@alpic-ai/sdk 0.0.0-dev.ge2abcc8 → 0.0.0-dev.ge33f4b3

package/dist/deploy/upload.js

@@ -0,0 +1,13 @@
+export async function uploadToPresignedUrl(uploadUrl, buffer) {
+    const res = await fetch(uploadUrl, {
+        method: "PUT",
+        headers: {
+            "Content-Type": "application/gzip",
+        },
+        body: new Uint8Array(buffer),
+    });
+    if (!res.ok) {
+        throw new Error(`Upload failed: ${res.status} ${res.statusText}`);
+    }
+}
+//# sourceMappingURL=upload.js.map

package/dist/deploy/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../src/deploy/upload.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,MAAc;IAC1E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;QACjC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,8 +1,11 @@
 export type { AlpicApi } from "./api/client.js";
-export type { Credentials, LoginOptions } from "./auth/index.js";
+export type { AuthEvents, Credentials, LoginOptions } from "./auth/index.js";
 export { AlpicAuth } from "./auth/index.js";
 export { getOAuthClient } from "./auth/oauth-client.js";
 export { GlobalStore, globalStore } from "./auth/store.js";
-export type { AlpicClientOptions, TunnelHandle } from "./client.js";
-export { AlpicClient } from "./client.js";
-export type { OpenTunnelOptions, TunnelRequest } from "./tunnel/tunnel.js";
+export { Alpic } from "./client.js";
+export type { DeployEvent, Deployment, DeploymentStatus, DeployOptions, DeployResult } from "./deploy/deployments.js";
+export type { ProjectConfig } from "./project/config.js";
+export type { CreateLinkedProjectOptions, LinkedProjectConfig } from "./project/projects.js";
+export type { OpenTunnelOptions, TunnelCloseInfo, TunnelHandle, TunnelRequest } from "./tunnel/tunnel.js";
+export type { Team, WhoamiInfo } from "./whoami.js";

package/dist/index.js

@@ -1,5 +1,5 @@
 export { AlpicAuth } from "./auth/index.js";
 export { getOAuthClient } from "./auth/oauth-client.js";
 export { GlobalStore, globalStore } from "./auth/store.js";
-export { AlpicClient } from "./client.js";
+export { Alpic } from "./client.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC"}

package/dist/lib/emitter.d.ts

@@ -0,0 +1,7 @@
+export type Listener<T> = (payload: T) => void;
+export declare class TypedEventEmitter<EventMap extends Record<string, unknown>> {
+    private readonly listeners;
+    on<K extends keyof EventMap>(event: K, listener: Listener<EventMap[K]>): void;
+    off<K extends keyof EventMap>(event: K, listener: Listener<EventMap[K]>): void;
+    emit<K extends keyof EventMap>(event: K, payload: EventMap[K]): void;
+}

package/dist/lib/emitter.js

@@ -0,0 +1,28 @@
+// Unlike node's EventEmitter, this never throws on an unlistened "error" event and swallows listener errors so observability can never break the operation that emitted the event.
+export class TypedEventEmitter {
+    listeners = new Map();
+    on(event, listener) {
+        const set = this.listeners.get(event) ?? new Set();
+        // biome-ignore lint/plugin/no-type-assertion: Listeners are stored by their matching event key.
+        set.add(listener);
+        this.listeners.set(event, set);
+    }
+    off(event, listener) {
+        // biome-ignore lint/plugin/no-type-assertion: Listeners are retrieved by their matching event key.
+        this.listeners.get(event)?.delete(listener);
+    }
+    emit(event, payload) {
+        const set = this.listeners.get(event);
+        if (!set) {
+            return;
+        }
+        for (const listener of set) {
+            try {
+                // biome-ignore lint/plugin/no-type-assertion: Listeners are retrieved by their matching event key.
+                listener(payload);
+            }
+            catch { }
+        }
+    }
+}
+//# sourceMappingURL=emitter.js.map

package/dist/lib/emitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../src/lib/emitter.ts"],"names":[],"mappings":"AAEA,mLAAmL;AACnL,MAAM,OAAO,iBAAiB;IACX,SAAS,GAAG,IAAI,GAAG,EAA0C,CAAC;IAE/E,EAAE,CAA2B,KAAQ,EAAE,QAA+B;QACpE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,EAAqB,CAAC;QACtE,gGAAgG;QAChG,GAAG,CAAC,GAAG,CAAC,QAA6B,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,GAAG,CAA2B,KAAQ,EAAE,QAA+B;QACrE,mGAAmG;QACnG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,QAA6B,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAA2B,KAAQ,EAAE,OAAoB;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,mGAAmG;gBAClG,QAAkC,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/project/config.d.ts

@@ -0,0 +1,10 @@
+export type ProjectConfig = {
+    projectId: string;
+    teamId: string;
+    teamName?: string;
+    projectName: string;
+    environmentId?: string;
+    environmentName?: string;
+};
+export declare function loadProjectConfig(): ProjectConfig | null;
+export declare function saveProjectConfig(projectConfig: ProjectConfig): void;

package/dist/project/config.js

@@ -0,0 +1,31 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+const getProjectJsonPath = () => join(process.cwd(), ".alpic", "project.json");
+export function loadProjectConfig() {
+    const path = getProjectJsonPath();
+    if (!existsSync(path)) {
+        return null;
+    }
+    let raw;
+    try {
+        // biome-ignore lint/plugin/no-type-assertion: The project file is owned by this SDK and validated through required field access below.
+        raw = JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch (error) {
+        // biome-ignore lint/plugin/no-type-assertion: JSON and filesystem failures expose Error messages here.
+        throw new Error(`Failed to load project config: ${error.message}`);
+    }
+    return {
+        projectId: raw.projectId,
+        teamId: raw.teamId,
+        teamName: raw.teamName,
+        projectName: raw.projectName ?? raw.projectId,
+        environmentId: raw.environmentId,
+        environmentName: raw.environmentName,
+    };
+}
+export function saveProjectConfig(projectConfig) {
+    mkdirSync(join(process.cwd(), ".alpic"), { recursive: true });
+    writeFileSync(getProjectJsonPath(), JSON.stringify(projectConfig, null, 2));
+}
+//# sourceMappingURL=config.js.map

package/dist/project/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/project/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAWjC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;AAE/E,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAmE,CAAC;IACxE,IAAI,CAAC;QACH,uIAAuI;QACvI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAG1C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uGAAuG;QACvG,MAAM,IAAI,KAAK,CAAC,kCAAmC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS;QAC7C,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,eAAe,EAAE,GAAG,CAAC,eAAe;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,aAA4B;IAC5D,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,aAAa,CAAC,kBAAkB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC"}

package/dist/project/detect-runtime.d.ts

@@ -0,0 +1,2 @@
+import type { Runtime } from "@alpic-ai/api";
+export declare function detectRuntime(): Runtime | null;

package/dist/project/detect-runtime.js

@@ -0,0 +1,25 @@
+import { existsSync, readFileSync } from "node:fs";
+export function detectRuntime() {
+    const has = (file) => existsSync(file);
+    const read = (file) => {
+        try {
+            return readFileSync(file, "utf8");
+        }
+        catch {
+            return "";
+        }
+    };
+    if (has("pyproject.toml") || has("requirements.txt") || has("setup.py") || has(".python-version")) {
+        return "python3.13";
+    }
+    if (has("package.json")) {
+        const nvmrc = has(".nvmrc") ? (read(".nvmrc").trim().split(/\s/)[0] ?? "") : "";
+        const major = nvmrc.replace(/^v/i, "").match(/^(\d+)/)?.[1];
+        if (major === "22") {
+            return "node22";
+        }
+        return "node24";
+    }
+    return null;
+}
+//# sourceMappingURL=detect-runtime.js.map

package/dist/project/detect-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-runtime.js","sourceRoot":"","sources":["../../src/project/detect-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGnD,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;QACpC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClG,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/project/projects.d.ts

@@ -0,0 +1,21 @@
+import type { RouterInput, Runtime } from "@alpic-ai/api";
+import type { AlpicApi } from "../api/client.js";
+import { type ProjectConfig } from "./config.js";
+export type CreateLinkedProjectOptions = RouterInput["projects"]["create"]["v1"] & {
+    teamName?: string;
+};
+export type LinkedProjectConfig = ProjectConfig & {
+    environmentId: string;
+};
+export type ProjectsDeps = {
+    api: AlpicApi;
+};
+export declare class Projects {
+    private readonly api;
+    constructor(deps: ProjectsDeps);
+    loadConfig(): ProjectConfig | null;
+    saveConfig(projectConfig: ProjectConfig): void;
+    detectRuntime(): Runtime | null;
+    validateLink(projectConfig: ProjectConfig): Promise<ProjectConfig | null>;
+    createLinked({ teamName, ...input }: CreateLinkedProjectOptions): Promise<LinkedProjectConfig>;
+}

package/dist/project/projects.js

@@ -0,0 +1,52 @@
+import { ORPCError } from "@orpc/client";
+import { loadProjectConfig, saveProjectConfig } from "./config.js";
+import { detectRuntime } from "./detect-runtime.js";
+export class Projects {
+    api;
+    constructor(deps) {
+        this.api = deps.api;
+    }
+    loadConfig() {
+        return loadProjectConfig();
+    }
+    saveConfig(projectConfig) {
+        saveProjectConfig(projectConfig);
+    }
+    detectRuntime() {
+        return detectRuntime();
+    }
+    async validateLink(projectConfig) {
+        let project;
+        try {
+            project = await this.api.projects.get.v1({ projectId: projectConfig.projectId });
+        }
+        catch (error) {
+            if (error instanceof ORPCError && error.code === "NOT_FOUND") {
+                return null;
+            }
+            throw error;
+        }
+        if (projectConfig.environmentId && !project.environments?.some((env) => env.id === projectConfig.environmentId)) {
+            return { ...projectConfig, environmentId: undefined, environmentName: undefined };
+        }
+        return projectConfig;
+    }
+    async createLinked({ teamName, ...input }) {
+        const created = await this.api.projects.create.v1(input);
+        const productionEnv = created.productionEnvironment;
+        if (!productionEnv) {
+            throw new Error("Project was created but has no Production environment.");
+        }
+        const projectConfig = {
+            projectId: created.id,
+            teamId: created.teamId,
+            teamName,
+            projectName: created.name,
+            environmentId: productionEnv.id,
+            environmentName: productionEnv.name,
+        };
+        saveProjectConfig(projectConfig);
+        return projectConfig;
+    }
+}
+//# sourceMappingURL=projects.js.map

package/dist/project/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../src/project/projects.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAsB,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAYpD,MAAM,OAAO,QAAQ;IACF,GAAG,CAAW;IAE/B,YAAY,IAAkB;QAC5B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACtB,CAAC;IAED,UAAU;QACR,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC;IAED,UAAU,CAAC,aAA4B;QACrC,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACnC,CAAC;IAED,aAAa;QACX,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,aAA4B;QAC7C,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC7D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,aAAa,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;YAChH,OAAO,EAAE,GAAG,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;QACpF,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,GAAG,KAAK,EAA8B;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,OAAO,CAAC,qBAAqB,CAAC;QACpD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,aAAa,GAAwB;YACzC,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ;YACR,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,aAAa,EAAE,aAAa,CAAC,EAAE;YAC/B,eAAe,EAAE,aAAa,CAAC,IAAI;SACpC,CAAC;QACF,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACjC,OAAO,aAAa,CAAC;IACvB,CAAC;CACF"}

package/dist/tunnel/tunnel.d.ts

@@ -3,20 +3,24 @@ export type TunnelRequest = {
     method: string;
     path: string;
 };
+export type TunnelCloseInfo = {
+    displaced?: boolean;
+};
 export type TunnelHandle = {
     readonly url: string;
     on(event: "request", listener: (req: TunnelRequest) => void): void;
     on(event: "error", listener: (err: Error) => void): void;
-    on(event: "close", listener: () => void): void;
+    on(event: "close", listener: (info?: TunnelCloseInfo) => void): void;
     close(): void;
 };
 export type OpenTunnelOptions = {
     port: number;
-    autoLogin?: boolean;
-    onLoginUrl?: (url: string) => void;
 };
 type PipenetSocket = {
     on(event: string, listener: (...args: unknown[]) => void): void;
+    tunnelCluster?: {
+        on(event: string, listener: (...args: unknown[]) => void): void;
+    };
     close(): void;
 };
 type Pipenet = (opts: {
@@ -27,14 +31,13 @@ type Pipenet = (opts: {
     keepAliveDelayMs: number;
     offlineTimeoutMs: number;
 }) => Promise<PipenetSocket>;
-export declare function createTunnel(deps: {
+export type TunnelDeps = {
     api: AlpicApi;
-    ensureToken: (opts: {
-        autoLogin?: boolean;
-        onLoginUrl?: (url: string) => void;
-    }) => Promise<string>;
     pipenet?: Pipenet;
-}): {
-    open(opts: OpenTunnelOptions): Promise<TunnelHandle>;
 };
+export declare class Tunnel {
+    private readonly deps;
+    constructor(deps: TunnelDeps);
+    open(opts: OpenTunnelOptions): Promise<TunnelHandle>;
+}
 export {};

package/dist/tunnel/tunnel.js

@@ -1,50 +1,117 @@
-import { pipenet as defaultPipenet } from "../vendor/pipenet.js";
 const CONNECT_TIMEOUT_MS = 10_000;
 const KEEPALIVE_DELAY_MS = 30_000;
 const OFFLINE_TIMEOUT_MS = 30_000;
-export function createTunnel(deps) {
-    const pipenet = deps.pipenet ?? defaultPipenet;
-    return {
-        async open(opts) {
-            const accessToken = await deps.ensureToken({
-                autoLogin: opts.autoLogin,
-                onLoginUrl: opts.onLoginUrl,
-            });
-            const ticket = await deps.api.tunnels.getTicket.v1(undefined, {
-                context: {
-                    request: { headers: { Authorization: `Bearer ${accessToken}` } },
-                },
-            });
-            const proto = ticket.tunnelHost.startsWith("localhost") ? "http" : "https";
-            let timeoutId;
-            const socket = await Promise.race([
-                pipenet({
-                    port: opts.port,
-                    host: `${proto}://${ticket.tunnelHost}`,
-                    subdomain: ticket.subdomain,
-                    headers: { Authorization: `Bearer ${ticket.ticket}` },
-                    keepAliveDelayMs: KEEPALIVE_DELAY_MS,
-                    offlineTimeoutMs: OFFLINE_TIMEOUT_MS,
-                }).then((socket) => {
-                    clearTimeout(timeoutId);
-                    return socket;
-                }),
-                new Promise((_, reject) => {
-                    timeoutId = setTimeout(() => reject(new Error("Failed to connect to tunnel server")), CONNECT_TIMEOUT_MS);
-                    timeoutId.unref?.();
-                }),
-            ]);
-            const url = `${proto}://${ticket.subdomain}.${ticket.tunnelHost}`;
-            return {
-                url,
-                on(event, listener) {
-                    socket.on(event, listener);
-                },
-                close() {
-                    socket.close();
-                },
-            };
-        },
-    };
+// Takeover detection thresholds — see the "dead" listener in open().
+const FLAP_WINDOW_MS = 5_000;
+const FLAP_MIN_SPAN_MS = 2_000;
+const FLAP_THRESHOLD = 15;
+export class Tunnel {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async open(opts) {
+        // Loaded lazily so non-tunnel consumers don't pay the patched pipenet bundle's ~500KB load cost at startup.
+        // biome-ignore lint/plugin/no-type-assertion: The vendored module exports pipenet with the patched tunnel interface.
+        const pipenet = this.deps.pipenet ?? (await import("../vendor/pipenet.js")).pipenet;
+        const ticket = await this.deps.api.tunnels.getTicket.v1();
+        // ALPIC_TUNNEL_HOST is a dev override pointing a real ticket at a locally-run (plain-HTTP) tunnel server, so default to http regardless of the host; pass an explicit https:// to force TLS.
+        const hostOverride = process.env.ALPIC_TUNNEL_HOST;
+        let tunnelHost;
+        let proto;
+        if (hostOverride) {
+            proto = hostOverride.startsWith("https://") ? "https" : "http";
+            tunnelHost = hostOverride.replace(/^https?:\/\//, "");
+        }
+        else {
+            tunnelHost = ticket.tunnelHost;
+            proto = tunnelHost.startsWith("localhost") ? "http" : "https";
+        }
+        let timeoutId;
+        const socket = await Promise.race([
+            pipenet({
+                port: opts.port,
+                host: `${proto}://${tunnelHost}`,
+                subdomain: ticket.subdomain,
+                headers: { Authorization: `Bearer ${ticket.ticket}` },
+                keepAliveDelayMs: KEEPALIVE_DELAY_MS,
+                offlineTimeoutMs: OFFLINE_TIMEOUT_MS,
+            }).then((socket) => {
+                clearTimeout(timeoutId);
+                return socket;
+            }),
+            new Promise((_, reject) => {
+                timeoutId = setTimeout(() => reject(new Error("Failed to connect to tunnel server")), CONNECT_TIMEOUT_MS);
+                timeoutId.unref?.();
+            }),
+        ]);
+        const url = `${proto}://${ticket.subdomain}.${tunnelHost}`;
+        const requestListeners = new Set();
+        const errorListeners = new Set();
+        const closeListeners = new Set();
+        let lastRequestAt = 0;
+        let displaced = false;
+        let closed = false;
+        socket.on("request", (req) => {
+            lastRequestAt = Date.now();
+            for (const listener of requestListeners) {
+                // biome-ignore lint/plugin/no-type-assertion: Pipenet request events use the TunnelRequest shape.
+                listener(req);
+            }
+        });
+        socket.on("error", (err) => {
+            for (const listener of errorListeners) {
+                // biome-ignore lint/plugin/no-type-assertion: Pipenet error events provide Error instances.
+                listener(err);
+            }
+        });
+        socket.on("close", () => {
+            closed = true;
+            const info = displaced ? { displaced: true } : undefined;
+            for (const listener of closeListeners) {
+                listener(info);
+            }
+        });
+        // Takeover by a newer tunnel shows up as a sustained storm of "dead" events with zero requests served (rejected reconnections reach the server and are dropped in milliseconds, so pipenet's offlineTimeoutMs never fires); normal serving also churns sockets, but only while requests flow, hence the lastRequestAt discriminator.
+        let drops = [];
+        socket.tunnelCluster?.on("dead", () => {
+            if (displaced || closed) {
+                return;
+            }
+            const now = Date.now();
+            if (now - lastRequestAt < FLAP_WINDOW_MS) {
+                drops = [];
+                return;
+            }
+            drops.push(now);
+            drops = drops.filter((at) => now - at < FLAP_WINDOW_MS);
+            const oldest = drops[0] ?? now;
+            if (drops.length >= FLAP_THRESHOLD && now - oldest >= FLAP_MIN_SPAN_MS) {
+                displaced = true;
+                socket.close();
+            }
+        });
+        return {
+            url,
+            on(event, listener) {
+                if (event === "request") {
+                    // biome-ignore lint/plugin/no-type-assertion: The event discriminant selects the corresponding listener signature.
+                    requestListeners.add(listener);
+                }
+                else if (event === "error") {
+                    // biome-ignore lint/plugin/no-type-assertion: The event discriminant selects the corresponding listener signature.
+                    errorListeners.add(listener);
+                }
+                else {
+                    // biome-ignore lint/plugin/no-type-assertion: The event discriminant selects the corresponding listener signature.
+                    closeListeners.add(listener);
+                }
+            },
+            close() {
+                closed = true;
+                socket.close();
+            },
+        };
+    }
 }
 //# sourceMappingURL=tunnel.js.map

package/dist/tunnel/tunnel.js.map

@@ -1 +1 @@
-{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../../src/tunnel/tunnel.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEjE,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAgClC,MAAM,UAAU,YAAY,CAAC,IAI5B;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAK,cAAqC,CAAC;IAEvE,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,IAAuB;YAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;gBACzC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE;gBAC5D,OAAO,EAAE;oBACP,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,EAAE;iBACjE;aACF,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAE3E,IAAI,SAAoD,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAChC,OAAO,CAAC;oBACN,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,GAAG,KAAK,MAAM,MAAM,CAAC,UAAU,EAAE;oBACvC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,EAAE;oBACrD,gBAAgB,EAAE,kBAAkB;oBACpC,gBAAgB,EAAE,kBAAkB;iBACrC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBACjB,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,OAAO,MAAM,CAAC;gBAChB,CAAC,CAAC;gBACF,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC/B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;oBAC1G,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;gBACtB,CAAC,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,GAAG,KAAK,MAAM,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAElE,OAAO;gBACL,GAAG;gBACH,EAAE,CAAC,KAAK,EAAE,QAAQ;oBAChB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,QAAwC,CAAC,CAAC;gBAC7D,CAAC;gBACD,KAAK;oBACH,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../../src/tunnel/tunnel.ts"],"names":[],"mappings":"AAEA,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,qEAAqE;AACrE,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,cAAc,GAAG,EAAE,CAAC;AAsC1B,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI,CAAC,IAAuB;QAChC,4GAA4G;QAC5G,qHAAqH;QACrH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAK,CAAC,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAA8B,CAAC;QAE5G,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAE1D,6LAA6L;QAC7L,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACnD,IAAI,UAAkB,CAAC;QACvB,IAAI,KAAa,CAAC;QAClB,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAC/D,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC/B,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAChE,CAAC;QAED,IAAI,SAAoD,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAChC,OAAO,CAAC;gBACN,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,GAAG,KAAK,MAAM,UAAU,EAAE;gBAChC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,EAAE;gBACrD,gBAAgB,EAAE,kBAAkB;gBACpC,gBAAgB,EAAE,kBAAkB;aACrC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACjB,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC;YACF,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;gBAC1G,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACtB,CAAC,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,GAAG,KAAK,MAAM,MAAM,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;QAE3D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAgC,CAAC;QACjE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAwB,CAAC;QACvD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoC,CAAC;QAEnE,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;gBACxC,kGAAkG;gBAClG,QAAQ,CAAC,GAAoB,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;gBACtC,4FAA4F;gBAC5F,QAAQ,CAAC,GAAY,CAAC,CAAC;YACzB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACzD,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,qUAAqU;QACrU,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACpC,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,GAAG,GAAG,aAAa,GAAG,cAAc,EAAE,CAAC;gBACzC,KAAK,GAAG,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,IAAI,cAAc,IAAI,GAAG,GAAG,MAAM,IAAI,gBAAgB,EAAE,CAAC;gBACvE,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,GAAG;YACH,EAAE,CAAC,KAAK,EAAE,QAAQ;gBAChB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,mHAAmH;oBACnH,gBAAgB,CAAC,GAAG,CAAC,QAAwC,CAAC,CAAC;gBACjE,CAAC;qBAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;oBAC7B,mHAAmH;oBACnH,cAAc,CAAC,GAAG,CAAC,QAAgC,CAAC,CAAC;gBACvD,CAAC;qBAAM,CAAC;oBACN,mHAAmH;oBACnH,cAAc,CAAC,GAAG,CAAC,QAA4C,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;YACD,KAAK;gBACH,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}