@alpic-ai/sdk 0.0.0-dev.g6d7c5c7 → 0.0.0-dev.g99a887e

package/dist/api/client.d.ts

@@ -1,11 +1,7 @@
 import { contract } from "@alpic-ai/api";
 import type { ContractRouterClient } from "@orpc/contract";
 export type AlpicApi = ContractRouterClient<typeof contract>;
-export type ApiAuth = {
-    getToken: () => Promise<string | undefined>;
-    getUserAccessToken: () => Promise<string | undefined>;
-};
 export declare function createApiClient(opts: {
     apiBaseUrl: string;
-    auth: ApiAuth;
+    getToken: () => Promise<string | undefined>;
 }): AlpicApi;

package/dist/api/client.js

@@ -1,20 +1,17 @@
-import { AUTH_SCOPE_USER, contract } from "@alpic-ai/api";
+import { contract } from "@alpic-ai/api";
 import { createORPCClient } from "@orpc/client";
 import { ResponseValidationPlugin } from "@orpc/contract/plugins";
 import { OpenAPILink } from "@orpc/openapi-client/fetch";
-import { getAuthScopeForPath } from "./auth-scope.js";
 export function createApiClient(opts) {
     const link = new OpenAPILink(contract, {
         url: opts.apiBaseUrl,
-        headers: async (options, path) => {
-            const headers = options.context?.request?.headers ?? {};
-            if (headers.Authorization) {
-                return headers;
-            }
-            const scope = getAuthScopeForPath(path);
-            const token = scope === AUTH_SCOPE_USER ? await opts.auth.getUserAccessToken() : await opts.auth.getToken();
-            if (token) {
-                headers.Authorization = `Bearer ${token}`;
+        headers: async ({ context }) => {
+            const headers = context.request?.headers || {};
+            if (!headers.Authorization) {
+                const token = await opts.getToken();
+                if (token) {
+                    headers.Authorization = `Bearer ${token}`;
+                }
             }
             return headers;
         },

package/dist/api/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAStD,MAAM,UAAU,eAAe,CAAC,IAA2C;IACzE,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,QAAQ,EAAE;QACrC,GAAG,EAAE,IAAI,CAAC,UAAU;QACpB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;YACxD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAE5G,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;YAC5C,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,EAAE,CAAC,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAIzD,MAAM,UAAU,eAAe,CAAC,IAAyE;IACvG,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,QAAQ,EAAE;QACrC,GAAG,EAAE,IAAI,CAAC,UAAU;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;gBAC5C,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,EAAE,CAAC,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC"}

package/dist/auth/index.d.ts

@@ -7,13 +7,12 @@ export type AuthEvents = {
     };
 };
 export declare class AlpicAuth {
-    private readonly events;
-    on<K extends keyof AuthEvents>(event: K, listener: (payload: AuthEvents[K]) => void): void;
-    off<K extends keyof AuthEvents>(event: K, listener: (payload: AuthEvents[K]) => void): void;
+    #private;
+    on: <K extends "authenticated">(event: K, listener: import("../lib/emitter.js").Listener<AuthEvents[K]>) => void;
+    off: <K extends "authenticated">(event: K, listener: import("../lib/emitter.js").Listener<AuthEvents[K]>) => void;
     getValidAccessToken(): Promise<Credentials | null>;
     isAuthenticated(): Promise<boolean>;
     getToken(): Promise<string | undefined>;
-    getUserAccessToken(): Promise<string | undefined>;
     login(opts?: LoginOptions): Promise<{
         sub: string;
     }>;

package/dist/auth/index.js

@@ -1,15 +1,11 @@
-import { TypedEventEmitter } from "../lib/emitter.js";
+import { createEmitter } from "../lib/emitter.js";
 import { oauthLogin } from "./login.js";
 import { getOAuthClient } from "./oauth-client.js";
 import { globalStore } from "./store.js";
 export class AlpicAuth {
-    events = new TypedEventEmitter();
-    on(event, listener) {
-        this.events.on(event, listener);
-    }
-    off(event, listener) {
-        this.events.off(event, listener);
-    }
+    #events = createEmitter();
+    on = this.#events.on;
+    off = this.#events.off;
     async getValidAccessToken() {
         return getOAuthClient().getValidAccessToken();
     }
@@ -19,12 +15,9 @@ export class AlpicAuth {
     async getToken() {
         return process.env.ALPIC_API_KEY ?? (await getOAuthClient().getValidAccessToken())?.access_token;
     }
-    async getUserAccessToken() {
-        return (await getOAuthClient().getValidAccessToken())?.access_token;
-    }
     async login(opts) {
         const result = await oauthLogin(opts);
-        this.events.emit("authenticated", { sub: result.sub });
+        this.#events.emit("authenticated", { sub: result.sub });
         return result;
     }
     async logout() {

package/dist/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAqB,UAAU,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAoB,WAAW,EAAE,MAAM,YAAY,CAAC;AAQ3D,MAAM,OAAO,SAAS;IACH,MAAM,GAAG,IAAI,iBAAiB,EAAc,CAAC;IAE9D,EAAE,CAA6B,KAAQ,EAAE,QAA0C;QACjF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,GAAG,CAA6B,KAAQ,EAAE,QAA0C;QAClF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,OAAO,cAAc,EAAE,CAAC,mBAAmB,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,SAAS,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,mBAAmB,EAAE,CAAC,EAAE,YAAY,CAAC;IACnG,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,OAAO,CAAC,MAAM,cAAc,EAAE,CAAC,mBAAmB,EAAE,CAAC,EAAE,YAAY,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAmB;QAC7B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,WAAW,CAAC,gBAAgB,EAAE,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAqB,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAqB,UAAU,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAoB,WAAW,EAAE,MAAM,YAAY,CAAC;AAQ3D,MAAM,OAAO,SAAS;IACpB,OAAO,GAA6B,aAAa,EAAc,CAAC;IAEhE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACrB,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IAEvB,KAAK,CAAC,mBAAmB;QACvB,OAAO,cAAc,EAAE,CAAC,mBAAmB,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,SAAS,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,mBAAmB,EAAE,CAAC,EAAE,YAAY,CAAC;IACnG,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAmB;QAC7B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,WAAW,CAAC,gBAAgB,EAAE,CAAC;IACjC,CAAC;CACF"}

package/dist/client.d.ts

@@ -1,9 +1,9 @@
 import { type AlpicApi } from "./api/client.js";
 import { AlpicAuth } from "./auth/index.js";
-import { Tunnel } from "./tunnel/tunnel.js";
-export declare class Alpic {
+import { createTunnel } from "./tunnel/tunnel.js";
+export declare class AlpicClient {
     readonly auth: AlpicAuth;
     readonly api: AlpicApi;
-    readonly tunnel: Tunnel;
+    readonly tunnel: ReturnType<typeof createTunnel>;
     constructor();
 }

package/dist/client.js

@@ -1,8 +1,8 @@
 import { createApiClient } from "./api/client.js";
 import { AlpicAuth } from "./auth/index.js";
 import { env } from "./env.js";
-import { Tunnel } from "./tunnel/tunnel.js";
-export class Alpic {
+import { createTunnel } from "./tunnel/tunnel.js";
+export class AlpicClient {
     auth;
     api;
     tunnel;
@@ -10,11 +10,21 @@ export class Alpic {
         this.auth = new AlpicAuth();
         this.api = createApiClient({
             apiBaseUrl: env.ALPIC_API_BASE_URL,
-            auth: this.auth,
+            getToken: () => this.auth.getToken(),
         });
-        this.tunnel = new Tunnel({
+        this.tunnel = createTunnel({
             api: this.api,
-            auth: this.auth,
+            ensureToken: async ({ autoLogin = true, onLoginUrl }) => {
+                let token = await this.auth.getValidAccessToken();
+                if (!token && autoLogin) {
+                    await this.auth.login({ onLoginUrl });
+                    token = await this.auth.getValidAccessToken();
+                }
+                if (!token) {
+                    throw new Error("Not authenticated. Run `alpic login` first.");
+                }
+                return token.access_token;
+            },
         });
     }
 }

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,OAAO,KAAK;IACP,IAAI,CAAY;IAChB,GAAG,CAAW;IACd,MAAM,CAAS;IAExB;QACE,IAAI,CAAC,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC;YACzB,UAAU,EAAE,GAAG,CAAC,kBAAkB;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,OAAO,WAAW;IACb,IAAI,CAAY;IAChB,GAAG,CAAW;IACd,MAAM,CAAkC;IAEjD;QACE,IAAI,CAAC,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC;YACzB,UAAU,EAAE,GAAG,CAAC,kBAAkB;YAClC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;YACzB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,KAAK,EAAE,EAAE,SAAS,GAAG,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;gBACtD,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAClD,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;oBACxB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;oBACtC,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAChD,CAAC;gBACD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,KAAK,CAAC,YAAY,CAAC;YAC5B,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/index.d.ts

@@ -3,5 +3,5 @@ export type { AuthEvents, Credentials, LoginOptions } from "./auth/index.js";
 export { AlpicAuth } from "./auth/index.js";
 export { getOAuthClient } from "./auth/oauth-client.js";
 export { GlobalStore, globalStore } from "./auth/store.js";
-export { Alpic } from "./client.js";
+export { AlpicClient } from "./client.js";
 export type { OpenTunnelOptions, TunnelCloseInfo, TunnelHandle, TunnelRequest } from "./tunnel/tunnel.js";

package/dist/index.js

@@ -1,5 +1,5 @@
 export { AlpicAuth } from "./auth/index.js";
 export { getOAuthClient } from "./auth/oauth-client.js";
 export { GlobalStore, globalStore } from "./auth/store.js";
-export { Alpic } from "./client.js";
+export { AlpicClient } from "./client.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/lib/emitter.d.ts

@@ -1,7 +1,7 @@
 export type Listener<T> = (payload: T) => void;
-export declare class TypedEventEmitter<EventMap extends Record<string, unknown>> {
-    private readonly listeners;
+export type TypedEmitter<EventMap extends Record<string, unknown>> = {
     on<K extends keyof EventMap>(event: K, listener: Listener<EventMap[K]>): void;
     off<K extends keyof EventMap>(event: K, listener: Listener<EventMap[K]>): void;
     emit<K extends keyof EventMap>(event: K, payload: EventMap[K]): void;
-}
+};
+export declare function createEmitter<EventMap extends Record<string, unknown>>(): TypedEmitter<EventMap>;

package/dist/lib/emitter.js

@@ -1,29 +1,31 @@
 // Minimal typed emitter for SDK lifecycle hooks. Unlike node's EventEmitter it
 // never throws on an unlistened "error" event, and swallows listener errors so
 // observability can never break the operation that emitted the event.
-export class TypedEventEmitter {
-    listeners = new Map();
-    on(event, listener) {
-        const set = this.listeners.get(event) ?? new Set();
-        set.add(listener);
-        this.listeners.set(event, set);
-    }
-    off(event, listener) {
-        this.listeners.get(event)?.delete(listener);
-    }
-    emit(event, payload) {
-        const set = this.listeners.get(event);
-        if (!set) {
-            return;
-        }
-        for (const listener of set) {
-            try {
-                listener(payload);
+export function createEmitter() {
+    const listeners = new Map();
+    return {
+        on(event, listener) {
+            const set = listeners.get(event) ?? new Set();
+            set.add(listener);
+            listeners.set(event, set);
+        },
+        off(event, listener) {
+            listeners.get(event)?.delete(listener);
+        },
+        emit(event, payload) {
+            const set = listeners.get(event);
+            if (!set) {
+                return;
             }
-            catch {
-                // Listener errors must never break the emitting operation.
+            for (const listener of set) {
+                try {
+                    listener(payload);
+                }
+                catch {
+                    // Listener errors must never break the emitting operation.
+                }
             }
-        }
-    }
+        },
+    };
 }
 //# sourceMappingURL=emitter.js.map

package/dist/lib/emitter.js.map

@@ -1 +1 @@
-{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../src/lib/emitter.ts"],"names":[],"mappings":"AAEA,+EAA+E;AAC/E,+EAA+E;AAC/E,sEAAsE;AACtE,MAAM,OAAO,iBAAiB;IACX,SAAS,GAAG,IAAI,GAAG,EAA0C,CAAC;IAE/E,EAAE,CAA2B,KAAQ,EAAE,QAA+B;QACpE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,EAAqB,CAAC;QACtE,GAAG,CAAC,GAAG,CAAC,QAA6B,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,GAAG,CAA2B,KAAQ,EAAE,QAA+B;QACrE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,QAA6B,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAA2B,KAAQ,EAAE,OAAoB;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACF,QAAkC,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../src/lib/emitter.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,+EAA+E;AAC/E,sEAAsE;AACtE,MAAM,UAAU,aAAa;IAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0C,CAAC;IAEpE,OAAO;QACL,EAAE,CAAC,KAAK,EAAE,QAAQ;YAChB,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,EAAqB,CAAC;YACjE,GAAG,CAAC,GAAG,CAAC,QAA6B,CAAC,CAAC;YACvC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,GAAG,CAAC,KAAK,EAAE,QAAQ;YACjB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,QAA6B,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,OAAO;YACjB,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,QAAQ,CAAC,OAAkB,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,2DAA2D;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tunnel/tunnel.d.ts

@@ -1,4 +1,4 @@
-import type { AlpicApi, ApiAuth } from "../api/client.js";
+import type { AlpicApi } from "../api/client.js";
 export type TunnelRequest = {
     method: string;
     path: string;
@@ -15,6 +15,8 @@ export type TunnelHandle = {
 };
 export type OpenTunnelOptions = {
     port: number;
+    autoLogin?: boolean;
+    onLoginUrl?: (url: string) => void;
 };
 type PipenetSocket = {
     on(event: string, listener: (...args: unknown[]) => void): void;
@@ -31,14 +33,14 @@ type Pipenet = (opts: {
     keepAliveDelayMs: number;
     offlineTimeoutMs: number;
 }) => Promise<PipenetSocket>;
-export type TunnelDeps = {
+export declare function createTunnel(deps: {
     api: AlpicApi;
-    auth: Pick<ApiAuth, "getUserAccessToken">;
+    ensureToken: (opts: {
+        autoLogin?: boolean;
+        onLoginUrl?: (url: string) => void;
+    }) => Promise<string>;
     pipenet?: Pipenet;
-};
-export declare class Tunnel {
-    private readonly deps;
-    constructor(deps: TunnelDeps);
+}): {
     open(opts: OpenTunnelOptions): Promise<TunnelHandle>;
-}
+};
 export {};

package/dist/tunnel/tunnel.js

@@ -5,127 +5,129 @@ const OFFLINE_TIMEOUT_MS = 30_000;
 const FLAP_WINDOW_MS = 5_000;
 const FLAP_MIN_SPAN_MS = 2_000;
 const FLAP_THRESHOLD = 15;
-export class Tunnel {
-    deps;
-    constructor(deps) {
-        this.deps = deps;
-    }
-    async open(opts) {
-        // Load the patched pipenet bundle lazily so non-tunnel consumers (every
-        // `alpic` command, the skybridge dev server) don't pay its ~500KB load
-        // cost at startup — only when a tunnel is actually opened.
-        const pipenet = this.deps.pipenet ?? (await import("../vendor/pipenet.js")).pipenet;
-        // Tunnels require a user OAuth token; the API client selects it via contract metadata.
-        if (!(await this.deps.auth.getUserAccessToken())) {
-            throw new Error("Not authenticated. Run `alpic login` first.");
-        }
-        const ticket = await this.deps.api.tunnels.getTicket.v1();
-        // ALPIC_TUNNEL_HOST points a real ticket at a locally-run tunnel server. It's a dev
-        // override for a local (plain-HTTP) server, so default to http regardless of the host;
-        // pass an explicit https:// to force TLS.
-        const hostOverride = process.env.ALPIC_TUNNEL_HOST;
-        let tunnelHost;
-        let proto;
-        if (hostOverride) {
-            proto = hostOverride.startsWith("https://") ? "https" : "http";
-            tunnelHost = hostOverride.replace(/^https?:\/\//, "");
-        }
-        else {
-            tunnelHost = ticket.tunnelHost;
-            proto = tunnelHost.startsWith("localhost") ? "http" : "https";
-        }
-        let timeoutId;
-        const socket = await Promise.race([
-            pipenet({
-                port: opts.port,
-                host: `${proto}://${tunnelHost}`,
-                subdomain: ticket.subdomain,
-                headers: { Authorization: `Bearer ${ticket.ticket}` },
-                keepAliveDelayMs: KEEPALIVE_DELAY_MS,
-                offlineTimeoutMs: OFFLINE_TIMEOUT_MS,
-            }).then((socket) => {
-                clearTimeout(timeoutId);
-                return socket;
-            }),
-            new Promise((_, reject) => {
-                timeoutId = setTimeout(() => reject(new Error("Failed to connect to tunnel server")), CONNECT_TIMEOUT_MS);
-                timeoutId.unref?.();
-            }),
-        ]);
-        const url = `${proto}://${ticket.subdomain}.${tunnelHost}`;
-        const requestListeners = new Set();
-        const errorListeners = new Set();
-        const closeListeners = new Set();
-        let lastRequestAt = 0;
-        let displaced = false;
-        let closed = false;
-        socket.on("request", (req) => {
-            lastRequestAt = Date.now();
-            for (const listener of requestListeners) {
-                listener(req);
+export function createTunnel(deps) {
+    return {
+        async open(opts) {
+            // Load the patched pipenet bundle lazily so non-tunnel consumers (every
+            // `alpic` command, the skybridge dev server) don't pay its ~500KB load
+            // cost at startup — only when a tunnel is actually opened.
+            const pipenet = deps.pipenet ?? (await import("../vendor/pipenet.js")).pipenet;
+            const accessToken = await deps.ensureToken({
+                autoLogin: opts.autoLogin,
+                onLoginUrl: opts.onLoginUrl,
+            });
+            const ticket = await deps.api.tunnels.getTicket.v1(undefined, {
+                context: {
+                    request: { headers: { Authorization: `Bearer ${accessToken}` } },
+                },
+            });
+            // ALPIC_TUNNEL_HOST points a real ticket at a locally-run tunnel server. It's a dev
+            // override for a local (plain-HTTP) server, so default to http regardless of the host;
+            // pass an explicit https:// to force TLS.
+            const hostOverride = process.env.ALPIC_TUNNEL_HOST;
+            let tunnelHost;
+            let proto;
+            if (hostOverride) {
+                proto = hostOverride.startsWith("https://") ? "https" : "http";
+                tunnelHost = hostOverride.replace(/^https?:\/\//, "");
             }
-        });
-        socket.on("error", (err) => {
-            for (const listener of errorListeners) {
-                listener(err);
+            else {
+                tunnelHost = ticket.tunnelHost;
+                proto = tunnelHost.startsWith("localhost") ? "http" : "https";
             }
-        });
-        socket.on("close", () => {
-            closed = true;
-            const info = displaced ? { displaced: true } : undefined;
-            for (const listener of closeListeners) {
-                listener(info);
-            }
-        });
-        // Detect being displaced by a newer tunnel. When another tunnel takes over this
-        // account's subdomain, the server closes our tunnel and rejects our reconnections
-        // (they target a session id that no longer exists), so each one connects and is
-        // dropped within milliseconds. pipenet's offlineTimeoutMs never fires for this — it
-        // only triggers when the server is unreachable entirely (failed connects emit no
-        // "dead"). A "dead" with a prior "open" means a socket reached the server and was
-        // dropped, so a sustained storm of them is the takeover signature.
-        //
-        // Normal serving also churns sockets: with the server's small keep-alive pool, most
-        // concurrent requests get their socket destroyed right after serving, emitting a
-        // "dead" each. A heavy page load can fire 15+ in a few seconds and look identical to
-        // a takeover. The discriminator: a real takeover routes all traffic to the new
-        // tunnel, so we serve zero requests during the storm. Ignore it while requests flow.
-        let drops = [];
-        socket.tunnelCluster?.on("dead", () => {
-            if (displaced || closed) {
-                return;
-            }
-            const now = Date.now();
-            if (now - lastRequestAt < FLAP_WINDOW_MS) {
-                drops = [];
-                return;
-            }
-            drops.push(now);
-            drops = drops.filter((at) => now - at < FLAP_WINDOW_MS);
-            const oldest = drops[0] ?? now;
-            if (drops.length >= FLAP_THRESHOLD && now - oldest >= FLAP_MIN_SPAN_MS) {
-                displaced = true;
-                socket.close();
-            }
-        });
-        return {
-            url,
-            on(event, listener) {
-                if (event === "request") {
-                    requestListeners.add(listener);
-                }
-                else if (event === "error") {
-                    errorListeners.add(listener);
+            let timeoutId;
+            const socket = await Promise.race([
+                pipenet({
+                    port: opts.port,
+                    host: `${proto}://${tunnelHost}`,
+                    subdomain: ticket.subdomain,
+                    headers: { Authorization: `Bearer ${ticket.ticket}` },
+                    keepAliveDelayMs: KEEPALIVE_DELAY_MS,
+                    offlineTimeoutMs: OFFLINE_TIMEOUT_MS,
+                }).then((socket) => {
+                    clearTimeout(timeoutId);
+                    return socket;
+                }),
+                new Promise((_, reject) => {
+                    timeoutId = setTimeout(() => reject(new Error("Failed to connect to tunnel server")), CONNECT_TIMEOUT_MS);
+                    timeoutId.unref?.();
+                }),
+            ]);
+            const url = `${proto}://${ticket.subdomain}.${tunnelHost}`;
+            const requestListeners = new Set();
+            const errorListeners = new Set();
+            const closeListeners = new Set();
+            let lastRequestAt = 0;
+            let displaced = false;
+            let closed = false;
+            socket.on("request", (req) => {
+                lastRequestAt = Date.now();
+                for (const listener of requestListeners) {
+                    listener(req);
                 }
-                else {
-                    closeListeners.add(listener);
+            });
+            socket.on("error", (err) => {
+                for (const listener of errorListeners) {
+                    listener(err);
                 }
-            },
-            close() {
+            });
+            socket.on("close", () => {
                 closed = true;
-                socket.close();
-            },
-        };
-    }
+                const info = displaced ? { displaced: true } : undefined;
+                for (const listener of closeListeners) {
+                    listener(info);
+                }
+            });
+            // Detect being displaced by a newer tunnel. When another tunnel takes over this
+            // account's subdomain, the server closes our tunnel and rejects our reconnections
+            // (they target a session id that no longer exists), so each one connects and is
+            // dropped within milliseconds. pipenet's offlineTimeoutMs never fires for this — it
+            // only triggers when the server is unreachable entirely (failed connects emit no
+            // "dead"). A "dead" with a prior "open" means a socket reached the server and was
+            // dropped, so a sustained storm of them is the takeover signature.
+            //
+            // Normal serving also churns sockets: with the server's small keep-alive pool, most
+            // concurrent requests get their socket destroyed right after serving, emitting a
+            // "dead" each. A heavy page load can fire 15+ in a few seconds and look identical to
+            // a takeover. The discriminator: a real takeover routes all traffic to the new
+            // tunnel, so we serve zero requests during the storm. Ignore it while requests flow.
+            let drops = [];
+            socket.tunnelCluster?.on("dead", () => {
+                if (displaced || closed) {
+                    return;
+                }
+                const now = Date.now();
+                if (now - lastRequestAt < FLAP_WINDOW_MS) {
+                    drops = [];
+                    return;
+                }
+                drops.push(now);
+                drops = drops.filter((at) => now - at < FLAP_WINDOW_MS);
+                const oldest = drops[0] ?? now;
+                if (drops.length >= FLAP_THRESHOLD && now - oldest >= FLAP_MIN_SPAN_MS) {
+                    displaced = true;
+                    socket.close();
+                }
+            });
+            return {
+                url,
+                on(event, listener) {
+                    if (event === "request") {
+                        requestListeners.add(listener);
+                    }
+                    else if (event === "error") {
+                        errorListeners.add(listener);
+                    }
+                    else {
+                        closeListeners.add(listener);
+                    }
+                },
+                close() {
+                    closed = true;
+                    socket.close();
+                },
+            };
+        },
+    };
 }
 //# sourceMappingURL=tunnel.js.map

package/dist/tunnel/tunnel.js.map

@@ -1 +1 @@
-{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../../src/tunnel/tunnel.ts"],"names":[],"mappings":"AAEA,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,qEAAqE;AACrE,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,cAAc,GAAG,EAAE,CAAC;AAuC1B,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI,CAAC,IAAuB;QAChC,wEAAwE;QACxE,uEAAuE;QACvE,2DAA2D;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAK,CAAC,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAA8B,CAAC;QAE5G,uFAAuF;QACvF,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAE1D,oFAAoF;QACpF,uFAAuF;QACvF,0CAA0C;QAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACnD,IAAI,UAAkB,CAAC;QACvB,IAAI,KAAa,CAAC;QAClB,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAC/D,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC/B,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAChE,CAAC;QAED,IAAI,SAAoD,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAChC,OAAO,CAAC;gBACN,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,GAAG,KAAK,MAAM,UAAU,EAAE;gBAChC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,EAAE;gBACrD,gBAAgB,EAAE,kBAAkB;gBACpC,gBAAgB,EAAE,kBAAkB;aACrC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACjB,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC;YACF,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;gBAC1G,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACtB,CAAC,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,GAAG,KAAK,MAAM,MAAM,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;QAE3D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAgC,CAAC;QACjE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAwB,CAAC;QACvD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoC,CAAC;QAEnE,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;gBACxC,QAAQ,CAAC,GAAoB,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;gBACtC,QAAQ,CAAC,GAAY,CAAC,CAAC;YACzB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACzD,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,gFAAgF;QAChF,kFAAkF;QAClF,gFAAgF;QAChF,oFAAoF;QACpF,iFAAiF;QACjF,kFAAkF;QAClF,mEAAmE;QACnE,EAAE;QACF,oFAAoF;QACpF,iFAAiF;QACjF,qFAAqF;QACrF,+EAA+E;QAC/E,qFAAqF;QACrF,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACpC,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,GAAG,GAAG,aAAa,GAAG,cAAc,EAAE,CAAC;gBACzC,KAAK,GAAG,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,IAAI,cAAc,IAAI,GAAG,GAAG,MAAM,IAAI,gBAAgB,EAAE,CAAC;gBACvE,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,GAAG;YACH,EAAE,CAAC,KAAK,EAAE,QAAQ;gBAChB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,gBAAgB,CAAC,GAAG,CAAC,QAAwC,CAAC,CAAC;gBACjE,CAAC;qBAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;oBAC7B,cAAc,CAAC,GAAG,CAAC,QAAgC,CAAC,CAAC;gBACvD,CAAC;qBAAM,CAAC;oBACN,cAAc,CAAC,GAAG,CAAC,QAA4C,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;YACD,KAAK;gBACH,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../../src/tunnel/tunnel.ts"],"names":[],"mappings":"AAEA,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,qEAAqE;AACrE,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,cAAc,GAAG,EAAE,CAAC;AAmC1B,MAAM,UAAU,YAAY,CAAC,IAI5B;IACC,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,IAAuB;YAChC,wEAAwE;YACxE,uEAAuE;YACvE,2DAA2D;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAK,CAAC,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAA8B,CAAC;YAEvG,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;gBACzC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE;gBAC5D,OAAO,EAAE;oBACP,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,EAAE;iBACjE;aACF,CAAC,CAAC;YAEH,oFAAoF;YACpF,uFAAuF;YACvF,0CAA0C;YAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACnD,IAAI,UAAkB,CAAC;YACvB,IAAI,KAAa,CAAC;YAClB,IAAI,YAAY,EAAE,CAAC;gBACjB,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC/D,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC/B,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,CAAC;YAED,IAAI,SAAoD,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAChC,OAAO,CAAC;oBACN,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,GAAG,KAAK,MAAM,UAAU,EAAE;oBAChC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,EAAE;oBACrD,gBAAgB,EAAE,kBAAkB;oBACpC,gBAAgB,EAAE,kBAAkB;iBACrC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBACjB,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,OAAO,MAAM,CAAC;gBAChB,CAAC,CAAC;gBACF,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC/B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;oBAC1G,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;gBACtB,CAAC,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,GAAG,KAAK,MAAM,MAAM,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;YAE3D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAgC,CAAC;YACjE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAwB,CAAC;YACvD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoC,CAAC;YAEnE,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,MAAM,GAAG,KAAK,CAAC;YAEnB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC3B,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;oBACxC,QAAQ,CAAC,GAAoB,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;oBACtC,QAAQ,CAAC,GAAY,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzD,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;oBACtC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,gFAAgF;YAChF,kFAAkF;YAClF,gFAAgF;YAChF,oFAAoF;YACpF,iFAAiF;YACjF,kFAAkF;YAClF,mEAAmE;YACnE,EAAE;YACF,oFAAoF;YACpF,iFAAiF;YACjF,qFAAqF;YACrF,+EAA+E;YAC/E,qFAAqF;YACrF,IAAI,KAAK,GAAa,EAAE,CAAC;YACzB,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACpC,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;oBACxB,OAAO;gBACT,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,IAAI,GAAG,GAAG,aAAa,GAAG,cAAc,EAAE,CAAC;oBACzC,KAAK,GAAG,EAAE,CAAC;oBACX,OAAO;gBACT,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC;gBACxD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;gBAC/B,IAAI,KAAK,CAAC,MAAM,IAAI,cAAc,IAAI,GAAG,GAAG,MAAM,IAAI,gBAAgB,EAAE,CAAC;oBACvE,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,OAAO;gBACL,GAAG;gBACH,EAAE,CAAC,KAAK,EAAE,QAAQ;oBAChB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxB,gBAAgB,CAAC,GAAG,CAAC,QAAwC,CAAC,CAAC;oBACjE,CAAC;yBAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;wBAC7B,cAAc,CAAC,GAAG,CAAC,QAAgC,CAAC,CAAC;oBACvD,CAAC;yBAAM,CAAC;wBACN,cAAc,CAAC,GAAG,CAAC,QAA4C,CAAC,CAAC;oBACnE,CAAC;gBACH,CAAC;gBACD,KAAK;oBACH,MAAM,GAAG,IAAI,CAAC;oBACd,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alpic-ai/sdk",
-  "version": "0.0.0-dev.g6d7c5c7",
+  "version": "0.0.0-dev.g99a887e",
   "description": "Programmatic SDK for Alpic (auth, API, tunnel)",
   "homepage": "https://alpic.ai",
   "repository": {
@@ -34,7 +34,7 @@
     "open": "^11.0.0",
     "openid-client": "^6.8.4",
     "zod": "^4.4.3",
-    "@alpic-ai/api": "0.0.0-dev.g6d7c5c7"
+    "@alpic-ai/api": "0.0.0-dev.g99a887e"
   },
   "devDependencies": {
     "@total-typescript/tsconfig": "^1.0.4",

package/dist/api/auth-scope.d.ts

@@ -1,2 +0,0 @@
-import { type AuthScope } from "@alpic-ai/api";
-export declare function getAuthScopeForPath(path: readonly string[]): AuthScope;

package/dist/api/auth-scope.js

@@ -1,7 +0,0 @@
-import { AUTH_SCOPE_ANY, contract } from "@alpic-ai/api";
-import { getContractRouter } from "@orpc/contract";
-export function getAuthScopeForPath(path) {
-    const procedure = getContractRouter(contract, path);
-    return procedure?.["~orpc"]?.meta?.authScope ?? AUTH_SCOPE_ANY;
-}
-//# sourceMappingURL=auth-scope.js.map

package/dist/api/auth-scope.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-scope.js","sourceRoot":"","sources":["../../src/api/auth-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAkB,QAAQ,EAAsB,MAAM,eAAe,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAQnD,MAAM,UAAU,mBAAmB,CAAC,IAAuB;IACzD,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACpD,OAAQ,SAA2C,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,IAAI,cAAc,CAAC;AACpG,CAAC"}