auspex 0.3.0 → 0.3.1

package/dist/security/url-validator.js

@@ -0,0 +1,78 @@
+import { resolve } from "node:dns/promises";
+const ALLOWED_PROTOCOLS = new Set(["http:", "https:"]);
+const BLOCKED_HOSTS = new Set(["localhost", "[::1]"]);
+const PRIVATE_IP_RANGES = [
+    /^127\./,
+    /^10\./,
+    /^192\.168\./,
+    /^172\.(1[6-9]|2\d|3[01])\./,
+    /^169\.254\./,
+    /^0\./,
+    /^fc00:/i,
+    /^fe80:/i,
+    /^::1$/,
+    // IPv6-mapped IPv4 addresses (::ffff:127.0.0.1, ::ffff:10.0.0.1, etc.)
+    /^::ffff:127\./i,
+    /^::ffff:10\./i,
+    /^::ffff:192\.168\./i,
+    /^::ffff:172\.(1[6-9]|2\d|3[01])\./i,
+    /^::ffff:169\.254\./i,
+    /^::ffff:0\./i,
+];
+function isPrivateIp(ip) {
+    return PRIVATE_IP_RANGES.some((range) => range.test(ip));
+}
+export class UrlValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "UrlValidationError";
+    }
+}
+export async function validateUrl(rawUrl, options = {}) {
+    let parsed;
+    try {
+        parsed = new URL(rawUrl);
+    }
+    catch {
+        throw new UrlValidationError(`Invalid URL: ${rawUrl}`);
+    }
+    if (!ALLOWED_PROTOCOLS.has(parsed.protocol)) {
+        throw new UrlValidationError(`Blocked protocol: ${parsed.protocol} — only http and https are allowed`);
+    }
+    const hostname = parsed.hostname;
+    if (BLOCKED_HOSTS.has(hostname)) {
+        throw new UrlValidationError(`Blocked host: ${hostname}`);
+    }
+    if (isPrivateIp(hostname)) {
+        throw new UrlValidationError(`Blocked private IP: ${hostname}`);
+    }
+    if (options.allowedDomains && options.allowedDomains.length > 0) {
+        const allowed = options.allowedDomains.some((d) => hostname === d || hostname.endsWith(`.${d}`));
+        if (!allowed) {
+            throw new UrlValidationError(`Domain ${hostname} is not in the allowedDomains list`);
+        }
+    }
+    if (options.blockedDomains && options.blockedDomains.length > 0) {
+        const blocked = options.blockedDomains.some((d) => hostname === d || hostname.endsWith(`.${d}`));
+        if (blocked) {
+            throw new UrlValidationError(`Domain ${hostname} is in the blockedDomains list`);
+        }
+    }
+    // DNS rebinding protection — fail CLOSED on DNS errors
+    try {
+        const addresses = await resolve(hostname);
+        for (const addr of addresses) {
+            if (isPrivateIp(addr)) {
+                throw new UrlValidationError(`DNS rebinding detected: ${hostname} resolves to private IP ${addr}`);
+            }
+        }
+    }
+    catch (err) {
+        if (err instanceof UrlValidationError)
+            throw err;
+        // DNS resolution failed — reject for safety (fail closed)
+        throw new UrlValidationError(`DNS resolution failed for ${hostname} — rejecting for safety`);
+    }
+    return parsed.href;
+}
+//# sourceMappingURL=url-validator.js.map

package/dist/security/url-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-validator.js","sourceRoot":"","sources":["../../src/security/url-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEvD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtD,MAAM,iBAAiB,GAAG;IACxB,QAAQ;IACR,OAAO;IACP,aAAa;IACb,4BAA4B;IAC5B,aAAa;IACb,MAAM;IACN,SAAS;IACT,SAAS;IACT,OAAO;IACP,uEAAuE;IACvE,gBAAgB;IAChB,eAAe;IACf,qBAAqB;IACrB,oCAAoC;IACpC,qBAAqB;IACrB,cAAc;CACf,CAAC;AAEF,SAAS,WAAW,CAAC,EAAU;IAC7B,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAOD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,UAAgC,EAAE;IAElC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,MAAM,CAAC,QAAQ,oCAAoC,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAEjC,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CACpD,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,kBAAkB,CAC1B,UAAU,QAAQ,oCAAoC,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CACpD,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,kBAAkB,CAAC,UAAU,QAAQ,gCAAgC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,kBAAkB,CAC1B,2BAA2B,QAAQ,2BAA2B,IAAI,EAAE,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,kBAAkB;YAAE,MAAM,GAAG,CAAC;QACjD,0DAA0D;QAC1D,MAAM,IAAI,kBAAkB,CAC1B,6BAA6B,QAAQ,yBAAyB,CAC/D,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,168 @@
+import type { ZodType } from "zod";
+export type AgentAction = {
+    type: "click";
+    selector: string;
+} | {
+    type: "type";
+    selector: string;
+    text: string;
+} | {
+    type: "select";
+    selector: string;
+    value: string;
+} | {
+    type: "pressKey";
+    key: string;
+} | {
+    type: "hover";
+    selector: string;
+} | {
+    type: "goto";
+    url: string;
+} | {
+    type: "wait";
+    ms: number;
+} | {
+    type: "scroll";
+    direction: "up" | "down";
+    amount?: number;
+} | {
+    type: "done";
+    result: string;
+};
+export interface ProxyConfig {
+    /** Proxy server URL (e.g. "http://proxy:8080" or "socks5://proxy:1080") */
+    server: string;
+    /** Username for proxy authentication */
+    username?: string;
+    /** Password for proxy authentication */
+    password?: string;
+}
+export interface CookieParam {
+    name: string;
+    value: string;
+    domain?: string;
+    path?: string;
+    httpOnly?: boolean;
+    secure?: boolean;
+    sameSite?: "Strict" | "Lax" | "None";
+    expires?: number;
+}
+export interface AgentConfig {
+    llmApiKey: string;
+    llmBaseUrl?: string;
+    port?: number;
+    model?: string;
+    temperature?: number;
+    maxTokens?: number;
+    topP?: number;
+    frequencyPenalty?: number;
+    presencePenalty?: number;
+    maxIterations?: number;
+    timeoutMs?: number;
+    maxWaitMs?: number;
+    gotoTimeoutMs?: number;
+    allowedDomains?: string[];
+    blockedDomains?: string[];
+    /** Delay in ms between agent loop iterations. Default: 500 */
+    actionDelayMs?: number;
+    /** Maximum total tokens budget across all LLM calls. Aborts if exceeded. */
+    maxTotalTokens?: number;
+    /** Proxy configuration for browser and HTTP requests */
+    proxy?: ProxyConfig;
+    /** Cookies to inject into browser context */
+    cookies?: CookieParam[];
+    /** Extra HTTP headers for browser context */
+    extraHeaders?: Record<string, string>;
+    /** Enable file logging for each run. Logs are saved to ./logs/ */
+    log?: boolean;
+    /** Directory for log files. Default: "logs" */
+    logDir?: string;
+    /** Enable vision as auto-fallback. Screenshots are sent to the LLM only after consecutive failures
+     *  (invalid actions, execution errors, stuck loops). Requires a vision-capable model. Default: false */
+    vision?: boolean;
+    /** JPEG quality for screenshots (1-100). Lower = smaller payload, fewer tokens. Default: 75 */
+    screenshotQuality?: number;
+}
+export interface RunOptions {
+    url: string;
+    prompt: string;
+    /** Override maxIterations for this run */
+    maxIterations?: number;
+    /** Override timeoutMs for this run */
+    timeoutMs?: number;
+    /** Override actionDelayMs for this run */
+    actionDelayMs?: number;
+    /** AbortSignal to cancel this run */
+    signal?: AbortSignal;
+    /** Zod schema for structured data extraction. When provided, the agent returns validated, typed data. */
+    schema?: ZodType;
+    /** Override vision auto-fallback setting for this run */
+    vision?: boolean;
+}
+export interface ActionRecord {
+    action: AgentAction;
+    iteration: number;
+    timestamp: number;
+}
+export type AgentStatus = "done" | "max_iterations" | "error" | "timeout" | "aborted";
+/** Execution method used by the agent */
+export type AgentTier = "http" | "playwright";
+export interface LLMUsage {
+    promptTokens: number;
+    completionTokens: number;
+    totalTokens: number;
+    calls: number;
+}
+export interface MemoryUsage {
+    /** RSS of the Playwright browser process in KB. 0 when tier="http". */
+    browserPeakRssKb: number;
+    /** Node.js heap used at completion time (MB) */
+    nodeHeapUsedMb: number;
+}
+export interface AgentResult {
+    status: AgentStatus;
+    /** Method used: "http" = Cheerio without browser | "playwright" = full browser */
+    tier: AgentTier;
+    data: string | null;
+    report: string;
+    durationMs: number;
+    actions: ActionRecord[];
+    usage: LLMUsage;
+    memory: MemoryUsage;
+    error?: string;
+}
+export interface PageSnapshot {
+    url: string;
+    title: string;
+    text: string;
+    links: SnapshotLink[];
+    forms: SnapshotForm[];
+    /** YAML accessibility tree from Playwright (only present in browser tier) */
+    ariaTree?: string;
+    /** Base64-encoded JPEG screenshot of the viewport (only present when vision is enabled) */
+    screenshot?: string;
+}
+export interface SnapshotLink {
+    text: string;
+    href: string;
+    index: number;
+}
+export interface SnapshotForm {
+    action: string;
+    inputs: SnapshotInput[];
+}
+export interface SnapshotInput {
+    name: string;
+    type: string;
+    placeholder: string;
+    selector: string;
+}
+export interface AuspexEvents {
+    action: [action: AgentAction, iteration: number];
+    iteration: [iteration: number, snapshot: PageSnapshot];
+    tier: [tier: AgentTier];
+    error: [error: Error];
+    done: [result: AgentResult];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAInC,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAIrC,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACxB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,kEAAkE;IAClE,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;4GACwG;IACxG,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAID,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,yGAAyG;IACzG,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,yDAAyD;IACzD,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAID,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,gBAAgB,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAEtF,yCAAyC;AACzC,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,YAAY,CAAC;AAIjB,MAAM,WAAW,QAAQ;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;IACzB,gDAAgD;IAChD,cAAc,EAAE,MAAM,CAAC;CACxB;AAID,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,kFAAkF;IAClF,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2FAA2F;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACjD,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxB,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtB,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CAC7B"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auspex",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "AI-powered browser agent with tiered scraping — HTTP/Cheerio first, Playwright as fallback",
   "type": "module",
   "main": "./dist/index.js",