.create({\n file,\n description,\n });\n\n console.log(\"Media upload successful:\", {\n id: mediaAttachment.id,\n type: mediaAttachment.type,\n url: mediaAttachment.url,\n });\n\n return mediaAttachment;\n } catch (error) {\n console.error(\"Failed to upload media to Mastodon:\", error);\n throw error;\n }\n }\n\n async getMediaStatus(mediaId: string): Promise {\n try {\n return await this.client.v1.media.fetch(mediaId);\n } catch (error) {\n console.error(\"Failed to get media status:\", error);\n throw error;\n }\n }\n\n async createPost(params: {\n status: string;\n media_ids?: string[];\n sensitive?: boolean;\n spoiler_text?: string;\n visibility?: \"public\" | \"unlisted\" | \"private\" | \"direct\";\n }): Promise {\n try {\n console.log(\"Creating Mastodon post:\", {\n statusLength: params.status.length,\n mediaCount: params.media_ids?.length || 0,\n visibility: params.visibility || \"public\",\n });\n\n const status = await this.client.v1.statuses.create({\n status: params.status,\n mediaIds: params.media_ids,\n sensitive: params.sensitive,\n spoilerText: params.spoiler_text,\n visibility: params.visibility || \"public\",\n });\n\n console.log(\"Post created successfully:\", {\n id: status.id,\n url: status.url,\n mediaAttachments: status.mediaAttachments?.length || 0,\n });\n\n return status;\n } catch (error) {\n console.error(\"Failed to create Mastodon post:\", error);\n throw error;\n }\n }\n\n // OAuth registration methods (still needed for initial setup)\n async registerApp(params: {\n client_name: string;\n redirect_uris: string;\n scopes?: string;\n website?: string;\n }): Promise {\n try {\n const response = await fetch(`${this.instanceUrl}/api/v1/apps`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n client_name: params.client_name,\n redirect_uris: params.redirect_uris,\n scopes: params.scopes || \"read write\",\n website: params.website,\n }),\n });\n\n if (!response.ok) {\n throw new Error(`Failed to register app: ${response.statusText}`);\n }\n\n return await response.json();\n } catch (error) {\n console.error(\"Failed to register Mastodon app:\", error);\n throw error;\n }\n }\n\n async exchangeCodeForToken(params: {\n client_id: string;\n client_secret: string;\n redirect_uri: string;\n grant_type: string;\n code: string;\n }): Promise {\n try {\n const response = await fetch(`${this.instanceUrl}/oauth/token`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(params),\n });\n\n if (!response.ok) {\n throw new Error(\n `Failed to exchange code for token: ${response.statusText}`,\n );\n }\n\n return await response.json();\n } catch (error) {\n console.error(\"Failed to exchange code for token:\", error);\n throw error;\n }\n }\n}\n",[],[495,524,561],"8616683a-8094-11f0-a977-0224a6c84d84","identity-resolver.ts","0198d9f8-487c-763c-a562-7751003c406c",["D",1756003583839],"// ATProto identity resolution service\nimport {\n DidResolver,\n HandleResolver,\n} from \"https://esm.sh/@atproto/identity@0.4.7\";\nexport class IdentityResolver {\n private didResolver: DidResolver;\n private handleResolver: HandleResolver;\n\n constructor() {\n this.didResolver = new DidResolver({});\n this.handleResolver = new HandleResolver({});\n }\n\n /**\n * Resolve a handle to a DID\n */\n async resolveHandleToDid(handle: string): Promise {\n try {\n const cleanHandle = handle.replace(\"@\", \"\");\n const did = await this.handleResolver.resolve(cleanHandle);\n\n if (!did) {\n return null;\n }\n\n return did;\n } catch (_error) {\n return null;\n }\n }\n\n /**\n * Resolve a DID to get its ATProto data including handle\n */\n async resolveDidToHandle(did: string): Promise {\n try {\n // Get ATProto-specific data from the DID document\n const atprotoData = await this.didResolver.resolveAtprotoData(did);\n\n if (!atprotoData?.handle) {\n return null;\n }\n\n return atprotoData.handle;\n } catch (_error) {\n return null;\n }\n }\n\n /**\n * Get the DID document for a given DID\n */\n async getDidDocument(did: string, forceRefresh = false) {\n try {\n const document = await this.didResolver.resolve(did, forceRefresh);\n\n return document;\n } catch (_error) {\n return null;\n }\n }\n\n /**\n * Resolve a handle to its PDS URL using proper ATProto identity resolution\n */\n async resolveHandleToPds(handle: string): Promise {\n try {\n const cleanHandle = handle.replace(\"@\", \"\");\n\n // First resolve handle to DID\n const did = await this.handleResolver.resolve(cleanHandle);\n if (!did) {\n return null;\n }\n\n // Then get ATProto data which includes PDS endpoint\n const atprotoData = await this.didResolver.resolveAtprotoData(did);\n if (!atprotoData?.pds) {\n return null;\n }\n\n return atprotoData.pds;\n } catch (_error) {\n return null;\n }\n }\n\n /**\n * Get ATProto-specific data from a DID\n */\n async getAtprotoData(did: string) {\n try {\n const atprotoData = await this.didResolver.resolveAtprotoData(did);\n\n return atprotoData;\n } catch (_error) {\n return null;\n }\n }\n}\n\n// Export a singleton instance\nexport const identityResolver = new IdentityResolver();\n",[],[495,524,568],"86166326-8094-11f0-a977-0224a6c84d84","authentication-manager.ts","0198d9f8-487c-763c-a562-70b0f8fe46c4",["D",1756003583839],"import { StorageProvider } from \"../interfaces/storage.ts\";\nimport {\n ATProtoHttpClient,\n MastodonHttpClient,\n} from \"../interfaces/http-client.ts\";\n\nexport interface AuthenticationResult {\n atprotoClient: ATProtoHttpClient;\n mastodonClient: MastodonHttpClient;\n}\n\nexport class AuthenticationManager {\n constructor(\n private storage: StorageProvider,\n private createATProtoClient: (\n pdsUrl: string,\n accessToken: string,\n refreshToken: string,\n did: string,\n onTokenRefresh?: (\n tokens: { accessJwt: string; refreshJwt: string },\n ) => Promise,\n appPassword?: string,\n ) => ATProtoHttpClient,\n private createMastodonClient: (\n instanceUrl: string,\n accessToken: string,\n ) => MastodonHttpClient,\n ) {}\n\n /**\n * Validate authentication credentials and create API clients\n */\n validateAuthenticationAndCreateClients(account: any): AuthenticationResult {\n // Validate required tokens\n if (\n !account.atproto_access_token || !account.atproto_pds_url ||\n !account.atproto_did\n ) {\n throw new Error(\"Missing ATProto credentials\");\n }\n\n if (!account.mastodon_access_token || !account.mastodon_instance_url) {\n throw new Error(\"Missing Mastodon credentials\");\n }\n\n // Initialize ATProto client - prefer App Password from env if available\n let atprotoClient: ATProtoHttpClient;\n let appPassword: string | undefined;\n try {\n appPassword = Deno.env.get(\"ATPROTO_APP_PASSWORD\");\n } catch (_error) {\n // Environment access not available (e.g., in tests without --allow-env)\n appPassword = undefined;\n }\n\n if (appPassword && account.atproto_handle) {\n console.log(\n \"Using App Password from environment for ATProto authentication\",\n );\n atprotoClient = this.createATProtoClient(\n account.atproto_pds_url,\n account.atproto_handle, // Use handle instead of access token\n appPassword, // Use app password from env instead of refresh token\n account.atproto_did,\n undefined, // No token refresh callback needed for app passwords\n appPassword, // Pass app password to enable app password mode\n );\n } else {\n console.log(\"Using OAuth tokens for ATProto authentication\");\n atprotoClient = this.createATProtoClient(\n account.atproto_pds_url,\n account.atproto_access_token,\n account.atproto_refresh_token || \"\",\n account.atproto_did,\n async (tokens) => {\n // Update stored tokens when they're refreshed\n console.log(\"Updating refreshed ATProto tokens in sync service\");\n await this.storage.userAccounts.updateSingle({\n atproto_access_token: tokens.accessJwt,\n atproto_refresh_token: tokens.refreshJwt,\n atproto_token_expires_at: Date.now() + (3600 * 1000), // Assume 1 hour expiry\n });\n },\n );\n }\n\n const mastodonClient = this.createMastodonClient(\n account.mastodon_instance_url,\n account.mastodon_access_token,\n );\n\n return { atprotoClient, mastodonClient };\n }\n}\n",[],[495,524,575],"86165c46-8094-11f0-a977-0224a6c84d84","atproto-validator.ts","0198d9f8-487c-763c-a562-6c5a63fd8350",["D",1756003583839],"import { ATProtoPost } from \"../../shared/types.ts\";\n\n/**\n * ATProto data validation service using practical validation rules\n */\nexport class ATProtoValidator {\n /**\n * Validate an ATProto post record\n */\n validatePost(record: any): { valid: boolean; errors: string[] } {\n const errors: string[] = [];\n\n // Basic required fields\n if (record.text === undefined) {\n errors.push(\"Post record must have a text field\");\n }\n\n if (record.createdAt === undefined) {\n errors.push(\"Post record must have a createdAt field\");\n }\n\n // Type validations\n if (record.text !== undefined && typeof record.text !== \"string\") {\n errors.push(\"Post text must be a string\");\n }\n\n if (\n record.createdAt !== undefined && !this.isValidDateTime(record.createdAt)\n ) {\n errors.push(\"Post createdAt must be a valid ISO datetime string\");\n }\n\n // Content validation\n if (!record.text && !record.embed) {\n errors.push(\"Post must have either text content or an embed\");\n }\n\n // Text length validation (Bluesky limit)\n if (record.text && record.text.length > 3000) {\n errors.push(\"Post text exceeds maximum length of 3000 characters\");\n }\n\n // Facets validation\n if (record.facets !== undefined) {\n if (!Array.isArray(record.facets)) {\n errors.push(\"Post facets must be an array\");\n } else {\n for (let i = 0; i < record.facets.length; i++) {\n const facetErrors = this.validateFacet(record.facets[i], i);\n errors.push(...facetErrors);\n }\n }\n }\n\n // Embed validation\n if (record.embed) {\n const embedErrors = this.validateEmbed(record.embed);\n errors.push(...embedErrors);\n }\n\n return { valid: errors.length === 0, errors };\n }\n\n /**\n * Validate a facet\n */\n private validateFacet(facet: any, index: number): string[] {\n const errors: string[] = [];\n\n if (!facet.index || typeof facet.index !== \"object\") {\n errors.push(`Facet ${index}: missing or invalid index`);\n return errors;\n }\n\n if (\n typeof facet.index.byteStart !== \"number\" ||\n typeof facet.index.byteEnd !== \"number\"\n ) {\n errors.push(\n `Facet ${index}: index must have numeric byteStart and byteEnd`,\n );\n }\n\n if (facet.index.byteStart < 0 || facet.index.byteEnd < 0) {\n errors.push(`Facet ${index}: index values must be non-negative`);\n }\n\n if (facet.index.byteStart >= facet.index.byteEnd) {\n errors.push(`Facet ${index}: byteStart must be less than byteEnd`);\n }\n\n if (!Array.isArray(facet.features)) {\n errors.push(`Facet ${index}: features must be an array`);\n return errors;\n }\n\n for (let i = 0; i < facet.features.length; i++) {\n const feature = facet.features[i];\n if (!feature.$type) {\n errors.push(`Facet ${index}, feature ${i}: missing $type`);\n continue;\n }\n\n switch (feature.$type) {\n case \"app.bsky.richtext.facet#mention\":\n if (!feature.did || typeof feature.did !== \"string\") {\n errors.push(\n `Facet ${index}, feature ${i}: mention must have a valid did`,\n );\n }\n break;\n case \"app.bsky.richtext.facet#link\":\n if (!feature.uri || typeof feature.uri !== \"string\") {\n errors.push(\n `Facet ${index}, feature ${i}: link must have a valid uri`,\n );\n }\n break;\n case \"app.bsky.richtext.facet#tag\":\n if (!feature.tag || typeof feature.tag !== \"string\") {\n errors.push(\n `Facet ${index}, feature ${i}: tag must have a valid tag`,\n );\n }\n break;\n default:\n errors.push(\n `Facet ${index}, feature ${i}: unknown feature type ${feature.$type}`,\n );\n }\n }\n\n return errors;\n }\n\n /**\n * Validate an embed\n */\n private validateEmbed(embed: any): string[] {\n const errors: string[] = [];\n\n if (!embed.$type) {\n errors.push(\"Embed: missing $type\");\n return errors;\n }\n\n switch (embed.$type) {\n case \"app.bsky.embed.images\":\n if (!Array.isArray(embed.images)) {\n errors.push(\"Images embed: images must be an array\");\n } else if (embed.images.length === 0) {\n errors.push(\"Images embed: must have at least one image\");\n } else if (embed.images.length > 4) {\n errors.push(\"Images embed: cannot have more than 4 images\");\n } else {\n for (let i = 0; i < embed.images.length; i++) {\n const image = embed.images[i];\n if (!image.image || !image.image.ref) {\n errors.push(\n `Images embed, image ${i}: missing image blob reference`,\n );\n }\n if (image.alt === undefined) {\n errors.push(`Images embed, image ${i}: missing alt text`);\n }\n }\n }\n break;\n case \"app.bsky.embed.video\":\n if (!embed.video || !embed.video.ref) {\n errors.push(\"Video embed: missing video blob reference\");\n }\n break;\n case \"app.bsky.embed.external\":\n if (!embed.external) {\n errors.push(\"External embed: missing external object\");\n }\n break;\n default:\n // Allow other embed types without validation for now\n break;\n }\n\n return errors;\n }\n\n /**\n * Validate a complete ATProto post\n */\n validateATProtoPost(post: ATProtoPost): { valid: boolean; errors: string[] } {\n const errors: string[] = [];\n\n // Validate basic structure\n if (!post.uri || typeof post.uri !== \"string\") {\n errors.push(\"Post must have a valid URI\");\n }\n\n if (!post.cid || typeof post.cid !== \"string\") {\n errors.push(\"Post must have a valid CID\");\n }\n\n if (!post.author || typeof post.author !== \"object\") {\n errors.push(\"Post must have a valid author object\");\n } else {\n if (!post.author.did || typeof post.author.did !== \"string\") {\n errors.push(\"Post author must have a valid DID\");\n }\n if (!post.author.handle || typeof post.author.handle !== \"string\") {\n errors.push(\"Post author must have a valid handle\");\n }\n }\n\n if (!post.record || typeof post.record !== \"object\") {\n errors.push(\"Post must have a valid record object\");\n } else {\n // Validate the record using lexicon\n const recordValidation = this.validatePost(post.record);\n errors.push(...recordValidation.errors);\n }\n\n if (!post.indexedAt || typeof post.indexedAt !== \"string\") {\n errors.push(\"Post must have a valid indexedAt timestamp\");\n }\n\n return { valid: errors.length === 0, errors };\n }\n\n /**\n * Check if a string is a valid ISO datetime\n */\n private isValidDateTime(dateTime: string): boolean {\n try {\n const date = new Date(dateTime);\n return !isNaN(date.getTime()) && dateTime.includes(\"T\") &&\n dateTime.includes(\"Z\");\n } catch {\n return false;\n }\n }\n\n /**\n * Sanitize an ATProto post by removing invalid fields\n */\n sanitizePost(post: any): any {\n const sanitized = { ...post };\n\n // Sanitize record\n if (sanitized.record) {\n // Ensure text is a string\n if (typeof sanitized.record.text !== \"string\") {\n sanitized.record.text = \"\";\n }\n\n // Remove invalid facets\n if (Array.isArray(sanitized.record.facets)) {\n sanitized.record.facets = sanitized.record.facets.filter(\n (facet: any) => {\n const validation = this.validateFacet(facet, 0);\n return validation.length === 0;\n },\n );\n }\n\n // Remove invalid embeds\n if (sanitized.record.embed) {\n const embedValidation = this.validateEmbed(sanitized.record.embed);\n if (embedValidation.length > 0) {\n delete sanitized.record.embed;\n }\n }\n }\n\n return sanitized;\n }\n}\n",[],[495,524,582],"86165750-8094-11f0-a977-0224a6c84d84","atproto-password-client.ts","0198d9f8-487c-763c-a562-680362d55429",["D",1756003583839],"import { BskyAgent } from \"https://esm.sh/@atproto/api@0.15.23\";\nimport { ATProtoPost } from \"../../shared/types.ts\";\n\n/**\n * ATProto client using App Password authentication\n * Simple implementation using BskyAgent with bsky.social\n */\nexport class ATProtoPasswordClient {\n private agent: BskyAgent;\n private did: string;\n private handle: string;\n private appPassword: string;\n\n constructor(\n _pdsUrl: string, // Not needed for BskyAgent\n handle: string,\n appPassword: string,\n did: string,\n ) {\n // Use BskyAgent with bsky.social (the standard approach)\n this.agent = new BskyAgent({\n service: \"https://bsky.social\",\n });\n this.did = did;\n this.handle = handle;\n this.appPassword = appPassword;\n }\n\n /**\n * Login using App Password\n */\n async login(): Promise {\n await this.agent.login({\n identifier: this.handle,\n password: this.appPassword,\n });\n }\n\n /**\n * Get the current session info\n */\n getSession() {\n return this.agent.session;\n }\n\n /**\n * Fetch recent posts from the user's timeline\n */\n async fetchRecentPosts(\n limit: number = 50,\n cursor?: string,\n ): Promise<{ posts: ATProtoPost[]; cursor?: string }> {\n const response = await this.agent.getAuthorFeed({\n actor: this.handle,\n limit,\n cursor,\n });\n\n if (!response.success) {\n throw new Error(\"Failed to fetch author feed\");\n }\n\n return this.transformResponse(response);\n }\n\n private transformResponse(response: any) {\n // Transform the feed items to our ATProtoPost format\n const posts: ATProtoPost[] = response.data.feed.map((item) => ({\n uri: item.post.uri,\n cid: item.post.cid,\n author: {\n did: item.post.author.did,\n handle: item.post.author.handle,\n displayName: item.post.author.displayName || undefined,\n avatar: item.post.author.avatar || undefined,\n },\n record: {\n text: (item.post.record as any).text || \"\",\n createdAt: (item.post.record as any).createdAt,\n embed: (item.post.record as any).embed,\n facets: (item.post.record as any).facets,\n reply: (item.post.record as any).reply,\n },\n indexedAt: item.post.indexedAt,\n }));\n\n return {\n posts,\n cursor: response.data.cursor,\n };\n }\n\n /**\n * Fetch posts since a specific timestamp\n */\n fetchPostsSince(\n sinceTime: string,\n limit: number = 50,\n ): Promise<{ posts: ATProtoPost[]; cursor?: string }> {\n return this.fetchPostsWithCursor(undefined, sinceTime, limit);\n }\n\n /**\n * Fetch posts starting from a cursor with optional time filtering\n */\n async fetchPostsWithCursor(\n startCursor?: string,\n sinceTime?: string,\n limit: number = 50,\n ): Promise<{ posts: ATProtoPost[]; cursor?: string }> {\n let allPosts: ATProtoPost[] = [];\n let cursor: string | undefined = startCursor;\n let hasMore = true;\n let finalCursor: string | undefined;\n\n while (hasMore && allPosts.length < limit) {\n const { posts, cursor: nextCursor } = await this.fetchRecentPosts(\n Math.min(50, limit - allPosts.length),\n cursor,\n );\n\n if (posts.length === 0) {\n hasMore = false;\n break;\n }\n\n let postsToAdd = posts;\n\n // Apply time filter if provided\n if (sinceTime) {\n postsToAdd = posts.filter((post) => post.record.createdAt > sinceTime);\n\n // If we got filtered posts and some were too old, we can stop\n if (postsToAdd.length < posts.length) {\n allPosts = allPosts.concat(postsToAdd);\n finalCursor = nextCursor;\n hasMore = false;\n break;\n }\n }\n\n allPosts = allPosts.concat(postsToAdd);\n finalCursor = nextCursor;\n cursor = nextCursor;\n\n // Stop if we got fewer posts than requested (reached end)\n if (posts.length < 50) {\n hasMore = false;\n }\n\n // Stop if no cursor (reached end)\n if (!nextCursor) {\n hasMore = false;\n }\n }\n\n return {\n posts: allPosts.slice(0, limit),\n cursor: finalCursor,\n };\n }\n\n /**\n * Get a specific post by URI\n */\n async getPost(uri: string): Promise {\n const response = await this.agent.getPostThread({\n uri,\n depth: 0,\n });\n\n if (!response.success) {\n return null;\n }\n\n const thread = response.data.thread;\n if (!thread || thread.$type !== \"app.bsky.feed.defs#threadViewPost\") {\n return null;\n }\n const post = (thread as any).post;\n\n return {\n uri: post.uri,\n cid: post.cid,\n author: {\n did: post.author.did,\n handle: post.author.handle,\n displayName: post.author.displayName || undefined,\n avatar: post.author.avatar || undefined,\n },\n record: {\n text: (post.record as any).text || \"\",\n createdAt: (post.record as any).createdAt,\n embed: (post.record as any).embed,\n facets: (post.record as any).facets,\n reply: (post.record as any).reply,\n },\n indexedAt: post.indexedAt,\n };\n }\n\n /**\n * Resolve a blob reference to a URL using bsky.social\n */\n resolveBlobUrl(blobRef: string): string {\n // Use bsky.social for blob URLs (standard approach)\n return `https://bsky.social/xrpc/com.atproto.sync.getBlob?did=${this.did}&cid=${blobRef}`;\n }\n\n /**\n * Get blob data as ArrayBuffer\n */\n async getBlobData(blobRef: string): Promise {\n const url = this.resolveBlobUrl(blobRef);\n const response = await fetch(url);\n\n if (!response.ok) {\n throw new Error(\"Failed to fetch blob\");\n }\n\n return await response.arrayBuffer();\n }\n\n /**\n * Get blob as Blob object for media uploads\n */\n async getBlob(blobRef: string): Promise {\n const data = await this.getBlobData(blobRef);\n return new Blob([data]);\n }\n\n /**\n * Get user profile information\n */\n async getProfile(): Promise {\n const response = await this.agent.getProfile({\n actor: this.did,\n });\n\n if (!response.success) {\n throw new Error(\"Failed to get profile\");\n }\n\n return response.data;\n }\n\n /**\n * Verify credentials and test connection\n */\n async verifyCredentials(): Promise {\n try {\n // Try to get the current session\n const response = await this.agent.api.com.atproto.server.getSession();\n return response.success;\n } catch (error) {\n console.error(\"Credential verification error:\", error);\n return false;\n }\n }\n}\n",[],[495,524,589],"861652e6-8094-11f0-a977-0224a6c84d84","atproto-client-adapter.ts","0198d9f8-487c-763c-a562-674d382bbdf9",["D",1756003583839],"import { ATProtoHttpClient } from \"../interfaces/http-client.ts\";\nimport { ATProtoApiClient } from \"./atproto-api-client.ts\";\nimport { ATProtoPasswordClient } from \"./atproto-password-client.ts\";\n\n/**\n * Adapter that implements the ATProtoHttpClient interface using either OAuth tokens or App Password\n */\nexport class ATProtoClientAdapter implements ATProtoHttpClient {\n private oauthClient?: ATProtoApiClient;\n private passwordClient?: ATProtoPasswordClient;\n private useAppPassword: boolean;\n\n constructor(\n pdsUrl: string,\n accessTokenOrHandle: string,\n refreshTokenOrAppPassword: string,\n did: string,\n onTokenRefresh?: (\n tokens: { accessJwt: string; refreshJwt: string },\n ) => Promise,\n appPassword?: string,\n ) {\n // If appPassword is provided, use App Password authentication\n this.useAppPassword = !!appPassword;\n\n if (this.useAppPassword && appPassword) {\n console.log(\"Using App Password authentication for ATProto\");\n this.passwordClient = new ATProtoPasswordClient(\n pdsUrl,\n accessTokenOrHandle, // This is actually the handle\n appPassword,\n did,\n );\n } else {\n console.log(\"Using OAuth token authentication for ATProto\");\n this.oauthClient = new ATProtoApiClient(\n pdsUrl,\n accessTokenOrHandle, // This is the access token\n refreshTokenOrAppPassword, // This is the refresh token\n did,\n onTokenRefresh,\n );\n }\n }\n\n async initialize(): Promise {\n if (this.useAppPassword && this.passwordClient) {\n // Login with App Password\n await this.passwordClient.login();\n } else if (this.oauthClient) {\n // Resume OAuth session\n await this.oauthClient.resumeSession();\n }\n }\n\n private async ensureInitialized(): Promise {\n // Always ensure we're authenticated before making API calls\n await this.initialize();\n }\n\n async fetchPosts(params: {\n actor: string;\n limit: number;\n cursor?: string;\n }): Promise {\n // Post fetching only available with App Password client\n if (!this.useAppPassword || !this.passwordClient) {\n throw new Error(\"Post fetching requires App Password authentication\");\n }\n\n const result = await this.passwordClient.fetchRecentPosts(\n params.limit,\n params.cursor,\n );\n\n // Transform to match expected interface\n return {\n feed: result.posts.map((post) => ({\n post: {\n uri: post.uri,\n cid: post.cid,\n author: post.author,\n record: post.record,\n indexedAt: post.indexedAt,\n },\n })),\n cursor: result.cursor,\n };\n }\n\n async getPost(uri: string): Promise {\n // Post fetching only available with App Password client\n if (!this.useAppPassword || !this.passwordClient) {\n throw new Error(\"Post fetching requires App Password authentication\");\n }\n\n const post = await this.passwordClient.getPost(uri);\n if (!post) {\n throw new Error(\"Post not found\");\n }\n\n return {\n thread: {\n post: {\n uri: post.uri,\n cid: post.cid,\n author: post.author,\n record: post.record,\n indexedAt: post.indexedAt,\n },\n },\n };\n }\n\n async getProfile(_actor: string): Promise {\n // Profile can be fetched with either client\n const client = this.useAppPassword ? this.passwordClient : this.oauthClient;\n if (!client) throw new Error(\"No client available\");\n\n return await client.getProfile();\n }\n\n resolveHandle(_handle: string): Promise {\n // The official API doesn't expose this directly, but we can use identity resolver\n throw new Error(\n \"resolveHandle not implemented - use identity resolver instead\",\n );\n }\n\n getBlob(_did: string, cid: string): Promise {\n // Blob operations only available with App Password client\n if (!this.useAppPassword || !this.passwordClient) {\n throw new Error(\"Blob operations require App Password authentication\");\n }\n\n return Promise.resolve(this.passwordClient.resolveBlobUrl(cid));\n }\n\n resolveBlobUrl(cid: string): string {\n // Blob operations only available with App Password client\n if (!this.useAppPassword || !this.passwordClient) {\n throw new Error(\"Blob operations require App Password authentication\");\n }\n\n return this.passwordClient.resolveBlobUrl(cid);\n }\n\n /**\n * Get blob as Blob object for media processing\n */\n async getBlobAsBlob(cid: string): Promise {\n // Blob operations only available with App Password client\n if (!this.useAppPassword || !this.passwordClient) {\n throw new Error(\"Blob operations require App Password authentication\");\n }\n\n return await this.passwordClient.getBlob(cid);\n }\n\n /**\n * Fetch posts with cursor support for better pagination\n */\n async fetchPostsWithCursor(params: {\n startCursor?: string;\n sinceTime?: string;\n limit: number;\n }): Promise<{ posts: any[]; cursor?: string }> {\n await this.ensureInitialized();\n\n // Post fetching only available with App Password client\n if (!this.useAppPassword || !this.passwordClient) {\n throw new Error(\"Post fetching requires App Password authentication\");\n }\n\n const result = await this.passwordClient.fetchPostsWithCursor(\n params.startCursor,\n params.sinceTime,\n params.limit,\n );\n\n // Transform to match expected interface\n return {\n posts: result.posts.map((post) => ({\n post: {\n uri: post.uri,\n cid: post.cid,\n author: post.author,\n record: post.record,\n indexedAt: post.indexedAt,\n },\n })),\n cursor: result.cursor,\n };\n }\n\n async refreshToken(_refreshToken: string): Promise<{\n access_token: string;\n refresh_token: string;\n expires_in: number;\n }> {\n if (this.useAppPassword) {\n // App passwords don't need refresh\n throw new Error(\"App passwords don't require token refresh\");\n }\n\n if (!this.oauthClient) {\n throw new Error(\"No OAuth client available for token refresh\");\n }\n\n // Resume session handles token refresh\n await this.oauthClient.resumeSession();\n const session = this.oauthClient.getSession();\n\n if (!session) {\n throw new Error(\"Failed to refresh token\");\n }\n\n // Return in expected format\n return {\n access_token: session.accessJwt,\n refresh_token: session.refreshJwt,\n expires_in: 3600, // Default to 1 hour\n };\n }\n}\n",[],[495,524,596],"86164e4a-8094-11f0-a977-0224a6c84d84","atproto-api-client.ts","0198d9f8-487c-763c-a562-61caa5317a31",["D",1756003583839],"import { BskyAgent } from \"https://esm.sh/@atproto/api@0.15.23\";\n\nexport class ATProtoApiClient {\n private agent: BskyAgent;\n private did: string;\n private pdsUrl: string;\n private initialAccessToken: string;\n private initialRefreshToken: string;\n private onTokenRefresh?: (\n tokens: { accessJwt: string; refreshJwt: string },\n ) => Promise;\n\n constructor(\n pdsUrl: string,\n accessToken: string,\n refreshToken: string,\n did: string,\n onTokenRefresh?: (\n tokens: { accessJwt: string; refreshJwt: string },\n ) => Promise,\n ) {\n // Use BskyAgent with bsky.social\n this.agent = new BskyAgent({\n service: \"https://bsky.social\",\n persistSession: (evt, session) => {\n // Handle session updates (including token refresh)\n if (evt === \"update\" && session && this.onTokenRefresh) {\n console.log(\"ATProto session updated, tokens refreshed\");\n this.onTokenRefresh({\n accessJwt: session.accessJwt,\n refreshJwt: session.refreshJwt,\n }).catch((error) => {\n console.error(\"Failed to persist refreshed tokens:\", error);\n });\n }\n },\n });\n this.did = did;\n this.pdsUrl = pdsUrl;\n this.initialAccessToken = accessToken;\n this.initialRefreshToken = refreshToken;\n this.onTokenRefresh = onTokenRefresh;\n }\n\n /**\n * Resume session and refresh tokens if needed\n */\n async resumeSession(): Promise {\n try {\n console.log(\"Attempting to resume ATProto session with DID:\", this.did);\n console.log(\"Access token length:\", this.initialAccessToken.length);\n console.log(\"Refresh token length:\", this.initialRefreshToken.length);\n console.log(\n \"Access token starts with:\",\n this.initialAccessToken.substring(0, 20) + \"...\",\n );\n console.log(\n \"Refresh token starts with:\",\n this.initialRefreshToken.substring(0, 20) + \"...\",\n );\n\n // Create session data - let the library handle DPoP automatically\n const sessionData = {\n did: this.did,\n accessJwt: this.initialAccessToken,\n refreshJwt: this.initialRefreshToken,\n handle: \"\", // Will be filled by resumeSession\n active: true,\n };\n\n // The library should automatically handle DPoP and token refresh\n await this.agent.resumeSession(sessionData);\n console.log(\"ATProto session resumed successfully\");\n } catch (error) {\n console.error(\"Failed to resume ATProto session:\", error);\n\n // Log the specific error for debugging\n if (error && typeof error === \"object\" && \"error\" in error) {\n console.error(\"Server error code:\", error.error);\n }\n\n // If we get InvalidToken, try to get a fresh session using password auth\n if (\n error instanceof Error && (\n error.message.includes(\"InvalidToken\") ||\n error.message.includes(\"Bad token scope\")\n )\n ) {\n console.log(\n \"DPoP tokens invalid, this is expected with the current OAuth implementation\",\n );\n throw new Error(\n \"ATProto tokens are invalid. Please re-authenticate with Bluesky.\",\n );\n }\n\n throw error;\n }\n }\n\n /**\n * Get the current session info\n */\n getSession() {\n return this.agent.session;\n }\n\n /**\n * Get user profile information\n */\n async getProfile(): Promise {\n try {\n const response = await this.agent.getProfile({\n actor: this.did,\n });\n\n if (!response.success) {\n throw new Error(\"Failed to get profile\");\n }\n\n return response.data;\n } catch (error) {\n console.error(\"Get profile error:\", error);\n throw error;\n }\n }\n\n /**\n * Verify credentials and test connection\n */\n async verifyCredentials(): Promise {\n try {\n // Try to get the current session\n const response = await this.agent.api.com.atproto.server.getSession();\n return response.success;\n } catch (error) {\n console.error(\"Credential verification error:\", error);\n return false;\n }\n }\n}\n",[],[495,524,603],"86168f36-8094-11f0-a977-0224a6c84d84",["D",1756003583839],[278,279,280,281,282,283,284,285,286,287,288,289,290],[495,524],"8616471a-8094-11f0-a977-0224a6c84d84","setup.ts","0198d9f8-487c-763c-a562-58fedf2dd0f3","0198d9f8-487c-763c-a562-5c2d3797d3b6",["D",1756003583839],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport {\n createDefaultSettings,\n createUserAccount,\n getUserAccount,\n updateUserAccount,\n} from \"../database/queries.ts\";\nimport { SetupState, SetupStep } from \"../../shared/types.ts\";\nimport { blockIfSetupCompleted } from \"./auth.ts\";\n\nconst setup = new Hono();\n\n// Get setup state for the single user\nasync function getSetupState(): Promise {\n const userAccount = await getUserAccount();\n\n const steps: SetupStep[] = [\n {\n id: \"create-account\",\n title: \"Create Bridge Account\",\n description: \"Initialize your bridge account\",\n completed: !!userAccount,\n },\n {\n id: \"connect-bluesky\",\n title: \"Connect Bluesky Account\",\n description: \"Connect your Bluesky/ATProto account using OAuth\",\n completed: !!userAccount?.atproto_access_token,\n },\n {\n id: \"connect-mastodon\",\n title: \"Connect Mastodon Account\",\n description: \"Connect your Mastodon account using OAuth\",\n completed: !!userAccount?.mastodon_access_token,\n },\n {\n id: \"configure-sync\",\n title: \"Configure Sync Settings\",\n description: \"Set up your synchronization preferences\",\n completed: !!userAccount?.setup_completed,\n },\n ];\n\n const completedSteps = steps.filter((s) => s.completed).length;\n const currentStep = Math.min(completedSteps, steps.length - 1);\n\n return {\n currentStep,\n steps,\n userId: \"single-user\", // For backward compatibility\n atprotoConnected: !!userAccount?.atproto_access_token,\n mastodonConnected: !!userAccount?.mastodon_access_token,\n setupCompleted: !!userAccount?.setup_completed,\n };\n}\n\n// Start setup - get or create the single user account\nsetup.post(\"/start\", blockIfSetupCompleted(), async (c) => {\n try {\n // For single-user service, get or create the single user account\n let userAccount = await getUserAccount();\n\n if (!userAccount) {\n // Create the single user account\n userAccount = await createUserAccount();\n await createDefaultSettings();\n }\n\n const setupState = await getSetupState();\n\n return c.json({\n success: true,\n userId: \"single-user\", // For backward compatibility\n setupState,\n });\n } catch (error) {\n console.error(\"Setup start error:\", error);\n return c.json({ error: \"Failed to start setup\" }, 500);\n }\n});\n\n// Get setup state\nsetup.get(\"/state/:userId\", async (c) => {\n const _userId = c.req.param(\"userId\");\n\n try {\n const setupState = await getSetupState();\n return c.json(setupState);\n } catch (error) {\n console.error(\"Setup state error:\", error);\n return c.json({ error: \"Failed to get setup state\" }, 500);\n }\n});\n\n// Complete setup\nsetup.post(\"/complete/:userId\", async (c) => {\n const _userId = c.req.param(\"userId\");\n\n try {\n const userAccount = await getUserAccount();\n\n if (!userAccount) {\n return c.json({ error: \"User account not found\" }, 404);\n }\n\n // Verify both accounts are connected\n if (\n !userAccount.atproto_access_token || !userAccount.mastodon_access_token\n ) {\n return c.json({\n error: \"Both accounts must be connected before completing setup\",\n }, 400);\n }\n\n // Mark setup as completed\n await updateUserAccount({\n setup_completed: true,\n });\n\n const setupState = await getSetupState();\n\n return c.json({\n success: true,\n setupState,\n });\n } catch (error) {\n console.error(\"Setup complete error:\", error);\n return c.json({ error: \"Failed to complete setup\" }, 500);\n }\n});\n\n// Check if user is already set up (for landing page redirect)\nsetup.get(\"/check\", (c) => {\n try {\n // For now, we'll use a simple approach - check if there's any completed setup\n // In a real app, you'd check based on session/auth\n // This is a placeholder that always returns no user for new visitors\n\n // TODO: Implement proper user session/auth checking\n // For now, return no user so landing page works as expected\n return c.json({\n hasSetupUser: false,\n userId: null,\n });\n } catch (error) {\n console.error(\"Setup check error:\", error);\n return c.json({ error: \"Failed to check setup status\" }, 500);\n }\n});\n\n// Test connections\nsetup.post(\"/test-connections/:userId\", blockIfSetupCompleted(), async (c) => {\n const _userId = c.req.param(\"userId\");\n\n try {\n const userAccount = await getUserAccount();\n\n if (!userAccount) {\n return c.json({ error: \"User account not found\" }, 404);\n }\n\n const results = {\n atproto: { connected: false, error: null as string | null },\n mastodon: { connected: false, error: null as string | null },\n };\n\n // Test ATProto connection\n if (userAccount.atproto_access_token && userAccount.atproto_pds_url) {\n try {\n const response = await fetch(\n `${userAccount.atproto_pds_url}/xrpc/com.atproto.identity.resolveHandle?handle=${userAccount.atproto_handle}`,\n {\n headers: {\n \"Authorization\": `Bearer ${userAccount.atproto_access_token}`,\n },\n },\n );\n\n if (response.ok) {\n results.atproto.connected = true;\n } else {\n results.atproto.error =\n `HTTP ${response.status}: ${response.statusText}`;\n }\n } catch (error) {\n results.atproto.error = error instanceof Error\n ? error.message\n : \"Unknown error\";\n }\n } else {\n results.atproto.error = \"No ATProto credentials found\";\n }\n\n // Test Mastodon connection\n if (\n userAccount.mastodon_access_token && userAccount.mastodon_instance_url\n ) {\n try {\n const response = await fetch(\n `${userAccount.mastodon_instance_url}/api/v1/accounts/verify_credentials`,\n {\n headers: {\n \"Authorization\": `Bearer ${userAccount.mastodon_access_token}`,\n },\n },\n );\n\n if (response.ok) {\n results.mastodon.connected = true;\n } else {\n results.mastodon.error =\n `HTTP ${response.status}: ${response.statusText}`;\n }\n } catch (error) {\n results.mastodon.error = error instanceof Error\n ? error.message\n : \"Unknown error\";\n }\n } else {\n results.mastodon.error = \"No Mastodon credentials found\";\n }\n\n return c.json(results);\n } catch (error) {\n console.error(\"Test connections error:\", error);\n return c.json({ error: \"Failed to test connections\" }, 500);\n }\n});\n\nexport default setup;\n",[],[495,621,614],"routes","86163266-8094-11f0-a977-0224a6c84d84","oauth.ts","0198d9f8-487c-763c-a562-542e87786c19",["D",1756003583839],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { getCookie, setCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { getUserAccount, updateUserAccount } from \"../database/queries.ts\";\nimport { createUserSession } from \"../lib/session.ts\";\nimport { identityResolver } from \"../services/identity-resolver.ts\";\n\nconst oauth = new Hono();\n\n// Generate random state for OAuth security\nfunction generateState(): string {\n return crypto.randomUUID();\n}\n\n// Generate code verifier for PKCE\nfunction generateCodeVerifier(): string {\n const array = new Uint8Array(32);\n crypto.getRandomValues(array);\n return btoa(String.fromCharCode(...array))\n .replace(/\\+/g, \"-\")\n .replace(/\\//g, \"_\")\n .replace(/=/g, \"\");\n}\n\n// Generate code challenge from verifier\nasync function generateCodeChallenge(verifier: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(verifier);\n const digest = await crypto.subtle.digest(\"SHA-256\", data);\n return btoa(String.fromCharCode(...new Uint8Array(digest)))\n .replace(/\\+/g, \"-\")\n .replace(/\\//g, \"_\")\n .replace(/=/g, \"\");\n}\n\n// Generate DPoP key pair\nasync function generateDPoPKeyPair(): Promise<{\n publicKey: CryptoKey;\n privateKey: CryptoKey;\n jwk: JsonWebKey;\n}> {\n const keyPair = await crypto.subtle.generateKey(\n {\n name: \"ECDSA\",\n namedCurve: \"P-256\",\n },\n true,\n [\"sign\", \"verify\"],\n );\n\n const jwk = await crypto.subtle.exportKey(\"jwk\", keyPair.publicKey);\n\n return {\n publicKey: keyPair.publicKey,\n privateKey: keyPair.privateKey,\n jwk,\n };\n}\n\n// Base64URL encode function\nfunction base64urlEncode(data: ArrayBuffer | Uint8Array): string {\n const uint8Array = data instanceof Uint8Array ? data : new Uint8Array(data);\n return btoa(String.fromCharCode(...uint8Array))\n .replace(/\\+/g, \"-\")\n .replace(/\\//g, \"_\")\n .replace(/=/g, \"\");\n}\n\n// Create DPoP proof JWT using Web Crypto API\nasync function createDPoPProof(\n privateKey: CryptoKey,\n jwk: JsonWebKey,\n method: string,\n url: string,\n nonce?: string,\n): Promise {\n const header = {\n alg: \"ES256\",\n typ: \"dpop+jwt\",\n jwk: {\n kty: jwk.kty,\n crv: jwk.crv,\n x: jwk.x,\n y: jwk.y,\n },\n };\n\n const payload = {\n jti: crypto.randomUUID(),\n htm: method,\n htu: url,\n iat: Math.floor(Date.now() / 1000),\n ...(nonce && { nonce }),\n };\n\n // Encode header and payload\n const encodedHeader = base64urlEncode(\n new TextEncoder().encode(JSON.stringify(header)),\n );\n const encodedPayload = base64urlEncode(\n new TextEncoder().encode(JSON.stringify(payload)),\n );\n\n // Create the signing input\n const signingInput = `${encodedHeader}.${encodedPayload}`;\n\n // Sign using ECDSA with SHA-256\n const signature = await crypto.subtle.sign(\n { name: \"ECDSA\", hash: { name: \"SHA-256\" } },\n privateKey,\n new TextEncoder().encode(signingInput),\n );\n\n // Encode signature\n const encodedSignature = base64urlEncode(signature);\n\n return `${signingInput}.${encodedSignature}`;\n}\n\n// Discover PDS URL from handle using official ATProto identity resolution\nasync function discoverPDS(handle: string): Promise {\n try {\n console.log(`Resolving handle ${handle} using identity resolver...`);\n const pdsUrl = await identityResolver.resolveHandleToPds(handle);\n console.log(`Identity resolver returned PDS: ${pdsUrl}`);\n\n if (pdsUrl) {\n return pdsUrl;\n }\n\n // Only fallback to bsky.social for .bsky.social handles\n const cleanHandle = handle.replace(\"@\", \"\");\n if (cleanHandle.endsWith(\".bsky.social\")) {\n console.log(`Using bsky.social fallback for ${cleanHandle}`);\n return \"https://bsky.social\";\n }\n\n throw new Error(`Unable to discover PDS for handle: ${handle}`);\n } catch (error) {\n console.error(\"PDS discovery failed:\", error);\n\n // Only default to bsky.social for .bsky.social handles\n if (handle.includes(\".bsky.social\")) {\n console.log(`Using bsky.social error fallback for ${handle}`);\n return \"https://bsky.social\";\n }\n\n throw error;\n }\n}\n\n// Get authorization server metadata\nasync function getAuthServerMetadata(pdsUrl: string): Promise {\n const metadataUrl = `${pdsUrl}/.well-known/oauth-authorization-server`;\n console.log(`Fetching OAuth metadata from: ${metadataUrl}`);\n\n const response = await fetch(metadataUrl);\n if (!response.ok) {\n console.error(\n `OAuth metadata fetch failed: ${response.status} ${response.statusText} for ${metadataUrl}`,\n );\n\n // If PDS doesn't have OAuth metadata, try using bsky.social for Bluesky-operated PDS instances\n if (pdsUrl.includes(\".bsky.network\")) {\n console.log(\n `PDS appears to be Bluesky-operated, trying bsky.social for OAuth metadata`,\n );\n const bskyMetadataUrl =\n \"https://bsky.social/.well-known/oauth-authorization-server\";\n const bskyResponse = await fetch(bskyMetadataUrl);\n if (bskyResponse.ok) {\n console.log(`Successfully got OAuth metadata from bsky.social`);\n return bskyResponse.json();\n }\n }\n\n throw new Error(`Failed to fetch auth server metadata: ${response.status}`);\n }\n return response.json();\n}\n\n// ATProto OAuth routes\noauth.get(\"/atproto/start\", async (c) => {\n const handle = c.req.query(\"handle\");\n const userId = c.req.query(\"user_id\");\n\n if (!handle || !userId) {\n return c.json({ error: \"Handle and user_id are required\" }, 400);\n }\n\n try {\n // Discover PDS URL\n console.log(`Discovering PDS for handle: ${handle}`);\n const pdsUrl = await discoverPDS(handle);\n console.log(`Discovered PDS URL: ${pdsUrl}`);\n\n // Get authorization server metadata\n const authMetadata = await getAuthServerMetadata(pdsUrl);\n\n // Generate OAuth parameters\n const state = generateState();\n const codeVerifier = generateCodeVerifier();\n const codeChallenge = await generateCodeChallenge(codeVerifier);\n\n // Generate DPoP key pair\n const dpopKeyPair = await generateDPoPKeyPair();\n\n // Store OAuth state in cookies\n setCookie(c, \"oauth_state\", state, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 600, // 10 minutes\n });\n setCookie(c, \"oauth_code_verifier\", codeVerifier, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 600,\n });\n setCookie(c, \"oauth_user_id\", userId, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 600,\n });\n setCookie(c, \"oauth_pds_url\", pdsUrl, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 600,\n });\n\n // Store DPoP private key (we'll need to serialize it)\n const dpopPrivateKeyJwk = await crypto.subtle.exportKey(\n \"jwk\",\n dpopKeyPair.privateKey,\n );\n setCookie(c, \"oauth_dpop_private_key\", JSON.stringify(dpopPrivateKeyJwk), {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 600,\n });\n setCookie(c, \"oauth_dpop_public_jwk\", JSON.stringify(dpopKeyPair.jwk), {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 600,\n });\n\n // Build authorization URL\n const authUrl = new URL(authMetadata.authorization_endpoint);\n authUrl.searchParams.set(\"response_type\", \"code\");\n const rawUrl = Deno.env.get(\"VALTOWN_URL\") || \"http://localhost:8080\";\n const valtownUrl = rawUrl.replace(/\\/$/, \"\"); // Remove trailing slash\n authUrl.searchParams.set(\n \"client_id\",\n `${valtownUrl}/client`,\n );\n authUrl.searchParams.set(\n \"redirect_uri\",\n `${c.req.url.split(\"/oauth\")[0]}/oauth/atproto/callback`,\n );\n authUrl.searchParams.set(\"scope\", \"atproto transition:generic\");\n authUrl.searchParams.set(\"state\", state);\n authUrl.searchParams.set(\"code_challenge\", codeChallenge);\n authUrl.searchParams.set(\"code_challenge_method\", \"S256\");\n\n return c.json({ authUrl: authUrl.toString() });\n } catch (error) {\n console.error(\"ATProto OAuth start error:\", error);\n return c.json({ error: \"Failed to start OAuth flow\" }, 500);\n }\n});\n\noauth.get(\"/atproto/callback\", async (c) => {\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\");\n const error = c.req.query(\"error\");\n if (error) {\n return c.json({ error: `OAuth error: ${error}` }, 400);\n }\n\n if (!code || !state) {\n return c.json({ error: \"Missing code or state\" }, 400);\n }\n\n // Verify state\n const storedState = getCookie(c, \"oauth_state\");\n if (state !== storedState) {\n return c.json({ error: \"Invalid state parameter\" }, 400);\n }\n\n try {\n const codeVerifier = getCookie(c, \"oauth_code_verifier\");\n const userId = getCookie(c, \"oauth_user_id\");\n const pdsUrl = getCookie(c, \"oauth_pds_url\");\n const dpopPrivateKeyJwkStr = getCookie(c, \"oauth_dpop_private_key\");\n const dpopPublicJwkStr = getCookie(c, \"oauth_dpop_public_jwk\");\n\n if (\n !codeVerifier || !userId || !pdsUrl || !dpopPrivateKeyJwkStr ||\n !dpopPublicJwkStr\n ) {\n return c.json({ error: \"Missing OAuth session data\" }, 400);\n }\n\n // Recreate DPoP key pair from stored JWK\n const dpopPrivateKeyJwk = JSON.parse(dpopPrivateKeyJwkStr);\n const dpopPublicJwk = JSON.parse(dpopPublicJwkStr);\n\n const dpopPrivateKey = await crypto.subtle.importKey(\n \"jwk\",\n dpopPrivateKeyJwk,\n {\n name: \"ECDSA\",\n namedCurve: \"P-256\",\n },\n false,\n [\"sign\"],\n );\n\n // Get authorization server metadata\n const authMetadata = await getAuthServerMetadata(pdsUrl);\n\n // Exchange code for tokens\n const tokenParams = {\n grant_type: \"authorization_code\",\n code: code,\n redirect_uri: `${c.req.url.split(\"/oauth\")[0]}/oauth/atproto/callback`,\n client_id: `${\n (Deno.env.get(\"VALTOWN_URL\") || \"http://localhost:8080\").replace(\n /\\/$/,\n \"\",\n )\n }/client`,\n code_verifier: codeVerifier,\n };\n\n console.log(\"Token exchange params:\", {\n ...tokenParams,\n code_verifier: codeVerifier.substring(0, 10) + \"...\", // Log partial code verifier\n code: code.substring(0, 10) + \"...\", // Log partial code\n });\n\n // Create DPoP proof for token exchange\n const dpopProof = await createDPoPProof(\n dpopPrivateKey,\n dpopPublicJwk,\n \"POST\",\n authMetadata.token_endpoint,\n );\n\n const tokenResponse = await fetch(authMetadata.token_endpoint, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Accept\": \"application/json\",\n \"DPoP\": dpopProof,\n },\n body: new URLSearchParams(tokenParams),\n });\n\n if (!tokenResponse.ok) {\n const errorData = await tokenResponse.json();\n console.error(\"Token exchange failed:\", errorData);\n\n // Check if server requires DPoP nonce\n if (errorData.error === \"use_dpop_nonce\") {\n console.log(\"Server requires DPoP nonce, retrying with nonce...\");\n\n // Extract nonce from DPoP-Nonce header (case-insensitive)\n const nonce = tokenResponse.headers.get(\"DPoP-Nonce\") ||\n tokenResponse.headers.get(\"dpop-nonce\") ||\n tokenResponse.headers.get(\"Dpop-Nonce\");\n\n // Log all headers to debug\n const allHeaders = {};\n tokenResponse.headers.forEach((value, key) => {\n allHeaders[key] = value;\n });\n\n if (!nonce) {\n return c.json({\n error: \"Server requires nonce but none provided\",\n details: errorData,\n }, 400);\n }\n\n // Create new DPoP proof with nonce\n const dpopProofWithNonce = await createDPoPProof(\n dpopPrivateKey,\n dpopPublicJwk,\n \"POST\",\n authMetadata.token_endpoint,\n nonce,\n );\n\n // Retry token exchange with nonce\n const retryResponse = await fetch(authMetadata.token_endpoint, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Accept\": \"application/json\",\n \"DPoP\": dpopProofWithNonce,\n },\n body: new URLSearchParams(tokenParams),\n });\n\n if (!retryResponse.ok) {\n const retryErrorData = await retryResponse.json();\n console.error(\"Token exchange retry failed:\", retryErrorData);\n return c.json({\n error: \"Token exchange failed after nonce retry\",\n details: retryErrorData,\n status: retryResponse.status,\n }, 500);\n }\n\n // Use the retry response for the rest of the flow\n const tokens = await retryResponse.json();\n\n // Extract handle and DID from the token response\n let handle = null;\n const did = tokens.sub;\n\n // Check if we already have a handle stored for this DID\n const existingAccount = await getUserAccount();\n if (\n existingAccount?.atproto_did === did &&\n existingAccount?.atproto_handle\n ) {\n handle = existingAccount.atproto_handle;\n } else {\n // Use proper ATProto identity resolution\n try {\n handle = await identityResolver.resolveDidToHandle(did);\n } catch (_error) {\n // Identity resolution failed, handle will remain null\n }\n }\n\n // Verify the handle matches the allowed handle for this service\n const allowedHandle = Deno.env.get(\"ATPROTO_ALLOWED_HANDLE\");\n if (allowedHandle && handle !== allowedHandle) {\n console.error(\n `OAuth rejected: handle ${handle} does not match allowed handle ${allowedHandle}`,\n );\n return c.json({\n error: \"Unauthorized\",\n message:\n `This service is configured for ${allowedHandle} only. You are logged in as ${handle}.`,\n }, 403);\n }\n\n // Update user account with ATProto tokens and DPoP keys\n await updateUserAccount({\n atproto_did: did,\n atproto_pds_url: pdsUrl,\n atproto_handle: handle,\n atproto_access_token: tokens.access_token,\n atproto_refresh_token: tokens.refresh_token,\n atproto_token_expires_at: tokens.expires_in\n ? Date.now() + (tokens.expires_in * 1000)\n : undefined,\n atproto_dpop_private_key: dpopPrivateKeyJwkStr,\n atproto_dpop_public_jwk: dpopPublicJwkStr,\n });\n\n // Clear OAuth cookies\n setCookie(c, \"oauth_state\", \"\", { maxAge: 0 });\n setCookie(c, \"oauth_code_verifier\", \"\", { maxAge: 0 });\n setCookie(c, \"oauth_user_id\", \"\", { maxAge: 0 });\n setCookie(c, \"oauth_pds_url\", \"\", { maxAge: 0 });\n setCookie(c, \"oauth_dpop_private_key\", \"\", { maxAge: 0 });\n setCookie(c, \"oauth_dpop_public_jwk\", \"\", { maxAge: 0 });\n\n // Use Hono's redirect method to ensure cookies are included\n return c.redirect(`/setup?step=mastodon&user_id=${userId}`);\n } else {\n // Not a nonce error, some other issue\n }\n\n return c.json({\n error: \"Token exchange failed\",\n details: errorData,\n status: tokenResponse.status,\n }, 500);\n }\n\n const tokens = await tokenResponse.json();\n\n // Extract handle from the sub field (DID)\n let handle = null;\n const did = tokens.sub;\n\n // Check if we already have a handle stored for this DID\n const existingAccount = await getUserAccount();\n if (\n existingAccount?.atproto_did === did && existingAccount?.atproto_handle\n ) {\n handle = existingAccount.atproto_handle;\n } else {\n // Use proper ATProto identity resolution\n try {\n handle = await identityResolver.resolveDidToHandle(did);\n } catch (_error) {\n // Identity resolution failed, handle will remain null\n }\n }\n\n // Verify the handle matches the allowed handle for this service\n const allowedHandle = Deno.env.get(\"ATPROTO_ALLOWED_HANDLE\");\n if (allowedHandle && handle !== allowedHandle) {\n console.error(\n `OAuth rejected: handle ${handle} does not match allowed handle ${allowedHandle}`,\n );\n return c.json({\n error: \"Unauthorized\",\n message:\n `This service is configured for ${allowedHandle} only. You are logged in as ${handle}.`,\n }, 403);\n }\n\n // Update user account with ATProto tokens and DPoP keys\n await updateUserAccount({\n atproto_did: did,\n atproto_pds_url: pdsUrl,\n atproto_handle: handle,\n atproto_access_token: tokens.access_token,\n atproto_refresh_token: tokens.refresh_token,\n atproto_token_expires_at: tokens.expires_in\n ? Date.now() + (tokens.expires_in * 1000)\n : undefined,\n atproto_dpop_private_key: dpopPrivateKeyJwkStr,\n atproto_dpop_public_jwk: dpopPublicJwkStr,\n });\n\n // Clear OAuth cookies\n setCookie(c, \"oauth_state\", \"\", { maxAge: 0 });\n setCookie(c, \"oauth_code_verifier\", \"\", { maxAge: 0 });\n setCookie(c, \"oauth_user_id\", \"\", { maxAge: 0 });\n setCookie(c, \"oauth_pds_url\", \"\", { maxAge: 0 });\n setCookie(c, \"oauth_dpop_private_key\", \"\", { maxAge: 0 });\n setCookie(c, \"oauth_dpop_public_jwk\", \"\", { maxAge: 0 });\n\n // Use Hono's redirect method to ensure cookies are included\n return c.redirect(`/setup?step=mastodon&user_id=${userId}`);\n } catch (error) {\n console.error(\"ATProto OAuth callback error:\", error);\n console.error(\"Error details:\", {\n message: error instanceof Error ? error.message : \"Unknown error\",\n stack: error instanceof Error ? error.stack : undefined,\n code: code?.substring(0, 20) + \"...\",\n state: state?.substring(0, 20) + \"...\",\n storedState: getCookie(c, \"oauth_state\")?.substring(0, 20) + \"...\",\n userId: getCookie(c, \"oauth_user_id\"),\n pdsUrl: getCookie(c, \"oauth_pds_url\"),\n });\n return c.json({\n error: \"OAuth callback failed\",\n details: error instanceof Error ? error.message : \"Unknown error\",\n }, 500);\n }\n});\n\n// Mastodon OAuth routes\noauth.get(\"/mastodon/start\", async (c) => {\n const instanceUrl = c.req.query(\"instance_url\");\n const userId = c.req.query(\"user_id\");\n if (!instanceUrl || !userId) {\n return c.json({ error: \"Instance URL and user_id are required\" }, 400);\n }\n\n try {\n // Normalize instance URL\n const normalizedUrl = instanceUrl.startsWith(\"http\")\n ? instanceUrl\n : `https://${instanceUrl}`;\n\n // Register application with Mastodon instance\n const appResponse = await fetch(`${normalizedUrl}/api/v1/apps`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n client_name: \"ATProto-to-Fediverse Bridge\",\n redirect_uris: `${\n c.req.url.split(\"/oauth\")[0]\n }/oauth/mastodon/callback`,\n scopes: \"read write\",\n website: c.req.url.split(\"/oauth\")[0],\n }),\n });\n\n if (!appResponse.ok) {\n const errorData = await appResponse.text();\n console.error(\"Mastodon app registration failed:\", errorData);\n return c.json(\n { error: \"Failed to register with Mastodon instance\" },\n 500,\n );\n }\n\n const appData = await appResponse.json();\n\n // Store app credentials in user account\n await updateUserAccount({\n mastodon_instance_url: normalizedUrl,\n mastodon_client_id: appData.client_id,\n mastodon_client_secret: appData.client_secret,\n });\n\n // Generate OAuth parameters\n const state = generateState();\n\n // Store OAuth state in cookies\n setCookie(c, \"mastodon_oauth_state\", state, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 600, // 10 minutes\n });\n setCookie(c, \"mastodon_oauth_user_id\", userId, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 600,\n });\n\n // Build authorization URL\n const authUrl = new URL(`${normalizedUrl}/oauth/authorize`);\n authUrl.searchParams.set(\"response_type\", \"code\");\n authUrl.searchParams.set(\"client_id\", appData.client_id);\n const redirectUri = `${\n c.req.url.split(\"/oauth\")[0]\n }/oauth/mastodon/callback`;\n authUrl.searchParams.set(\"redirect_uri\", redirectUri);\n authUrl.searchParams.set(\"scope\", \"read write\");\n authUrl.searchParams.set(\"state\", state);\n\n return c.json({ authUrl: authUrl.toString() });\n } catch (error) {\n console.error(\"Mastodon OAuth start error:\", error);\n return c.json({ error: \"Failed to start OAuth flow\" }, 500);\n }\n});\n\noauth.get(\"/mastodon/callback\", async (c) => {\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\");\n const error = c.req.query(\"error\");\n if (error) {\n return c.json({ error: `OAuth error: ${error}` }, 400);\n }\n\n if (!code || !state) {\n return c.json({ error: \"Missing code or state\" }, 400);\n }\n\n // Verify state\n const storedState = getCookie(c, \"mastodon_oauth_state\");\n if (state !== storedState) {\n return c.json({ error: \"Invalid state parameter\" }, 400);\n }\n\n try {\n const userId = getCookie(c, \"mastodon_oauth_user_id\");\n if (!userId) {\n return c.json({ error: \"Missing user ID\" }, 400);\n }\n\n // Get user account to retrieve app credentials\n const userAccount = await getUserAccount();\n if (\n !userAccount?.mastodon_client_id ||\n !userAccount?.mastodon_client_secret ||\n !userAccount?.mastodon_instance_url\n ) {\n return c.json({ error: \"Missing Mastodon app credentials\" }, 400);\n }\n\n // Exchange code for tokens\n const tokenResponse = await fetch(\n `${userAccount.mastodon_instance_url}/oauth/token`,\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Accept\": \"application/json\",\n },\n body: new URLSearchParams({\n grant_type: \"authorization_code\",\n code: code,\n redirect_uri: `${\n c.req.url.split(\"/oauth\")[0]\n }/oauth/mastodon/callback`,\n client_id: userAccount.mastodon_client_id,\n client_secret: userAccount.mastodon_client_secret,\n }),\n },\n );\n\n if (!tokenResponse.ok) {\n const errorData = await tokenResponse.json();\n console.error(\"Mastodon token exchange failed:\", errorData);\n return c.json({\n error: \"Token exchange failed\",\n details: errorData,\n endpoint: `${userAccount.mastodon_instance_url}/oauth/token`,\n }, 500);\n }\n\n const tokens = await tokenResponse.json();\n\n // Get user profile\n const profileResponse = await fetch(\n `${userAccount.mastodon_instance_url}/api/v1/accounts/verify_credentials`,\n {\n headers: {\n \"Authorization\": `Bearer ${tokens.access_token}`,\n },\n },\n );\n\n let userProfile: any = {};\n if (profileResponse.ok) {\n userProfile = await profileResponse.json();\n }\n\n // Update user account with Mastodon tokens\n await updateUserAccount({\n mastodon_access_token: tokens.access_token,\n mastodon_username: userProfile.username || userProfile.acct,\n setup_completed: true, // Both accounts are now connected\n });\n\n // Get updated user account to get the handle\n const updatedUser = await getUserAccount();\n const handle = updatedUser?.atproto_handle || userProfile.username ||\n userProfile.acct;\n\n // Create session automatically after successful setup\n const { sessionToken } = await createUserSession(userId, handle);\n // Clear OAuth cookies\n setCookie(c, \"oauth_state\", \"\", { maxAge: 0, path: \"/\" });\n setCookie(c, \"oauth_code_verifier\", \"\", { maxAge: 0, path: \"/\" });\n setCookie(c, \"oauth_user_id\", \"\", { maxAge: 0, path: \"/\" });\n setCookie(c, \"oauth_pds_url\", \"\", { maxAge: 0, path: \"/\" });\n setCookie(c, \"oauth_dpop_private_key\", \"\", { maxAge: 0, path: \"/\" });\n setCookie(c, \"oauth_dpop_public_jwk\", \"\", { maxAge: 0, path: \"/\" });\n setCookie(c, \"mastodon_oauth_state\", \"\", { maxAge: 0, path: \"/\" });\n setCookie(c, \"mastodon_oauth_user_id\", \"\", { maxAge: 0, path: \"/\" });\n\n // Set session cookie for automatic login\n // Check if we're on HTTPS (Val.town should be)\n const isHttps = c.req.url.startsWith(\"https://\");\n\n const cookieOptions = {\n maxAge: 7 * 24 * 60 * 60, // 7 days\n path: \"/\",\n httpOnly: true,\n secure: isHttps, // Only set secure flag on HTTPS\n sameSite: \"Lax\" as const,\n };\n\n setCookie(c, \"session_token\", sessionToken, cookieOptions);\n\n // Instead of direct redirect, return HTML with JavaScript redirect\n // This ensures cookies are set before the redirect happens\n const redirectHtml = `\n \n \n \n Setup Complete\n \n \n \n

Setup complete! Redirecting to dashboard...

Session: ${\n sessionToken.substring(0, 8)\n }...

\n \n \n `;\n\n // Use Hono's response method to ensure cookies are included\n c.header(\"Content-Type\", \"text/html\");\n c.header(\"Cache-Control\", \"no-cache\");\n return c.html(redirectHtml);\n } catch (error) {\n console.error(\"Mastodon OAuth callback error:\", error);\n return c.json({\n error: \"OAuth callback failed\",\n details: error.message,\n }, 500);\n }\n});\n\nexport default oauth;\n",[],[495,621,623],"86162898-8094-11f0-a977-0224a6c84d84","dashboard.ts","0198d9f8-487c-763c-a562-53d8df389f11",["D",1756003583839],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport {\n getLastSyncLog,\n getPostStats,\n getRecentPosts,\n getUserAccount,\n} from \"../database/queries.ts\";\nimport { requireAuth } from \"./auth.ts\";\nimport { SyncService } from \"../services/sync-service.ts\";\nimport { SQLiteStorageProvider } from \"../storage/sqlite-storage.ts\";\nimport { ATProtoClientAdapter } from \"../services/atproto-client-adapter.ts\";\nimport { MastodonClientMasto } from \"../services/mastodon-client-masto.ts\";\n\nconst dashboard = new Hono();\n\n// Test endpoint to check if dashboard route is registered\ndashboard.get(\"/test\", (c) => {\n console.log(\"Dashboard test endpoint hit\");\n return c.json({ message: \"Dashboard route is working\" });\n});\n\n// Get dashboard data for authenticated user - handle both / and empty path\ndashboard.get(\"/\", requireAuth(), async (c) => {\n console.log(\"Dashboard route hit, user ID:\", c.get(\"userId\"));\n const userId = c.get(\"userId\") as string;\n\n try {\n const user = await getUserAccount();\n console.log(\"User lookup result:\", { userId, userFound: !!user, user });\n\n if (!user) {\n console.log(\"User not found in database for ID:\", userId);\n return c.json({ error: \"User not found\" }, 404);\n }\n\n // Get dashboard data from database\n const [postStats, recentPosts, lastSyncLog] = await Promise.all([\n getPostStats(),\n getRecentPosts(25), // Show last 25 posts\n getLastSyncLog(),\n ]);\n\n const dashboardData = {\n user: {\n id: user.id,\n atproto_handle: user.atproto_handle,\n mastodon_username: user.mastodon_username,\n setup_completed: user.setup_completed,\n },\n stats: {\n posts_synced: postStats.posts_synced,\n posts_failed: postStats.posts_failed,\n posts_pending: postStats.posts_pending,\n last_sync: lastSyncLog\n ? (() => {\n // Smart detection: if timestamp is > 1e10, it's likely milliseconds\n const timestamp = lastSyncLog.created_at > 1e10\n ? lastSyncLog.created_at\n : lastSyncLog.created_at * 1000;\n return new Date(timestamp).toISOString();\n })()\n : null,\n last_sync_duration_ms: lastSyncLog?.duration_ms || null,\n last_sync_posts_fetched: lastSyncLog?.posts_fetched || 0,\n last_sync_posts_synced: lastSyncLog?.posts_synced || 0,\n last_sync_posts_failed: lastSyncLog?.posts_failed || 0,\n },\n recent_posts: recentPosts.map((post) => ({\n id: post.id,\n atproto_uri: post.atproto_uri,\n atproto_rkey: post.atproto_rkey,\n mastodon_url: post.mastodon_url,\n sync_status: post.sync_status,\n error_message: post.error_message,\n atproto_created_at: (() => {\n if (!post.atproto_created_at) {\n return null;\n }\n // Smart detection: if timestamp is > 1e10, it's likely milliseconds\n const timestamp = post.atproto_created_at > 1e10\n ? post.atproto_created_at\n : post.atproto_created_at * 1000;\n const result = new Date(timestamp).toISOString();\n if (result === \"Invalid Date\") {\n return null;\n }\n return result;\n })(),\n synced_at: post.synced_at\n ? (() => {\n // Smart detection: if timestamp is > 1e10, it's likely milliseconds\n const timestamp = post.synced_at > 1e10\n ? post.synced_at\n : post.synced_at * 1000;\n return new Date(timestamp).toISOString();\n })()\n : null,\n retry_count: post.retry_count,\n })),\n };\n\n return c.json(dashboardData);\n } catch (error) {\n console.error(\"Dashboard data fetch error:\", error);\n return c.json({ error: \"Failed to fetch dashboard data\" }, 500);\n }\n});\n\n// Reset user auth (clear tokens to force re-authentication)\ndashboard.post(\"/reset-auth\", requireAuth(), async (c) => {\n try {\n console.log(\"Resetting user authentication...\");\n\n const storage = new SQLiteStorageProvider();\n await storage.userAccounts.updateSingle({\n atproto_access_token: null,\n atproto_refresh_token: null,\n atproto_token_expires_at: null,\n setup_completed: false,\n });\n\n return c.json({\n success: true,\n message: \"Authentication reset. Please go through setup again.\",\n });\n } catch (error) {\n console.error(\"Reset auth error:\", error);\n return c.json({ error: \"Failed to reset authentication\" }, 500);\n }\n});\n\n// Trigger manual sync\ndashboard.post(\"/sync\", requireAuth(), async (c) => {\n const userId = c.get(\"userId\") as string;\n\n try {\n console.log(\"Manual sync triggered for user:\", userId);\n\n // Set up dependencies for the sync service\n const storage = new SQLiteStorageProvider();\n const syncService = new SyncService({\n storage,\n createATProtoClient: (\n pdsUrl,\n accessToken,\n refreshToken,\n did,\n onTokenRefresh,\n appPassword,\n ) =>\n new ATProtoClientAdapter(\n pdsUrl,\n accessToken,\n refreshToken,\n did,\n onTokenRefresh,\n appPassword,\n ),\n createMastodonClient: (instanceUrl, accessToken) =>\n new MastodonClientMasto(instanceUrl, accessToken),\n });\n\n // Run sync for the single user\n const result = await syncService.syncUser();\n\n console.log(\"Manual sync completed:\", result);\n\n return c.json({\n success: true,\n message: \"Sync completed\",\n result: {\n postsProcessed: result.postsProcessed,\n postsSuccessful: result.postsSuccessful,\n postsFailed: result.postsFailed,\n errors: result.errors,\n },\n });\n } catch (error) {\n console.error(\"Manual sync error:\", error);\n\n // Check for authentication errors that require re-auth\n if (\n error instanceof Error && (\n error.message.includes(\"Bad token scope\") ||\n error.message.includes(\"InvalidToken\") ||\n error.message.includes(\"ATProto tokens are invalid\")\n )\n ) {\n return c.json({\n error:\n \"Authentication error: Your Bluesky tokens have expired or are invalid. Please reconnect your account.\",\n needsReauth: true,\n }, 401);\n }\n\n return c.json({\n error: error instanceof Error ? error.message : \"Failed to trigger sync\",\n }, 500);\n }\n});\n\nexport default dashboard;\n",[],[495,621,630],"86162000-8094-11f0-a977-0224a6c84d84","auth.ts","0198d9f8-487c-763c-a562-4ede4ed1ebe1",["D",1756003583839],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport {\n deleteCookie,\n getCookie,\n setCookie,\n} from \"https://esm.sh/hono@3.11.7/cookie\";\nimport {\n createUserAccount,\n getUserAccount,\n getUserAccountByHandle,\n updateUserAccount,\n} from \"../database/queries.ts\";\nimport {\n createUserSession,\n deleteSession,\n getSession,\n} from \"../lib/session.ts\";\nconst auth = new Hono();\n\n// Login with Bluesky handle\nauth.post(\"/login\", async (c) => {\n const { handle } = await c.req.json();\n\n if (!handle) {\n return c.json({ error: \"Handle is required\" }, 400);\n }\n\n try {\n // Check if handle matches the allowed handle from environment\n const allowedHandle = Deno.env.get(\"ATPROTO_ALLOWED_HANDLE\");\n\n if (!allowedHandle) {\n return c.json({\n error:\n \"ATPROTO_ALLOWED_HANDLE not configured. Please set this environment variable.\",\n }, 500);\n }\n\n // Normalize handles for comparison (remove @ if present, lowercase)\n const normalizedInput = handle.toLowerCase().replace(/^@/, \"\");\n const normalizedAllowed = allowedHandle.toLowerCase().replace(/^@/, \"\");\n\n if (normalizedInput !== normalizedAllowed) {\n return c.json({\n error: `This service is configured for ${allowedHandle} only.`,\n }, 403);\n }\n\n // For the allowed handle, always allow login\n // This helps with recovery when setup state is inconsistent\n let user = await getUserAccountByHandle(handle);\n\n // If no user exists yet, create one for the allowed handle\n if (!user) {\n user = await getUserAccount();\n if (!user) {\n // Create a new user account for the allowed handle\n await createUserAccount();\n user = await getUserAccount();\n }\n }\n\n // Create session regardless of setup completion status\n // This allows the user to access dashboard and fix issues\n const { sessionToken } = await createUserSession(\n user.id.toString(),\n handle,\n );\n\n // Set session cookie with simple settings (same as OAuth cookies)\n setCookie(c, \"session_token\", sessionToken, {\n maxAge: 7 * 24 * 60 * 60, // 7 days\n path: \"/\",\n });\n\n return c.json({\n success: true,\n userId: user.id,\n handle: handle,\n });\n } catch (error) {\n console.error(\"Login error:\", error);\n return c.json({ error: \"Login failed\" }, 500);\n }\n});\n\n// Logout\nauth.post(\"/logout\", async (c) => {\n const sessionToken = getCookie(c, \"session_token\");\n\n if (sessionToken) {\n await deleteSession(sessionToken);\n deleteCookie(c, \"session_token\");\n }\n\n return c.json({ success: true });\n});\n\n// Disconnect Bluesky account\nauth.post(\"/disconnect/bluesky\", requireAuth(), async (c) => {\n const _userId = c.get(\"userId\") as string;\n\n try {\n await updateUserAccount({\n atproto_did: null,\n atproto_pds_url: null,\n atproto_handle: null,\n atproto_access_token: null,\n atproto_refresh_token: null,\n atproto_token_expires_at: null,\n });\n\n return c.json({ success: true, message: \"Bluesky account disconnected\" });\n } catch (error) {\n console.error(\"Bluesky disconnect error:\", error);\n return c.json({ error: \"Failed to disconnect Bluesky account\" }, 500);\n }\n});\n\n// Disconnect Mastodon account\nauth.post(\"/disconnect/mastodon\", requireAuth(), async (c) => {\n const _userId = c.get(\"userId\") as string;\n\n try {\n await updateUserAccount({\n mastodon_instance_url: null,\n mastodon_username: null,\n mastodon_access_token: null,\n mastodon_client_id: null,\n mastodon_client_secret: null,\n });\n\n return c.json({ success: true, message: \"Mastodon account disconnected\" });\n } catch (error) {\n console.error(\"Mastodon disconnect error:\", error);\n return c.json({ error: \"Failed to disconnect Mastodon account\" }, 500);\n }\n});\n\n// Get current user\nauth.get(\"/me\", async (c) => {\n const sessionToken = getCookie(c, \"session_token\");\n\n if (!sessionToken) {\n return c.json({ error: \"Not authenticated\" }, 401);\n }\n\n const session = await getSession(sessionToken);\n\n if (!session) {\n deleteCookie(c, \"session_token\");\n return c.json({ error: \"Session expired\" }, 401);\n }\n\n return c.json({\n userId: session.userId,\n handle: session.handle,\n authenticated: true,\n });\n});\n\n// Middleware to check authentication\nexport function requireAuth() {\n return async (c: any, next: any) => {\n const sessionToken = getCookie(c, \"session_token\");\n if (!sessionToken) {\n return c.json({ error: \"Authentication required\" }, 401);\n }\n\n const session = await getSession(sessionToken);\n if (!session) {\n deleteCookie(c, \"session_token\");\n return c.json({ error: \"Session expired\" }, 401);\n }\n\n // Add user info to context\n c.set(\"userId\", session.userId);\n c.set(\"handle\", session.handle);\n await next();\n };\n}\n\n/**\n * Middleware that blocks setup endpoints when setup is already completed.\n * Use this to prevent setup interference after both Bluesky and Mastodon are connected.\n */\nexport function blockIfSetupCompleted() {\n return async (c: any, next: any) => {\n try {\n const userAccount = await getUserAccount();\n\n // Block only if both accounts are actually connected (setup is truly complete)\n if (\n userAccount?.atproto_access_token && userAccount?.mastodon_access_token\n ) {\n const allowedHandle = Deno.env.get(\"ATPROTO_ALLOWED_HANDLE\");\n return c.json({\n error:\n `Setup already completed. If you are ${allowedHandle}, please go to /login to access your dashboard and manage connections.`,\n loginUrl: \"/login\",\n }, 403);\n }\n\n await next();\n } catch (_error) {\n // If no user account exists yet, allow setup to proceed\n await next();\n }\n };\n}\n\n/**\n * Middleware that requires setup to be completed before accessing endpoint.\n * Use this for dashboard and other post-setup functionality.\n */\nexport function requireSetupCompleted() {\n return async (c: any, next: any) => {\n try {\n const userAccount = await getUserAccount();\n\n if (!userAccount?.setup_completed) {\n return c.json({\n error: \"Complete setup first before accessing this feature.\",\n }, 403);\n }\n\n await next();\n } catch (_error) {\n return c.json({\n error: \"Complete setup first before accessing this feature.\",\n }, 403);\n }\n };\n}\n\nexport default auth;\n",[],[495,621,637],"86164d28-8094-11f0-a977-0224a6c84d84",["D",1756003583839],[273,274,275,276],[495,621],"86161d9e-8094-11f0-a977-0224a6c84d84","session.ts","0198d9f8-487b-7478-ab21-86377d7ec6e6","0198d9f8-487c-763c-a562-4973d9f83b8a",["D",1756003583839],"// Shared session management for OAuth and auth routes\n// Re-export database-backed session functions\n\nexport {\n createUserSession,\n deleteSession,\n generateSessionToken,\n getAllSessions,\n getSession,\n initSessionsTable,\n} from \"./session-db.ts\";\n\n// Legacy in-memory store for compatibility with debug endpoint\nexport const sessions = new Map<\n string,\n { userId: string; handle: string; expiresAt: number }\n>();\n",[],[495,655,648],"lib","861619ac-8094-11f0-a977-0224a6c84d84","session-db.ts","0198d9f8-487b-7478-ab21-83f5b6f234d3",["D",1756003583839],"// Database-backed session storage for Val.town\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\n\nexport function generateSessionToken(): string {\n return crypto.randomUUID();\n}\n\n// Initialize sessions table\nexport async function initSessionsTable() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n handle TEXT NOT NULL,\n expires_at INTEGER NOT NULL,\n created_at INTEGER DEFAULT (unixepoch())\n )\n `);\n}\n\n// Clean up expired sessions\nexport async function cleanupSessions() {\n const now = Date.now();\n await sqlite.execute(\n \"DELETE FROM sessions WHERE expires_at < ?\",\n [now],\n );\n}\n\n// Create session after successful OAuth or login\nexport async function createUserSession(\n userId: string,\n handle: string,\n): Promise<{ sessionToken: string; expiresAt: number }> {\n const sessionToken = generateSessionToken();\n const expiresAt = Date.now() + (7 * 24 * 60 * 60 * 1000); // 7 days\n\n await sqlite.execute(\n \"INSERT INTO sessions (token, user_id, handle, expires_at) VALUES (?, ?, ?, ?)\",\n [sessionToken, userId, handle, expiresAt],\n );\n\n // Clean up old sessions\n await cleanupSessions();\n\n console.log(\"Session created in DB:\", {\n sessionToken: sessionToken.substring(0, 8) + \"...\",\n userId,\n handle,\n expiresAt: new Date(expiresAt).toISOString(),\n });\n\n return { sessionToken, expiresAt };\n}\n\n// Get session by token\nexport async function getSession(\n token: string,\n): Promise<{ userId: string; handle: string; expiresAt: number } | null> {\n const result = await sqlite.execute(\n \"SELECT user_id, handle, expires_at FROM sessions WHERE token = ?\",\n [token],\n );\n\n if (result.rows.length === 0) {\n return null;\n }\n\n const session = result.rows[0] as unknown as {\n user_id: string;\n handle: string;\n expires_at: number;\n };\n\n if (session.expires_at < Date.now()) {\n // Clean up expired session\n await sqlite.execute(\"DELETE FROM sessions WHERE token = ?\", [token]);\n return null;\n }\n\n return {\n userId: session.user_id,\n handle: session.handle,\n expiresAt: session.expires_at,\n };\n}\n\n// Delete session\nexport async function deleteSession(token: string): Promise {\n await sqlite.execute(\"DELETE FROM sessions WHERE token = ?\", [token]);\n}\n\n// Get all sessions for debugging\nexport async function getAllSessions() {\n const result = await sqlite.execute(\n \"SELECT token, user_id, handle, expires_at FROM sessions\",\n );\n\n return result.rows.map((row) => ({\n token: (row as any).token.substring(0, 8) + \"...\",\n userId: (row as any).user_id,\n handle: (row as any).handle,\n expiresAt: (row as any).expires_at,\n expired: (row as any).expires_at < Date.now(),\n }));\n}\n",[],[495,655,657],"86161f06-8094-11f0-a977-0224a6c84d84",["D",1756003583839],[270,271],[495,655],"8616148e-8094-11f0-a977-0224a6c84d84","storage.ts","0198d9f8-487b-7478-ab21-7b9c491ac041","0198d9f8-487b-7478-ab21-7d2200bf8b1f",["D",1756003583839],"// Abstract storage interfaces for dependency injection and testability\n\nexport interface UserAccount {\n id: number;\n atproto_did?: string;\n atproto_pds_url?: string;\n atproto_handle?: string;\n atproto_access_token?: string;\n atproto_refresh_token?: string;\n atproto_token_expires_at?: number;\n mastodon_instance_url?: string;\n mastodon_username?: string;\n mastodon_access_token?: string;\n mastodon_client_id?: string;\n mastodon_client_secret?: string;\n setup_completed: boolean;\n last_sync_at?: number;\n last_sync_cursor?: string;\n created_at: number;\n updated_at: number;\n}\n\nexport interface PostTracking {\n id: number;\n atproto_uri: string;\n atproto_cid: string;\n atproto_rkey: string;\n mastodon_id?: string;\n mastodon_url?: string;\n content_hash: string;\n sync_status: \"pending\" | \"success\" | \"failed\" | \"skipped\";\n error_message?: string;\n retry_count: number;\n max_retries: number;\n atproto_created_at: number;\n synced_at?: number;\n created_at: number;\n updated_at: number;\n}\n\nexport interface Settings {\n id: number;\n sync_enabled: boolean;\n sync_interval_minutes: number;\n skip_replies: boolean;\n skip_mentions: boolean;\n skip_reposts: boolean;\n include_media: boolean;\n compress_images: boolean;\n created_at: number;\n updated_at: number;\n}\n\nexport interface SyncLog {\n id: number;\n sync_type: \"manual\" | \"cron\" | \"webhook\";\n posts_fetched: number;\n posts_synced: number;\n posts_failed: number;\n posts_skipped: number;\n error_message?: string;\n stack_trace?: string;\n duration_ms?: number;\n cursor_start?: string;\n cursor_end?: string;\n created_at: number;\n}\n\nexport interface SyncStats {\n total_posts: number;\n successful_posts: number;\n failed_posts: number;\n pending_posts: number;\n last_sync: number | null;\n}\n\n// Storage interface for user accounts (single user)\nexport interface UserAccountStorage {\n create(): Promise;\n getSingle(): Promise;\n updateSingle(updates: Partial): Promise;\n}\n\n// Storage interface for settings (single user)\nexport interface SettingsStorage {\n create(): Promise;\n getSingle(): Promise;\n updateSingle(updates: Partial): Promise;\n}\n\n// Storage interface for post tracking (single user)\nexport interface PostTrackingStorage {\n create(data: {\n atproto_uri: string;\n atproto_cid: string;\n atproto_rkey: string;\n content_hash: string;\n atproto_created_at: number;\n }): Promise;\n getByUri(atprotoUri: string): Promise;\n updateByUri(\n atprotoUri: string,\n updates: Partial,\n ): Promise;\n getPending(): Promise;\n getFailed(): Promise;\n getRecent(limit?: number): Promise;\n getStats(): Promise;\n}\n\n// Storage interface for sync logs (single user)\nexport interface SyncLogStorage {\n create(data: {\n sync_type: \"manual\" | \"cron\" | \"webhook\";\n posts_fetched: number;\n posts_synced: number;\n posts_failed: number;\n posts_skipped: number;\n error_message?: string;\n stack_trace?: string;\n duration_ms?: number;\n cursor_start?: string;\n cursor_end?: string;\n }): Promise;\n getRecent(limit?: number): Promise;\n}\n\n// Combined storage interface\nexport interface StorageProvider {\n userAccounts: UserAccountStorage;\n settings: SettingsStorage;\n postTracking: PostTrackingStorage;\n syncLogs: SyncLogStorage;\n\n // Initialize storage (run migrations, etc.)\n initialize(): Promise;\n}\n",[],[495,675,668],"interfaces","8616124a-8094-11f0-a977-0224a6c84d84","http-client.ts","0198d9f8-487b-7478-ab21-77cd1d8bff22",["D",1756003583839],"// HTTP client interfaces for external API calls (testable)\n\nexport interface HttpResponse {\n ok: boolean;\n status: number;\n statusText: string;\n headers: Record;\n url: string;\n json(): Promise;\n text(): Promise;\n blob(): Promise;\n}\n\nexport interface HttpClient {\n get(url: string, options?: {\n headers?: Record;\n timeout?: number;\n }): Promise;\n\n post(url: string, options?: {\n headers?: Record;\n body?: string | FormData;\n timeout?: number;\n }): Promise;\n\n put(url: string, options?: {\n headers?: Record;\n body?: string | FormData;\n timeout?: number;\n }): Promise;\n\n head(url: string, options?: {\n headers?: Record;\n timeout?: number;\n }): Promise;\n}\n\n// ATProto-specific client interface\nexport interface ATProtoHttpClient {\n fetchPosts(params: {\n actor: string;\n limit: number;\n cursor?: string;\n }): Promise;\n\n getPost(uri: string): Promise;\n\n getProfile(actor: string): Promise;\n\n resolveHandle(handle: string): Promise;\n\n getBlob(did: string, cid: string): Promise;\n\n resolveBlobUrl(blobRef: string): string;\n\n refreshToken(refreshToken: string): Promise<{\n access_token: string;\n refresh_token: string;\n expires_in: number;\n }>;\n}\n\n// Mastodon-specific client interface\nexport interface MastodonHttpClient {\n verifyCredentials(): Promise;\n\n getAccount(): Promise;\n\n getInstance(): Promise;\n\n uploadMedia(file: Blob, description?: string): Promise<{\n id: string;\n type: string;\n url: string;\n description?: string;\n }>;\n\n getMediaStatus(mediaId: string): Promise;\n\n createPost(params: {\n status: string;\n media_ids?: string[];\n visibility?: string;\n sensitive?: boolean;\n spoiler_text?: string;\n }): Promise;\n\n registerApp(params: {\n client_name: string;\n redirect_uris: string;\n scopes: string;\n website?: string;\n }): Promise<{\n client_id: string;\n client_secret: string;\n }>;\n\n exchangeCodeForToken(params: {\n code: string;\n redirect_uri: string;\n client_id: string;\n client_secret: string;\n }): Promise<{\n access_token: string;\n token_type: string;\n scope: string;\n }>;\n}\n\n// OAuth client interface\nexport interface OAuthClient {\n getAuthorizationUrl(params: {\n client_id: string;\n redirect_uri: string;\n scope: string;\n state: string;\n code_challenge?: string;\n code_challenge_method?: string;\n }): string;\n\n exchangeCodeForToken(params: {\n code: string;\n redirect_uri: string;\n client_id: string;\n client_secret?: string;\n code_verifier?: string;\n }): Promise<{\n access_token: string;\n refresh_token?: string;\n expires_in?: number;\n token_type: string;\n scope: string;\n }>;\n}\n",[],[495,675,677],"8616183a-8094-11f0-a977-0224a6c84d84",["D",1756003583839],[267,268],[495,675],"86160c8c-8094-11f0-a977-0224a6c84d84","queries.ts","0198d9f8-487b-7478-ab21-6fb09b04b77b","0198d9f8-487b-7478-ab21-717fb3507848",["D",1756003583839],"import { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nimport { TABLES } from \"./migrations.ts\";\n\nexport interface UserAccount {\n id: number;\n atproto_did?: string;\n atproto_pds_url?: string;\n atproto_handle?: string;\n atproto_access_token?: string;\n atproto_refresh_token?: string;\n atproto_token_expires_at?: number;\n atproto_dpop_private_key?: string;\n atproto_dpop_public_jwk?: string;\n atproto_app_password?: string;\n mastodon_instance_url?: string;\n mastodon_username?: string;\n mastodon_access_token?: string;\n mastodon_client_id?: string;\n mastodon_client_secret?: string;\n setup_completed: boolean;\n last_sync_at?: number;\n last_sync_cursor?: string;\n created_at: number;\n updated_at: number;\n}\n\nexport interface PostTracking {\n id: number;\n atproto_uri: string;\n atproto_cid: string;\n atproto_rkey: string;\n mastodon_id?: string;\n mastodon_url?: string;\n content_hash: string;\n sync_status: \"pending\" | \"success\" | \"failed\" | \"skipped\";\n error_message?: string;\n retry_count: number;\n max_retries: number;\n atproto_created_at: number;\n synced_at?: number;\n created_at: number;\n updated_at: number;\n}\n\nexport interface SyncLog {\n id: number;\n sync_type: \"manual\" | \"cron\" | \"webhook\";\n posts_fetched: number;\n posts_synced: number;\n posts_failed: number;\n posts_skipped: number;\n error_message?: string;\n stack_trace?: string;\n duration_ms?: number;\n cursor_start?: string;\n cursor_end?: string;\n created_at: number;\n}\n\nexport interface Settings {\n id: number;\n sync_enabled: boolean;\n sync_interval_minutes: number;\n skip_replies: boolean;\n skip_mentions: boolean;\n skip_reposts: boolean;\n include_media: boolean;\n compress_images: boolean;\n created_at: number;\n updated_at: number;\n}\n\n// Single User Account queries\nexport async function createUserAccount(): Promise {\n const result = await sqlite.execute(\n `INSERT INTO ${TABLES.USER_ACCOUNTS} (id) VALUES (1) RETURNING *`,\n );\n return result.rows[0] as unknown as UserAccount;\n}\n\nexport async function getUserAccount(): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM ${TABLES.USER_ACCOUNTS} WHERE id = 1`,\n );\n return (result.rows[0] as unknown as UserAccount) || null;\n}\n\nexport async function getUserAccountByHandle(\n handle: string,\n): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM ${TABLES.USER_ACCOUNTS} WHERE atproto_handle = ? AND id = 1`,\n [handle],\n );\n return (result.rows[0] as unknown as UserAccount) || null;\n}\n\n// Get the single user account (for single-user service)\nexport async function getSingleUserAccount(): Promise {\n return await getUserAccount();\n}\n\nexport async function updateUserAccount(\n updates: Partial,\n): Promise {\n const keys = Object.keys(updates);\n const values = Object.values(updates);\n const setClause = keys.map((key) => `${key} = ?`).join(\", \");\n\n await sqlite.execute(\n `UPDATE ${TABLES.USER_ACCOUNTS} SET ${setClause}, updated_at = unixepoch() WHERE id = 1`,\n values,\n );\n}\n\n// Settings queries\nexport async function createDefaultSettings(): Promise {\n const result = await sqlite.execute(\n `INSERT INTO ${TABLES.SETTINGS} (id) VALUES (1) RETURNING *`,\n );\n return result.rows[0] as unknown as Settings;\n}\n\nexport async function getSettings(): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM ${TABLES.SETTINGS} WHERE id = 1`,\n );\n return (result.rows[0] as unknown as Settings) || null;\n}\n\nexport async function updateSettings(\n updates: Partial,\n): Promise {\n const keys = Object.keys(updates);\n const values = Object.values(updates);\n const setClause = keys.map((key) => `${key} = ?`).join(\", \");\n\n await sqlite.execute(\n `UPDATE ${TABLES.SETTINGS} SET ${setClause}, updated_at = unixepoch() WHERE id = 1`,\n values,\n );\n}\n\n// Post tracking queries\nexport async function getRecentPosts(\n limit: number = 10,\n): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM ${TABLES.POST_TRACKING} \n WHERE sync_status = 'success' \n ORDER BY synced_at DESC \n LIMIT ?`,\n [limit],\n );\n return result.rows as unknown as PostTracking[];\n}\n\nexport async function cullOldPostLogs(keepCount: number = 100): Promise {\n // Delete old post tracking records, keeping only the most recent ones\n await sqlite.execute(\n `\n DELETE FROM ${TABLES.POST_TRACKING}\n WHERE id NOT IN (\n SELECT id FROM ${TABLES.POST_TRACKING}\n ORDER BY created_at DESC\n LIMIT ?\n )\n `,\n [keepCount],\n );\n}\n\nexport async function getPostStats(): Promise<{\n posts_synced: number;\n posts_failed: number;\n posts_pending: number;\n}> {\n const result = await sqlite.execute(`\n SELECT \n COUNT(CASE WHEN sync_status = 'success' THEN 1 END) as posts_synced,\n COUNT(CASE WHEN sync_status = 'failed' THEN 1 END) as posts_failed,\n COUNT(CASE WHEN sync_status = 'pending' THEN 1 END) as posts_pending\n FROM ${TABLES.POST_TRACKING}\n `);\n\n const row = result.rows[0] as any;\n return {\n posts_synced: row.posts_synced || 0,\n posts_failed: row.posts_failed || 0,\n posts_pending: row.posts_pending || 0,\n };\n}\n\n// Sync log queries\nexport async function getRecentSyncLogs(limit: number = 5): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM ${TABLES.SYNC_LOGS} ORDER BY created_at DESC LIMIT ?`,\n [limit],\n );\n return result.rows as unknown as SyncLog[];\n}\n\nexport async function getLastSyncLog(): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM ${TABLES.SYNC_LOGS} ORDER BY created_at DESC LIMIT 1`,\n );\n return (result.rows[0] as unknown as SyncLog) || null;\n}\n",[],[495,695,688],"database","8615ff58-8094-11f0-a977-0224a6c84d84","migrations.ts","0198d9f8-487b-7478-ab21-69b9ef6caf4a",["D",1756003583839],"import { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\n\n// Database schema for ATProto-to-Fediverse bridge\nexport const TABLES = {\n USER_ACCOUNTS: \"bridge_user_accounts_v1\",\n SYNC_LOGS: \"bridge_sync_logs_v1\",\n POST_TRACKING: \"bridge_post_tracking_v1\",\n SETTINGS: \"bridge_settings_v1\",\n};\n\nexport async function runMigrations() {\n // Drop old tables that might have incompatible schemas\n try {\n await sqlite.execute(\"DROP TABLE IF EXISTS bridge_sync_logs_v1_old\");\n await sqlite.execute(\"DROP TABLE IF EXISTS bridge_post_tracking_v1_old\");\n\n // Check if current sync logs table has user_id column (old schema)\n const syncLogsTableInfo = await sqlite.execute(\n \"PRAGMA table_info(bridge_sync_logs_v1)\",\n );\n const syncLogsHasUserId = syncLogsTableInfo.rows.some((row: any) =>\n row.name === \"user_id\"\n );\n\n if (syncLogsHasUserId) {\n console.log(\n \"Found old sync logs table with user_id column, recreating...\",\n );\n await sqlite.execute(\n \"ALTER TABLE bridge_sync_logs_v1 RENAME TO bridge_sync_logs_v1_old\",\n );\n }\n\n // Check if current post tracking table has user_id column (old schema)\n const postTrackingTableInfo = await sqlite.execute(\n \"PRAGMA table_info(bridge_post_tracking_v1)\",\n );\n const postTrackingHasUserId = postTrackingTableInfo.rows.some((row: any) =>\n row.name === \"user_id\"\n );\n\n if (postTrackingHasUserId) {\n console.log(\n \"Found old post tracking table with user_id column, recreating...\",\n );\n await sqlite.execute(\n \"ALTER TABLE bridge_post_tracking_v1 RENAME TO bridge_post_tracking_v1_old\",\n );\n }\n } catch (_error) {\n // Table might not exist yet, that's fine\n console.log(\"Migration check completed\");\n }\n\n // Add missing DPoP columns if they don't exist\n try {\n const userTableInfo = await sqlite.execute(\n \"PRAGMA table_info(bridge_user_accounts_v1)\",\n );\n const hasPrivateKey = userTableInfo.rows.some((row: any) =>\n row.name === \"atproto_dpop_private_key\"\n );\n const hasPublicJwk = userTableInfo.rows.some((row: any) =>\n row.name === \"atproto_dpop_public_jwk\"\n );\n\n if (!hasPrivateKey) {\n console.log(\"Adding atproto_dpop_private_key column...\");\n await sqlite.execute(\n \"ALTER TABLE bridge_user_accounts_v1 ADD COLUMN atproto_dpop_private_key TEXT\",\n );\n }\n\n if (!hasPublicJwk) {\n console.log(\"Adding atproto_dpop_public_jwk column...\");\n await sqlite.execute(\n \"ALTER TABLE bridge_user_accounts_v1 ADD COLUMN atproto_dpop_public_jwk TEXT\",\n );\n }\n\n const hasAppPassword = userTableInfo.rows.some((row: any) =>\n row.name === \"atproto_app_password\"\n );\n if (!hasAppPassword) {\n console.log(\"Adding atproto_app_password column...\");\n await sqlite.execute(\n \"ALTER TABLE bridge_user_accounts_v1 ADD COLUMN atproto_app_password TEXT\",\n );\n }\n } catch (_error) {\n console.log(\"DPoP column migration check completed\");\n }\n\n // Single user configuration - stores OAuth tokens and account info\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${TABLES.USER_ACCOUNTS} (\n id INTEGER PRIMARY KEY CHECK (id = 1), -- Enforce single row\n \n -- Bluesky/ATProto account\n atproto_did TEXT,\n atproto_pds_url TEXT,\n atproto_handle TEXT,\n atproto_access_token TEXT,\n atproto_refresh_token TEXT,\n atproto_token_expires_at INTEGER,\n atproto_dpop_private_key TEXT, -- DPoP private key JWK for token binding\n atproto_dpop_public_jwk TEXT, -- DPoP public key JWK\n atproto_app_password TEXT, -- App Password for sync service\n \n -- Mastodon account\n mastodon_instance_url TEXT,\n mastodon_username TEXT,\n mastodon_access_token TEXT,\n mastodon_client_id TEXT,\n mastodon_client_secret TEXT,\n \n -- Status tracking\n setup_completed BOOLEAN DEFAULT FALSE,\n last_sync_at INTEGER,\n last_sync_cursor TEXT, -- ATProto cursor for pagination\n \n created_at INTEGER DEFAULT (unixepoch()),\n updated_at INTEGER DEFAULT (unixepoch())\n )\n `);\n\n // Settings table - user preferences and configuration\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${TABLES.SETTINGS} (\n id INTEGER PRIMARY KEY CHECK (id = 1), -- Enforce single row\n \n -- Sync settings\n sync_enabled BOOLEAN DEFAULT TRUE,\n sync_interval_minutes INTEGER DEFAULT 15, -- 15 min for free tier\n \n -- Post filtering (for future versions)\n skip_replies BOOLEAN DEFAULT TRUE,\n skip_mentions BOOLEAN DEFAULT TRUE,\n skip_reposts BOOLEAN DEFAULT FALSE,\n \n -- Media handling\n include_media BOOLEAN DEFAULT TRUE,\n compress_images BOOLEAN DEFAULT FALSE,\n \n created_at INTEGER DEFAULT (unixepoch()),\n updated_at INTEGER DEFAULT (unixepoch())\n )\n `);\n\n // Post tracking table - prevent duplicate posts and track sync status\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${TABLES.POST_TRACKING} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n \n -- Bluesky post identifiers\n atproto_uri TEXT NOT NULL, -- at:// URI\n atproto_cid TEXT NOT NULL, -- Content ID\n atproto_rkey TEXT NOT NULL, -- Record key\n \n -- Mastodon post identifiers\n mastodon_id TEXT, -- Mastodon post ID (null if failed)\n mastodon_url TEXT, -- Mastodon post URL\n \n -- Content hash for duplicate detection\n content_hash TEXT NOT NULL,\n \n -- Status tracking\n sync_status TEXT CHECK(sync_status IN ('pending', 'success', 'failed', 'skipped')) DEFAULT 'pending',\n error_message TEXT,\n retry_count INTEGER DEFAULT 0,\n max_retries INTEGER DEFAULT 3,\n \n -- Timestamps\n atproto_created_at INTEGER NOT NULL,\n synced_at INTEGER,\n created_at INTEGER DEFAULT (unixepoch()),\n updated_at INTEGER DEFAULT (unixepoch()),\n \n UNIQUE(atproto_uri)\n )\n `);\n\n // Sync logs table - track sync operations and errors\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${TABLES.SYNC_LOGS} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n \n -- Sync operation details\n sync_type TEXT CHECK(sync_type IN ('manual', 'cron', 'webhook')) DEFAULT 'cron',\n posts_fetched INTEGER DEFAULT 0,\n posts_synced INTEGER DEFAULT 0,\n posts_failed INTEGER DEFAULT 0,\n posts_skipped INTEGER DEFAULT 0,\n \n -- Error tracking\n error_message TEXT,\n stack_trace TEXT,\n \n -- Performance metrics\n duration_ms INTEGER,\n cursor_start TEXT,\n cursor_end TEXT,\n \n created_at INTEGER DEFAULT (unixepoch())\n )\n `);\n\n // Create indexes for performance\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_post_tracking_status ON ${TABLES.POST_TRACKING}(sync_status)`,\n );\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_post_tracking_atproto_uri ON ${TABLES.POST_TRACKING}(atproto_uri)`,\n );\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_sync_logs_created_at ON ${TABLES.SYNC_LOGS}(created_at)`,\n );\n}\n",[],[495,695,697],"8616110a-8094-11f0-a977-0224a6c84d84",["D",1756003583839],[264,265],[495,695],"8616a016-8094-11f0-a977-0224a6c84d84",["D",1756003583839],[263,266,269,272,277,291,294],[495],"8615fc1a-8094-11f0-a977-0224a6c84d84","deno.yml","0198d9f8-487b-7478-ab21-5f3fe9a53fd5","0198d9f8-487b-7478-ab21-619c392db7eb",["D",1756003583839],"# This workflow uses actions that are not certified by GitHub.\n# They are provided by a third-party and are governed by\n# separate terms of service, privacy policy, and support\n# documentation.\n\n# This workflow will install Deno then run `deno lint` and `deno test`.\n# For more information see: https://github.com/denoland/setup-deno\n\nname: Deno\n\non:\n push:\n branches: [\"main\"]\n pull_request:\n branches: [\"main\"]\n\npermissions:\n contents: read\n\njobs:\n test:\n runs-on: ubuntu-latest\n\n steps:\n - name: Setup repo\n uses: actions/checkout@v4\n\n - name: Setup Deno\n uses: denoland/setup-deno@v2\n with:\n deno-version: v2.x\n\n - name: Verify formatting\n run: deno fmt --check\n\n - name: Run linter\n run: deno lint\n\n - name: Run tests\n run: deno test -A\n",[],[719,720,712],".github","workflows","8615fd46-8094-11f0-a977-0224a6c84d84","0198d9f8-487b-7478-ab21-6502fbe4ecea",["D",1756003583839],[261],[719,720],"8615fe40-8094-11f0-a977-0224a6c84d84",["D",1756003583839],[260],[719],"8615f170-8094-11f0-a977-0224a6c84d84","settings.local.json","0198d9f8-487b-7478-ab21-540d3ace7a9d","0198d9f8-487b-7478-ab21-5aaf2f4e0af8",["D",1756003583839],"{\n \"permissions\": {\n \"allow\": [\n \"Bash(deno test:*)\",\n \"Bash(deno lint:*)\",\n \"Bash(deno fmt:*)\",\n \"Bash(deno check:*)\",\n \"Bash(curl:*)\",\n \"Bash(rm:*)\",\n \"Bash(vt push:*)\",\n \"Bash(grep:*)\",\n \"Bash(ls:*)\",\n \"WebFetch(domain:github.com)\",\n \"WebFetch(domain:raw.githubusercontent.com)\",\n \"WebFetch(domain:www.npmjs.com)\",\n \"Bash(node:*)\",\n \"Bash(mv:*)\",\n \"Bash(find:*)\",\n \"WebFetch(domain:tijs-atproto-to-fediverse.web.val.run)\",\n \"WebFetch(domain:atproto.com)\",\n \"Bash(for file in /Users/tijs/projects/atproto-to-fediverse/tests/*.test.ts)\",\n \"Bash(do echo \\\"=== $file ===\\\")\",\n \"Bash(done)\",\n \"mcp__think__think\",\n \"Bash(sqlite3:*)\",\n \"Bash(deno eval:*)\",\n \"Bash(deno run:*)\",\n \"Bash(deno task:*)\",\n \"Bash(git add:*)\",\n \"Bash(git commit:*)\",\n \"Bash(deno remove:*)\",\n \"WebFetch(domain:bsky.app)\",\n \"WebFetch(domain:tijs--atproto-to-fediverse.web.val.run)\",\n \"Bash(git tag:*)\"\n ],\n \"deny\": []\n }\n}",[],[738,731],".claude","8615fa80-8094-11f0-a977-0224a6c84d84",["D",1756003583839],[258],[738],["D",1756003583839],{"_11":12,"_172":85},{"_11":12,"_168":-5,"_84":85,"_31":83,"_169":170,"_171":30},{"_39":40,"_13":16,"_33":36,"_157":124,"_158":74,"_159":160,"_161":128,"_162":163,"_164":165,"_166":14,"_167":12},"ctx",{"_52":-5,"_193":780,"_781":782,"_783":784,"_785":30,"_786":30,"_787":30,"_788":24,"_789":-5,"_790":-7,"_791":-7,"_792":26,"_793":30,"_794":30,"_795":-5,"_796":30,"_797":30,"_798":30,"_799":-5},"ENV",{"_751":752,"_753":754,"_755":16,"_756":757,"_758":759,"_760":761,"_762":763,"_764":765,"_766":767,"_768":769,"_770":771,"_772":773,"_774":775,"_776":777,"_778":779},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e8c4b7030cb7600e4eb0736b15f422c8b8bd130f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · tests