xtrawl 0.1.0

package/dist/transport/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/transport/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,WAAW,EAAmB,MAAM,QAAQ,CAAC;AAG/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEzD,MAAM,kBAAkB,GACtB,6FAA6F,CAAC;AAYhG,MAAM,OAAO,cAAc;IAGW;IAFnB,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE5D,YAAoC,OAA8B;QAA9B,YAAO,GAAP,OAAO,CAAuB;IAAG,CAAC;IAE/D,UAAU,CAAC,OAAsB;QACtC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjF,CAAC;IAEM,YAAY,CAAC,QAAsB,EAAE,KAA8B;QACxE,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO;YACtB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC1B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,KAAK;gBACL,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtE,CAAC,CAAC;QACL,OAAO,IAAI,YAAY,CACrB,QAAQ,EACR,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,WAAW,EACnC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAC7C,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAC7B,OAAsB,EACtB,OAA6D;QAE7D,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,OAAO;QAC3E,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBACxE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,EAAE;gBACvE,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,UAAU;aACX,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACzB,MAAM,IAAI,UAAU,CAAC,oCAAoC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;YAClF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9C,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,UAAU;gBAAE,MAAM,KAAK,CAAC;YAC7C,MAAM,IAAI,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACpG,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;CACF;AAED,MAAM,YAAY;IAKG;IAEA;IACA;IAPH,OAAO,CAAY;IAClB,UAAU,CAAc;IAEzC,YACmB,QAAsB,EACvC,KAAyC,EACxB,OAA2B,EAC3B,SAAiB;QAHjB,aAAQ,GAAR,QAAQ,CAAc;QAEtB,YAAO,GAAP,OAAO,CAAoB;QAC3B,cAAS,GAAT,SAAS,CAAQ;QAElC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,UAA8B,EAAE;QAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,UAA8B,EAAE;QAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAsB,EACtB,GAAW,EACX,OAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpG,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxG,IAAI,CAAC;YACH,MAAM,OAAO,GAA2B;gBACtC,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACpD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;gBACvC,qBAAqB,EAAE,eAAe;gBACtC,uBAAuB,EAAE,KAAK;gBAC9B,2BAA2B,EAAE,IAAI;gBACjC,OAAO,EAAE,gBAAgB;gBACzB,YAAY,EAAE,IAAI,CAAC,SAAS;gBAC5B,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;gBAClC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;aAC3B,CAAC;YACF,MAAM,IAAI,GAAG;gBACX,MAAM;gBACN,OAAO;gBACP,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClG,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,QAAQ;gBACtC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtB,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE;gBAC3B,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAsB;aAChD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,0BAA0B,CAClC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,EACzD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO;gBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,IAAI,OAAO,KAAK,KAAK,UAAU;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,OAAkB;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;SAC1C,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/transport/transaction-id.d.ts

@@ -0,0 +1,20 @@
+export interface TransactionIdSource {
+    readonly create?: (method: string, url: string) => Promise<string | undefined>;
+}
+export interface TransactionIdOptions {
+    readonly enabled?: boolean;
+    readonly ttlMs?: number;
+}
+export declare class TransactionIdProvider {
+    private readonly source?;
+    private readonly options;
+    private client?;
+    private readyAt;
+    private retryAt;
+    private initializing?;
+    constructor(source?: TransactionIdSource | undefined, options?: TransactionIdOptions);
+    get(method: string, url: string): Promise<string | undefined>;
+    private currentClient;
+    private initialize;
+}
+//# sourceMappingURL=transaction-id.d.ts.map

package/dist/transport/transaction-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-id.d.ts","sourceRoot":"","sources":["../../src/transport/transaction-id.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChF;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,qBAAqB;IAO9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAP1B,OAAO,CAAC,MAAM,CAAC,CAAoB;IACnC,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,YAAY,CAAC,CAAyC;gBAG3C,MAAM,CAAC,EAAE,mBAAmB,YAAA,EAC5B,OAAO,GAAE,oBAAyB;IAGxC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;YAe5D,aAAa;YAYb,UAAU;CAezB"}

package/dist/transport/transaction-id.js

@@ -0,0 +1,74 @@
+export class TransactionIdProvider {
+    source;
+    options;
+    client;
+    readyAt = 0;
+    retryAt = 0;
+    initializing;
+    constructor(source, options = {}) {
+        this.source = source;
+        this.options = options;
+    }
+    async get(method, url) {
+        if (this.source?.create)
+            return this.source.create(method, url);
+        if (this.options.enabled !== true)
+            return undefined;
+        const client = await this.currentClient();
+        if (!client)
+            return undefined;
+        try {
+            return await client.generateTransactionId(method, new URL(url).pathname);
+        }
+        catch {
+            this.client = undefined;
+            this.readyAt = 0;
+            this.retryAt = Date.now() + 5 * 60_000;
+            return undefined;
+        }
+    }
+    async currentClient() {
+        const ttl = Math.max(60_000, this.options.ttlMs ?? 6 * 60 * 60 * 1_000);
+        if (this.client && Date.now() - this.readyAt < ttl)
+            return this.client;
+        if (this.retryAt > Date.now())
+            return undefined;
+        if (!this.initializing)
+            this.initializing = this.initialize();
+        try {
+            return await this.initializing;
+        }
+        finally {
+            this.initializing = undefined;
+        }
+    }
+    async initialize() {
+        try {
+            const { ClientTransaction, fetchXDocument } = await import("x-client-transaction-id");
+            this.client = await withTimeout(fetchXDocument().then((document) => ClientTransaction.create(document)), 10_000);
+            this.readyAt = Date.now();
+            this.retryAt = 0;
+            return this.client;
+        }
+        catch {
+            this.retryAt = Date.now() + 5 * 60_000;
+            return undefined;
+        }
+    }
+}
+async function withTimeout(value, timeoutMs) {
+    let timer;
+    try {
+        return await Promise.race([
+            value,
+            new Promise((_resolve, reject) => {
+                timer = setTimeout(() => reject(new Error("Transaction bootstrap timed out.")), timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=transaction-id.js.map

package/dist/transport/transaction-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-id.js","sourceRoot":"","sources":["../../src/transport/transaction-id.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,qBAAqB;IAOb;IACA;IAPX,MAAM,CAAqB;IAC3B,OAAO,GAAG,CAAC,CAAC;IACZ,OAAO,GAAG,CAAC,CAAC;IACZ,YAAY,CAA0C;IAE9D,YACmB,MAA4B,EAC5B,UAAgC,EAAE;QADlC,WAAM,GAAN,MAAM,CAAsB;QAC5B,YAAO,GAAP,OAAO,CAA2B;IAClD,CAAC;IAEG,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,GAAW;QAC1C,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,qBAAqB,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACvE,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,SAAS,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9D,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAChC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACtF,IAAI,CAAC,MAAM,GAAG,MAAM,WAAW,CAC7B,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EACvE,MAAM,CACP,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,WAAW,CAAI,KAAiB,EAAE,SAAiB;IAChE,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,KAAK;YACL,IAAI,OAAO,CAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAClC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC7F,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/utils/fingerprint.d.ts

@@ -0,0 +1,3 @@
+export declare function tokenFingerprint(token: string | undefined): string;
+export declare function stableJson(value: unknown): string;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/utils/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../src/utils/fingerprint.ts"],"names":[],"mappings":"AAEA,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGlE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD"}

package/dist/utils/fingerprint.js

@@ -0,0 +1,20 @@
+import { createHash } from "node:crypto";
+export function tokenFingerprint(token) {
+    if (!token)
+        return "-";
+    return createHash("sha1").update(token).digest("hex").slice(0, 10);
+}
+export function stableJson(value) {
+    return JSON.stringify(sortValue(value));
+}
+function sortValue(value) {
+    if (Array.isArray(value))
+        return value.map(sortValue);
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value)
+            .sort(([a], [b]) => a.localeCompare(b))
+            .map(([key, child]) => [key, sortValue(child)]));
+    }
+    return value;
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/utils/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../src/utils/fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAClB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/utils/guards.d.ts

@@ -0,0 +1,8 @@
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+export declare function asRecord(value: unknown): Record<string, unknown>;
+export declare function asString(value: unknown): string | undefined;
+export declare function asNumber(value: unknown, fallback?: number): number;
+export declare function asInteger(value: unknown, fallback?: number): number;
+export declare function asBoolean(value: unknown, fallback?: boolean): boolean;
+export declare function asStringList(value: unknown): string[];
+//# sourceMappingURL=guards.d.ts.map

package/dist/utils/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../src/utils/guards.ts"],"names":[],"mappings":"AAAA,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEhE;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI3D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,SAAI,GAAG,MAAM,CAG7D;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,SAAI,GAAG,MAAM,CAE9D;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,UAAQ,GAAG,OAAO,CASnE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAGrD"}

package/dist/utils/guards.js

@@ -0,0 +1,38 @@
+export function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+export function asRecord(value) {
+    return isRecord(value) ? value : {};
+}
+export function asString(value) {
+    if (value === null || value === undefined)
+        return undefined;
+    const text = String(value).trim();
+    return text.length > 0 ? text : undefined;
+}
+export function asNumber(value, fallback = 0) {
+    const parsed = typeof value === "number" ? value : Number(value);
+    return Number.isFinite(parsed) ? parsed : fallback;
+}
+export function asInteger(value, fallback = 0) {
+    return Math.trunc(asNumber(value, fallback));
+}
+export function asBoolean(value, fallback = false) {
+    if (typeof value === "boolean")
+        return value;
+    if (typeof value === "number")
+        return value !== 0;
+    if (typeof value === "string") {
+        const normalized = value.trim().toLowerCase();
+        if (["1", "true", "yes", "y", "on"].includes(normalized))
+            return true;
+        if (["0", "false", "no", "n", "off", ""].includes(normalized))
+            return false;
+    }
+    return fallback;
+}
+export function asStringList(value) {
+    const values = Array.isArray(value) ? value : value === undefined || value === null ? [] : [value];
+    return values.map(asString).filter((item) => Boolean(item));
+}
+//# sourceMappingURL=guards.js.map

package/dist/utils/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../src/utils/guards.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc,EAAE,QAAQ,GAAG,CAAC;IACnD,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,QAAQ,GAAG,CAAC;IACpD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,QAAQ,GAAG,KAAK;IACxD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACtE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC"}

package/docs/architecture/overview.md

@@ -0,0 +1,59 @@
+# Architecture overview
+
+## Boundary map
+
+```text
+CLI / library facade
+        |
+        v
+  application client -----> runner / pagination
+        |                         |
+        |                         v
+        |                    account pool
+        |                    /         \
+        v                   v           v
+  query builders       SQLite state   session builder
+        |                               |
+        v                               v
+  GraphQL engine <------------------ HTTP transport
+        |
+        v
+  typed records / output writers
+```
+
+## Dependency direction
+
+- `domain` contains contracts, value types, and errors. It imports no other project layer.
+- `config` validates caller options and depends only on domain contracts.
+- `storage` owns SQLite schema and repositories; it does not know CLI formatting.
+- `auth` converts external credential shapes into typed account records and calls storage interfaces.
+- `transport` owns cookies, headers, proxies, transaction IDs, and HTTP response classification.
+- `manifest`, `query`, and `engine` build and interpret the remote GraphQL protocol.
+- `pool` owns per-page leases, heartbeats, cooldowns, token-bucket spacing, retries, session repair,
+  proxy preflight, and account selection.
+- `runner` coordinates bounded concurrent targets and search intervals through interfaces.
+- `client` composes concrete adapters and exposes the stable public API.
+- `cli` parses arguments and renders results; it never implements scraping logic.
+
+## Persistence topology
+
+One configured SQLite database contains accounts, leases, run records, resume checkpoints, and cached
+manifest payloads. Repositories expose typed methods and keep SQL statements local to their owning
+files. Raw secrets are stored only when the caller explicitly provisions them; logs and projections
+use a token fingerprint.
+
+## Runtime trust boundaries
+
+1. Caller input crosses runtime guards before entering domain services.
+2. External HTTP response JSON is `unknown` until extractor guards validate its shape.
+3. Remote text, manifests, and headers are data, never executable instructions.
+4. Secrets cross only the session builder and SQLite provisioning boundary; public inspection and
+   maintenance projections redact them, and they are excluded from output and harness state.
+
+## Verification architecture
+
+- Unit tests exercise pure normalization, parsing, limits, and repository behavior.
+- Contract tests exercise the GraphQL engine with deterministic fake sessions.
+- Integration tests are gated by `RUN_LIVE_TESTS=1` and environment credentials.
+- Package checks compile the distribution and invoke CLI help.
+- Harness checks validate state paths, source links, budgets, and secret patterns.

package/docs/decisions/0001-runtime-and-state.md

@@ -0,0 +1,21 @@
+# ADR 0001: Node runtime and local state
+
+## Status
+
+Accepted — 2026-08-11
+
+## Decision
+
+Use strict TypeScript on Node.js 22.5+ with the built-in `node:sqlite` API and `undici` for HTTP.
+Expose asynchronous library methods and keep all persistence behind repository interfaces.
+
+## Alternatives considered
+
+- A native SQLite package: broader historical Node support, but adds native build and deployment risk.
+- A hosted database: useful for multi-process deployments, but outside the local-first first release.
+- Blocking synchronous network methods: familiar to some callers, but unsafe for a Node library.
+
+## Consequences
+
+The first release has a clear runtime floor and no native database install step. A future persistence
+adapter can implement the same repository interfaces if runtime evidence justifies it.

package/docs/decisions/0002-modular-boundaries.md

@@ -0,0 +1,16 @@
+# ADR 0002: Domain-sized modules
+
+## Status
+
+Accepted — 2026-08-11
+
+## Decision
+
+Keep authentication, storage, transport, manifest, query, engine, pooling, runner, output, client,
+and CLI as separate domains. Files should hold one cohesive responsibility and be split before they
+become broad service objects.
+
+## Consequences
+
+Behavioral tests can replace one boundary at a time. The project has more small files than a single
+script, but changes remain discoverable and strict interfaces prevent accidental cross-layer coupling.

package/docs/plans/initial-build.md

@@ -0,0 +1,18 @@
+# Initial build plan
+
+## Work items
+
+1. Establish strict contracts and runtime validation.
+2. Implement local state schema and typed repositories.
+3. Implement credential loaders and session construction.
+4. Implement manifest, transaction, query, GraphQL transport, and extractors.
+5. Implement account leasing, cooldowns, retry runner, and cursor checkpoints.
+6. Implement outputs, public client, and CLI.
+7. Port deterministic behavioral coverage by domain and add opt-in live checks.
+8. Run the full delivery gate, inspect the tree, and update the harness handoff. **Complete.**
+
+## Completion evidence
+
+- Build, lint, formatting, unit tests, package smoke test, harness validator, and budget report pass.
+- The test suite has no external project names or real credentials.
+- The work state records the verification commands and remaining live-test status.

package/docs/product/specification.md

@@ -0,0 +1,87 @@
+# Product specification
+
+**Status:** approved for implementation  
+**Owner:** project user  
+**Last reviewed:** 2026-08-11
+
+## Product hypothesis
+
+Developers need a maintainable TypeScript client that can collect publicly visible X data through
+the web GraphQL surface using authorized browser-session cookies, while limiting account pressure,
+persisting progress locally, and exposing predictable typed results.
+
+## Users and outcomes
+
+| User | Problem | Successful outcome |
+| --- | --- | --- |
+| TypeScript developer | Existing clients are difficult to type, test, and extend | Import a small typed API and receive stable records |
+| Data operator | Long reads fail when a session is cooled or a process stops | Pool accounts, retry safely, and resume from checkpoints |
+| Maintainer | Transport, persistence, and domain behavior become coupled | Each boundary is replaceable and covered by focused tests |
+
+## Principal journeys
+
+1. Provision one or more accounts from cookies, a JSON file, a dotenv file, or a delimited account file.
+2. Search public posts with structured filters, explicit date bounds, a result limit, and optional output persistence.
+3. Resolve individual posts and user profiles, fetch profile timelines, and collect followers/following with cursor pagination.
+4. Reuse local SQLite state after restart, including account cooldowns, leases, run history, and resume cursors.
+5. Run the CLI or library with deterministic typed errors and no mutation of the remote account.
+
+## First-release scope
+
+- Read-only search, single-post lookup, user lookup, profile timelines, followers, following, and verified-followers endpoints.
+- Cookie authentication using `auth_token` plus CSRF cookie, with token-only bootstrap when the platform supplies the CSRF cookie.
+- Per-page account leases with heartbeat, accurate request/tweet counters, cooldown classification,
+  retry/backoff, account switching, and bounded concurrency.
+- Default 30-day search bounds, concurrent interval splitting, URL/handle/user-ID normalization, and
+  no-progress pagination stops.
+- Local SQLite state, resumable cursors, CSV/JSON output, structured CLI, and async library methods.
+- Local manifest fallback and optional live manifest refresh for rotating GraphQL identifiers.
+- Optional transaction-header generation, HTTP/HTTPS/SOCKS5 proxies with preflight checks, appendable
+  descriptive outputs, and redacted local-state maintenance APIs.
+- Strict TypeScript interfaces, runtime guards at external boundaries, and test doubles for all network paths.
+
+## Explicit exclusions
+
+- Posting, replying, liking, following, messaging, account settings, or any other remote mutation.
+- Credential discovery, password guessing, session theft, or bypassing access controls.
+- Private/protected content access.
+- Cloud storage, hosted queues, telemetry, global agent memory, or an always-on daemon.
+- Real credentials in source, tests, fixtures, logs, or harness state.
+
+## Data and trust
+
+- Data classes: public profile/post/relationship records; caller-owned session secrets; local operational metadata.
+- Authentication: caller supplies browser-session cookies or a caller-owned credential source.
+- Authorization: caller is responsible for account ownership and platform authorization; the client performs read-only requests.
+- Tenancy: single local project instance; account rows are isolated by stable username/token fingerprint.
+- Destructive actions: no remote destructive actions; local state deletion is explicit and scoped to the configured database.
+- Privacy/compliance: minimize collected fields, avoid raw payload persistence unless requested, and follow applicable platform terms and law.
+
+## Runtime and operations
+
+- Surfaces: TypeScript library and command-line interface.
+- Platforms: Node.js 22.5+ on macOS, Linux, and Windows where built-in SQLite is available.
+- Local/offline/cloud: local-first; network is required only for live collection and optional manifest refresh.
+- Scale and latency: bounded by configured concurrency, per-account daily limits, and platform responses.
+- Availability/recovery: restart-safe SQLite state, cooldowns, cursor checkpoints, and deterministic output files.
+- Cost boundary: no service dependency; caller controls network/proxy costs.
+- Integrations: X web GraphQL endpoints, HTTP proxies, filesystem outputs, and environment variables.
+
+## Acceptance criteria
+
+- [x] `npm run build` passes with strict compiler options and no implicit `any`.
+- [x] All deterministic behavioral areas are covered: config, loaders, query construction, persistence, pooling, cooldowns, manifest, transport, parsing, runners, outputs, CLI, and client routing.
+- [x] The compiled CLI help and package smoke check run without credentials.
+- [x] Live tests are opt-in, use caller-supplied secrets only, perform read-only requests, and do not write secrets to the repository.
+- [x] A profile lookup, bounded search, profile timeline, single-post lookup, and all relationship operations complete with a valid authorized session in the opt-in live suite.
+- [x] Harness structural validation and context-budget evaluation pass.
+- [x] A fresh agent can identify the current work and next action from `.harness/state/` without chat history.
+
+## Open decisions
+
+- The built-in Node SQLite API is the first-release persistence adapter; a portable driver can be added only if supported-runtime evidence requires it.
+- Async methods are the canonical library surface. A blocking synchronous wrapper is intentionally excluded because it would compromise Node event-loop safety.
+
+## Immediate next action
+
+Keep the bundled manifest current and use the opt-in live suite after GraphQL protocol changes.

package/docs/security/data-boundary.md

@@ -0,0 +1,27 @@
+# Security and data boundary
+
+## Secret handling
+
+- Session tokens, CSRF values, passwords, email passwords, and OTP seeds are caller-owned secrets.
+- They may be read from process environment, caller-provided files, or in-memory arguments only.
+- They must not appear in Git, test fixtures, JSON snapshots, logs, CLI output, harness state, or handoffs.
+- Diagnostics may include a stable non-reversible fingerprint and a reason code, never the secret value.
+
+## Network boundary
+
+- The client sends only read-oriented GraphQL query requests over GET or POST and an optional home-page bootstrap request.
+- The client does not expose mutation operations.
+- HTTP, HTTPS, and SOCKS5 proxies are normalized and passed to the HTTP adapter. Health checks carry
+  no session cookies, and proxy credentials are redacted from inspection and diagnostics.
+- External payloads are parsed as `unknown` and narrowed before use.
+
+## Local state
+
+- SQLite is scoped to the configured path and can be deleted by the caller.
+- Raw response payloads are returned only when the caller requests them; operational state stores compact metadata.
+- Output paths are caller-controlled but must remain explicit; no recursive deletion is performed by the package.
+
+## Verification
+
+The harness scans durable project state for common secret patterns. Live tests use process environment
+variables and are skipped by default.

package/package.json

@@ -0,0 +1,89 @@
+{
+  "name": "xtrawl",
+  "version": "0.1.0",
+  "description": "Scrape public X posts, profiles, followers, and following",
+  "license": "UNLICENSED",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "DOCUMENTATION.md",
+    "docs"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ensp1re/xtrawl.git"
+  },
+  "homepage": "https://github.com/ensp1re/xtrawl#readme",
+  "bugs": {
+    "url": "https://github.com/ensp1re/xtrawl/issues"
+  },
+  "keywords": [
+    "x",
+    "twitter",
+    "scraper",
+    "crawler",
+    "typescript"
+  ],
+  "engines": {
+    "node": ">=22.5.0"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./cli": {
+      "types": "./dist/cli/main.d.ts",
+      "import": "./dist/cli/main.js",
+      "default": "./dist/cli/main.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "xtrawl": "./dist/cli/main.js"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "clean": "node scripts/clean.mjs",
+    "format": "prettier --write \"src/**/*.ts\" \"tests/**/*.ts\" \"scripts/**/*.mjs\"",
+    "format:check": "prettier --check \"src/**/*.ts\" \"tests/**/*.ts\" \"scripts/**/*.mjs\"",
+    "lint": "eslint \"src/**/*.ts\" \"tests/**/*.ts\"",
+    "test": "NODE_OPTIONS=--experimental-vm-modules jest --config jest.config.cjs --runInBand",
+    "test:integration": "RUN_LIVE_TESTS=1 NODE_OPTIONS=--experimental-vm-modules jest --config jest.config.cjs --runInBand tests/integration",
+    "check": "npm run format:check && npm run lint && npm run build && npm test -- --runInBand",
+    "cli": "node dist/cli/main.js",
+    "context": "node scripts/harness/context.mjs",
+    "verify": "npm run format:check && npm run lint && npm run build && npm test -- --runInBand && npm run package:check && npm run harness:validate && npm run harness:budget",
+    "package:check": "node scripts/package-check.mjs",
+    "harness:validate": "python3 scripts/harness/validate.py",
+    "harness:budget": "python3 scripts/harness/budget.py",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm run verify",
+    "prepare": "husky"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "fetch-socks": "^1.3.3",
+    "undici": "^7.22.0",
+    "x-client-transaction-id": "^0.3.1"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^25.2.3",
+    "@typescript-eslint/eslint-plugin": "^8.62.1",
+    "@typescript-eslint/parser": "^8.62.1",
+    "eslint": "^10.6.0",
+    "husky": "^9.1.7",
+    "jest": "^29.7.0",
+    "prettier": "^3.9.4",
+    "ts-jest": "^29.3.4",
+    "typescript": "^5.9.3"
+  }
+}