@maronn-openid-connect/core 0.0.1

package/dist/userinfo.js

@@ -0,0 +1,188 @@
+import { sign, arrayBufferToBase64Url, stringToArrayBuffer, getJwaAlgorithm } from './crypto-utils.js';
+import { sanitizeErrorDescription } from './error-utils.js';
+export var UserInfoErrorCode;
+(function (UserInfoErrorCode) {
+    UserInfoErrorCode["InvalidToken"] = "invalid_token";
+    UserInfoErrorCode["InsufficientScope"] = "insufficient_scope";
+})(UserInfoErrorCode || (UserInfoErrorCode = {}));
+export class UserInfoError extends Error {
+    error;
+    errorDescription;
+    constructor(error, errorDescription) {
+        const sanitized = sanitizeErrorDescription(errorDescription);
+        super(sanitized);
+        this.name = 'UserInfoError';
+        this.error = error;
+        this.errorDescription = sanitized;
+    }
+    get statusCode() {
+        return this.error === UserInfoErrorCode.InvalidToken ? 401 : 403;
+    }
+}
+export const SCOPE_CLAIMS_MAP = {
+    profile: [
+        'name',
+        'family_name',
+        'given_name',
+        'middle_name',
+        'nickname',
+        'preferred_username',
+        'profile',
+        'picture',
+        'website',
+        'gender',
+        'birthdate',
+        'zoneinfo',
+        'locale',
+        'updated_at',
+    ],
+    email: ['email', 'email_verified'],
+    address: ['address'],
+    phone: ['phone_number', 'phone_number_verified'],
+};
+export function filterClaimsByScope(userClaims, scopes) {
+    const result = { sub: userClaims.sub };
+    for (const scope of scopes) {
+        const claimNames = SCOPE_CLAIMS_MAP[scope];
+        if (!claimNames)
+            continue;
+        for (const claimName of claimNames) {
+            const value = userClaims[claimName];
+            if (value !== undefined && value !== null) {
+                result[claimName] = value;
+            }
+        }
+    }
+    return result;
+}
+function getRequestedClaimNames(claimsParameter) {
+    if (!claimsParameter?.userinfo)
+        return [];
+    return Object.keys(claimsParameter.userinfo);
+}
+function deepEqual(a, b) {
+    if (a === b)
+        return true;
+    if (typeof a === 'number' && typeof b === 'number') {
+        return Number.isNaN(a) && Number.isNaN(b);
+    }
+    if (typeof a !== 'object' || typeof b !== 'object' || a === null || b === null) {
+        return false;
+    }
+    const aIsArray = Array.isArray(a);
+    const bIsArray = Array.isArray(b);
+    if (aIsArray !== bIsArray)
+        return false;
+    if (aIsArray && bIsArray) {
+        if (a.length !== b.length)
+            return false;
+        return a.every((item, index) => deepEqual(item, b[index]));
+    }
+    const aObj = a;
+    const bObj = b;
+    const aKeys = Object.keys(aObj);
+    const bKeys = Object.keys(bObj);
+    if (aKeys.length !== bKeys.length)
+        return false;
+    return aKeys.every((key) => Object.prototype.hasOwnProperty.call(bObj, key) &&
+        deepEqual(aObj[key], bObj[key]));
+}
+function matchesRequestedValue(actual, entry) {
+    if (entry === null)
+        return true;
+    if (entry.value !== undefined) {
+        return deepEqual(actual, entry.value);
+    }
+    if (Array.isArray(entry.values)) {
+        return entry.values.some((candidate) => deepEqual(actual, candidate));
+    }
+    return true;
+}
+export async function resolveUserInfoAccessToken(accessToken, accessTokenResolver) {
+    if (!accessToken) {
+        throw new UserInfoError(UserInfoErrorCode.InvalidToken, 'Access token is required');
+    }
+    const tokenInfo = await accessTokenResolver.findAccessToken(accessToken);
+    if (!tokenInfo) {
+        throw new UserInfoError(UserInfoErrorCode.InvalidToken, 'Access token is invalid');
+    }
+    return tokenInfo;
+}
+export function validateUserInfoTokenExpiration(tokenInfo, now = Math.floor(Date.now() / 1000)) {
+    if (tokenInfo.expiresAt < now) {
+        throw new UserInfoError(UserInfoErrorCode.InvalidToken, 'The access token expired');
+    }
+}
+export function validateUserInfoScope(tokenInfo) {
+    if (!tokenInfo.scope.includes('openid')) {
+        throw new UserInfoError(UserInfoErrorCode.InsufficientScope, 'The openid scope is required');
+    }
+}
+export function validateUserInfoAudience(tokenInfo, expectedAudience) {
+    if (expectedAudience !== undefined &&
+        (tokenInfo.audience === undefined || !tokenInfo.audience.includes(expectedAudience))) {
+        throw new UserInfoError(UserInfoErrorCode.InvalidToken, 'The access token is not intended for the UserInfo endpoint');
+    }
+}
+export async function resolveUserInfoClaims(tokenInfo, userClaimsResolver) {
+    const userClaims = await userClaimsResolver.findUserClaims(tokenInfo.sub);
+    if (!userClaims) {
+        throw new UserInfoError(UserInfoErrorCode.InvalidToken, 'User not found for the given access token');
+    }
+    return userClaims;
+}
+export function applyRequestedClaims(response, userClaims, claimsParameter) {
+    const result = { ...response };
+    const requestedClaims = getRequestedClaimNames(claimsParameter);
+    for (const claimName of requestedClaims) {
+        if (claimName === 'sub')
+            continue;
+        const value = userClaims[claimName];
+        if (value === undefined || value === null)
+            continue;
+        const entry = claimsParameter?.userinfo?.[claimName] ?? null;
+        if (!matchesRequestedValue(value, entry))
+            continue;
+        result[claimName] = value;
+    }
+    return result;
+}
+export async function handleUserInfoRequest(context) {
+    const { accessToken, accessTokenResolver, userClaimsResolver, claimsParameter, expectedAudience, } = context;
+    const tokenInfo = await resolveUserInfoAccessToken(accessToken, accessTokenResolver);
+    validateUserInfoTokenExpiration(tokenInfo);
+    validateUserInfoScope(tokenInfo);
+    validateUserInfoAudience(tokenInfo, expectedAudience);
+    const userClaims = await resolveUserInfoClaims(tokenInfo, userClaimsResolver);
+    const scopedResponse = filterClaimsByScope(userClaims, tokenInfo.scope);
+    return applyRequestedClaims(scopedResponse, userClaims, claimsParameter);
+}
+const DEFAULT_USERINFO_JWT_EXPIRES_IN = 3600;
+function base64UrlEncode(str) {
+    return arrayBufferToBase64Url(stringToArrayBuffer(str));
+}
+export async function generateUserInfoJwt(userInfoResponse, options) {
+    const { issuer, audience, privateKey, keyId, expiresIn } = options;
+    const now = Math.floor(Date.now() / 1000);
+    const ttl = expiresIn ?? DEFAULT_USERINFO_JWT_EXPIRES_IN;
+    const header = {
+        alg: getJwaAlgorithm(privateKey),
+        typ: 'JWT',
+    };
+    if (keyId) {
+        header.kid = keyId;
+    }
+    const payload = {
+        ...userInfoResponse,
+        iss: issuer,
+        aud: audience,
+        iat: now,
+        exp: now + ttl,
+    };
+    const headerB64 = base64UrlEncode(JSON.stringify(header));
+    const payloadB64 = base64UrlEncode(JSON.stringify(payload));
+    const signingInput = `${headerB64}.${payloadB64}`;
+    const signature = await sign(signingInput, privateKey);
+    return `${signingInput}.${signature}`;
+}
+//# sourceMappingURL=userinfo.js.map

package/dist/userinfo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userinfo.js","sourceRoot":"","sources":["../src/userinfo.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAM5D,MAAM,CAAN,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IAC3B,mDAA8B,CAAA;IAC9B,6DAAwC,CAAA;AAC1C,CAAC,EAHW,iBAAiB,KAAjB,iBAAiB,QAG5B;AAKD,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtB,KAAK,CAAoB;IACzB,gBAAgB,CAAS;IAEzC,YAAY,KAAwB,EAAE,gBAAwB;QAI5D,MAAM,SAAS,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;QAC7D,KAAK,CAAC,SAAS,CAAC,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;IACpC,CAAC;IAMD,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,KAAK,KAAK,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACnE,CAAC;CACF;AAgKD,MAAM,CAAC,MAAM,gBAAgB,GAAyC;IACpE,OAAO,EAAE;QACP,MAAM;QACN,aAAa;QACb,YAAY;QACZ,aAAa;QACb,UAAU;QACV,oBAAoB;QACpB,SAAS;QACT,SAAS;QACT,SAAS;QACT,QAAQ;QACR,WAAW;QACX,UAAU;QACV,QAAQ;QACR,YAAY;KACb;IACD,KAAK,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAClC,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,KAAK,EAAE,CAAC,cAAc,EAAE,uBAAuB,CAAC;CACjD,CAAC;AASF,MAAM,UAAU,mBAAmB,CACjC,UAAsB,EACtB,MAAgB;IAEhB,MAAM,MAAM,GAA4B,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;IAGhE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU;YAAE,SAAS;QAE1B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAA0B,CAAC;AACpC,CAAC;AAKD,SAAS,sBAAsB,CAC7B,eAAiC;IAEjC,IAAI,CAAC,eAAe,EAAE,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAyB,CAAC;AACvE,CAAC;AAYD,SAAS,SAAS,CAAC,CAAU,EAAE,CAAU;IACvC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAGzB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAExC,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,IAAI,GAAG,CAA4B,CAAC;IAC1C,MAAM,IAAI,GAAG,CAA4B,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAEhD,OAAO,KAAK,CAAC,KAAK,CAChB,CAAC,GAAG,EAAE,EAAE,CACN,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC;QAC/C,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAClC,CAAC;AACJ,CAAC;AAcD,SAAS,qBAAqB,CAC5B,MAAe,EACf,KAAwB;IAExB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEhC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,WAA+B,EAC/B,mBAAwC;IAExC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,YAAY,EAC9B,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IACzE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,YAAY,EAC9B,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAWD,MAAM,UAAU,+BAA+B,CAC7C,SAA0B,EAC1B,MAAc,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAE3C,IAAI,SAAS,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,YAAY,EAC9B,0BAA0B,CAC3B,CAAC;IACJ,CAAC;AACH,CAAC;AAWD,MAAM,UAAU,qBAAqB,CAAC,SAA0B;IAC9D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,iBAAiB,EACnC,8BAA8B,CAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AAgBD,MAAM,UAAU,wBAAwB,CACtC,SAA0B,EAC1B,gBAAoC;IAEpC,IACE,gBAAgB,KAAK,SAAS;QAC9B,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EACpF,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,YAAY,EAC9B,4DAA4D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAA0B,EAC1B,kBAAsC;IAEtC,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,YAAY,EAC9B,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAkBD,MAAM,UAAU,oBAAoB,CAClC,QAA0B,EAC1B,UAAsB,EACtB,eAAiC;IAEjC,MAAM,MAAM,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAC;IAExD,MAAM,eAAe,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;IAChE,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;QACxC,IAAI,SAAS,KAAK,KAAK;YAAE,SAAS;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAEpD,MAAM,KAAK,GAAG,eAAe,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;QAC7D,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,SAAS;QAEnD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED,OAAO,MAA0B,CAAC;AACpC,CAAC;AAsBD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAA+B;IAE/B,MAAM,EACJ,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,GACjB,GAAG,OAAO,CAAC;IAEZ,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IACrF,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAC3C,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjC,wBAAwB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC9E,MAAM,cAAc,GAAG,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAExE,OAAO,oBAAoB,CAAC,cAAc,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;AAC3E,CAAC;AAoBD,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAK7C,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,sBAAsB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,gBAAkC,EAClC,OAA2B;IAE3B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAEnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,SAAS,IAAI,+BAA+B,CAAC;IAEzD,MAAM,MAAM,GAA2B;QACrC,GAAG,EAAE,eAAe,CAAC,UAAU,CAAC;QAChC,GAAG,EAAE,KAAK;KACX,CAAC;IACF,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,MAAM,OAAO,GAA4B;QACvC,GAAG,gBAAgB;QACnB,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,GAAG;KACf,CAAC;IAEF,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAEvD,OAAO,GAAG,YAAY,IAAI,SAAS,EAAE,CAAC;AACxC,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@maronn-openid-connect/core",
+  "version": "0.0.1",
+  "description": "OpenID Connect Provider core implementation",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "openid-connect",
+    "oauth2.1",
+    "authentication"
+  ],
+  "author": "maronnjapan",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/maronnjapan/maronn-oidc.git",
+    "directory": "packages/core"
+  },
+  "bugs": {
+    "url": "https://github.com/maronnjapan/maronn-oidc/issues"
+  },
+  "homepage": "https://github.com/maronnjapan/maronn-oidc/tree/main/packages/core#readme",
+  "devDependencies": {
+    "@edge-runtime/vm": "^5.0.0",
+    "@types/node": "^26.1.2",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:ci": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest --coverage"
+  }
+}