@tangle-network/sdk-provider-codex 0.4.2 → 0.4.3

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import { AgentExecutionInput, AgentExecutionResult, BackendCapabilities, CliAuthFile, InteractionResponse, McpConfig, SdkHostServices, StreamEvent } from "@tangle-network/agent-interface";
 import * as _$_tangle_network_sdk_cli_runner0 from "@tangle-network/sdk-cli-runner";
 import { RpcBridge, StreamParserConfig } from "@tangle-network/sdk-cli-runner";
-import { CliExecArgs, CliProviderAdapterBase, CliProviderConfig, CliProviderOptions, CliTurnProcess, CliTurnSpawn, ExecutionState, HarnessId, PreparedAttachment, WorkspacePlanApplication } from "@tangle-network/sdk-provider-cli-base";
+import { CliExecArgs, CliProviderAdapterBase, CliProviderConfig, CliProviderOptions, CliTurnProcess, CliTurnSpawn, ExecutionState, HarnessId, PreparedAttachment, SecretProfileMcpLease, WorkspacePlanApplication } from "@tangle-network/sdk-provider-cli-base";
 
 //#region src/app-server-protocol.d.ts
 type NativeMcp = {
@@ -218,12 +218,13 @@ declare abstract class CodexSecretProfileAdapter extends CodexNativeLaunchAdapte
   protected verifyPreparedSecretProfileRevision(input: AgentExecutionInput, plan: WorkspacePlanApplication): Promise<void>;
   private readNativeConfig;
   private readNativeControls;
-  protected nativeArgs(input: AgentExecutionInput, plan: WorkspacePlanApplication | undefined, mcp?: Record<string, unknown>): string[];
-  protected prepareSecretCodexTurn(input: AgentExecutionInput, plan: WorkspacePlanApplication, sessionId: string): Promise<{
+  protected nativeArgs(input: AgentExecutionInput & {
+    managedQuoteVersion?: string;
+  }, plan: WorkspacePlanApplication | undefined, mcp?: Record<string, unknown>): string[];
+  protected prepareSecretCodexTurn(input: AgentExecutionInput, plan: WorkspacePlanApplication, sessionId: string, mcpInput: AgentExecutionInput, retainRelease: (release: SecretProfileMcpLease) => void): Promise<{
     cwd: string;
     env: Record<string, string | undefined>;
     args: string[];
-    release: (() => void | Promise<void>) | undefined;
     validate: (bridge: RpcBridge, extra: Record<string, unknown>) => Promise<Record<string, NativeMcp>>;
   }>;
   shutdown(): Promise<void>;

package/dist/index.mjs

@@ -2,9 +2,10 @@ import { randomUUID } from "node:crypto";
 import { InteractionKind, ProxySecretBindingSchema, ProxySecretGrantSchema, ProxySecretReceiptSchema, ProxySecretUpdateControlsSchema, ProxySecretsSchema, isProxySecretScopeAttenuation, ownPropertyRecordSchema, proxySecretPresentationsEqual, resolveTangleRouterDefaults } from "@tangle-network/agent-interface";
 import { z } from "zod";
 import { HELD_SPARE_IDLE_MS, createDeferredParser, createHeldSpareRegistry, launchDifferences, resolveRawCapturePath, spawnRpcBridge } from "@tangle-network/sdk-cli-runner";
-import { CODEX_DISABLED_FEATURE_ARGS, CliProviderAdapterBase, InteractionBroker, McpInteractionSupport, NATIVE_SESSION_CONTRACTS, PROMPT_SECTION_SEPARATOR, SEALED_NATIVE_HOME_LAYOUT, assertSealedNativeHome, assertSealedNativeSearchPath, codexDeveloperInstructionArgs, deriveFilePart, forgetSessionScopes, interactionToggleEnabled, isLoopbackEndpoint, isPlainRecord, jsonEventParser, localMcpArgv, localMcpEnv, nativeEffortArgs, partitionImageAttachments, provenStoreBinary, reasoningEvents, recordCliTokenUsage, refuseSecretLaunch, resolveExecutableRealpath, secretMcpScope, secretSessionTurnQueue, servableMcpServer, servableStdioServer, sessionObservedEvents, streamPartBase, textDeltaEvents, toolResultEvents, toolStartEvents, trackFilePart, turnEndReason, untilSettledOrAborted, withTurnInteractions } from "@tangle-network/sdk-provider-cli-base";
+import { CODEX_DISABLED_FEATURE_ARGS, CliProviderAdapterBase, InteractionBroker, McpInteractionSupport, NATIVE_SESSION_CONTRACTS, PROMPT_SECTION_SEPARATOR, SEALED_NATIVE_HOME_LAYOUT, assertSealedNativeHome, assertSealedNativeSearchPath, codexDeveloperInstructionArgs, deriveFilePart, directStdioMcpServers, executionCorrelationHeaders, forgetSessionScopes, interactionToggleEnabled, isLoopbackEndpoint, isPlainRecord, jsonEventParser, localMcpArgv, localMcpEnv, nativeEffortArgs, partitionImageAttachments, provenStoreBinary, reasoningEvents, recordCliTokenUsage, refuseSecretLaunch, resolveExecutableRealpath, secretMcpScope, secretSessionTurnQueue, servableMcpServer, servableStdioServer, sessionObservedEvents, streamPartBase, textDeltaEvents, toolResultEvents, toolStartEvents, trackFilePart, turnEndReason, untilSettledOrAborted, withTurnInteractions } from "@tangle-network/sdk-provider-cli-base";
 import { existsSync } from "node:fs";
 import path, { join } from "node:path";
+import { isDeepStrictEqual } from "node:util";
 const TURN_KEY_PLACEHOLDER_PREFIX = "tangle-turn-key";
 const MODEL_KEY_PROXY_PATH_PREFIX = "/v1/";
 const LOOPBACK_BASE_URL = /^http:\/\/127\.0\.0\.1:[0-9]+$/;
@@ -61,6 +62,12 @@ function managedModelProxyUrl(input) {
 	const runtimeHome = input.runtimeHome?.trim();
 	return proxiedModelUrl(binding.baseUrl, input.upstream, { ...runtimeHome ? { runtimeHome } : {} });
 }
+//#endregion
+//#region ../runtime-contracts/dist/declared-secrets.js
+/** Bound values stay at the proxy. Declarations carry metadata only and are
+* revalidated at every rebuild; an unbound name keeps box delivery unless the store's policy binds it.
+* A declaration may bind several hosts: one credential, one slot and placeholder, many vendor hosts. */
+const MAX_SECRET_VALUE_LENGTH = 65536;
 new Set([
 	...Object.keys(MODEL_PROXY_TOKENS),
 	"TANGLE_API_KEY",
@@ -126,6 +133,48 @@ function isReservedProfileUid(uid) {
 	return Number.isSafeInteger(uid) && uid >= 2e5;
 }
 //#endregion
+//#region ../runtime-contracts/dist/model-key-refresh.js
+const batchCredentialOwner = {
+	allocationId: z.uuid(),
+	ownerId: z.string().min(1).max(256)
+};
+z.strictObject({
+	...batchCredentialOwner,
+	childKeyId: z.string().min(1).max(200).optional(),
+	keyExpiresAt: z.iso.datetime({ offset: true }).optional()
+});
+const batchCredentialIdentity = {
+	...batchCredentialOwner,
+	expiresAt: z.iso.datetime({ offset: true })
+};
+z.discriminatedUnion("operation", [
+	z.strictObject({
+		operation: z.literal("batch-allocate"),
+		...batchCredentialIdentity,
+		admissionDeadlineMs: z.number().int().positive(),
+		sourceKey: z.string().min(1).max(4096)
+	}),
+	z.strictObject({
+		operation: z.literal("batch-rotate"),
+		...batchCredentialIdentity
+	}),
+	z.strictObject({
+		operation: z.literal("batch-release"),
+		...batchCredentialIdentity,
+		childKeyId: z.string().min(1).max(200).optional()
+	})
+]);
+z.union([z.object({
+	refreshed: z.literal(true),
+	apiKey: z.string().min(1),
+	keyId: z.string().min(1),
+	baseUrl: z.string().url(),
+	expiresAt: z.iso.datetime({ offset: true })
+}), z.object({
+	refreshed: z.literal(false),
+	reason: z.string().min(1)
+})]);
+//#endregion
 //#region ../runtime-contracts/dist/proxy-secret-materialization.js
 const syntheticHeader = {
 	alg: "HS256",
@@ -143,16 +192,24 @@ function isSyntheticPlaceholder(material) {
 	const prefix = placeholderPrefix(material.slot, material.grant.placeholderFormat, material.issuerExpiresAt);
 	return material.placeholder.startsWith(prefix) && /^[A-Za-z0-9_-]{43}$/.test(material.placeholder.slice(prefix.length));
 }
-z.array(z.strictObject({
+z.array(z.preprocess((input) => {
+	if (input && typeof input === "object" && "issuerExpiresAt" in input && (!("executionExpiresAt" in input) || input.executionExpiresAt === void 0) && (!("native" in input) || input.native === void 0)) return {
+		...input,
+		executionExpiresAt: input.issuerExpiresAt
+	};
+	return input;
+}, z.strictObject({
 	binding: ProxySecretBindingSchema,
 	grant: ProxySecretGrantSchema,
 	placeholder: z.string().min(1),
 	slot: z.string().refine(isDeclaredSecretSlotEnvVar),
-	issuerExpiresAt: z.iso.datetime()
-})).superRefine((materials, ctx) => {
+	issuerExpiresAt: z.iso.datetime(),
+	executionExpiresAt: z.iso.datetime(),
+	native: z.unknown().optional()
+}))).superRefine((materials, ctx) => {
 	const bindings = ProxySecretsSchema.safeParse(materials.map((m) => m.binding));
 	const unique = (values) => new Set(values).size === values.length;
-	if (!bindings.success || !unique(materials.map((m) => m.slot)) || !unique(materials.map((m) => m.placeholder)) || !unique(materials.map((m) => m.grant.grantId)) || new Set(materials.map((m) => m.grant.epoch)).size > 1 || new Set(materials.map((m) => m.grant.sandboxId)).size > 1 || materials.some((material) => !isSyntheticPlaceholder(material)) || materials.some(({ binding, grant, issuerExpiresAt }) => !isProxySecretScopeAttenuation(binding, grant.scope) || !proxySecretPresentationsEqual(binding.presentation, grant.presentation) || (binding.placeholderFormat ?? "opaque") !== grant.placeholderFormat || Date.parse(grant.expiresAt) > Date.parse(issuerExpiresAt))) ctx.addIssue({
+	if (!bindings.success || !unique(materials.map((m) => m.slot)) || !unique(materials.map((m) => m.placeholder)) || !unique(materials.map((m) => m.grant.grantId)) || new Set(materials.map((m) => m.grant.epoch)).size > 1 || new Set(materials.map((m) => m.grant.sandboxId)).size > 1 || materials.some((material) => !isSyntheticPlaceholder(material)) || materials.some(({ binding, grant, issuerExpiresAt, executionExpiresAt }) => !isProxySecretScopeAttenuation(binding, grant.scope) || !proxySecretPresentationsEqual(binding.presentation, grant.presentation) || (binding.placeholderFormat ?? "opaque") !== grant.placeholderFormat || Date.parse(grant.expiresAt) > Date.parse(executionExpiresAt) || Date.parse(executionExpiresAt) > Date.parse(issuerExpiresAt))) ctx.addIssue({
 		code: "custom",
 		message: "Invalid proxy secret materialization"
 	});
@@ -162,6 +219,114 @@ ProxySecretUpdateControlsSchema.extend({
 	proxySecretGrants: ProxySecretReceiptSchema.options[0].shape.bindings,
 	expectedProxySecretGeneration: ProxySecretUpdateControlsSchema.shape.expectedProxySecretGeneration.unwrap()
 }).strict().refine((body) => new Set(body.proxySecretGrants.map((b) => b.envName)).size === body.proxySecretGrants.length);
+const sourceBindingSchema = ProxySecretReceiptSchema.options[0].shape.bindings.element;
+const sourceRevisionSchema = z.iso.datetime();
+const sourceLeaseTokenSchema = z.uuid();
+const sourceAuthority = {
+	binding: sourceBindingSchema,
+	issuerExpiresAt: z.iso.datetime()
+};
+z.discriminatedUnion("operation", [
+	z.strictObject({
+		operation: z.literal("read"),
+		...sourceAuthority,
+		rekey: z.literal(true).optional()
+	}),
+	z.strictObject({
+		operation: z.literal("lease"),
+		...sourceAuthority,
+		expectedUpdatedAt: sourceRevisionSchema,
+		leaseExpiresAt: z.iso.datetime(),
+		leaseToken: sourceLeaseTokenSchema.optional()
+	}),
+	z.strictObject({
+		operation: z.literal("commit"),
+		...sourceAuthority,
+		expectedUpdatedAt: sourceRevisionSchema,
+		leaseToken: sourceLeaseTokenSchema,
+		value: z.string().min(1).max(MAX_SECRET_VALUE_LENGTH)
+	}),
+	z.strictObject({
+		operation: z.literal("release"),
+		...sourceAuthority,
+		leaseToken: sourceLeaseTokenSchema
+	})
+]);
+const sourceMetadataSchema = z.strictObject({
+	secretId: z.string().min(1),
+	key: ProxySecretBindingSchema.shape.secretRef.shape.key,
+	updatedAt: sourceRevisionSchema
+});
+const sourceSnapshotSchema = sourceMetadataSchema.extend({ value: z.string().min(1).max(MAX_SECRET_VALUE_LENGTH) });
+z.discriminatedUnion("operation", [
+	z.strictObject({
+		operation: z.literal("read"),
+		source: sourceSnapshotSchema,
+		binding: sourceBindingSchema,
+		refreshExpiresAt: z.iso.datetime()
+	}),
+	z.strictObject({
+		operation: z.literal("lease"),
+		source: sourceSnapshotSchema,
+		leaseToken: sourceLeaseTokenSchema,
+		leaseExpiresAt: z.iso.datetime(),
+		phase: z.enum([
+			"leased",
+			"started",
+			"replay"
+		]).default("leased")
+	}),
+	z.strictObject({
+		operation: z.literal("commit"),
+		source: sourceMetadataSchema
+	}),
+	z.strictObject({
+		operation: z.literal("release"),
+		released: z.literal(true)
+	})
+]);
+const nativeCredentialProtocolSchema = z.enum([
+	"legacy",
+	"canonical",
+	"unselected"
+]);
+z.strictObject({
+	nativeCredentialProtocol: nativeCredentialProtocolSchema,
+	priorExposure: z.boolean(),
+	containerId: z.string().min(1),
+	expectedProxySecretGeneration: ProxySecretUpdateControlsSchema.shape.expectedProxySecretGeneration,
+	authorityExpiresAt: z.iso.datetime().optional()
+});
+ownPropertyRecordSchema(z.strictObject({
+	revision: ProxySecretGrantSchema.shape.identity.shape.revision,
+	value: z.string().min(1).max(MAX_SECRET_VALUE_LENGTH),
+	refresh: z.strictObject({
+		revision: sourceRevisionSchema,
+		leaseToken: sourceLeaseTokenSchema
+	}).optional()
+}));
+z.strictObject({
+	grant: ProxySecretGrantSchema,
+	value: z.string().min(1).max(MAX_SECRET_VALUE_LENGTH),
+	expectedUpdatedAt: sourceRevisionSchema.optional(),
+	replayOnly: z.boolean().optional(),
+	leaseExpiresAt: z.iso.datetime()
+});
+z.discriminatedUnion("status", [
+	z.strictObject({
+		status: z.literal("refreshed"),
+		value: z.string().min(1).max(MAX_SECRET_VALUE_LENGTH),
+		sourceExpiresAt: z.iso.datetime().optional()
+	}),
+	z.strictObject({
+		status: z.literal("nonrefreshable"),
+		reason: z.string().min(1)
+	}),
+	z.strictObject({
+		status: z.literal("refused"),
+		reason: z.string().min(1)
+	})
+]);
 //#endregion
 //#region ../runtime-contracts/dist/runtime-environment.js
 const SAFE_ENV_VAR_NAME_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
@@ -1079,7 +1244,10 @@ var CodexSecretProfileAdapter = class extends CodexNativeLaunchAdapter {
 			detached: true,
 			inheritEnv: this.inheritProcessEnv,
 			command,
-			args: this.nativeArgs(input, plan),
+			args: this.nativeArgs({
+				...input,
+				managedQuoteVersion: void 0
+			}, plan),
 			cwd,
 			env,
 			...identity,
@@ -1119,12 +1287,15 @@ var CodexSecretProfileAdapter = class extends CodexNativeLaunchAdapter {
 		const servers = config.mcp_servers ?? {};
 		if (expected && (Object.keys(servers).length !== Object.keys(expected).length || Object.entries(servers).some(([name, server]) => {
 			const declared = expected[name];
-			return !declared || server.url !== declared.url || server.command || (server.args?.length ?? 0) > 0 || Object.keys(server.env ?? {}).length > 0 || (server.env_vars?.length ?? 0) > 0 || (server.bearer_token_env_var ?? void 0) !== declared.bearer_token_env_var || JSON.stringify(server.http_headers ?? {}) !== JSON.stringify(declared.http_headers ?? {}) || Object.keys(server.env_http_headers ?? {}).length > 0;
-		}))) this.refuse("native MCP proxy controls differ", cwd);
+			return !declared || (server.url ?? void 0) !== (declared.url ?? void 0) || (server.command ?? void 0) !== declared.command || !isDeepStrictEqual(server.args ?? [], declared.args ?? []) || !isDeepStrictEqual(server.env ?? {}, declared.env ?? {}) || !isDeepStrictEqual(server.env_vars ?? [], declared.env_vars ?? []) || (server.bearer_token_env_var ?? void 0) !== declared.bearer_token_env_var || !isDeepStrictEqual(server.http_headers ?? {}, declared.http_headers ?? {}) || !isDeepStrictEqual(server.env_http_headers ?? {}, declared.env_http_headers ?? {});
+		}))) this.refuse("native MCP controls differ", cwd);
 		return servers;
 	}
 	nativeArgs(input, plan, mcp) {
-		const prompts = this.resolveProfilePrompts(input, plan);
+		const prompts = {
+			...this.resolveProfilePrompts(input, plan),
+			correlationHeaders: executionCorrelationHeaders(input.interactionBinding, input.traceId, input.managedQuoteVersion)
+		};
 		if (this.config.secretProfileRevisionRoot && plan) {
 			const context = `The mutable workspace is ${JSON.stringify(input.workspaceRoot ?? this.storagePath)}. The current directory holds the read-only supplied profile. Use absolute paths in the mutable workspace for edits, builds and git commands.`;
 			prompts.appendSystemPrompt = [prompts.appendSystemPrompt, context].filter(Boolean).join("\n\n");
@@ -1139,7 +1310,7 @@ var CodexSecretProfileAdapter = class extends CodexNativeLaunchAdapter {
 			...mcp === void 0 ? [] : ["-c", `mcp_servers=${inlineToml(mcp)}`]
 		];
 	}
-	async prepareSecretCodexTurn(input, plan, sessionId) {
+	async prepareSecretCodexTurn(input, plan, sessionId, mcpInput, retainRelease) {
 		const native = await this.readNativeConfig(input, plan);
 		const cwd = this.bindSecretProfileSessionView(native.cwd, sessionId);
 		assertSealedNativeSearchPath(cwd, [".codex", ".agents"]);
@@ -1188,12 +1359,23 @@ var CodexSecretProfileAdapter = class extends CodexNativeLaunchAdapter {
 				};
 			}
 		}
-		const args = this.nativeArgs(input, plan, servers);
+		const release = served.length ? await this.mcpOwner.proxy?.lease(scope, served, mcpInput) : void 0;
+		if (served.length && typeof release !== "function") this.refuse("MCP lease was not acknowledged", cwd);
+		if (release) retainRelease(release);
+		input.abortSignal?.throwIfAborted();
+		for (const server of directStdioMcpServers(release, served).values()) {
+			const { url: _url, http_headers: _headers, ...controls } = servers[server.name];
+			servers[server.name] = {
+				...controls,
+				command: server.command[0],
+				args: server.command.slice(1),
+				env: { ...server.environment }
+			};
+		}
 		return {
 			cwd,
 			env: native.env,
-			args,
-			release: served.length ? await this.mcpOwner.proxy?.lease(scope, served) : void 0,
+			args: this.nativeArgs(input, plan, servers),
 			validate: (bridge, extra) => this.readNativeControls(bridge, plan, cwd, {
 				...servers,
 				...extra
@@ -1250,16 +1432,22 @@ var CodexAppServerAdapter = class extends CodexSecretProfileAdapter {
 		return this.withExecution(input.abortSignal, (signal) => this.executeViaAppServer({
 			...input,
 			abortSignal: signal
-		}, services, onEvent));
+		}, services, onEvent, input));
 	}
-	async executeViaAppServer(input, services, onEvent) {
-		const prepared = await this.prepareAppServerTurn(input, services, onEvent);
+	async executeViaAppServer(input, services, onEvent, mcpInput = input) {
+		const prepared = await this.prepareAppServerTurn(input, services, onEvent, mcpInput);
 		if (prepared.cached !== void 0) return prepared.cached;
 		const queue = this.config.secretProfileRevisionRoot ? secretSessionTurnQueue(this.secretProfileSessionView(prepared.sessionId).view) : void 0;
 		let bridge;
 		let result;
 		let closing;
-		const close = () => closing ??= this.closeAppServerTurn(prepared, bridge, queue);
+		const close = () => closing ??= this.closeAppServerTurn(prepared, bridge, queue).catch((error) => {
+			queue?.retryCleanup(() => {
+				closing = void 0;
+				return close();
+			});
+			throw error;
+		});
 		prepared.run.cleanup = close;
 		try {
 			if (queue) await untilSettledOrAborted(queue.previous, input.abortSignal ?? new AbortController().signal);
@@ -1277,7 +1465,7 @@ var CodexAppServerAdapter = class extends CodexSecretProfileAdapter {
 	}
 	/** Capture session binding, profile/prompt and native callbacks before acquiring resources.
 	* Field construction stays one preparation record; launch/run/cleanup have separate owners. */
-	async prepareAppServerTurn(input, services, onEvent) {
+	async prepareAppServerTurn(input, services, onEvent, mcpInput) {
 		this.ensureInitialized();
 		const opened = await this.openTurnSession({
 			...input,
@@ -1317,6 +1505,7 @@ var CodexAppServerAdapter = class extends CodexSecretProfileAdapter {
 		turn.activeThreadId = initialThreadId(input) ?? opened.providerSessionId;
 		return {
 			releaseMcp: void 0,
+			mcpInput,
 			input,
 			services,
 			onEvent,
@@ -1330,8 +1519,9 @@ var CodexAppServerAdapter = class extends CodexSecretProfileAdapter {
 	}
 	async launchAppServerTurn(context) {
 		const { input, profilePlan, run } = context;
-		const secret = this.config.secretProfileRevisionRoot && profilePlan ? await this.prepareSecretCodexTurn(input, profilePlan, context.sessionId) : void 0;
-		context.releaseMcp = secret?.release;
+		const secret = this.config.secretProfileRevisionRoot && profilePlan ? await this.prepareSecretCodexTurn(input, profilePlan, context.sessionId, context.mcpInput, (release) => {
+			context.releaseMcp = release;
+		}) : void 0;
 		const env = secret?.env ?? this.buildAppServerEnv(profilePlan, run.cwd);
 		run.cwd = secret?.cwd ?? run.cwd;
 		const args = secret?.args ?? this.nativeArgs(input, profilePlan);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sdk-provider-codex",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "type": "module",
   "exports": {
     ".": {
@@ -18,7 +18,7 @@
     "@tangle-network/agent-backend-types": "1.3.3",
     "@tangle-network/agent-interface": "^5.10.20",
     "@tangle-network/sdk-cli-runner": "0.3.9",
-    "@tangle-network/sdk-provider-cli-base": "0.13.19",
+    "@tangle-network/sdk-provider-cli-base": "0.13.20",
     "@tangle-network/sdk-session-persistence": "0.7.5",
     "zod": "4.6.7"
   },
@@ -34,8 +34,8 @@
     "registry": "https://registry.npmjs.org"
   },
   "tangleRelease": {
-    "sourceSha": "7f35269c55c7dbf9cc12ef1fd210bd1f9f8eab58",
-    "mergedAt": "2026-11-06T21:08:17-08:00"
+    "sourceSha": "8af7f9410f67473cf82e7c48ee3bf284a2afea77",
+    "mergedAt": "2026-11-07T00:12:57-08:00"
   },
   "scripts": {
     "build": "tsdown",