mcp-browser-extension 0.9.25 → 0.9.26

package/dist/src/extension-install.js

@@ -7,13 +7,13 @@
  * folders deep under `npm root -g`, and an npx run hides it in a cache. So on
  * every boot (and on `--extension-path`) the server mirrors the bundled
  * `extension-dist/` into a plain, visible folder directly under the home
- * directory — `~/chrome-mcp-extension` — and that is the folder the docs, the
+ * directory — `~/mcp-browser-extension` — and that is the folder the docs, the
  * pairing file, and `--extension-path` all point at.
  *
  * The copy is a one-way mirror of top-level regular files, written only when
  * content differs, so an unchanged boot touches nothing. It never deletes: the
  * target may hold `pairing.json` (ours) and, if the operator pointed
- * CHROME_MCP_EXTENSION_DIR somewhere of their own, files that are not ours to
+ * MCP_BROWSER_EXTENSION_EXTENSION_DIR somewhere of their own, files that are not ours to
  * remove. It never throws — a read-only home just falls back to the bundled
  * folder, which still works for Load unpacked.
  */
@@ -27,18 +27,20 @@ const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
 const node_fs_1 = require("node:fs");
 const atomic_file_1 = require("./atomic-file");
+const compat_1 = require("./compat");
 /** Folder name under the home directory. */
-exports.EXTENSION_DIR_NAME = 'chrome-mcp-extension';
+exports.EXTENSION_DIR_NAME = 'mcp-browser-extension';
 /** The auto-pairing file the server writes; never copied, never overwritten by the mirror. */
 exports.PAIRING_FILE = 'pairing.json';
 /** `dist/src/extension-install.js` -> `<pkg>/extension-dist`, which the tarball ships. */
 function bundledExtensionDir() {
     return (0, node_path_1.resolve)(__dirname, '..', '..', 'extension-dist');
 }
-/** Where the extension is mirrored for Load unpacked. `CHROME_MCP_EXTENSION_DIR` overrides. */
+/** Where the extension is mirrored for Load unpacked. `MCP_BROWSER_EXTENSION_EXTENSION_DIR` overrides. */
 function extensionInstallDir() {
-    const override = process.env.CHROME_MCP_EXTENSION_DIR;
-    return override && override.trim() ? (0, node_path_1.resolve)(override.trim()) : (0, node_path_1.join)((0, node_os_1.homedir)(), exports.EXTENSION_DIR_NAME);
+    const override = (0, compat_1.runtimeEnv)('EXTENSION_DIR');
+    return override && override.trim() ? (0, node_path_1.resolve)(override.trim())
+        : (0, compat_1.renamedDirectory)((0, node_os_1.homedir)(), exports.EXTENSION_DIR_NAME, 'chrome-mcp-extension');
 }
 function readManifest(path) {
     const value = JSON.parse((0, node_fs_1.readFileSync)(path, 'utf8'));

package/dist/src/mcp/log.js

@@ -32,12 +32,12 @@ function getLogLevel() {
 function logErr(message) {
     if (logLevel === 'silent')
         return;
-    process.stderr.write(`[chrome-mcp] ${message}\n`);
+    process.stderr.write(`[mcp-browser-extension] ${message}\n`);
 }
 /** Verbose tracing: emitted only at `--log-level debug`. */
 function logDebug(message) {
     if (logLevel !== 'debug')
         return;
-    process.stderr.write(`[chrome-mcp] [debug] ${message}\n`);
+    process.stderr.write(`[mcp-browser-extension] [debug] ${message}\n`);
 }
 //# sourceMappingURL=log.js.map

package/dist/src/mcp/server.d.ts

@@ -2,7 +2,7 @@
  * src/mcp/server.ts — MCP server bootstrap over stdio.
  *
  * Wires the SDK `Server` to a `StdioServerTransport` so an MCP host (Claude)
- * drives chrome-mcp over JSON-RPC on stdin/stdout. CRITICAL: in stdio mode
+ * drives mcp-browser-extension over JSON-RPC on stdin/stdout. CRITICAL: in stdio mode
  * NOTHING may be written to stdout except the JSON-RPC stream — all diagnostics
  * go to stderr via `logErr`.
  */

package/dist/src/mcp/server.js

@@ -3,7 +3,7 @@
  * src/mcp/server.ts — MCP server bootstrap over stdio.
  *
  * Wires the SDK `Server` to a `StdioServerTransport` so an MCP host (Claude)
- * drives chrome-mcp over JSON-RPC on stdin/stdout. CRITICAL: in stdio mode
+ * drives mcp-browser-extension over JSON-RPC on stdin/stdout. CRITICAL: in stdio mode
  * NOTHING may be written to stdout except the JSON-RPC stream — all diagnostics
  * go to stderr via `logErr`.
  */

package/dist/src/mcp/tools.js

@@ -387,7 +387,7 @@ function capabilityStatus(policy) {
         disabledCapabilities: off,
         capabilityHint: 'These tools are not available in this session because their capability is off. ' +
             'If the user asks for one of them, tell them to add the listed flag to the MCP Browser Extension ' +
-            "server's entry (chrome-mcp) in their MCP config and restart the client.",
+            "server's entry (mcp-browser-extension) in their MCP config and restart the client.",
     };
 }
 /** The names actually advertised, in catalog order. */

package/dist/src/native-host.d.ts

@@ -14,7 +14,7 @@
  *   - `registerNativeHost()`: the server writes the host's launcher script and
  *     its manifest into each installed browser's NativeMessagingHosts folder
  *     (the registry on Windows). Best-effort and idempotent.
- *   - `runNativeHost()`: what `chrome-mcp --native-host` runs when Chrome starts
+ *   - `runNativeHost()`: what `mcp-browser-extension --native-host` runs when Chrome starts
  *     the host: read one message, answer with the pairing, exit.
  */
 /** The host's name, as the extension addresses it. */

package/dist/src/native-host.js

@@ -15,7 +15,7 @@
  *   - `registerNativeHost()`: the server writes the host's launcher script and
  *     its manifest into each installed browser's NativeMessagingHosts folder
  *     (the registry on Windows). Best-effort and idempotent.
- *   - `runNativeHost()`: what `chrome-mcp --native-host` runs when Chrome starts
+ *   - `runNativeHost()`: what `mcp-browser-extension --native-host` runs when Chrome starts
  *     the host: read one message, answer with the pairing, exit.
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/src/telemetry.d.ts

@@ -1,7 +1,7 @@
 /**
- * src/telemetry.ts — anonymous usage statistics from the chrome-mcp SERVER.
+ * src/telemetry.ts — anonymous usage statistics from the mcp-browser-extension SERVER.
  *
- * What it sends, to PostHog: a random per-install id, the chrome-mcp version,
+ * What it sends, to PostHog: a random per-install id, the mcp-browser-extension version,
  * OS, CPU architecture and Node major version, whether this session owns the
  * port or shares it, how many browsers are paired (and, when none, which of a
  * few fixed reasons applies), per-tool call and error
@@ -12,7 +12,7 @@
  * The browser extension sends nothing; this lives only in the npm server.
  *
  * On by default with a one-time notice on first run. Off with
- * CHROME_MCP_TELEMETRY=0 (or false/off), DO_NOT_TRACK=1, or --no-telemetry.
+ * MCP_BROWSER_EXTENSION_TELEMETRY=0 (or false/off), DO_NOT_TRACK=1, or --no-telemetry.
  * Every failure is swallowed: telemetry can never break or slow a tool call.
  */
 /** PostHog project key. Public by design: it can only WRITE events, never read them. */

package/dist/src/telemetry.js

@@ -1,8 +1,8 @@
 "use strict";
 /**
- * src/telemetry.ts — anonymous usage statistics from the chrome-mcp SERVER.
+ * src/telemetry.ts — anonymous usage statistics from the mcp-browser-extension SERVER.
  *
- * What it sends, to PostHog: a random per-install id, the chrome-mcp version,
+ * What it sends, to PostHog: a random per-install id, the mcp-browser-extension version,
  * OS, CPU architecture and Node major version, whether this session owns the
  * port or shares it, how many browsers are paired (and, when none, which of a
  * few fixed reasons applies), per-tool call and error
@@ -13,7 +13,7 @@
  * The browser extension sends nothing; this lives only in the npm server.
  *
  * On by default with a one-time notice on first run. Off with
- * CHROME_MCP_TELEMETRY=0 (or false/off), DO_NOT_TRACK=1, or --no-telemetry.
+ * MCP_BROWSER_EXTENSION_TELEMETRY=0 (or false/off), DO_NOT_TRACK=1, or --no-telemetry.
  * Every failure is swallowed: telemetry can never break or slow a tool call.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -31,6 +31,7 @@ const node_fs_1 = require("node:fs");
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
 const tool_categories_1 = require("./mcp/tool-categories");
+const compat_1 = require("./compat");
 /** PostHog project key. Public by design: it can only WRITE events, never read them. */
 exports.POSTHOG_KEY = 'phc_CG5QX5JEkRokfUN87rZQnPa3URdLWePCZnfqW6MCyCdU';
 exports.POSTHOG_HOST = 'https://us.i.posthog.com';
@@ -54,13 +55,13 @@ const MCP_SESSION_IDLE_MS = 30 * 60_000;
 const SEND_TIMEOUT_MS = 3_000;
 const STATE_FILE = 'telemetry.json';
 exports.TELEMETRY_NOTICE = 'MCP Browser Extension collects anonymous usage statistics (version, OS, tool call and error counts; never URLs, ' +
-    'page content or arguments) to see how it is used. Turn it off with CHROME_MCP_TELEMETRY=0 or DO_NOT_TRACK=1. ' +
-    'Details: https://github.com/Mehmoodqureshi/chrome-mcp#telemetry';
+    'page content or arguments) to see how it is used. Turn it off with MCP_BROWSER_EXTENSION_TELEMETRY=0 or DO_NOT_TRACK=1. ' +
+    'Details: https://github.com/Mehmoodqureshi/mcp-browser-extension#telemetry';
 /** Whether the user has turned telemetry off, by env or flag. */
 function telemetryDisabled(env, disabledByFlag = false) {
     if (disabledByFlag)
         return true;
-    const own = (env.CHROME_MCP_TELEMETRY ?? '').trim().toLowerCase();
+    const own = ((0, compat_1.runtimeEnv)('TELEMETRY', env) ?? '').trim().toLowerCase();
     if (['0', 'false', 'off', 'no'].includes(own))
         return true;
     const dnt = (env.DO_NOT_TRACK ?? '').trim().toLowerCase();

package/docs/BLUEPRINT.md

@@ -21,11 +21,11 @@ over **stdio**; the extension speaks the canonical frame protocol over a
 ```
             ┌──────────────────────────────────────────────────────────────┐
  WORLD 1    │  MCP HOST (Claude Desktop / Claude Code)                      │
- (the model)│  spawns:  npx chrome-mcp                                      │
+ (the model)│  spawns:  npx mcp-browser-extension                                      │
             └───────────────┬──────────────────────────────────────────────┘
                             │ JSON-RPC over stdio  (stdout = SACRED)
             ┌───────────────▼──────────────────────────────────────────────┐
- WORLD 2    │  chrome-mcp CLI  (one Node process)                           │
+ WORLD 2    │  mcp-browser-extension CLI  (one Node process)                           │
  (server)   │                                                              │
             │  ┌────────────┐   ┌──────────────────┐   ┌─────────────────┐ │
             │  │ MCP Server │──▶│  tools.ts        │──▶│ ExecutorManager │ │
@@ -70,13 +70,13 @@ takes over from CDP and vice-versa on disconnect.
 
 ## 2. Repository Layout
 
-Single sibling repo `chrome-mcp/` (NOT a workspace). Two build roots in one git
+Single sibling repo `mcp-browser-extension/` (NOT a workspace). Two build roots in one git
 repo so the wire protocol version-locks between server and extension. The shared
 `protocol.ts` lives at the top so both builds import the *same file*.
 
 ```
-chrome-mcp/
-├── package.json                 # bin: chrome-mcp -> dist/cli.js; deps sdk, ws, playwright
+mcp-browser-extension/
+├── package.json                 # bin: mcp-browser-extension -> dist/cli.js; deps sdk, ws, playwright
 ├── tsconfig.json
 ├── README.md
 ├── .gitignore                   # dist/, extension-dist/, test-targets.json, *.handshake
@@ -107,7 +107,7 @@ chrome-mcp/
 │   │   ├── server.ts            # BridgeServer: ws on 127.0.0.1, token gate, id-correlation, heartbeat
 │   │   ├── connection.ts        # ExtensionConnection: pending-map, timeouts, reject-all-on-close
 │   │   ├── auth.ts              # token gen, atomic 0600 handshake.json, hashed constant-time compare
-│   │   └── datadir.ts           # Electron-free CHROME_MCP_DATA || ~/.chrome-mcp
+│   │   └── datadir.ts           # Electron-free MCP_BROWSER_EXTENSION_DATA || ~/.mcp-browser-extension
 │   └── security/
 │       └── policy.ts            # Policy type, loadPolicy, assertUrlAllowed (default-deny, gates reads)
 │
@@ -331,8 +331,8 @@ export type ExecutorErrorCode =
 ```
 
 **Auth handshake (the canonical, ONLY model):** [RESOLVED — security blocker 1, minor 7]
-1. Server, at boot, generates a **fresh 256-bit token every boot**, never persisted/reused: `crypto.randomBytes(32).toString('base64url')`. It writes `{ v, port, token, pid, ts, expectedExtensionId? }` **atomically** (tmp + `rename`) to `$CHROME_MCP_DATA/handshake.json` with mode **0600**, verifies the mode after write, and **fails closed** if it cannot. The token is **never** written to stdout or stderr or any log. A test asserts this.
-2. The extension acquires `{port, token}` from the handshake file via a **native-messaging trampoline** (`extension/src/nm/`) — the only component that can read a 0600 file the model/attacker cannot. v1 ships a **manual fallback**: the user runs `npx chrome-mcp --print-pairing` which prints a **redacted confirmation + the file path** (`handshake.json written to …; open the extension and click Pair`) and the trampoline reads it. **No token on stdout/stderr, no `/connect` HTTP endpoint.** [RESOLVED — security blocker 3]
+1. Server, at boot, generates a **fresh 256-bit token every boot**, never persisted/reused: `crypto.randomBytes(32).toString('base64url')`. It writes `{ v, port, token, pid, ts, expectedExtensionId? }` **atomically** (tmp + `rename`) to `$MCP_BROWSER_EXTENSION_DATA/handshake.json` with mode **0600**, verifies the mode after write, and **fails closed** if it cannot. The token is **never** written to stdout or stderr or any log. A test asserts this.
+2. The extension acquires `{port, token}` from the handshake file via a **native-messaging trampoline** (`extension/src/nm/`) — the only component that can read a 0600 file the model/attacker cannot. v1 ships a **manual fallback**: the user runs `npx mcp-browser-extension --print-pairing` which prints a **redacted confirmation + the file path** (`handshake.json written to …; open the extension and click Pair`) and the trampoline reads it. **No token on stdout/stderr, no `/connect` HTTP endpoint.** [RESOLVED — security blocker 3]
 3. Extension dials `ws://127.0.0.1:<port>` (port read from handshake via trampoline; see §6 for re-read-on-reconnect) and sends `hello` within 5000ms.
 4. Server compares tokens by **hashing both sides to SHA-256 and `timingSafeEqual`-ing the digests** (no length precondition, no length leak). Match → `welcome`, flip to ACTIVE; mismatch / `v!==1` / timeout → send `unauthorized` then close **4401**. No `command`/`result`/`event` is processed before `welcome`.
 
@@ -456,7 +456,7 @@ truth). The extension learns both via the native-messaging trampoline. **Wheneve
 a WS dial FAILS** (server restarted → fresh token + possibly fresh port), the SW
 re-invokes the trampoline to re-read `{port, token}` before the next dial. This
 makes ephemeral ports work: the extension never holds a stale port. The single
-default fixed port is **`38017`** (override `CHROME_MCP_WS_PORT`); ephemeral
+default fixed port is **`38017`** (override `MCP_BROWSER_EXTENSION_WS_PORT`); ephemeral
 port `0` is supported precisely because the extension re-reads on failure. The
 port is **not** a security boundary — the token is.
 
@@ -529,7 +529,7 @@ or `launchPersistentContext(userDataDir)` (self-spawn). **Lifted from
 Decisions:
 - **Ownership flag `launched`**: `dispose()` closes the context only when `launched===true`; attach mode drops refs only.
 - **Do NOT set `PLAYWRIGHT_BROWSERS_PATH`** (rely on the postinstall cache; respect a pre-set override). Drop the Electron `useBundledBrowsersIfPackaged` branch.
-- **Self-launch profile dir must NOT be the user's real Chrome profile** (`CHROME_MCP_USERDATA` || `~/.chrome-mcp/cdp-profile`) — it would conflict with the real Chrome the extension drives.
+- **Self-launch profile dir must NOT be the user's real Chrome profile** (`MCP_BROWSER_EXTENSION_USERDATA` || `~/.mcp-browser-extension/cdp-profile`) — it would conflict with the real Chrome the extension drives.
 - `screenshot` → `page.screenshot({fullPage})` → base64; `eval` → `page.evaluate` wrapped so a page throw becomes `{ok:false}` not a transport-killing throw.
 - **tabId stamping**: CDP guids are prefixed `cdp:<sessionId>:<guid>`; extension ids `ext:<sessionId>:<targetId>`. A handle whose prefix doesn't match the current backend/session → `STALE_TAB` ('call tabs_list again'). [RESOLVED — mv3 major tabId / integration]
 
@@ -588,7 +588,7 @@ Build: `manifest.json`, `sw/background.ts` (top-level listeners, keepalive inter
 Build: server-side `extract_links`/`read_as_markdown`/`fill_form` over `Runtime.evaluate`; server-side CDP-fetch `download_file` with sanitized names/size cap; policy enforced at executor + router. *Verify:* `test/hitl/` (cloned harness, Executor handle) — read steps free; mutating steps (`download_file`, `fill_form+submit`, `eval`-side-effect) behind classification + `--include-mutating` + literal `yes` + `test-targets.json` allowlist. Human verdict gate; never CI.
 
 **Phase 6 — Packaging & docs.**
-Build: `files` whitelist incl. `extension-dist/`, `--print-pairing`/`--print-extension-path`, `.mcp.json` snippet, README (banner caveat, load-unpacked-only, policy/safe-mode defaults, kill switch). *Verify:* `npx chrome-mcp` from a packed tarball boots, prints the pairing file path (no token leak), and a fresh Chrome load-unpacked round-trips one navigate→get_text.
+Build: `files` whitelist incl. `extension-dist/`, `--print-pairing`/`--print-extension-path`, `.mcp.json` snippet, README (banner caveat, load-unpacked-only, policy/safe-mode defaults, kill switch). *Verify:* `npx mcp-browser-extension` from a packed tarball boots, prints the pairing file path (no token leak), and a fresh Chrome load-unpacked round-trips one navigate→get_text.
 
 ---
 

package/extension-dist/background.js

@@ -2464,7 +2464,7 @@
     },
     onPolicy: (policy) => {
       currentPolicy = policy;
-      void syncObserverScript(policy, (m) => console.debug("[chrome-mcp]", m));
+      void syncObserverScript(policy, (m) => console.debug("[mcp-browser-extension]", m));
       void onAllowlist(policy);
     },
     // Shown on the Options page, so you can tell which name this browser got.
@@ -2472,13 +2472,13 @@
     onGranted: (granted) => void chrome.storage.local.set({ grantedSites: granted }),
     onBlocked: (host, method) => void rememberBlocked(host, method),
     onLatestExtension: (version) => void chrome.storage.local.set({ latestExtension: version }),
-    log: (m) => console.debug("[chrome-mcp]", m)
+    log: (m) => console.debug("[mcp-browser-extension]", m)
   });
   var router = new CommandRouter({
     exec: executor,
     send: (frame) => ws.send(frame),
     getPolicy: () => currentPolicy,
-    log: (m) => console.debug("[chrome-mcp]", m),
+    log: (m) => console.debug("[mcp-browser-extension]", m),
     border
   });
   async function readBundledPairing() {
@@ -2512,7 +2512,7 @@
       const { reloadedFor } = await chrome.storage.local.get("reloadedFor");
       if (reloadedFor === onDisk.version) return;
       await chrome.storage.local.set({ reloadedFor: onDisk.version });
-      console.info(`[chrome-mcp] extension files updated on disk (${loaded} -> ${onDisk.version}); reloading`);
+      console.info(`[mcp-browser-extension] extension files updated on disk (${loaded} -> ${onDisk.version}); reloading`);
       chrome.runtime.reload();
     } catch {
     }
@@ -2677,9 +2677,9 @@
   }
   async function syncProxy() {
     try {
-      await applyProxy((m) => console.debug("[chrome-mcp]", m));
+      await applyProxy((m) => console.debug("[mcp-browser-extension]", m));
     } catch (err) {
-      console.warn("[chrome-mcp] could not apply the proxy setting", err);
+      console.warn("[mcp-browser-extension] could not apply the proxy setting", err);
     }
   }
   async function bootstrap() {

package/extension-dist/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "MCP Browser Extension",
-  "version": "0.9.25",
+  "version": "0.9.26",
   "description": "Lets your AI agent (Claude, Cursor, Codex) use the Chrome you are signed into, through a local MCP server. Deny-all by default.",
   "homepage_url": "https://mcp-browser-extension.com",
   "minimum_chrome_version": "116",

package/extension-dist/options.html

@@ -53,7 +53,7 @@
     <p class="hint" id="manual-intro">Or pair by hand:</p>
     <p class="hint" id="source">Checking pairing source…</p>
     <p class="hint">
-      Manual pairing: run <code>npx -y @mehmoodqureshi/chrome-mcp@latest --print-pairing</code>,
+      Manual pairing: run <code>npx -y mcp-browser-extension@latest --print-pairing</code>,
       open the printed <code>handshake.json</code>, and paste its <code>port</code>
       and <code>token</code> below.
     </p>

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "mcp-browser-extension",
-  "mcpName": "io.github.Mehmoodqureshi/chrome-mcp",
-  "version": "0.9.25",
-  "description": "Drive your real Chrome browser over MCP — real logins, real cookies. A stdio MCP server (CLI) plus an MV3 extension, driving Chrome via chrome.scripting/chrome.tabs. Multi-tab batch automation, accessibility snapshots, deny-all security by default.",
+  "mcpName": "io.github.Mehmoodqureshi/mcp-browser-extension",
+  "version": "0.9.26",
+  "description": "Drive your real Chrome browser over MCP \u2014 real logins, real cookies. A stdio MCP server (CLI) plus an MV3 extension, driving Chrome via chrome.scripting/chrome.tabs. Multi-tab batch automation, accessibility snapshots, deny-all security by default.",
   "author": "Mehmood Ur Rehman Qureshi",
   "license": "MIT",
   "homepage": "https://mcp-browser-extension.com",
@@ -17,8 +17,7 @@
     "access": "public"
   },
   "bin": {
-    "mcp-browser-extension": "dist/src/cli.js",
-    "chrome-mcp": "dist/src/cli.js"
+    "mcp-browser-extension": "dist/src/cli.js"
   },
   "files": [
     "dist/src/**/*.js",
@@ -50,11 +49,31 @@
     "claude",
     "claude-code"
   ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "build:ext": "node extension/scripts/build-ext.mjs",
+    "pack:ext": "npm run build:ext && node extension/scripts/pack-ext.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "typecheck:ext": "tsc -p tsconfig.ext.json",
+    "clean": "rimraf dist",
+    "test": "npm run clean && npm run build && npm run build:ext && node --test dist/test/*.test.js",
+    "test:hitl": "npm run build && node dist/hitl/index.js",
+    "prepack": "npm run clean && npm run build && npm run build:ext"
+  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "ws": "^8.18.0",
     "zod": "^4.4.3"
   },
+  "devDependencies": {
+    "@types/chrome": "^0.0.287",
+    "@types/node": "^20.17.10",
+    "@types/ws": "^8.5.13",
+    "esbuild": "^0.24.0",
+    "playwright": "^1.49.1",
+    "rimraf": "^5.0.10",
+    "typescript": "^5.7.2"
+  },
   "engines": {
     "node": ">=18.0.0"
   }