@cortexkit/aft-bridge 0.18.5

package/dist/logger.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Host-injected logger contract.
+ *
+ * The shared bridge package never owns a log file, log-format, or tag — every
+ * host (OpenCode, Pi, future MCP harnesses) has its own log conventions and
+ * operators rely on the per-host filename for support flows like
+ * `aft doctor --issue`.
+ *
+ * The transport consumes only the {@link Logger} interface; plugins implement
+ * it on top of their own file/console handler.
+ */
+export interface Logger {
+    log(message: string, meta?: LogMeta): void;
+    warn(message: string, meta?: LogMeta): void;
+    error(message: string, meta?: LogMeta): void;
+    /**
+     * Optional. When implemented, returns the path to the on-disk log file so
+     * bridge-side error messages can point operators directly at it.
+     */
+    getLogFilePath?(): string | undefined;
+}
+export interface LogMeta {
+    /** Optional session id for correlating multi-session host activity. */
+    sessionId?: string;
+    /** Optional structured metadata (pid, exit code, etc.). */
+    [key: string]: unknown;
+}
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,WAAW,MAAM;IACrB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7C;;;OAGG;IACH,cAAc,CAAC,IAAI,MAAM,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,OAAO;IACtB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB"}

package/dist/onnx-runtime.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Auto-download and manage ONNX Runtime shared library for semantic search.
+ *
+ * Downloads the CPU-only ONNX Runtime from Microsoft's GitHub releases.
+ * The library is cached in the storage directory alongside semantic index data.
+ *
+ * Audit-3 v0.17 #1 hardening (v0.17.1): the previous implementation used
+ * `curl` with no size cap, no archive containment validation, no install
+ * lock, and no integrity verification — leaving an entire parallel install
+ * path that bypassed every defense the LSP GitHub installer had earned in
+ * Phase A through Phase E. This rewrite brings ONNX onto the same security
+ * floor:
+ *
+ *   - Streaming size cap via fetch + ReadableStream transformer (`MAX_DOWNLOAD_BYTES`).
+ *   - Streaming SHA-256 of the downloaded archive, persisted in `.aft-onnx-installed`.
+ *   - Atomic O_EXCL install lock with PID-aware stale-lock recovery.
+ *   - Containment-checked extraction: every file under the staging dir
+ *     must be inside the staging root, no symlinks allowed before move.
+ *   - Total extracted size cap (`MAX_EXTRACT_BYTES`) to defeat decompression
+ *     bombs.
+ *   - TOFU verification: if `.aft-onnx-installed` already records a hash for
+ *     this version, refuse to use a binary that doesn't match.
+ *
+ * Supported platforms:
+ *   - macOS ARM64 (osx-arm64)
+ *   - Linux x64 (linux-x64)
+ *   - Linux ARM64 (linux-aarch64)
+ *   - Windows x64 (win-x64)
+ *   - Windows ARM64 (win-arm64)
+ *
+ * macOS x64 (Intel) is not provided by Microsoft — users must install via:
+ *   brew install onnxruntime
+ */
+/** Check if this platform can auto-download ONNX Runtime */
+export declare function isOrtAutoDownloadSupported(): boolean;
+/** Get the install hint for platforms where auto-download isn't available */
+export declare function getManualInstallHint(): string;
+/**
+ * Ensure ONNX Runtime is available. Returns the directory containing the library,
+ * or null if unavailable.
+ *
+ * Resolution order:
+ *   1. Cached in storageDir/onnxruntime/<version>/ (with TOFU verification)
+ *   2. System install (brew, apt, etc.)
+ *   3. Auto-download from GitHub releases (if platform supported)
+ *   4. null (user needs manual install)
+ */
+export declare function ensureOnnxRuntime(storageDir: string): Promise<string | null>;
+/**
+ * Remove ONNX Runtime from temp files. Cleanup helper for test isolation.
+ */
+export declare function cleanupOnnxRuntime(storageDir: string): void;
+//# sourceMappingURL=onnx-runtime.d.ts.map

package/dist/onnx-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onnx-runtime.d.ts","sourceRoot":"","sources":["../src/onnx-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AA6FH,4DAA4D;AAC5D,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,IAAI,MAAM,CAQ7C;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA6ElF;AAqeD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAS3D"}

package/dist/platform.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Shared platform / architecture mappings used by both the resolver and downloader.
+ *
+ * Keeping them here avoids duplication and ensures resolver + downloader always
+ * agree on the canonical platform key strings (e.g. "darwin-arm64").
+ */
+/**
+ * Nested map: `process.platform` → `process.arch` → platform-key string.
+ *
+ * Used by the resolver to turn the current runtime environment into the
+ * canonical key (e.g. `"darwin-arm64"`) that the rest of the system uses.
+ */
+export declare const PLATFORM_ARCH_MAP: Record<string, Record<string, string>>;
+/**
+ * Flat map: platform-key string → GitHub release asset filename.
+ *
+ * Used by the downloader to turn the canonical key into the exact asset name
+ * that appears in the GitHub release (e.g. `"aft-darwin-arm64"`).
+ */
+export declare const PLATFORM_ASSET_MAP: Record<string, string>;
+//# sourceMappingURL=platform.d.ts.map

package/dist/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIpE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAMrD,CAAC"}

package/dist/pool.d.ts

@@ -0,0 +1,66 @@
+import { BinaryBridge, type BridgeOptions } from "./bridge.js";
+export interface PoolOptions extends BridgeOptions {
+    maxPoolSize?: number;
+    idleTimeoutMs?: number;
+}
+/**
+ * Manages a pool of BinaryBridge instances, keyed by **canonical project root**.
+ *
+ * Prior to issue #14, the pool spawned one binary process per OpenCode session,
+ * which duplicated every heavy in-memory structure (ONNX runtime, trigram and
+ * semantic indexes, LSP state, symbol caches) N times for N sessions in the
+ * same project. That produced an effective "leak" the user saw as many aft
+ * processes consuming gigabytes of RAM on large repositories.
+ *
+ * The current design spawns **one bridge per project** and relies on the Rust
+ * side to partition the small amount of truly session-scoped state (undo
+ * history, named checkpoints) via the `session_id` envelope field attached by
+ * the `callBridge()` helper. Sessions sharing a bridge still share the
+ * latency of a single request pipeline; the trade-off is acceptable because
+ * it removes the real RAM multiplier.
+ */
+export declare class BridgePool {
+    /** Project-root → bridge. Key is a normalized canonical path. */
+    private readonly bridges;
+    private binaryPath;
+    private readonly maxPoolSize;
+    private readonly idleTimeoutMs;
+    private readonly bridgeOptions;
+    private readonly configOverrides;
+    private cleanupTimer;
+    constructor(binaryPath: string, options?: PoolOptions, configOverrides?: Record<string, unknown>);
+    /**
+     * Get an alive bridge only when it belongs to the requested project root.
+     *
+     * Used by read-only paths (e.g. `/aft-status`, background-bash drains) that
+     * want to reuse a warm bridge with loaded indexes/LSP state. Returns `null`
+     * when no live bridge exists for `projectRoot`; callers typically fall back
+     * to {@link BridgePool.getBridge} which will create one. Cross-project bridge
+     * sharing is intentionally **not** supported — draining bg-completions or
+     * status from another project's bridge mixes session-isolated state.
+     */
+    getActiveBridgeForRoot(projectRoot: string): BinaryBridge | null;
+    /**
+     * Get or create the bridge for `projectRoot`.
+     *
+     * Callers should always pass a **canonical** project root (see
+     * `projectRootFor()` in `tools/_shared.ts`). All sessions operating on the
+     * same project share one bridge; their undo/checkpoint state is still
+     * isolated by `session_id` on the Rust side.
+     */
+    getBridge(projectRoot: string): BinaryBridge;
+    /** Shut down idle bridges that haven't been used within the timeout. */
+    private cleanup;
+    /** Evict the least recently used bridge to make room. */
+    private evictLRU;
+    /** Shut down all bridges and stop the cleanup timer. */
+    shutdown(): Promise<void>;
+    /**
+     * Replace the binary path and restart all bridges.
+     * Used after downloading a newer binary version.
+     */
+    replaceBinary(newPath: string): Promise<void>;
+    /** Number of active bridges in the pool. */
+    get size(): number;
+}
+//# sourceMappingURL=pool.d.ts.map

package/dist/pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool.d.ts","sourceRoot":"","sources":["../src/pool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAW/D,MAAM,WAAW,WAAY,SAAQ,aAAa;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,UAAU;IACrB,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IACxD,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0B;IAC1D,OAAO,CAAC,YAAY,CAA+C;gBAGjE,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,WAAgB,EACzB,eAAe,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;IAqB/C;;;;;;;;;OASG;IACH,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAQhE;;;;;;;OAOG;IACH,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY;IAmB5C,wEAAwE;IACxE,OAAO,CAAC,OAAO;IAUf,yDAAyD;IACzD,OAAO,CAAC,QAAQ;IAgBhB,wDAAwD;IAClD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAU/B;;;OAGG;IACG,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcnD,4CAA4C;IAC5C,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/protocol.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Wire-protocol types shared between the AFT plugins and the Rust `aft` binary.
+ *
+ * These mirror the structures defined in `crates/aft/src/protocol.rs`.
+ * Tool-specific request/response shapes intentionally stay in plugin code —
+ * this module owns only the envelope and the host-relevant push frames so that
+ * the transport never needs to know about every command schema.
+ */
+export interface AftRequestEnvelope {
+    /** Stable request id, returned in the matching response. */
+    id: string;
+    /** Bridge command name (e.g. `"bash"`, `"read"`). */
+    command: string;
+    /** Optional session id; partitions backup/checkpoint state per-session. */
+    session_id?: string;
+    /** Optional LSP hint payload threaded through edit-time diagnostics. */
+    lsp_hints?: unknown;
+    /** Tool-specific parameters live alongside the envelope at the top level. */
+    [key: string]: unknown;
+}
+export interface AftSuccessResponse {
+    id: string;
+    success: true;
+    /** Tool-specific result fields live on the same object. */
+    [key: string]: unknown;
+}
+export interface AftErrorResponse {
+    id: string;
+    success: false;
+    /** Machine-actionable error code (e.g. `"path_not_found"`). */
+    code?: string;
+    /** Human-readable error message. */
+    message?: string;
+    /** Tool-specific error metadata may be attached. */
+    [key: string]: unknown;
+}
+export type AftResponse = AftSuccessResponse | AftErrorResponse;
+/**
+ * Server-pushed frames (no client-side `id`). The transport recognises these
+ * and dispatches them through {@link BridgeOptions.onPushFrame} rather than
+ * matching them against a pending request.
+ */
+export type AftPushFrame = BashCompletedFrame | PermissionAskFrame | ProgressFrame | ConfigureWarningFrame;
+export interface BashCompletedFrame {
+    type: "bash_completed";
+    task_id: string;
+    status: string;
+    exit_code: number | null;
+    command: string;
+    duration_ms?: number;
+    runtime_ms?: number;
+    runtime?: number;
+    output_preview?: string;
+    output_truncated?: boolean;
+    session_id?: string;
+}
+export interface PermissionAskFrame {
+    type: "permission_ask";
+    request_id: string;
+    prompt: string;
+    options?: string[];
+    session_id?: string;
+}
+export interface ProgressFrame {
+    type: "progress";
+    task_id?: string;
+    message?: string;
+    [key: string]: unknown;
+}
+export interface ConfigureWarningFrame {
+    type: "configure_warning";
+    code?: string;
+    message: string;
+    [key: string]: unknown;
+}
+/**
+ * Background-bash completion record carried in `bash_drain_completions`
+ * responses and `bash_completed` push frames. Plugins consume this through
+ * their own bg-notification machinery.
+ */
+export interface BgCompletion {
+    task_id: string;
+    status: string;
+    exit_code: number | null;
+    command: string;
+    duration_ms?: number;
+    runtime_ms?: number;
+    runtime?: number;
+    /** Tail of stdout+stderr captured at completion (≤300 bytes from Rust). */
+    output_preview?: string;
+    /** True when the captured tail is shorter than the actual output. */
+    output_truncated?: boolean;
+}
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,kBAAkB;IACjC,4DAA4D;IAC5D,EAAE,EAAE,MAAM,CAAC;IACX,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,6EAA6E;IAC7E,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,IAAI,CAAC;IACd,2DAA2D;IAC3D,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,KAAK,CAAC;IACf,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,WAAW,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB,kBAAkB,GAClB,kBAAkB,GAClB,aAAa,GACb,qBAAqB,CAAC;AAE1B,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B"}

package/dist/resolver.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Map the current `process.platform` and `process.arch` to the npm platform
+ * package suffix (e.g. `"darwin-arm64"`, `"linux-x64"`).
+ *
+ * Exported for testability — agents and scripts can call this directly to
+ * verify the platform mapping without running the full resolver.
+ *
+ * @throws {Error} with the exact `process.platform` and `process.arch` values
+ *   when the combination is unsupported.
+ */
+export declare function platformKey(platform?: string, arch?: string): string;
+/**
+ * Locate the `aft` binary synchronously by checking (in order):
+ * 1. Cached binary from previous auto-download (~/.cache/aft/bin/)
+ * 2. npm platform package via `require.resolve(@cortexkit/aft-<platform>/bin/aft)`
+ * 3. PATH lookup via `which aft` (or `where aft` on Windows)
+ * 4. ~/.cargo/bin/aft (Rust cargo install location)
+ *
+ * @param expectedVersion Optional version (without `v` prefix) — when set, the
+ *   versioned cache for that version is checked first. Hosts that ship in
+ *   lock-step with the binary should pass their own package version so a
+ *   freshly downloaded binary is picked up before fallback resolution.
+ * @returns Absolute path to the first binary found, or null if none found.
+ */
+export declare function findBinarySync(expectedVersion?: string): string | null;
+/**
+ * Locate the `aft` binary, with auto-download as a last resort.
+ *
+ * Resolution order:
+ *   1. Cached binary (~/.cache/aft/bin/)
+ *   2. npm platform package (@cortexkit/aft-<platform>)
+ *   3. PATH lookup (which aft)
+ *   4. ~/.cargo/bin/aft
+ *   5. Auto-download from GitHub releases
+ *
+ * Returns the absolute path to the binary.
+ * Throws a descriptive error with install instructions if all sources fail.
+ */
+export declare function findBinary(expectedVersion?: string): Promise<string>;
+//# sourceMappingURL=resolver.d.ts.map

package/dist/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../src/resolver.ts"],"names":[],"mappings":"AAoDA;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,QAAQ,GAAE,MAAyB,EACnC,IAAI,GAAE,MAAqB,GAC1B,MAAM,CAgBR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsDtE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,UAAU,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiC1E"}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@cortexkit/aft-bridge",
+  "version": "0.18.5",
+  "type": "module",
+  "description": "Shared NDJSON bridge transport, binary resolution, and ONNX runtime helpers for AFT agent-host plugins (OpenCode, Pi)",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/cortexkit/aft"
+  },
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "bun build src/index.ts --outfile dist/index.js --target node --format esm --external '@cortexkit/aft-*' && tsc --emitDeclarationOnly",
+    "typecheck": "tsc --noEmit",
+    "test": "bun test",
+    "prepublishOnly": "bun run build"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.8.0"
+  }
+}