@alwith/module-auth 0.1.0

package/LICENSE

@@ -0,0 +1,94 @@
+ALwith Developer and Redistribution License, Version 1.0
+Copyright 2026 ALWITHAI PTE. LTD. All rights reserved, except as expressly granted below.
+
+1. Scope
+This license applies only to ALWITHAI PTE. LTD.'s ("ALwith") own material in
+the npm package accompanying this license (the "Software"). It is a proprietary
+license, not an open-source license. Third-party material is governed by its
+respective licenses, as described in THIRD_PARTY_NOTICES.md. No restriction here
+reduces rights granted by those licenses or by mandatory applicable law.
+
+2. Permission to develop and distribute applications
+Subject to this license, ALwith grants you a worldwide, non-exclusive, royalty-free
+copyright license to use, reproduce, integrate and modify the supplied Software
+to develop, test, host and operate your own applications, including WorkBuddy
+applications, for personal, internal business or commercial use. You may brand,
+sell and distribute those applications, including the Software embedded in them,
+to your customers and end users. No per-application registration, approval or
+royalty is required by this software license.
+
+You may bundle, minify, transform and otherwise adapt the supplied JavaScript,
+styles and declarations for those applications. You may include the supplied
+Software in an application source distribution when necessary to build or use
+that application, provided it remains separately identified under this license.
+You may combine it with separately licensed application code, including MPL-2.0
+code, while complying with both licenses. Your own independent code remains yours;
+this license does not require disclosure of your application source code.
+
+Recipients may use the embedded Software to run the application and exercise the
+permissions above under this same license. You may allow your contractors and
+hosting providers to use it for those purposes. You must supply this license and
+all applicable third-party notices with each redistribution (for example in an
+included licenses directory or an accessible legal-notices page), identify your
+modifications, and not impose terms that purport to change ALwith's license.
+
+3. Rights reserved
+No right to ALwith's unpublished source code, private repositories, trademarks,
+or separately distributed Runtime binaries, modules or services is granted here.
+You may not relicense the Software as your own framework or redistribute it as
+a standalone SDK/package for others, except for private development/build caches
+used for applications permitted by Section 2. No restriction is imposed on
+independently developed competing applications or on third-party licensed code.
+You must not misrepresent authorship or imply ALwith endorses your application.
+
+4. Accounts and services
+This license does not supply platform credentials, paid entitlements, hosting,
+support, updates or a service-availability guarantee. Use of ALwith accounts,
+pets, relay or other hosted services is separately subject to the applicable
+service terms and authorization. Do not bypass service access controls or use
+another person's credentials without authorization. Choosing or replacing an
+authentication provider for your own application is not prohibited by this
+software license. Distributing an Auth client does not authorize its recipients
+to access another user's account, data or entitlements.
+
+5. Lawful use and independent responsibility
+You must not use the Software to commit or knowingly facilitate unlawful acts.
+You are responsible for your application's operation, permissions, business
+practices, data processing, content and compliance with applicable law. You must
+not make warranties or commitments on ALwith's behalf. ALwith does not endorse
+your application merely because it uses the Software or connects to ALwith.
+These allocations do not remove either party's own mandatory legal obligations.
+
+6. Disclaimer and limitation of liability
+TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SOFTWARE IS PROVIDED
+"AS IS" AND "AS AVAILABLE", WITHOUT EXPRESS OR IMPLIED WARRANTIES, INCLUDING
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY,
+SECURITY OR UNINTERRUPTED OPERATION. AI OUTPUTS AND AUTOMATED ACTIONS MAY BE
+INCORRECT OR HARMFUL; YOU MUST DETERMINE APPROPRIATE REVIEW AND SAFEGUARDS.
+
+TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ALWITH AND ITS CONTRIBUTORS
+ARE NOT LIABLE FOR DAMAGES ARISING FROM USE, MODIFICATION OR DISTRIBUTION OF
+THE SOFTWARE, INCLUDING LOST PROFITS, LOST DATA, BUSINESS INTERRUPTION AND
+INDIRECT OR CONSEQUENTIAL LOSS. NOTHING EXCLUDES OR LIMITS LIABILITY THAT
+CANNOT LAWFULLY BE EXCLUDED OR LIMITED, INCLUDING APPLICABLE MANDATORY CONSUMER
+RIGHTS AND LIABILITY FOR FRAUD, WILLFUL MISCONDUCT OR GROSS NEGLIGENCE WHERE
+SUCH EXCLUSION OR LIMITATION IS PROHIBITED. THIS LICENSE DOES NOT EXCLUDE
+CRIMINAL OR REGULATORY RESPONSIBILITY IMPOSED BY LAW.
+
+7. Duration and termination
+The grant for this version continues while you comply with this license. If
+ALwith gives written notice of a material breach, your rights terminate if you
+do not cure it within 30 days; no cure period authorizes continuing unlawful
+conduct. On termination, cease new use and distribution of ALwith's proprietary
+Software except as required by law. Independently compliant recipients retain
+their own grants. Sections concerning reserved rights, notices, disclaimers and
+mandatory-law exceptions survive as applicable. Third-party licenses are not
+terminated by this provision.
+
+8. Versions and severability
+This license governs the accompanying version. A later license or publication
+of source code does not retroactively replace this grant or revoke rights in
+earlier lawfully obtained versions. Any additional open-source license must be
+expressly identified by ALwith. If a provision is unenforceable, the remaining
+provisions continue to the extent permitted by law. A separate written agreement
+signed by you and ALwith may expressly override these terms for its stated scope.

package/README.md

@@ -0,0 +1,25 @@
+# @alwith/module-auth
+
+TypeScript side of the alwith-auth capability, colocated with its separately licensed Rust crate.
+
+Owns the existing Desktop auth types, password rule, OAuth PKCE/in-flight verifier,
+error-key mapping, request contracts, state lifecycle and token-storage operations. The host supplies its existing
+store; authStoreName preserves the auth.<API host> namespace. Tokens remain in
+the same store with the same keys. Logout preserves device_id.
+
+This does not move credentials to Rust, replace HTTP, render a login page,
+or implement cross-device account synchronization. The framework-neutral state
+factory keeps Desktop's existing restoration, login, logout and window-event
+semantics; the host supplies storage, HTTP, event transport and product effects.
+Desktop still owns native OAuth callbacks, windows, provider loading and analytics.
+U consumes the shared package; OAuth callbacks remain host-specific.
+
+## License and redistribution
+
+See [LICENSE](LICENSE) and [third-party notices](THIRD_PARTY_NOTICES.md).
+ALwith-owned code is proprietary, not open source. You may build, customize, host,
+charge for and distribute your own WorkBuddy applications under the included
+license, without per-application registration. This does not grant hosted-service
+access or rights to separately distributed Rust libraries or Runtime binaries.
+The npm artifact includes compiled/minified JS, declarations and necessary assets,
+not the private TS/TSX implementation or source maps. Minification is not encryption.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,17 @@
+# Third-party notices — @alwith/module-auth
+
+ALwith's proprietary license applies only to its own material. Third-party
+material retains its original license and rights; the package license does not
+replace or restrict those rights. Preserve applicable notices when redistributing.
+
+## External direct dependencies and peers
+
+These are external imports, not bundled dependency implementations in this npm
+artifact. Versions below record the local release-preparation inventory; declared
+ranges can resolve to different versions. Keep the notices from the versions
+actually distributed by your application, including transitive dependencies.
+
+| Package | Inspected version | License | Included license copy |
+| --- | --- | --- | --- |
+
+No external direct runtime dependencies or peers are declared in this package.

package/dist/client.d.ts

@@ -0,0 +1,27 @@
+import type { LoginResponse, OAuthExchangeResponse, OAuthProvider, OAuthSessionResponse, SsoExchangeResponse } from "./types.js";
+export type SendCodePurpose = "LOGIN" | "REGISTER";
+export interface AuthClientHost {
+    publicPost: <T>(path: string, body?: unknown) => Promise<T>;
+    apiPost: <T>(path: string, body?: unknown) => Promise<T>;
+    platform: () => string | Promise<string>;
+    arch: () => string | Promise<string>;
+    getDeviceId: () => Promise<string>;
+    onLogoutError: (error: unknown) => void;
+    logInfo: (message: string) => void | Promise<void>;
+}
+export declare function createAuthClient({ publicPost, apiPost, platform, arch, getDeviceId, onLogoutError, logInfo, }: AuthClientHost): {
+    sendVerificationCode: (email: string, purpose?: SendCodePurpose) => Promise<void>;
+    loginWithCode: (email: string, code: string) => Promise<LoginResponse>;
+    loginWithPassword: (email: string, password: string) => Promise<LoginResponse>;
+    emailExists: (email: string) => Promise<{
+        registered: boolean;
+    }>;
+    register: (email: string, code: string, password: string) => Promise<LoginResponse>;
+    logoutApi: () => Promise<void>;
+    createOAuthSession: (provider: OAuthProvider, clientCodeChallenge: string, loopbackPort?: number) => Promise<OAuthSessionResponse>;
+    exchangeOAuthTicket: (ticket: string, clientCodeVerifier: string) => Promise<OAuthExchangeResponse>;
+    getSsoOtp: () => Promise<{
+        otp: string;
+    }>;
+    exchangeSsoCode: (code: string) => Promise<SsoExchangeResponse>;
+};

package/dist/client.js

@@ -0,0 +1 @@
+function E({publicPost:t,apiPost:d,platform:c,arch:r,getDeviceId:u,onLogoutError:h,logInfo:p}){async function _(e,n="LOGIN"){await t("/api/v1/auth/send-code",{login_type:"EMAIL",email:e,purpose:n})}async function y(e,n){let[i,a,o]=await Promise.all([c(),r(),u()]);return t("/api/v1/auth/login",{email:e,code:n,login_type:"EMAIL",client_type:"DESKTOP",client_name:`Tauri-${i}-${a}`,device_id:o})}async function v(e,n){let[i,a,o]=await Promise.all([c(),r(),u()]);return t("/api/v1/auth/login",{email:e,password:n,login_type:"PASSWORD",client_type:"DESKTOP",client_name:`Tauri-${i}-${a}`,device_id:o})}async function f(e){return t("/api/v1/auth/email-exists",{email:e})}async function g(e,n,i){let[a,o,s]=await Promise.all([c(),r(),u()]);return t("/api/v1/auth/register",{email:e,code:n,password:i,client_type:"DESKTOP",client_name:`Tauri-${a}-${o}`,device_id:s})}async function O(){try{await d("/api/v1/auth/logout")}catch(e){h(e)}}function S(e){switch(e){case"macos":return"MACOS";case"windows":return"WINDOWS";case"linux":return"LINUX";default:throw Error(`unsupported desktop platform for OAuth: ${e}`)}}async function w(e,n,i){let[a,o,s]=await Promise.all([c(),r(),u()]),l={provider:e,client_type:"DESKTOP",platform:S(a),return_target:"APP_LOGIN",client_name:`Tauri-${a}-${o}`,device_id:s,client_code_challenge:n,...i!==void 0?{loopback_port:i}:{}};return p(`[oauth] POST /api/v1/auth/oauth/sessions request: ${JSON.stringify(l)}`),t("/api/v1/auth/oauth/sessions",l)}async function T(e,n){return t("/api/v1/auth/oauth/tickets/exchange",{ticket:e,client_code_verifier:n})}async function m(){return d("/api/v1/sso/otp")}async function A(e){return t("/api/v1/sso/exchange",{otp:e,client_type:"DESKTOP"})}return{sendVerificationCode:_,loginWithCode:y,loginWithPassword:v,emailExists:f,register:g,logoutApi:O,createOAuthSession:w,exchangeOAuthTicket:T,getSsoOtp:m,exchangeSsoCode:A}}export{E as createAuthClient};

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./types.js";
+export * from "./password.js";
+export * from "./oauth.js";
+export * from "./token-storage.js";
+export * from "./client.js";
+export * from "./state.js";

package/dist/index.js

@@ -0,0 +1 @@
+export*from"./types.js";export*from"./password.js";export*from"./oauth.js";export*from"./token-storage.js";export*from"./client.js";export*from"./state.js";

package/dist/oauth.d.ts

@@ -0,0 +1,9 @@
+export declare function generateCodeVerifier(): string;
+export declare function computeCodeChallenge(verifier: string): Promise<string>;
+export declare function storeOAuthState(verifier: string): void;
+export declare function takeOAuthState(): string | null;
+export declare function clearOAuthState(): void;
+declare const OAUTH_ERROR_KEYS: readonly [readonly ["OAUTH_SESSION_EXPIRED", "signIn.oauthSessionExpired"], readonly ["OAUTH_VERIFICATION_FAILED", "signIn.oauthVerificationFailed"], readonly ["OAUTH_EMAIL_REQUIRED", "signIn.oauthEmailRequired"], readonly ["OAUTH_IDENTITY_CONFLICT", "signIn.oauthIdentityConflict"], readonly ["OAUTH_RATE_LIMITED", "signIn.tooManyRequests"], readonly ["OAUTH_PROVIDER_UNAVAILABLE", "signIn.oauthProviderUnavailable"], readonly ["OAUTH_CONFIG_UNAVAILABLE", "signIn.oauthConfigUnavailable"], readonly ["ACCOUNT_DISABLED", "signIn.accountDisabled"]];
+export type OAuthErrorKey = (typeof OAUTH_ERROR_KEYS)[number][1] | "signIn.signInFailed";
+export declare function oauthErrorKey(raw: string): OAuthErrorKey;
+export {};

package/dist/oauth.js

@@ -0,0 +1 @@
+function r(e){let n="";for(let o of e)n+=String.fromCharCode(o);return btoa(n).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function a(){let e=new Uint8Array(32);return crypto.getRandomValues(e),r(e)}async function u(e){let n=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e));return r(new Uint8Array(n))}var t=null;function c(e){t=e}function s(){let e=t;return t=null,e}function I(){t=null}var i=[["OAUTH_SESSION_EXPIRED","signIn.oauthSessionExpired"],["OAUTH_VERIFICATION_FAILED","signIn.oauthVerificationFailed"],["OAUTH_EMAIL_REQUIRED","signIn.oauthEmailRequired"],["OAUTH_IDENTITY_CONFLICT","signIn.oauthIdentityConflict"],["OAUTH_RATE_LIMITED","signIn.tooManyRequests"],["OAUTH_PROVIDER_UNAVAILABLE","signIn.oauthProviderUnavailable"],["OAUTH_CONFIG_UNAVAILABLE","signIn.oauthConfigUnavailable"],["ACCOUNT_DISABLED","signIn.accountDisabled"]];function l(e){for(let[n,o]of i)if(e.includes(n))return o;return"signIn.signInFailed"}export{I as clearOAuthState,u as computeCodeChallenge,a as generateCodeVerifier,l as oauthErrorKey,c as storeOAuthState,s as takeOAuthState};

package/dist/password.d.ts

@@ -0,0 +1 @@
+export declare function isValidPassword(password: string): boolean;

package/dist/password.js

@@ -0,0 +1 @@
+var s=/^(?=.*[A-Za-z])(?=.*\d)[\x21-\x7E]{8,26}$/;function n(t){return s.test(t)}export{n as isValidPassword};

package/dist/state.d.ts

@@ -0,0 +1,41 @@
+import type { AuthUser, LoginResponse } from "./types.js";
+import type { createTokenStorage } from "./token-storage.js";
+export interface AuthState {
+    user: AuthUser | null;
+    isAuthenticated: boolean;
+    isLoading: boolean;
+    _initialized: boolean;
+}
+export interface AuthActions {
+    init: () => void;
+    login: (response: LoginResponse) => Promise<void>;
+    logout: () => Promise<void>;
+    refreshUser: () => Promise<void>;
+    updateUser: (partial: Partial<AuthUser>) => void;
+}
+export type AuthStateEvent = {
+    action: "login" | "logout" | "update";
+    user?: AuthUser;
+};
+export interface AuthStateHost {
+    storage: ReturnType<typeof createTokenStorage>;
+    getProfile: () => Promise<{
+        uuid: string;
+        nickname: string;
+        login_email: string;
+        avatar?: string;
+    }>;
+    logoutApi: () => Promise<void>;
+    onInit: () => void;
+    validateProfile: () => boolean;
+    handleUnauthenticated: () => Promise<boolean>;
+    loadProviders: () => void;
+    clearProviders: () => void;
+    onProfileRestored: () => void;
+    clearAccountConversation: (user: AuthUser | null) => Promise<void>;
+    onSignedIn: (user: AuthUser, source: "login" | "restore") => void | Promise<void>;
+    subscribeExpired: (listener: () => void) => unknown;
+    subscribeState: (listener: (event: AuthStateEvent) => void) => unknown;
+    broadcast: (event: AuthStateEvent) => Promise<void>;
+}
+export declare function createAuthState(host: AuthStateHost): (set: (state: Partial<AuthState>) => void, get: () => AuthState) => AuthState & AuthActions;

package/dist/state.js

@@ -0,0 +1 @@
+function w(e){let{tokenStorage:l,loadUser:d,saveUser:s,clearAllAuth:f}=e.storage,n=0;return(r,c)=>({user:null,isAuthenticated:!1,isLoading:!0,_initialized:!1,init:()=>{if(c()._initialized)return;r({_initialized:!0}),e.onInit();let a=n;(async()=>{try{let i=await l.getAccess(),t=await l.getRefresh();if(a!==n)return;if(!i||!t){await e.handleUnauthenticated(),r({isLoading:!1});return}let v=e.validateProfile(),o=await d();if(a!==n)return;if(!v){if(o)r({user:o,isAuthenticated:!0}),e.loadProviders();return}if(o)r({user:o,isAuthenticated:!0,isLoading:!1}),e.onSignedIn(o,"restore");e.loadProviders();try{let u=await e.getProfile();if(a!==n)return;let g={user_uuid:u.uuid,nickname:u.nickname,login_email:u.login_email,avatar:u.avatar};r({user:g,isAuthenticated:!0}),await s(g),e.onProfileRestored()}catch{let u=await d();if(a!==n)return;if(u)r({user:u,isAuthenticated:!0});else await f(),e.clearProviders(),r({user:null,isAuthenticated:!1})}if(!o)r({isLoading:!1})}catch(i){console.error("[auth] session restore failed unexpectedly",i)}finally{if(c().isLoading)r({isLoading:!1})}})(),e.subscribeExpired(()=>{n++,e.clearAccountConversation(c().user).then(e.handleUnauthenticated).then((i)=>{if(i)return;r({user:null,isAuthenticated:!1})})}),e.subscribeState((i)=>{if(i.action==="logout")n++,e.clearAccountConversation(c().user).then(e.handleUnauthenticated).then((t)=>{if(t)return;e.clearProviders(),r({user:null,isAuthenticated:!1})});else if(i.action==="login"&&i.user)n++,r({user:i.user,isAuthenticated:!0}),e.loadProviders();else if(i.action==="update"&&i.user)r({user:i.user})})},login:async(a)=>{n++,await l.save(a.access_token,a.refresh_token);let i={user_uuid:a.user_uuid,nickname:a.nickname,login_email:a.login_email};await s(i),r({user:i,isAuthenticated:!0}),e.loadProviders(),await e.broadcast({action:"login",user:i}),e.onSignedIn(i,"login")},logout:async()=>{if(n++,e.clearProviders(),await e.logoutApi(),await e.clearAccountConversation(c().user),await f(),await e.broadcast({action:"logout"}),await e.handleUnauthenticated())return;r({user:null,isAuthenticated:!1})},refreshUser:async()=>{try{let a=await e.getProfile(),i={user_uuid:a.uuid,nickname:a.nickname,login_email:a.login_email,avatar:a.avatar};r({user:i}),await s(i)}catch(a){console.warn("[auth] refreshUser failed",a)}},updateUser:(a)=>{let i=c().user;if(!i)return;let t={...i,...a};r({user:t}),s(t),e.broadcast({action:"update",user:t})}})}export{w as createAuthState};

package/dist/token-storage.d.ts

@@ -0,0 +1,21 @@
+import type { AuthUser } from "./types.js";
+export interface AuthStore {
+    get<T>(key: string): Promise<T | undefined>;
+    set(key: string, value: unknown): Promise<void>;
+    delete(key: string): Promise<void>;
+}
+export declare function authStoreName(apiBaseUrl: string): string;
+export declare function createTokenStorage(store: AuthStore): {
+    tokenStorage: {
+        save(accessToken: string, refreshToken: string): Promise<void>;
+        getAccess(): Promise<string>;
+        getRefresh(): Promise<string>;
+        updateAccess(token: string): Promise<void>;
+        clear(): Promise<void>;
+        getDeviceId(): Promise<string>;
+    };
+    saveUser: (user: AuthUser) => Promise<void>;
+    loadUser: () => Promise<AuthUser | null>;
+    clearUser: () => Promise<void>;
+    clearAllAuth: () => Promise<void>;
+};

package/dist/token-storage.js

@@ -0,0 +1 @@
+function r(a){return`auth.${new URL(a).host}`}function u(a){let e={ACCESS:"access_token",REFRESH:"refresh_token",DEVICE_ID:"device_id",USER:"user"},n={async save(t,S){await a.set(e.ACCESS,t),await a.set(e.REFRESH,S)},async getAccess(){return await a.get(e.ACCESS)??""},async getRefresh(){return await a.get(e.REFRESH)??""},async updateAccess(t){await a.set(e.ACCESS,t)},async clear(){await a.delete(e.ACCESS),await a.delete(e.REFRESH)},async getDeviceId(){let t=await a.get(e.DEVICE_ID);if(!t)t=crypto.randomUUID(),await a.set(e.DEVICE_ID,t);return t}};async function i(t){await a.set(e.USER,t)}async function E(){return await a.get(e.USER)??null}async function c(){await a.delete(e.USER)}async function s(){await n.clear(),await c()}return{tokenStorage:n,saveUser:i,loadUser:E,clearUser:c,clearAllAuth:s}}export{r as authStoreName,u as createTokenStorage};

package/dist/types.d.ts

@@ -0,0 +1,37 @@
+export interface LoginResponse {
+    user_uuid: string;
+    nickname: string;
+    login_email: string;
+    access_token: string;
+    refresh_token: string;
+    status?: "ACTIVE" | "WAITLISTED" | "DISABLED";
+}
+export interface TokenResponse {
+    access_token: string;
+    refresh_token: string;
+}
+export type OAuthProvider = "GOOGLE" | "APPLE" | "GITHUB";
+export interface OAuthSessionResponse {
+    session_id: string;
+    mode: "REDIRECT";
+    authorization_url: string;
+    expires_in: number;
+}
+export interface OAuthExchangeResponse extends LoginResponse {
+    oauth_provider: OAuthProvider;
+    oauth_result: "LOGIN" | "LINKED" | "CREATED";
+}
+export interface SsoExchangeResponse {
+    user_uuid: string;
+    nickname: string;
+    login_email: string;
+    access_token: string;
+    refresh_token: string;
+    status: string;
+}
+export interface AuthUser {
+    user_uuid: string;
+    nickname: string;
+    login_email: string;
+    avatar?: string;
+}

package/package.json

@@ -0,0 +1,69 @@
+{
+  "name": "@alwith/module-auth",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./types": {
+      "types": "./dist/types.d.ts",
+      "import": "./dist/types.js",
+      "default": "./dist/types.js"
+    },
+    "./password": {
+      "types": "./dist/password.d.ts",
+      "import": "./dist/password.js",
+      "default": "./dist/password.js"
+    },
+    "./oauth": {
+      "types": "./dist/oauth.d.ts",
+      "import": "./dist/oauth.js",
+      "default": "./dist/oauth.js"
+    },
+    "./token-storage": {
+      "types": "./dist/token-storage.d.ts",
+      "import": "./dist/token-storage.js",
+      "default": "./dist/token-storage.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js",
+      "default": "./dist/client.js"
+    },
+    "./state": {
+      "types": "./dist/state.d.ts",
+      "import": "./dist/state.js",
+      "default": "./dist/state.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md",
+    "licenses"
+  ],
+  "devDependencies": {
+    "typescript": "^7.0.2"
+  },
+  "scripts": {
+    "test": "bun test src",
+    "typecheck": "tsc --noEmit",
+    "build": "bun ../../../scripts/build-npm.ts",
+    "prepack": "bun run build"
+  },
+  "license": "SEE LICENSE IN LICENSE",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ALwith-ai/alwith-modules.git",
+    "directory": "crates/auth/guest-js"
+  }
+}