@alpic-ai/sdk 0.0.0-dev.ge2abcc8 → 0.0.0

package/package.json

@@ -1,52 +1,7 @@
 {
   "name": "@alpic-ai/sdk",
-  "version": "0.0.0-dev.ge2abcc8",
-  "description": "Programmatic SDK for Alpic (auth, API, tunnel)",
-  "type": "module",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "default": "./dist/index.js"
-    }
-  },
-  "files": [
-    "dist"
-  ],
-  "engines": {
-    "node": ">= 18.20.8"
-  },
-  "author": "Alpic",
-  "license": "ISC",
-  "dependencies": {
-    "@orpc/client": "^1.14.6",
-    "@orpc/contract": "^1.14.6",
-    "@orpc/openapi-client": "^1.14.6",
-    "@t3-oss/env-core": "^0.13.11",
-    "env-paths": "^4.0.0",
-    "open": "^11.0.0",
-    "openid-client": "^6.8.4",
-    "zod": "^4.4.3",
-    "@alpic-ai/api": "0.0.0-dev.ge2abcc8"
-  },
-  "devDependencies": {
-    "@total-typescript/tsconfig": "^1.0.4",
-    "@types/node": "^25.9.3",
-    "esbuild": "^0.28.1",
-    "pipenet": "1.4.0",
-    "shx": "^0.4.0",
-    "typescript": "^6.0.3",
-    "vitest": "^4.1.8"
-  },
-  "scripts": {
-    "build": "shx rm -rf dist && tsc && pnpm run build:assets && node scripts/bundle-vendor.mjs",
-    "build:assets": "shx cp -r src/auth/server/assets dist/auth/server/",
-    "format": "biome check --write --error-on-warnings .",
-    "test": "pnpm run test:unit && pnpm run test:type && pnpm run test:format",
-    "test:unit": "vitest run",
-    "test:format": "biome check --error-on-warnings .",
-    "test:type": "tsc --noEmit",
-    "publish:npm": "pnpm publish --tag \"${NPM_TAG}\" --access public --no-git-checks"
+  "version": "0.0.0",
+  "publishConfig": {
+    "access": "public"
   }
-}
+}

package/dist/api/client.d.ts

@@ -1,7 +0,0 @@
-import { contract } from "@alpic-ai/api";
-import type { ContractRouterClient } from "@orpc/contract";
-export type AlpicApi = ContractRouterClient<typeof contract>;
-export declare function createApiClient(opts: {
-    apiBaseUrl: string;
-    getToken: () => Promise<string | undefined>;
-}): AlpicApi;

package/dist/api/client.js

@@ -1,22 +0,0 @@
-import { contract } from "@alpic-ai/api";
-import { createORPCClient } from "@orpc/client";
-import { ResponseValidationPlugin } from "@orpc/contract/plugins";
-import { OpenAPILink } from "@orpc/openapi-client/fetch";
-export function createApiClient(opts) {
-    const link = new OpenAPILink(contract, {
-        url: opts.apiBaseUrl,
-        headers: async ({ context }) => {
-            const headers = context.request?.headers || {};
-            if (!headers.Authorization) {
-                const token = await opts.getToken();
-                if (token) {
-                    headers.Authorization = `Bearer ${token}`;
-                }
-            }
-            return headers;
-        },
-        plugins: [new ResponseValidationPlugin(contract)],
-    });
-    return createORPCClient(link);
-}
-//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAIzD,MAAM,UAAU,eAAe,CAAC,IAAyE;IACvG,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,QAAQ,EAAE;QACrC,GAAG,EAAE,IAAI,CAAC,UAAU;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;gBAC5C,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,EAAE,CAAC,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC"}

package/dist/auth/constants.d.ts

@@ -1,2 +0,0 @@
-export declare const LOOPBACK_HOST = "127.0.0.1";
-export declare const LOOPBACK_PORT = 38472;

package/dist/auth/constants.js

@@ -1,3 +0,0 @@
-export const LOOPBACK_HOST = "127.0.0.1";
-export const LOOPBACK_PORT = 38472;
-//# sourceMappingURL=constants.js.map

package/dist/auth/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/auth/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC;AACzC,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC"}

package/dist/auth/index.d.ts

@@ -1,12 +0,0 @@
-import { type LoginOptions } from "./login.js";
-import { type Credentials } from "./store.js";
-export type { Credentials, LoginOptions };
-export declare class AlpicAuth {
-    getValidAccessToken(): Promise<Credentials | null>;
-    isAuthenticated(): Promise<boolean>;
-    getToken(): Promise<string | undefined>;
-    login(opts?: LoginOptions): Promise<{
-        sub: string;
-    }>;
-    logout(): Promise<void>;
-}

package/dist/auth/index.js

@@ -1,21 +0,0 @@
-import { oauthLogin } from "./login.js";
-import { getOAuthClient } from "./oauth-client.js";
-import { globalStore } from "./store.js";
-export class AlpicAuth {
-    async getValidAccessToken() {
-        return getOAuthClient().getValidAccessToken();
-    }
-    async isAuthenticated() {
-        return (await this.getToken()) !== undefined;
-    }
-    async getToken() {
-        return process.env.ALPIC_API_KEY ?? (await getOAuthClient().getValidAccessToken())?.access_token;
-    }
-    async login(opts) {
-        return oauthLogin(opts);
-    }
-    async logout() {
-        globalStore.clearCredentials();
-    }
-}
-//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,UAAU,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAoB,WAAW,EAAE,MAAM,YAAY,CAAC;AAI3D,MAAM,OAAO,SAAS;IACpB,KAAK,CAAC,mBAAmB;QACvB,OAAO,cAAc,EAAE,CAAC,mBAAmB,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,SAAS,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,mBAAmB,EAAE,CAAC,EAAE,YAAY,CAAC;IACnG,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAmB;QAC7B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM;QACV,WAAW,CAAC,gBAAgB,EAAE,CAAC;IACjC,CAAC;CACF"}

package/dist/auth/login.d.ts

@@ -1,7 +0,0 @@
-export type LoginOptions = {
-    onLoginUrl?: (url: string) => void;
-    openBrowser?: boolean;
-};
-export declare function oauthLogin(opts?: LoginOptions): Promise<{
-    sub: string;
-}>;

package/dist/auth/login.js

@@ -1,21 +0,0 @@
-import open from "open";
-import { getOAuthClient } from "./oauth-client.js";
-import { getLoginPageUrl, listenToOAuthCallback } from "./server/index.js";
-import { globalStore } from "./store.js";
-export async function oauthLogin(opts) {
-    const { authorizeUrl, state, nonce, codeVerifier } = await getOAuthClient().prepareOAuthConfig();
-    const loginUrl = getLoginPageUrl();
-    opts?.onLoginUrl?.(loginUrl);
-    if (opts?.openBrowser !== false && !process.env.ALPIC_NO_OPEN) {
-        await open(loginUrl);
-    }
-    const storedToken = await listenToOAuthCallback({
-        state,
-        nonce,
-        codeVerifier,
-        authorizeUrl: authorizeUrl.toString(),
-    });
-    globalStore.saveCredentials(storedToken);
-    return { sub: storedToken.sub };
-}
-//# sourceMappingURL=login.js.map

package/dist/auth/login.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/auth/login.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAOzC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAmB;IAClD,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC,kBAAkB,EAAE,CAAC;IAEjG,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,IAAI,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;IAE7B,IAAI,IAAI,EAAE,WAAW,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9D,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC;QAC9C,KAAK;QACL,KAAK;QACL,YAAY;QACZ,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;KACtC,CAAC,CAAC;IAEH,WAAW,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAEzC,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC;AAClC,CAAC"}

package/dist/auth/oauth-client.d.ts

@@ -1,28 +0,0 @@
-import * as openid from "openid-client";
-import { type Credentials } from "./store.js";
-export declare class OAuthClient {
-    private config;
-    initialize: Promise<void>;
-    constructor();
-    getValidAccessToken(): Promise<Credentials | null>;
-    fetchUserInfo(credentials: Credentials): Promise<openid.UserInfoResponse>;
-    refreshAccessToken(credentials: Credentials): Promise<Credentials>;
-    prepareOAuthConfig(): Promise<{
-        authorizeUrl: URL;
-        state: string;
-        nonce: string;
-        codeVerifier: string;
-    }>;
-    exchangeAuthorizationCode({ url, codeVerifier, state, nonce, }: {
-        url: URL;
-        codeVerifier: string;
-        state: string;
-        nonce: string;
-    }): Promise<openid.TokenEndpointResponse & openid.TokenEndpointResponseHelpers>;
-    getExpiresAt(expires_in: number): number;
-    private loadConfig;
-    private fetchOAuthProtectedResourceConfig;
-    private getConfig;
-    private isAccessTokenExpired;
-}
-export declare function getOAuthClient(): OAuthClient;

package/dist/auth/oauth-client.js

@@ -1,116 +0,0 @@
-import * as openid from "openid-client";
-import { env } from "../env.js";
-import { LOOPBACK_HOST, LOOPBACK_PORT } from "./constants.js";
-import { globalStore } from "./store.js";
-const SCOPES = ["openid", "email", "profile"];
-export class OAuthClient {
-    config = null;
-    initialize;
-    constructor() {
-        this.initialize = this.loadConfig();
-    }
-    async getValidAccessToken() {
-        await this.initialize;
-        const stored = globalStore.getCredentials();
-        if (!stored) {
-            return null;
-        }
-        if (this.isAccessTokenExpired(stored)) {
-            try {
-                return await this.refreshAccessToken(stored);
-            }
-            catch {
-                return null;
-            }
-        }
-        return stored;
-    }
-    async fetchUserInfo(credentials) {
-        return openid.fetchUserInfo(await this.getConfig(), credentials.access_token, credentials.sub);
-    }
-    async refreshAccessToken(credentials) {
-        if (!credentials.refresh_token) {
-            throw new Error("No refresh token available");
-        }
-        const response = await openid.refreshTokenGrant(await this.getConfig(), credentials.refresh_token);
-        const refreshed = {
-            access_token: response.access_token,
-            refresh_token: response.refresh_token ?? credentials.refresh_token,
-            expires_at: this.getExpiresAt(response.expires_in ?? 0),
-            sub: credentials.sub,
-        };
-        globalStore.saveCredentials(refreshed);
-        return refreshed;
-    }
-    async prepareOAuthConfig() {
-        await this.initialize;
-        if (!this.config) {
-            throw new Error("Config not loaded");
-        }
-        const codeVerifier = openid.randomPKCECodeVerifier();
-        const codeChallenge = await openid.calculatePKCECodeChallenge(codeVerifier);
-        const state = openid.randomState();
-        const nonce = openid.randomNonce();
-        const callbackUrl = new URL(`http://${LOOPBACK_HOST}:${LOOPBACK_PORT}/callback`);
-        const authorizeUrl = openid.buildAuthorizationUrl(this.config, {
-            redirect_uri: callbackUrl.toString(),
-            scope: SCOPES.join(" "),
-            code_challenge: codeChallenge,
-            code_challenge_method: "S256",
-            state,
-            nonce,
-        });
-        return { authorizeUrl, state, nonce, codeVerifier };
-    }
-    async exchangeAuthorizationCode({ url, codeVerifier, state, nonce, }) {
-        return await openid.authorizationCodeGrant(await this.getConfig(), url, {
-            pkceCodeVerifier: codeVerifier,
-            expectedState: state,
-            expectedNonce: nonce,
-        });
-    }
-    getExpiresAt(expires_in) {
-        return expires_in !== undefined ? Math.floor(Date.now() / 1000) + expires_in : Date.now() / 1000 + 3600;
-    }
-    async loadConfig() {
-        const protectedResourceConfig = await this.fetchOAuthProtectedResourceConfig();
-        const issuer = protectedResourceConfig.authorization_servers[0];
-        if (!issuer) {
-            throw new Error("No authorization server in OAuth protected resource config");
-        }
-        const issuerUrl = new URL(issuer);
-        try {
-            this.config = await openid.discovery(issuerUrl, env.ALPIC_COGNITO_CLIENT_ID);
-        }
-        catch {
-            throw new Error("Failed to discover OAuth config");
-        }
-    }
-    async fetchOAuthProtectedResourceConfig() {
-        const baseUrl = env.ALPIC_API_BASE_URL;
-        const response = await fetch(`${baseUrl}/.well-known/oauth-protected-resource`);
-        if (!response.ok) {
-            throw new Error(`Failed to load service config from ${baseUrl} (${response.status} ${response.statusText})`);
-        }
-        return (await response.json());
-    }
-    async getConfig() {
-        await this.initialize;
-        if (!this.config) {
-            throw new Error("Config not loaded");
-        }
-        return this.config;
-    }
-    isAccessTokenExpired(credentials) {
-        const EXPIRATION_WINDOW_IN_SECONDS = 300;
-        return Date.now() / 1000 + EXPIRATION_WINDOW_IN_SECONDS >= credentials.expires_at;
-    }
-}
-let _oAuthClient = null;
-export function getOAuthClient() {
-    if (!_oAuthClient) {
-        _oAuthClient = new OAuthClient();
-    }
-    return _oAuthClient;
-}
-//# sourceMappingURL=oauth-client.js.map

package/dist/auth/oauth-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-client.js","sourceRoot":"","sources":["../../src/auth/oauth-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAoB,WAAW,EAAE,MAAM,YAAY,CAAC;AAE3D,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAU9C,MAAM,OAAO,WAAW;IACd,MAAM,GAAgC,IAAI,CAAC;IACnD,UAAU,CAAgB;IAE1B;QACE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,MAAM,IAAI,CAAC,UAAU,CAAC;QACtB,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAAwB;QAC1C,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,WAAwB;QAC/C,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;QAEnG,MAAM,SAAS,GAAgB;YAC7B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,WAAW,CAAC,aAAa;YAClE,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACvD,GAAG,EAAE,WAAW,CAAC,GAAG;SACrB,CAAC;QAEF,WAAW,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,IAAI,CAAC,UAAU,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACrD,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,YAAY,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,UAAU,aAAa,IAAI,aAAa,WAAW,CAAC,CAAC;QAEjF,MAAM,YAAY,GAAG,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE;YAC7D,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE;YACpC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,MAAM;YAC7B,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QAEH,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,EAC9B,GAAG,EACH,YAAY,EACZ,KAAK,EACL,KAAK,GAMN;QACC,OAAO,MAAM,MAAM,CAAC,sBAAsB,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE;YACtE,gBAAgB,EAAE,YAAY;YAC9B,aAAa,EAAE,KAAK;YACpB,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,UAAkB;QAC7B,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAC1G,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,iCAAiC,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAG,uBAAuB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iCAAiC;QAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,uCAAuC,CAAC,CAAC;QAChF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,IAAI,CAAC,UAAU,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,oBAAoB,CAAC,WAAwB;QACnD,MAAM,4BAA4B,GAAG,GAAG,CAAC;QACzC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,4BAA4B,IAAI,WAAW,CAAC,UAAU,CAAC;IACpF,CAAC;CACF;AAED,IAAI,YAAY,GAAuB,IAAI,CAAC;AAE5C,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/auth/server/assets/authorize.html

@@ -1,234 +0,0 @@
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>Sign in to Alpic</title>
-    <link
-      href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600&family=Mozilla+Text:wght@200..700&display=swap"
-      rel="stylesheet"
-    />
-    <style>
-      *,
-      *::before,
-      *::after {
-        margin: 0;
-        padding: 0;
-        box-sizing: border-box;
-      }
-
-      :root {
-        --midnight: #051413;
-      }
-
-      body {
-        font-family: "Inter", system-ui, sans-serif;
-        background-color: var(--midnight);
-        min-height: 100vh;
-        display: flex;
-        background-image: url("/assets/alpic-mountain.png");
-        background-repeat: no-repeat;
-        background-position: right bottom;
-        background-size: auto;
-        padding: 64px;
-      }
-
-      .card {
-        background: #fff;
-        border-radius: 2px;
-        padding: 48px;
-        width: 50%;
-        min-height: calc(100vh - 128px);
-        display: flex;
-        flex-direction: column;
-        align-items: center;
-        justify-content: center;
-      }
-
-      h1 {
-        font-family: "Mozilla Text", system-ui, sans-serif;
-        font-weight: 400;
-        font-size: 48px;
-        color: var(--midnight);
-        margin-bottom: 8px;
-      }
-
-      .subtitle {
-        font-size: 20px;
-        color: var(--midnight);
-        margin-bottom: 32px;
-      }
-
-      .buttons {
-        display: flex;
-        flex-direction: column;
-        gap: 12px;
-      }
-
-      .btn {
-        display: flex;
-        align-items: center;
-        justify-content: center;
-        gap: 8px;
-        height: 48px;
-        width: 256px;
-        padding: 0 16px;
-        border-radius: 2px;
-        border: 1px solid var(--midnight);
-        font-family: "Inter", system-ui, sans-serif;
-        font-size: 16px;
-        font-weight: 500;
-        cursor: pointer;
-        transition: background 0.15s;
-      }
-
-      .btn:focus-visible {
-        outline: none;
-        box-shadow: 0 0 0 2px var(--midnight);
-      }
-
-      .btn svg {
-        width: 20px;
-        height: 20px;
-        flex-shrink: 0;
-      }
-
-      .btn-github {
-        background: var(--midnight);
-        color: #fff;
-      }
-      .btn-github svg {
-        fill: #fff;
-      }
-      .btn-github:hover {
-        background: rgba(5, 20, 19, 0.9);
-      }
-
-      .btn-google {
-        background: #fff;
-        color: var(--midnight);
-      }
-      .btn-google svg {
-        fill: var(--midnight);
-      }
-      .btn-google:hover {
-        background: rgba(5, 20, 19, 0.1);
-      }
-
-      .btn-sso {
-        background: none;
-        border: none;
-        color: rgba(5, 20, 19, 0.6);
-        font-size: 14px;
-        font-weight: 500;
-        height: 32px;
-        width: auto;
-        padding: 0 8px;
-        gap: 4px;
-        border-radius: 6px;
-      }
-      .btn-sso svg {
-        width: 16px;
-        height: 16px;
-        stroke: rgba(5, 20, 19, 0.6);
-        fill: none;
-      }
-      .btn-sso:hover {
-        background: rgba(5, 20, 19, 0.06);
-        color: var(--midnight);
-      }
-      .btn-sso:hover svg {
-        stroke: var(--midnight);
-      }
-
-      .btn-loading {
-        opacity: 0.7;
-        pointer-events: none;
-        cursor: default;
-        transition: opacity 0.2s;
-      }
-      .spinner {
-        width: 20px;
-        height: 20px;
-        animation: spin 0.8s linear infinite;
-      }
-      @keyframes spin {
-        to {
-          transform: rotate(360deg);
-        }
-      }
-
-      @media (max-width: 768px) {
-        body {
-          padding: 16px;
-        }
-        .card {
-          width: 100%;
-          height: auto;
-          padding: 24px;
-        }
-        h1 {
-          font-size: 36px;
-        }
-        .subtitle {
-          font-size: 18px;
-        }
-      }
-    </style>
-  </head>
-  <body>
-    <div class="card">
-      <h1>Welcome to Alpic</h1>
-      <p class="subtitle">Sign in to use Alpic CLI</p>
-      <div class="buttons">
-        <button class="btn btn-github" onclick="login('Github', this)" type="button">
-          <svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
-            <title>GitHub</title>
-            <path
-              d="M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12"
-            />
-          </svg>
-          Sign in with GitHub
-        </button>
-        <button class="btn btn-google" onclick="login('google', this)" type="button">
-          <svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
-            <title>Google</title>
-            <path
-              d="M12.48 10.92v3.28h7.84c-.24 1.84-.853 3.187-1.8 4.133-1.147 1.147-2.933 2.4-6.04 2.4-4.827 0-8.6-3.893-8.6-8.72s3.773-8.72 8.6-8.72c2.6 0 4.507 1.027 5.907 2.347l2.307-2.307C18.747 1.44 16.133 0 12.48 0 5.867 0 .307 5.387.307 12s5.56 12 12.173 12c3.573 0 6.267-1.173 8.373-3.36 2.16-2.16 2.84-5.213 2.84-7.667 0-.76-.053-1.467-.173-2.053H12.48z"
-            />
-          </svg>
-          Sign in with Google
-        </button>
-        <button class="btn btn-sso" onclick="login('WorkOS', this)" type="button">
-          <svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
-            <title>SSO</title>
-            <path d="M6 22V4a2 2 0 0 1 2-2h8a2 2 0 0 1 2 2v18Z" />
-            <path d="M6 12H4a2 2 0 0 0-2 2v6a2 2 0 0 0 2 2h2" />
-            <path d="M18 9h2a2 2 0 0 1 2 2v9a2 2 0 0 1-2 2h-2" />
-            <path d="M10 6h4" />
-            <path d="M10 10h4" />
-            <path d="M10 14h4" />
-            <path d="M10 18h4" />
-          </svg>
-          Sign in with SSO
-        </button>
-      </div>
-    </div>
-    <script>
-      var loaderSvg =
-        '<svg class="spinner" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 2v4"/><path d="m16.2 7.8 2.9-2.9"/><path d="M18 12h4"/><path d="m16.2 16.2 2.9 2.9"/><path d="M12 18v4"/><path d="m4.9 19.1 2.9-2.9"/><path d="M2 12h4"/><path d="m4.9 4.9 2.9 2.9"/></svg>';
-      // biome-ignore lint/correctness/noUnusedVariables: The function is used within the buttons onclick handlers
-      function login(provider, btn) {
-        const icon = btn.querySelector("svg");
-        const wrap = document.createElement("div");
-        wrap.innerHTML = loaderSvg;
-        icon.replaceWith(wrap.firstChild);
-        btn.classList.add("btn-loading");
-        btn.disabled = true;
-        const url = new URL("%AUTH_BASE_URL%");
-        url.searchParams.set("identity_provider", provider);
-        window.location.href = url.toString();
-      }
-    </script>
-  </body>
-</html>

package/dist/auth/server/assets/callback.html

@@ -1,88 +0,0 @@
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>Sign in to Alpic</title>
-    <link
-      href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600&family=Mozilla+Text:wght@200..700&display=swap"
-      rel="stylesheet"
-    />
-    <style>
-      *,
-      *::before,
-      *::after {
-        margin: 0;
-        padding: 0;
-        box-sizing: border-box;
-      }
-
-      :root {
-        --midnight: #051413;
-      }
-
-      body {
-        font-family: "Inter", system-ui, sans-serif;
-        background-color: var(--midnight);
-        min-height: 100vh;
-        display: flex;
-        align-items: center;
-        justify-content: center;
-        padding: 64px;
-      }
-
-      .card {
-        background: #fff;
-        border-radius: 2px;
-        padding: 48px;
-        display: flex;
-        flex-direction: column;
-        align-items: center;
-        justify-content: center;
-      }
-
-      .message {
-        text-align: center;
-      }
-
-      .message-title {
-        font-size: 28px;
-        color: var(--midnight);
-        display: block;
-      }
-
-      .message-sub {
-        display: block;
-        margin-top: 0.5em;
-        color: #6b7280;
-      }
-
-      .message.error .message-title {
-        color: #b91c1c;
-      }
-
-      .message.error .message-sub {
-        display: none;
-      }
-
-      @media (max-width: 768px) {
-        body {
-          padding: 16px;
-        }
-        .card {
-          width: 100%;
-          height: auto;
-          padding: 24px;
-        }
-      }
-    </style>
-  </head>
-  <body>
-    <div class="card">
-      <p class="message __CALLBACK_STATUS__">
-        <span class="message-title">__CALLBACK_TITLE__</span>
-        <span class="message-sub">__CALLBACK_SUB__</span>
-      </p>
-    </div>
-  </body>
-</html>

package/dist/auth/server/index.d.ts

@@ -1,14 +0,0 @@
-import type { Credentials } from "../store.js";
-type Logger = {
-    log: (msg: string) => void;
-    error: (msg: string) => void;
-};
-export declare const getLoginPageUrl: () => string;
-export declare const listenToOAuthCallback: ({ state, nonce, codeVerifier, authorizeUrl, logger, }: {
-    state: string;
-    nonce: string;
-    codeVerifier: string;
-    authorizeUrl?: string;
-    logger?: Logger;
-}) => Promise<Credentials>;
-export {};