@incorta/auth 1.0.0

package/dist/react/index.d.ts

@@ -0,0 +1,81 @@
+import * as react from 'react';
+import { ReactNode } from 'react';
+import { a as IncortaUser } from '../config-B-2cbZDV.js';
+import 'jose';
+
+interface SignInOptions {
+    /** Where to land after login. Defaults to the current URL. */
+    redirectTo?: string;
+}
+interface SignOutOptions {
+    /** Navigate here after the session is cleared. Defaults to staying put. */
+    redirectTo?: string;
+}
+interface IncortaAuthContextValue {
+    /** False until the first session check completes. */
+    isLoaded: boolean;
+    isSignedIn: boolean;
+    user: IncortaUser | null;
+    /** Epoch millis when the session expires, when signed in. */
+    sessionExpiresAt: number | null;
+    /** Sends the browser through Incorta login and back. */
+    signIn: (options?: SignInOptions) => void;
+    signOut: (options?: SignOutOptions) => Promise<void>;
+    /** Re-checks the session against the backend. */
+    refresh: () => Promise<void>;
+    /**
+     * Fetches the raw Incorta access token (requires `exposeAccessToken: true`
+     * on the server). Returns null when signed out or not exposed.
+     */
+    getToken: () => Promise<string | null>;
+}
+interface IncortaAuthProviderProps {
+    children: ReactNode;
+    /** Must match the backend's basePath. @default "/auth" */
+    basePath?: string;
+    /**
+     * Re-check the session every N milliseconds so long-lived tabs keep their
+     * Incorta access token fresh (the backend refreshes it server-side).
+     * Set 0 to disable. @default 300000 (5 minutes)
+     */
+    refetchInterval?: number;
+}
+declare function IncortaAuthProvider({ children, basePath, refetchInterval, }: IncortaAuthProviderProps): react.JSX.Element;
+declare function useIncortaAuth(): IncortaAuthContextValue;
+/** Clerk-style alias of {@link useIncortaAuth}. */
+declare const useAuth: typeof useIncortaAuth;
+/** The signed-in user, or null. */
+declare function useUser(): IncortaUser | null;
+
+/** Renders children only when the user is signed in (after the initial load). */
+declare function SignedIn({ children }: {
+    children: ReactNode;
+}): react.JSX.Element | null;
+/** Renders children only when the user is signed out (after the initial load). */
+declare function SignedOut({ children }: {
+    children: ReactNode;
+}): react.JSX.Element | null;
+/**
+ * Immediately sends the browser through Incorta login. Render it for signed-out
+ * users on protected pages:
+ *
+ * ```tsx
+ * <SignedOut><RedirectToLogin /></SignedOut>
+ * ```
+ */
+declare function RedirectToLogin({ redirectTo }: {
+    redirectTo?: string;
+}): null;
+/**
+ * Gates children behind authentication: shows `loading` during the initial
+ * check, redirects signed-out users through Incorta login (or renders
+ * `fallback` when provided).
+ */
+declare function Protect({ children, fallback, loading, }: {
+    children: ReactNode;
+    /** Rendered for signed-out users instead of redirecting. */
+    fallback?: ReactNode;
+    loading?: ReactNode;
+}): react.JSX.Element;
+
+export { type IncortaAuthContextValue, IncortaAuthProvider, type IncortaAuthProviderProps, IncortaUser, Protect, RedirectToLogin, type SignInOptions, type SignOutOptions, SignedIn, SignedOut, useAuth, useIncortaAuth, useUser };

package/dist/react/index.js

@@ -0,0 +1,153 @@
+// src/react/context.tsx
+import {
+  createContext,
+  useCallback,
+  useContext,
+  useEffect,
+  useMemo,
+  useRef,
+  useState
+} from "react";
+import { jsx } from "react/jsx-runtime";
+var IncortaAuthContext = createContext(null);
+function IncortaAuthProvider({
+  children,
+  basePath = "/auth",
+  refetchInterval = 5 * 60 * 1e3
+}) {
+  const [isLoaded, setIsLoaded] = useState(false);
+  const [user, setUser] = useState(null);
+  const [sessionExpiresAt, setSessionExpiresAt] = useState(null);
+  const mounted = useRef(true);
+  const refresh = useCallback(async () => {
+    try {
+      const response = await fetch(`${basePath}/session`, {
+        headers: { accept: "application/json" }
+      });
+      const body = await response.json();
+      if (!mounted.current) return;
+      setUser(body.user ?? null);
+      setSessionExpiresAt(body.session?.expiresAt ?? null);
+    } catch {
+      if (!mounted.current) return;
+      setUser(null);
+      setSessionExpiresAt(null);
+    } finally {
+      if (mounted.current) setIsLoaded(true);
+    }
+  }, [basePath]);
+  useEffect(() => {
+    mounted.current = true;
+    void refresh();
+    return () => {
+      mounted.current = false;
+    };
+  }, [refresh]);
+  useEffect(() => {
+    if (!refetchInterval) return;
+    const id = setInterval(() => void refresh(), refetchInterval);
+    return () => clearInterval(id);
+  }, [refetchInterval, refresh]);
+  const signIn = useCallback(
+    (options) => {
+      if (typeof window === "undefined") return;
+      const current = `${window.location.pathname}${window.location.search}${window.location.hash}`;
+      const redirectTo = options?.redirectTo ?? current;
+      window.location.assign(
+        `${basePath}/login?redirect_to=${encodeURIComponent(redirectTo)}`
+      );
+    },
+    [basePath]
+  );
+  const signOut = useCallback(
+    async (options) => {
+      try {
+        await fetch(`${basePath}/logout`, { method: "POST" });
+      } finally {
+        setUser(null);
+        setSessionExpiresAt(null);
+        if (options?.redirectTo && typeof window !== "undefined") {
+          window.location.assign(options.redirectTo);
+        }
+      }
+    },
+    [basePath]
+  );
+  const getToken = useCallback(async () => {
+    try {
+      const response = await fetch(`${basePath}/token`, {
+        headers: { accept: "application/json" }
+      });
+      if (!response.ok) return null;
+      const body = await response.json();
+      return body.accessToken ?? null;
+    } catch {
+      return null;
+    }
+  }, [basePath]);
+  const value = useMemo(
+    () => ({
+      isLoaded,
+      isSignedIn: user !== null,
+      user,
+      sessionExpiresAt,
+      signIn,
+      signOut,
+      refresh,
+      getToken
+    }),
+    [isLoaded, user, sessionExpiresAt, signIn, signOut, refresh, getToken]
+  );
+  return /* @__PURE__ */ jsx(IncortaAuthContext.Provider, { value, children });
+}
+function useIncortaAuth() {
+  const context = useContext(IncortaAuthContext);
+  if (!context) {
+    throw new Error("[incorta-auth] useIncortaAuth must be used inside <IncortaAuthProvider>.");
+  }
+  return context;
+}
+var useAuth = useIncortaAuth;
+function useUser() {
+  return useIncortaAuth().user;
+}
+
+// src/react/components.tsx
+import { useEffect as useEffect2 } from "react";
+import { Fragment, jsx as jsx2 } from "react/jsx-runtime";
+function SignedIn({ children }) {
+  const { isLoaded, isSignedIn } = useIncortaAuth();
+  return isLoaded && isSignedIn ? /* @__PURE__ */ jsx2(Fragment, { children }) : null;
+}
+function SignedOut({ children }) {
+  const { isLoaded, isSignedIn } = useIncortaAuth();
+  return isLoaded && !isSignedIn ? /* @__PURE__ */ jsx2(Fragment, { children }) : null;
+}
+function RedirectToLogin({ redirectTo }) {
+  const { signIn } = useIncortaAuth();
+  useEffect2(() => {
+    signIn(redirectTo ? { redirectTo } : void 0);
+  }, [signIn, redirectTo]);
+  return null;
+}
+function Protect({
+  children,
+  fallback,
+  loading = null
+}) {
+  const { isLoaded, isSignedIn } = useIncortaAuth();
+  if (!isLoaded) return /* @__PURE__ */ jsx2(Fragment, { children: loading });
+  if (!isSignedIn) return fallback !== void 0 ? /* @__PURE__ */ jsx2(Fragment, { children: fallback }) : /* @__PURE__ */ jsx2(RedirectToLogin, {});
+  return /* @__PURE__ */ jsx2(Fragment, { children });
+}
+export {
+  IncortaAuthProvider,
+  Protect,
+  RedirectToLogin,
+  SignedIn,
+  SignedOut,
+  useAuth,
+  useIncortaAuth,
+  useUser
+};
+//# sourceMappingURL=index.js.map

package/dist/react/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/react/context.tsx","../../src/react/components.tsx"],"sourcesContent":["import {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n  type ReactNode,\n} from \"react\";\nimport type { IncortaUser } from \"../core/config.js\";\n\nexport interface SignInOptions {\n  /** Where to land after login. Defaults to the current URL. */\n  redirectTo?: string;\n}\n\nexport interface SignOutOptions {\n  /** Navigate here after the session is cleared. Defaults to staying put. */\n  redirectTo?: string;\n}\n\nexport interface IncortaAuthContextValue {\n  /** False until the first session check completes. */\n  isLoaded: boolean;\n  isSignedIn: boolean;\n  user: IncortaUser | null;\n  /** Epoch millis when the session expires, when signed in. */\n  sessionExpiresAt: number | null;\n  /** Sends the browser through Incorta login and back. */\n  signIn: (options?: SignInOptions) => void;\n  signOut: (options?: SignOutOptions) => Promise<void>;\n  /** Re-checks the session against the backend. */\n  refresh: () => Promise<void>;\n  /**\n   * Fetches the raw Incorta access token (requires `exposeAccessToken: true`\n   * on the server). Returns null when signed out or not exposed.\n   */\n  getToken: () => Promise<string | null>;\n}\n\nconst IncortaAuthContext = createContext<IncortaAuthContextValue | null>(null);\n\ninterface SessionResponse {\n  user: IncortaUser | null;\n  session?: { expiresAt: number; accessTokenExpiresAt: number };\n}\n\nexport interface IncortaAuthProviderProps {\n  children: ReactNode;\n  /** Must match the backend's basePath. @default \"/auth\" */\n  basePath?: string;\n  /**\n   * Re-check the session every N milliseconds so long-lived tabs keep their\n   * Incorta access token fresh (the backend refreshes it server-side).\n   * Set 0 to disable. @default 300000 (5 minutes)\n   */\n  refetchInterval?: number;\n}\n\nexport function IncortaAuthProvider({\n  children,\n  basePath = \"/auth\",\n  refetchInterval = 5 * 60 * 1000,\n}: IncortaAuthProviderProps) {\n  const [isLoaded, setIsLoaded] = useState(false);\n  const [user, setUser] = useState<IncortaUser | null>(null);\n  const [sessionExpiresAt, setSessionExpiresAt] = useState<number | null>(null);\n  const mounted = useRef(true);\n\n  const refresh = useCallback(async () => {\n    try {\n      const response = await fetch(`${basePath}/session`, {\n        headers: { accept: \"application/json\" },\n      });\n      const body = (await response.json()) as SessionResponse;\n      if (!mounted.current) return;\n      setUser(body.user ?? null);\n      setSessionExpiresAt(body.session?.expiresAt ?? null);\n    } catch {\n      if (!mounted.current) return;\n      setUser(null);\n      setSessionExpiresAt(null);\n    } finally {\n      if (mounted.current) setIsLoaded(true);\n    }\n  }, [basePath]);\n\n  useEffect(() => {\n    mounted.current = true;\n    void refresh();\n    return () => {\n      mounted.current = false;\n    };\n  }, [refresh]);\n\n  useEffect(() => {\n    if (!refetchInterval) return;\n    const id = setInterval(() => void refresh(), refetchInterval);\n    return () => clearInterval(id);\n  }, [refetchInterval, refresh]);\n\n  const signIn = useCallback(\n    (options?: SignInOptions) => {\n      if (typeof window === \"undefined\") return;\n      const current = `${window.location.pathname}${window.location.search}${window.location.hash}`;\n      const redirectTo = options?.redirectTo ?? current;\n      window.location.assign(\n        `${basePath}/login?redirect_to=${encodeURIComponent(redirectTo)}`,\n      );\n    },\n    [basePath],\n  );\n\n  const signOut = useCallback(\n    async (options?: SignOutOptions) => {\n      try {\n        await fetch(`${basePath}/logout`, { method: \"POST\" });\n      } finally {\n        setUser(null);\n        setSessionExpiresAt(null);\n        if (options?.redirectTo && typeof window !== \"undefined\") {\n          window.location.assign(options.redirectTo);\n        }\n      }\n    },\n    [basePath],\n  );\n\n  const getToken = useCallback(async () => {\n    try {\n      const response = await fetch(`${basePath}/token`, {\n        headers: { accept: \"application/json\" },\n      });\n      if (!response.ok) return null;\n      const body = (await response.json()) as { accessToken?: string };\n      return body.accessToken ?? null;\n    } catch {\n      return null;\n    }\n  }, [basePath]);\n\n  const value = useMemo<IncortaAuthContextValue>(\n    () => ({\n      isLoaded,\n      isSignedIn: user !== null,\n      user,\n      sessionExpiresAt,\n      signIn,\n      signOut,\n      refresh,\n      getToken,\n    }),\n    [isLoaded, user, sessionExpiresAt, signIn, signOut, refresh, getToken],\n  );\n\n  return <IncortaAuthContext.Provider value={value}>{children}</IncortaAuthContext.Provider>;\n}\n\nexport function useIncortaAuth(): IncortaAuthContextValue {\n  const context = useContext(IncortaAuthContext);\n  if (!context) {\n    throw new Error(\"[incorta-auth] useIncortaAuth must be used inside <IncortaAuthProvider>.\");\n  }\n  return context;\n}\n\n/** Clerk-style alias of {@link useIncortaAuth}. */\nexport const useAuth = useIncortaAuth;\n\n/** The signed-in user, or null. */\nexport function useUser(): IncortaUser | null {\n  return useIncortaAuth().user;\n}\n","import { useEffect, type ReactNode } from \"react\";\nimport { useIncortaAuth } from \"./context.js\";\n\n/** Renders children only when the user is signed in (after the initial load). */\nexport function SignedIn({ children }: { children: ReactNode }) {\n  const { isLoaded, isSignedIn } = useIncortaAuth();\n  return isLoaded && isSignedIn ? <>{children}</> : null;\n}\n\n/** Renders children only when the user is signed out (after the initial load). */\nexport function SignedOut({ children }: { children: ReactNode }) {\n  const { isLoaded, isSignedIn } = useIncortaAuth();\n  return isLoaded && !isSignedIn ? <>{children}</> : null;\n}\n\n/**\n * Immediately sends the browser through Incorta login. Render it for signed-out\n * users on protected pages:\n *\n * ```tsx\n * <SignedOut><RedirectToLogin /></SignedOut>\n * ```\n */\nexport function RedirectToLogin({ redirectTo }: { redirectTo?: string }) {\n  const { signIn } = useIncortaAuth();\n  useEffect(() => {\n    signIn(redirectTo ? { redirectTo } : undefined);\n  }, [signIn, redirectTo]);\n  return null;\n}\n\n/**\n * Gates children behind authentication: shows `loading` during the initial\n * check, redirects signed-out users through Incorta login (or renders\n * `fallback` when provided).\n */\nexport function Protect({\n  children,\n  fallback,\n  loading = null,\n}: {\n  children: ReactNode;\n  /** Rendered for signed-out users instead of redirecting. */\n  fallback?: ReactNode;\n  loading?: ReactNode;\n}) {\n  const { isLoaded, isSignedIn } = useIncortaAuth();\n  if (!isLoaded) return <>{loading}</>;\n  if (!isSignedIn) return fallback !== undefined ? <>{fallback}</> : <RedirectToLogin />;\n  return <>{children}</>;\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAmJE;AAnHT,IAAM,qBAAqB,cAA8C,IAAI;AAmBtE,SAAS,oBAAoB;AAAA,EAClC;AAAA,EACA,WAAW;AAAA,EACX,kBAAkB,IAAI,KAAK;AAC7B,GAA6B;AAC3B,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAC9C,QAAM,CAAC,MAAM,OAAO,IAAI,SAA6B,IAAI;AACzD,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,SAAwB,IAAI;AAC5E,QAAM,UAAU,OAAO,IAAI;AAE3B,QAAM,UAAU,YAAY,YAAY;AACtC,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG,QAAQ,YAAY;AAAA,QAClD,SAAS,EAAE,QAAQ,mBAAmB;AAAA,MACxC,CAAC;AACD,YAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,UAAI,CAAC,QAAQ,QAAS;AACtB,cAAQ,KAAK,QAAQ,IAAI;AACzB,0BAAoB,KAAK,SAAS,aAAa,IAAI;AAAA,IACrD,QAAQ;AACN,UAAI,CAAC,QAAQ,QAAS;AACtB,cAAQ,IAAI;AACZ,0BAAoB,IAAI;AAAA,IAC1B,UAAE;AACA,UAAI,QAAQ,QAAS,aAAY,IAAI;AAAA,IACvC;AAAA,EACF,GAAG,CAAC,QAAQ,CAAC;AAEb,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,SAAK,QAAQ;AACb,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,OAAO,CAAC;AAEZ,YAAU,MAAM;AACd,QAAI,CAAC,gBAAiB;AACtB,UAAM,KAAK,YAAY,MAAM,KAAK,QAAQ,GAAG,eAAe;AAC5D,WAAO,MAAM,cAAc,EAAE;AAAA,EAC/B,GAAG,CAAC,iBAAiB,OAAO,CAAC;AAE7B,QAAM,SAAS;AAAA,IACb,CAAC,YAA4B;AAC3B,UAAI,OAAO,WAAW,YAAa;AACnC,YAAM,UAAU,GAAG,OAAO,SAAS,QAAQ,GAAG,OAAO,SAAS,MAAM,GAAG,OAAO,SAAS,IAAI;AAC3F,YAAM,aAAa,SAAS,cAAc;AAC1C,aAAO,SAAS;AAAA,QACd,GAAG,QAAQ,sBAAsB,mBAAmB,UAAU,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,UAAU;AAAA,IACd,OAAO,YAA6B;AAClC,UAAI;AACF,cAAM,MAAM,GAAG,QAAQ,WAAW,EAAE,QAAQ,OAAO,CAAC;AAAA,MACtD,UAAE;AACA,gBAAQ,IAAI;AACZ,4BAAoB,IAAI;AACxB,YAAI,SAAS,cAAc,OAAO,WAAW,aAAa;AACxD,iBAAO,SAAS,OAAO,QAAQ,UAAU;AAAA,QAC3C;AAAA,MACF;AAAA,IACF;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,WAAW,YAAY,YAAY;AACvC,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG,QAAQ,UAAU;AAAA,QAChD,SAAS,EAAE,QAAQ,mBAAmB;AAAA,MACxC,CAAC;AACD,UAAI,CAAC,SAAS,GAAI,QAAO;AACzB,YAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,aAAO,KAAK,eAAe;AAAA,IAC7B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,QAAQ;AAAA,IACZ,OAAO;AAAA,MACL;AAAA,MACA,YAAY,SAAS;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,UAAU,MAAM,kBAAkB,QAAQ,SAAS,SAAS,QAAQ;AAAA,EACvE;AAEA,SAAO,oBAAC,mBAAmB,UAAnB,EAA4B,OAAe,UAAS;AAC9D;AAEO,SAAS,iBAA0C;AACxD,QAAM,UAAU,WAAW,kBAAkB;AAC7C,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AACA,SAAO;AACT;AAGO,IAAM,UAAU;AAGhB,SAAS,UAA8B;AAC5C,SAAO,eAAe,EAAE;AAC1B;;;AC7KA,SAAS,aAAAA,kBAAiC;AAMR,0BAAAC,YAAA;AAF3B,SAAS,SAAS,EAAE,SAAS,GAA4B;AAC9D,QAAM,EAAE,UAAU,WAAW,IAAI,eAAe;AAChD,SAAO,YAAY,aAAa,gBAAAA,KAAA,YAAG,UAAS,IAAM;AACpD;AAGO,SAAS,UAAU,EAAE,SAAS,GAA4B;AAC/D,QAAM,EAAE,UAAU,WAAW,IAAI,eAAe;AAChD,SAAO,YAAY,CAAC,aAAa,gBAAAA,KAAA,YAAG,UAAS,IAAM;AACrD;AAUO,SAAS,gBAAgB,EAAE,WAAW,GAA4B;AACvE,QAAM,EAAE,OAAO,IAAI,eAAe;AAClC,EAAAC,WAAU,MAAM;AACd,WAAO,aAAa,EAAE,WAAW,IAAI,MAAS;AAAA,EAChD,GAAG,CAAC,QAAQ,UAAU,CAAC;AACvB,SAAO;AACT;AAOO,SAAS,QAAQ;AAAA,EACtB;AAAA,EACA;AAAA,EACA,UAAU;AACZ,GAKG;AACD,QAAM,EAAE,UAAU,WAAW,IAAI,eAAe;AAChD,MAAI,CAAC,SAAU,QAAO,gBAAAD,KAAA,YAAG,mBAAQ;AACjC,MAAI,CAAC,WAAY,QAAO,aAAa,SAAY,gBAAAA,KAAA,YAAG,oBAAS,IAAM,gBAAAA,KAAC,mBAAgB;AACpF,SAAO,gBAAAA,KAAA,YAAG,UAAS;AACrB;","names":["useEffect","jsx","useEffect"]}

package/package.json

@@ -0,0 +1,73 @@
+{
+  "name": "@incorta/auth",
+  "version": "1.0.0",
+  "description": "Authenticate Incorta users in any Node.js app — OAuth 2.0/OIDC against Incorta's built-in authorization server, with a React provider and Express/TanStack Start integrations.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Incorta/IncortaAuthSDK.git",
+    "directory": "packages/auth"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./react": {
+      "types": "./dist/react/index.d.ts",
+      "import": "./dist/react/index.js",
+      "require": "./dist/react/index.cjs"
+    },
+    "./express": {
+      "types": "./dist/express.d.ts",
+      "import": "./dist/express.js",
+      "require": "./dist/express.cjs"
+    },
+    "./node": {
+      "types": "./dist/node.d.ts",
+      "import": "./dist/node.js",
+      "require": "./dist/node.cjs"
+    }
+  },
+  "bin": {
+    "incorta-auth": "dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "prepack": "pnpm build"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "jose": "^6.0.11"
+  },
+  "peerDependencies": {
+    "react": ">=18"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@types/node": "^22.16.5",
+    "@types/react": "^19.2.0",
+    "react": "^19.2.0",
+    "tsup": "^8.5.0",
+    "typescript": "^5.8.3",
+    "vitest": "^3.2.4"
+  }
+}