@atproto/lex-server 0.0.18 → 0.1.0-next.0

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # @atproto/lex-server
 
+## 0.1.0-next.0
+
+### Minor Changes
+
+- [#4929](https://github.com/bluesky-social/atproto/pull/4929) [`bb7491c`](https://github.com/bluesky-social/atproto/commit/bb7491c29e06181e1d2f8cf6eb454f9bb8ab961b) Thanks [@devinivy](https://github.com/devinivy)! - **BREAKING:** Drop support for Node.js 18 and 20. Node.js 22 is now the minimum supported version. Docker images now use Node.js 24.
+
+- [#4943](https://github.com/bluesky-social/atproto/pull/4943) [`07ae5d4`](https://github.com/bluesky-social/atproto/commit/07ae5d4452df51e045e0239da7a04cf0bc154028) Thanks [@devinivy](https://github.com/devinivy)! - **BREAKING:** Convert to pure ESM. All packages now ship `"type": "module"` with ES module output and Node16 module resolution.
+
+  Node.js 22's `require()` compatibility layer can still load these packages in CommonJS code.
+
+- [#4930](https://github.com/bluesky-social/atproto/pull/4930) [`042df15`](https://github.com/bluesky-social/atproto/commit/042df15087c0e62cd1e715fcbf58852fab875af9) Thanks [@devinivy](https://github.com/devinivy)! - Build with TypeScript 6.0. Emitted `.d.ts` files now use TypeScript 6's stricter `Uint8Array<ArrayBuffer>` typing in places where Web/Node APIs require buffer-backed (not shared-memory) byte arrays. Consumers compiling against these types on older TypeScript should see no runtime impact, but may need to widen or cast in spots that previously relied on `Uint8Array` defaulting to `<ArrayBufferLike>`.
+
+  Internal: tsconfig `moduleResolution: "node"` is silenced via `ignoreDeprecations: "6.0"` for now; the proper migration to `node16`/`bundler` resolution is deferred.
+
+### Patch Changes
+
+- Updated dependencies [[`bb7491c`](https://github.com/bluesky-social/atproto/commit/bb7491c29e06181e1d2f8cf6eb454f9bb8ab961b), [`07ae5d4`](https://github.com/bluesky-social/atproto/commit/07ae5d4452df51e045e0239da7a04cf0bc154028), [`042df15`](https://github.com/bluesky-social/atproto/commit/042df15087c0e62cd1e715fcbf58852fab875af9)]:
+  - @atproto/crypto@0.5.0-next.0
+  - @atproto/did@0.4.0-next.0
+  - @atproto/lex-cbor@0.1.0-next.0
+  - @atproto/lex-client@0.1.0-next.0
+  - @atproto/lex-data@0.1.0-next.0
+  - @atproto/lex-json@0.1.0-next.0
+  - @atproto/lex-schema@0.1.0-next.0
+  - @atproto-labs/did-resolver@0.3.0-next.0
+
 ## 0.0.18
 
 ### Patch Changes

package/README.md

@@ -524,7 +524,7 @@ import { toRequestListener } from '@atproto/lex-server/nodejs'
 const app = express()
 
 // Mount the XRPC router
-app.use('/xrpc', toRequestListener(router.fetch))
+app.use(toRequestListener(router.fetch))
 
 app.listen(3000)
 ```

package/dist/errors.js

@@ -1,24 +1,18 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LexServerAuthError = exports.LexServerError = exports.LexError = void 0;
-const lex_client_1 = require("@atproto/lex-client");
-const lex_data_1 = require("@atproto/lex-data");
-Object.defineProperty(exports, "LexError", { enumerable: true, get: function () { return lex_data_1.LexError; } });
-const lex_schema_1 = require("@atproto/lex-schema");
-const www_authenticate_js_1 = require("./lib/www-authenticate.js");
+import { XrpcError } from '@atproto/lex-client';
+import { LexError } from '@atproto/lex-data';
+import { LexValidationError } from '@atproto/lex-schema';
+import { formatWWWAuthenticateHeader, } from './lib/www-authenticate.js';
+export { LexError };
 /**
  * Base error class for representing errors that should be converted to XRPC
  * error responses.
  */
-class LexServerError extends lex_data_1.LexError {
-    status;
-    body;
-    name = 'LexServerError';
-    headers;
+export class LexServerError extends LexError {
     constructor(status, body, headers, options) {
         super(body.error, body.message, options);
         this.status = status;
         this.body = body;
+        this.name = 'LexServerError';
         this.headers = headers ? new Headers(headers) : undefined;
     }
     toJSON() {
@@ -34,18 +28,18 @@ class LexServerError extends lex_data_1.LexError {
             return cause;
         }
         // Convert @atproto/lex-client errors to downstream LexServerError
-        if (cause instanceof lex_client_1.XrpcError) {
+        if (cause instanceof XrpcError) {
             const { status, body, headers } = cause.toDownstreamError();
             return new LexServerError(status, body, headers, { cause });
         }
         // Convert @atproto/lex-schema validation errors to 400 Bad Request
-        if (cause instanceof lex_schema_1.LexValidationError) {
+        if (cause instanceof LexValidationError) {
             return new LexServerError(400, cause.toJSON(), undefined, {
                 cause,
             });
         }
         // Any other error is treated as a generic 500 Internal Server Error
-        if (cause instanceof lex_data_1.LexError) {
+        if (cause instanceof LexError) {
             return new LexServerError(500, cause.toJSON(), undefined, {
                 cause,
             });
@@ -53,7 +47,6 @@ class LexServerError extends lex_data_1.LexError {
         return new LexServerError(500, { error: 'InternalServerError', message: 'An internal error occurred' }, undefined, { cause });
     }
 }
-exports.LexServerError = LexServerError;
 /**
  * Error class for authentication failures in XRPC server handlers.
  *
@@ -75,9 +68,7 @@ exports.LexServerError = LexServerError;
  * )
  * ```
  */
-class LexServerAuthError extends LexServerError {
-    wwwAuthenticate;
-    name = 'LexServerAuthError';
+export class LexServerAuthError extends LexServerError {
     /**
      * Creates a new authentication error.
      *
@@ -89,12 +80,13 @@ class LexServerAuthError extends LexServerError {
     constructor(error, message, wwwAuthenticate = {}, options) {
         const headers = Object.keys(wwwAuthenticate).length
             ? new Headers({
-                'WWW-Authenticate': (0, www_authenticate_js_1.formatWWWAuthenticateHeader)(wwwAuthenticate),
+                'WWW-Authenticate': formatWWWAuthenticateHeader(wwwAuthenticate),
                 'Access-Control-Expose-Headers': 'WWW-Authenticate', // CORS
             })
             : undefined;
         super(401, { error, message }, headers, options);
         this.wwwAuthenticate = wwwAuthenticate;
+        this.name = 'LexServerAuthError';
     }
     /**
      * Creates a LexServerAuthError from an existing LexError.
@@ -123,11 +115,10 @@ class LexServerAuthError extends LexServerError {
         if (cause instanceof LexServerAuthError) {
             return cause;
         }
-        if (cause instanceof lex_data_1.LexError) {
+        if (cause instanceof LexError) {
             return new LexServerAuthError(cause.error, cause.message, wwwAuthenticate, { cause });
         }
         return new LexServerAuthError('AuthenticationRequired', 'Authentication failed', wwwAuthenticate, { cause });
     }
 }
-exports.LexServerAuthError = LexServerAuthError;
 //# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAAA,oDAA+C;AAC/C,gDAAwE;AAO/D,yFAPA,mBAAQ,OAOA;AANjB,oDAAwD;AACxD,mEAGkC;AAKlC;;;GAGG;AACH,MAAa,cAEX,SAAQ,mBAAW;IAMR;IACA;IANX,IAAI,GAAG,gBAAgB,CAAA;IAEd,OAAO,CAAU;IAE1B,YACW,MAAc,EACd,IAAqB,EAC9B,OAAqB,EACrB,OAAsB;QAEtB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAL/B,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAiB;QAK9B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3D,CAAC;IAEQ,MAAM;QACb,OAAO,IAAI,CAAC,IAAI,CAAA;IAClB,CAAC;IAEM,UAAU;QACf,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;QAChC,kFAAkF;QAClF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,KAAc;QACxB,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO,KAAK,CAAA;QACd,CAAC;QAED,kEAAkE;QAClE,IAAI,KAAK,YAAY,sBAAS,EAAE,CAAC;YAC/B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,iBAAiB,EAAE,CAAA;YAC3D,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7D,CAAC;QAED,mEAAmE;QACnE,IAAI,KAAK,YAAY,+BAAkB,EAAE,CAAC;YACxC,OAAO,IAAI,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE;gBACxD,KAAK;aACN,CAAC,CAAA;QACJ,CAAC;QAED,oEAAoE;QACpE,IAAI,KAAK,YAAY,mBAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE;gBACxD,KAAK;aACN,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,IAAI,cAAc,CACvB,GAAG,EACH,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,4BAA4B,EAAE,EACvE,SAAS,EACT,EAAE,KAAK,EAAE,CACV,CAAA;IACH,CAAC;CACF;AA3DD,wCA2DC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAa,kBAEX,SAAQ,cAAiB;IAcd;IAbX,IAAI,GAAG,oBAAoB,CAAA;IAE3B;;;;;;;OAOG;IACH,YACE,KAAQ,EACR,OAAe,EACN,kBAAmC,EAAE,EAC9C,OAAsB;QAEtB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM;YACjD,CAAC,CAAC,IAAI,OAAO,CAAC;gBACV,kBAAkB,EAAE,IAAA,iDAA2B,EAAC,eAAe,CAAC;gBAChE,+BAA+B,EAAE,kBAAkB,EAAE,OAAO;aAC7D,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QACb,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QATvC,oBAAe,GAAf,eAAe,CAAsB;IAUhD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,CAAC,IAAI,CACT,KAAc,EACd,eAAiC;QAEjC,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACxC,OAAO,KAAK,CAAA;QACd,CAAC;QAED,IAAI,KAAK,YAAY,mBAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,kBAAkB,CAC3B,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,EACb,eAAe,EACf,EAAE,KAAK,EAAE,CACV,CAAA;QACH,CAAC;QAED,OAAO,IAAI,kBAAkB,CAC3B,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,EAAE,KAAK,EAAE,CACV,CAAA;IACH,CAAC;CACF;AA3ED,gDA2EC","sourcesContent":["import { XrpcError } from '@atproto/lex-client'\nimport { LexError, LexErrorCode, LexErrorData } from '@atproto/lex-data'\nimport { LexValidationError } from '@atproto/lex-schema'\nimport {\n  WWWAuthenticate,\n  formatWWWAuthenticateHeader,\n} from './lib/www-authenticate.js'\n\nexport { LexError }\nexport type { LexErrorCode, LexErrorData, WWWAuthenticate }\n\n/**\n * Base error class for representing errors that should be converted to XRPC\n * error responses.\n */\nexport class LexServerError<\n  N extends LexErrorCode = LexErrorCode,\n> extends LexError<N> {\n  name = 'LexServerError'\n\n  readonly headers?: Headers\n\n  constructor(\n    readonly status: number,\n    readonly body: LexErrorData<N>,\n    headers?: HeadersInit,\n    options?: ErrorOptions,\n  ) {\n    super(body.error, body.message, options)\n    this.headers = headers ? new Headers(headers) : undefined\n  }\n\n  override toJSON(): LexErrorData<N> {\n    return this.body\n  }\n\n  public toResponse(): Response {\n    const { status, headers } = this\n    // @NOTE using this.toJSON() instead of this.body to allow overrides in subclasses\n    return Response.json(this.toJSON(), { status, headers })\n  }\n\n  static from(cause: unknown): LexServerError {\n    if (cause instanceof LexServerError) {\n      return cause\n    }\n\n    // Convert @atproto/lex-client errors to downstream LexServerError\n    if (cause instanceof XrpcError) {\n      const { status, body, headers } = cause.toDownstreamError()\n      return new LexServerError(status, body, headers, { cause })\n    }\n\n    // Convert @atproto/lex-schema validation errors to 400 Bad Request\n    if (cause instanceof LexValidationError) {\n      return new LexServerError(400, cause.toJSON(), undefined, {\n        cause,\n      })\n    }\n\n    // Any other error is treated as a generic 500 Internal Server Error\n    if (cause instanceof LexError) {\n      return new LexServerError(500, cause.toJSON(), undefined, {\n        cause,\n      })\n    }\n\n    return new LexServerError(\n      500,\n      { error: 'InternalServerError', message: 'An internal error occurred' },\n      undefined,\n      { cause },\n    )\n  }\n}\n\n/**\n * Error class for authentication failures in XRPC server handlers.\n *\n * Extends {@link LexError} to include WWW-Authenticate header support,\n * which is required by HTTP authentication standards (RFC 7235).\n * The error automatically generates the appropriate 401 response with\n * the WWW-Authenticate header when converted to a Response.\n *\n * @typeParam N - The Lexicon error code type\n *\n * @example Throwing an auth error\n * ```typescript\n * import { LexServerAuthError } from '@atproto/lex-server'\n *\n * throw new LexServerAuthError(\n *   'AuthenticationRequired',\n *   'Invalid or expired token',\n *   { Bearer: { error: 'InvalidToken', realm: 'api.example.com' } }\n * )\n * ```\n */\nexport class LexServerAuthError<\n  N extends LexErrorCode = LexErrorCode,\n> extends LexServerError<N> {\n  name = 'LexServerAuthError'\n\n  /**\n   * Creates a new authentication error.\n   *\n   * @param error - The Lexicon error code (e.g., 'AuthenticationRequired')\n   * @param message - Human-readable error message\n   * @param wwwAuthenticate - WWW-Authenticate header parameters\n   * @param options - Standard Error options including `cause`\n   */\n  constructor(\n    error: N,\n    message: string,\n    readonly wwwAuthenticate: WWWAuthenticate = {},\n    options?: ErrorOptions,\n  ) {\n    const headers = Object.keys(wwwAuthenticate).length\n      ? new Headers({\n          'WWW-Authenticate': formatWWWAuthenticateHeader(wwwAuthenticate),\n          'Access-Control-Expose-Headers': 'WWW-Authenticate', // CORS\n        })\n      : undefined\n    super(401, { error, message }, headers, options)\n  }\n\n  /**\n   * Creates a LexServerAuthError from an existing LexError.\n   *\n   * If the input is already a LexServerAuthError, returns it unchanged.\n   * Otherwise, wraps the error with the provided WWW-Authenticate parameters.\n   *\n   * @param cause - The original LexError to wrap\n   * @param wwwAuthenticate - WWW-Authenticate header parameters\n   * @returns A LexServerAuthError instance\n   *\n   * @example\n   * ```typescript\n   * function authenticate(token: string): Promise<User> {\n   *   try {\n   *     return await validateToken(token)\n   *   } catch (cause) {\n   *     throw LexServerAuthError.from(cause, {\n   *       Bearer: { error: 'InvalidToken' }\n   *     })\n   *   }\n   * }\n   * ```\n   */\n  static from(\n    cause: unknown,\n    wwwAuthenticate?: WWWAuthenticate,\n  ): LexServerAuthError {\n    if (cause instanceof LexServerAuthError) {\n      return cause\n    }\n\n    if (cause instanceof LexError) {\n      return new LexServerAuthError(\n        cause.error,\n        cause.message,\n        wwwAuthenticate,\n        { cause },\n      )\n    }\n\n    return new LexServerAuthError(\n      'AuthenticationRequired',\n      'Authentication failed',\n      wwwAuthenticate,\n      { cause },\n    )\n  }\n}\n"]}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAA8B,MAAM,mBAAmB,CAAA;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAEL,2BAA2B,GAC5B,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,QAAQ,EAAE,CAAA;AAGnB;;;GAGG;AACH,MAAM,OAAO,cAEX,SAAQ,QAAW;IAKnB,YACW,MAAc,EACd,IAAqB,EAC9B,OAAqB,EACrB,OAAsB;QAEtB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAL/B,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAiB;QANhC,SAAI,GAAG,gBAAgB,CAAA;QAWrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3D,CAAC;IAEQ,MAAM;QACb,OAAO,IAAI,CAAC,IAAI,CAAA;IAClB,CAAC;IAEM,UAAU;QACf,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;QAChC,kFAAkF;QAClF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,KAAc;QACxB,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO,KAAK,CAAA;QACd,CAAC;QAED,kEAAkE;QAClE,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,iBAAiB,EAAE,CAAA;YAC3D,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7D,CAAC;QAED,mEAAmE;QACnE,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACxC,OAAO,IAAI,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE;gBACxD,KAAK;aACN,CAAC,CAAA;QACJ,CAAC;QAED,oEAAoE;QACpE,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE;gBACxD,KAAK;aACN,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,IAAI,cAAc,CACvB,GAAG,EACH,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,4BAA4B,EAAE,EACvE,SAAS,EACT,EAAE,KAAK,EAAE,CACV,CAAA;IACH,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,kBAEX,SAAQ,cAAiB;IAGzB;;;;;;;OAOG;IACH,YACE,KAAQ,EACR,OAAe,EACN,kBAAmC,EAAE,EAC9C,OAAsB;QAEtB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM;YACjD,CAAC,CAAC,IAAI,OAAO,CAAC;gBACV,kBAAkB,EAAE,2BAA2B,CAAC,eAAe,CAAC;gBAChE,+BAA+B,EAAE,kBAAkB,EAAE,OAAO;aAC7D,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QACb,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QATvC,oBAAe,GAAf,eAAe,CAAsB;QAbhD,SAAI,GAAG,oBAAoB,CAAA;IAuB3B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,CAAC,IAAI,CACT,KAAc,EACd,eAAiC;QAEjC,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACxC,OAAO,KAAK,CAAA;QACd,CAAC;QAED,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,kBAAkB,CAC3B,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,EACb,eAAe,EACf,EAAE,KAAK,EAAE,CACV,CAAA;QACH,CAAC;QAED,OAAO,IAAI,kBAAkB,CAC3B,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,EAAE,KAAK,EAAE,CACV,CAAA;IACH,CAAC;CACF","sourcesContent":["import { XrpcError } from '@atproto/lex-client'\nimport { LexError, LexErrorCode, LexErrorData } from '@atproto/lex-data'\nimport { LexValidationError } from '@atproto/lex-schema'\nimport {\n  WWWAuthenticate,\n  formatWWWAuthenticateHeader,\n} from './lib/www-authenticate.js'\n\nexport { LexError }\nexport type { LexErrorCode, LexErrorData, WWWAuthenticate }\n\n/**\n * Base error class for representing errors that should be converted to XRPC\n * error responses.\n */\nexport class LexServerError<\n  N extends LexErrorCode = LexErrorCode,\n> extends LexError<N> {\n  name = 'LexServerError'\n\n  readonly headers?: Headers\n\n  constructor(\n    readonly status: number,\n    readonly body: LexErrorData<N>,\n    headers?: HeadersInit,\n    options?: ErrorOptions,\n  ) {\n    super(body.error, body.message, options)\n    this.headers = headers ? new Headers(headers) : undefined\n  }\n\n  override toJSON(): LexErrorData<N> {\n    return this.body\n  }\n\n  public toResponse(): Response {\n    const { status, headers } = this\n    // @NOTE using this.toJSON() instead of this.body to allow overrides in subclasses\n    return Response.json(this.toJSON(), { status, headers })\n  }\n\n  static from(cause: unknown): LexServerError {\n    if (cause instanceof LexServerError) {\n      return cause\n    }\n\n    // Convert @atproto/lex-client errors to downstream LexServerError\n    if (cause instanceof XrpcError) {\n      const { status, body, headers } = cause.toDownstreamError()\n      return new LexServerError(status, body, headers, { cause })\n    }\n\n    // Convert @atproto/lex-schema validation errors to 400 Bad Request\n    if (cause instanceof LexValidationError) {\n      return new LexServerError(400, cause.toJSON(), undefined, {\n        cause,\n      })\n    }\n\n    // Any other error is treated as a generic 500 Internal Server Error\n    if (cause instanceof LexError) {\n      return new LexServerError(500, cause.toJSON(), undefined, {\n        cause,\n      })\n    }\n\n    return new LexServerError(\n      500,\n      { error: 'InternalServerError', message: 'An internal error occurred' },\n      undefined,\n      { cause },\n    )\n  }\n}\n\n/**\n * Error class for authentication failures in XRPC server handlers.\n *\n * Extends {@link LexError} to include WWW-Authenticate header support,\n * which is required by HTTP authentication standards (RFC 7235).\n * The error automatically generates the appropriate 401 response with\n * the WWW-Authenticate header when converted to a Response.\n *\n * @typeParam N - The Lexicon error code type\n *\n * @example Throwing an auth error\n * ```typescript\n * import { LexServerAuthError } from '@atproto/lex-server'\n *\n * throw new LexServerAuthError(\n *   'AuthenticationRequired',\n *   'Invalid or expired token',\n *   { Bearer: { error: 'InvalidToken', realm: 'api.example.com' } }\n * )\n * ```\n */\nexport class LexServerAuthError<\n  N extends LexErrorCode = LexErrorCode,\n> extends LexServerError<N> {\n  name = 'LexServerAuthError'\n\n  /**\n   * Creates a new authentication error.\n   *\n   * @param error - The Lexicon error code (e.g., 'AuthenticationRequired')\n   * @param message - Human-readable error message\n   * @param wwwAuthenticate - WWW-Authenticate header parameters\n   * @param options - Standard Error options including `cause`\n   */\n  constructor(\n    error: N,\n    message: string,\n    readonly wwwAuthenticate: WWWAuthenticate = {},\n    options?: ErrorOptions,\n  ) {\n    const headers = Object.keys(wwwAuthenticate).length\n      ? new Headers({\n          'WWW-Authenticate': formatWWWAuthenticateHeader(wwwAuthenticate),\n          'Access-Control-Expose-Headers': 'WWW-Authenticate', // CORS\n        })\n      : undefined\n    super(401, { error, message }, headers, options)\n  }\n\n  /**\n   * Creates a LexServerAuthError from an existing LexError.\n   *\n   * If the input is already a LexServerAuthError, returns it unchanged.\n   * Otherwise, wraps the error with the provided WWW-Authenticate parameters.\n   *\n   * @param cause - The original LexError to wrap\n   * @param wwwAuthenticate - WWW-Authenticate header parameters\n   * @returns A LexServerAuthError instance\n   *\n   * @example\n   * ```typescript\n   * function authenticate(token: string): Promise<User> {\n   *   try {\n   *     return await validateToken(token)\n   *   } catch (cause) {\n   *     throw LexServerAuthError.from(cause, {\n   *       Bearer: { error: 'InvalidToken' }\n   *     })\n   *   }\n   * }\n   * ```\n   */\n  static from(\n    cause: unknown,\n    wwwAuthenticate?: WWWAuthenticate,\n  ): LexServerAuthError {\n    if (cause instanceof LexServerAuthError) {\n      return cause\n    }\n\n    if (cause instanceof LexError) {\n      return new LexServerAuthError(\n        cause.error,\n        cause.message,\n        wwwAuthenticate,\n        { cause },\n      )\n    }\n\n    return new LexServerAuthError(\n      'AuthenticationRequired',\n      'Authentication failed',\n      wwwAuthenticate,\n      { cause },\n    )\n  }\n}\n"]}

package/dist/index.js

@@ -1,7 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const tslib_1 = require("tslib");
-tslib_1.__exportStar(require("./errors.js"), exports);
-tslib_1.__exportStar(require("./lex-router.js"), exports);
-tslib_1.__exportStar(require("./service-auth.js"), exports);
+export * from './errors.js';
+export * from './lex-router.js';
+export * from './service-auth.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,sDAA2B;AAC3B,0DAA+B;AAC/B,4DAAiC","sourcesContent":["export * from './errors.js'\nexport * from './lex-router.js'\nexport * from './service-auth.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA","sourcesContent":["export * from './errors.js'\nexport * from './lex-router.js'\nexport * from './service-auth.js'\n"]}

package/dist/lex-router.d.ts

@@ -427,7 +427,7 @@ export type LexRouterOptions = {
  * ```typescript
  * import { LexRouter } from '@atproto/lex-server'
  * import { serve, upgradeWebSocket } from '@atproto/lex-server/nodejs'
- * import { getProfile, createPost, subscribeRepos } from './lexicons'
+ * import { getProfile, createPost, subscribeRepos } from './lexicons.js'
  *
  * const router = new LexRouter({ upgradeWebSocket })
  *

package/dist/lex-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lex-router.d.ts","sourceRoot":"","sources":["../src/lex-router.ts"],"names":[],"mappings":"AASA,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,IAAI,EACJ,UAAU,EACV,SAAS,EACT,KAAK,EACL,YAAY,EAIb,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAM5C,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;AAElC;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,SAAS,GAAG,YAAY,CAAA;AAExD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAA;IAChB,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ,mCAAmC;IACnC,SAAS,EAAE,KAAK,GAAG,KAAK,CAAA;CACzB,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAA;IACZ,mCAAmC;IACnC,SAAS,EAAE,MAAM,GAAG,YAAY,CAAA;CACjC,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEjD;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IAClD,sDAAsD;IACtD,UAAU,EAAE,CAAC,CAAA;IACb,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB,CAAA;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,OAAO,EAChB,UAAU,CAAC,EAAE,cAAc,KACxB,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEtB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,uBAAuB,CAAC,MAAM,SAAS,SAAS,EAAE,WAAW,IAAI;IAC3E,+DAA+D;IAC/D,WAAW,EAAE,WAAW,CAAA;IACxB,uFAAuF;IACvF,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACrC,iDAAiD;IACjD,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACjC,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAA;IAChB,oEAAoE;IACpE,MAAM,EAAE,WAAW,CAAA;IACnB,oDAAoD;IACpD,UAAU,CAAC,EAAE,cAAc,CAAA;CAC5B,CAAA;AAED,KAAK,wBAAwB,CAAC,CAAC,IAAI,CAAC,SAAS,SAAS,GAAG,IAAI,GACzD;IAAE,QAAQ,CAAC,EAAE,SAAS,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,GAC1C,CAAC,CAAA;AAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,MAAM,sBAAsB,CAAC,MAAM,SAAS,KAAK,GAAG,SAAS,IAC/D,QAAQ,GACR,CAAC;IACC,OAAO,CAAC,EAAE,WAAW,CAAA;CACtB,GAAG,CAAC,yBAAyB,CAAC,MAAM,CAAC,SAAS,kBAAkB,GAC7D;IAEE,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAA;CACpC,GACD,wBAAwB,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;AAEvE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,sBAAsB,CAChC,MAAM,SAAS,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,EACpD,WAAW,GAAG,OAAO,IACnB,CACF,GAAG,EAAE,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,KAC9C,SAAS,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAA;AAE9C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,qBAAqB,CAC/B,MAAM,SAAS,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,EACpD,WAAW,GAAG,OAAO,IACnB;IACF,uDAAuD;IACvD,OAAO,EAAE,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACpD,kFAAkF;IAClF,IAAI,EAAE,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;CACzC,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,4BAA4B,CACtC,MAAM,SAAS,YAAY,GAAG,YAAY,EAC1C,WAAW,GAAG,OAAO,IACnB,CACF,GAAG,EAAE,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,KAC9C,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAA;AAE9C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,2BAA2B,CACrC,MAAM,SAAS,YAAY,GAAG,YAAY,EAC1C,WAAW,GAAG,OAAO,IACnB;IACF,8DAA8D;IAC9D,OAAO,EAAE,4BAA4B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAC1D,kFAAkF;IAClF,IAAI,EAAE,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;CACzC,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,oBAAoB,CAAC,MAAM,SAAS,SAAS,GAAG,SAAS,IAAI;IACvE,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACjC,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAA;IAChB,oDAAoD;IACpD,UAAU,CAAC,EAAE,cAAc,CAAA;CAC5B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,aAAa,CACvB,WAAW,GAAG,OAAO,EACrB,MAAM,SAAS,SAAS,GAAG,SAAS,IAClC,CAAC,GAAG,EAAE,oBAAoB,CAAC,MAAM,CAAC,KAAK,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;AAE7E;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,SAAS,CAAA;IACjB,KAAK,EAAE,cAAc,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,CAC7B,GAAG,EAAE,mBAAmB,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAEzB,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAE/E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK;IACnD,8DAA8D;IAC9D,MAAM,EAAE,SAAS,CAAA;IACjB,6DAA6D;IAC7D,QAAQ,EAAE,QAAQ,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,OAAO,KACb,SAAS,CAAC;IAAE,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,CAAC,CAAA;AAEtD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC;;;;OAIG;IACH,cAAc,CAAC,EAAE,gBAAgB,CAAA;IACjC;;OAEG;IACH,aAAa,CAAC,EAAE,eAAe,CAAA;IAC/B;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAA;IACvB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,qBAAa,SAAS;IASR,QAAQ,CAAC,OAAO,EAAE,gBAAgB;IAR9C,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAY;IAE5D;;;;OAIG;gBACkB,OAAO,GAAE,gBAAqB;IAEnD;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,SAAS,YAAY,EACxB,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EACX,OAAO,EAAE,4BAA4B,CAAC,CAAC,EAAE,IAAI,CAAC,GAC7C,IAAI;IACP;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,SAAS,YAAY,EAAE,WAAW,EACrC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EACX,MAAM,EAAE,2BAA2B,CAAC,CAAC,EAAE,WAAW,CAAC,GAClD,IAAI;IACP;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,SAAS,KAAK,GAAG,SAAS,EAC7B,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EACX,OAAO,EAAE,sBAAsB,CAAC,CAAC,EAAE,IAAI,CAAC,GACvC,IAAI;IACP;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,SAAS,KAAK,GAAG,SAAS,EAAE,WAAW,EAC1C,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EACX,MAAM,EAAE,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,GAC5C,IAAI;IACP;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,GAAG,CAAC,CAAC,SAAS,SAAS,EAAE,WAAW,GAAG,OAAO,EAC5C,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EACX,MAAM,EAAE,CAAC,SAAS,YAAY,GAEtB,4BAA4B,CAAC,CAAC,EAAE,WAAW,CAAC,GAC5C,2BAA2B,CAAC,CAAC,EAAE,WAAW,CAAC,GAC/C,CAAC,SAAS,KAAK,GAAG,SAAS,GAErB,sBAAsB,CAAC,CAAC,EAAE,WAAW,CAAC,GACtC,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,GACzC,KAAK,GACV,IAAI;IAuCP,OAAO,CAAC,kBAAkB;IAyE1B,OAAO,CAAC,wBAAwB;YA+JlB,YAAY;IAkB1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,KAAK,EAAE,YAAY,CAiElB;CACF;AA6GD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,SAAS,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA"}
+{"version":3,"file":"lex-router.d.ts","sourceRoot":"","sources":["../src/lex-router.ts"],"names":[],"mappings":"AASA,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,IAAI,EACJ,UAAU,EACV,SAAS,EACT,KAAK,EACL,YAAY,EAIb,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAM5C,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;AAElC;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,SAAS,GAAG,YAAY,CAAA;AAExD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAA;IAChB,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ,mCAAmC;IACnC,SAAS,EAAE,KAAK,GAAG,KAAK,CAAA;CACzB,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAA;IACZ,mCAAmC;IACnC,SAAS,EAAE,MAAM,GAAG,YAAY,CAAA;CACjC,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEjD;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IAClD,sDAAsD;IACtD,UAAU,EAAE,CAAC,CAAA;IACb,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB,CAAA;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,OAAO,EAChB,UAAU,CAAC,EAAE,cAAc,KACxB,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEtB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,uBAAuB,CAAC,MAAM,SAAS,SAAS,EAAE,WAAW,IAAI;IAC3E,+DAA+D;IAC/D,WAAW,EAAE,WAAW,CAAA;IACxB,uFAAuF;IACvF,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACrC,iDAAiD;IACjD,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACjC,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAA;IAChB,oEAAoE;IACpE,MAAM,EAAE,WAAW,CAAA;IACnB,oDAAoD;IACpD,UAAU,CAAC,EAAE,cAAc,CAAA;CAC5B,CAAA;AAED,KAAK,wBAAwB,CAAC,CAAC,IAAI,CAAC,SAAS,SAAS,GAAG,IAAI,GACzD;IAAE,QAAQ,CAAC,EAAE,SAAS,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,GAC1C,CAAC,CAAA;AAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,MAAM,sBAAsB,CAAC,MAAM,SAAS,KAAK,GAAG,SAAS,IAC/D,QAAQ,GACR,CAAC;IACC,OAAO,CAAC,EAAE,WAAW,CAAA;CACtB,GAAG,CAAC,yBAAyB,CAAC,MAAM,CAAC,SAAS,kBAAkB,GAC7D;IAEE,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAA;CACpC,GACD,wBAAwB,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;AAEvE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,sBAAsB,CAChC,MAAM,SAAS,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,EACpD,WAAW,GAAG,OAAO,IACnB,CACF,GAAG,EAAE,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,KAC9C,SAAS,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAA;AAE9C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,qBAAqB,CAC/B,MAAM,SAAS,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,EACpD,WAAW,GAAG,OAAO,IACnB;IACF,uDAAuD;IACvD,OAAO,EAAE,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACpD,kFAAkF;IAClF,IAAI,EAAE,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;CACzC,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,4BAA4B,CACtC,MAAM,SAAS,YAAY,GAAG,YAAY,EAC1C,WAAW,GAAG,OAAO,IACnB,CACF,GAAG,EAAE,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,KAC9C,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAA;AAE9C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,2BAA2B,CACrC,MAAM,SAAS,YAAY,GAAG,YAAY,EAC1C,WAAW,GAAG,OAAO,IACnB;IACF,8DAA8D;IAC9D,OAAO,EAAE,4BAA4B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAC1D,kFAAkF;IAClF,IAAI,EAAE,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;CACzC,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,oBAAoB,CAAC,MAAM,SAAS,SAAS,GAAG,SAAS,IAAI;IACvE,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACjC,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAA;IAChB,oDAAoD;IACpD,UAAU,CAAC,EAAE,cAAc,CAAA;CAC5B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,aAAa,CACvB,WAAW,GAAG,OAAO,EACrB,MAAM,SAAS,SAAS,GAAG,SAAS,IAClC,CAAC,GAAG,EAAE,oBAAoB,CAAC,MAAM,CAAC,KAAK,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;AAE7E;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,SAAS,CAAA;IACjB,KAAK,EAAE,cAAc,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,CAC7B,GAAG,EAAE,mBAAmB,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAEzB,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAE/E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK;IACnD,8DAA8D;IAC9D,MAAM,EAAE,SAAS,CAAA;IACjB,6DAA6D;IAC7D,QAAQ,EAAE,QAAQ,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,OAAO,KACb,SAAS,CAAC;IAAE,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,CAAC,CAAA;AAEtD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC;;;;OAIG;IACH,cAAc,CAAC,EAAE,gBAAgB,CAAA;IACjC;;OAEG;IACH,aAAa,CAAC,EAAE,eAAe,CAAA;IAC/B;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAA;IACvB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,qBAAa,SAAS;IASR,QAAQ,CAAC,OAAO,EAAE,gBAAgB;IAR9C,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAY;IAE5D;;;;OAIG;gBACkB,OAAO,GAAE,gBAAqB;IAEnD;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,SAAS,YAAY,EACxB,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EACX,OAAO,EAAE,4BAA4B,CAAC,CAAC,EAAE,IAAI,CAAC,GAC7C,IAAI;IACP;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,SAAS,YAAY,EAAE,WAAW,EACrC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EACX,MAAM,EAAE,2BAA2B,CAAC,CAAC,EAAE,WAAW,CAAC,GAClD,IAAI;IACP;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,SAAS,KAAK,GAAG,SAAS,EAC7B,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EACX,OAAO,EAAE,sBAAsB,CAAC,CAAC,EAAE,IAAI,CAAC,GACvC,IAAI;IACP;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,SAAS,KAAK,GAAG,SAAS,EAAE,WAAW,EAC1C,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EACX,MAAM,EAAE,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,GAC5C,IAAI;IACP;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,GAAG,CAAC,CAAC,SAAS,SAAS,EAAE,WAAW,GAAG,OAAO,EAC5C,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EACX,MAAM,EAAE,CAAC,SAAS,YAAY,GAEtB,4BAA4B,CAAC,CAAC,EAAE,WAAW,CAAC,GAC5C,2BAA2B,CAAC,CAAC,EAAE,WAAW,CAAC,GAC/C,CAAC,SAAS,KAAK,GAAG,SAAS,GAErB,sBAAsB,CAAC,CAAC,EAAE,WAAW,CAAC,GACtC,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,GACzC,KAAK,GACV,IAAI;IAuCP,OAAO,CAAC,kBAAkB;IAyE1B,OAAO,CAAC,wBAAwB;YA+JlB,YAAY;IAkB1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,KAAK,EAAE,YAAY,CAiElB;CACF;AAgHD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,SAAS,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA"}

package/dist/lex-router.js

@@ -1,12 +1,9 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LexRouter = void 0;
-const lex_cbor_1 = require("@atproto/lex-cbor");
-const lex_data_1 = require("@atproto/lex-data");
-const lex_json_1 = require("@atproto/lex-json");
-const lex_schema_1 = require("@atproto/lex-schema");
-const errors_js_1 = require("./errors.js");
-const drain_websocket_js_1 = require("./lib/drain-websocket.js");
+import { encode } from '@atproto/lex-cbor';
+import { LexError, isPlainObject, ui8Concat, } from '@atproto/lex-data';
+import { lexParse, lexToJson } from '@atproto/lex-json';
+import { getMain, isDidString, isNsidString, } from '@atproto/lex-schema';
+import { LexServerError } from './errors.js';
+import { drainWebsocket } from './lib/drain-websocket.js';
 const XRPC_PATH_PREFIX = '/xrpc/';
 const XRPC_HEALTH_CHECK_PATH = '/xrpc/_health';
 /**
@@ -20,7 +17,7 @@ const XRPC_HEALTH_CHECK_PATH = '/xrpc/_health';
  * ```typescript
  * import { LexRouter } from '@atproto/lex-server'
  * import { serve, upgradeWebSocket } from '@atproto/lex-server/nodejs'
- * import { getProfile, createPost, subscribeRepos } from './lexicons'
+ * import { getProfile, createPost, subscribeRepos } from './lexicons.js'
  *
  * const router = new LexRouter({ upgradeWebSocket })
  *
@@ -77,10 +74,7 @@ const XRPC_HEALTH_CHECK_PATH = '/xrpc/_health';
  * })
  * ```
  */
-class LexRouter {
-    options;
-    /** Map of NSID strings to their fetch handlers. */
-    handlers = new Map();
+export class LexRouter {
     /**
      * Creates a new XRPC router.
      *
@@ -88,9 +82,88 @@ class LexRouter {
      */
     constructor(options = {}) {
         this.options = options;
+        /** Map of NSID strings to their fetch handlers. */
+        this.handlers = new Map();
+        /**
+         * The main fetch handler for processing XRPC requests.
+         *
+         * Routes incoming requests to the appropriate method handler based on the
+         * NSID in the URL path. Returns appropriate error responses for invalid
+         * paths or unimplemented methods.
+         *
+         * This handler can be used directly with HTTP servers that support the
+         * fetch API pattern, or converted to a Node.js request listener using
+         * `toRequestListener()`.
+         *
+         * @param request - The incoming HTTP request
+         * @param connection - Optional connection metadata
+         * @returns A promise resolving to the HTTP response
+         *
+         * @example
+         * ```typescript
+         * // Use with Deno
+         * Deno.serve(router.fetch)
+         *
+         * // Use with Bun
+         * Bun.serve({ fetch: router.fetch })
+         *
+         * // Use with Node.js
+         * import { toRequestListener } from '@atproto/lex-server/nodejs'
+         * const listener = toRequestListener(router.fetch)
+         * http.createServer(listener).listen(3000)
+         * ```
+         */
+        this.fetch = async (request, connection) => {
+            const { pathname } = new URL(request.url);
+            const atprotoProxy = request.headers.get('atproto-proxy');
+            if (!pathname.startsWith(XRPC_PATH_PREFIX)) {
+                // Handle non XRPC paths
+                const { fallback } = this.options;
+                if (fallback)
+                    return fallback(request, connection);
+                return new Response('Not Found', { status: 404 });
+            }
+            if (pathname === XRPC_HEALTH_CHECK_PATH) {
+                if (request.method !== 'GET') {
+                    return invalidRequestResponse('Method not allowed', 405);
+                }
+                if (atprotoProxy != null) {
+                    return invalidRequestResponse('atproto-proxy header is not allowed on health check endpoint');
+                }
+                const { healthCheck } = this.options;
+                const data = healthCheck ? await healthCheck(request) : { status: 'ok' };
+                return Response.json(data);
+            }
+            const subPath = pathname.slice(XRPC_PATH_PREFIX.length);
+            if (!isNsidString(subPath)) {
+                return invalidRequestResponse('Invalid NSID in URL path');
+            }
+            const nsid = normalizeNsid(subPath);
+            if (atprotoProxy == null) {
+                const handler = this.handlers.get(nsid);
+                if (handler)
+                    return handler(request, connection);
+            }
+            else {
+                // Handle service proxying logic.
+                const proxyInfo = parseAtprotoProxyHeader(atprotoProxy);
+                if (!proxyInfo) {
+                    return invalidRequestResponse(`Invalid atproto-proxy header value: ${atprotoProxy}`);
+                }
+                // @TODO actually implement service proxying logic here. The reason it was
+                // not done already is because we want to perform all the heavy lifting
+                // here, while still allowing the possibility to override the endpoint
+                // resolution, etc.
+                // @NOTE see ./service-auth.ts for potential common code (did resolver, etc.)
+            }
+            return Response.json({
+                error: 'MethodNotImplemented',
+                message: `XRPC method "${nsid}" not implemented on this server`,
+            }, { status: 501 });
+        };
     }
     add(ns, config) {
-        const method = (0, lex_schema_1.getMain)(ns);
+        const method = getMain(ns);
         const nsid = normalizeNsid(method.nsid);
         if (this.handlers.has(nsid)) {
             throw new TypeError(`Method ${method.nsid} already registered`);
@@ -140,7 +213,7 @@ class LexRouter {
                     return new Response(null, { status: 200, headers: output.headers });
                 }
                 if (method.output?.encoding === 'application/json') {
-                    return Response.json((0, lex_json_1.lexToJson)(output.body), {
+                    return Response.json(lexToJson(output.body), {
                         status: 200,
                         headers: output.headers,
                     });
@@ -227,7 +300,7 @@ class LexRouter {
                             socket.send(data);
                             // Apply backpressure by waiting for the buffered data to drain
                             // before generating the next message
-                            await (0, drain_websocket_js_1.drainWebsocket)(socket, signal, this.options);
+                            await drainWebsocket(socket, signal, this.options);
                         }
                         if (socket.readyState === 1) {
                             socket.close(1000);
@@ -236,7 +309,7 @@ class LexRouter {
                     catch (error) {
                         // If the socket is still open, send an error frame before closing
                         if (socket.readyState === 1) {
-                            const isLexError = error instanceof lex_data_1.LexError;
+                            const isLexError = error instanceof LexError;
                             // https://www.rfc-editor.org/rfc/rfc6455#section-7.4.1
                             const code = isLexError && method.errors?.includes(error.error)
                                 ? 1008 // Policy Violation for known LexErrors
@@ -276,91 +349,13 @@ class LexRouter {
         if (isAbortReason(request.signal, cause)) {
             return Response.json({ error: 'RequestAborted' }, { status: 499 });
         }
-        const error = errors_js_1.LexServerError.from(cause);
+        const error = LexServerError.from(cause);
         const { onHandlerError } = this.options;
         if (onHandlerError)
             await onHandlerError({ error, request, method });
         return error.toResponse();
     }
-    /**
-     * The main fetch handler for processing XRPC requests.
-     *
-     * Routes incoming requests to the appropriate method handler based on the
-     * NSID in the URL path. Returns appropriate error responses for invalid
-     * paths or unimplemented methods.
-     *
-     * This handler can be used directly with HTTP servers that support the
-     * fetch API pattern, or converted to a Node.js request listener using
-     * `toRequestListener()`.
-     *
-     * @param request - The incoming HTTP request
-     * @param connection - Optional connection metadata
-     * @returns A promise resolving to the HTTP response
-     *
-     * @example
-     * ```typescript
-     * // Use with Deno
-     * Deno.serve(router.fetch)
-     *
-     * // Use with Bun
-     * Bun.serve({ fetch: router.fetch })
-     *
-     * // Use with Node.js
-     * import { toRequestListener } from '@atproto/lex-server/nodejs'
-     * const listener = toRequestListener(router.fetch)
-     * http.createServer(listener).listen(3000)
-     * ```
-     */
-    fetch = async (request, connection) => {
-        const { pathname } = new URL(request.url);
-        const atprotoProxy = request.headers.get('atproto-proxy');
-        if (!pathname.startsWith(XRPC_PATH_PREFIX)) {
-            // Handle non XRPC paths
-            const { fallback } = this.options;
-            if (fallback)
-                return fallback(request, connection);
-            return new Response('Not Found', { status: 404 });
-        }
-        if (pathname === XRPC_HEALTH_CHECK_PATH) {
-            if (request.method !== 'GET') {
-                return invalidRequestResponse('Method not allowed', 405);
-            }
-            if (atprotoProxy != null) {
-                return invalidRequestResponse('atproto-proxy header is not allowed on health check endpoint');
-            }
-            const { healthCheck } = this.options;
-            const data = healthCheck ? await healthCheck(request) : { status: 'ok' };
-            return Response.json(data);
-        }
-        const subPath = pathname.slice(XRPC_PATH_PREFIX.length);
-        if (!(0, lex_schema_1.isNsidString)(subPath)) {
-            return invalidRequestResponse('Invalid NSID in URL path');
-        }
-        const nsid = normalizeNsid(subPath);
-        if (atprotoProxy == null) {
-            const handler = this.handlers.get(nsid);
-            if (handler)
-                return handler(request, connection);
-        }
-        else {
-            // Handle service proxying logic.
-            const proxyInfo = parseAtprotoProxyHeader(atprotoProxy);
-            if (!proxyInfo) {
-                return invalidRequestResponse(`Invalid atproto-proxy header value: ${atprotoProxy}`);
-            }
-            // @TODO actually implement service proxying logic here. The reason it was
-            // not done already is because we want to perform all the heavy lifting
-            // here, while still allowing the possibility to override the endpoint
-            // resolution, etc.
-            // @NOTE see ./service-auth.ts for potential common code (did resolver, etc.)
-        }
-        return Response.json({
-            error: 'MethodNotImplemented',
-            message: `XRPC method "${nsid}" not implemented on this server`,
-        }, { status: 501 });
-    };
 }
-exports.LexRouter = LexRouter;
 async function getProcedureInput(request) {
     const encodingRaw = request.headers
         .get('content-type')
@@ -374,14 +369,14 @@ async function getProcedureInput(request) {
             ? 'application/octet-stream'
             : undefined);
     if (!this.input.matchesEncoding(encoding)) {
-        throw new errors_js_1.LexServerError(400, {
+        throw new LexServerError(400, {
             error: 'InvalidRequest',
             message: `Invalid content-type: ${encoding}`,
         });
     }
     if (this.input.encoding === 'application/json') {
         // @TODO limit size?
-        const data = (0, lex_json_1.lexParse)(await request.text());
+        const data = lexParse(await request.text());
         const body = this.input.schema ? this.input.schema.parse(data) : data;
         return { encoding, body };
     }
@@ -397,7 +392,7 @@ async function getQueryInput(request) {
     if (request.body ||
         request.headers.has('content-type') ||
         request.headers.has('content-length')) {
-        throw new errors_js_1.LexServerError(400, {
+        throw new LexServerError(400, {
             error: 'InvalidRequest',
             message: 'GET requests must not have a body',
         });
@@ -415,17 +410,17 @@ function onMessage(_event) {
     this.close(1003, error);
 }
 // Pre-encoded frame header for error frames
-const ERROR_FRAME_HEADER = /*#__PURE__*/ (0, lex_cbor_1.encode)({ op: -1 });
+const ERROR_FRAME_HEADER = /*#__PURE__*/ encode({ op: -1 });
 function encodeErrorFrame(errorData) {
-    return (0, lex_data_1.ui8Concat)([ERROR_FRAME_HEADER, (0, lex_cbor_1.encode)(errorData)]);
+    return ui8Concat([ERROR_FRAME_HEADER, encode(errorData)]);
 }
 // Pre-encoded frame header for message frames with unknown type
-const UNKNOWN_MESSAGE_FRAME_HEADER = /*#__PURE__*/ (0, lex_cbor_1.encode)({ op: 1 });
+const UNKNOWN_MESSAGE_FRAME_HEADER = /*#__PURE__*/ encode({ op: 1 });
 function encodeMessageFrame(method, value) {
-    if ((0, lex_data_1.isPlainObject)(value) && typeof value.$type === 'string') {
+    if (isPlainObject(value) && typeof value.$type === 'string') {
         const { $type, ...rest } = value;
-        return (0, lex_data_1.ui8Concat)([
-            (0, lex_cbor_1.encode)({
+        return ui8Concat([
+            encode({
                 op: 1,
                 t: 
                 // If $type starts with `nsid#`, strip the NSID prefix
@@ -435,10 +430,10 @@ function encodeMessageFrame(method, value) {
                     ? $type.slice(method.nsid.length)
                     : $type,
             }),
-            (0, lex_cbor_1.encode)(rest),
+            encode(rest),
         ]);
     }
-    return (0, lex_data_1.ui8Concat)([UNKNOWN_MESSAGE_FRAME_HEADER, (0, lex_cbor_1.encode)(value)]);
+    return ui8Concat([UNKNOWN_MESSAGE_FRAME_HEADER, encode(value)]);
 }
 function isAbortReason(signal, error) {
     return (signal.aborted &&
@@ -464,7 +459,7 @@ function parseAtprotoProxyHeader(value) {
     if (value.includes(' ', fragmentIndex))
         return null;
     const did = value.slice(0, hashIndex);
-    if (!(0, lex_schema_1.isDidString)(did))
+    if (!isDidString(did))
         return null;
     const serviceId = value.slice(fragmentIndex);
     return { did, serviceId };