Painting ATProto Auto-Sync Implementation #

Summary #

Implemented automatic syncing of paintings to ATProto Personal Data Server (PDS) when users create new paintings on aesthetic.computer.

Files Created #

1. /workspaces/aesthetic-computer/system/backend/painting-atproto.mjs #

New backend module for ATProto painting operations.

Functions:

• createPaintingOnAtproto() - Syncs a new painting to ATProto

  • Checks if user has ATProto credentials
  • Logs into PDS
  • Downloads painting image from S3/Spaces
  • Uploads image as blob to ATProto
  • Creates record in computer.aesthetic.painting collection
  • Returns rkey and uri

• deletePaintingFromAtproto() - Removes painting from ATProto

  • Used when user nukes a painting
  • Deletes the ATProto record by rkey

Files Modified #

2. /workspaces/aesthetic-computer/system/netlify/functions/track-media.mjs #

Updated the painting tracking function to sync with ATProto.

Changes:

• Added imports for createPaintingOnAtproto, deletePaintingFromAtproto, and getHandleOrEmail
• After inserting painting into MongoDB:
  • Gets user's handle via getHandleOrEmail()
  • Constructs image URL
  • Calls createPaintingOnAtproto()
  • Stores atproto.rkey in MongoDB
• When nuking a painting:
  • Checks if painting has atproto.rkey
  • Calls deletePaintingFromAtproto() to remove from PDS

Error Handling:

• ATProto failures are logged but don't block painting creation
• Guest paintings skip ATProto sync (no user account)
• Users without ATProto accounts skip sync gracefully

3. /workspaces/aesthetic-computer/system/netlify.toml #

Updated configuration for the track-media function.

Changes:

[functions.track-media]
external_node_modules = ["@atproto/api", "nanoid"]
included_env_vars = [
  "CONTEXT", 
  "ADMIN_SUB", 
  "AUTH0_M2M_CLIENT_ID", 
  "AUTH0_M2M_SECRET", 
  "MONGODB_CONNECTION_STRING", 
  "MONGODB_NAME", 
  "NETLIFY_DEV", 
  "PDS_URL",           # NEW
  "PDS_ADMIN_PASSWORD" # NEW
]

How It Works #

Creating a Painting #

1. User creates painting in aesthetic.computer
2. Frontend uploads PNG to S3/Digital Ocean Spaces
3. Frontend calls POST /api/track-media with { slug, ext: "png" }
4. track-media.mjs:
   • Authorizes user (or allows guest)
   • Generates unique short code
   • Inserts into MongoDB paintings collection
   • NEW: Calls createPaintingOnAtproto()
     • Downloads painting image
     • Uploads as blob to ATProto
     • Creates computer.aesthetic.painting record
     • Returns rkey
   • Updates MongoDB with atproto.rkey
   • Returns { slug, code } to client

Nuking a Painting #

1. User nukes painting
2. Frontend calls PUT /api/track-media with { slug, nuke: true }
3. track-media.mjs:
   • Finds painting in MongoDB
   • Sets nuked: true in MongoDB
   • NEW: If painting.atproto.rkey exists:
     • Calls deletePaintingFromAtproto()
     • Removes record from ATProto PDS
   • Returns success

ATProto Record Structure #

{
  "$type": "computer.aesthetic.painting",
  "slug": "2025.10.19.12.34.56.789",
  "code": "a3b",
  "imageUrl": "https://aesthetic.computer/media/@handle/painting/slug.png",
  "thumbnail": {
    "$type": "blob",
    "ref": { "$link": "bafyreiblahlahblah..." },
    "mimeType": "image/png",
    "size": 29692
  },
  "when": "2025-10-19T12:34:56.789Z",
  "ref": "67138a2f5e8c1a0012345678"
}

MongoDB Changes #

Paintings now have an optional atproto field:

{
  "_id": ObjectId("..."),
  "code": "a3b",
  "slug": "2025.10.19.12.34.56.789",
  "when": ISODate("2025-10-19T12:34:56.789Z"),
  "bucket": "user-aesthetic-computer",
  "user": "auth0|1234567890",
  "atproto": {
    "rkey": "3m3irrx4aac2z"
  }
}

Testing After Deployment #

1. Create a test painting while logged in

2. Check Netlify function logs for:

   • ✅ 🔄 Syncing painting to ATProto...
   • ✅ 📸 Uploaded painting thumbnail blob: ...
   • ✅ 🎨 Created ATProto painting record: [rkey]
   • ✅ ✅ Painting synced to ATProto with rkey: [rkey]

3. Check MongoDB paintings collection for atproto.rkey field

4. Query ATProto PDS for computer.aesthetic.painting records

5. Test nuking:

   • Nuke a painting with an ATProto record
   • Check logs for 🗑️ Deleted ATProto painting record: [rkey]
   • Verify record is gone from PDS

Edge Cases Handled #

• ✅ Guest paintings (no user) - skip ATProto sync
• ✅ Users without ATProto accounts - skip sync gracefully
• ✅ ATProto login failures - log error, continue
• ✅ Image download failures - log error, create record without thumbnail
• ✅ ATProto API failures - log error, painting still saved to MongoDB
• ✅ Nuking paintings without ATProto records - normal MongoDB update
• ✅ Pieces (.mjs files) - skip ATProto sync (only paintings)

Compatibility #

• Existing paintings: Will NOT be retroactively synced to ATProto
• New paintings: Will automatically sync if user has ATProto account
• Manual sharing scripts: Still work independently (share-latest-painting.mjs, etc.)
• Guest paintings: Continue to work exactly as before

Dependencies #

• @atproto/api - ATProto client library
• nanoid - Short code generation (already used)
• MongoDB connection
• User ATProto credentials stored in users collection

Deployment Checklist #

• Create painting-atproto.mjs backend module
• Update track-media.mjs function
• Update netlify.toml configuration
• Deploy to Netlify
• Test painting creation
• Test painting deletion
• Monitor function logs
• Verify ATProto records in PDS

Date #

Implemented: 2025-10-19