clerk · dstaley · Mar 27, 2026 · Mar 27, 2026 · Mar 27, 2026 · Mar 27, 2026
diff --git a/packages/agent-toolkit/package.json b/packages/agent-toolkit/package.json
@@ -36,9 +36,9 @@
     "dist"
   ],
   "scripts": {
-    "build": "tsup --env.NODE_ENV production",
+    "build": "tsdown --env.NODE_ENV production",
     "clean": "rimraf ./dist",
-    "dev": "tsup --watch",
+    "dev": "tsdown --watch",
     "dev:pub": "pnpm dev -- --env.publish",
     "format": "node ../../scripts/format-package.mjs",
     "format:check": "node ../../scripts/format-package.mjs --check",

diff --git a/packages/agent-toolkit/tsup.config.ts → packages/agent-toolkit/tsdown.config.mts b/packages/agent-toolkit/tsup.config.ts → packages/agent-toolkit/tsdown.config.mts
@@ -1,6 +1,6 @@
-import { defineConfig } from 'tsup';
+import { defineConfig } from 'tsdown';
 
-import { name, version } from './package.json';
+import pkgJson from './package.json' with { type: 'json' };
 
 export default defineConfig(overrideOptions => {
   const isProd = overrideOptions.env?.NODE_ENV === 'production';
@@ -15,13 +15,12 @@ export default defineConfig(overrideOptions => {
     ],
     dts: true,
     clean: true,
-    bundle: true,
     sourcemap: true,
     format: 'esm',
     onSuccess: shouldPublish ? 'pkglab pub --ping' : undefined,
     define: {
-      PACKAGE_NAME: `"${name}"`,
-      PACKAGE_VERSION: `"${version}"`,
+      PACKAGE_NAME: `"${pkgJson.name}"`,
+      PACKAGE_VERSION: `"${pkgJson.version}"`,
       __DEV__: `${!isProd}`,
     },
   };

diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -77,10 +77,10 @@
     "types.ts"
   ],
   "scripts": {
-    "build": "tsup --onSuccess \"pnpm build:dts\" && pnpm copy:components",
+    "build": "tsdown --onSuccess \"pnpm build:dts\" && pnpm copy:components",
     "build:dts": "tsc --emitDeclarationOnly --declaration",
     "copy:components": "rm -rf ./components && mkdir -p ./components/ && cp  -r ./src/astro-components/* ./components/ && cp ./src/types.ts ./",
-    "dev": "tsup --watch",
+    "dev": "tsdown --watch",
     "dev:pub": "pnpm dev -- --env.publish",
     "format": "node ../../scripts/format-package.mjs",
     "format:check": "node ../../scripts/format-package.mjs --check",

diff --git a/packages/astro/tsup.config.ts → packages/astro/tsdown.config.mts b/packages/astro/tsup.config.ts → packages/astro/tsdown.config.mts
@@ -1,7 +1,6 @@
-import { defineConfig } from 'tsup';
+import { defineConfig } from 'tsdown';
 
-// @ts-ignore
-import { name, version } from './package.json';
+import pkgJson from './package.json' with { type: 'json' };
 
 export default defineConfig(overrideOptions => {
   const shouldPublish = !!overrideOptions.env?.publish;
@@ -23,10 +22,9 @@ export default defineConfig(overrideOptions => {
     minify: false,
     onSuccess: shouldPublish ? 'pnpm build:dts && pkglab pub --ping' : 'pnpm build:dts',
     define: {
-      PACKAGE_NAME: `"${name}"`,
-      PACKAGE_VERSION: `"${version}"`,
+      PACKAGE_NAME: `"${pkgJson.name}"`,
+      PACKAGE_VERSION: `"${pkgJson.version}"`,
     },
-    bundle: true,
     sourcemap: true,
     format: ['esm'],
     external: ['astro', 'react', 'react-dom', 'node:async_hooks', '#async-local-storage', 'astro:transitions/client'],

diff --git a/packages/backend/src/api/endpoints/JwtTemplatesApi.ts b/packages/backend/src/api/endpoints/JwtTemplatesApi.ts
@@ -1,5 +1,5 @@
 import type { ClerkPaginationRequest } from '@clerk/shared/types';
-import { joinPaths } from 'src/util/path';
+import { joinPaths } from '../../util/path';
 
 import type { DeletedObject, JwtTemplate } from '../resources';
 import type { PaginatedResourceResponse } from '../resources/Deserializer';

diff --git a/packages/backend/src/api/endpoints/WaitlistEntryApi.ts b/packages/backend/src/api/endpoints/WaitlistEntryApi.ts
@@ -1,5 +1,5 @@
 import type { ClerkPaginationRequest } from '@clerk/shared/types';
-import { joinPaths } from 'src/util/path';
+import { joinPaths } from '../../util/path';
 
 import type { DeletedObject } from '../resources/DeletedObject';
 import type { PaginatedResourceResponse } from '../resources/Deserializer';

diff --git a/packages/backend/src/jwt/cryptoKeys.ts b/packages/backend/src/jwt/cryptoKeys.ts
@@ -3,7 +3,7 @@ import { isomorphicAtob } from '@clerk/shared/isomorphicAtob';
 import { runtime } from '../runtime';
 
 // https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#pkcs_8_import
-function pemToBuffer(secret: string): ArrayBuffer {
+function pemToBuffer(secret: string): Uint8Array<ArrayBuffer> {
   const trimmed = secret
     .replace(/-----BEGIN.*?-----/g, '')
     .replace(/-----END.*?-----/g, '')

diff --git a/packages/backend/src/jwt/verifyJwt.ts b/packages/backend/src/jwt/verifyJwt.ts
@@ -28,7 +28,12 @@ export async function hasValidSignature(jwt: Jwt, key: JsonWebKey | string): Pro
   try {
     const cryptoKey = await importKey(key, algorithm, 'verify');
 
-    const verified = await runtime.crypto.subtle.verify(algorithm.name, cryptoKey, signature, data);
+    const verified = await runtime.crypto.subtle.verify(
+      algorithm.name,
+      cryptoKey,
+      signature as Uint8Array<ArrayBuffer>,
+      data,
+    );
     return { data: verified };
   } catch (error) {
     return {

diff --git a/packages/backend/src/tokens/__tests__/getAuth.test-d.ts b/packages/backend/src/tokens/__tests__/getAuth.test-d.ts
@@ -1,4 +1,4 @@
-import { expectTypeOf, test } from 'vitest';
+import { expectTypeOf, test, describe } from 'vitest';
 
 import type { RedirectFun } from '../../createRedirect';
 import type { AuthObject, InvalidTokenAuthObject } from '../authObjects';

diff --git a/packages/backend/src/webhooks.ts b/packages/backend/src/webhooks.ts
@@ -1,6 +1,6 @@
 import { getEnvVariable } from '@clerk/shared/getEnvVariable';
-import { errorThrower } from 'src/util/shared';
 import { Webhook } from 'standardwebhooks';
+import { errorThrower } from './util/shared';
 
 import type { WebhookEvent } from './api/resources/Webhooks';
 

diff --git a/packages/backend/tsconfig.json b/packages/backend/tsconfig.json
@@ -1,7 +1,6 @@
 {
   "compilerOptions": {
     "allowSyntheticDefaultImports": true,
-    "baseUrl": ".",
     "esModuleInterop": true,
     "forceConsistentCasingInFileNames": true,
     "importHelpers": true,

diff --git a/packages/chrome-extension/tsconfig.json b/packages/chrome-extension/tsconfig.json
@@ -17,7 +17,9 @@
     "declaration": true,
     "declarationDir": "dist/types",
     "declarationMap": true,
-    "emitDeclarationOnly": true
+    "emitDeclarationOnly": true,
+    "rootDir": "./src",
+    "types": ["jest"]
   },
   "include": ["src"]
 }
diff --git a/packages/clerk-js/tsconfig.json b/packages/clerk-js/tsconfig.json
@@ -7,7 +7,7 @@
     "isolatedModules": true,
     "jsx": "react-jsx",
     "jsxImportSource": "@emotion/react",
-    "lib": ["dom", "dom.iterable", "es2021.intl"],
+    "lib": ["dom", "dom.iterable", "es2020", "es2021.intl"],
     "module": "esnext",
     "moduleResolution": "Bundler",
     "noEmit": true,
@@ -22,7 +22,9 @@
     "useUnknownInCatchVariables": false,
     "paths": {
       "@/*": ["./src/*"]
-    }
+    },
+    "rootDir": "./src",
+    "types": ["@rspack/core/module", "cloudflare-turnstile"]
   },
   "include": ["src", "vitest.config.mts", "vitest.setup.mts", "../shared/internal/clerk-js/componentGuards.ts"]
 }
diff --git a/packages/expo-passkeys/src/ClerkExpoPasskeys.types.ts b/packages/expo-passkeys/src/ClerkExpoPasskeys.types.ts
@@ -43,50 +43,14 @@ export type SerializedPublicKeyCredentialRequestOptions = Omit<
   challenge: string;
 };
 
-// The return type from the "get" native module.
-export interface AuthenticationResponseJSON {
-  id: string;
-  rawId: string;
-  response: AuthenticatorAssertionResponseJSON;
-  authenticatorAttachment?: AuthenticatorAttachment;
-  clientExtensionResults: AuthenticationExtensionsClientOutputs;
-  type: PublicKeyCredentialType;
-}
-
 // The serialized response of the native module "create" response to be send back to clerk
 export type PublicKeyCredentialWithAuthenticatorAttestationResponse =
   ClerkPublicKeyCredentialWithAuthenticatorAttestationResponse & {
     toJSON: () => any;
   };
 
-interface AuthenticatorAssertionResponseJSON {
-  clientDataJSON: string;
-  authenticatorData: string;
-  signature: string;
-  userHandle?: string;
-}
-
 // The serialized response of the native module "get" response to be send back to clerk
 export type PublicKeyCredentialWithAuthenticatorAssertionResponse =
   ClerkPublicKeyCredentialWithAuthenticatorAssertionResponse & {
     toJSON: () => any;
   };
-
-interface AuthenticatorAttestationResponseJSON {
-  clientDataJSON: string;
-  attestationObject: string;
-  authenticatorData?: string;
-  transports?: AuthenticatorTransportFuture[];
-  publicKeyAlgorithm?: COSEAlgorithmIdentifier;
-  publicKey?: string;
-}
-
-// The type is returned from from native module "create" response
-export interface RegistrationResponseJSON {
-  id: string;
-  rawId: string;
-  response: AuthenticatorAttestationResponseJSON;
-  authenticatorAttachment?: AuthenticatorAttachment;
-  clientExtensionResults: AuthenticationExtensionsClientOutputs;
-  type: PublicKeyCredentialType;
-}
diff --git a/packages/expo-passkeys/src/index.ts b/packages/expo-passkeys/src/index.ts
@@ -1,13 +1,11 @@
 import { Platform } from 'react-native';
 
 import type {
-  AuthenticationResponseJSON,
   CredentialReturn,
   PublicKeyCredentialCreationOptionsWithoutExtensions,
   PublicKeyCredentialRequestOptionsWithoutExtensions,
   PublicKeyCredentialWithAuthenticatorAssertionResponse,
   PublicKeyCredentialWithAuthenticatorAttestationResponse,
-  RegistrationResponseJSON,
   SerializedPublicKeyCredentialCreationOptions,
   SerializedPublicKeyCredentialRequestOptions,
 } from './ClerkExpoPasskeys.types';
@@ -27,7 +25,7 @@
  id: publicCredential.id,
  rawId: base64urlToArrayBuffer(publicCredential.rawId),
  response: {
    getTransports: () => publicCredential?.response?.transports as string[],
    attestationObject: base64urlToArrayBuffer(publicCredential.response.attestationObject),
    clientDataJSON: base64urlToArrayBuffer(publicCredential.response.clientDataJSON),
  },
@@ -65,8 +63,8 @@
  };

  const createPasskeyModule = Platform.select({
    android: async () => ClerkExpoPasskeys.create(JSON.stringify(createOptions)),
    ios: async () =>
      ClerkExpoPasskeys.create(
        createOptions.challenge,
        createOptions.rp.id,
@@ -130,8 +128,8 @@
  };

  const getPasskeyModule = Platform.select({
    android: async () => ClerkExpoPasskeys.get(JSON.stringify(serializedPublicCredential)),
    ios: async () => ClerkExpoPasskeys.get(serializedPublicCredential.challenge, serializedPublicCredential.rpId),
    default: null,
  });


diff --git a/packages/expo-passkeys/tsconfig.json b/packages/expo-passkeys/tsconfig.json
@@ -1,7 +1,6 @@
 {
   "compilerOptions": {
     "allowJs": true,
-    "baseUrl": ".",
     "declaration": true,
     "declarationMap": false,
     "esModuleInterop": true,
@@ -20,7 +19,9 @@
     "skipLibCheck": true,
     "sourceMap": false,
     "strict": true,
-    "target": "ES2019"
+    "target": "ES2019",
+    "types": ["node"],
+    "rootDir": "./src"
   },
   "include": ["src"]
 }
diff --git a/packages/expo/package.json b/packages/expo/package.json
@@ -101,10 +101,10 @@
     "app.plugin.d.ts"
   ],
   "scripts": {
-    "build": "tsup",
+    "build": "tsdown",
     "build:declarations": "tsc -p tsconfig.declarations.json",
     "clean": "rimraf ./dist",
-    "dev": "tsup --watch",
+    "dev": "tsdown --watch",
     "dev:pub": "pnpm dev -- --env.publish",
     "format": "node ../../scripts/format-package.mjs",
     "format:check": "node ../../scripts/format-package.mjs --check",

diff --git a/packages/expo/src/polyfills/base64Polyfill.ts b/packages/expo/src/polyfills/base64Polyfill.ts
@@ -3,11 +3,11 @@ import { decode, encode } from 'base-64';
 import { isHermes } from '../utils';
 
 // See Default Expo 51 engine Hermes' issue: https://github.com/facebook/hermes/issues/1379
-if (!global.btoa || isHermes()) {
-  global.btoa = encode;
+if (!globalThis.btoa || isHermes()) {
+  globalThis.btoa = encode;
 }
 
 // See Default Expo 51 engine Hermes' issue: https://github.com/facebook/hermes/issues/1379
-if (!global.atob || isHermes()) {
-  global.atob = decode;
+if (!globalThis.atob || isHermes()) {
+  globalThis.atob = decode;
 }
diff --git a/packages/expo/tsconfig.json b/packages/expo/tsconfig.json
@@ -1,8 +1,7 @@
 {
   "compilerOptions": {
     "outDir": "dist",
-    "baseUrl": ".",
-    "lib": ["es6", "dom"],
+    "lib": ["es2019", "dom"],
     "jsx": "react-jsx",
     "module": "NodeNext",
     "moduleResolution": "NodeNext",

diff --git a/packages/expo/tsup.config.ts → packages/expo/tsdown.config.mts b/packages/expo/tsup.config.ts → packages/expo/tsdown.config.mts
@@ -1,9 +1,9 @@
-import type { Options } from 'tsup';
-import { defineConfig } from 'tsup';
+import type { Options } from 'tsdown';
+import { defineConfig } from 'tsdown';
 
-import { runAfterLast } from '../../scripts/utils';
-import { version as clerkJsVersion } from '../clerk-js/package.json';
-import { name, version } from './package.json';
+import { runAfterLast } from '../../scripts/utils.ts';
+import clerkJsPkgJson from '../clerk-js/package.json' with { type: 'json' };
+import pkgJson from './package.json' with { type: 'json' };
 
 export default defineConfig(overrideOptions => {
   const isWatch = !!overrideOptions.watch;
@@ -17,11 +17,10 @@ export default defineConfig(overrideOptions => {
     clean: true,
     minify: false,
     sourcemap: true,
-    legacyOutput: true,
     define: {
-      PACKAGE_NAME: `"${name}"`,
-      PACKAGE_VERSION: `"${version}"`,
-      JS_PACKAGE_VERSION: `"${clerkJsVersion}"`,
+      PACKAGE_NAME: `"${pkgJson.name}"`,
+      PACKAGE_VERSION: `"${pkgJson.version}"`,
+      JS_PACKAGE_VERSION: `"${clerkJsPkgJson.version}"`,
       __DEV__: `${isWatch}`,
     },
   };

diff --git a/packages/express/package.json b/packages/express/package.json
@@ -61,9 +61,9 @@
     "env.d.ts"
   ],
   "scripts": {
-    "build": "pnpm clean && tsup",
+    "build": "pnpm clean && tsdown",
     "clean": "rimraf ./dist",
-    "dev": "tsup --watch",
+    "dev": "tsdown --watch",
     "dev:pub": "pnpm dev -- --env.publish",
     "format": "node ../../scripts/format-package.mjs",
     "format:check": "node ../../scripts/format-package.mjs --check",

diff --git a/packages/fastify/tsup.config.ts → packages/express/tsdown.config.mts b/packages/fastify/tsup.config.ts → packages/express/tsdown.config.mts
@@ -1,6 +1,6 @@
-import { defineConfig } from 'tsup';
+import { defineConfig } from 'tsdown';
 
-import { name, version } from './package.json';
+import pkgJson from './package.json' with { type: 'json' };
 
 export default defineConfig(overrideOptions => {
   const isWatch = !!overrideOptions.watch;
@@ -13,15 +13,14 @@ export default defineConfig(overrideOptions => {
       types: './src/types/index.ts',
     },
     format: ['cjs', 'esm'],
-    bundle: true,
     clean: true,
     minify: false,
     sourcemap: true,
     dts: true,
     onSuccess: shouldPublish ? 'pkglab pub --ping' : undefined,
     define: {
-      PACKAGE_NAME: `"${name}"`,
-      PACKAGE_VERSION: `"${version}"`,
+      PACKAGE_NAME: `"${pkgJson.name}"`,
+      PACKAGE_VERSION: `"${pkgJson.version}"`,
       __DEV__: `${isWatch}`,
     },
   };

diff --git a/packages/fastify/package.json b/packages/fastify/package.json
@@ -60,9 +60,9 @@
     "webhooks"
   ],
   "scripts": {
-    "build": "tsup --env.NODE_ENV production",
+    "build": "tsdown --env.NODE_ENV production",
     "clean": "rimraf ./dist",
-    "dev": "tsup --watch",
+    "dev": "tsdown --watch",
     "dev:pub": "pnpm dev -- --env.publish",
     "format": "node ../../scripts/format-package.mjs",
     "format:check": "node ../../scripts/format-package.mjs --check",

diff --git a/packages/hono/tsup.config.ts → packages/fastify/tsdown.config.mts b/packages/hono/tsup.config.ts → packages/fastify/tsdown.config.mts
@@ -1,6 +1,6 @@
-import { defineConfig } from 'tsup';
+import { defineConfig } from 'tsdown';
 
-import { name, version } from './package.json';
+import pkgJson from './package.json' with { type: 'json' };
 
 export default defineConfig(overrideOptions => {
   const isWatch = !!overrideOptions.watch;
@@ -13,15 +13,14 @@ export default defineConfig(overrideOptions => {
       types: './src/types/index.ts',
     },
     format: ['cjs', 'esm'],
-    bundle: true,
     clean: true,
     minify: false,
     sourcemap: true,
     dts: true,
     onSuccess: shouldPublish ? 'pkglab pub --ping' : undefined,
     define: {
-      PACKAGE_NAME: `"${name}"`,
-      PACKAGE_VERSION: `"${version}"`,
+      PACKAGE_NAME: `"${pkgJson.name}"`,
+      PACKAGE_VERSION: `"${pkgJson.version}"`,
       __DEV__: `${isWatch}`,
     },
   };