"@atproto/api": "latest",

    "@atproto/api": ["@atproto/api@0.19.0", "", { "dependencies": { "@atproto/common-web": "^0.4.17", "@atproto/lexicon": "^0.6.1", "@atproto/syntax": "^0.4.3", "@atproto/xrpc": "^0.7.7", "await-lock": "^2.2.2", "multiformats": "^9.9.0", "tlds": "^1.234.0", "zod": "^3.23.8" } }, "sha512-7u/EGgkIj4bbslGer2RMQPtMWCPvREcpH0mVagaf5om+NcPzUIZeIacWKANVv95BdMJ7jlcHS7xrkEMPmg2dFw=="],

    "@atproto/common-web": ["@atproto/common-web@0.4.17", "", { "dependencies": { "@atproto/lex-data": "^0.0.12", "@atproto/lex-json": "^0.0.12", "@atproto/syntax": "^0.4.3", "zod": "^3.23.8" } }, "sha512-sfxD8NGxyoxhxmM9EUshEFbWcJ3+JHEOZF4Quk6HsCh1UxpHBmLabT/vEsAkDWl+C/8U0ine0+c/gHyE/OZiQQ=="],

    "@atproto/lex-data": ["@atproto/lex-data@0.0.12", "", { "dependencies": { "multiformats": "^9.9.0", "tslib": "^2.8.1", "uint8arrays": "3.0.0", "unicode-segmenter": "^0.14.0" } }, "sha512-aekJudcK1p6sbTqUv2bJMJBAGZaOJS0mgDclpK3U6VuBREK/au4B6ffunBFWgrDfg0Vwj2JGyEA7E51WZkJcRw=="],

    "@atproto/lex-json": ["@atproto/lex-json@0.0.12", "", { "dependencies": { "@atproto/lex-data": "^0.0.12", "tslib": "^2.8.1" } }, "sha512-XlEpnWWZdDJ5BIgG25GyH+6iBfyrFL18BI5JSE6rUfMObbFMrQRaCuRLQfryRXNysVz3L3U+Qb9y8KcXbE8AcA=="],

    "@cloudflare/workers-types": ["@cloudflare/workers-types@4.20260303.0", "", {}, "sha512-soUlr4NJVkh5dR09RwtziTMbBQ+lbdoEesTGw8WUlvmnQ2M4h7CmJzAjC6a7IivUodiiCSjbLcGV/8PyZpvZkA=="],

    "hono": ["hono@4.12.2", "", {}, "sha512-gJnaDHXKDayjt8ue0n8Gs0A007yKXj4Xzb8+cNjZeYsSzzwKc0Lr+OZgYwVfB0pHfUs17EPoLvrOsEaJ9mj+Tg=="],

    "@atproto/lexicon/@atproto/common-web": ["@atproto/common-web@0.4.13", "", { "dependencies": { "@atproto/lex-data": "0.0.9", "@atproto/lex-json": "0.0.9", "@atproto/syntax": "0.4.3", "zod": "^3.23.8" } }, "sha512-TewRUyB/dVJ5PtI3QmJzEgT3wDsvpnLJ+48hPl+LuUueJPamZevXKJN6dFjtbKAMFRnl2bKfdsf79qwvdSaLKQ=="],

    "sequoia-cli/@atproto/api": ["@atproto/api@0.18.17", "", { "dependencies": { "@atproto/common-web": "^0.4.13", "@atproto/lexicon": "^0.6.1", "@atproto/syntax": "^0.4.3", "@atproto/xrpc": "^0.7.7", "await-lock": "^2.2.2", "multiformats": "^9.9.0", "tlds": "^1.234.0", "zod": "^3.23.8" } }, "sha512-TeJkLGPkiK3jblwTDSNTH+CnS6WgaOiHDZeVVzywtxomyyF0FpQVSMz5eP3sDhxyHJqpI3E2AOYD7PO/JSbzJw=="],

    "@atproto/lexicon/@atproto/common-web/@atproto/lex-data": ["@atproto/lex-data@0.0.9", "", { "dependencies": { "multiformats": "^9.9.0", "tslib": "^2.8.1", "uint8arrays": "3.0.0", "unicode-segmenter": "^0.14.0" } }, "sha512-1slwe4sG0cyWtsq16+rBoWIxNDqGPkkvN+PV6JuzA7dgUK9bjUmXBGQU4eZlUPSS43X1Nhmr/9VjgKmEzU9vDw=="],

    "@atproto/lexicon/@atproto/common-web/@atproto/lex-json": ["@atproto/lex-json@0.0.9", "", { "dependencies": { "@atproto/lex-data": "0.0.9", "tslib": "^2.8.1" } }, "sha512-Q2v1EVZcnd+ndyZj1r2UlGikA7q6It24CFPLbxokcf5Ba4RBupH8IkkQX7mqUDSRWPgQdmZYIdW9wUln+MKDqw=="],

    "sequoia-cli/@atproto/api/@atproto/common-web": ["@atproto/common-web@0.4.13", "", { "dependencies": { "@atproto/lex-data": "0.0.9", "@atproto/lex-json": "0.0.9", "@atproto/syntax": "0.4.3", "zod": "^3.23.8" } }, "sha512-TewRUyB/dVJ5PtI3QmJzEgT3wDsvpnLJ+48hPl+LuUueJPamZevXKJN6dFjtbKAMFRnl2bKfdsf79qwvdSaLKQ=="],

    "sequoia-cli/@atproto/api/@atproto/common-web/@atproto/lex-data": ["@atproto/lex-data@0.0.9", "", { "dependencies": { "multiformats": "^9.9.0", "tslib": "^2.8.1", "uint8arrays": "3.0.0", "unicode-segmenter": "^0.14.0" } }, "sha512-1slwe4sG0cyWtsq16+rBoWIxNDqGPkkvN+PV6JuzA7dgUK9bjUmXBGQU4eZlUPSS43X1Nhmr/9VjgKmEzU9vDw=="],

    "sequoia-cli/@atproto/api/@atproto/common-web/@atproto/lex-json": ["@atproto/lex-json@0.0.9", "", { "dependencies": { "@atproto/lex-data": "0.0.9", "tslib": "^2.8.1" } }, "sha512-Q2v1EVZcnd+ndyZj1r2UlGikA7q6It24CFPLbxokcf5Ba4RBupH8IkkQX7mqUDSRWPgQdmZYIdW9wUln+MKDqw=="],

		"@atproto/api": "latest",

import subscribe from "./routes/subscribe";

app.route("/subscribe", subscribe);

import { deleteCookie, getCookie, setCookie } from "hono/cookie";

const RETURN_TO_COOKIE_NAME = "login_return_to";

const RETURN_TO_TTL = 600; // 10 minutes in seconds

function baseCookieOptions(clientUrl: string) {

	const isLocalhost = clientUrl.includes("localhost");

	return {

		httpOnly: true as const,

		sameSite: "Lax" as const,

		path: "/",

		...(isLocalhost ? {} : { domain: ".sequoia.pub", secure: true }),

	};

}

	const value = getCookie(c, SESSION_COOKIE_NAME);

	return value ? decodeURIComponent(value) : null;

	setCookie(c, SESSION_COOKIE_NAME, encodeURIComponent(did), {

		...baseCookieOptions(clientUrl),

		maxAge: SESSION_TTL,

	});

	deleteCookie(c, SESSION_COOKIE_NAME, baseCookieOptions(clientUrl));

}

/**

 * Get the post-OAuth return-to URL from the short-lived cookie

 */

export function getReturnToCookie(c: Context): string | null {

	const value = getCookie(c, RETURN_TO_COOKIE_NAME);

	return value ? decodeURIComponent(value) : null;

}

/**

 * Set a short-lived cookie that redirects back after OAuth completes

 */

export function setReturnToCookie(

	c: Context,

	returnTo: string,

	clientUrl: string,

): void {

	setCookie(c, RETURN_TO_COOKIE_NAME, encodeURIComponent(returnTo), {

		...baseCookieOptions(clientUrl),

		maxAge: RETURN_TO_TTL,

	});

}

/**

 * Clear the return-to cookie

 */

export function clearReturnToCookie(c: Context, clientUrl: string): void {

	deleteCookie(c, RETURN_TO_COOKIE_NAME, baseCookieOptions(clientUrl));

	getReturnToCookie,

	clearReturnToCookie,

		// If a subscribe flow set a return URL before initiating OAuth, honor it

		const returnTo = getReturnToCookie(c);

		clearReturnToCookie(c, c.env.CLIENT_URL);

		return c.redirect(returnTo ?? `${c.env.CLIENT_URL}/`);

import { Agent } from "@atproto/api";

import { Hono } from "hono";

import { createOAuthClient } from "../lib/oauth-client";

import { getSessionDid, setReturnToCookie } from "../lib/session";

interface Env {

	ASSETS: Fetcher;

	SEQUOIA_SESSIONS: KVNamespace;

	CLIENT_URL: string;

}

// Cache the vocs-generated stylesheet href across requests (changes on rebuild).

let _vocsStyleHref: string | null = null;

async function getVocsStyleHref(assets: Fetcher, baseUrl: string): Promise<string> {

	if (_vocsStyleHref) return _vocsStyleHref;

	try {

		const indexUrl = new URL("/", baseUrl).toString();

		const res = await assets.fetch(indexUrl);

		const html = await res.text();

		const match = html.match(/<link[^>]+href="(\/assets\/style[^"]+\.css)"/);

		if (match?.[1]) {

			_vocsStyleHref = match[1];

			return match[1];

		}

	} catch {

		// Fall back to the custom stylesheet which at least provides --sequoia-* vars

	}

	return "/styles.css";

}

const subscribe = new Hono<{ Bindings: Env }>();

const COLLECTION = "site.standard.graph.subscription";

// ============================================================================

// Helpers

// ============================================================================

/**

 * Scan the user's repo for an existing site.standard.graph.subscription

 * matching the given publication URI. Returns the record AT-URI if found.

 */

async function findExistingSubscription(

	agent: Agent,

	did: string,

	publicationUri: string,

): Promise<string | null> {

	let cursor: string | undefined;

	do {

		const result = await agent.com.atproto.repo.listRecords({

			repo: did,

			collection: COLLECTION,

			limit: 100,

			cursor,

		});

		for (const record of result.data.records) {

			const value = record.value as { publication?: string };

			if (value.publication === publicationUri) {

				return record.uri;

			}

		}

		cursor = result.data.cursor;

	} while (cursor);

	return null;

}

// ============================================================================

// POST /subscribe

//

// Called via fetch() from the sequoia-subscribe web component.

// Body JSON: { publicationUri: string }

//

// Responses:

//   200 { subscribed: true, existing: boolean, recordUri: string }

//   400 { error: string }

//   401 { authenticated: false, subscribeUrl: string }

// ============================================================================

subscribe.post("/", async (c) => {

	let publicationUri: string;

	try {

		const body = await c.req.json<{ publicationUri?: string }>();

		publicationUri = body.publicationUri ?? "";

	} catch {

		return c.json({ error: "Invalid JSON body" }, 400);

	}

	if (!publicationUri || !publicationUri.startsWith("at://")) {

		return c.json({ error: "Missing or invalid publicationUri" }, 400);

	}

	const did = getSessionDid(c);

	if (!did) {

		const subscribeUrl = `${c.env.CLIENT_URL}/subscribe?publicationUri=${encodeURIComponent(publicationUri)}`;

		return c.json({ authenticated: false, subscribeUrl }, 401);

	}

	try {

		const client = createOAuthClient(c.env.SEQUOIA_SESSIONS, c.env.CLIENT_URL);

		const session = await client.restore(did);

		const agent = new Agent(session);

		const existingUri = await findExistingSubscription(agent, did, publicationUri);

		if (existingUri) {

			return c.json({ subscribed: true, existing: true, recordUri: existingUri });

		}

		const result = await agent.com.atproto.repo.createRecord({

			repo: did,

			collection: COLLECTION,

			record: {

				$type: COLLECTION,

				publication: publicationUri,

			},

		});

		return c.json({ subscribed: true, existing: false, recordUri: result.data.uri });

	} catch (error) {

		console.error("Subscribe POST error:", error);

		// Treat expired/missing session as unauthenticated

		const subscribeUrl = `${c.env.CLIENT_URL}/subscribe?publicationUri=${encodeURIComponent(publicationUri)}`;

		return c.json({ authenticated: false, subscribeUrl }, 401);

	}

});

// ============================================================================

// GET /subscribe?publicationUri=at://...

//

// Full-page OAuth + subscription flow. Unauthenticated users land here after

// the component redirects them, and authenticated users land here after the

// OAuth callback (via the login_return_to cookie set in POST /subscribe/login).

// ============================================================================

subscribe.get("/", async (c) => {

	const publicationUri = c.req.query("publicationUri");

	const styleHref = await getVocsStyleHref(c.env.ASSETS, c.req.url);

	if (!publicationUri || !publicationUri.startsWith("at://")) {

		return c.html(renderError("Missing or invalid publication URI.", styleHref), 400);

	}

	const did = getSessionDid(c);

	if (!did) {

		return c.html(renderHandleForm(publicationUri, styleHref));

	}

	try {

		const client = createOAuthClient(c.env.SEQUOIA_SESSIONS, c.env.CLIENT_URL);

		const session = await client.restore(did);

		const agent = new Agent(session);

		const existingUri = await findExistingSubscription(agent, did, publicationUri);

		if (existingUri) {

			return c.html(renderSuccess(publicationUri, existingUri, true, styleHref));

		}

		const result = await agent.com.atproto.repo.createRecord({

			repo: did,

			collection: COLLECTION,

			record: {

				$type: COLLECTION,

				publication: publicationUri,

			},

		});

		return c.html(renderSuccess(publicationUri, result.data.uri, false, styleHref));

	} catch (error) {

		console.error("Subscribe GET error:", error);

		// Session expired - ask the user to sign in again

		return c.html(renderHandleForm(publicationUri, styleHref, "Session expired. Please sign in again."));

	}

});

// ============================================================================

// POST /subscribe/login

//

// Handles the handle-entry form submission. Stores the return URL in a cookie

// so the OAuth callback in auth.ts can redirect back to /subscribe after auth.

// ============================================================================

subscribe.post("/login", async (c) => {

	const body = await c.req.parseBody();

	const handle = (body["handle"] as string | undefined)?.trim();

	const publicationUri = body["publicationUri"] as string | undefined;

	if (!handle || !publicationUri) {

		const styleHref = await getVocsStyleHref(c.env.ASSETS, c.req.url);

		return c.html(renderError("Missing handle or publication URI.", styleHref), 400);

	}

	const returnTo = `${c.env.CLIENT_URL}/subscribe?publicationUri=${encodeURIComponent(publicationUri)}`;

	setReturnToCookie(c, returnTo, c.env.CLIENT_URL);

	return c.redirect(

		`${c.env.CLIENT_URL}/oauth/login?handle=${encodeURIComponent(handle)}`,

	);

});

// ============================================================================

// HTML rendering

// ============================================================================

function renderHandleForm(publicationUri: string, styleHref: string, error?: string): string {

	const errorHtml = error

		? `<p class="vocs_Paragraph error">${escapeHtml(error)}</p>`

		: "";

	return page(`

		<h1 class="vocs_H1 vocs_Heading">Subscribe on Bluesky</h1>

		<p class="vocs_Paragraph">Enter your Bluesky handle to subscribe to this publication.</p>

		${errorHtml}

		<form method="POST" action="/subscribe/login">

			<input type="hidden" name="publicationUri" value="${escapeHtml(publicationUri)}" />

			<label>

				Bluesky handle

				<input

					type="text"

					name="handle"

					placeholder="you.bsky.social"

					autocomplete="username"

					required

					autofocus

				/>

			</label>

			<button type="submit" class="vocs_Button_button vocs_Button_button_accent">Continue on Bluesky</button>

		</form>

	`, styleHref);

}

function renderSuccess(

	publicationUri: string,

	recordUri: string,

	existing: boolean,

	styleHref: string,

): string {

	const msg = existing

		? "You're already subscribed to this publication."

		: "You've successfully subscribed!";

	return page(`

		<h1 class="vocs_H1 vocs_Heading">Subscribed ✓</h1>

		<p class="vocs_Paragraph">${msg}</p>

		<p class="vocs_Paragraph"><small>Publication: <code class="vocs_Code">${escapeHtml(publicationUri)}</code></small></p>

		<p class="vocs_Paragraph"><small>Record: <code class="vocs_Code">${escapeHtml(recordUri)}</code></small></p>

	`, styleHref);

}

function renderError(message: string, styleHref: string): string {

	return page(`<h1 class="vocs_H1 vocs_Heading">Error</h1><p class="vocs_Paragraph error">${escapeHtml(message)}</p>`, styleHref);

}

function page(body: string, styleHref: string): string {

	return `<!DOCTYPE html>

<html lang="en">

<head>

  <meta charset="UTF-8" />

  <meta name="viewport" content="width=device-width, initial-scale=1.0" />

  <title>Sequoia · Subscribe</title>

  <link rel="stylesheet" href="${styleHref}" />

  <script>if(window.matchMedia('(prefers-color-scheme: dark)').matches)document.documentElement.classList.add('dark')</script>

  <style>

    .page-container {

      max-width: 480px;

      margin: 4rem auto;

      padding: 0 var(--vocs-space_20, 1.25rem);

    }

    .vocs_Heading { margin-bottom: var(--vocs-space_12, .75rem); }

    .vocs_Paragraph { margin-bottom: var(--vocs-space_16, 1rem); }

    label {

      display: flex;

      flex-direction: column;

      gap: var(--vocs-space_6, .375rem);

      margin-bottom: var(--vocs-space_20, 1.25rem);

      font-weight: var(--vocs-fontWeight_medium, 400);

      font-size: var(--vocs-fontSize_15, .9375rem);

    }

    input[type="text"] {

      padding: var(--vocs-space_8, .5rem) var(--vocs-space_12, .75rem);

      border: 1px solid var(--vocs-color_border, #D5D1C8);

      border-radius: var(--vocs-borderRadius_6, 6px);

      font-size: var(--vocs-fontSize_16, 1rem);

      font-family: inherit;

      background: var(--vocs-color_background, #F5F3EF);

      color: var(--vocs-color_text, #2C2C2C);

    }

    input[type="text"]:focus {

      border-color: var(--vocs-color_borderAccent, #3A5A40);

      outline: 2px solid var(--vocs-color_borderAccent, #3A5A40);

      outline-offset: 2px;

    }

    .error { color: var(--vocs-color_dangerText, #8B3A3A); }

  </style>

</head>

<body>

  <div class="page-container">

    ${body}

  </div>

</body>

</html>`;

}

function escapeHtml(text: string): string {

	return text

		.replace(/&/g, "&")

		.replace(/</g, "&lt;")

		.replace(/>/g, ">")

		.replace(/"/g, """);

}

export default subscribe;

run_worker_first = ["/api/*", "/oauth/*", "/subscribe", "/subscribe/*"]

 *   - callback-uri: Redirect URI after OAuth authentication (default: "https://sequoia.pub/subscribe")

 *   - hide: Set to "auto" to hide if no publication URI is detected

		this.abortController = null;

		return ["publication-uri", "callback-uri", "label", "hide"];

	}

	connectedCallback() {

		// Pre-check publication availability so hide="auto" can take effect

		if (!this.publicationUri) {

			this.checkPublication();

		}

	}

	disconnectedCallback() {

		this.abortController?.abort();

			this.state.type === "subscribed" ||

			this.state.type === "no-publication"

	get callbackUri() {

		return this.getAttribute("callback-uri") ?? "https://sequoia.pub/subscribe";

	}

	get hide() {

		const hideAttr = this.getAttribute("hide");

		return hideAttr === "auto";

	}

	async checkPublication() {

		this.abortController?.abort();

		this.abortController = new AbortController();

		try {

			await fetchPublicationUri();

		} catch {

			this.state = { type: "no-publication" };

			this.render();

		}

	}

			// POST to the callbackUri (e.g. https://sequoia.pub/subscribe).

			// If the server reports the user isn't authenticated it returns a

			// subscribeUrl for the full-page OAuth + subscription flow.

			const response = await fetch(this.callbackUri, {

				method: "POST",

				headers: { "Content-Type": "application/json" },

				credentials: "include",

				body: JSON.stringify({ publicationUri }),

			});

			const data = await response.json();

			if (response.status === 401 && data.authenticated === false) {

				// Redirect to the hosted subscribe page to complete OAuth

				window.location.href = data.subscribeUrl;

				return;

			}

			if (!response.ok) {

				throw new Error(data.error ?? `HTTP ${response.status}`);

			}

			const { recordUri } = data;

			// Don't overwrite state if we already navigated away

			if (this.state.type !== "loading") return;

		if (type === "no-publication") {

			if (this.hide) {

				this.wrapper.innerHTML = "";

				this.wrapper.style.display = "none";

			}

			return;

		}