feat(pds): add putRecord endpoint for profile editing (#14)

Add com.atproto.repo.putRecord endpoint that supports creating or updating
records. This enables profile editing (displayName, description, avatar, etc.)
via the standard AT Protocol API.

- Add rpcPutRecord method to AccountDurableObject (create or update logic)
- Add putRecord XRPC handler in repo.ts
- Register PUT record route in index.ts

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Author: ascorbic

packages/pds/src/account-do.ts

@@ -376,6 +376,94 @@ export class AccountDurableObject extends DurableObject<Env> {
 		};
 	}
 
+	/**
+	 * RPC method: Put a record (create or update)
+	 */
+	async rpcPutRecord(
+		collection: string,
+		rkey: string,
+		record: unknown,
+	): Promise<{
+		uri: string;
+		cid: string;
+		commit: { cid: string; rev: string };
+		validationStatus: string;
+	}> {
+		const repo = await this.getRepo();
+		const keypair = await this.getKeypair();
+
+		// Check if record exists to determine create vs update
+		const existing = await repo.getRecord(collection, rkey);
+		const isUpdate = existing !== null;
+
+		const op: RecordWriteOp = isUpdate
+			? ({
+					action: WriteOpAction.Update,
+					collection,
+					rkey,
+					record: record as RepoRecord,
+				} as RecordUpdateOp)
+			: ({
+					action: WriteOpAction.Create,
+					collection,
+					rkey,
+					record: record as RepoRecord,
+				} as RecordCreateOp);
+
+		const prevRev = repo.commit.rev;
+		const updatedRepo = await repo.applyWrites([op], keypair);
+		this.repo = updatedRepo;
+
+		// Get the CID for the record from the MST
+		const dataKey = `${collection}/${rkey}`;
+		const recordCid = await this.repo.data.get(dataKey);
+
+		if (!recordCid) {
+			throw new Error(`Failed to put record: ${collection}/${rkey}`);
+		}
+
+		// Sequence the commit for firehose
+		if (this.sequencer) {
+			const newBlocks = new BlockMap();
+			const rows = this.ctx.storage.sql
+				.exec(
+					"SELECT cid, bytes FROM blocks WHERE rev = ?",
+					this.repo.commit.rev,
+				)
+				.toArray();
+
+			for (const row of rows) {
+				const cid = CID.parse(row.cid as string);
+				const bytes = new Uint8Array(row.bytes as ArrayBuffer);
+				newBlocks.set(cid, bytes);
+			}
+
+			const opWithCid = { ...op, cid: recordCid };
+
+			const commitData: CommitData = {
+				did: this.repo.did,
+				commit: this.repo.cid,
+				rev: this.repo.commit.rev,
+				since: prevRev,
+				newBlocks,
+				ops: [opWithCid],
+			};
+
+			const event = await this.sequencer.sequenceCommit(commitData);
+			await this.broadcastCommit(event);
+		}
+
+		return {
+			uri: AtUri.make(this.repo.did, collection, rkey).toString(),
+			cid: recordCid.toString(),
+			commit: {
+				cid: this.repo.cid.toString(),
+				rev: this.repo.commit.rev,
+			},
+			validationStatus: "valid",
+		};
+	}
+
 	/**
 	 * RPC method: Apply multiple writes (batch create/update/delete)
 	 */

packages/pds/src/index.ts

@@ -178,6 +178,9 @@ app.post("/xrpc/com.atproto.repo.uploadBlob", requireAuth, (c) =>
 app.post("/xrpc/com.atproto.repo.applyWrites", requireAuth, (c) =>
 	repo.applyWrites(c, getAccountDO(c.env)),
 );
+app.post("/xrpc/com.atproto.repo.putRecord", requireAuth, (c) =>
+	repo.putRecord(c, getAccountDO(c.env)),
+);
 
 // Server identity
 app.get("/xrpc/com.atproto.server.describeServer", server.describeServer);

packages/pds/src/xrpc/repo.ts

@@ -253,6 +253,47 @@ export async function deleteRecord(
 	return c.json(result);
 }
 
+export async function putRecord(
+	c: Context<{ Bindings: Env }>,
+	accountDO: DurableObjectStub<AccountDurableObject>,
+): Promise<Response> {
+	const body = await c.req.json();
+	const { repo, collection, rkey, record } = body;
+
+	if (!repo || !collection || !rkey || !record) {
+		return c.json(
+			{
+				error: "InvalidRequest",
+				message: "Missing required parameters: repo, collection, rkey, record",
+			},
+			400,
+		);
+	}
+
+	if (repo !== c.env.DID) {
+		return c.json(
+			{
+				error: "InvalidRepo",
+				message: `Invalid repository: ${repo}`,
+			},
+			400,
+		);
+	}
+
+	try {
+		const result = await accountDO.rpcPutRecord(collection, rkey, record);
+		return c.json(result);
+	} catch (err) {
+		return c.json(
+			{
+				error: "InvalidRequest",
+				message: err instanceof Error ? err.message : String(err),
+			},
+			400,
+		);
+	}
+}
+
 export async function applyWrites(
 	c: Context<{ Bindings: Env }>,
 	accountDO: DurableObjectStub<AccountDurableObject>,