a collection of lightweight TypeScript packages for AT Protocol, the protocol powering Bluesky
atproto
bluesky
typescript
npm
chore: bump versions
+277
-232
-5
.changeset/beige-bikes-sneeze.md
-5
.changeset/beige-bikes-sneeze.md
-5
.changeset/cuddly-icons-show.md
-5
.changeset/cuddly-icons-show.md
-5
.changeset/eight-files-listen.md
-5
.changeset/eight-files-listen.md
-5
.changeset/fair-garlics-tickle.md
-5
.changeset/fair-garlics-tickle.md
-5
.changeset/floppy-bags-bow.md
-5
.changeset/floppy-bags-bow.md
-5
.changeset/hungry-dogs-listen.md
-5
.changeset/hungry-dogs-listen.md
-5
.changeset/lovely-lines-love.md
-5
.changeset/lovely-lines-love.md
-5
.changeset/lovely-singers-jam.md
-5
.changeset/lovely-singers-jam.md
-5
.changeset/major-donuts-throw.md
-5
.changeset/major-donuts-throw.md
-5
.changeset/metal-sheep-notice.md
-5
.changeset/metal-sheep-notice.md
-5
.changeset/nice-owls-mate.md
-5
.changeset/nice-owls-mate.md
-5
.changeset/nice-states-notice.md
-5
.changeset/nice-states-notice.md
-5
.changeset/ninety-mirrors-kick.md
-5
.changeset/ninety-mirrors-kick.md
-63
.changeset/oauth-crypto-refactor-browser-client.md
-63
.changeset/oauth-crypto-refactor-browser-client.md
···
1
-
---
2
-
'@atcute/oauth-browser-client': major
3
-
---
4
-
5
-
internalize implementation details and remove re-exports
6
-
7
-
**removed exports:**
8
-
9
-
- `OAuthServerAgent` class (internal)
10
-
- `DPoPKey` type → use `DpopPrivateJwk` from `@atcute/oauth-crypto`
11
-
- `IdentityResolver`, `ResolvedIdentity`, `ResolveIdentityOptions`, `DefaultIdentityResolverOptions`
12
-
→ use `ActorResolver` and related types from `@atcute/identity-resolver`
13
-
- `defaultIdentityResolver` (deprecated) → use `LocalActorResolver` from `@atcute/identity-resolver`
14
-
- re-exported oauth-types (`OAuthTokenResponse`, `AuthorizationServerMetadata`, `ClientMetadata`,
15
-
`OAuthParResponse`, `ProtectedResourceMetadata`) → import from `@atcute/oauth-types` directly
16
-
17
-
**changed types:**
18
-
19
-
- `FetchClientAssertionParams.jkt` removed (now computed internally)
20
-
21
-
**stored session format:**
22
-
23
-
internal DPoP key format changed from `DPoPKey` to `DpopPrivateJwk`. existing sessions are
24
-
automatically migrated on first access.
25
-
26
-
**migration:**
27
-
28
-
```ts
29
-
// before
30
-
import {
31
-
type DPoPKey,
32
-
type IdentityResolver,
33
-
defaultIdentityResolver,
34
-
} from '@atcute/oauth-browser-client';
35
-
36
-
// after
37
-
import type { DpopPrivateJwk } from '@atcute/oauth-crypto';
38
-
import { LocalActorResolver, type ActorResolver } from '@atcute/identity-resolver';
39
-
```
40
-
41
-
types re-exported from `@atcute/oauth-types` now have an `OAuth` prefix:
42
-
43
-
```ts
44
-
// before
45
-
import type { AuthorizationServerMetadata, ClientMetadata } from '@atcute/oauth-browser-client';
46
-
47
-
// after
48
-
import type { OAuthAuthorizationServerMetadata, OAuthClientMetadata } from '@atcute/oauth-types';
49
-
```
50
-
51
-
custom `ClientAssertionFetcher` implementations should remove `jkt`:
52
-
53
-
```ts
54
-
// before
55
-
const fetchAssertion: ClientAssertionFetcher = async ({ jkt, aud, createDpopProof }) => {
56
-
// jkt was passed to your backend
57
-
};
58
-
59
-
// after
60
-
const fetchAssertion: ClientAssertionFetcher = async ({ aud, createDpopProof }) => {
61
-
// backend should compute jkt from the DPoP proof instead
62
-
};
63
-
```
-63
.changeset/oauth-crypto-refactor-node-client.md
-63
.changeset/oauth-crypto-refactor-node-client.md
···
1
-
---
2
-
'@atcute/oauth-node-client': major
3
-
---
4
-
5
-
refactor key management to use `@atcute/oauth-crypto`
6
-
7
-
key generation and PKCS#8 import now return JWKs directly - no separate import step needed. keys are
8
-
imported and cached transparently when first used for signing.
9
-
10
-
**renamed exports:**
11
-
12
-
| before | after |
13
-
| -------------------- | ---------------------------- |
14
-
| `generatePrivateKey` | `generateClientAssertionKey` |
15
-
| `importPkcs8Key` | `importClientAssertionPkcs8` |
16
-
17
-
**removed exports:**
18
-
19
-
- `importJwkKey` - JWKs can now be used directly without importing
20
-
- `exportJwkKey` - `generateClientAssertionKey` already returns a JWK
21
-
22
-
**renamed types:**
23
-
24
-
| before | after |
25
-
| ------------ | --------------------------- |
26
-
| `PrivateKey` | `ClientAssertionPrivateJwk` |
27
-
28
-
**removed types:**
29
-
30
-
- `ImportKeyOptions` - key import functions now have a simpler signature
31
-
- `SigningAlgorithm` - import from `@atcute/oauth-crypto` if needed
32
-
33
-
**migration:**
34
-
35
-
```ts
36
-
// before
37
-
import {
38
-
generatePrivateKey,
39
-
importJwkKey,
40
-
exportJwkKey,
41
-
type PrivateKey,
42
-
} from '@atcute/oauth-node-client';
43
-
44
-
const key = await generatePrivateKey('main', 'ES256');
45
-
const jwk = await exportJwkKey(key);
46
-
const imported = await importJwkKey(jwk);
47
-
const keyset = new Keyset([imported]);
48
-
49
-
// after
50
-
import {
51
-
generateClientAssertionKey,
52
-
type ClientAssertionPrivateJwk,
53
-
} from '@atcute/oauth-node-client';
54
-
55
-
// generateClientAssertionKey returns a JWK directly
56
-
const jwk = await generateClientAssertionKey('main', 'ES256');
57
-
// JWKs can be used directly - no import step needed
58
-
const keyset = new Keyset([jwk]);
59
-
60
-
// loading from environment/storage:
61
-
const storedJwk = JSON.parse(process.env.PRIVATE_KEY_JWK!) as ClientAssertionPrivateJwk;
62
-
const keyset = new Keyset([storedJwk]);
63
-
```
-5
.changeset/rare-banks-design.md
-5
.changeset/rare-banks-design.md
-5
.changeset/real-gifts-learn.md
-5
.changeset/real-gifts-learn.md
-5
.changeset/six-lizards-smash.md
-5
.changeset/six-lizards-smash.md
-5
.changeset/stale-cats-watch.md
-5
.changeset/stale-cats-watch.md
-5
.changeset/thin-oranges-lose.md
-5
.changeset/thin-oranges-lose.md
+8
packages/definitions/bluesky/CHANGELOG.md
+8
packages/definitions/bluesky/CHANGELOG.md
+1
-1
packages/definitions/bluesky/package.json
+1
-1
packages/definitions/bluesky/package.json
+8
packages/definitions/leaflet/CHANGELOG.md
+8
packages/definitions/leaflet/CHANGELOG.md
+1
-1
packages/definitions/leaflet/package.json
+1
-1
packages/definitions/leaflet/package.json
+8
packages/definitions/pckt/CHANGELOG.md
+8
packages/definitions/pckt/CHANGELOG.md
+1
-1
packages/definitions/pckt/package.json
+1
-1
packages/definitions/pckt/package.json
+8
packages/definitions/tangled/CHANGELOG.md
+8
packages/definitions/tangled/CHANGELOG.md
+1
-1
packages/definitions/tangled/package.json
+1
-1
packages/definitions/tangled/package.json
+19
-2
packages/lexicons/lex-cli/CHANGELOG.md
+19
-2
packages/lexicons/lex-cli/CHANGELOG.md
···
1
1
# @atcute/lex-cli
2
2
3
+
## 2.5.3
4
+
5
+
### Patch Changes
6
+
7
+
- bfebed5: make use of lexicon-doc's new ref parsing utilities
8
+
- Updated dependencies [e73fddf]
9
+
- Updated dependencies [066bc16]
10
+
- Updated dependencies [2c386c7]
11
+
- @atcute/lexicons@1.2.7
12
+
- @atcute/lexicon-doc@2.1.0
13
+
3
14
## 2.5.2
4
15
5
16
### Patch Changes
···
35
46
properties: {
36
47
subject: required(string({ format: 'uri' })),
37
48
createdAt: required(string({ format: 'datetime' })),
38
-
tags: array({ items: string(), description: 'tags for organizing bookmarks' }),
49
+
tags: array({
50
+
items: string(),
51
+
description: 'tags for organizing bookmarks',
52
+
}),
39
53
},
40
54
}),
41
55
}),
···
193
207
nsid: ['com.atproto.*'],
194
208
imports: (nsid) => {
195
209
const specifier = nsid.slice('com.atproto.'.length).replaceAll('.', '/');
196
-
return { type: 'namespace', from: `@atcute/atproto/types/${specifier}` };
210
+
return {
211
+
type: 'namespace',
212
+
from: `@atcute/atproto/types/${specifier}`,
213
+
};
197
214
},
198
215
},
199
216
];
+1
-1
packages/lexicons/lex-cli/package.json
+1
-1
packages/lexicons/lex-cli/package.json
+17
packages/lexicons/lexicon-doc/CHANGELOG.md
+17
packages/lexicons/lexicon-doc/CHANGELOG.md
···
1
1
# @atcute/lexicon-doc
2
2
3
+
## 2.1.0
4
+
5
+
### Minor Changes
6
+
7
+
- 2c386c7: include lexicon ref parsing utilities
8
+
9
+
### Patch Changes
10
+
11
+
- 066bc16: faster UTF-8 and grapheme length validation
12
+
- Updated dependencies [e73fddf]
13
+
- Updated dependencies [2aee780]
14
+
- Updated dependencies [a60d862]
15
+
- Updated dependencies [2772033]
16
+
- @atcute/lexicons@1.2.7
17
+
- @atcute/util-text@1.1.0
18
+
- @atcute/uint8array@1.1.0
19
+
3
20
## 2.0.6
4
21
5
22
### Patch Changes
+1
-1
packages/lexicons/lexicon-doc/package.json
+1
-1
packages/lexicons/lexicon-doc/package.json
+11
packages/lexicons/lexicons/CHANGELOG.md
+11
packages/lexicons/lexicons/CHANGELOG.md
···
1
1
# @atcute/lexicons
2
2
3
+
## 1.2.7
4
+
5
+
### Patch Changes
6
+
7
+
- e73fddf: faster UTF-8 length validation checks
8
+
- Updated dependencies [2aee780]
9
+
- Updated dependencies [a60d862]
10
+
- Updated dependencies [2772033]
11
+
- @atcute/util-text@1.1.0
12
+
- @atcute/uint8array@1.1.0
13
+
3
14
## 1.2.6
4
15
5
16
### Patch Changes
+1
-1
packages/lexicons/lexicons/package.json
+1
-1
packages/lexicons/lexicons/package.json
+7
packages/misc/uint8array/CHANGELOG.md
+7
packages/misc/uint8array/CHANGELOG.md
+1
-1
packages/misc/uint8array/package.json
+1
-1
packages/misc/uint8array/package.json
+7
packages/misc/util-text/CHANGELOG.md
+7
packages/misc/util-text/CHANGELOG.md
+1
-1
packages/misc/util-text/package.json
+1
-1
packages/misc/util-text/package.json
+79
-1
packages/oauth/browser-client/CHANGELOG.md
+79
-1
packages/oauth/browser-client/CHANGELOG.md
···
1
1
# @atcute/oauth-browser-client
2
2
3
+
## 3.0.0
4
+
5
+
### Major Changes
6
+
7
+
- aee92d3: internalize implementation details and remove re-exports
8
+
9
+
**removed exports:**
10
+
- `OAuthServerAgent` class (internal)
11
+
- `DPoPKey` type → use `DpopPrivateJwk` from `@atcute/oauth-crypto`
12
+
- `IdentityResolver`, `ResolvedIdentity`, `ResolveIdentityOptions`,
13
+
`DefaultIdentityResolverOptions` → use `ActorResolver` and related types from
14
+
`@atcute/identity-resolver`
15
+
- `defaultIdentityResolver` (deprecated) → use `LocalActorResolver` from
16
+
`@atcute/identity-resolver`
17
+
- re-exported oauth-types (`OAuthTokenResponse`, `AuthorizationServerMetadata`, `ClientMetadata`,
18
+
`OAuthParResponse`, `ProtectedResourceMetadata`) → import from `@atcute/oauth-types` directly
19
+
20
+
**changed types:**
21
+
- `FetchClientAssertionParams.jkt` removed (now computed internally)
22
+
23
+
**stored session format:**
24
+
25
+
internal DPoP key format changed from `DPoPKey` to `DpopPrivateJwk`. existing sessions are
26
+
automatically migrated on first access.
27
+
28
+
**migration:**
29
+
30
+
```ts
31
+
// before
32
+
import {
33
+
type DPoPKey,
34
+
type IdentityResolver,
35
+
defaultIdentityResolver,
36
+
} from '@atcute/oauth-browser-client';
37
+
38
+
// after
39
+
import type { DpopPrivateJwk } from '@atcute/oauth-crypto';
40
+
import { LocalActorResolver, type ActorResolver } from '@atcute/identity-resolver';
41
+
```
42
+
43
+
types re-exported from `@atcute/oauth-types` now have an `OAuth` prefix:
44
+
45
+
```ts
46
+
// before
47
+
import type { AuthorizationServerMetadata, ClientMetadata } from '@atcute/oauth-browser-client';
48
+
49
+
// after
50
+
import type { OAuthAuthorizationServerMetadata, OAuthClientMetadata } from '@atcute/oauth-types';
51
+
```
52
+
53
+
custom `ClientAssertionFetcher` implementations should remove `jkt`:
54
+
55
+
```ts
56
+
// before
57
+
const fetchAssertion: ClientAssertionFetcher = async ({ jkt, aud, createDpopProof }) => {
58
+
// jkt was passed to your backend
59
+
};
60
+
61
+
// after
62
+
const fetchAssertion: ClientAssertionFetcher = async ({ aud, createDpopProof }) => {
63
+
// backend should compute jkt from the DPoP proof instead
64
+
};
65
+
```
66
+
67
+
### Minor Changes
68
+
69
+
- 751161f: support passing nonce in client assertion fetcher
70
+
71
+
### Patch Changes
72
+
73
+
- 29b911e: make use of @atcute/oauth-types
74
+
- Updated dependencies [e73fddf]
75
+
- Updated dependencies [f859da9]
76
+
- @atcute/lexicons@1.2.7
77
+
- @atcute/multibase@1.1.7
78
+
3
79
## 2.0.3
4
80
5
81
### Patch Changes
···
83
159
// NOTE: Bluesky may log handle resolutions and requester info per their privacy
84
160
// policy. consider the privacy implications of this arrangement and change this
85
161
// setup if unsuitable for your use case.
86
-
handleResolver: new XrpcHandleResolver({ serviceUrl: 'https://public.api.bsky.app' }),
162
+
handleResolver: new XrpcHandleResolver({
163
+
serviceUrl: 'https://public.api.bsky.app',
164
+
}),
87
165
88
166
didDocumentResolver: new CompositeDidDocumentResolver({
89
167
methods: {
+1
-1
packages/oauth/browser-client/package.json
+1
-1
packages/oauth/browser-client/package.json
+70
packages/oauth/node-client/CHANGELOG.md
+70
packages/oauth/node-client/CHANGELOG.md
···
1
1
# @atcute/oauth-node-client
2
2
3
+
## 1.0.0
4
+
5
+
### Major Changes
6
+
7
+
- aee92d3: refactor key management to use `@atcute/oauth-crypto`
8
+
9
+
key generation and PKCS#8 import now return JWKs directly - no separate import step needed. keys
10
+
are imported and cached transparently when first used for signing.
11
+
12
+
**renamed exports:**
13
+
14
+
| before | after |
15
+
| -------------------- | ---------------------------- |
16
+
| `generatePrivateKey` | `generateClientAssertionKey` |
17
+
| `importPkcs8Key` | `importClientAssertionPkcs8` |
18
+
19
+
**removed exports:**
20
+
- `importJwkKey` - JWKs can now be used directly without importing
21
+
- `exportJwkKey` - `generateClientAssertionKey` already returns a JWK
22
+
23
+
**renamed types:**
24
+
25
+
| before | after |
26
+
| ------------ | --------------------------- |
27
+
| `PrivateKey` | `ClientAssertionPrivateJwk` |
28
+
29
+
**removed types:**
30
+
- `ImportKeyOptions` - key import functions now have a simpler signature
31
+
- `SigningAlgorithm` - import from `@atcute/oauth-crypto` if needed
32
+
33
+
**migration:**
34
+
35
+
```ts
36
+
// before
37
+
import {
38
+
generatePrivateKey,
39
+
importJwkKey,
40
+
exportJwkKey,
41
+
type PrivateKey,
42
+
} from '@atcute/oauth-node-client';
43
+
44
+
const key = await generatePrivateKey('main', 'ES256');
45
+
const jwk = await exportJwkKey(key);
46
+
const imported = await importJwkKey(jwk);
47
+
const keyset = new Keyset([imported]);
48
+
49
+
// after
50
+
import {
51
+
generateClientAssertionKey,
52
+
type ClientAssertionPrivateJwk,
53
+
} from '@atcute/oauth-node-client';
54
+
55
+
// generateClientAssertionKey returns a JWK directly
56
+
const jwk = await generateClientAssertionKey('main', 'ES256');
57
+
// JWKs can be used directly - no import step needed
58
+
const keyset = new Keyset([jwk]);
59
+
60
+
// loading from environment/storage:
61
+
const storedJwk = JSON.parse(process.env.PRIVATE_KEY_JWK!) as ClientAssertionPrivateJwk;
62
+
const keyset = new Keyset([storedJwk]);
63
+
```
64
+
65
+
### Patch Changes
66
+
67
+
- b113eaf: manual redirect handling for CF workers support
68
+
- d7863ad: allow passing multiple prompts as fallback values
69
+
- a2e12fc: make use of @atcute/oauth-types and @atcute/oauth-keyset
70
+
- Updated dependencies [e73fddf]
71
+
- @atcute/lexicons@1.2.7
72
+
3
73
## 0.1.3
4
74
5
75
### Patch Changes
+1
-1
packages/oauth/node-client/package.json
+1
-1
packages/oauth/node-client/package.json
+13
packages/servers/xrpc-server/CHANGELOG.md
+13
packages/servers/xrpc-server/CHANGELOG.md
···
1
1
# @atcute/xrpc-server
2
2
3
+
## 0.1.9
4
+
5
+
### Patch Changes
6
+
7
+
- 853514c: export operation types
8
+
- Updated dependencies [e73fddf]
9
+
- Updated dependencies [a60d862]
10
+
- Updated dependencies [2772033]
11
+
- Updated dependencies [f859da9]
12
+
- @atcute/lexicons@1.2.7
13
+
- @atcute/uint8array@1.1.0
14
+
- @atcute/multibase@1.1.7
15
+
3
16
## 0.1.8
4
17
5
18
### Patch Changes
+1
-1
packages/servers/xrpc-server/package.json
+1
-1
packages/servers/xrpc-server/package.json
+9
packages/utilities/multibase/CHANGELOG.md
+9
packages/utilities/multibase/CHANGELOG.md