@vasanthcambium/vite-plugin-nbi-proxy 0.1.0

package/dist/constants.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Configurable defaults for the NBI proxy plugin.
+ * Override via NbiProxyOptions where marked optional.
+ */
+export declare const PROXY_DEFAULTS: {
+    /** Path intercepted by the dev server middleware. */
+    readonly INTERCEPT_PREFIX: "/api/";
+    /** Cookie name the BFF sets after a successful login. */
+    readonly SESSION_COOKIE_NAME: "apps.sid";
+    /** Whether to automatically re-login and retry on a 401 from the BFF. */
+    readonly RETRY_ON_401: true;
+    /** Milliseconds to wait before the retry after a 401. */
+    readonly RETRY_DELAY_MS: 500;
+    /** Per-request timeout in milliseconds. */
+    readonly REQUEST_TIMEOUT_MS: 15000;
+    /** Headers forwarded from the browser request to the BFF. */
+    readonly FORWARDED_HEADERS: readonly string[];
+};
+/**
+ * Allowlist of upstream response headers forwarded to the browser.
+ * Using an allowlist rather than a blocklist prevents set-cookie and other
+ * sensitive headers from leaking if new headers are added upstream.
+ */
+export declare const FORWARDED_RESPONSE_HEADERS: Set<string>;
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,cAAc;IACzB,qDAAqD;;IAGrD,yDAAyD;;IAGzD,yEAAyE;;IAGzE,yDAAyD;;IAGzD,2CAA2C;;IAG3C,6DAA6D;gCACO,SAAS,MAAM,EAAE;CAC7E,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,aAQrC,CAAC"}

package/dist/constants.js

@@ -0,0 +1,33 @@
+/**
+ * Configurable defaults for the NBI proxy plugin.
+ * Override via NbiProxyOptions where marked optional.
+ */
+export const PROXY_DEFAULTS = {
+    /** Path intercepted by the dev server middleware. */
+    INTERCEPT_PREFIX: '/api/',
+    /** Cookie name the BFF sets after a successful login. */
+    SESSION_COOKIE_NAME: 'apps.sid',
+    /** Whether to automatically re-login and retry on a 401 from the BFF. */
+    RETRY_ON_401: true,
+    /** Milliseconds to wait before the retry after a 401. */
+    RETRY_DELAY_MS: 500,
+    /** Per-request timeout in milliseconds. */
+    REQUEST_TIMEOUT_MS: 15_000,
+    /** Headers forwarded from the browser request to the BFF. */
+    FORWARDED_HEADERS: ['content-type', 'accept', 'accept-language'],
+};
+/**
+ * Allowlist of upstream response headers forwarded to the browser.
+ * Using an allowlist rather than a blocklist prevents set-cookie and other
+ * sensitive headers from leaking if new headers are added upstream.
+ */
+export const FORWARDED_RESPONSE_HEADERS = new Set([
+    'content-type',
+    'content-length',
+    'content-encoding',
+    'cache-control',
+    'last-modified',
+    'etag',
+    'vary',
+]);
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,qDAAqD;IACrD,gBAAgB,EAAE,OAAO;IAEzB,yDAAyD;IACzD,mBAAmB,EAAE,UAAU;IAE/B,yEAAyE;IACzE,YAAY,EAAE,IAAI;IAElB,yDAAyD;IACzD,cAAc,EAAE,GAAG;IAEnB,2CAA2C;IAC3C,kBAAkB,EAAE,MAAM;IAE1B,6DAA6D;IAC7D,iBAAiB,EAAE,CAAC,cAAc,EAAE,QAAQ,EAAE,iBAAiB,CAAsB;CAC7E,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IAChD,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;IACf,eAAe;IACf,MAAM;IACN,MAAM;CACP,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @cmbmwifi/vite-plugin-nbi-proxy
+ *
+ * Dev-only Vite plugin. Intercepts every /api/* request from the browser,
+ * logs in to the MarketApps BFF once using NBI_CLIENT_ID / NBI_CLIENT_SECRET
+ * from the process environment (never from import.meta.env), stores the
+ * resulting apps.sid session cookie in plugin memory, and forwards subsequent
+ * requests to the BFF at the configured CloudFront domain.
+ *
+ * In production the SPA is served by CloudFront and the BFF session comes
+ * from the SSO flow initiated by cnMaestro — this plugin is never involved.
+ */
+import type { Plugin } from 'vite';
+export interface NbiProxyOptions {
+    /** CloudFront domain for the target environment, e.g. https://dev.test-easy-apps.cloud.cambiumnetworks.com */
+    cfDomain: string;
+    /** app_category from apps-platform-entry.yaml, e.g. "enterprise" */
+    appCategory: string;
+    /** app_type from apps-platform-entry.yaml, e.g. "network-survey" */
+    appType: string;
+}
+export declare function nbiProxy(options: NbiProxyOptions): Plugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAiB,MAAM,MAAM,CAAC;AAIlD,MAAM,WAAW,eAAe;IAC9B,8GAA8G;IAC9G,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;CACjB;AAQD,wBAAgB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CA4IzD"}

package/dist/index.js

@@ -0,0 +1,130 @@
+/**
+ * @cmbmwifi/vite-plugin-nbi-proxy
+ *
+ * Dev-only Vite plugin. Intercepts every /api/* request from the browser,
+ * logs in to the MarketApps BFF once using NBI_CLIENT_ID / NBI_CLIENT_SECRET
+ * from the process environment (never from import.meta.env), stores the
+ * resulting apps.sid session cookie in plugin memory, and forwards subsequent
+ * requests to the BFF at the configured CloudFront domain.
+ *
+ * In production the SPA is served by CloudFront and the BFF session comes
+ * from the SSO flow initiated by cnMaestro — this plugin is never involved.
+ */
+import { PROXY_DEFAULTS, FORWARDED_RESPONSE_HEADERS } from './constants.js';
+export function nbiProxy(options) {
+    const { cfDomain, appCategory, appType } = options;
+    const loginUrl = `${cfDomain}/${appCategory}/${appType}/api/v2/login`;
+    const apiBase = `${cfDomain}/${appCategory}/${appType}/api`;
+    let sessionCookie = null;
+    async function doLogin() {
+        const clientId = process.env['NBI_CLIENT_ID'] ?? '';
+        const clientSecret = process.env['NBI_CLIENT_SECRET'] ?? '';
+        if (!clientId || !clientSecret) {
+            throw new Error('[nbi-proxy] NBI_CLIENT_ID and NBI_CLIENT_SECRET must be set in .env.development');
+        }
+        const res = await fetch(loginUrl, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ client_id: clientId, client_secret: clientSecret }),
+            signal: AbortSignal.timeout(PROXY_DEFAULTS.REQUEST_TIMEOUT_MS),
+        });
+        if (!res.ok) {
+            const body = await res.text().catch(() => '');
+            throw new Error(`[nbi-proxy] Login failed (${res.status}): ${body}`);
+        }
+        // Use getSetCookie() to safely iterate individual set-cookie headers
+        // without the ambiguity of comma-splitting a raw header string.
+        const sessionHeader = res.headers.getSetCookie().find((h) => h.startsWith(`${PROXY_DEFAULTS.SESSION_COOKIE_NAME}=`));
+        if (!sessionHeader) {
+            throw new Error('[nbi-proxy] Login succeeded but no session cookie in response');
+        }
+        // Cookie value is everything between "name=" and the first ";"
+        const value = sessionHeader.split(';')[0]?.split('=').slice(1).join('=') ?? '';
+        if (!value) {
+            throw new Error('[nbi-proxy] Login succeeded but session cookie value is empty');
+        }
+        return value;
+    }
+    async function doForward(method, url, reqHeaders, body, cookie) {
+        // Reject path-traversal attempts before forwarding.
+        const normalised = new URL(url, 'http://localhost').pathname;
+        if (!normalised.startsWith(PROXY_DEFAULTS.INTERCEPT_PREFIX)) {
+            throw new Error(`[nbi-proxy] Rejected request with unexpected path: ${url}`);
+        }
+        const target = `${apiBase}${url}`;
+        const headers = {
+            cookie: `${PROXY_DEFAULTS.SESSION_COOKIE_NAME}=${cookie}`,
+        };
+        for (const name of PROXY_DEFAULTS.FORWARDED_HEADERS) {
+            const val = reqHeaders[name];
+            if (typeof val === 'string')
+                headers[name] = val;
+        }
+        const upstream = await fetch(target, {
+            method,
+            headers,
+            ...(body.length > 0 ? { body } : {}),
+            signal: AbortSignal.timeout(PROXY_DEFAULTS.REQUEST_TIMEOUT_MS),
+        });
+        return {
+            status: upstream.status,
+            headers: upstream.headers,
+            body: await upstream.arrayBuffer(),
+        };
+    }
+    function delay(ms) {
+        return new Promise((r) => setTimeout(r, ms));
+    }
+    return {
+        name: 'vite-plugin-nbi-proxy',
+        apply: 'serve',
+        configureServer(server) {
+            server.middlewares.use(async (req, res, next) => {
+                if (!req.url?.startsWith(PROXY_DEFAULTS.INTERCEPT_PREFIX)) {
+                    next();
+                    return;
+                }
+                try {
+                    // Buffer the request body once so it can be replayed on retry.
+                    const chunks = [];
+                    for await (const chunk of req) {
+                        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+                    }
+                    const bodyBuf = Buffer.concat(chunks);
+                    if (!sessionCookie) {
+                        sessionCookie = await doLogin();
+                    }
+                    let result = await doForward(req.method ?? 'GET', req.url, req.headers, bodyBuf, sessionCookie);
+                    // Transparent re-login on session expiry — single retry for idempotent methods only.
+                    // POST/PATCH are excluded: the BFF may have already acted on the request.
+                    const method = (req.method ?? 'GET').toUpperCase();
+                    const safeToRetry = ['GET', 'HEAD', 'OPTIONS', 'PUT', 'DELETE'].includes(method);
+                    if (result.status === 401 && PROXY_DEFAULTS.RETRY_ON_401 && safeToRetry) {
+                        sessionCookie = null;
+                        await delay(PROXY_DEFAULTS.RETRY_DELAY_MS);
+                        sessionCookie = await doLogin();
+                        result = await doForward(req.method ?? 'GET', req.url, req.headers, bodyBuf, sessionCookie);
+                    }
+                    res.statusCode = result.status;
+                    // Allowlist response headers forwarded to the browser.
+                    // set-cookie is intentionally excluded — the session cookie stays
+                    // in the plugin's memory, never reaches the browser.
+                    result.headers.forEach((value, key) => {
+                        if (FORWARDED_RESPONSE_HEADERS.has(key.toLowerCase())) {
+                            res.setHeader(key, value);
+                        }
+                    });
+                    res.end(Buffer.from(result.body));
+                }
+                catch (err) {
+                    if (!res.headersSent) {
+                        res.statusCode = 502;
+                        res.setHeader('content-type', 'application/json');
+                        res.end(JSON.stringify({ error: String(err) }));
+                    }
+                }
+            });
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAiB5E,MAAM,UAAU,QAAQ,CAAC,OAAwB;IAC/C,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEnD,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,WAAW,IAAI,OAAO,eAAe,CAAC;IACtE,MAAM,OAAO,GAAI,GAAG,QAAQ,IAAI,WAAW,IAAI,OAAO,MAAM,CAAC;IAE7D,IAAI,aAAa,GAAkB,IAAI,CAAC;IAExC,KAAK,UAAU,OAAO;QACpB,MAAM,QAAQ,GAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAQ,EAAE,CAAC;QAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;QAE5D,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YAChC,MAAM,EAAG,MAAM;YACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAK,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;YAC7E,MAAM,EAAG,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC;SAChE,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,qEAAqE;QACrE,gEAAgE;QAChE,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1D,CAAC,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC,mBAAmB,GAAG,CAAC,CACvD,CAAC;QACF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,+DAA+D;QAC/D,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,UAAU,SAAS,CACtB,MAAe,EACf,GAAe,EACf,UAAsC,EACtC,IAAe,EACf,MAAe;QAEf,oDAAoD;QACpD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,sDAAsD,GAAG,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,MAAM,GAAI,GAAG,OAAO,GAAG,GAAG,EAAE,CAAC;QACnC,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,GAAG,cAAc,CAAC,mBAAmB,IAAI,MAAM,EAAE;SAC1D,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,iBAAiB,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YACnC,MAAM;YACN,OAAO;YACP,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC;SAC/D,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAG,QAAQ,CAAC,MAAM;YACxB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,IAAI,EAAK,MAAM,QAAQ,CAAC,WAAW,EAAE;SACtC,CAAC;IACJ,CAAC;IAED,SAAS,KAAK,CAAC,EAAU;QACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO;QACL,IAAI,EAAG,uBAAuB;QAC9B,KAAK,EAAE,OAAO;QAEd,eAAe,CAAC,MAAqB;YACnC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,IAAgB,EAAE,EAAE;gBAC3F,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAAC,IAAI,EAAE,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAE9E,IAAI,CAAC;oBACH,+DAA+D;oBAC/D,MAAM,MAAM,GAAa,EAAE,CAAC;oBAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAA6B,EAAE,CAAC;wBACxD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,CAAC;oBAC7E,CAAC;oBACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAEtC,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,aAAa,GAAG,MAAM,OAAO,EAAE,CAAC;oBAClC,CAAC;oBAED,IAAI,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;oBAEhG,qFAAqF;oBACrF,0EAA0E;oBAC1E,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;oBACnD,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACjF,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC;wBACxE,aAAa,GAAG,IAAI,CAAC;wBACrB,MAAM,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;wBAC3C,aAAa,GAAG,MAAM,OAAO,EAAE,CAAC;wBAChC,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;oBAC9F,CAAC;oBAED,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;oBAC/B,uDAAuD;oBACvD,kEAAkE;oBAClE,qDAAqD;oBACrD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;wBACpC,IAAI,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;4BACtD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;wBAC5B,CAAC;oBACH,CAAC,CAAC,CAAC;oBACH,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACpC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;wBACrB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;wBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;wBAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@vasanthcambium/vite-plugin-nbi-proxy",
+  "version": "0.1.0",
+  "description": "Vite dev-server plugin that proxies /api/* to the MarketApps BFF. Dev-only — not included in production builds.",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vasanthcambium/marketapps-developer-platform.git",
+    "directory": "vite-plugin/packages/nbi-proxy"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" }
+  },
+  "files": ["dist", "README.md"],
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "scripts": {
+    "build":     "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit"
+  },
+  "peerDependencies": {
+    "vite": "^5.0.0 || ^6.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript":  "~6.0.0",
+    "vite":        "^5.4.0"
+  },
+  "engines": { "node": ">=22.0" },
+  "sideEffects": false,
+  "keywords": ["vite", "plugin", "cnmaestro", "cambium", "marketapps", "proxy", "nbi"]
+}