feat: finalize atproto blog uploads

Author: Kai-ros

app/pages/blog/package-registries.md

@@ -0,0 +1,16 @@
+---
+authors:
+  - name: Daniel Roe
+    blueskyHandle: danielroe.dev
+title: 'Package Registries'
+tags: ['OpenSource', 'Nuxt']
+excerpt: 'Package Registries need fixing'
+date: '2026-01-28T12:30:00Z'
+slug: 'package-registries'
+description: 'Package Registries Reimagined'
+draft: false
+---
+
+# Package Registries
+
+Shortest explanation: Production grade JavaScript is weird.

server/api/atproto/bluesky-oembed.get.ts

@@ -0,0 +1,59 @@
+import { parse } from 'valibot'
+import { handleApiError } from '#server/utils/error-handler'
+import {
+  CACHE_MAX_AGE_ONE_MINUTE,
+  BLUESKY_API,
+  BLUESKY_EMBED_BASE_ROUTE,
+  ERROR_BLUESKY_EMBED_FAILED,
+  BLUESKY_URL_EXTRACT_REGEX,
+} from '#shared/utils/constants'
+import { type BlueskyOEmbedResponse, BlueskyOEmbedRequestSchema } from '#shared/schemas/atproto'
+import { Client } from '@atproto/lex'
+import * as com from '#shared/types/lexicons/com'
+
+export default defineCachedEventHandler(
+  async (event): Promise<BlueskyOEmbedResponse> => {
+    try {
+      const query = getQuery(event)
+      const { url, colorMode } = parse(BlueskyOEmbedRequestSchema, query)
+
+      /**
+       * INFO: Extract handle and post ID from https://bsky.app/profile/HANDLE/post/POST_ID
+       * Casting type here because the schema has already validated the URL format before this line runs.
+       * If the schema passes, this regex is mathematically guaranteed to match and contain both capture groups.
+       * Match returns ["profile/danielroe.dev/post/123", "danielroe.dev", "123"] — only want the two capture groups, the full match string is discarded.
+       */
+      const [, handle, postId] = url.match(BLUESKY_URL_EXTRACT_REGEX)! as [
+        string,
+        `${string}.${string}`,
+        string,
+      ]
+
+      const client = new Client({ service: BLUESKY_API })
+      const { did } = await client.call(com.atproto.identity.resolveHandle, { handle })
+
+      // INFO: Construct the embed URL with the DID
+      const embedUrl = `${BLUESKY_EMBED_BASE_ROUTE}/embed/${did}/app.bsky.feed.post/${postId}?colorMode=${colorMode}`
+
+      return {
+        embedUrl,
+        did,
+        postId,
+        handle,
+      }
+    } catch (error) {
+      handleApiError(error, {
+        statusCode: 502,
+        message: ERROR_BLUESKY_EMBED_FAILED,
+      })
+    }
+  },
+  {
+    name: 'bluesky-oembed',
+    maxAge: CACHE_MAX_AGE_ONE_MINUTE,
+    getKey: event => {
+      const { url, colorMode } = getQuery(event)
+      return `oembed:${url}:${colorMode ?? 'system'}`
+    },
+  },
+)

shared/schemas/oauth.ts

@@ -0,0 +1,14 @@
+import { object, string, pipe, url, array, minLength, boolean } from 'valibot'
+
+export const OAuthMetadataSchema = object({
+  client_id: pipe(string(), url()),
+  client_name: string(),
+  client_uri: pipe(string(), url()),
+  redirect_uris: pipe(array(string()), minLength(1)),
+  scope: string(),
+  grant_types: array(string()),
+  application_type: string(),
+  token_endpoint_auth_method: string(),
+  dpop_bound_access_tokens: boolean(),
+  response_types: array(string()),
+})