@atproto/oauth-provider 0.10.1 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # @atproto/oauth-provider
 
+## 0.11.0
+
+### Minor Changes
+
+- [#4108](https://github.com/bluesky-social/atproto/pull/4108) [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Add support for `include:<nsid>` scopes
+
+### Patch Changes
+
+- Updated dependencies [[`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d), [`f9dc9aa4c`](https://github.com/bluesky-social/atproto/commit/f9dc9aa4c9eaf2f82d140fbf011a9015e7f1a00d)]:
+  - @atproto/lexicon@0.5.0
+  - @atproto/syntax@0.4.1
+  - @atproto/oauth-scopes@0.1.0
+  - @atproto/lexicon-resolver@0.2.0
+  - @atproto/did@0.2.0
+  - @atproto-labs/simple-store@0.3.0
+  - @atproto-labs/fetch-node@0.1.10
+  - @atproto/oauth-provider-frontend@0.1.12
+  - @atproto/oauth-provider-ui@0.2.1
+  - @atproto-labs/simple-store-memory@0.1.4
+
+## 0.10.2
+
+### Patch Changes
+
+- Updated dependencies [[`8a88e2c15`](https://github.com/bluesky-social/atproto/commit/8a88e2c15451f5e8239400eeb277ad31d178b8e6), [`8a88e2c15`](https://github.com/bluesky-social/atproto/commit/8a88e2c15451f5e8239400eeb277ad31d178b8e6)]:
+  - @atproto/jwk@0.5.0
+  - @atproto/jwk-jose@0.1.10
+  - @atproto/oauth-provider-api@0.2.1
+  - @atproto/oauth-types@0.4.1
+  - @atproto/oauth-provider-frontend@0.1.12
+  - @atproto/oauth-provider-ui@0.2.1
+
 ## 0.10.1
 
 ### Patch Changes

package/dist/constants.d.ts

@@ -44,5 +44,7 @@ export declare const DPOP_NONCE_MAX_AGE: number;
 export declare const SESSION_FIXATION_MAX_AGE: number;
 /** 1 day */
 export declare const CODE_CHALLENGE_REPLAY_TIMEFRAME: number;
+/** 5 minutes */
+export declare const LEXICON_REFRESH_FREQUENCY: number;
 export declare const NODE_ENV: string;
 //# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gBAAgB,SAAS,CAAA;AACtC,eAAO,MAAM,sBAAsB,KAAK,CAAA;AAExC,eAAO,MAAM,iBAAiB,SAAS,CAAA;AACvC,eAAO,MAAM,uBAAuB,KAAK,CAAA;AAEzC,eAAO,MAAM,oBAAoB,SAAS,CAAA;AAC1C,eAAO,MAAM,0BAA0B,KAAK,CAAA;AAE5C,eAAO,MAAM,eAAe,SAAS,CAAA;AACrC,eAAO,MAAM,qBAAqB,KAAK,CAAA;AAEvC,eAAO,MAAM,iBAAiB,SAAS,CAAA;AACvC,eAAO,MAAM,uBAAuB,KAAK,CAAA;AAEzC,eAAO,MAAM,WAAW,SAAS,CAAA;AACjC,eAAO,MAAM,iBAAiB,KAAK,CAAA;AAUnC,aAAa;AACb,eAAO,MAAM,sBAAsB,QAAU,CAAA;AAE7C,iBAAiB;AACjB,eAAO,MAAM,yBAAyB,QAAc,CAAA;AAEpD,iBAAiB;AACjB,eAAO,MAAM,aAAa,QAAc,CAAA;AAExC,gBAAgB;AAChB,eAAO,MAAM,gCAAgC,QAAa,CAAA;AAE1D,aAAa;AACb,eAAO,MAAM,8BAA8B,QAAW,CAAA;AAEtD,kDAAkD;AAClD,eAAO,MAAM,8BAA8B,QAAiC,CAAA;AAE5E,cAAc;AACd,eAAO,MAAM,oCAAoC,QAAW,CAAA;AAE5D,eAAe;AACf,eAAO,MAAM,oCAAoC,QAAY,CAAA;AAE7D,gBAAgB;AAChB,eAAO,MAAM,cAAc,QAAa,CAAA;AAExC;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,QAAc,CAAA;AAEtC,eAAe;AACf,eAAO,MAAM,wBAAwB,QAAa,CAAA;AAElD,gBAAgB;AAChB,eAAO,MAAM,kBAAkB,QAAa,CAAA;AAE5C,gBAAgB;AAChB,eAAO,MAAM,wBAAwB,QAAa,CAAA;AAElD,YAAY;AACZ,eAAO,MAAM,+BAA+B,QAAU,CAAA;AAEtD,eAAO,MAAM,QAAQ,QAAuC,CAAA"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gBAAgB,SAAS,CAAA;AACtC,eAAO,MAAM,sBAAsB,KAAK,CAAA;AAExC,eAAO,MAAM,iBAAiB,SAAS,CAAA;AACvC,eAAO,MAAM,uBAAuB,KAAK,CAAA;AAEzC,eAAO,MAAM,oBAAoB,SAAS,CAAA;AAC1C,eAAO,MAAM,0BAA0B,KAAK,CAAA;AAE5C,eAAO,MAAM,eAAe,SAAS,CAAA;AACrC,eAAO,MAAM,qBAAqB,KAAK,CAAA;AAEvC,eAAO,MAAM,iBAAiB,SAAS,CAAA;AACvC,eAAO,MAAM,uBAAuB,KAAK,CAAA;AAEzC,eAAO,MAAM,WAAW,SAAS,CAAA;AACjC,eAAO,MAAM,iBAAiB,KAAK,CAAA;AAUnC,aAAa;AACb,eAAO,MAAM,sBAAsB,QAAU,CAAA;AAE7C,iBAAiB;AACjB,eAAO,MAAM,yBAAyB,QAAc,CAAA;AAEpD,iBAAiB;AACjB,eAAO,MAAM,aAAa,QAAc,CAAA;AAExC,gBAAgB;AAChB,eAAO,MAAM,gCAAgC,QAAa,CAAA;AAE1D,aAAa;AACb,eAAO,MAAM,8BAA8B,QAAW,CAAA;AAEtD,kDAAkD;AAClD,eAAO,MAAM,8BAA8B,QAAiC,CAAA;AAE5E,cAAc;AACd,eAAO,MAAM,oCAAoC,QAAW,CAAA;AAE5D,eAAe;AACf,eAAO,MAAM,oCAAoC,QAAY,CAAA;AAE7D,gBAAgB;AAChB,eAAO,MAAM,cAAc,QAAa,CAAA;AAExC;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,QAAc,CAAA;AAEtC,eAAe;AACf,eAAO,MAAM,wBAAwB,QAAa,CAAA;AAElD,gBAAgB;AAChB,eAAO,MAAM,kBAAkB,QAAa,CAAA;AAE5C,gBAAgB;AAChB,eAAO,MAAM,wBAAwB,QAAa,CAAA;AAElD,YAAY;AACZ,eAAO,MAAM,+BAA+B,QAAU,CAAA;AAEtD,gBAAgB;AAChB,eAAO,MAAM,yBAAyB,QAAa,CAAA;AAEnD,eAAO,MAAM,QAAQ,QAAuC,CAAA"}

package/dist/constants.js

@@ -1,7 +1,7 @@
 "use strict";
 // The purpose of the prefix is to provide type safety
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NODE_ENV = exports.CODE_CHALLENGE_REPLAY_TIMEFRAME = exports.SESSION_FIXATION_MAX_AGE = exports.DPOP_NONCE_MAX_AGE = exports.CLIENT_ASSERTION_MAX_AGE = exports.JAR_MAX_AGE = exports.PAR_EXPIRES_IN = exports.CONFIDENTIAL_CLIENT_REFRESH_LIFETIME = exports.CONFIDENTIAL_CLIENT_SESSION_LIFETIME = exports.PUBLIC_CLIENT_REFRESH_LIFETIME = exports.PUBLIC_CLIENT_SESSION_LIFETIME = exports.AUTHORIZATION_INACTIVITY_TIMEOUT = exports.TOKEN_MAX_AGE = exports.EPHEMERAL_SESSION_MAX_AGE = exports.AUTHENTICATION_MAX_AGE = exports.CODE_BYTES_LENGTH = exports.CODE_PREFIX = exports.REQUEST_ID_BYTES_LENGTH = exports.REQUEST_ID_PREFIX = exports.TOKEN_ID_BYTES_LENGTH = exports.TOKEN_ID_PREFIX = exports.REFRESH_TOKEN_BYTES_LENGTH = exports.REFRESH_TOKEN_PREFIX = exports.SESSION_ID_BYTES_LENGTH = exports.SESSION_ID_PREFIX = exports.DEVICE_ID_BYTES_LENGTH = exports.DEVICE_ID_PREFIX = void 0;
+exports.NODE_ENV = exports.LEXICON_REFRESH_FREQUENCY = exports.CODE_CHALLENGE_REPLAY_TIMEFRAME = exports.SESSION_FIXATION_MAX_AGE = exports.DPOP_NONCE_MAX_AGE = exports.CLIENT_ASSERTION_MAX_AGE = exports.JAR_MAX_AGE = exports.PAR_EXPIRES_IN = exports.CONFIDENTIAL_CLIENT_REFRESH_LIFETIME = exports.CONFIDENTIAL_CLIENT_SESSION_LIFETIME = exports.PUBLIC_CLIENT_REFRESH_LIFETIME = exports.PUBLIC_CLIENT_SESSION_LIFETIME = exports.AUTHORIZATION_INACTIVITY_TIMEOUT = exports.TOKEN_MAX_AGE = exports.EPHEMERAL_SESSION_MAX_AGE = exports.AUTHENTICATION_MAX_AGE = exports.CODE_BYTES_LENGTH = exports.CODE_PREFIX = exports.REQUEST_ID_BYTES_LENGTH = exports.REQUEST_ID_PREFIX = exports.TOKEN_ID_BYTES_LENGTH = exports.TOKEN_ID_PREFIX = exports.REFRESH_TOKEN_BYTES_LENGTH = exports.REFRESH_TOKEN_PREFIX = exports.SESSION_ID_BYTES_LENGTH = exports.SESSION_ID_PREFIX = exports.DEVICE_ID_BYTES_LENGTH = exports.DEVICE_ID_PREFIX = void 0;
 exports.DEVICE_ID_PREFIX = 'dev-';
 exports.DEVICE_ID_BYTES_LENGTH = 16; // 128 bits
 exports.SESSION_ID_PREFIX = 'ses-';
@@ -55,5 +55,7 @@ exports.DPOP_NONCE_MAX_AGE = 3 * MINUTE;
 exports.SESSION_FIXATION_MAX_AGE = 5 * SECOND;
 /** 1 day */
 exports.CODE_CHALLENGE_REPLAY_TIMEFRAME = 1 * DAY;
+/** 5 minutes */
+exports.LEXICON_REFRESH_FREQUENCY = 5 * MINUTE;
 exports.NODE_ENV = process.env.NODE_ENV || 'production';
 //# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";AAAA,sDAAsD;;;AAEzC,QAAA,gBAAgB,GAAG,MAAM,CAAA;AACzB,QAAA,sBAAsB,GAAG,EAAE,CAAA,CAAC,WAAW;AAEvC,QAAA,iBAAiB,GAAG,MAAM,CAAA;AAC1B,QAAA,uBAAuB,GAAG,EAAE,CAAA,CAAC,8CAA8C;AAE3E,QAAA,oBAAoB,GAAG,MAAM,CAAA;AAC7B,QAAA,0BAA0B,GAAG,EAAE,CAAA,CAAC,WAAW;AAE3C,QAAA,eAAe,GAAG,MAAM,CAAA;AACxB,QAAA,qBAAqB,GAAG,EAAE,CAAA,CAAC,sDAAsD;AAEjF,QAAA,iBAAiB,GAAG,MAAM,CAAA;AAC1B,QAAA,uBAAuB,GAAG,EAAE,CAAA,CAAC,WAAW;AAExC,QAAA,WAAW,GAAG,MAAM,CAAA;AACpB,QAAA,iBAAiB,GAAG,EAAE,CAAA;AAEnC,MAAM,MAAM,GAAG,GAAG,CAAA;AAClB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAA;AAC1B,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,CAAA;AACxB,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAA;AACrB,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAA;AACpB,MAAM,IAAI,GAAG,MAAM,GAAG,GAAG,CAAA;AACzB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAE,CAAA;AAEvB,aAAa;AACA,QAAA,sBAAsB,GAAG,CAAC,GAAG,GAAG,CAAA;AAE7C,iBAAiB;AACJ,QAAA,yBAAyB,GAAG,EAAE,GAAG,MAAM,CAAA;AAEpD,iBAAiB;AACJ,QAAA,aAAa,GAAG,EAAE,GAAG,MAAM,CAAA;AAExC,gBAAgB;AACH,QAAA,gCAAgC,GAAG,CAAC,GAAG,MAAM,CAAA;AAE1D,aAAa;AACA,QAAA,8BAA8B,GAAG,CAAC,GAAG,IAAI,CAAA;AAEtD,kDAAkD;AACrC,QAAA,8BAA8B,GAAG,sCAA8B,CAAA;AAE5E,cAAc;AACD,QAAA,oCAAoC,GAAG,CAAC,GAAG,IAAI,CAAA;AAE5D,eAAe;AACF,QAAA,oCAAoC,GAAG,CAAC,GAAG,KAAK,CAAA;AAE7D,gBAAgB;AACH,QAAA,cAAc,GAAG,CAAC,GAAG,MAAM,CAAA;AAExC;;;;;;GAMG;AACU,QAAA,WAAW,GAAG,EAAE,GAAG,MAAM,CAAA;AAEtC,eAAe;AACF,QAAA,wBAAwB,GAAG,CAAC,GAAG,MAAM,CAAA;AAElD,gBAAgB;AACH,QAAA,kBAAkB,GAAG,CAAC,GAAG,MAAM,CAAA;AAE5C,gBAAgB;AACH,QAAA,wBAAwB,GAAG,CAAC,GAAG,MAAM,CAAA;AAElD,YAAY;AACC,QAAA,+BAA+B,GAAG,CAAC,GAAG,GAAG,CAAA;AAEzC,QAAA,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,YAAY,CAAA"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";AAAA,sDAAsD;;;AAEzC,QAAA,gBAAgB,GAAG,MAAM,CAAA;AACzB,QAAA,sBAAsB,GAAG,EAAE,CAAA,CAAC,WAAW;AAEvC,QAAA,iBAAiB,GAAG,MAAM,CAAA;AAC1B,QAAA,uBAAuB,GAAG,EAAE,CAAA,CAAC,8CAA8C;AAE3E,QAAA,oBAAoB,GAAG,MAAM,CAAA;AAC7B,QAAA,0BAA0B,GAAG,EAAE,CAAA,CAAC,WAAW;AAE3C,QAAA,eAAe,GAAG,MAAM,CAAA;AACxB,QAAA,qBAAqB,GAAG,EAAE,CAAA,CAAC,sDAAsD;AAEjF,QAAA,iBAAiB,GAAG,MAAM,CAAA;AAC1B,QAAA,uBAAuB,GAAG,EAAE,CAAA,CAAC,WAAW;AAExC,QAAA,WAAW,GAAG,MAAM,CAAA;AACpB,QAAA,iBAAiB,GAAG,EAAE,CAAA;AAEnC,MAAM,MAAM,GAAG,GAAG,CAAA;AAClB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAA;AAC1B,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,CAAA;AACxB,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAA;AACrB,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAA;AACpB,MAAM,IAAI,GAAG,MAAM,GAAG,GAAG,CAAA;AACzB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAE,CAAA;AAEvB,aAAa;AACA,QAAA,sBAAsB,GAAG,CAAC,GAAG,GAAG,CAAA;AAE7C,iBAAiB;AACJ,QAAA,yBAAyB,GAAG,EAAE,GAAG,MAAM,CAAA;AAEpD,iBAAiB;AACJ,QAAA,aAAa,GAAG,EAAE,GAAG,MAAM,CAAA;AAExC,gBAAgB;AACH,QAAA,gCAAgC,GAAG,CAAC,GAAG,MAAM,CAAA;AAE1D,aAAa;AACA,QAAA,8BAA8B,GAAG,CAAC,GAAG,IAAI,CAAA;AAEtD,kDAAkD;AACrC,QAAA,8BAA8B,GAAG,sCAA8B,CAAA;AAE5E,cAAc;AACD,QAAA,oCAAoC,GAAG,CAAC,GAAG,IAAI,CAAA;AAE5D,eAAe;AACF,QAAA,oCAAoC,GAAG,CAAC,GAAG,KAAK,CAAA;AAE7D,gBAAgB;AACH,QAAA,cAAc,GAAG,CAAC,GAAG,MAAM,CAAA;AAExC;;;;;;GAMG;AACU,QAAA,WAAW,GAAG,EAAE,GAAG,MAAM,CAAA;AAEtC,eAAe;AACF,QAAA,wBAAwB,GAAG,CAAC,GAAG,MAAM,CAAA;AAElD,gBAAgB;AACH,QAAA,kBAAkB,GAAG,CAAC,GAAG,MAAM,CAAA;AAE5C,gBAAgB;AACH,QAAA,wBAAwB,GAAG,CAAC,GAAG,MAAM,CAAA;AAElD,YAAY;AACC,QAAA,+BAA+B,GAAG,CAAC,GAAG,GAAG,CAAA;AAEtD,gBAAgB;AACH,QAAA,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAA;AAEtC,QAAA,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,YAAY,CAAA"}

package/dist/customization/branding.d.ts

@@ -37,26 +37,16 @@ export declare const brandingSchema: z.ZodObject<{
         primaryHue?: number | undefined;
     }>>;
     links: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        title: z.ZodUnion<[z.ZodString, z.ZodIntersection<z.ZodObject<{
-            en: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            en: string;
-        }, {
-            en: string;
-        }>, z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodString>>>]>;
+        title: z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodString>>]>;
         href: z.ZodString;
         rel: z.ZodOptional<z.ZodEffects<z.ZodString, "search" | "expect" | "manifest" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service", string>>;
     }, "strip", z.ZodTypeAny, {
         href: string;
-        title: string | ({
-            en: string;
-        } & Record<string, string | undefined>);
+        title: string | Record<string, string | undefined>;
         rel?: "search" | "expect" | "manifest" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service" | undefined;
     }, {
         href: string;
-        title: string | ({
-            en: string;
-        } & Record<string, string | undefined>);
+        title: string | Record<string, string | undefined>;
         rel?: string | undefined;
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
@@ -80,9 +70,7 @@ export declare const brandingSchema: z.ZodObject<{
     } | undefined;
     links?: {
         href: string;
-        title: string | ({
-            en: string;
-        } & Record<string, string | undefined>);
+        title: string | Record<string, string | undefined>;
         rel?: "search" | "expect" | "manifest" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service" | undefined;
     }[] | undefined;
 }, {
@@ -106,9 +94,7 @@ export declare const brandingSchema: z.ZodObject<{
     } | undefined;
     links?: {
         href: string;
-        title: string | ({
-            en: string;
-        } & Record<string, string | undefined>);
+        title: string | Record<string, string | undefined>;
         rel?: string | undefined;
     }[] | undefined;
 }>;

package/dist/customization/branding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../../src/customization/branding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKzB,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AAC1D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}
+{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../../src/customization/branding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKzB,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AAC1D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}

package/dist/customization/customization.d.ts

@@ -46,26 +46,16 @@ export declare const customizationSchema: z.ZodObject<{
             primaryHue?: number | undefined;
         }>>;
         links: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            title: z.ZodUnion<[z.ZodString, z.ZodIntersection<z.ZodObject<{
-                en: z.ZodString;
-            }, "strip", z.ZodTypeAny, {
-                en: string;
-            }, {
-                en: string;
-            }>, z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodString>>>]>;
+            title: z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodString>>]>;
             href: z.ZodString;
             rel: z.ZodOptional<z.ZodEffects<z.ZodString, "search" | "expect" | "manifest" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service", string>>;
         }, "strip", z.ZodTypeAny, {
             href: string;
-            title: string | ({
-                en: string;
-            } & Record<string, string | undefined>);
+            title: string | Record<string, string | undefined>;
             rel?: "search" | "expect" | "manifest" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service" | undefined;
         }, {
             href: string;
-            title: string | ({
-                en: string;
-            } & Record<string, string | undefined>);
+            title: string | Record<string, string | undefined>;
             rel?: string | undefined;
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
@@ -89,9 +79,7 @@ export declare const customizationSchema: z.ZodObject<{
         } | undefined;
         links?: {
             href: string;
-            title: string | ({
-                en: string;
-            } & Record<string, string | undefined>);
+            title: string | Record<string, string | undefined>;
             rel?: "search" | "expect" | "manifest" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service" | undefined;
         }[] | undefined;
     }, {
@@ -115,9 +103,7 @@ export declare const customizationSchema: z.ZodObject<{
         } | undefined;
         links?: {
             href: string;
-            title: string | ({
-                en: string;
-            } & Record<string, string | undefined>);
+            title: string | Record<string, string | undefined>;
             rel?: string | undefined;
         }[] | undefined;
     }>>;
@@ -167,9 +153,7 @@ export declare const customizationSchema: z.ZodObject<{
         } | undefined;
         links?: {
             href: string;
-            title: string | ({
-                en: string;
-            } & Record<string, string | undefined>);
+            title: string | Record<string, string | undefined>;
             rel?: "search" | "expect" | "manifest" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service" | undefined;
         }[] | undefined;
     } | undefined;
@@ -203,9 +187,7 @@ export declare const customizationSchema: z.ZodObject<{
         } | undefined;
         links?: {
             href: string;
-            title: string | ({
-                en: string;
-            } & Record<string, string | undefined>);
+            title: string | Record<string, string | undefined>;
             rel?: string | undefined;
         }[] | undefined;
     } | undefined;

package/dist/customization/customization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"customization.d.ts","sourceRoot":"","sources":["../../src/customization/customization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,mBAAmB;IAC9B;;;OAGG;;IAEH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAEH;;OAEG;;IAEH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEH,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AACpE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA"}
+{"version":3,"file":"customization.d.ts","sourceRoot":"","sources":["../../src/customization/customization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,mBAAmB;IAC9B;;;OAGG;;IAEH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAEH;;OAEG;;IAEH;;OAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEH,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AACpE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA"}

package/dist/customization/links.d.ts

@@ -1,25 +1,15 @@
 import { z } from 'zod';
 export declare const linksSchema: z.ZodObject<{
-    title: z.ZodUnion<[z.ZodString, z.ZodIntersection<z.ZodObject<{
-        en: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        en: string;
-    }, {
-        en: string;
-    }>, z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodString>>>]>;
+    title: z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodString>>]>;
     href: z.ZodString;
     rel: z.ZodOptional<z.ZodEffects<z.ZodString, "search" | "expect" | "manifest" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service", string>>;
 }, "strip", z.ZodTypeAny, {
     href: string;
-    title: string | ({
-        en: string;
-    } & Record<string, string | undefined>);
+    title: string | Record<string, string | undefined>;
     rel?: "search" | "expect" | "manifest" | "alternate" | "author" | "canonical" | "dns-prefetch" | "external" | "help" | "icon" | "license" | "me" | "modulepreload" | "next" | "pingback" | "preconnect" | "prefetch" | "preload" | "prerender" | "prev" | "privacy-policy" | "stylesheet" | "terms-of-service" | undefined;
 }, {
     href: string;
-    title: string | ({
-        en: string;
-    } & Record<string, string | undefined>);
+    title: string | Record<string, string | undefined>;
     rel?: string | undefined;
 }>;
 export type Links = z.infer<typeof linksSchema>;

package/dist/customization/links.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"links.d.ts","sourceRoot":"","sources":["../../src/customization/links.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;EAItB,CAAA;AACF,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAA"}
+{"version":3,"file":"links.d.ts","sourceRoot":"","sources":["../../src/customization/links.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,WAAW;;;;;;;;;;;;EAItB,CAAA;AACF,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAA"}

package/dist/customization/links.js

@@ -5,7 +5,7 @@ const zod_1 = require("zod");
 const build_document_js_1 = require("../lib/html/build-document.js");
 const locale_js_1 = require("../lib/util/locale.js");
 exports.linksSchema = zod_1.z.object({
-    title: locale_js_1.localizedStringSchema,
+    title: zod_1.z.union([zod_1.z.string(), locale_js_1.multiLangStringSchema]),
     href: zod_1.z.string().url(),
     rel: zod_1.z.string().refine(build_document_js_1.isLinkRel, 'Invalid link rel').optional(),
 });

package/dist/customization/links.js.map

@@ -1 +1 @@
-{"version":3,"file":"links.js","sourceRoot":"","sources":["../../src/customization/links.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AACvB,qEAAyD;AACzD,qDAA6D;AAEhD,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,iCAAqB;IAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,6BAAS,EAAE,kBAAkB,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC,CAAA"}
+{"version":3,"file":"links.js","sourceRoot":"","sources":["../../src/customization/links.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AACvB,qEAAyD;AACzD,qDAA6D;AAEhD,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,iCAAqB,CAAC,CAAC;IACnD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,6BAAS,EAAE,kBAAkB,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC,CAAA"}

package/dist/lexicon/lexicon-data.d.ts

@@ -0,0 +1,9 @@
+import { LexiconDoc } from '@atproto/lexicon';
+export type LexiconData = {
+    createdAt: Date;
+    updatedAt: Date;
+    lastSucceededAt: null | Date;
+    uri: null | string;
+    lexicon: null | LexiconDoc;
+};
+//# sourceMappingURL=lexicon-data.d.ts.map

package/dist/lexicon/lexicon-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lexicon-data.d.ts","sourceRoot":"","sources":["../../src/lexicon/lexicon-data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAE7C,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;IACf,eAAe,EAAE,IAAI,GAAG,IAAI,CAAA;IAC5B,GAAG,EAAE,IAAI,GAAG,MAAM,CAAA;IAClB,OAAO,EAAE,IAAI,GAAG,UAAU,CAAA;CAC3B,CAAA"}

package/dist/lexicon/lexicon-data.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=lexicon-data.js.map

package/dist/lexicon/lexicon-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lexicon-data.js","sourceRoot":"","sources":["../../src/lexicon/lexicon-data.ts"],"names":[],"mappings":""}

package/dist/lexicon/lexicon-getter.d.ts

@@ -0,0 +1,15 @@
+import { LexiconResolver } from '@atproto/lexicon-resolver';
+import { Nsid } from '@atproto/oauth-scopes';
+import { CachedGetter } from '@atproto-labs/simple-store';
+import { LexiconData, LexiconStore } from './lexicon-store.js';
+/**
+ * This utility class handles the retrieval and caching of lexicon
+ * data. In particular, it handles failed retrieval attempts by returning cached
+ * data.
+ *
+ * @private
+ */
+export declare class LexiconGetter extends CachedGetter<Nsid, LexiconData> {
+    constructor(store: LexiconStore, resolver?: LexiconResolver);
+}
+//# sourceMappingURL=lexicon-getter.d.ts.map

package/dist/lexicon/lexicon-getter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lexicon-getter.d.ts","sourceRoot":"","sources":["../../src/lexicon/lexicon-getter.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,EAEhB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAEzD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAE9D;;;;;;GAMG;AACH,qBAAa,aAAc,SAAQ,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC;gBACpD,KAAK,EAAE,YAAY,EAAE,QAAQ,GAAE,eAAgC;CA2C5E"}

package/dist/lexicon/lexicon-getter.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LexiconGetter = void 0;
+const lexicon_resolver_1 = require("@atproto/lexicon-resolver");
+const simple_store_1 = require("@atproto-labs/simple-store");
+const constants_js_1 = require("../constants.js");
+/**
+ * This utility class handles the retrieval and caching of lexicon
+ * data. In particular, it handles failed retrieval attempts by returning cached
+ * data.
+ *
+ * @private
+ */
+class LexiconGetter extends simple_store_1.CachedGetter {
+    constructor(store, resolver = lexicon_resolver_1.resolveLexicon) {
+        super(async (input, options, storedData) => {
+            const now = new Date();
+            // @TODO We would want to be able to explicit that the Lexicon needs
+            // to be fresh, which is not possible yet with the current interface
+            // of LexiconResolver.
+            const result = await resolver(input).catch((err) => {
+                // We swallow LexiconResolutionError errors, returning potentially
+                // "null" values here to avoid hammering the resolver with requests
+                // for the same lexicon that is known to be unavailable. The getter
+                // should be called again based on the isStale() function below.
+                if (err instanceof lexicon_resolver_1.LexiconResolutionError)
+                    return undefined;
+                // Unexpected error are propagated
+                throw err;
+            });
+            return {
+                // Keep original createdAt, if available
+                createdAt: storedData?.createdAt ?? now,
+                // Always update updatedAt
+                updatedAt: now,
+                // Update the data with fresh data, if available, or keep cached
+                // values (if any) otherwise.
+                lastSucceededAt: result ? now : storedData?.lastSucceededAt ?? null,
+                uri: result ? result.uri.toString() : storedData?.uri ?? null,
+                lexicon: result ? result.lexicon : storedData?.lexicon ?? null,
+            };
+        }, {
+            set: async (nsid, data) => store.storeLexicon(nsid, data),
+            get: async (nsid) => (await store.findLexicon(nsid)) ?? undefined,
+            del: async (nsid) => store.deleteLexicon(nsid),
+        }, {
+            isStale: (nsid, data) => {
+                const timeSinceLastUpdate = Date.now() - data.updatedAt.getTime();
+                return timeSinceLastUpdate >= constants_js_1.LEXICON_REFRESH_FREQUENCY;
+            },
+        });
+    }
+}
+exports.LexiconGetter = LexiconGetter;
+//# sourceMappingURL=lexicon-getter.js.map

package/dist/lexicon/lexicon-getter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lexicon-getter.js","sourceRoot":"","sources":["../../src/lexicon/lexicon-getter.ts"],"names":[],"mappings":";;;AAAA,gEAIkC;AAElC,6DAAyD;AACzD,kDAA2D;AAG3D;;;;;;GAMG;AACH,MAAa,aAAc,SAAQ,2BAA+B;IAChE,YAAY,KAAmB,EAAE,WAA4B,iCAAc;QACzE,KAAK,CACH,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YACtB,oEAAoE;YACpE,oEAAoE;YACpE,sBAAsB;YACtB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACjD,kEAAkE;gBAClE,mEAAmE;gBACnE,mEAAmE;gBACnE,gEAAgE;gBAChE,IAAI,GAAG,YAAY,yCAAsB;oBAAE,OAAO,SAAS,CAAA;gBAE3D,kCAAkC;gBAClC,MAAM,GAAG,CAAA;YACX,CAAC,CAAC,CAAA;YAEF,OAAO;gBACL,wCAAwC;gBACxC,SAAS,EAAE,UAAU,EAAE,SAAS,IAAI,GAAG;gBACvC,0BAA0B;gBAC1B,SAAS,EAAE,GAAG;gBACd,gEAAgE;gBAChE,6BAA6B;gBAC7B,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,eAAe,IAAI,IAAI;gBACnE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,IAAI,IAAI;gBAC7D,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,IAAI,IAAI;aAC/D,CAAA;QACH,CAAC,EACD;YACE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC;YACzD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS;YACjE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;SAC/C,EACD;YACE,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAA;gBACjE,OAAO,mBAAmB,IAAI,wCAAyB,CAAA;YACzD,CAAC;SACF,CACF,CAAA;IACH,CAAC;CACF;AA5CD,sCA4CC"}

package/dist/lexicon/lexicon-manager.d.ts

@@ -0,0 +1,60 @@
+import { LexPermissionSet } from '@atproto/lexicon';
+import { LexiconResolver } from '@atproto/lexicon-resolver';
+import { IncludeScope, Nsid } from '@atproto/oauth-scopes';
+import { LexiconGetter } from './lexicon-getter.js';
+import { LexiconStore } from './lexicon-store.js';
+export * from './lexicon-store.js';
+export declare class LexiconManager {
+    protected readonly lexiconGetter: LexiconGetter;
+    constructor(store: LexiconStore, resolveLexicon?: LexiconResolver);
+    getPermissionSetsFromScope(scope?: string): Promise<Map<string, {
+        type: "permission-set";
+        permissions: ({
+            type: "permission";
+            resource: string;
+        } & Record<string, string | number | boolean | (string | number | boolean)[] | undefined>)[];
+        description?: string | undefined;
+        title?: string | undefined;
+        'title:lang'?: Record<string, string | undefined> | undefined;
+        detail?: string | undefined;
+        'detail:lang'?: Record<string, string | undefined> | undefined;
+    }>>;
+    /**
+     * Transforms a scope string from an authorization request into a scope
+     * composed solely of granular permission scopes, transforming any NSID
+     * into its corresponding permission scopes.
+     */
+    buildTokenScope(scope: string): Promise<string>;
+    /**
+     * Given a list of scope values, extract those that are NSIDs and return their
+     * corresponding permission sets.
+     */
+    protected extractPermissionSets(includeScopes: IncludeScope[]): Promise<Map<string, {
+        type: "permission-set";
+        permissions: ({
+            type: "permission";
+            resource: string;
+        } & Record<string, string | number | boolean | (string | number | boolean)[] | undefined>)[];
+        description?: string | undefined;
+        title?: string | undefined;
+        'title:lang'?: Record<string, string | undefined> | undefined;
+        detail?: string | undefined;
+        'detail:lang'?: Record<string, string | undefined> | undefined;
+    }>>;
+    protected getPermissionSets(nsids: Set<Nsid>): Promise<Map<string, {
+        type: "permission-set";
+        permissions: ({
+            type: "permission";
+            resource: string;
+        } & Record<string, string | number | boolean | (string | number | boolean)[] | undefined>)[];
+        description?: string | undefined;
+        title?: string | undefined;
+        'title:lang'?: Record<string, string | undefined> | undefined;
+        detail?: string | undefined;
+        'detail:lang'?: Record<string, string | undefined> | undefined;
+    }>>;
+    protected getPermissionSetEntry(nsid: Nsid): Promise<[nsid: Nsid, permissionSet: LexPermissionSet]>;
+    protected getPermissionSet(nsid: Nsid): Promise<LexPermissionSet>;
+}
+export declare function nsidToPermissionScopes(this: Map<string, LexPermissionSet>, includeScope: IncludeScope): string[];
+//# sourceMappingURL=lexicon-manager.d.ts.map

package/dist/lexicon/lexicon-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lexicon-manager.d.ts","sourceRoot":"","sources":["../../src/lexicon/lexicon-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAEL,eAAe,EAChB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjD,cAAc,oBAAoB,CAAA;AAElC,qBAAa,cAAc;IACzB,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;gBAEnC,KAAK,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,eAAe;IAIpD,0BAA0B,CAAC,KAAK,CAAC,EAAE,MAAM;;;;;;;;;;;;IAKtD;;;;OAIG;IACU,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAc5D;;;OAGG;cACa,qBAAqB,CAAC,aAAa,EAAE,YAAY,EAAE;;;;;;;;;;;;cAKnD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC;;;;;;;;;;;;cAMlC,qBAAqB,CACnC,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;cAKzC,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAcxE;AA+BD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,EACnC,YAAY,EAAE,YAAY,GACzB,MAAM,EAAE,CAGV"}

package/dist/lexicon/lexicon-manager.js

@@ -0,0 +1,105 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LexiconManager = void 0;
+exports.nsidToPermissionScopes = nsidToPermissionScopes;
+const lexicon_resolver_1 = require("@atproto/lexicon-resolver");
+const oauth_scopes_1 = require("@atproto/oauth-scopes");
+const lexicon_getter_js_1 = require("./lexicon-getter.js");
+__exportStar(require("./lexicon-store.js"), exports);
+class LexiconManager {
+    lexiconGetter;
+    constructor(store, resolveLexicon) {
+        this.lexiconGetter = new lexicon_getter_js_1.LexiconGetter(store, resolveLexicon);
+    }
+    async getPermissionSetsFromScope(scope) {
+        const { includeScopes } = parseScope(scope);
+        return this.extractPermissionSets(includeScopes);
+    }
+    /**
+     * Transforms a scope string from an authorization request into a scope
+     * composed solely of granular permission scopes, transforming any NSID
+     * into its corresponding permission scopes.
+     */
+    async buildTokenScope(scope) {
+        const { includeScopes, otherScopes } = parseScope(scope);
+        // If the scope does not contain any "include:<nsid>" scopes, return it as-is.
+        if (!includeScopes.length)
+            return scope;
+        const permissionSets = await this.extractPermissionSets(includeScopes);
+        return Array.from(includeScopes)
+            .flatMap(nsidToPermissionScopes, permissionSets)
+            .concat(otherScopes)
+            .join(' ');
+    }
+    /**
+     * Given a list of scope values, extract those that are NSIDs and return their
+     * corresponding permission sets.
+     */
+    async extractPermissionSets(includeScopes) {
+        const nsids = extractNsids(includeScopes);
+        return this.getPermissionSets(nsids);
+    }
+    async getPermissionSets(nsids) {
+        return new Map(await Promise.all(Array.from(nsids, this.getPermissionSetEntry, this)));
+    }
+    async getPermissionSetEntry(nsid) {
+        const permissionSet = await this.getPermissionSet(nsid);
+        return [nsid, permissionSet];
+    }
+    async getPermissionSet(nsid) {
+        const { lexicon } = await this.lexiconGetter.get(nsid);
+        if (!lexicon) {
+            throw lexicon_resolver_1.LexiconResolutionError.from(nsid);
+        }
+        if (lexicon.defs.main?.type !== 'permission-set') {
+            const description = 'Lexicon document is not a permission set';
+            throw lexicon_resolver_1.LexiconResolutionError.from(nsid, description);
+        }
+        return lexicon.defs.main;
+    }
+}
+exports.LexiconManager = LexiconManager;
+function parseScope(scope) {
+    const includeScopes = [];
+    const otherScopes = [];
+    if (scope) {
+        for (const scopeValue of scope.split(' ')) {
+            const parsed = oauth_scopes_1.IncludeScope.fromString(scopeValue);
+            if (parsed) {
+                includeScopes.push(parsed);
+            }
+            else {
+                otherScopes.push(scopeValue);
+            }
+        }
+    }
+    return {
+        includeScopes,
+        otherScopes,
+    };
+}
+function extractNsids(includeScopes) {
+    return new Set(Array.from(includeScopes, extractNsid));
+}
+function extractNsid(nsidScope) {
+    return nsidScope.nsid;
+}
+function nsidToPermissionScopes(includeScope) {
+    const permissionSet = this.get(includeScope.nsid);
+    return includeScope.toPermissions(permissionSet).map(String);
+}
+//# sourceMappingURL=lexicon-manager.js.map

package/dist/lexicon/lexicon-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lexicon-manager.js","sourceRoot":"","sources":["../../src/lexicon/lexicon-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AA6GA,wDAMC;AAlHD,gEAGkC;AAClC,wDAA0D;AAC1D,2DAAmD;AAGnD,qDAAkC;AAElC,MAAa,cAAc;IACN,aAAa,CAAe;IAE/C,YAAY,KAAmB,EAAE,cAAgC;QAC/D,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAa,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;IAC/D,CAAC;IAEM,KAAK,CAAC,0BAA0B,CAAC,KAAc;QACpD,MAAM,EAAE,aAAa,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;QAC3C,OAAO,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAA;IAClD,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,eAAe,CAAC,KAAa;QACxC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;QAExD,8EAA8E;QAC9E,IAAI,CAAC,aAAa,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAEvC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAA;QAEtE,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;aAC7B,OAAO,CAAC,sBAAsB,EAAE,cAAc,CAAC;aAC/C,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,GAAG,CAAC,CAAA;IACd,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,qBAAqB,CAAC,aAA6B;QACjE,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;QACzC,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAES,KAAK,CAAC,iBAAiB,CAAC,KAAgB;QAChD,OAAO,IAAI,GAAG,CACZ,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,CACvE,CAAA;IACH,CAAC;IAES,KAAK,CAAC,qBAAqB,CACnC,IAAU;QAEV,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;QACvD,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IAC9B,CAAC;IAES,KAAK,CAAC,gBAAgB,CAAC,IAAU;QACzC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAEtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,yCAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,0CAA0C,CAAA;YAC9D,MAAM,yCAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACtD,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA;IAC1B,CAAC;CACF;AAnED,wCAmEC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,aAAa,GAAmB,EAAE,CAAA;IACxC,MAAM,WAAW,GAAa,EAAE,CAAA;IAEhC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,2BAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;YAClD,IAAI,MAAM,EAAE,CAAC;gBACX,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC5B,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa;QACb,WAAW;KACZ,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,aAA6B;IACjD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,SAAuB;IAC1C,OAAO,SAAS,CAAC,IAAI,CAAA;AACvB,CAAC;AAED,SAAgB,sBAAsB,CAEpC,YAA0B;IAE1B,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAE,CAAA;IAClD,OAAO,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AAC9D,CAAC"}

package/dist/lexicon/lexicon-store.d.ts

@@ -0,0 +1,13 @@
+import { LexiconDoc } from '@atproto/lexicon';
+import { Awaitable } from '../lib/util/type.js';
+import { LexiconData } from './lexicon-data.js';
+export type { Awaitable, LexiconData, LexiconDoc };
+export interface LexiconStore {
+    findLexicon(nsid: string): Awaitable<LexiconData | null>;
+    storeLexicon(nsid: string, data: LexiconData): Awaitable<void>;
+    deleteLexicon(nsid: string): Awaitable<void>;
+}
+export declare const isLexiconStore: <V extends Partial<LexiconStore>>(value: V) => value is V & import("../lib/util/type.js").RequiredDefined<LexiconStore>;
+export declare function ifLexiconStore<V extends Partial<LexiconStore>>(implementation?: V): (V & LexiconStore) | undefined;
+export declare function asLexiconStore<V extends Partial<LexiconStore>>(implementation?: V): V & LexiconStore;
+//# sourceMappingURL=lexicon-store.d.ts.map

package/dist/lexicon/lexicon-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lexicon-store.d.ts","sourceRoot":"","sources":["../../src/lexicon/lexicon-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAyB,MAAM,qBAAqB,CAAA;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,CAAA;AAElD,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IACxD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9D,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;CAC7C;AAED,eAAO,MAAM,cAAc,yHAIzB,CAAA;AAEF,wBAAgB,cAAc,CAAC,CAAC,SAAS,OAAO,CAAC,YAAY,CAAC,EAC5D,cAAc,CAAC,EAAE,CAAC,GACjB,CAAC,CAAC,GAAG,YAAY,CAAC,GAAG,SAAS,CAMhC;AAED,wBAAgB,cAAc,CAAC,CAAC,SAAS,OAAO,CAAC,YAAY,CAAC,EAC5D,cAAc,CAAC,EAAE,CAAC,GACjB,CAAC,GAAG,YAAY,CAKlB"}

package/dist/lexicon/lexicon-store.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isLexiconStore = void 0;
+exports.ifLexiconStore = ifLexiconStore;
+exports.asLexiconStore = asLexiconStore;
+const type_js_1 = require("../lib/util/type.js");
+exports.isLexiconStore = (0, type_js_1.buildInterfaceChecker)([
+    'findLexicon',
+    'storeLexicon',
+    'deleteLexicon',
+]);
+function ifLexiconStore(implementation) {
+    if (implementation && (0, exports.isLexiconStore)(implementation)) {
+        return implementation;
+    }
+    return undefined;
+}
+function asLexiconStore(implementation) {
+    const store = ifLexiconStore(implementation);
+    if (store)
+        return store;
+    throw new Error('Invalid LexiconStore implementation');
+}
+//# sourceMappingURL=lexicon-store.js.map

package/dist/lexicon/lexicon-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lexicon-store.js","sourceRoot":"","sources":["../../src/lexicon/lexicon-store.ts"],"names":[],"mappings":";;;AAkBA,wCAQC;AAED,wCAOC;AAlCD,iDAAsE;AAWzD,QAAA,cAAc,GAAG,IAAA,+BAAqB,EAAe;IAChE,aAAa;IACb,cAAc;IACd,eAAe;CAChB,CAAC,CAAA;AAEF,SAAgB,cAAc,CAC5B,cAAkB;IAElB,IAAI,cAAc,IAAI,IAAA,sBAAc,EAAC,cAAc,CAAC,EAAE,CAAC;QACrD,OAAO,cAAc,CAAA;IACvB,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAgB,cAAc,CAC5B,cAAkB;IAElB,MAAM,KAAK,GAAG,cAAc,CAAC,cAAc,CAAC,CAAA;IAC5C,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IAEvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;AACxD,CAAC"}

package/dist/lib/html/hydration-data.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hydration-data.d.ts","sourceRoot":"","sources":["../../../src/lib/html/hydration-data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAM,MAAM,YAAY,CAAA;AAErC,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpE,MAAM,EAAE,CAAC,GACR,IAAI,CAEN;AAED,wBAAiB,sBAAsB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,SAAS,CAAC,IAAI,CAAC,CASjB"}
+{"version":3,"file":"hydration-data.d.ts","sourceRoot":"","sources":["../../../src/lib/html/hydration-data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAM,MAAM,YAAY,CAAA;AAErC,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpE,MAAM,EAAE,CAAC,GACR,IAAI,CAEN;AAED,wBAAiB,sBAAsB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,SAAS,CAAC,IAAI,CAAC,CAQjB"}