@atproto-labs/handle-resolver-node 0.0.0-spaces-alpha-20260910222405

package/CHANGELOG.md

@@ -0,0 +1,319 @@
+# @atproto-labs/handle-resolver-node
+
+## 0.0.0-spaces-alpha-20260910222405
+
+### Patch Changes
+
+- [#5469](https://github.com/bluesky-social/atproto/pull/5469) [`ed361d0`](https://github.com/bluesky-social/atproto/commit/ed361d04b83915c0c5018571711667a40a04cf58) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Re-export `@atproto-labs/handle-resolver`
+
+- [#5469](https://github.com/bluesky-social/atproto/pull/5469) [`ed361d0`](https://github.com/bluesky-social/atproto/commit/ed361d04b83915c0c5018571711667a40a04cf58) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Allow providing a custom `safeFetch` implementation when constructing a `AtprotoHandleResolverNode` instance
+
+- Updated dependencies [[`fe4087e`](https://github.com/bluesky-social/atproto/commit/fe4087ecb7a7cc53c7081c9f97d49121e5251c36), [`ed361d0`](https://github.com/bluesky-social/atproto/commit/ed361d04b83915c0c5018571711667a40a04cf58)]:
+  - @atproto/did@0.0.0-spaces-alpha-20260910222405
+  - @atproto-labs/fetch-node@0.0.0-spaces-alpha-20260910222405
+  - @atproto-labs/handle-resolver@0.0.0-spaces-alpha-20260910222405
+
+## 0.2.8
+
+### Patch Changes
+
+- Updated dependencies [[`6a3d607`](https://github.com/bluesky-social/atproto/commit/6a3d6073cb66c527b5b109242049c85c36b9658c)]:
+  - @atproto-labs/handle-resolver@0.4.8
+  - @atproto-labs/fetch-node@0.3.7
+
+## 0.2.7
+
+### Patch Changes
+
+- Updated dependencies [[`f136380`](https://github.com/bluesky-social/atproto/commit/f136380964a8ea52ef031a9732d3d1f1f1ab0c4a)]:
+  - @atproto-labs/handle-resolver@0.4.7
+  - @atproto-labs/fetch-node@0.3.6
+
+## 0.2.6
+
+### Patch Changes
+
+- [#5193](https://github.com/bluesky-social/atproto/pull/5193) [`ce386ee`](https://github.com/bluesky-social/atproto/commit/ce386eed324f813601db57f873fbb3b987492001) Thanks [@Rex0Lux](https://github.com/Rex0Lux)! - Add an `onError` observability option to the handle resolvers. `WellKnownHandleResolver` previously swallowed every non-abort failure and returned `null`, indistinguishable from "no `.well-known/atproto-did` endpoint exists". Passing `onError` when constructing a resolver (including `AtprotoHandleResolver` and `AtprotoHandleResolverNode`) exposes the underlying cause (SSRF blocks, 5xx upstream errors, redirects, network errors, etc.) without changing the `null` return contract. Because it is set on the instance, it also covers resolution performed internally, for example by an OAuth client the resolver is passed to.
+
+- Updated dependencies [[`ce386ee`](https://github.com/bluesky-social/atproto/commit/ce386eed324f813601db57f873fbb3b987492001)]:
+  - @atproto-labs/handle-resolver@0.4.6
+
+## 0.2.5
+
+### Patch Changes
+
+- [#5197](https://github.com/bluesky-social/atproto/pull/5197) [`a0c49d9`](https://github.com/bluesky-social/atproto/commit/a0c49d9e8bc685c5a747a8d3b2775c73c63fdb6f) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Rewrite import statements to be compatible with TypeScript's `verbatimModuleSyntax` config.
+
+- Updated dependencies [[`a0c49d9`](https://github.com/bluesky-social/atproto/commit/a0c49d9e8bc685c5a747a8d3b2775c73c63fdb6f)]:
+  - @atproto-labs/handle-resolver@0.4.5
+  - @atproto-labs/fetch-node@0.3.5
+  - @atproto/did@0.5.4
+
+## 0.2.4
+
+### Patch Changes
+
+- [#5099](https://github.com/bluesky-social/atproto/pull/5099) [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Update TypeScript build to rely on references to composite internal projects
+
+- [#5099](https://github.com/bluesky-social/atproto/pull/5099) [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Bundle only necessary files in the NPM tarball, including the `CHANGELOG.md` and `README.md` files (if present).
+
+- Updated dependencies [[`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07), [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07), [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07)]:
+  - @atproto-labs/handle-resolver@0.4.4
+  - @atproto-labs/fetch-node@0.3.4
+  - @atproto/did@0.5.3
+
+## 0.2.3
+
+### Patch Changes
+
+- [#5151](https://github.com/bluesky-social/atproto/pull/5151) [`a51c45d`](https://github.com/bluesky-social/atproto/commit/a51c45d38f6bd7b8765f640e564cf921d52162e7) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Update dependencies
+
+- Updated dependencies [[`60e9b83`](https://github.com/bluesky-social/atproto/commit/60e9b8391f212c274b1f21991ee2a3a2d14f2f88), [`60e9b83`](https://github.com/bluesky-social/atproto/commit/60e9b8391f212c274b1f21991ee2a3a2d14f2f88), [`60e9b83`](https://github.com/bluesky-social/atproto/commit/60e9b8391f212c274b1f21991ee2a3a2d14f2f88), [`60e9b83`](https://github.com/bluesky-social/atproto/commit/60e9b8391f212c274b1f21991ee2a3a2d14f2f88), [`a51c45d`](https://github.com/bluesky-social/atproto/commit/a51c45d38f6bd7b8765f640e564cf921d52162e7), [`60e9b83`](https://github.com/bluesky-social/atproto/commit/60e9b8391f212c274b1f21991ee2a3a2d14f2f88)]:
+  - @atproto-labs/fetch-node@0.3.3
+  - @atproto/did@0.5.2
+  - @atproto-labs/handle-resolver@0.4.3
+
+## 0.2.2
+
+### Patch Changes
+
+- [#4967](https://github.com/bluesky-social/atproto/pull/4967) [`9fc720c`](https://github.com/bluesky-social/atproto/commit/9fc720ce75f3ee88a5e48a9be919b07c7647f6f5) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Use TypeScript 7 to build package
+
+- Updated dependencies [[`9fc720c`](https://github.com/bluesky-social/atproto/commit/9fc720ce75f3ee88a5e48a9be919b07c7647f6f5)]:
+  - @atproto-labs/handle-resolver@0.4.2
+  - @atproto-labs/fetch-node@0.3.1
+  - @atproto/did@0.5.1
+
+## 0.2.1
+
+### Patch Changes
+
+- Updated dependencies [[`622d365`](https://github.com/bluesky-social/atproto/commit/622d365aeb240133f40763a3b1c43981112837fc)]:
+  - @atproto/did@0.5.0
+  - @atproto-labs/handle-resolver@0.4.1
+
+## 0.2.0
+
+### Minor Changes
+
+- [#4929](https://github.com/bluesky-social/atproto/pull/4929) [`f01c59f`](https://github.com/bluesky-social/atproto/commit/f01c59f5bd3f75fb8b47a9eecd4858b84033fb7c) Thanks [@devinivy](https://github.com/devinivy)! - **BREAKING:** Drop support for Node.js 18 and 20. Node.js 22 is now the minimum supported version. Docker images now use Node.js 24.
+
+- [#4943](https://github.com/bluesky-social/atproto/pull/4943) [`c459153`](https://github.com/bluesky-social/atproto/commit/c459153395a30ce89e050892c8fab7dc98e019b9) Thanks [@devinivy](https://github.com/devinivy)! - **BREAKING:** Convert to pure ESM. All packages now ship `"type": "module"` with ES module output and Node16 module resolution.
+
+  Node.js 22's `require()` compatibility layer can still load these packages in CommonJS code.
+
+- [#4930](https://github.com/bluesky-social/atproto/pull/4930) [`908bece`](https://github.com/bluesky-social/atproto/commit/908bece169258bff5ad121e5eec157d6ded6f705) Thanks [@devinivy](https://github.com/devinivy)! - Build with TypeScript 6.0.
+
+### Patch Changes
+
+- Updated dependencies [[`f01c59f`](https://github.com/bluesky-social/atproto/commit/f01c59f5bd3f75fb8b47a9eecd4858b84033fb7c), [`c459153`](https://github.com/bluesky-social/atproto/commit/c459153395a30ce89e050892c8fab7dc98e019b9), [`f01c59f`](https://github.com/bluesky-social/atproto/commit/f01c59f5bd3f75fb8b47a9eecd4858b84033fb7c), [`908bece`](https://github.com/bluesky-social/atproto/commit/908bece169258bff5ad121e5eec157d6ded6f705)]:
+  - @atproto/did@0.4.0
+  - @atproto-labs/fetch-node@0.3.0
+  - @atproto-labs/handle-resolver@0.4.0
+
+## 0.1.25
+
+### Patch Changes
+
+- Updated dependencies [[`d54d707`](https://github.com/bluesky-social/atproto/commit/d54d7077eb32041e1f61c312efa1dd0d768c774e), [`d54d707`](https://github.com/bluesky-social/atproto/commit/d54d7077eb32041e1f61c312efa1dd0d768c774e)]:
+  - @atproto/did@0.3.0
+  - @atproto-labs/handle-resolver@0.3.6
+
+## 0.1.24
+
+### Patch Changes
+
+- Updated dependencies [[`2f78893`](https://github.com/bluesky-social/atproto/commit/2f78893ace3bbf14d4bac36837820ddb46658c98)]:
+  - @atproto/did@0.2.4
+  - @atproto-labs/handle-resolver@0.3.5
+
+## 0.1.23
+
+### Patch Changes
+
+- Updated dependencies [[`8012627`](https://github.com/bluesky-social/atproto/commit/8012627a1226cb2f1c753385ad2497b6b43ffd2e), [`d396de0`](https://github.com/bluesky-social/atproto/commit/d396de016d1d55d08cfad1dabd3ffd9eaeea76ea)]:
+  - @atproto/did@0.2.3
+  - @atproto-labs/handle-resolver@0.3.4
+
+## 0.1.22
+
+### Patch Changes
+
+- Updated dependencies [[`261968fd6`](https://github.com/bluesky-social/atproto/commit/261968fd65014ded613e2bf085d61a7864b8fba7), [`261968fd6`](https://github.com/bluesky-social/atproto/commit/261968fd65014ded613e2bf085d61a7864b8fba7)]:
+  - @atproto-labs/handle-resolver@0.3.3
+  - @atproto/did@0.2.2
+
+## 0.1.21
+
+### Patch Changes
+
+- Updated dependencies [[`8ff5ec4ca`](https://github.com/bluesky-social/atproto/commit/8ff5ec4caa9a1f5c1e453a416ba2af22d1ee4f58)]:
+  - @atproto-labs/fetch-node@0.2.0
+
+## 0.1.20
+
+### Patch Changes
+
+- Updated dependencies [[`09439d7d6`](https://github.com/bluesky-social/atproto/commit/09439d7d688294ad1a0c78a74b901ba2f7c5f4c3)]:
+  - @atproto/did@0.2.1
+  - @atproto-labs/handle-resolver@0.3.2
+
+## 0.1.19
+
+### Patch Changes
+
+- Updated dependencies [[`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d)]:
+  - @atproto/did@0.2.0
+  - @atproto-labs/fetch-node@0.1.10
+  - @atproto-labs/handle-resolver@0.3.1
+
+## 0.1.18
+
+### Patch Changes
+
+- Updated dependencies [[`9dac8b0c6`](https://github.com/bluesky-social/atproto/commit/9dac8b0c600520ecb0066ac104787b27668dea47), [`9dac8b0c6`](https://github.com/bluesky-social/atproto/commit/9dac8b0c600520ecb0066ac104787b27668dea47)]:
+  - @atproto-labs/handle-resolver@0.3.0
+
+## 0.1.17
+
+### Patch Changes
+
+- Updated dependencies [[`90b4775fc`](https://github.com/bluesky-social/atproto/commit/90b4775fc9c6959171bc12b961ce9421cc14d6ee), [`90b4775fc`](https://github.com/bluesky-social/atproto/commit/90b4775fc9c6959171bc12b961ce9421cc14d6ee)]:
+  - @atproto-labs/handle-resolver@0.2.0
+
+## 0.1.16
+
+### Patch Changes
+
+- Updated dependencies [[`5050b6550`](https://github.com/bluesky-social/atproto/commit/5050b6550e07e71b0a524eda0b71b837583294d4), [`36dbd4155`](https://github.com/bluesky-social/atproto/commit/36dbd41551f74052a3f584719a1a7edd86eca201), [`5050b6550`](https://github.com/bluesky-social/atproto/commit/5050b6550e07e71b0a524eda0b71b837583294d4), [`43861a452`](https://github.com/bluesky-social/atproto/commit/43861a452b70268e738ef12033297cddacbe25d4)]:
+  - @atproto-labs/fetch-node@0.1.9
+
+## 0.1.15
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @atproto-labs/handle-resolver@0.1.8
+
+## 0.1.14
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @atproto-labs/fetch-node@0.1.8
+
+## 0.1.13
+
+### Patch Changes
+
+- [#3220](https://github.com/bluesky-social/atproto/pull/3220) [`61dc0d60e`](https://github.com/bluesky-social/atproto/commit/61dc0d60e19b88c6427a54c6d95a391b5f4da7bd) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Apply new linting rules regarding import order
+
+- [#3220](https://github.com/bluesky-social/atproto/pull/3220) [`61dc0d60e`](https://github.com/bluesky-social/atproto/commit/61dc0d60e19b88c6427a54c6d95a391b5f4da7bd) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Update NodeJS engine requirement to >=18.7.0
+
+- Updated dependencies [[`61dc0d60e`](https://github.com/bluesky-social/atproto/commit/61dc0d60e19b88c6427a54c6d95a391b5f4da7bd), [`61dc0d60e`](https://github.com/bluesky-social/atproto/commit/61dc0d60e19b88c6427a54c6d95a391b5f4da7bd)]:
+  - @atproto-labs/handle-resolver@0.1.7
+  - @atproto-labs/fetch-node@0.1.7
+  - @atproto/did@0.1.5
+
+## 0.1.12
+
+### Patch Changes
+
+- Updated dependencies [[`cc2a1222b`](https://github.com/bluesky-social/atproto/commit/cc2a1222bd2b8ddd70d70dad174c1c63246a2d87)]:
+  - @atproto/did@0.1.4
+  - @atproto-labs/handle-resolver@0.1.6
+
+## 0.1.11
+
+### Patch Changes
+
+- Updated dependencies [[`9c0128193`](https://github.com/bluesky-social/atproto/commit/9c01281931a371304bcfa465005d7363c003bc5f)]:
+  - @atproto-labs/fetch-node@0.1.6
+
+## 0.1.10
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @atproto-labs/fetch-node@0.1.5
+
+## 0.1.9
+
+### Patch Changes
+
+- Updated dependencies [[`a200e5095`](https://github.com/bluesky-social/atproto/commit/a200e50951d297c3f9670e96027262196bc29b0b)]:
+  - @atproto-labs/handle-resolver@0.1.5
+
+## 0.1.8
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @atproto-labs/fetch-node@0.1.4
+
+## 0.1.7
+
+### Patch Changes
+
+- Updated dependencies [[`9d40ccbb6`](https://github.com/bluesky-social/atproto/commit/9d40ccbb69103fae9aae7e3cec31e9b3116f3ba2), [`9d40ccbb6`](https://github.com/bluesky-social/atproto/commit/9d40ccbb69103fae9aae7e3cec31e9b3116f3ba2)]:
+  - @atproto-labs/handle-resolver@0.1.4
+  - @atproto/did@0.1.3
+
+## 0.1.6
+
+### Patch Changes
+
+- Updated dependencies [[`80450cbf2`](https://github.com/bluesky-social/atproto/commit/80450cbf2ca27967ee9fe1a5f4bc590b26f1e6b2)]:
+  - @atproto-labs/fetch-node@0.1.3
+
+## 0.1.5
+
+### Patch Changes
+
+- Updated dependencies [[`8943c1008`](https://github.com/bluesky-social/atproto/commit/8943c10082702bbc0fc150237c6cc421251afd51)]:
+  - @atproto-labs/fetch-node@0.1.2
+
+## 0.1.4
+
+### Patch Changes
+
+- Updated dependencies [[`a07b21151`](https://github.com/bluesky-social/atproto/commit/a07b21151f1850340c4b7797ebb11521b1a6cdf3), [`a07b21151`](https://github.com/bluesky-social/atproto/commit/a07b21151f1850340c4b7797ebb11521b1a6cdf3)]:
+  - @atproto-labs/fetch-node@0.1.1
+
+## 0.1.3
+
+### Patch Changes
+
+- Updated dependencies [[`cb4abbb67`](https://github.com/bluesky-social/atproto/commit/cb4abbb673c69a8a89b49dca5c038f3da2153c6c), [`cb4abbb67`](https://github.com/bluesky-social/atproto/commit/cb4abbb673c69a8a89b49dca5c038f3da2153c6c), [`cb4abbb67`](https://github.com/bluesky-social/atproto/commit/cb4abbb673c69a8a89b49dca5c038f3da2153c6c)]:
+  - @atproto/did@0.1.2
+  - @atproto-labs/handle-resolver@0.1.3
+
+## 0.1.2
+
+### Patch Changes
+
+- Updated dependencies [[`b934b396b`](https://github.com/bluesky-social/atproto/commit/b934b396b13ba32bf2bf7e75ecdf6871e5f310dd), [`b934b396b`](https://github.com/bluesky-social/atproto/commit/b934b396b13ba32bf2bf7e75ecdf6871e5f310dd)]:
+  - @atproto-labs/handle-resolver@0.1.2
+  - @atproto/did@0.1.1
+
+## 0.1.1
+
+### Patch Changes
+
+- [#2633](https://github.com/bluesky-social/atproto/pull/2633) [`acc9093d2`](https://github.com/bluesky-social/atproto/commit/acc9093d2845eba02b68fb2f9db33e4f1b59bb10) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Use distinct type names to prevent conflicts
+
+- Updated dependencies [[`acc9093d2`](https://github.com/bluesky-social/atproto/commit/acc9093d2845eba02b68fb2f9db33e4f1b59bb10)]:
+  - @atproto-labs/handle-resolver@0.1.1
+
+## 0.1.0
+
+### Minor Changes
+
+- [#2482](https://github.com/bluesky-social/atproto/pull/2482) [`a8d6c1123`](https://github.com/bluesky-social/atproto/commit/a8d6c112359f5c4c0cfbe2df63443ed275f2a646) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Add OAuth provider capability & support for DPoP signed tokens
+
+### Patch Changes
+
+- Updated dependencies [[`a8d6c1123`](https://github.com/bluesky-social/atproto/commit/a8d6c112359f5c4c0cfbe2df63443ed275f2a646)]:
+  - @atproto-labs/handle-resolver@0.1.0
+  - @atproto-labs/fetch-node@0.1.0
+  - @atproto/did@0.1.0

package/LICENSE.txt

@@ -0,0 +1,7 @@
+Dual MIT/Apache-2.0 License
+
+Copyright (c) 2022-2026 Bluesky Social PBC, and Contributors
+
+Except as otherwise noted in individual files, this software is licensed under the MIT license (<http://opensource.org/licenses/MIT>), or the Apache License, Version 2.0 (<http://www.apache.org/licenses/LICENSE-2.0>).
+
+Downstream projects and end users may chose either license individually, or both together, at their discretion. The motivation for this dual-licensing is the additional software patent assurance provided by Apache 2.0.

package/dist/atproto-handle-resolver-node.d.ts

@@ -0,0 +1,39 @@
+import { type Fetch } from '@atproto-labs/fetch-node';
+import { AtprotoHandleResolver, type HandleResolver, type HandleResolverErrorHandler } from '@atproto-labs/handle-resolver';
+export type AtprotoHandleResolverNodeOptions = {
+    /**
+     * List of backup nameservers to use in case the primary ones fail. Will
+     * default to no fallback nameservers.
+     */
+    fallbackNameservers?: string[];
+    /**
+     * Fetch function to use for HTTP requests. Allows customizing the request
+     * behavior, e.g. adding headers, setting a timeout, mocking, etc. This will
+     * be wrapped with {@link safeFetchWrap} to build the {@link safeFetch} when
+     * it is not provided.
+     *
+     * @default `globalThis.fetch`
+     */
+    fetch?: Fetch;
+    /**
+     * Custom fetch function that will be used for HTTP requests. This function,
+     * if provided, *must* be safe to use with user-provided input (URL). If not
+     * provided, a safe fetch function will be created by wrapping the provided {@link fetch}
+     * function (or the default `globalThis.fetch`) with {@link safeFetchWrap}.
+     *
+     * @see {@link safeFetchWrap}
+     */
+    safeFetch?: Fetch;
+    /**
+     * Optional observability hook, invoked when handle resolution fails for a
+     * non-abort reason (network error, SSRF block, non-2xx response, etc.). The
+     * resolver still returns `null`; this only exposes the cause for logging or
+     * telemetry. Handy for diagnosing why a handle fails to resolve, e.g. when a
+     * PDS sits behind a firewall that trips SSRF protection.
+     */
+    onError?: HandleResolverErrorHandler;
+};
+export declare class AtprotoHandleResolverNode extends AtprotoHandleResolver implements HandleResolver {
+    constructor({ fetch, safeFetch, fallbackNameservers, onError, }?: AtprotoHandleResolverNodeOptions);
+}
+//# sourceMappingURL=atproto-handle-resolver-node.d.ts.map

package/dist/atproto-handle-resolver-node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atproto-handle-resolver-node.d.ts","sourceRoot":"","sources":["../src/atproto-handle-resolver-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,KAAK,EAAiB,MAAM,0BAA0B,CAAA;AACpE,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAChC,MAAM,+BAA+B,CAAA;AAMtC,MAAM,MAAM,gCAAgC,GAAG;IAC7C;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE9B;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,KAAK,CAAA;IAEb;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,KAAK,CAAA;IAEjB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,0BAA0B,CAAA;CACrC,CAAA;AAED,qBAAa,yBACX,SAAQ,qBACR,YAAW,cAAc;IAEzB,YAAY,EACV,KAAwB,EACxB,SAKE,EACF,mBAAmB,EACnB,OAAO,GACR,GAAE,gCAAqC,EASvC;CACF"}

package/dist/atproto-handle-resolver-node.js

@@ -0,0 +1,21 @@
+import { safeFetchWrap } from '@atproto-labs/fetch-node';
+import { AtprotoHandleResolver, } from '@atproto-labs/handle-resolver';
+import { nodeResolveTxtDefault, nodeResolveTxtFactory, } from './node-resolve-txt-factory.js';
+export class AtprotoHandleResolverNode extends AtprotoHandleResolver {
+    constructor({ fetch = globalThis.fetch, safeFetch = safeFetchWrap({
+        fetch,
+        timeout: 3000, // 3 seconds
+        ssrfProtection: true,
+        responseMaxSize: 10 * 1024, // DID are max 2048 characters, 10kb for safety
+    }), fallbackNameservers, onError, } = {}) {
+        super({
+            fetch: safeFetch,
+            resolveTxt: nodeResolveTxtDefault,
+            resolveTxtFallback: fallbackNameservers?.length
+                ? nodeResolveTxtFactory(fallbackNameservers)
+                : undefined,
+            onError,
+        });
+    }
+}
+//# sourceMappingURL=atproto-handle-resolver-node.js.map

package/dist/atproto-handle-resolver-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atproto-handle-resolver-node.js","sourceRoot":"","sources":["../src/atproto-handle-resolver-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACpE,OAAO,EACL,qBAAqB,GAGtB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,+BAA+B,CAAA;AAuCtC,MAAM,OAAO,yBACX,SAAQ,qBAAqB;IAG7B,YAAY,EACV,KAAK,GAAG,UAAU,CAAC,KAAK,EACxB,SAAS,GAAG,aAAa,CAAC;QACxB,KAAK;QACL,OAAO,EAAE,IAAI,EAAE,YAAY;QAC3B,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,EAAE,GAAG,IAAI,EAAE,+CAA+C;KAC5E,CAAC,EACF,mBAAmB,EACnB,OAAO,GACR,GAAqC,EAAE;QACtC,KAAK,CAAC;YACJ,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,qBAAqB;YACjC,kBAAkB,EAAE,mBAAmB,EAAE,MAAM;gBAC7C,CAAC,CAAC,qBAAqB,CAAC,mBAAmB,CAAC;gBAC5C,CAAC,CAAC,SAAS;YACb,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;CACF","sourcesContent":["import { type Fetch, safeFetchWrap } from '@atproto-labs/fetch-node'\nimport {\n  AtprotoHandleResolver,\n  type HandleResolver,\n  type HandleResolverErrorHandler,\n} from '@atproto-labs/handle-resolver'\nimport {\n  nodeResolveTxtDefault,\n  nodeResolveTxtFactory,\n} from './node-resolve-txt-factory.js'\n\nexport type AtprotoHandleResolverNodeOptions = {\n  /**\n   * List of backup nameservers to use in case the primary ones fail. Will\n   * default to no fallback nameservers.\n   */\n  fallbackNameservers?: string[]\n\n  /**\n   * Fetch function to use for HTTP requests. Allows customizing the request\n   * behavior, e.g. adding headers, setting a timeout, mocking, etc. This will\n   * be wrapped with {@link safeFetchWrap} to build the {@link safeFetch} when\n   * it is not provided.\n   *\n   * @default `globalThis.fetch`\n   */\n  fetch?: Fetch\n\n  /**\n   * Custom fetch function that will be used for HTTP requests. This function,\n   * if provided, *must* be safe to use with user-provided input (URL). If not\n   * provided, a safe fetch function will be created by wrapping the provided {@link fetch}\n   * function (or the default `globalThis.fetch`) with {@link safeFetchWrap}.\n   *\n   * @see {@link safeFetchWrap}\n   */\n  safeFetch?: Fetch\n\n  /**\n   * Optional observability hook, invoked when handle resolution fails for a\n   * non-abort reason (network error, SSRF block, non-2xx response, etc.). The\n   * resolver still returns `null`; this only exposes the cause for logging or\n   * telemetry. Handy for diagnosing why a handle fails to resolve, e.g. when a\n   * PDS sits behind a firewall that trips SSRF protection.\n   */\n  onError?: HandleResolverErrorHandler\n}\n\nexport class AtprotoHandleResolverNode\n  extends AtprotoHandleResolver\n  implements HandleResolver\n{\n  constructor({\n    fetch = globalThis.fetch,\n    safeFetch = safeFetchWrap({\n      fetch,\n      timeout: 3000, // 3 seconds\n      ssrfProtection: true,\n      responseMaxSize: 10 * 1024, // DID are max 2048 characters, 10kb for safety\n    }),\n    fallbackNameservers,\n    onError,\n  }: AtprotoHandleResolverNodeOptions = {}) {\n    super({\n      fetch: safeFetch,\n      resolveTxt: nodeResolveTxtDefault,\n      resolveTxtFallback: fallbackNameservers?.length\n        ? nodeResolveTxtFactory(fallbackNameservers)\n        : undefined,\n      onError,\n    })\n  }\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from '@atproto-labs/handle-resolver';
+export * from './atproto-handle-resolver-node.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,+BAA+B,CAAA;AAC7C,cAAc,mCAAmC,CAAA"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export * from '@atproto-labs/handle-resolver';
+export * from './atproto-handle-resolver-node.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,+BAA+B,CAAA;AAC7C,cAAc,mCAAmC,CAAA","sourcesContent":["export * from '@atproto-labs/handle-resolver'\nexport * from './atproto-handle-resolver-node.js'\n"]}

package/dist/node-resolve-txt-factory.d.ts

@@ -0,0 +1,4 @@
+import type { ResolveTxt } from '@atproto-labs/handle-resolver';
+export declare const nodeResolveTxtDefault: ResolveTxt;
+export declare function nodeResolveTxtFactory(nameservers: string[]): ResolveTxt;
+//# sourceMappingURL=node-resolve-txt-factory.d.ts.map

package/dist/node-resolve-txt-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-resolve-txt-factory.d.ts","sourceRoot":"","sources":["../src/node-resolve-txt-factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAE/D,eAAO,MAAM,qBAAqB,EAAE,UACiB,CAAA;AAErD,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,UAAU,CA0CvE"}

package/dist/node-resolve-txt-factory.js

@@ -0,0 +1,78 @@
+import { Resolver, lookup, resolveTxt } from 'node:dns/promises';
+import { isIP } from 'node:net';
+export const nodeResolveTxtDefault = (hostname) => resolveTxt(hostname).then(groupChunks, handleError);
+export function nodeResolveTxtFactory(nameservers) {
+    // Optimization
+    if (!nameservers.length)
+        return async () => null;
+    // Build the resolver asynchronously (will be awaited on every use)
+    const resolverPromise = Promise.all(nameservers.map((nameserver) => {
+        const [domain, port = null] = nameserver.split(':', 2);
+        if (port !== null && !/^\d+$/.test(port)) {
+            throw new TypeError(`Invalid name server "${nameserver}"`);
+        }
+        return isIP(domain) === 4 || isBracedIPv6(domain)
+            ? [nameserver] // No need to lookup
+            : lookup(domain, { all: true }).then((r) => r.map((a) => appendPort(a.address, port)), 
+            // Let's just ignore failed nameservers resolution
+            (_err) => []);
+    })).then((results) => {
+        const backupIps = results.flat(1);
+        // No resolver if no valid IP
+        if (!backupIps.length)
+            return null;
+        const resolver = new Resolver();
+        resolver.setServers(backupIps);
+        return resolver;
+    });
+    // Avoid uncaught promise rejection
+    void resolverPromise.catch(() => {
+        // Should never happen though...
+    });
+    return async (hostname) => {
+        const resolver = await resolverPromise;
+        return resolver
+            ? resolver.resolveTxt(hostname).then(groupChunks, handleError)
+            : null;
+    };
+}
+function isBracedIPv6(address) {
+    return (address.startsWith('[') &&
+        address.endsWith(']') &&
+        isIP(address.slice(1, -1)) === 6);
+}
+function groupChunks(results) {
+    return results.map((chunks) => chunks.join(''));
+}
+function handleError(err) {
+    // Invalid argument type (e.g. hostname is a number)
+    if (err instanceof TypeError)
+        throw err;
+    // If the hostname does not resolve, return null
+    if (err instanceof Error && 'code' in err) {
+        if (err.code === 'ENOTFOUND')
+            return null;
+        // Hostname is not a valid domain name
+        if (err.code === 'EBADNAME')
+            throw err;
+        // DNS server unreachable
+        // if (err.code === 'ETIMEOUT') throw err
+    }
+    // Historically, errors were not thrown here. A "null" value indicates to the
+    // AtprotoHandleResolver that it should try the fallback resolver.
+    // @TODO We might want to re-visit this to only apply when an unexpected error
+    // occurs (by throwing here). For now, let's keep the same behavior as before.
+    // throw err
+    return null;
+}
+function appendPort(address, port) {
+    switch (isIP(address)) {
+        case 4:
+            return port ? `${address}:${port}` : address;
+        case 6:
+            return port ? `[${address}]:${port}` : `[${address}]`;
+        default:
+            throw new TypeError(`Invalid IP address "${address}"`);
+    }
+}
+//# sourceMappingURL=node-resolve-txt-factory.js.map

package/dist/node-resolve-txt-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-resolve-txt-factory.js","sourceRoot":"","sources":["../src/node-resolve-txt-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAG/B,MAAM,CAAC,MAAM,qBAAqB,GAAe,CAAC,QAAQ,EAAE,EAAE,CAC5D,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;AAErD,MAAM,UAAU,qBAAqB,CAAC,WAAqB;IACzD,eAAe;IACf,IAAI,CAAC,WAAW,CAAC,MAAM;QAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAA;IAEhD,mEAAmE;IACnE,MAAM,eAAe,GAA6B,OAAO,CAAC,GAAG,CAC3D,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAC7B,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QAEtD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,SAAS,CAAC,wBAAwB,UAAU,GAAG,CAAC,CAAA;QAC5D,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC;YAC/C,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,oBAAoB;YACnC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAChD,kDAAkD;YAClD,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CACb,CAAA;IACP,CAAC,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACjB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjC,6BAA6B;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QAElC,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAA;QAC/B,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAC9B,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,mCAAmC;IACnC,KAAK,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE;QAC9B,gCAAgC;IAClC,CAAC,CAAC,CAAA;IAEF,OAAO,KAAK,EAAE,QAAQ,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAA;QACtC,OAAO,QAAQ;YACb,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;YAC9D,CAAC,CAAC,IAAI,CAAA;IACV,CAAC,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,CACL,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CACjC,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAmB;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,oDAAoD;IACpD,IAAI,GAAG,YAAY,SAAS;QAAE,MAAM,GAAG,CAAA;IAEvC,gDAAgD;IAChD,IAAI,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAC1C,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAA;QAEzC,sCAAsC;QACtC,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,GAAG,CAAA;QAEtC,yBAAyB;QACzB,yCAAyC;IAC3C,CAAC;IAED,6EAA6E;IAC7E,kEAAkE;IAElE,8EAA8E;IAC9E,8EAA8E;IAE9E,YAAY;IAEZ,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAmB;IACtD,QAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC;YACJ,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;QAC9C,KAAK,CAAC;YACJ,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAA;QACvD;YACE,MAAM,IAAI,SAAS,CAAC,uBAAuB,OAAO,GAAG,CAAC,CAAA;IAC1D,CAAC;AACH,CAAC","sourcesContent":["import { Resolver, lookup, resolveTxt } from 'node:dns/promises'\nimport { isIP } from 'node:net'\nimport type { ResolveTxt } from '@atproto-labs/handle-resolver'\n\nexport const nodeResolveTxtDefault: ResolveTxt = (hostname) =>\n  resolveTxt(hostname).then(groupChunks, handleError)\n\nexport function nodeResolveTxtFactory(nameservers: string[]): ResolveTxt {\n  // Optimization\n  if (!nameservers.length) return async () => null\n\n  // Build the resolver asynchronously (will be awaited on every use)\n  const resolverPromise: Promise<Resolver | null> = Promise.all<string[]>(\n    nameservers.map((nameserver) => {\n      const [domain, port = null] = nameserver.split(':', 2)\n\n      if (port !== null && !/^\\d+$/.test(port)) {\n        throw new TypeError(`Invalid name server \"${nameserver}\"`)\n      }\n\n      return isIP(domain) === 4 || isBracedIPv6(domain)\n        ? [nameserver] // No need to lookup\n        : lookup(domain, { all: true }).then(\n            (r) => r.map((a) => appendPort(a.address, port)),\n            // Let's just ignore failed nameservers resolution\n            (_err) => [],\n          )\n    }),\n  ).then((results) => {\n    const backupIps = results.flat(1)\n    // No resolver if no valid IP\n    if (!backupIps.length) return null\n\n    const resolver = new Resolver()\n    resolver.setServers(backupIps)\n    return resolver\n  })\n\n  // Avoid uncaught promise rejection\n  void resolverPromise.catch(() => {\n    // Should never happen though...\n  })\n\n  return async (hostname) => {\n    const resolver = await resolverPromise\n    return resolver\n      ? resolver.resolveTxt(hostname).then(groupChunks, handleError)\n      : null\n  }\n}\n\nfunction isBracedIPv6(address: string): boolean {\n  return (\n    address.startsWith('[') &&\n    address.endsWith(']') &&\n    isIP(address.slice(1, -1)) === 6\n  )\n}\n\nfunction groupChunks(results: string[][]): string[] {\n  return results.map((chunks) => chunks.join(''))\n}\n\nfunction handleError(err: unknown) {\n  // Invalid argument type (e.g. hostname is a number)\n  if (err instanceof TypeError) throw err\n\n  // If the hostname does not resolve, return null\n  if (err instanceof Error && 'code' in err) {\n    if (err.code === 'ENOTFOUND') return null\n\n    // Hostname is not a valid domain name\n    if (err.code === 'EBADNAME') throw err\n\n    // DNS server unreachable\n    // if (err.code === 'ETIMEOUT') throw err\n  }\n\n  // Historically, errors were not thrown here. A \"null\" value indicates to the\n  // AtprotoHandleResolver that it should try the fallback resolver.\n\n  // @TODO We might want to re-visit this to only apply when an unexpected error\n  // occurs (by throwing here). For now, let's keep the same behavior as before.\n\n  // throw err\n\n  return null\n}\n\nfunction appendPort(address: string, port: string | null): string {\n  switch (isIP(address)) {\n    case 4:\n      return port ? `${address}:${port}` : address\n    case 6:\n      return port ? `[${address}]:${port}` : `[${address}]`\n    default:\n      throw new TypeError(`Invalid IP address \"${address}\"`)\n  }\n}\n"]}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@atproto-labs/handle-resolver-node",
+  "version": "0.0.0-spaces-alpha-20260910222405",
+  "license": "MIT",
+  "description": "Node specific ATProto handle to DID resolver",
+  "keywords": [
+    "atproto",
+    "oauth",
+    "handle",
+    "identity",
+    "node"
+  ],
+  "homepage": "https://atproto.com",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/bluesky-social/atproto",
+    "directory": "packages/internal/handle-resolver-node"
+  },
+  "files": [
+    "./dist",
+    "./CHANGELOG.md"
+  ],
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "dependencies": {
+    "@atproto-labs/fetch-node": "^0.0.0-spaces-alpha-20260910222405",
+    "@atproto-labs/handle-resolver": "^0.0.0-spaces-alpha-20260910222405",
+    "@atproto/did": "^0.0.0-spaces-alpha-20260910222405"
+  },
+  "scripts": {
+    "build": "tsc --build tsconfig.build.json"
+  }
+}