@edge-sky/dsh-oauth-adapter 0.1.1-rc.10

package/lib/protocol.js

@@ -0,0 +1,83 @@
+/** Shared browser/Host wire vocabulary for the OAuth account surface. */
+export const OAUTH_SOCKET_PATH = '/_edge-sky/dsh-oauth';
+export const OAUTH_SOCKET_PROTOCOL = 'dsh-oauth-v1';
+export const MAX_FRAME_BYTES = 16 * 1024;
+export const MAX_ANSWER_LENGTH = 8 * 1024;
+export const PROVIDERS = [
+    {
+        id: 'openai-codex', key: 'llm-pi-ai/openai-codex', fallbackLabel: 'OpenAI Codex',
+        modelGroupLabel: 'OpenAI Codex (OAuth)',
+    },
+    {
+        id: 'github-copilot', key: 'llm-pi-ai/github-copilot', fallbackLabel: 'GitHub Copilot',
+        modelGroupLabel: 'GitHub Copilot (OAuth)',
+    },
+];
+const ID_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function exactKeys(value, expected) {
+    const actual = Object.keys(value).sort();
+    const sortedExpected = [...expected].sort();
+    return actual.length === sortedExpected.length && actual.every((key, index) => key === sortedExpected[index]);
+}
+function isId(value) {
+    return typeof value === 'string' && ID_PATTERN.test(value);
+}
+export function isProviderId(value) {
+    return PROVIDERS.some(provider => provider.id === value);
+}
+/** Parse one untrusted browser frame without retaining its raw text. */
+export function parseClientCommand(raw) {
+    let candidate;
+    try {
+        candidate = JSON.parse(raw);
+    }
+    catch {
+        return { ok: false, message: 'message is not valid JSON' };
+    }
+    if (!isRecord(candidate) || typeof candidate.type !== 'string') {
+        return { ok: false, message: 'message must be an object with a type' };
+    }
+    const requestId = isId(candidate.requestId) ? candidate.requestId : undefined;
+    if (requestId === undefined)
+        return { ok: false, message: 'requestId is invalid' };
+    switch (candidate.type) {
+        case 'refresh':
+            return exactKeys(candidate, ['requestId', 'type'])
+                ? { ok: true, value: { type: 'refresh', requestId } }
+                : { ok: false, requestId, message: 'refresh contains unknown fields' };
+        case 'begin':
+        case 'forget': {
+            if (!exactKeys(candidate, ['provider', 'requestId', 'type'])) {
+                return { ok: false, requestId, message: `${candidate.type} contains unknown fields` };
+            }
+            if (!isProviderId(candidate.provider)) {
+                return { ok: false, requestId, message: 'provider is unsupported' };
+            }
+            return { ok: true, value: { type: candidate.type, requestId, provider: candidate.provider } };
+        }
+        case 'cancel':
+            if (!exactKeys(candidate, ['attemptId', 'requestId', 'type']) || !isId(candidate.attemptId)) {
+                return { ok: false, requestId, message: 'cancel fields are invalid' };
+            }
+            return { ok: true, value: { type: 'cancel', requestId, attemptId: candidate.attemptId } };
+        case 'respond':
+            if (!exactKeys(candidate, ['attemptId', 'promptId', 'requestId', 'type', 'value'])
+                || !isId(candidate.attemptId) || !isId(candidate.promptId)
+                || typeof candidate.value !== 'string' || candidate.value.length > MAX_ANSWER_LENGTH) {
+                return { ok: false, requestId, message: 'respond fields are invalid' };
+            }
+            return {
+                ok: true,
+                value: {
+                    type: 'respond', requestId, attemptId: candidate.attemptId,
+                    promptId: candidate.promptId, value: candidate.value,
+                },
+            };
+        default:
+            return { ok: false, requestId, message: 'message type is unsupported' };
+    }
+}
+//# sourceMappingURL=protocol.js.map

package/lib/types/client/OAuthAccountsSection.d.ts

@@ -0,0 +1,12 @@
+/** OAuth account settings page. */
+import type { InjectFace } from '@deepseek-ai/dsh-client-ui-slots';
+import type { OAuthLocaleKey } from './locales.js';
+import type { OAuthAccountsController } from './store.js';
+export interface OAuthAccountsInjected {
+    controller: OAuthAccountsController;
+    t: (key: OAuthLocaleKey) => string;
+}
+export type OAuthAccountsSectionProps = Partial<InjectFace<OAuthAccountsInjected>>;
+/** Render the standalone OAuth Accounts settings section. */
+export declare function OAuthAccountsSection(props: OAuthAccountsSectionProps): JSX.Element | null;
+//# sourceMappingURL=OAuthAccountsSection.d.ts.map

package/lib/types/client/index.d.ts

@@ -0,0 +1,16 @@
+/** Browser half of the standalone DSH OAuth Accounts page. */
+import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
+import { type OAuthLocaleKey } from './locales.js';
+export { OAuthAccountsSection } from './OAuthAccountsSection.js';
+export { OAuthAccountsController } from './store.js';
+export type { OAuthAccountsSnapshot, AttemptView } from './store.js';
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+    interface LocaleNamespaceMap {
+        'settings.oauth-accounts': OAuthLocaleKey;
+    }
+}
+/** Required browser services for settings placement and localized copy. */
+export declare const inject: string[];
+/** Register the OAuth account page and its app-lifetime connection controller. */
+export declare function apply(ctx: ClientContext): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/client/locales.d.ts

@@ -0,0 +1,36 @@
+/** English copy for the OAuth accounts page. */
+export declare const en: {
+    readonly nav: "OAuth Accounts";
+    readonly title: "OAuth Accounts";
+    readonly intro: "Connect subscription-backed providers. Their models appear in separate OAuth groups, apart from API-key providers.";
+    readonly ready: "Connected · Models ready";
+    readonly connectedNoModels: "Connected · Model route unavailable";
+    readonly disconnected: "Not connected";
+    readonly authorizing: "Sign-in in progress";
+    readonly unavailable: "OAuth is unavailable in this DSH installation.";
+    readonly connect: "Connect";
+    readonly reconnect: "Reconnect";
+    readonly cancel: "Cancel";
+    readonly forget: "Sign out";
+    readonly retry: "Retry connection";
+    readonly starting: "Preparing a secure sign-in session…";
+    readonly awaitingAction: "Action required to continue sign-in.";
+    readonly waitingProvider: "Waiting for the provider to complete sign-in…";
+    readonly authorized: "Sign-in completed.";
+    readonly cancelled: "Sign-in was cancelled.";
+    readonly failed: "Sign-in failed.";
+    readonly technicalDetails: "Technical details";
+    readonly submit: "Continue";
+    readonly copy: "Copy code";
+    readonly copied: "Copied";
+    readonly openLink: "Open authorization page";
+    readonly externalLink: "External provider page";
+    readonly githubDomainPrompt: "GitHub Enterprise domain";
+    readonly githubDomainHint: "Leave blank to use github.com.";
+    readonly loading: "Loading account status…";
+    readonly hostDisconnected: "The OAuth connection to DSH was interrupted.";
+};
+/** Simplified Chinese copy for the OAuth accounts page. */
+export declare const zh: Record<keyof typeof en, string>;
+export type OAuthLocaleKey = keyof typeof en;
+//# sourceMappingURL=locales.d.ts.map

package/lib/types/client/store.d.ts

@@ -0,0 +1,58 @@
+/** Browser state machine for the plugin-owned OAuth WebSocket. */
+import type { AccountView, PromptView, ProviderId, ServerMessage } from '../protocol.js';
+export interface NoticeView {
+    message: string;
+    url?: string;
+    code?: string;
+}
+export interface ActivePromptView {
+    id: string;
+    prompt: PromptView;
+}
+export interface AttemptView {
+    id?: string;
+    provider: ProviderId;
+    phase: 'starting' | 'running' | 'authorized' | 'cancelled' | 'failed';
+    notice?: NoticeView;
+    prompt?: ActivePromptView;
+    error?: string;
+    errorDetail?: string;
+}
+export interface OAuthAccountsSnapshot {
+    connection: 'connecting' | 'open' | 'reconnecting' | 'closed';
+    accounts: readonly AccountView[];
+    attempt?: AttemptView;
+    error?: string;
+    errorDetail?: string;
+}
+type Listener = () => void;
+/** Remove interaction-only content once an authorization attempt settles. */
+export declare function settleAttemptView(attempt: AttemptView, status: Extract<ServerMessage, {
+    type: 'settled';
+}>['status']): AttemptView;
+/** Hide a successful attempt after the account snapshot confirms its model route. */
+export declare function reconcileAttemptView(attempt: AttemptView | undefined, accounts: readonly AccountView[]): AttemptView | undefined;
+/** App-lifetime controller; reconnects without persisting provider messages or answers. */
+export declare class OAuthAccountsController {
+    private snapshot;
+    private readonly listeners;
+    private socket;
+    private reconnectTimer;
+    private reconnectDelay;
+    private disposed;
+    constructor();
+    readonly subscribe: (listener: Listener) => (() => void);
+    readonly getSnapshot: () => OAuthAccountsSnapshot;
+    begin(provider: ProviderId): void;
+    respond(attemptId: string, promptId: string, value: string): void;
+    cancel(attemptId: string): void;
+    forget(provider: ProviderId): void;
+    retry(): void;
+    dispose(): void;
+    private connect;
+    private send;
+    private receive;
+    private update;
+}
+export {};
+//# sourceMappingURL=store.d.ts.map

package/lib/types/client/styles.d.ts

@@ -0,0 +1,3 @@
+/** Plugin-owned styles, injected and removed with the browser Cordis fiber. */
+export declare const styles = "\n.dsh-oauth-section{display:flex;flex-direction:column;gap:12px;max-width:720px;color:var(--dsw-alias-label-primary)}\n.dsh-oauth-title{margin:0;font-size:16px;line-height:24px;font-weight:500}\n.dsh-oauth-intro,.dsh-oauth-muted{margin:0;font-size:13px;line-height:20px;color:var(--dsw-alias-label-tertiary)}\n.dsh-oauth-error{display:flex;flex-direction:column;gap:6px;margin:0;padding:8px 10px;border-radius:8px;background:var(--dsw-alias-interactive-bg-hover-danger);color:var(--dsw-alias-state-error-primary);font-size:12px;line-height:18px}.dsh-oauth-error p{margin:0}.dsh-oauth-error pre{box-sizing:border-box;max-width:100%;max-height:320px;margin:0;padding:8px;border:1px solid var(--dsw-alias-border-l2);border-radius:6px;overflow:auto;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-primary);font:11px/17px ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;white-space:pre-wrap;overflow-wrap:anywhere}.dsh-oauth-error-details summary{cursor:pointer;color:var(--dsw-alias-label-secondary);user-select:none}.dsh-oauth-error-details[open] summary{margin-bottom:6px}\n.dsh-oauth-list{display:flex;flex-direction:column;gap:8px;margin:4px 0 0;padding:0;list-style:none}\n.dsh-oauth-card{display:flex;flex-direction:column;gap:10px;padding:12px 14px;border:1px solid var(--dsw-alias-border-l2);border-radius:12px}\n.dsh-oauth-head{display:flex;align-items:center;gap:8px;flex-wrap:wrap}.dsh-oauth-name{font-size:14px;font-weight:500}.dsh-oauth-state{display:inline-flex;align-items:center;gap:6px;padding:3px 8px;border-radius:999px;background:var(--dsw-alias-interactive-bg-hover);font-size:12px;color:var(--dsw-alias-label-secondary)}\n.dsh-oauth-dot{width:7px;height:7px;border-radius:50%;background:var(--dsw-alias-label-tertiary)}.dsh-oauth-state[data-state=ready] .dsh-oauth-dot{background:var(--dsw-alias-state-success-primary)}.dsh-oauth-state[data-state=warning] .dsh-oauth-dot{background:var(--dsw-alias-state-error-primary)}.dsh-oauth-state[data-state=authorizing] .dsh-oauth-dot{background:var(--dsw-alias-button-info-fill)}\n.dsh-oauth-actions{display:flex;gap:6px;margin-left:auto}.dsh-oauth-button{box-sizing:border-box;display:inline-flex;align-items:center;justify-content:center;min-height:30px;padding:0 12px;border:1px solid var(--dsw-alias-border-l2);border-radius:15px;background:transparent;color:var(--dsw-alias-label-primary);font:inherit;font-size:12px;line-height:18px;cursor:pointer}.dsh-oauth-button[data-variant=primary]{border-color:transparent;background:var(--dsw-alias-button-primary-fill);color:var(--dsw-alias-label-primary-foreground)}.dsh-oauth-button[data-variant=danger]{border-color:transparent;color:var(--dsw-alias-state-error-primary)}.dsh-oauth-button:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover-solid)}.dsh-oauth-button[data-variant=primary]:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover);color:var(--dsw-alias-label-primary-foreground)}.dsh-oauth-button[data-variant=danger]:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover-danger)}.dsh-oauth-button:focus-visible{outline:none;box-shadow:0 0 0 2px var(--dsw-alias-border-l3)}.dsh-oauth-button:disabled{cursor:not-allowed;opacity:.4}\n.dsh-oauth-flow{display:flex;flex-direction:column;gap:8px;padding-top:10px;border-top:1px solid var(--dsw-alias-border-l3);font-size:13px;line-height:20px}.dsh-oauth-link{display:grid;grid-template-columns:minmax(0,1fr) auto auto;align-items:center;gap:8px;padding:9px 10px;border:1px solid var(--dsw-alias-border-l2);border-radius:9px;background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary);text-decoration:none}.dsh-oauth-link:hover{background:var(--dsw-alias-interactive-bg-hover-solid)}.dsh-oauth-link-label{font-weight:500}.dsh-oauth-link-host{max-width:240px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:var(--dsw-alias-label-tertiary);font-size:12px}.dsh-oauth-link-icon{color:var(--dsw-alias-brand-text)}.dsh-oauth-code{display:flex;align-items:center;gap:8px}.dsh-oauth-code code{padding:5px 8px;border-radius:6px;background:var(--dsw-alias-bg-module-platform);font-size:14px;letter-spacing:.08em}\n.dsh-oauth-prompt{display:flex;flex-direction:column;gap:7px}.dsh-oauth-input,.dsh-oauth-select{box-sizing:border-box;width:100%;height:34px;padding:0 10px;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-primary)}\n";
+//# sourceMappingURL=styles.d.ts.map

package/lib/types/protocol.d.ts

@@ -0,0 +1,121 @@
+/** Shared browser/Host wire vocabulary for the OAuth account surface. */
+export declare const OAUTH_SOCKET_PATH = "/_edge-sky/dsh-oauth";
+export declare const OAUTH_SOCKET_PROTOCOL = "dsh-oauth-v1";
+export declare const MAX_FRAME_BYTES: number;
+export declare const MAX_ANSWER_LENGTH: number;
+export declare const PROVIDERS: readonly [{
+    readonly id: "openai-codex";
+    readonly key: "llm-pi-ai/openai-codex";
+    readonly fallbackLabel: "OpenAI Codex";
+    readonly modelGroupLabel: "OpenAI Codex (OAuth)";
+}, {
+    readonly id: "github-copilot";
+    readonly key: "llm-pi-ai/github-copilot";
+    readonly fallbackLabel: "GitHub Copilot";
+    readonly modelGroupLabel: "GitHub Copilot (OAuth)";
+}];
+export type ProviderId = (typeof PROVIDERS)[number]['id'];
+export interface AccountView {
+    provider: ProviderId;
+    label: string;
+    available: boolean;
+    configured: boolean;
+    /** Whether llm-pi-ai currently exposes this OAuth provider as a model route. */
+    modelsEnabled: boolean;
+    writable: boolean;
+    inFlight: boolean;
+}
+export type PromptView = {
+    kind: 'text';
+    message: string;
+    placeholder?: string;
+    /** Whether an empty response has provider-defined meaning. */
+    allowEmpty?: boolean;
+} | {
+    kind: 'secret';
+    message: string;
+    placeholder?: string;
+} | {
+    kind: 'select';
+    message: string;
+    options: readonly {
+        id: string;
+        label: string;
+        description?: string;
+    }[];
+};
+export type ClientCommand = {
+    type: 'refresh';
+    requestId: string;
+} | {
+    type: 'begin';
+    requestId: string;
+    provider: ProviderId;
+} | {
+    type: 'respond';
+    requestId: string;
+    attemptId: string;
+    promptId: string;
+    value: string;
+} | {
+    type: 'cancel';
+    requestId: string;
+    attemptId: string;
+} | {
+    type: 'forget';
+    requestId: string;
+    provider: ProviderId;
+};
+export type OAuthErrorCode = 'invalid-message' | 'unsupported-provider' | 'authorization-unavailable' | 'busy' | 'invalid-attempt' | 'invalid-prompt' | 'credential-read-only' | 'model-route-unavailable' | 'sign-in-failed' | 'operation-failed';
+export type ServerMessage = {
+    type: 'snapshot';
+    requestId?: string;
+    accounts: readonly AccountView[];
+} | {
+    type: 'started';
+    requestId: string;
+    attemptId: string;
+    provider: ProviderId;
+} | {
+    type: 'notice';
+    attemptId: string;
+    message: string;
+    url?: string;
+    code?: string;
+} | {
+    type: 'prompt';
+    attemptId: string;
+    promptId: string;
+    prompt: PromptView;
+} | {
+    type: 'prompt-withdrawn';
+    attemptId: string;
+    promptId: string;
+} | {
+    type: 'settled';
+    attemptId: string;
+    status: 'authorized' | 'cancelled' | 'failed';
+} | {
+    type: 'ack';
+    requestId: string;
+} | {
+    type: 'error';
+    requestId?: string;
+    attemptId?: string;
+    code: OAuthErrorCode;
+    message: string;
+    /** Bounded, credential-redacted Host diagnostic for optional UI expansion. */
+    detail?: string;
+};
+export type CommandParseResult = {
+    ok: true;
+    value: ClientCommand;
+} | {
+    ok: false;
+    requestId?: string;
+    message: string;
+};
+export declare function isProviderId(value: unknown): value is ProviderId;
+/** Parse one untrusted browser frame without retaining its raw text. */
+export declare function parseClientCommand(raw: string): CommandParseResult;
+//# sourceMappingURL=protocol.d.ts.map

package/package.json

@@ -0,0 +1,147 @@
+{
+  "name": "@edge-sky/dsh-oauth-adapter",
+  "description": "Web OAuth account surface for official DSH authorization flows",
+  "version": "0.1.1-rc.10",
+  "author": {
+    "name": "edge-sky",
+    "url": "https://github.com/edge-sky"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/edge-sky/dsh-oauth.git"
+  },
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./invariant": {
+      "types": "./lib/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./authorization-fallback": {
+      "types": "./lib/authorization-fallback.d.ts",
+      "default": "./lib/authorization-fallback.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "cordis.patch.yml",
+    "lib/**/*.js",
+    "lib/**/*.d.ts"
+  ],
+  "license": "MIT",
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-locale"
+      ],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": ">=4.0.1",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-runtime": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-invariants": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-settings": ">=0.1.1-rc.2",
+    "react": ">=18.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-locale": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-runtime": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-settings": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-slots": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-credentials": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-host-webserver": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-invariants": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm-pi-ai": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-settings": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "@deepseek-ai/dsh-authorization": ">=0.1.1-rc.2",
+    "@deepseek-ai/schemastery": "^3.18.1",
+    "ws": "^8.18.3"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-client-locale": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-invariants": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
+    "@types/node": "^22.20.0",
+    "@types/react": "~18.3.1",
+    "@types/react-dom": "~18.3.1",
+    "@types/ws": "^8.18.1",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0",
+    "tsdown": "^0.22.2",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.8"
+  },
+  "scripts": {
+    "build": "tsdown && pnpm run build:host && pnpm run build:client:types",
+    "build:host": "tsc -p tsconfig.json",
+    "build:client:types": "tsc -p tsconfig.client.json",
+    "test": "pnpm run build && vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit"
+  }
+}