@alpic-ai/sdk 0.0.0-dev.g0479425

package/dist/auth/server/index.js

@@ -0,0 +1,128 @@
+import { readFile } from "node:fs/promises";
+import { createServer } from "node:http";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { LOOPBACK_HOST, LOOPBACK_PORT } from "../constants.js";
+import { getOAuthClient } from "../oauth-client.js";
+const noopLogger = { log: () => { }, error: () => { } };
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const ASSETS_DIR = path.join(__dirname, "assets");
+const createCallbackServer = ({ state, nonce, codeVerifier, authorizeUrl, onSuccess, onError, logger = noopLogger, }) => createServer(async (req, res) => {
+    const url = req.url ?? "/";
+    const pathname = url.split("?")[0] ?? "/";
+    if (pathname === "/login") {
+        try {
+            const htmlPath = path.join(ASSETS_DIR, "authorize.html");
+            let html = await readFile(htmlPath, "utf-8");
+            if (authorizeUrl) {
+                html = html.replace(/%AUTH_BASE_URL%/g, authorizeUrl);
+            }
+            res.writeHead(200, {
+                "Content-Type": "text/html",
+                Connection: "close",
+            });
+            res.end(html);
+            return;
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            logger.error(msg);
+            res.writeHead(500).end();
+            return;
+        }
+    }
+    if (pathname === "/assets/alpic-mountain.png") {
+        const filePath = path.join(ASSETS_DIR, "alpic-mountain.png");
+        const content = await readFile(filePath);
+        res.writeHead(200, { "Content-Type": "image/png", Connection: "close" });
+        res.end(content);
+        return;
+    }
+    if (!url.startsWith("/callback")) {
+        res.writeHead(404).end();
+        return;
+    }
+    try {
+        const tokens = await getOAuthClient().exchangeAuthorizationCode({
+            url: new URL(url, `http://${req.headers.host}`),
+            codeVerifier,
+            state,
+            nonce,
+        });
+        const sub = tokens.claims()?.sub;
+        if (!sub || !tokens.refresh_token) {
+            throw new Error("ID token did not contain sub");
+        }
+        const stored = {
+            access_token: tokens.access_token,
+            refresh_token: tokens.refresh_token,
+            expires_at: getOAuthClient().getExpiresAt(tokens.expires_in ?? 0),
+            sub,
+        };
+        const msg = "Authentication successful";
+        logger.log(msg);
+        const successHtmlPath = path.join(ASSETS_DIR, "callback.html");
+        let html = await readFile(successHtmlPath, "utf-8");
+        html = html
+            .replace(/__CALLBACK_STATUS__/g, "success")
+            .replace(/__CALLBACK_TITLE__/g, "You are logged in")
+            .replace(/__CALLBACK_SUB__/g, "You can close this page.");
+        res.writeHead(200, { "Content-Type": "text/html", Connection: "close" });
+        res.end(html);
+        onSuccess(stored);
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        logger.error(msg);
+        const callbackHtmlPath = path.join(ASSETS_DIR, "callback.html");
+        let html = await readFile(callbackHtmlPath, "utf-8");
+        html = html
+            .replace(/__CALLBACK_STATUS__/g, "error")
+            .replace(/__CALLBACK_TITLE__/g, "An error occurred. You can close this page.")
+            .replace(/__CALLBACK_SUB__/g, "");
+        res.writeHead(500, { "Content-Type": "text/html", Connection: "close" });
+        res.end(html);
+        onError(e instanceof Error ? e : new Error(String(e)));
+    }
+});
+export const getLoginPageUrl = () => `http://${LOOPBACK_HOST}:${LOOPBACK_PORT}/login`;
+const LOGIN_TIMEOUT_MS = 5 * 60 * 1000;
+export const listenToOAuthCallback = ({ state, nonce, codeVerifier, authorizeUrl, logger = noopLogger, }) => {
+    return new Promise((resolve, reject) => {
+        let timeoutHandle;
+        const callbackServer = createCallbackServer({
+            state,
+            nonce,
+            codeVerifier,
+            authorizeUrl,
+            logger,
+            onSuccess: (storedToken) => {
+                clearTimeout(timeoutHandle);
+                callbackServer.close();
+                resolve(storedToken);
+            },
+            onError: (err) => {
+                clearTimeout(timeoutHandle);
+                callbackServer.close();
+                reject(err);
+            },
+        });
+        callbackServer.on("error", (err) => {
+            clearTimeout(timeoutHandle);
+            callbackServer.close();
+            if (err.code === "EADDRINUSE") {
+                reject(new Error(`Port ${LOOPBACK_PORT} is already in use. Another login may be in progress. Please try again.`));
+            }
+            else {
+                reject(err);
+            }
+        });
+        timeoutHandle = setTimeout(() => {
+            callbackServer.close();
+            reject(new Error("Login timed out after 5 minutes. Please try again."));
+        }, LOGIN_TIMEOUT_MS);
+        timeoutHandle.unref();
+        callbackServer.listen(LOOPBACK_PORT, LOOPBACK_HOST);
+    });
+};
+//# sourceMappingURL=index.js.map

package/dist/auth/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAOpD,MAAM,UAAU,GAAW,EAAE,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;AAE9D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAElD,MAAM,oBAAoB,GAAG,CAAC,EAC5B,KAAK,EACL,KAAK,EACL,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,OAAO,EACP,MAAM,GAAG,UAAU,GASpB,EAAE,EAAE,CACH,YAAY,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;IAC/D,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;IAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IAE1C,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACzD,IAAI,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;YACxD,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAE,WAAW;gBAC3B,UAAU,EAAE,OAAO;aACpB,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,4BAA4B,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC,yBAAyB,CAAC;YAC9D,GAAG,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/C,YAAY;YACZ,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC;QACjC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,MAAM,GAAgB;YAC1B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,UAAU,EAAE,cAAc,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;YACjE,GAAG;SACJ,CAAC;QACF,MAAM,GAAG,GAAG,2BAA2B,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAC/D,IAAI,IAAI,GAAG,MAAM,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,GAAG,IAAI;aACR,OAAO,CAAC,sBAAsB,EAAE,SAAS,CAAC;aAC1C,OAAO,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;aACnD,OAAO,CAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAC;QAC5D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACd,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAChE,IAAI,IAAI,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,GAAG,IAAI;aACR,OAAO,CAAC,sBAAsB,EAAE,OAAO,CAAC;aACxC,OAAO,CAAC,qBAAqB,EAAE,6CAA6C,CAAC;aAC7E,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,aAAa,IAAI,aAAa,QAAQ,CAAC;AAEtF,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EACpC,KAAK,EACL,KAAK,EACL,YAAY,EACZ,YAAY,EACZ,MAAM,GAAG,UAAU,GAOpB,EAAE,EAAE;IACH,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClD,IAAI,aAA4C,CAAC;QAEjD,MAAM,cAAc,GAAG,oBAAoB,CAAC;YAC1C,KAAK;YACL,KAAK;YACL,YAAY;YACZ,YAAY;YACZ,MAAM;YACN,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;gBACzB,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,cAAc,CAAC,KAAK,EAAE,CAAC;gBACvB,OAAO,CAAC,WAAW,CAAC,CAAC;YACvB,CAAC;YACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,cAAc,CAAC,KAAK,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QAEH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YACxD,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,cAAc,CAAC,KAAK,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9B,MAAM,CACJ,IAAI,KAAK,CAAC,QAAQ,aAAa,yEAAyE,CAAC,CAC1G,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,cAAc,CAAC,KAAK,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC,CAAC;QAC1E,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACrB,aAAa,CAAC,KAAK,EAAE,CAAC;QAEtB,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/auth/store.d.ts

@@ -0,0 +1,30 @@
+export interface Credentials {
+    access_token: string;
+    refresh_token: string;
+    expires_at: number;
+    sub: string;
+}
+export interface Config {
+    machineId: string;
+    telemetry: {
+        enabled: boolean;
+    };
+}
+export declare class GlobalStore {
+    private readonly configDir;
+    constructor(opts?: {
+        configDir?: string;
+    });
+    getCredentials(): Credentials | null;
+    saveCredentials(credentials: Credentials): void;
+    clearCredentials(): void;
+    getConfig(): Config;
+    saveConfig(config: Config): void;
+    clearConfig(): void;
+    private getCredentialsFilePath;
+    private getConfigFilePath;
+    private parseJsonFile;
+    private saveJsonFile;
+    private clear;
+}
+export declare const globalStore: GlobalStore;

package/dist/auth/store.js

@@ -0,0 +1,76 @@
+import crypto from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import envPaths from "env-paths";
+export class GlobalStore {
+    configDir;
+    constructor(opts) {
+        const configDirOverride = opts?.configDir ?? process.env.ALPIC_GLOBAL_CONFIG_DIR;
+        this.configDir = configDirOverride ?? envPaths("alpic", { suffix: "" }).config;
+    }
+    getCredentials() {
+        const token = this.parseJsonFile(this.getCredentialsFilePath());
+        if (!token) {
+            return null;
+        }
+        return token;
+    }
+    saveCredentials(credentials) {
+        this.saveJsonFile(this.getCredentialsFilePath(), credentials);
+    }
+    clearCredentials() {
+        this.clear(this.getCredentialsFilePath());
+    }
+    getConfig() {
+        const existing = this.parseJsonFile(this.getConfigFilePath());
+        if (existing?.machineId && existing?.telemetry !== undefined) {
+            return existing;
+        }
+        const config = {
+            machineId: existing?.machineId ?? crypto.randomUUID(),
+            telemetry: {
+                enabled: existing?.telemetry?.enabled ?? true,
+            },
+        };
+        this.saveConfig(config);
+        return config;
+    }
+    saveConfig(config) {
+        this.saveJsonFile(this.getConfigFilePath(), config);
+    }
+    clearConfig() {
+        this.clear(this.getConfigFilePath());
+    }
+    getCredentialsFilePath() {
+        return join(this.configDir, "credentials.json");
+    }
+    getConfigFilePath() {
+        return join(this.configDir, "config.json");
+    }
+    parseJsonFile(filePath) {
+        if (!existsSync(filePath)) {
+            return null;
+        }
+        try {
+            return JSON.parse(readFileSync(filePath, "utf-8"));
+        }
+        catch {
+            this.clear(filePath);
+            return null;
+        }
+    }
+    saveJsonFile(filePath, data) {
+        mkdirSync(this.configDir, { recursive: true });
+        writeFileSync(filePath, JSON.stringify(data, null, 2), {
+            encoding: "utf-8",
+            mode: 0o600,
+        });
+    }
+    clear(filePath) {
+        if (existsSync(filePath)) {
+            unlinkSync(filePath);
+        }
+    }
+}
+export const globalStore = new GlobalStore();
+//# sourceMappingURL=store.js.map

package/dist/auth/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/auth/store.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,QAAQ,MAAM,WAAW,CAAC;AAejC,MAAM,OAAO,WAAW;IACL,SAAS,CAAS;IAEnC,YAAY,IAA6B;QACvC,MAAM,iBAAiB,GAAG,IAAI,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACjF,IAAI,CAAC,SAAS,GAAG,iBAAiB,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;IACjF,CAAC;IAED,cAAc;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAc,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC;QAE7E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,eAAe,CAAC,WAAwB;QACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,WAAW,CAAC,CAAC;IAChE,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,SAAS;QACP,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAS,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACtE,IAAI,QAAQ,EAAE,SAAS,IAAI,QAAQ,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;YAC7D,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAW;YACrB,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE;YACrD,SAAS,EAAE;gBACT,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,IAAI,IAAI;aAC9C;SACF,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,WAAW;QACT,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACvC,CAAC;IAEO,sBAAsB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAClD,CAAC;IAEO,iBAAiB;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAC7C,CAAC;IAEO,aAAa,CAAI,QAAgB;QACvC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAM,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,QAAgB,EAAE,IAAa;QAClD,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YACrD,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,QAAgB;QAC5B,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,13 @@
+import { type AlpicApi } from "./api/client.js";
+import { AlpicAuth } from "./auth/index.js";
+import { createTunnel, type TunnelHandle } from "./tunnel/tunnel.js";
+export type AlpicClientOptions = {
+    apiBaseUrl?: string;
+};
+export declare class AlpicClient {
+    readonly auth: AlpicAuth;
+    readonly api: AlpicApi;
+    readonly tunnel: ReturnType<typeof createTunnel>;
+    constructor(opts?: AlpicClientOptions);
+}
+export type { TunnelHandle };

package/dist/client.js

@@ -0,0 +1,32 @@
+import { createApiClient } from "./api/client.js";
+import { AlpicAuth } from "./auth/index.js";
+import { env } from "./env.js";
+import { createTunnel } from "./tunnel/tunnel.js";
+export class AlpicClient {
+    auth;
+    api;
+    tunnel;
+    constructor(opts) {
+        const apiBaseUrl = opts?.apiBaseUrl ?? env.ALPIC_API_BASE_URL;
+        this.auth = new AlpicAuth();
+        this.api = createApiClient({
+            apiBaseUrl,
+            getToken: () => this.auth.getToken(),
+        });
+        this.tunnel = createTunnel({
+            api: this.api,
+            ensureToken: async ({ autoLogin = true, onLoginUrl }) => {
+                let token = await this.auth.getValidAccessToken();
+                if (!token && autoLogin) {
+                    await this.auth.login({ onLoginUrl });
+                    token = await this.auth.getValidAccessToken();
+                }
+                if (!token) {
+                    throw new Error("Not authenticated. Run `alpic login` first.");
+                }
+                return token.access_token;
+            },
+        });
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAC;AAMrE,MAAM,OAAO,WAAW;IACb,IAAI,CAAY;IAChB,GAAG,CAAW;IACd,MAAM,CAAkC;IAEjD,YAAY,IAAyB;QACnC,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,GAAG,CAAC,kBAAkB,CAAC;QAE9D,IAAI,CAAC,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC;YACzB,UAAU;YACV,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;YACzB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,KAAK,EAAE,EAAE,SAAS,GAAG,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;gBACtD,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAClD,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;oBACxB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;oBACtC,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAChD,CAAC;gBACD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,KAAK,CAAC,YAAY,CAAC;YAC5B,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/env.d.ts

@@ -0,0 +1,4 @@
+export declare const env: Readonly<{
+    ALPIC_API_BASE_URL: string;
+    ALPIC_COGNITO_CLIENT_ID: string;
+}>;

package/dist/env.js

@@ -0,0 +1,10 @@
+import { createEnv } from "@t3-oss/env-core";
+import { z } from "zod";
+export const env = createEnv({
+    server: {
+        ALPIC_API_BASE_URL: z.string().default("https://api.alpic.ai"),
+        ALPIC_COGNITO_CLIENT_ID: z.string().default("h9nqsttp8ddb40ddi1aoni91h"),
+    },
+    runtimeEnv: process.env,
+});
+//# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,GAAG,GAAG,SAAS,CAAC;IAC3B,MAAM,EAAE;QACN,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC;QAC9D,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC;KACzE;IACD,UAAU,EAAE,OAAO,CAAC,GAAG;CACxB,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export type { AlpicApi } from "./api/client.js";
+export type { Credentials, LoginOptions } from "./auth/index.js";
+export { AlpicAuth } from "./auth/index.js";
+export { getOAuthClient } from "./auth/oauth-client.js";
+export { GlobalStore, globalStore } from "./auth/store.js";
+export type { AlpicClientOptions, TunnelHandle } from "./client.js";
+export { AlpicClient } from "./client.js";
+export type { OpenTunnelOptions, TunnelRequest } from "./tunnel/tunnel.js";

package/dist/index.js

@@ -0,0 +1,5 @@
+export { AlpicAuth } from "./auth/index.js";
+export { getOAuthClient } from "./auth/oauth-client.js";
+export { GlobalStore, globalStore } from "./auth/store.js";
+export { AlpicClient } from "./client.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/tunnel/tunnel.d.ts

@@ -0,0 +1,40 @@
+import type { AlpicApi } from "../api/client.js";
+export type TunnelRequest = {
+    method: string;
+    path: string;
+};
+export type TunnelHandle = {
+    readonly url: string;
+    on(event: "request", listener: (req: TunnelRequest) => void): void;
+    on(event: "error", listener: (err: Error) => void): void;
+    on(event: "close", listener: () => void): void;
+    close(): void;
+};
+export type OpenTunnelOptions = {
+    port: number;
+    autoLogin?: boolean;
+    onLoginUrl?: (url: string) => void;
+};
+type PipenetSocket = {
+    on(event: string, listener: (...args: unknown[]) => void): void;
+    close(): void;
+};
+type Pipenet = (opts: {
+    port: number;
+    host: string;
+    subdomain: string;
+    headers: Record<string, string>;
+    keepAliveDelayMs: number;
+    offlineTimeoutMs: number;
+}) => Promise<PipenetSocket>;
+export declare function createTunnel(deps: {
+    api: AlpicApi;
+    ensureToken: (opts: {
+        autoLogin?: boolean;
+        onLoginUrl?: (url: string) => void;
+    }) => Promise<string>;
+    pipenet?: Pipenet;
+}): {
+    open(opts: OpenTunnelOptions): Promise<TunnelHandle>;
+};
+export {};

package/dist/tunnel/tunnel.js

@@ -0,0 +1,52 @@
+const CONNECT_TIMEOUT_MS = 10_000;
+const KEEPALIVE_DELAY_MS = 30_000;
+const OFFLINE_TIMEOUT_MS = 30_000;
+export function createTunnel(deps) {
+    return {
+        async open(opts) {
+            // Load the patched pipenet bundle lazily so non-tunnel consumers (every
+            // `alpic` command, the skybridge dev server) don't pay its ~500KB load
+            // cost at startup — only when a tunnel is actually opened.
+            const pipenet = deps.pipenet ?? (await import("../vendor/pipenet.js")).pipenet;
+            const accessToken = await deps.ensureToken({
+                autoLogin: opts.autoLogin,
+                onLoginUrl: opts.onLoginUrl,
+            });
+            const ticket = await deps.api.tunnels.getTicket.v1(undefined, {
+                context: {
+                    request: { headers: { Authorization: `Bearer ${accessToken}` } },
+                },
+            });
+            const proto = ticket.tunnelHost.startsWith("localhost") ? "http" : "https";
+            let timeoutId;
+            const socket = await Promise.race([
+                pipenet({
+                    port: opts.port,
+                    host: `${proto}://${ticket.tunnelHost}`,
+                    subdomain: ticket.subdomain,
+                    headers: { Authorization: `Bearer ${ticket.ticket}` },
+                    keepAliveDelayMs: KEEPALIVE_DELAY_MS,
+                    offlineTimeoutMs: OFFLINE_TIMEOUT_MS,
+                }).then((socket) => {
+                    clearTimeout(timeoutId);
+                    return socket;
+                }),
+                new Promise((_, reject) => {
+                    timeoutId = setTimeout(() => reject(new Error("Failed to connect to tunnel server")), CONNECT_TIMEOUT_MS);
+                    timeoutId.unref?.();
+                }),
+            ]);
+            const url = `${proto}://${ticket.subdomain}.${ticket.tunnelHost}`;
+            return {
+                url,
+                on(event, listener) {
+                    socket.on(event, listener);
+                },
+                close() {
+                    socket.close();
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=tunnel.js.map

package/dist/tunnel/tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../../src/tunnel/tunnel.ts"],"names":[],"mappings":"AAEA,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAgClC,MAAM,UAAU,YAAY,CAAC,IAI5B;IACC,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,IAAuB;YAChC,wEAAwE;YACxE,uEAAuE;YACvE,2DAA2D;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAK,CAAC,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAA8B,CAAC;YAEvG,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;gBACzC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE;gBAC5D,OAAO,EAAE;oBACP,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,EAAE;iBACjE;aACF,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAE3E,IAAI,SAAoD,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAChC,OAAO,CAAC;oBACN,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,GAAG,KAAK,MAAM,MAAM,CAAC,UAAU,EAAE;oBACvC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,EAAE;oBACrD,gBAAgB,EAAE,kBAAkB;oBACpC,gBAAgB,EAAE,kBAAkB;iBACrC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBACjB,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,OAAO,MAAM,CAAC;gBAChB,CAAC,CAAC;gBACF,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC/B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;oBAC1G,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;gBACtB,CAAC,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,GAAG,KAAK,MAAM,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAElE,OAAO;gBACL,GAAG;gBACH,EAAE,CAAC,KAAK,EAAE,QAAQ;oBAChB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,QAAwC,CAAC,CAAC;gBAC7D,CAAC;gBACD,KAAK;oBACH,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/vendor/pipenet.d.ts

@@ -0,0 +1 @@
+export { pipenet } from "pipenet";