@usenaive-sdk/iac 0.1.0

package/dist/index.cjs

@@ -0,0 +1,78 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  agentTemplate: () => agentTemplate,
+  cloud: () => cloud,
+  default: () => index_default,
+  defineConfig: () => defineConfig,
+  defineModule: () => defineModule,
+  policy: () => policy,
+  runtime: () => runtime,
+  system: () => system,
+  template: () => template
+});
+module.exports = __toCommonJS(index_exports);
+var cloud = {
+  web(opts) {
+    return { kind: "cloud.web", ...opts };
+  },
+  postgres(opts) {
+    return { kind: "cloud.postgres", ...opts };
+  },
+  bucket(opts) {
+    return { kind: "cloud.bucket", ...opts };
+  }
+};
+var runtime = {
+  pool(opts) {
+    return { kind: "runtime.pool", ...opts };
+  }
+};
+function policy(opts) {
+  return { kind: "policy", ...opts };
+}
+function agentTemplate(opts) {
+  return { kind: "agent_template", ...opts };
+}
+var template = agentTemplate;
+function defineModule(opts) {
+  return { kind: "module", tier: "custom", ...opts };
+}
+function system(opts) {
+  return { kind: "system", ...opts };
+}
+function defineConfig(config) {
+  return config;
+}
+var index_default = defineConfig;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  agentTemplate,
+  cloud,
+  defineConfig,
+  defineModule,
+  policy,
+  runtime,
+  system,
+  template
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * @usenaive-sdk/iac — Infrastructure-as-Code for governed agent profiles.\n *\n * Build-time, declarative, and side-effect free. You author a `naive.config.ts`\n * with these builders; the CLI's `naive up` reads the exported config and\n * registers shared infrastructure (Path A), the runtime pool, and the\n * per-tenant agent profile templates (the regulated bundle).\n *\n * Nothing here makes API calls — it only produces typed config objects. Issuing\n * cards, forming entities, and registering comms happens at run-time via\n * `@usenaive-sdk/server` (`forUser(id).provision(template)`).\n */\n\n/* ───────────────────────────── cloud (Path A) ───────────────────────────── */\n\nexport type CloudWebFramework = \"nextjs\" | \"remix\" | \"astro\" | \"static\" | \"node\";\nexport type PostgresSize = \"serverless\" | \"small\" | \"medium\" | \"large\";\n\nexport interface CloudWebConfig {\n  readonly kind: \"cloud.web\";\n  framework: CloudWebFramework;\n  dir: string;\n  env?: Record<string, string>;\n}\n\nexport interface CloudPostgresConfig {\n  readonly kind: \"cloud.postgres\";\n  name: string;\n  size: PostgresSize;\n}\n\nexport interface CloudBucketConfig {\n  readonly kind: \"cloud.bucket\";\n  name: string;\n  public?: boolean;\n}\n\nexport type CloudResource = CloudWebConfig | CloudPostgresConfig | CloudBucketConfig;\n\nexport const cloud = {\n  web(opts: Omit<CloudWebConfig, \"kind\">): CloudWebConfig {\n    return { kind: \"cloud.web\", ...opts };\n  },\n  postgres(opts: Omit<CloudPostgresConfig, \"kind\">): CloudPostgresConfig {\n    return { kind: \"cloud.postgres\", ...opts };\n  },\n  bucket(opts: Omit<CloudBucketConfig, \"kind\">): CloudBucketConfig {\n    return { kind: \"cloud.bucket\", ...opts };\n  },\n};\n\n/* ───────────────────────────── runtime (Path B) ──────────────────────────── */\n\nexport type RuntimeIsolation = \"microvm\" | \"container\";\n\nexport interface RuntimeAutoscale {\n  min: number;\n  max: number;\n}\n\nexport interface RuntimePoolConfig {\n  readonly kind: \"runtime.pool\";\n  source: string;\n  isolation: RuntimeIsolation;\n  autoscale?: RuntimeAutoscale;\n}\n\nexport const runtime = {\n  pool(opts: Omit<RuntimePoolConfig, \"kind\">): RuntimePoolConfig {\n    return { kind: \"runtime.pool\", ...opts };\n  },\n};\n\n/* ────────────────────────────── policy ───────────────────────────────────── */\n\nexport type Period = \"day\" | \"week\" | \"month\" | \"year\";\n\n/** A spend cap. Structured, or the shorthand string form `\"$1500/mo\"` / `\"$50/day\"`. */\nexport interface SpendCap {\n  amount: number;\n  /** ISO 4217, defaults to \"USD\". */\n  currency?: string;\n  period?: Period;\n}\nexport type Budget = SpendCap | string;\n\nexport interface BudgetPolicy {\n  cap: Budget;\n  /** Fraction 0..1 at which to alert, e.g. 0.8. */\n  alertAt?: number;\n  /** When true, exceeding the cap is a hard deny; otherwise it routes to approval. */\n  hard?: boolean;\n}\n\nexport type ComparisonOp = \">\" | \">=\" | \"<\" | \"<=\" | \"==\";\n\n/** A structured approval trigger, e.g. `{ on: \"cards.charge\", field: \"amount\", op: \">\", value: 100 }`. */\nexport interface ApprovalCondition {\n  /** The capability/action this rule applies to, e.g. \"cards.charge\". */\n  on: Capability;\n  /** Optional numeric guard on a field of the action, e.g. `amount > 100`. */\n  field?: string;\n  op?: ComparisonOp;\n  value?: number;\n}\n\nexport type ApprovalChannel = \"slack\" | \"email\" | \"webhook\";\n\nexport interface ApprovalRule {\n  /** Structured condition, or the shorthand string `\"cards.charge.amount > $100\"`. */\n  when: ApprovalCondition | string;\n  via: ApprovalChannel | string;\n}\n\nexport interface NetworkPolicy {\n  allow?: string[];\n  deny?: string[];\n}\n\n/** A capability/action name, e.g. \"cards.charge\", \"email.send\", \"search\". */\nexport type Capability = string;\n\nexport interface PolicyConfig {\n  readonly kind: \"policy\";\n  /** Spend cap + alert threshold, aggregated at the governance gateway. */\n  budget?: BudgetPolicy;\n  /** Human-in-the-loop rules — matched actions are parked for approval. */\n  approvals?: ApprovalRule[];\n  /** Allowlist of capabilities. When set, the agent profile's AccountKit enables ONLY these primitives. */\n  allow?: Capability[];\n  /** Denylist of capabilities — wins over `allow`. */\n  deny?: Capability[];\n  /**\n   * Primitives to opt OUT of the built-in approval default. Pair with an\n   * `approvals` threshold to get \"auto-approve below the line, gate above it\"\n   * (approvals are escalate-only).\n   */\n  autoApprove?: Capability[];\n  /** Egress allow/deny applied to the runtime sandbox (hostnames/globs). */\n  network?: NetworkPolicy;\n}\n\nexport function policy(opts: Omit<PolicyConfig, \"kind\">): PolicyConfig {\n  return { kind: \"policy\", ...opts };\n}\n\n/* ────────────────────────────── template ─────────────────────────────────── */\n\nexport type IdentityKind = \"business\" | \"individual\";\nexport type VerificationKind = \"kyb\" | \"kyc\" | \"none\";\nexport type FormationKind = \"ein\" | \"llc\" | \"none\";\n\nexport interface IdentitySpec {\n  kind: IdentityKind;\n  /** KYB/KYC verification to run before the agent profile goes active. */\n  verify?: VerificationKind;\n  /** Legal entity formation, e.g. EIN/LLC. */\n  form?: FormationKind;\n  legalName?: string;\n}\n\nexport type CardKind = \"virtual\" | \"physical\";\n\nexport interface WalletSpec {\n  card?: CardKind;\n  /** e.g. \"$50/day\" */\n  limit?: string;\n}\n\nexport interface EmailSpec {\n  /** \"per-tenant\" for an isolated sending domain, or a concrete domain/address. */\n  domain?: string;\n  address?: string;\n  forwardTo?: string;\n  warmup?: boolean;\n}\n\nexport interface PhoneSpec {\n  sms?: boolean;\n  voice?: boolean;\n}\n\nexport interface CommsSpec {\n  email?: EmailSpec;\n  phone?: PhoneSpec;\n}\n\nexport interface AgentTemplateConfig {\n  readonly kind: \"agent_template\";\n  identity?: IdentitySpec;\n  wallet?: WalletSpec;\n  comms?: CommsSpec;\n  /** Name of a declared runtime pool, or omit for BYO-runtime. */\n  runtime?: string;\n  tools?: string[];\n  policy?: PolicyConfig;\n}\n\n/**\n * Declares an **agent template** — the blueprint for a governed agent profile\n * (identity, wallet, comms, policy). Instantiated per tenant at run-time with\n * `forUser(id).provision(name)`. List your templates under `agentProfiles` in\n * `defineConfig`.\n */\nexport function agentTemplate(opts: Omit<AgentTemplateConfig, \"kind\">): AgentTemplateConfig {\n  return { kind: \"agent_template\", ...opts };\n}\n\n/** @deprecated Renamed to {@link AgentTemplateConfig}. */\nexport type TemplateConfig = AgentTemplateConfig;\n/** @deprecated Renamed to {@link agentTemplate}. */\nexport const template = agentTemplate;\n\n/* ────────────────────────────── modules ──────────────────────────────────── */\n\nexport type ModuleTier = \"first-party\" | \"open\" | \"custom\";\n\nexport interface ModuleDefinition<TConfig = Record<string, unknown>> {\n  readonly kind: \"module\";\n  name: string;\n  tier?: ModuleTier;\n  /** Capabilities (tool names) the module contributes to an agent profile. */\n  capabilities?: string[];\n  config?: TConfig;\n  /** Optional provider behind the module (kept swappable). */\n  provider?: string;\n}\n\nexport function defineModule<TConfig = Record<string, unknown>>(\n  opts: Omit<ModuleDefinition<TConfig>, \"kind\">,\n): ModuleDefinition<TConfig> {\n  return { kind: \"module\", tier: \"custom\", ...opts };\n}\n\n/* ──────────────────────── multi-agent systems ────────────────────────────── */\n\n/**\n * A multi-agent system: a parent/manager agent profile (which holds the shared\n * budget) plus sub-agent agent profiles, each in its own isolated runtime. Spend\n * aggregates against the parent cap at the gateway; revoking the parent kills the\n * whole system. Instantiated at run-time with\n * `runtime(pool).startSystem({ root, members, topology })`.\n */\nexport interface SystemConfig {\n  readonly kind: \"system\";\n  /** Agent template name for the parent/manager agent profile. */\n  root: string;\n  /** Agent template names for the sub-agent agent profiles (scoped-down derivations). */\n  members: string[];\n  /** Human-readable coordination topology, e.g. \"manager → [researcher, writer]\". */\n  topology?: string;\n  /** Shared budget across the whole system, aggregated at the gateway. */\n  budget?: BudgetPolicy;\n}\n\nexport function system(opts: Omit<SystemConfig, \"kind\">): SystemConfig {\n  return { kind: \"system\", ...opts };\n}\n\n/* ────────────────────────────── defineConfig ─────────────────────────────── */\n\nexport interface NaiveConfig {\n  project: string;\n  /** Path A — shared, deploy-time infrastructure (optional; wraps Pulumi → AWS). */\n  infrastructure?: Record<string, CloudResource>;\n  /** Agent runtime pools — microVMs (optional; omit for BYO-runtime). */\n  runtime?: Record<string, RuntimePoolConfig>;\n  /**\n   * Per-tenant agent profiles — keyed by name, each an `agentTemplate(...)`\n   * (the regulated bundle + policy). Instantiated per tenant via\n   * `forUser(id).provision(name)`.\n   */\n  agentProfiles?: Record<string, AgentTemplateConfig>;\n  /** @deprecated Renamed to {@link NaiveConfig.agentProfiles}. */\n  templates?: Record<string, AgentTemplateConfig>;\n  /** Multi-agent systems composed from agent templates (parent + sub-agents). */\n  systems?: Record<string, SystemConfig>;\n  /** Custom/open modules to register. */\n  modules?: Record<string, ModuleDefinition>;\n}\n\n/**\n * Declares a Naïve project. Returns the config unchanged (typed + branded), to\n * be the default export of `naive.config.ts` and consumed by `naive up`.\n */\nexport function defineConfig(config: NaiveConfig): NaiveConfig {\n  return config;\n}\n\nexport default defineConfig;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAuCO,IAAM,QAAQ;AAAA,EACnB,IAAI,MAAoD;AACtD,WAAO,EAAE,MAAM,aAAa,GAAG,KAAK;AAAA,EACtC;AAAA,EACA,SAAS,MAA8D;AACrE,WAAO,EAAE,MAAM,kBAAkB,GAAG,KAAK;AAAA,EAC3C;AAAA,EACA,OAAO,MAA0D;AAC/D,WAAO,EAAE,MAAM,gBAAgB,GAAG,KAAK;AAAA,EACzC;AACF;AAkBO,IAAM,UAAU;AAAA,EACrB,KAAK,MAA0D;AAC7D,WAAO,EAAE,MAAM,gBAAgB,GAAG,KAAK;AAAA,EACzC;AACF;AAuEO,SAAS,OAAO,MAAgD;AACrE,SAAO,EAAE,MAAM,UAAU,GAAG,KAAK;AACnC;AA4DO,SAAS,cAAc,MAA8D;AAC1F,SAAO,EAAE,MAAM,kBAAkB,GAAG,KAAK;AAC3C;AAKO,IAAM,WAAW;AAiBjB,SAAS,aACd,MAC2B;AAC3B,SAAO,EAAE,MAAM,UAAU,MAAM,UAAU,GAAG,KAAK;AACnD;AAuBO,SAAS,OAAO,MAAgD;AACrE,SAAO,EAAE,MAAM,UAAU,GAAG,KAAK;AACnC;AA4BO,SAAS,aAAa,QAAkC;AAC7D,SAAO;AACT;AAEA,IAAO,gBAAQ;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,218 @@
+/**
+ * @usenaive-sdk/iac — Infrastructure-as-Code for governed agent profiles.
+ *
+ * Build-time, declarative, and side-effect free. You author a `naive.config.ts`
+ * with these builders; the CLI's `naive up` reads the exported config and
+ * registers shared infrastructure (Path A), the runtime pool, and the
+ * per-tenant agent profile templates (the regulated bundle).
+ *
+ * Nothing here makes API calls — it only produces typed config objects. Issuing
+ * cards, forming entities, and registering comms happens at run-time via
+ * `@usenaive-sdk/server` (`forUser(id).provision(template)`).
+ */
+type CloudWebFramework = "nextjs" | "remix" | "astro" | "static" | "node";
+type PostgresSize = "serverless" | "small" | "medium" | "large";
+interface CloudWebConfig {
+    readonly kind: "cloud.web";
+    framework: CloudWebFramework;
+    dir: string;
+    env?: Record<string, string>;
+}
+interface CloudPostgresConfig {
+    readonly kind: "cloud.postgres";
+    name: string;
+    size: PostgresSize;
+}
+interface CloudBucketConfig {
+    readonly kind: "cloud.bucket";
+    name: string;
+    public?: boolean;
+}
+type CloudResource = CloudWebConfig | CloudPostgresConfig | CloudBucketConfig;
+declare const cloud: {
+    web(opts: Omit<CloudWebConfig, "kind">): CloudWebConfig;
+    postgres(opts: Omit<CloudPostgresConfig, "kind">): CloudPostgresConfig;
+    bucket(opts: Omit<CloudBucketConfig, "kind">): CloudBucketConfig;
+};
+type RuntimeIsolation = "microvm" | "container";
+interface RuntimeAutoscale {
+    min: number;
+    max: number;
+}
+interface RuntimePoolConfig {
+    readonly kind: "runtime.pool";
+    source: string;
+    isolation: RuntimeIsolation;
+    autoscale?: RuntimeAutoscale;
+}
+declare const runtime: {
+    pool(opts: Omit<RuntimePoolConfig, "kind">): RuntimePoolConfig;
+};
+type Period = "day" | "week" | "month" | "year";
+/** A spend cap. Structured, or the shorthand string form `"$1500/mo"` / `"$50/day"`. */
+interface SpendCap {
+    amount: number;
+    /** ISO 4217, defaults to "USD". */
+    currency?: string;
+    period?: Period;
+}
+type Budget = SpendCap | string;
+interface BudgetPolicy {
+    cap: Budget;
+    /** Fraction 0..1 at which to alert, e.g. 0.8. */
+    alertAt?: number;
+    /** When true, exceeding the cap is a hard deny; otherwise it routes to approval. */
+    hard?: boolean;
+}
+type ComparisonOp = ">" | ">=" | "<" | "<=" | "==";
+/** A structured approval trigger, e.g. `{ on: "cards.charge", field: "amount", op: ">", value: 100 }`. */
+interface ApprovalCondition {
+    /** The capability/action this rule applies to, e.g. "cards.charge". */
+    on: Capability;
+    /** Optional numeric guard on a field of the action, e.g. `amount > 100`. */
+    field?: string;
+    op?: ComparisonOp;
+    value?: number;
+}
+type ApprovalChannel = "slack" | "email" | "webhook";
+interface ApprovalRule {
+    /** Structured condition, or the shorthand string `"cards.charge.amount > $100"`. */
+    when: ApprovalCondition | string;
+    via: ApprovalChannel | string;
+}
+interface NetworkPolicy {
+    allow?: string[];
+    deny?: string[];
+}
+/** A capability/action name, e.g. "cards.charge", "email.send", "search". */
+type Capability = string;
+interface PolicyConfig {
+    readonly kind: "policy";
+    /** Spend cap + alert threshold, aggregated at the governance gateway. */
+    budget?: BudgetPolicy;
+    /** Human-in-the-loop rules — matched actions are parked for approval. */
+    approvals?: ApprovalRule[];
+    /** Allowlist of capabilities. When set, the agent profile's AccountKit enables ONLY these primitives. */
+    allow?: Capability[];
+    /** Denylist of capabilities — wins over `allow`. */
+    deny?: Capability[];
+    /**
+     * Primitives to opt OUT of the built-in approval default. Pair with an
+     * `approvals` threshold to get "auto-approve below the line, gate above it"
+     * (approvals are escalate-only).
+     */
+    autoApprove?: Capability[];
+    /** Egress allow/deny applied to the runtime sandbox (hostnames/globs). */
+    network?: NetworkPolicy;
+}
+declare function policy(opts: Omit<PolicyConfig, "kind">): PolicyConfig;
+type IdentityKind = "business" | "individual";
+type VerificationKind = "kyb" | "kyc" | "none";
+type FormationKind = "ein" | "llc" | "none";
+interface IdentitySpec {
+    kind: IdentityKind;
+    /** KYB/KYC verification to run before the agent profile goes active. */
+    verify?: VerificationKind;
+    /** Legal entity formation, e.g. EIN/LLC. */
+    form?: FormationKind;
+    legalName?: string;
+}
+type CardKind = "virtual" | "physical";
+interface WalletSpec {
+    card?: CardKind;
+    /** e.g. "$50/day" */
+    limit?: string;
+}
+interface EmailSpec {
+    /** "per-tenant" for an isolated sending domain, or a concrete domain/address. */
+    domain?: string;
+    address?: string;
+    forwardTo?: string;
+    warmup?: boolean;
+}
+interface PhoneSpec {
+    sms?: boolean;
+    voice?: boolean;
+}
+interface CommsSpec {
+    email?: EmailSpec;
+    phone?: PhoneSpec;
+}
+interface AgentTemplateConfig {
+    readonly kind: "agent_template";
+    identity?: IdentitySpec;
+    wallet?: WalletSpec;
+    comms?: CommsSpec;
+    /** Name of a declared runtime pool, or omit for BYO-runtime. */
+    runtime?: string;
+    tools?: string[];
+    policy?: PolicyConfig;
+}
+/**
+ * Declares an **agent template** — the blueprint for a governed agent profile
+ * (identity, wallet, comms, policy). Instantiated per tenant at run-time with
+ * `forUser(id).provision(name)`. List your templates under `agentProfiles` in
+ * `defineConfig`.
+ */
+declare function agentTemplate(opts: Omit<AgentTemplateConfig, "kind">): AgentTemplateConfig;
+/** @deprecated Renamed to {@link AgentTemplateConfig}. */
+type TemplateConfig = AgentTemplateConfig;
+/** @deprecated Renamed to {@link agentTemplate}. */
+declare const template: typeof agentTemplate;
+type ModuleTier = "first-party" | "open" | "custom";
+interface ModuleDefinition<TConfig = Record<string, unknown>> {
+    readonly kind: "module";
+    name: string;
+    tier?: ModuleTier;
+    /** Capabilities (tool names) the module contributes to an agent profile. */
+    capabilities?: string[];
+    config?: TConfig;
+    /** Optional provider behind the module (kept swappable). */
+    provider?: string;
+}
+declare function defineModule<TConfig = Record<string, unknown>>(opts: Omit<ModuleDefinition<TConfig>, "kind">): ModuleDefinition<TConfig>;
+/**
+ * A multi-agent system: a parent/manager agent profile (which holds the shared
+ * budget) plus sub-agent agent profiles, each in its own isolated runtime. Spend
+ * aggregates against the parent cap at the gateway; revoking the parent kills the
+ * whole system. Instantiated at run-time with
+ * `runtime(pool).startSystem({ root, members, topology })`.
+ */
+interface SystemConfig {
+    readonly kind: "system";
+    /** Agent template name for the parent/manager agent profile. */
+    root: string;
+    /** Agent template names for the sub-agent agent profiles (scoped-down derivations). */
+    members: string[];
+    /** Human-readable coordination topology, e.g. "manager → [researcher, writer]". */
+    topology?: string;
+    /** Shared budget across the whole system, aggregated at the gateway. */
+    budget?: BudgetPolicy;
+}
+declare function system(opts: Omit<SystemConfig, "kind">): SystemConfig;
+interface NaiveConfig {
+    project: string;
+    /** Path A — shared, deploy-time infrastructure (optional; wraps Pulumi → AWS). */
+    infrastructure?: Record<string, CloudResource>;
+    /** Agent runtime pools — microVMs (optional; omit for BYO-runtime). */
+    runtime?: Record<string, RuntimePoolConfig>;
+    /**
+     * Per-tenant agent profiles — keyed by name, each an `agentTemplate(...)`
+     * (the regulated bundle + policy). Instantiated per tenant via
+     * `forUser(id).provision(name)`.
+     */
+    agentProfiles?: Record<string, AgentTemplateConfig>;
+    /** @deprecated Renamed to {@link NaiveConfig.agentProfiles}. */
+    templates?: Record<string, AgentTemplateConfig>;
+    /** Multi-agent systems composed from agent templates (parent + sub-agents). */
+    systems?: Record<string, SystemConfig>;
+    /** Custom/open modules to register. */
+    modules?: Record<string, ModuleDefinition>;
+}
+/**
+ * Declares a Naïve project. Returns the config unchanged (typed + branded), to
+ * be the default export of `naive.config.ts` and consumed by `naive up`.
+ */
+declare function defineConfig(config: NaiveConfig): NaiveConfig;
+
+export { type AgentTemplateConfig, type ApprovalChannel, type ApprovalCondition, type ApprovalRule, type Budget, type BudgetPolicy, type Capability, type CardKind, type CloudBucketConfig, type CloudPostgresConfig, type CloudResource, type CloudWebConfig, type CloudWebFramework, type CommsSpec, type ComparisonOp, type EmailSpec, type FormationKind, type IdentityKind, type IdentitySpec, type ModuleDefinition, type ModuleTier, type NaiveConfig, type NetworkPolicy, type Period, type PhoneSpec, type PolicyConfig, type PostgresSize, type RuntimeAutoscale, type RuntimeIsolation, type RuntimePoolConfig, type SpendCap, type SystemConfig, type TemplateConfig, type VerificationKind, type WalletSpec, agentTemplate, cloud, defineConfig as default, defineConfig, defineModule, policy, runtime, system, template };

package/dist/index.d.ts

@@ -0,0 +1,218 @@
+/**
+ * @usenaive-sdk/iac — Infrastructure-as-Code for governed agent profiles.
+ *
+ * Build-time, declarative, and side-effect free. You author a `naive.config.ts`
+ * with these builders; the CLI's `naive up` reads the exported config and
+ * registers shared infrastructure (Path A), the runtime pool, and the
+ * per-tenant agent profile templates (the regulated bundle).
+ *
+ * Nothing here makes API calls — it only produces typed config objects. Issuing
+ * cards, forming entities, and registering comms happens at run-time via
+ * `@usenaive-sdk/server` (`forUser(id).provision(template)`).
+ */
+type CloudWebFramework = "nextjs" | "remix" | "astro" | "static" | "node";
+type PostgresSize = "serverless" | "small" | "medium" | "large";
+interface CloudWebConfig {
+    readonly kind: "cloud.web";
+    framework: CloudWebFramework;
+    dir: string;
+    env?: Record<string, string>;
+}
+interface CloudPostgresConfig {
+    readonly kind: "cloud.postgres";
+    name: string;
+    size: PostgresSize;
+}
+interface CloudBucketConfig {
+    readonly kind: "cloud.bucket";
+    name: string;
+    public?: boolean;
+}
+type CloudResource = CloudWebConfig | CloudPostgresConfig | CloudBucketConfig;
+declare const cloud: {
+    web(opts: Omit<CloudWebConfig, "kind">): CloudWebConfig;
+    postgres(opts: Omit<CloudPostgresConfig, "kind">): CloudPostgresConfig;
+    bucket(opts: Omit<CloudBucketConfig, "kind">): CloudBucketConfig;
+};
+type RuntimeIsolation = "microvm" | "container";
+interface RuntimeAutoscale {
+    min: number;
+    max: number;
+}
+interface RuntimePoolConfig {
+    readonly kind: "runtime.pool";
+    source: string;
+    isolation: RuntimeIsolation;
+    autoscale?: RuntimeAutoscale;
+}
+declare const runtime: {
+    pool(opts: Omit<RuntimePoolConfig, "kind">): RuntimePoolConfig;
+};
+type Period = "day" | "week" | "month" | "year";
+/** A spend cap. Structured, or the shorthand string form `"$1500/mo"` / `"$50/day"`. */
+interface SpendCap {
+    amount: number;
+    /** ISO 4217, defaults to "USD". */
+    currency?: string;
+    period?: Period;
+}
+type Budget = SpendCap | string;
+interface BudgetPolicy {
+    cap: Budget;
+    /** Fraction 0..1 at which to alert, e.g. 0.8. */
+    alertAt?: number;
+    /** When true, exceeding the cap is a hard deny; otherwise it routes to approval. */
+    hard?: boolean;
+}
+type ComparisonOp = ">" | ">=" | "<" | "<=" | "==";
+/** A structured approval trigger, e.g. `{ on: "cards.charge", field: "amount", op: ">", value: 100 }`. */
+interface ApprovalCondition {
+    /** The capability/action this rule applies to, e.g. "cards.charge". */
+    on: Capability;
+    /** Optional numeric guard on a field of the action, e.g. `amount > 100`. */
+    field?: string;
+    op?: ComparisonOp;
+    value?: number;
+}
+type ApprovalChannel = "slack" | "email" | "webhook";
+interface ApprovalRule {
+    /** Structured condition, or the shorthand string `"cards.charge.amount > $100"`. */
+    when: ApprovalCondition | string;
+    via: ApprovalChannel | string;
+}
+interface NetworkPolicy {
+    allow?: string[];
+    deny?: string[];
+}
+/** A capability/action name, e.g. "cards.charge", "email.send", "search". */
+type Capability = string;
+interface PolicyConfig {
+    readonly kind: "policy";
+    /** Spend cap + alert threshold, aggregated at the governance gateway. */
+    budget?: BudgetPolicy;
+    /** Human-in-the-loop rules — matched actions are parked for approval. */
+    approvals?: ApprovalRule[];
+    /** Allowlist of capabilities. When set, the agent profile's AccountKit enables ONLY these primitives. */
+    allow?: Capability[];
+    /** Denylist of capabilities — wins over `allow`. */
+    deny?: Capability[];
+    /**
+     * Primitives to opt OUT of the built-in approval default. Pair with an
+     * `approvals` threshold to get "auto-approve below the line, gate above it"
+     * (approvals are escalate-only).
+     */
+    autoApprove?: Capability[];
+    /** Egress allow/deny applied to the runtime sandbox (hostnames/globs). */
+    network?: NetworkPolicy;
+}
+declare function policy(opts: Omit<PolicyConfig, "kind">): PolicyConfig;
+type IdentityKind = "business" | "individual";
+type VerificationKind = "kyb" | "kyc" | "none";
+type FormationKind = "ein" | "llc" | "none";
+interface IdentitySpec {
+    kind: IdentityKind;
+    /** KYB/KYC verification to run before the agent profile goes active. */
+    verify?: VerificationKind;
+    /** Legal entity formation, e.g. EIN/LLC. */
+    form?: FormationKind;
+    legalName?: string;
+}
+type CardKind = "virtual" | "physical";
+interface WalletSpec {
+    card?: CardKind;
+    /** e.g. "$50/day" */
+    limit?: string;
+}
+interface EmailSpec {
+    /** "per-tenant" for an isolated sending domain, or a concrete domain/address. */
+    domain?: string;
+    address?: string;
+    forwardTo?: string;
+    warmup?: boolean;
+}
+interface PhoneSpec {
+    sms?: boolean;
+    voice?: boolean;
+}
+interface CommsSpec {
+    email?: EmailSpec;
+    phone?: PhoneSpec;
+}
+interface AgentTemplateConfig {
+    readonly kind: "agent_template";
+    identity?: IdentitySpec;
+    wallet?: WalletSpec;
+    comms?: CommsSpec;
+    /** Name of a declared runtime pool, or omit for BYO-runtime. */
+    runtime?: string;
+    tools?: string[];
+    policy?: PolicyConfig;
+}
+/**
+ * Declares an **agent template** — the blueprint for a governed agent profile
+ * (identity, wallet, comms, policy). Instantiated per tenant at run-time with
+ * `forUser(id).provision(name)`. List your templates under `agentProfiles` in
+ * `defineConfig`.
+ */
+declare function agentTemplate(opts: Omit<AgentTemplateConfig, "kind">): AgentTemplateConfig;
+/** @deprecated Renamed to {@link AgentTemplateConfig}. */
+type TemplateConfig = AgentTemplateConfig;
+/** @deprecated Renamed to {@link agentTemplate}. */
+declare const template: typeof agentTemplate;
+type ModuleTier = "first-party" | "open" | "custom";
+interface ModuleDefinition<TConfig = Record<string, unknown>> {
+    readonly kind: "module";
+    name: string;
+    tier?: ModuleTier;
+    /** Capabilities (tool names) the module contributes to an agent profile. */
+    capabilities?: string[];
+    config?: TConfig;
+    /** Optional provider behind the module (kept swappable). */
+    provider?: string;
+}
+declare function defineModule<TConfig = Record<string, unknown>>(opts: Omit<ModuleDefinition<TConfig>, "kind">): ModuleDefinition<TConfig>;
+/**
+ * A multi-agent system: a parent/manager agent profile (which holds the shared
+ * budget) plus sub-agent agent profiles, each in its own isolated runtime. Spend
+ * aggregates against the parent cap at the gateway; revoking the parent kills the
+ * whole system. Instantiated at run-time with
+ * `runtime(pool).startSystem({ root, members, topology })`.
+ */
+interface SystemConfig {
+    readonly kind: "system";
+    /** Agent template name for the parent/manager agent profile. */
+    root: string;
+    /** Agent template names for the sub-agent agent profiles (scoped-down derivations). */
+    members: string[];
+    /** Human-readable coordination topology, e.g. "manager → [researcher, writer]". */
+    topology?: string;
+    /** Shared budget across the whole system, aggregated at the gateway. */
+    budget?: BudgetPolicy;
+}
+declare function system(opts: Omit<SystemConfig, "kind">): SystemConfig;
+interface NaiveConfig {
+    project: string;
+    /** Path A — shared, deploy-time infrastructure (optional; wraps Pulumi → AWS). */
+    infrastructure?: Record<string, CloudResource>;
+    /** Agent runtime pools — microVMs (optional; omit for BYO-runtime). */
+    runtime?: Record<string, RuntimePoolConfig>;
+    /**
+     * Per-tenant agent profiles — keyed by name, each an `agentTemplate(...)`
+     * (the regulated bundle + policy). Instantiated per tenant via
+     * `forUser(id).provision(name)`.
+     */
+    agentProfiles?: Record<string, AgentTemplateConfig>;
+    /** @deprecated Renamed to {@link NaiveConfig.agentProfiles}. */
+    templates?: Record<string, AgentTemplateConfig>;
+    /** Multi-agent systems composed from agent templates (parent + sub-agents). */
+    systems?: Record<string, SystemConfig>;
+    /** Custom/open modules to register. */
+    modules?: Record<string, ModuleDefinition>;
+}
+/**
+ * Declares a Naïve project. Returns the config unchanged (typed + branded), to
+ * be the default export of `naive.config.ts` and consumed by `naive up`.
+ */
+declare function defineConfig(config: NaiveConfig): NaiveConfig;
+
+export { type AgentTemplateConfig, type ApprovalChannel, type ApprovalCondition, type ApprovalRule, type Budget, type BudgetPolicy, type Capability, type CardKind, type CloudBucketConfig, type CloudPostgresConfig, type CloudResource, type CloudWebConfig, type CloudWebFramework, type CommsSpec, type ComparisonOp, type EmailSpec, type FormationKind, type IdentityKind, type IdentitySpec, type ModuleDefinition, type ModuleTier, type NaiveConfig, type NetworkPolicy, type Period, type PhoneSpec, type PolicyConfig, type PostgresSize, type RuntimeAutoscale, type RuntimeIsolation, type RuntimePoolConfig, type SpendCap, type SystemConfig, type TemplateConfig, type VerificationKind, type WalletSpec, agentTemplate, cloud, defineConfig as default, defineConfig, defineModule, policy, runtime, system, template };

package/dist/index.js

@@ -0,0 +1,46 @@
+// src/index.ts
+var cloud = {
+  web(opts) {
+    return { kind: "cloud.web", ...opts };
+  },
+  postgres(opts) {
+    return { kind: "cloud.postgres", ...opts };
+  },
+  bucket(opts) {
+    return { kind: "cloud.bucket", ...opts };
+  }
+};
+var runtime = {
+  pool(opts) {
+    return { kind: "runtime.pool", ...opts };
+  }
+};
+function policy(opts) {
+  return { kind: "policy", ...opts };
+}
+function agentTemplate(opts) {
+  return { kind: "agent_template", ...opts };
+}
+var template = agentTemplate;
+function defineModule(opts) {
+  return { kind: "module", tier: "custom", ...opts };
+}
+function system(opts) {
+  return { kind: "system", ...opts };
+}
+function defineConfig(config) {
+  return config;
+}
+var index_default = defineConfig;
+export {
+  agentTemplate,
+  cloud,
+  index_default as default,
+  defineConfig,
+  defineModule,
+  policy,
+  runtime,
+  system,
+  template
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * @usenaive-sdk/iac — Infrastructure-as-Code for governed agent profiles.\n *\n * Build-time, declarative, and side-effect free. You author a `naive.config.ts`\n * with these builders; the CLI's `naive up` reads the exported config and\n * registers shared infrastructure (Path A), the runtime pool, and the\n * per-tenant agent profile templates (the regulated bundle).\n *\n * Nothing here makes API calls — it only produces typed config objects. Issuing\n * cards, forming entities, and registering comms happens at run-time via\n * `@usenaive-sdk/server` (`forUser(id).provision(template)`).\n */\n\n/* ───────────────────────────── cloud (Path A) ───────────────────────────── */\n\nexport type CloudWebFramework = \"nextjs\" | \"remix\" | \"astro\" | \"static\" | \"node\";\nexport type PostgresSize = \"serverless\" | \"small\" | \"medium\" | \"large\";\n\nexport interface CloudWebConfig {\n  readonly kind: \"cloud.web\";\n  framework: CloudWebFramework;\n  dir: string;\n  env?: Record<string, string>;\n}\n\nexport interface CloudPostgresConfig {\n  readonly kind: \"cloud.postgres\";\n  name: string;\n  size: PostgresSize;\n}\n\nexport interface CloudBucketConfig {\n  readonly kind: \"cloud.bucket\";\n  name: string;\n  public?: boolean;\n}\n\nexport type CloudResource = CloudWebConfig | CloudPostgresConfig | CloudBucketConfig;\n\nexport const cloud = {\n  web(opts: Omit<CloudWebConfig, \"kind\">): CloudWebConfig {\n    return { kind: \"cloud.web\", ...opts };\n  },\n  postgres(opts: Omit<CloudPostgresConfig, \"kind\">): CloudPostgresConfig {\n    return { kind: \"cloud.postgres\", ...opts };\n  },\n  bucket(opts: Omit<CloudBucketConfig, \"kind\">): CloudBucketConfig {\n    return { kind: \"cloud.bucket\", ...opts };\n  },\n};\n\n/* ───────────────────────────── runtime (Path B) ──────────────────────────── */\n\nexport type RuntimeIsolation = \"microvm\" | \"container\";\n\nexport interface RuntimeAutoscale {\n  min: number;\n  max: number;\n}\n\nexport interface RuntimePoolConfig {\n  readonly kind: \"runtime.pool\";\n  source: string;\n  isolation: RuntimeIsolation;\n  autoscale?: RuntimeAutoscale;\n}\n\nexport const runtime = {\n  pool(opts: Omit<RuntimePoolConfig, \"kind\">): RuntimePoolConfig {\n    return { kind: \"runtime.pool\", ...opts };\n  },\n};\n\n/* ────────────────────────────── policy ───────────────────────────────────── */\n\nexport type Period = \"day\" | \"week\" | \"month\" | \"year\";\n\n/** A spend cap. Structured, or the shorthand string form `\"$1500/mo\"` / `\"$50/day\"`. */\nexport interface SpendCap {\n  amount: number;\n  /** ISO 4217, defaults to \"USD\". */\n  currency?: string;\n  period?: Period;\n}\nexport type Budget = SpendCap | string;\n\nexport interface BudgetPolicy {\n  cap: Budget;\n  /** Fraction 0..1 at which to alert, e.g. 0.8. */\n  alertAt?: number;\n  /** When true, exceeding the cap is a hard deny; otherwise it routes to approval. */\n  hard?: boolean;\n}\n\nexport type ComparisonOp = \">\" | \">=\" | \"<\" | \"<=\" | \"==\";\n\n/** A structured approval trigger, e.g. `{ on: \"cards.charge\", field: \"amount\", op: \">\", value: 100 }`. */\nexport interface ApprovalCondition {\n  /** The capability/action this rule applies to, e.g. \"cards.charge\". */\n  on: Capability;\n  /** Optional numeric guard on a field of the action, e.g. `amount > 100`. */\n  field?: string;\n  op?: ComparisonOp;\n  value?: number;\n}\n\nexport type ApprovalChannel = \"slack\" | \"email\" | \"webhook\";\n\nexport interface ApprovalRule {\n  /** Structured condition, or the shorthand string `\"cards.charge.amount > $100\"`. */\n  when: ApprovalCondition | string;\n  via: ApprovalChannel | string;\n}\n\nexport interface NetworkPolicy {\n  allow?: string[];\n  deny?: string[];\n}\n\n/** A capability/action name, e.g. \"cards.charge\", \"email.send\", \"search\". */\nexport type Capability = string;\n\nexport interface PolicyConfig {\n  readonly kind: \"policy\";\n  /** Spend cap + alert threshold, aggregated at the governance gateway. */\n  budget?: BudgetPolicy;\n  /** Human-in-the-loop rules — matched actions are parked for approval. */\n  approvals?: ApprovalRule[];\n  /** Allowlist of capabilities. When set, the agent profile's AccountKit enables ONLY these primitives. */\n  allow?: Capability[];\n  /** Denylist of capabilities — wins over `allow`. */\n  deny?: Capability[];\n  /**\n   * Primitives to opt OUT of the built-in approval default. Pair with an\n   * `approvals` threshold to get \"auto-approve below the line, gate above it\"\n   * (approvals are escalate-only).\n   */\n  autoApprove?: Capability[];\n  /** Egress allow/deny applied to the runtime sandbox (hostnames/globs). */\n  network?: NetworkPolicy;\n}\n\nexport function policy(opts: Omit<PolicyConfig, \"kind\">): PolicyConfig {\n  return { kind: \"policy\", ...opts };\n}\n\n/* ────────────────────────────── template ─────────────────────────────────── */\n\nexport type IdentityKind = \"business\" | \"individual\";\nexport type VerificationKind = \"kyb\" | \"kyc\" | \"none\";\nexport type FormationKind = \"ein\" | \"llc\" | \"none\";\n\nexport interface IdentitySpec {\n  kind: IdentityKind;\n  /** KYB/KYC verification to run before the agent profile goes active. */\n  verify?: VerificationKind;\n  /** Legal entity formation, e.g. EIN/LLC. */\n  form?: FormationKind;\n  legalName?: string;\n}\n\nexport type CardKind = \"virtual\" | \"physical\";\n\nexport interface WalletSpec {\n  card?: CardKind;\n  /** e.g. \"$50/day\" */\n  limit?: string;\n}\n\nexport interface EmailSpec {\n  /** \"per-tenant\" for an isolated sending domain, or a concrete domain/address. */\n  domain?: string;\n  address?: string;\n  forwardTo?: string;\n  warmup?: boolean;\n}\n\nexport interface PhoneSpec {\n  sms?: boolean;\n  voice?: boolean;\n}\n\nexport interface CommsSpec {\n  email?: EmailSpec;\n  phone?: PhoneSpec;\n}\n\nexport interface AgentTemplateConfig {\n  readonly kind: \"agent_template\";\n  identity?: IdentitySpec;\n  wallet?: WalletSpec;\n  comms?: CommsSpec;\n  /** Name of a declared runtime pool, or omit for BYO-runtime. */\n  runtime?: string;\n  tools?: string[];\n  policy?: PolicyConfig;\n}\n\n/**\n * Declares an **agent template** — the blueprint for a governed agent profile\n * (identity, wallet, comms, policy). Instantiated per tenant at run-time with\n * `forUser(id).provision(name)`. List your templates under `agentProfiles` in\n * `defineConfig`.\n */\nexport function agentTemplate(opts: Omit<AgentTemplateConfig, \"kind\">): AgentTemplateConfig {\n  return { kind: \"agent_template\", ...opts };\n}\n\n/** @deprecated Renamed to {@link AgentTemplateConfig}. */\nexport type TemplateConfig = AgentTemplateConfig;\n/** @deprecated Renamed to {@link agentTemplate}. */\nexport const template = agentTemplate;\n\n/* ────────────────────────────── modules ──────────────────────────────────── */\n\nexport type ModuleTier = \"first-party\" | \"open\" | \"custom\";\n\nexport interface ModuleDefinition<TConfig = Record<string, unknown>> {\n  readonly kind: \"module\";\n  name: string;\n  tier?: ModuleTier;\n  /** Capabilities (tool names) the module contributes to an agent profile. */\n  capabilities?: string[];\n  config?: TConfig;\n  /** Optional provider behind the module (kept swappable). */\n  provider?: string;\n}\n\nexport function defineModule<TConfig = Record<string, unknown>>(\n  opts: Omit<ModuleDefinition<TConfig>, \"kind\">,\n): ModuleDefinition<TConfig> {\n  return { kind: \"module\", tier: \"custom\", ...opts };\n}\n\n/* ──────────────────────── multi-agent systems ────────────────────────────── */\n\n/**\n * A multi-agent system: a parent/manager agent profile (which holds the shared\n * budget) plus sub-agent agent profiles, each in its own isolated runtime. Spend\n * aggregates against the parent cap at the gateway; revoking the parent kills the\n * whole system. Instantiated at run-time with\n * `runtime(pool).startSystem({ root, members, topology })`.\n */\nexport interface SystemConfig {\n  readonly kind: \"system\";\n  /** Agent template name for the parent/manager agent profile. */\n  root: string;\n  /** Agent template names for the sub-agent agent profiles (scoped-down derivations). */\n  members: string[];\n  /** Human-readable coordination topology, e.g. \"manager → [researcher, writer]\". */\n  topology?: string;\n  /** Shared budget across the whole system, aggregated at the gateway. */\n  budget?: BudgetPolicy;\n}\n\nexport function system(opts: Omit<SystemConfig, \"kind\">): SystemConfig {\n  return { kind: \"system\", ...opts };\n}\n\n/* ────────────────────────────── defineConfig ─────────────────────────────── */\n\nexport interface NaiveConfig {\n  project: string;\n  /** Path A — shared, deploy-time infrastructure (optional; wraps Pulumi → AWS). */\n  infrastructure?: Record<string, CloudResource>;\n  /** Agent runtime pools — microVMs (optional; omit for BYO-runtime). */\n  runtime?: Record<string, RuntimePoolConfig>;\n  /**\n   * Per-tenant agent profiles — keyed by name, each an `agentTemplate(...)`\n   * (the regulated bundle + policy). Instantiated per tenant via\n   * `forUser(id).provision(name)`.\n   */\n  agentProfiles?: Record<string, AgentTemplateConfig>;\n  /** @deprecated Renamed to {@link NaiveConfig.agentProfiles}. */\n  templates?: Record<string, AgentTemplateConfig>;\n  /** Multi-agent systems composed from agent templates (parent + sub-agents). */\n  systems?: Record<string, SystemConfig>;\n  /** Custom/open modules to register. */\n  modules?: Record<string, ModuleDefinition>;\n}\n\n/**\n * Declares a Naïve project. Returns the config unchanged (typed + branded), to\n * be the default export of `naive.config.ts` and consumed by `naive up`.\n */\nexport function defineConfig(config: NaiveConfig): NaiveConfig {\n  return config;\n}\n\nexport default defineConfig;\n"],"mappings":";AAuCO,IAAM,QAAQ;AAAA,EACnB,IAAI,MAAoD;AACtD,WAAO,EAAE,MAAM,aAAa,GAAG,KAAK;AAAA,EACtC;AAAA,EACA,SAAS,MAA8D;AACrE,WAAO,EAAE,MAAM,kBAAkB,GAAG,KAAK;AAAA,EAC3C;AAAA,EACA,OAAO,MAA0D;AAC/D,WAAO,EAAE,MAAM,gBAAgB,GAAG,KAAK;AAAA,EACzC;AACF;AAkBO,IAAM,UAAU;AAAA,EACrB,KAAK,MAA0D;AAC7D,WAAO,EAAE,MAAM,gBAAgB,GAAG,KAAK;AAAA,EACzC;AACF;AAuEO,SAAS,OAAO,MAAgD;AACrE,SAAO,EAAE,MAAM,UAAU,GAAG,KAAK;AACnC;AA4DO,SAAS,cAAc,MAA8D;AAC1F,SAAO,EAAE,MAAM,kBAAkB,GAAG,KAAK;AAC3C;AAKO,IAAM,WAAW;AAiBjB,SAAS,aACd,MAC2B;AAC3B,SAAO,EAAE,MAAM,UAAU,MAAM,UAAU,GAAG,KAAK;AACnD;AAuBO,SAAS,OAAO,MAAgD;AACrE,SAAO,EAAE,MAAM,UAAU,GAAG,KAAK;AACnC;AA4BO,SAAS,aAAa,QAAkC;AAC7D,SAAO;AACT;AAEA,IAAO,gBAAQ;","names":[]}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@usenaive-sdk/iac",
+  "version": "0.1.0",
+  "description": "Naïve Infrastructure-as-Code — declarative build-time config for governed agent profiles (defineConfig, cloud, runtime, agentTemplate, policy, defineModule).",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^22.15.3",
+    "tsup": "^8.0.0",
+    "typescript": "^5.7.3"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit"
+  }
+}