@rstreamlabs/tunnels 3.6.2 → 3.8.0

package/README.md

@@ -319,11 +319,13 @@ console.log(engineOpenApiDocument.info.title);
 
 ## Environment Variables
 
-| Variable                       | Purpose                                                         |
-| ------------------------------ | --------------------------------------------------------------- |
-| `RSTREAM_API_URL`              | Control plane API URL used for managed project resolution.      |
-| `RSTREAM_ENGINE`               | Engine endpoint used when no engine is provided explicitly.     |
-| `RSTREAM_AUTHENTICATION_TOKEN` | Bearer token used when credentials are not provided explicitly. |
+| Variable                        | Purpose                                                         |
+| ------------------------------- | --------------------------------------------------------------- |
+| `RSTREAM_API_URL`               | Control plane API URL used for managed project resolution.      |
+| `RSTREAM_ENGINE`                | Engine endpoint used when no engine is provided explicitly.     |
+| `RSTREAM_AUTHENTICATION_TOKEN`  | Bearer token used when credentials are not provided explicitly. |
+| `RSTREAM_REGION`                | Authorized region to select for a managed project.              |
+| `RSTREAM_CONTROL_PLANE_HEADERS` | Additional Control plane request headers as a JSON object.      |
 
 ## Development
 

package/dist/{chunk-6OUCIT5G.mjs → chunk-3VBF43NB.mjs}

@@ -233,8 +233,24 @@ var routedTunnelSchema = z3.object({
   tokenAuth: z3.boolean().optional(),
   mtls_auth: z3.boolean().optional()
 });
+var routingNodeSchema = z3.object({
+  engineId: nonEmptyStringSchema,
+  region: nonEmptyStringSchema,
+  generation: nonEmptyStringSchema.optional()
+});
+var routingPathSchema = z3.object({
+  mode: z3.enum(["direct", "cross_region"]),
+  crossRegionRoutingAllowed: z3.boolean(),
+  ingress: routingNodeSchema,
+  owner: routingNodeSchema,
+  anchor: routingNodeSchema
+});
 var routingSchema = z3.discriminatedUnion("decision", [
-  z3.object({ decision: z3.literal("routed"), tunnel: routedTunnelSchema }),
+  z3.object({
+    decision: z3.literal("routed"),
+    tunnel: routedTunnelSchema,
+    path: routingPathSchema.optional()
+  }),
   z3.object({ decision: z3.literal("not_routed"), failure: failureSchema })
 ]);
 var streamConnectedMetricsSchema = z3.object({

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { RstreamCredentials, TURNCredentials as TURNCredentials$1, ClientCredentials, TunnelsProject } from '@rstreamlabs/rstream';
+import { RstreamCredentials, TURNCredentials as TURNCredentials$1, ControlPlaneHeaders, ClientCredentials, TunnelsProject } from '@rstreamlabs/rstream';
 import { CreateAuthTokenParams, CreateAuthTokenResponse } from '@rstreamlabs/rstream/auth-token';
 import * as z from 'zod';
 import { Tunnel } from '@rstreamlabs/rstream/tunnel';
@@ -598,6 +598,28 @@ declare const streamSummaryEventSchema: z.ZodObject<{
                 tokenAuth: z.ZodOptional<z.ZodBoolean>;
                 mtls_auth: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
+            path: z.ZodOptional<z.ZodObject<{
+                mode: z.ZodEnum<{
+                    direct: "direct";
+                    cross_region: "cross_region";
+                }>;
+                crossRegionRoutingAllowed: z.ZodBoolean;
+                ingress: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                owner: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                anchor: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>>;
         }, z.core.$strip>, z.ZodObject<{
             decision: z.ZodLiteral<"not_routed">;
             failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -2709,6 +2731,28 @@ declare const projectLogEventsSchema: z.ZodObject<{
                 tokenAuth: z.ZodOptional<z.ZodBoolean>;
                 mtls_auth: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
+            path: z.ZodOptional<z.ZodObject<{
+                mode: z.ZodEnum<{
+                    direct: "direct";
+                    cross_region: "cross_region";
+                }>;
+                crossRegionRoutingAllowed: z.ZodBoolean;
+                ingress: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                owner: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                anchor: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>>;
         }, z.core.$strip>, z.ZodObject<{
             decision: z.ZodLiteral<"not_routed">;
             failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -4818,6 +4862,28 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
                 tokenAuth: z.ZodOptional<z.ZodBoolean>;
                 mtls_auth: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
+            path: z.ZodOptional<z.ZodObject<{
+                mode: z.ZodEnum<{
+                    direct: "direct";
+                    cross_region: "cross_region";
+                }>;
+                crossRegionRoutingAllowed: z.ZodBoolean;
+                ingress: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                owner: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                anchor: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>>;
         }, z.core.$strip>, z.ZodObject<{
             decision: z.ZodLiteral<"not_routed">;
             failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -5684,6 +5750,11 @@ interface RstreamTunnelsConfig {
      * Used when the engine is not set explicitly.
      */
     projectEndpoint?: string;
+    /**
+     * Region selected from the endpoints authorized for the managed project.
+     * Defaults to automatic project routing.
+     */
+    region?: string;
     /**
      * Project ID used to scope locally signed engine auth tokens.
      */
@@ -5697,6 +5768,10 @@ interface RstreamTunnelsConfig {
      * Defaults to the same credentials used against the engine when available.
      */
     controlPlaneCredentials?: RstreamCredentials;
+    /**
+     * Additional headers sent only to the configured Control plane API.
+     */
+    controlPlaneHeaders?: ControlPlaneHeaders;
 }
 declare class RstreamTunnelsClient {
     private readonly config?;
@@ -5744,13 +5819,16 @@ type RstreamAuth = (() => Promise<string>) | string;
 interface TunnelsResolutionConfig {
     apiUrl?: string;
     controlPlaneCredentials?: RstreamCredentials;
+    controlPlaneHeaders?: ControlPlaneHeaders;
     credentials?: RstreamCredentials;
     engine?: string;
     projectEndpoint?: string;
+    region?: string;
     token?: string;
 }
 declare function normalizeEngineAddress(engine: string): string;
 declare function resolveTunnelsAPIURL(apiUrl?: string): string;
+declare function resolveTunnelsRegion(region?: string): string | undefined;
 declare function resolveTunnelsCredentials(credentials?: RstreamCredentials): RstreamCredentials | undefined;
 declare function resolveControlPlaneCredentials(controlPlaneCredentials?: RstreamCredentials, credentials?: RstreamCredentials, authToken?: string): RstreamCredentials | undefined;
 declare function resolveTunnelsEngine(config: TunnelsResolutionConfig): Promise<string>;
@@ -6080,6 +6158,28 @@ declare const streamSummarySchema: z.ZodObject<{
             tokenAuth: z.ZodOptional<z.ZodBoolean>;
             mtls_auth: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>;
+        path: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodEnum<{
+                direct: "direct";
+                cross_region: "cross_region";
+            }>;
+            crossRegionRoutingAllowed: z.ZodBoolean;
+            ingress: z.ZodObject<{
+                engineId: z.ZodString;
+                region: z.ZodString;
+                generation: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            owner: z.ZodObject<{
+                engineId: z.ZodString;
+                region: z.ZodString;
+                generation: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            anchor: z.ZodObject<{
+                engineId: z.ZodString;
+                region: z.ZodString;
+                generation: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         decision: z.ZodLiteral<"not_routed">;
         failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -6565,4 +6665,4 @@ declare const webttyServerSchema: z.ZodObject<{
 type WebTTYServer = z.infer<typeof webttyServerSchema>;
 declare function parseWebTTYServers(tunnels: Tunnel[]): WebTTYServer[];
 
-export { type AttachWebTTYParticipantParams, type BuildWebhookHeadersOptions, type Client, type ClientFilter, type CreateAPITURNCredentialsOptions, type CreateAPPTURNCredentialsOptions, type CreateAuthTokenFromClientCredentialsOptions, type CreatePATTURNCredentialsOptions, type CreateTURNCredentialsOptions, type CreateWebTTYControlRequestParams, type DetachWebTTYParticipantParams, type Event, type InitialState, type ListClientsParams, type ListClientsResponse, type ListTunnelsParams, type ListTunnelsResponse, type ListWebTTYControlRequestsParams, type ListWebTTYKeyGrantDecryptMaterialParams, type ListWebTTYSessionGroupsParams, type ListWebTTYSessionsParams, type ProjectLogEvent, type ReadWebTTYSessionEventsParams, type ResolveWebTTYControlRequestParams, type RstreamAuth, RstreamAuthResource, RstreamAuthResource as RstreamAuthRessource, RstreamTunnelsClient as RstreamClient, RstreamClientsResource, RstreamClientsResource as RstreamClientsRessource, RstreamTURNResource, RstreamTunnelsClient, type RstreamTunnelsConfig, RstreamTunnelsResource, RstreamTunnelsResource as RstreamTunnelsRessource, RstreamWebTTYResource, RstreamWebhookResource, RstreamWebhookResource as RstreamWebhookRessource, type StreamEndpoint, type StreamEntry, type StreamSummary, type StreamTLSInfo, type TURNCredentialMode, type TunnelFilter, RstreamTunnelsClient as Tunnels, type TunnelsResolutionConfig, WEBHOOK_DELIVERY_ID_HEADER, WEBHOOK_EVENT_ID_HEADER, WEBHOOK_EVENT_TYPE_HEADER, WEBHOOK_ID_HEADER, WEBHOOK_SIGNATURE_HEADER, Watch, type WatchConfig, type WatchWsEvents, type WebTTYCapabilities, type WebTTYControlRequest, type WebTTYKeyGrant, type WebTTYKeyGrantDecryptMaterial, type WebTTYParticipant, type WebTTYParticipantLive, type WebTTYServer, type WebTTYSession, type WebTTYSessionEvent, type WebTTYSessionGroup, type WebTTYSessionLive, type WebhookEvent, type WebhookHeaders, type WebhookPayload, type WsEvent, attachWebTTYParticipantParamsSchema, buildWebhookHeaders, clientFilterSchema, clientSchema, createAPITURNCredentials, createAPPTURNCredentials, createAuthTokenFromClientCredentials, createPATTURNCredentials, createTURNCredentials, createWebTTYControlRequestParamsSchema, detachWebTTYParticipantParamsSchema, eventSchema, formatStreamAccessPath, formatTunnelHost, generateWebhookSigningSecret, listClientsParamsSchema, listClientsResponseSchema, listTunnelsParamsSchema, listTunnelsResponseSchema, listWebTTYControlRequestsParamsSchema, listWebTTYKeyGrantDecryptMaterialParamsSchema, listWebTTYSessionGroupsParamsSchema, listWebTTYSessionsParamsSchema, normalizeEngineAddress, parseWebTTYServers, projectLogEventsSchema, readWebTTYSessionEventsParamsSchema, resolveControlPlaneCredentials, resolveManagedTunnelsProject, resolveTunnelsAPIURL, resolveTunnelsCredentials, resolveTunnelsEngine, resolveWebTTYControlRequestParamsSchema, signWebhookPayload, streamEndpointSchema, streamEntrySchema, streamSummaryEventSchema, streamSummarySchema, streamTLSInfoSchema, streamWebTTYMetadataSchema, tunnelFilterSchema, turnCredentialModeSchema, webTTYCapabilitiesSchema, webTTYContextMetadataSchema, webTTYControlRequestSchema, webTTYCryptoMetadataSchema, webTTYEncryptionModeSchema, webTTYKeyGrantDecryptMaterialSchema, webTTYKeyGrantSchema, webTTYOriginSchema, webTTYParticipantLiveSchema, webTTYParticipantRoleSchema, webTTYParticipantSchema, webTTYRecordingModeSchema, webTTYSessionEventSchema, webTTYSessionGroupSchema, webTTYSessionLiveSchema, webTTYSessionModeSchema, webTTYSessionSchema, webTTYTransportSchema, webhookEventsSchema, webttyServerSchema, wsEventsSchema };
+export { type AttachWebTTYParticipantParams, type BuildWebhookHeadersOptions, type Client, type ClientFilter, type CreateAPITURNCredentialsOptions, type CreateAPPTURNCredentialsOptions, type CreateAuthTokenFromClientCredentialsOptions, type CreatePATTURNCredentialsOptions, type CreateTURNCredentialsOptions, type CreateWebTTYControlRequestParams, type DetachWebTTYParticipantParams, type Event, type InitialState, type ListClientsParams, type ListClientsResponse, type ListTunnelsParams, type ListTunnelsResponse, type ListWebTTYControlRequestsParams, type ListWebTTYKeyGrantDecryptMaterialParams, type ListWebTTYSessionGroupsParams, type ListWebTTYSessionsParams, type ProjectLogEvent, type ReadWebTTYSessionEventsParams, type ResolveWebTTYControlRequestParams, type RstreamAuth, RstreamAuthResource, RstreamAuthResource as RstreamAuthRessource, RstreamTunnelsClient as RstreamClient, RstreamClientsResource, RstreamClientsResource as RstreamClientsRessource, RstreamTURNResource, RstreamTunnelsClient, type RstreamTunnelsConfig, RstreamTunnelsResource, RstreamTunnelsResource as RstreamTunnelsRessource, RstreamWebTTYResource, RstreamWebhookResource, RstreamWebhookResource as RstreamWebhookRessource, type StreamEndpoint, type StreamEntry, type StreamSummary, type StreamTLSInfo, type TURNCredentialMode, type TunnelFilter, RstreamTunnelsClient as Tunnels, type TunnelsResolutionConfig, WEBHOOK_DELIVERY_ID_HEADER, WEBHOOK_EVENT_ID_HEADER, WEBHOOK_EVENT_TYPE_HEADER, WEBHOOK_ID_HEADER, WEBHOOK_SIGNATURE_HEADER, Watch, type WatchConfig, type WatchWsEvents, type WebTTYCapabilities, type WebTTYControlRequest, type WebTTYKeyGrant, type WebTTYKeyGrantDecryptMaterial, type WebTTYParticipant, type WebTTYParticipantLive, type WebTTYServer, type WebTTYSession, type WebTTYSessionEvent, type WebTTYSessionGroup, type WebTTYSessionLive, type WebhookEvent, type WebhookHeaders, type WebhookPayload, type WsEvent, attachWebTTYParticipantParamsSchema, buildWebhookHeaders, clientFilterSchema, clientSchema, createAPITURNCredentials, createAPPTURNCredentials, createAuthTokenFromClientCredentials, createPATTURNCredentials, createTURNCredentials, createWebTTYControlRequestParamsSchema, detachWebTTYParticipantParamsSchema, eventSchema, formatStreamAccessPath, formatTunnelHost, generateWebhookSigningSecret, listClientsParamsSchema, listClientsResponseSchema, listTunnelsParamsSchema, listTunnelsResponseSchema, listWebTTYControlRequestsParamsSchema, listWebTTYKeyGrantDecryptMaterialParamsSchema, listWebTTYSessionGroupsParamsSchema, listWebTTYSessionsParamsSchema, normalizeEngineAddress, parseWebTTYServers, projectLogEventsSchema, readWebTTYSessionEventsParamsSchema, resolveControlPlaneCredentials, resolveManagedTunnelsProject, resolveTunnelsAPIURL, resolveTunnelsCredentials, resolveTunnelsEngine, resolveTunnelsRegion, resolveWebTTYControlRequestParamsSchema, signWebhookPayload, streamEndpointSchema, streamEntrySchema, streamSummaryEventSchema, streamSummarySchema, streamTLSInfoSchema, streamWebTTYMetadataSchema, tunnelFilterSchema, turnCredentialModeSchema, webTTYCapabilitiesSchema, webTTYContextMetadataSchema, webTTYControlRequestSchema, webTTYCryptoMetadataSchema, webTTYEncryptionModeSchema, webTTYKeyGrantDecryptMaterialSchema, webTTYKeyGrantSchema, webTTYOriginSchema, webTTYParticipantLiveSchema, webTTYParticipantRoleSchema, webTTYParticipantSchema, webTTYRecordingModeSchema, webTTYSessionEventSchema, webTTYSessionGroupSchema, webTTYSessionLiveSchema, webTTYSessionModeSchema, webTTYSessionSchema, webTTYTransportSchema, webhookEventsSchema, webttyServerSchema, wsEventsSchema };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { RstreamCredentials, TURNCredentials as TURNCredentials$1, ClientCredentials, TunnelsProject } from '@rstreamlabs/rstream';
+import { RstreamCredentials, TURNCredentials as TURNCredentials$1, ControlPlaneHeaders, ClientCredentials, TunnelsProject } from '@rstreamlabs/rstream';
 import { CreateAuthTokenParams, CreateAuthTokenResponse } from '@rstreamlabs/rstream/auth-token';
 import * as z from 'zod';
 import { Tunnel } from '@rstreamlabs/rstream/tunnel';
@@ -598,6 +598,28 @@ declare const streamSummaryEventSchema: z.ZodObject<{
                 tokenAuth: z.ZodOptional<z.ZodBoolean>;
                 mtls_auth: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
+            path: z.ZodOptional<z.ZodObject<{
+                mode: z.ZodEnum<{
+                    direct: "direct";
+                    cross_region: "cross_region";
+                }>;
+                crossRegionRoutingAllowed: z.ZodBoolean;
+                ingress: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                owner: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                anchor: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>>;
         }, z.core.$strip>, z.ZodObject<{
             decision: z.ZodLiteral<"not_routed">;
             failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -2709,6 +2731,28 @@ declare const projectLogEventsSchema: z.ZodObject<{
                 tokenAuth: z.ZodOptional<z.ZodBoolean>;
                 mtls_auth: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
+            path: z.ZodOptional<z.ZodObject<{
+                mode: z.ZodEnum<{
+                    direct: "direct";
+                    cross_region: "cross_region";
+                }>;
+                crossRegionRoutingAllowed: z.ZodBoolean;
+                ingress: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                owner: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                anchor: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>>;
         }, z.core.$strip>, z.ZodObject<{
             decision: z.ZodLiteral<"not_routed">;
             failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -4818,6 +4862,28 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
                 tokenAuth: z.ZodOptional<z.ZodBoolean>;
                 mtls_auth: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
+            path: z.ZodOptional<z.ZodObject<{
+                mode: z.ZodEnum<{
+                    direct: "direct";
+                    cross_region: "cross_region";
+                }>;
+                crossRegionRoutingAllowed: z.ZodBoolean;
+                ingress: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                owner: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                anchor: z.ZodObject<{
+                    engineId: z.ZodString;
+                    region: z.ZodString;
+                    generation: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>>;
         }, z.core.$strip>, z.ZodObject<{
             decision: z.ZodLiteral<"not_routed">;
             failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -5684,6 +5750,11 @@ interface RstreamTunnelsConfig {
      * Used when the engine is not set explicitly.
      */
     projectEndpoint?: string;
+    /**
+     * Region selected from the endpoints authorized for the managed project.
+     * Defaults to automatic project routing.
+     */
+    region?: string;
     /**
      * Project ID used to scope locally signed engine auth tokens.
      */
@@ -5697,6 +5768,10 @@ interface RstreamTunnelsConfig {
      * Defaults to the same credentials used against the engine when available.
      */
     controlPlaneCredentials?: RstreamCredentials;
+    /**
+     * Additional headers sent only to the configured Control plane API.
+     */
+    controlPlaneHeaders?: ControlPlaneHeaders;
 }
 declare class RstreamTunnelsClient {
     private readonly config?;
@@ -5744,13 +5819,16 @@ type RstreamAuth = (() => Promise<string>) | string;
 interface TunnelsResolutionConfig {
     apiUrl?: string;
     controlPlaneCredentials?: RstreamCredentials;
+    controlPlaneHeaders?: ControlPlaneHeaders;
     credentials?: RstreamCredentials;
     engine?: string;
     projectEndpoint?: string;
+    region?: string;
     token?: string;
 }
 declare function normalizeEngineAddress(engine: string): string;
 declare function resolveTunnelsAPIURL(apiUrl?: string): string;
+declare function resolveTunnelsRegion(region?: string): string | undefined;
 declare function resolveTunnelsCredentials(credentials?: RstreamCredentials): RstreamCredentials | undefined;
 declare function resolveControlPlaneCredentials(controlPlaneCredentials?: RstreamCredentials, credentials?: RstreamCredentials, authToken?: string): RstreamCredentials | undefined;
 declare function resolveTunnelsEngine(config: TunnelsResolutionConfig): Promise<string>;
@@ -6080,6 +6158,28 @@ declare const streamSummarySchema: z.ZodObject<{
             tokenAuth: z.ZodOptional<z.ZodBoolean>;
             mtls_auth: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>;
+        path: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodEnum<{
+                direct: "direct";
+                cross_region: "cross_region";
+            }>;
+            crossRegionRoutingAllowed: z.ZodBoolean;
+            ingress: z.ZodObject<{
+                engineId: z.ZodString;
+                region: z.ZodString;
+                generation: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            owner: z.ZodObject<{
+                engineId: z.ZodString;
+                region: z.ZodString;
+                generation: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            anchor: z.ZodObject<{
+                engineId: z.ZodString;
+                region: z.ZodString;
+                generation: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         decision: z.ZodLiteral<"not_routed">;
         failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -6565,4 +6665,4 @@ declare const webttyServerSchema: z.ZodObject<{
 type WebTTYServer = z.infer<typeof webttyServerSchema>;
 declare function parseWebTTYServers(tunnels: Tunnel[]): WebTTYServer[];
 
-export { type AttachWebTTYParticipantParams, type BuildWebhookHeadersOptions, type Client, type ClientFilter, type CreateAPITURNCredentialsOptions, type CreateAPPTURNCredentialsOptions, type CreateAuthTokenFromClientCredentialsOptions, type CreatePATTURNCredentialsOptions, type CreateTURNCredentialsOptions, type CreateWebTTYControlRequestParams, type DetachWebTTYParticipantParams, type Event, type InitialState, type ListClientsParams, type ListClientsResponse, type ListTunnelsParams, type ListTunnelsResponse, type ListWebTTYControlRequestsParams, type ListWebTTYKeyGrantDecryptMaterialParams, type ListWebTTYSessionGroupsParams, type ListWebTTYSessionsParams, type ProjectLogEvent, type ReadWebTTYSessionEventsParams, type ResolveWebTTYControlRequestParams, type RstreamAuth, RstreamAuthResource, RstreamAuthResource as RstreamAuthRessource, RstreamTunnelsClient as RstreamClient, RstreamClientsResource, RstreamClientsResource as RstreamClientsRessource, RstreamTURNResource, RstreamTunnelsClient, type RstreamTunnelsConfig, RstreamTunnelsResource, RstreamTunnelsResource as RstreamTunnelsRessource, RstreamWebTTYResource, RstreamWebhookResource, RstreamWebhookResource as RstreamWebhookRessource, type StreamEndpoint, type StreamEntry, type StreamSummary, type StreamTLSInfo, type TURNCredentialMode, type TunnelFilter, RstreamTunnelsClient as Tunnels, type TunnelsResolutionConfig, WEBHOOK_DELIVERY_ID_HEADER, WEBHOOK_EVENT_ID_HEADER, WEBHOOK_EVENT_TYPE_HEADER, WEBHOOK_ID_HEADER, WEBHOOK_SIGNATURE_HEADER, Watch, type WatchConfig, type WatchWsEvents, type WebTTYCapabilities, type WebTTYControlRequest, type WebTTYKeyGrant, type WebTTYKeyGrantDecryptMaterial, type WebTTYParticipant, type WebTTYParticipantLive, type WebTTYServer, type WebTTYSession, type WebTTYSessionEvent, type WebTTYSessionGroup, type WebTTYSessionLive, type WebhookEvent, type WebhookHeaders, type WebhookPayload, type WsEvent, attachWebTTYParticipantParamsSchema, buildWebhookHeaders, clientFilterSchema, clientSchema, createAPITURNCredentials, createAPPTURNCredentials, createAuthTokenFromClientCredentials, createPATTURNCredentials, createTURNCredentials, createWebTTYControlRequestParamsSchema, detachWebTTYParticipantParamsSchema, eventSchema, formatStreamAccessPath, formatTunnelHost, generateWebhookSigningSecret, listClientsParamsSchema, listClientsResponseSchema, listTunnelsParamsSchema, listTunnelsResponseSchema, listWebTTYControlRequestsParamsSchema, listWebTTYKeyGrantDecryptMaterialParamsSchema, listWebTTYSessionGroupsParamsSchema, listWebTTYSessionsParamsSchema, normalizeEngineAddress, parseWebTTYServers, projectLogEventsSchema, readWebTTYSessionEventsParamsSchema, resolveControlPlaneCredentials, resolveManagedTunnelsProject, resolveTunnelsAPIURL, resolveTunnelsCredentials, resolveTunnelsEngine, resolveWebTTYControlRequestParamsSchema, signWebhookPayload, streamEndpointSchema, streamEntrySchema, streamSummaryEventSchema, streamSummarySchema, streamTLSInfoSchema, streamWebTTYMetadataSchema, tunnelFilterSchema, turnCredentialModeSchema, webTTYCapabilitiesSchema, webTTYContextMetadataSchema, webTTYControlRequestSchema, webTTYCryptoMetadataSchema, webTTYEncryptionModeSchema, webTTYKeyGrantDecryptMaterialSchema, webTTYKeyGrantSchema, webTTYOriginSchema, webTTYParticipantLiveSchema, webTTYParticipantRoleSchema, webTTYParticipantSchema, webTTYRecordingModeSchema, webTTYSessionEventSchema, webTTYSessionGroupSchema, webTTYSessionLiveSchema, webTTYSessionModeSchema, webTTYSessionSchema, webTTYTransportSchema, webhookEventsSchema, webttyServerSchema, wsEventsSchema };
+export { type AttachWebTTYParticipantParams, type BuildWebhookHeadersOptions, type Client, type ClientFilter, type CreateAPITURNCredentialsOptions, type CreateAPPTURNCredentialsOptions, type CreateAuthTokenFromClientCredentialsOptions, type CreatePATTURNCredentialsOptions, type CreateTURNCredentialsOptions, type CreateWebTTYControlRequestParams, type DetachWebTTYParticipantParams, type Event, type InitialState, type ListClientsParams, type ListClientsResponse, type ListTunnelsParams, type ListTunnelsResponse, type ListWebTTYControlRequestsParams, type ListWebTTYKeyGrantDecryptMaterialParams, type ListWebTTYSessionGroupsParams, type ListWebTTYSessionsParams, type ProjectLogEvent, type ReadWebTTYSessionEventsParams, type ResolveWebTTYControlRequestParams, type RstreamAuth, RstreamAuthResource, RstreamAuthResource as RstreamAuthRessource, RstreamTunnelsClient as RstreamClient, RstreamClientsResource, RstreamClientsResource as RstreamClientsRessource, RstreamTURNResource, RstreamTunnelsClient, type RstreamTunnelsConfig, RstreamTunnelsResource, RstreamTunnelsResource as RstreamTunnelsRessource, RstreamWebTTYResource, RstreamWebhookResource, RstreamWebhookResource as RstreamWebhookRessource, type StreamEndpoint, type StreamEntry, type StreamSummary, type StreamTLSInfo, type TURNCredentialMode, type TunnelFilter, RstreamTunnelsClient as Tunnels, type TunnelsResolutionConfig, WEBHOOK_DELIVERY_ID_HEADER, WEBHOOK_EVENT_ID_HEADER, WEBHOOK_EVENT_TYPE_HEADER, WEBHOOK_ID_HEADER, WEBHOOK_SIGNATURE_HEADER, Watch, type WatchConfig, type WatchWsEvents, type WebTTYCapabilities, type WebTTYControlRequest, type WebTTYKeyGrant, type WebTTYKeyGrantDecryptMaterial, type WebTTYParticipant, type WebTTYParticipantLive, type WebTTYServer, type WebTTYSession, type WebTTYSessionEvent, type WebTTYSessionGroup, type WebTTYSessionLive, type WebhookEvent, type WebhookHeaders, type WebhookPayload, type WsEvent, attachWebTTYParticipantParamsSchema, buildWebhookHeaders, clientFilterSchema, clientSchema, createAPITURNCredentials, createAPPTURNCredentials, createAuthTokenFromClientCredentials, createPATTURNCredentials, createTURNCredentials, createWebTTYControlRequestParamsSchema, detachWebTTYParticipantParamsSchema, eventSchema, formatStreamAccessPath, formatTunnelHost, generateWebhookSigningSecret, listClientsParamsSchema, listClientsResponseSchema, listTunnelsParamsSchema, listTunnelsResponseSchema, listWebTTYControlRequestsParamsSchema, listWebTTYKeyGrantDecryptMaterialParamsSchema, listWebTTYSessionGroupsParamsSchema, listWebTTYSessionsParamsSchema, normalizeEngineAddress, parseWebTTYServers, projectLogEventsSchema, readWebTTYSessionEventsParamsSchema, resolveControlPlaneCredentials, resolveManagedTunnelsProject, resolveTunnelsAPIURL, resolveTunnelsCredentials, resolveTunnelsEngine, resolveTunnelsRegion, resolveWebTTYControlRequestParamsSchema, signWebhookPayload, streamEndpointSchema, streamEntrySchema, streamSummaryEventSchema, streamSummarySchema, streamTLSInfoSchema, streamWebTTYMetadataSchema, tunnelFilterSchema, turnCredentialModeSchema, webTTYCapabilitiesSchema, webTTYContextMetadataSchema, webTTYControlRequestSchema, webTTYCryptoMetadataSchema, webTTYEncryptionModeSchema, webTTYKeyGrantDecryptMaterialSchema, webTTYKeyGrantSchema, webTTYOriginSchema, webTTYParticipantLiveSchema, webTTYParticipantRoleSchema, webTTYParticipantSchema, webTTYRecordingModeSchema, webTTYSessionEventSchema, webTTYSessionGroupSchema, webTTYSessionLiveSchema, webTTYSessionModeSchema, webTTYSessionSchema, webTTYTransportSchema, webhookEventsSchema, webttyServerSchema, wsEventsSchema };

package/dist/index.js

@@ -83,6 +83,7 @@ __export(index_exports, {
   resolveTunnelsAPIURL: () => resolveTunnelsAPIURL,
   resolveTunnelsCredentials: () => resolveTunnelsCredentials,
   resolveTunnelsEngine: () => resolveTunnelsEngine,
+  resolveTunnelsRegion: () => resolveTunnelsRegion,
   resolveWebTTYControlRequestParamsSchema: () => resolveWebTTYControlRequestParamsSchema,
   signWebhookPayload: () => signWebhookPayload,
   streamEndpointSchema: () => streamEndpointSchema,
@@ -530,8 +531,24 @@ var routedTunnelSchema = z3.object({
   tokenAuth: z3.boolean().optional(),
   mtls_auth: z3.boolean().optional()
 });
+var routingNodeSchema = z3.object({
+  engineId: nonEmptyStringSchema,
+  region: nonEmptyStringSchema,
+  generation: nonEmptyStringSchema.optional()
+});
+var routingPathSchema = z3.object({
+  mode: z3.enum(["direct", "cross_region"]),
+  crossRegionRoutingAllowed: z3.boolean(),
+  ingress: routingNodeSchema,
+  owner: routingNodeSchema,
+  anchor: routingNodeSchema
+});
 var routingSchema = z3.discriminatedUnion("decision", [
-  z3.object({ decision: z3.literal("routed"), tunnel: routedTunnelSchema }),
+  z3.object({
+    decision: z3.literal("routed"),
+    tunnel: routedTunnelSchema,
+    path: routingPathSchema.optional()
+  }),
   z3.object({ decision: z3.literal("not_routed"), failure: failureSchema })
 ]);
 var streamConnectedMetricsSchema = z3.object({
@@ -1615,6 +1632,16 @@ function normalizeEngineAddress(engine) {
 function resolveTunnelsAPIURL(apiUrl) {
   return trimOptionalString(apiUrl) ?? (0, import_rstream6.readEnvironment)().apiUrl ?? import_rstream3.DEFAULT_API_URL;
 }
+function resolveTunnelsRegion(region) {
+  const value = trimOptionalString(region) ?? (0, import_rstream6.readEnvironment)().region;
+  if (value === void 0 || value.toLowerCase() === "auto") return void 0;
+  if (!/^[a-z0-9](?:[a-z0-9._-]{0,62}[a-z0-9])?$/i.test(value)) {
+    throw new Error(
+      "Region can only contain letters, numbers, dots, underscores, or hyphens."
+    );
+  }
+  return value.toLowerCase();
+}
 function resolveTunnelsCredentials(credentials) {
   if (credentials !== void 0) {
     return credentials;
@@ -1642,11 +1669,25 @@ function resolveControlPlaneCredentials(controlPlaneCredentials, credentials, au
   return { token: environmentToken };
 }
 async function resolveTunnelsEngine(config) {
+  const region = resolveTunnelsRegion(config.region);
   const explicitEngine = trimOptionalString(config.engine);
+  const environmentEngine = (0, import_rstream6.readEnvironment)().engine;
+  if (region !== void 0 && (explicitEngine || environmentEngine)) {
+    throw new Error(
+      "Region selection cannot be combined with an explicit engine override."
+    );
+  }
+  if (region !== void 0) {
+    const project = await resolveManagedTunnelsProject(config);
+    const engine = (0, import_rstream4.getTunnelsProjectEngine)(project, region);
+    if (engine) return normalizeEngineAddress(engine);
+    throw new Error(
+      "Failed to resolve the selected regional engine from the managed tunnels project."
+    );
+  }
   if (explicitEngine) {
     return normalizeEngineAddress(explicitEngine);
   }
-  const environmentEngine = (0, import_rstream6.readEnvironment)().engine;
   if (environmentEngine) {
     return normalizeEngineAddress(environmentEngine);
   }
@@ -1657,7 +1698,7 @@ async function resolveTunnelsEngine(config) {
       ...config,
       token
     });
-    const engine = (0, import_rstream4.getTunnelsProjectEngine)(project);
+    const engine = (0, import_rstream4.getTunnelsProjectEngine)(project, region);
     if (engine) {
       return normalizeEngineAddress(engine);
     }
@@ -1686,6 +1727,7 @@ async function resolveManagedTunnelsProject(config) {
   }
   const controlPlane = new import_rstream7.RstreamClient({
     apiUrl: resolveTunnelsAPIURL(config.apiUrl),
+    controlPlaneHeaders: config.controlPlaneHeaders,
     credentials
   });
   return await controlPlane.tunnels.projects.resolveByEndpoint(projectEndpoint);
@@ -2276,9 +2318,30 @@ var RstreamTunnelsClient = class {
     return this.config?.projectEndpoint;
   }
   async getEngine() {
+    const region = resolveTunnelsRegion(this.config?.region);
     const projectEndpoint = normalizeOptionalString3(
       this.config?.projectEndpoint
     );
+    if (region !== void 0) {
+      if (normalizeOptionalString3(this.config?.engine) !== void 0 || (0, import_rstream13.readEnvironment)().engine !== void 0) {
+        throw new Error(
+          "Region selection cannot be combined with an explicit engine override."
+        );
+      }
+      if (projectEndpoint === void 0) {
+        throw new Error(
+          "Managed project endpoint is required for region selection."
+        );
+      }
+      const project = await this.getManagedProject();
+      if (project !== void 0) {
+        const engine = (0, import_rstream11.getTunnelsProjectEngine)(project, region);
+        if (engine) return normalizeEngineAddress(engine);
+      }
+      throw new Error(
+        "Failed to resolve the selected regional engine from the managed tunnels project."
+      );
+    }
     if (projectEndpoint !== void 0 && normalizeOptionalString3(this.config?.engine) === void 0 && (0, import_rstream13.readEnvironment)().engine === void 0) {
       const project = await this.getManagedProject();
       if (project !== void 0) {
@@ -2294,9 +2357,11 @@ var RstreamTunnelsClient = class {
     return await resolveTunnelsEngine({
       apiUrl: this.config?.apiUrl,
       controlPlaneCredentials: this.controlPlaneCredentials,
+      controlPlaneHeaders: this.config?.controlPlaneHeaders,
       credentials: this.credentials,
       engine: this.config?.engine,
-      projectEndpoint: this.config?.projectEndpoint
+      projectEndpoint: this.config?.projectEndpoint,
+      region: this.config?.region
     });
   }
   async getManagedProject() {
@@ -2310,8 +2375,10 @@ var RstreamTunnelsClient = class {
       this.managedProject = resolveManagedTunnelsProject({
         apiUrl: this.config?.apiUrl,
         controlPlaneCredentials: this.controlPlaneCredentials,
+        controlPlaneHeaders: this.config?.controlPlaneHeaders,
         credentials: this.credentials,
-        projectEndpoint
+        projectEndpoint,
+        region: this.config?.region
       }).catch((error) => {
         this.managedProject = void 0;
         throw error;
@@ -2761,6 +2828,7 @@ function parseWebTTYServers(tunnels) {
   resolveTunnelsAPIURL,
   resolveTunnelsCredentials,
   resolveTunnelsEngine,
+  resolveTunnelsRegion,
   resolveWebTTYControlRequestParamsSchema,
   signWebhookPayload,
   streamEndpointSchema,

package/dist/index.mjs

@@ -48,7 +48,7 @@ import {
   webTTYTransportSchema,
   webhookEventsSchema,
   wsEventsSchema
-} from "./chunk-6OUCIT5G.mjs";
+} from "./chunk-3VBF43NB.mjs";
 
 // src/auth-resource.ts
 import { createAuthTokenParamsSchema } from "@rstreamlabs/rstream/auth-token";
@@ -269,6 +269,16 @@ function normalizeEngineAddress(engine) {
 function resolveTunnelsAPIURL(apiUrl) {
   return trimOptionalString(apiUrl) ?? readEnvironment().apiUrl ?? DEFAULT_API_URL;
 }
+function resolveTunnelsRegion(region) {
+  const value = trimOptionalString(region) ?? readEnvironment().region;
+  if (value === void 0 || value.toLowerCase() === "auto") return void 0;
+  if (!/^[a-z0-9](?:[a-z0-9._-]{0,62}[a-z0-9])?$/i.test(value)) {
+    throw new Error(
+      "Region can only contain letters, numbers, dots, underscores, or hyphens."
+    );
+  }
+  return value.toLowerCase();
+}
 function resolveTunnelsCredentials(credentials) {
   if (credentials !== void 0) {
     return credentials;
@@ -296,11 +306,25 @@ function resolveControlPlaneCredentials(controlPlaneCredentials, credentials, au
   return { token: environmentToken };
 }
 async function resolveTunnelsEngine(config) {
+  const region = resolveTunnelsRegion(config.region);
   const explicitEngine = trimOptionalString(config.engine);
+  const environmentEngine = readEnvironment().engine;
+  if (region !== void 0 && (explicitEngine || environmentEngine)) {
+    throw new Error(
+      "Region selection cannot be combined with an explicit engine override."
+    );
+  }
+  if (region !== void 0) {
+    const project = await resolveManagedTunnelsProject(config);
+    const engine = getTunnelsProjectEngine(project, region);
+    if (engine) return normalizeEngineAddress(engine);
+    throw new Error(
+      "Failed to resolve the selected regional engine from the managed tunnels project."
+    );
+  }
   if (explicitEngine) {
     return normalizeEngineAddress(explicitEngine);
   }
-  const environmentEngine = readEnvironment().engine;
   if (environmentEngine) {
     return normalizeEngineAddress(environmentEngine);
   }
@@ -311,7 +335,7 @@ async function resolveTunnelsEngine(config) {
       ...config,
       token
     });
-    const engine = getTunnelsProjectEngine(project);
+    const engine = getTunnelsProjectEngine(project, region);
     if (engine) {
       return normalizeEngineAddress(engine);
     }
@@ -340,6 +364,7 @@ async function resolveManagedTunnelsProject(config) {
   }
   const controlPlane = new RstreamClient({
     apiUrl: resolveTunnelsAPIURL(config.apiUrl),
+    controlPlaneHeaders: config.controlPlaneHeaders,
     credentials
   });
   return await controlPlane.tunnels.projects.resolveByEndpoint(projectEndpoint);
@@ -930,9 +955,30 @@ var RstreamTunnelsClient = class {
     return this.config?.projectEndpoint;
   }
   async getEngine() {
+    const region = resolveTunnelsRegion(this.config?.region);
     const projectEndpoint = normalizeOptionalString3(
       this.config?.projectEndpoint
     );
+    if (region !== void 0) {
+      if (normalizeOptionalString3(this.config?.engine) !== void 0 || readEnvironment2().engine !== void 0) {
+        throw new Error(
+          "Region selection cannot be combined with an explicit engine override."
+        );
+      }
+      if (projectEndpoint === void 0) {
+        throw new Error(
+          "Managed project endpoint is required for region selection."
+        );
+      }
+      const project = await this.getManagedProject();
+      if (project !== void 0) {
+        const engine = getTunnelsProjectEngine2(project, region);
+        if (engine) return normalizeEngineAddress(engine);
+      }
+      throw new Error(
+        "Failed to resolve the selected regional engine from the managed tunnels project."
+      );
+    }
     if (projectEndpoint !== void 0 && normalizeOptionalString3(this.config?.engine) === void 0 && readEnvironment2().engine === void 0) {
       const project = await this.getManagedProject();
       if (project !== void 0) {
@@ -948,9 +994,11 @@ var RstreamTunnelsClient = class {
     return await resolveTunnelsEngine({
       apiUrl: this.config?.apiUrl,
       controlPlaneCredentials: this.controlPlaneCredentials,
+      controlPlaneHeaders: this.config?.controlPlaneHeaders,
       credentials: this.credentials,
       engine: this.config?.engine,
-      projectEndpoint: this.config?.projectEndpoint
+      projectEndpoint: this.config?.projectEndpoint,
+      region: this.config?.region
     });
   }
   async getManagedProject() {
@@ -964,8 +1012,10 @@ var RstreamTunnelsClient = class {
       this.managedProject = resolveManagedTunnelsProject({
         apiUrl: this.config?.apiUrl,
         controlPlaneCredentials: this.controlPlaneCredentials,
+        controlPlaneHeaders: this.config?.controlPlaneHeaders,
         credentials: this.credentials,
-        projectEndpoint
+        projectEndpoint,
+        region: this.config?.region
       }).catch((error) => {
         this.managedProject = void 0;
         throw error;
@@ -1414,6 +1464,7 @@ export {
   resolveTunnelsAPIURL,
   resolveTunnelsCredentials,
   resolveTunnelsEngine,
+  resolveTunnelsRegion,
   resolveWebTTYControlRequestParamsSchema,
   signWebhookPayload,
   streamEndpointSchema,

package/dist/openapi.js

@@ -270,8 +270,24 @@ var routedTunnelSchema = z3.object({
   tokenAuth: z3.boolean().optional(),
   mtls_auth: z3.boolean().optional()
 });
+var routingNodeSchema = z3.object({
+  engineId: nonEmptyStringSchema,
+  region: nonEmptyStringSchema,
+  generation: nonEmptyStringSchema.optional()
+});
+var routingPathSchema = z3.object({
+  mode: z3.enum(["direct", "cross_region"]),
+  crossRegionRoutingAllowed: z3.boolean(),
+  ingress: routingNodeSchema,
+  owner: routingNodeSchema,
+  anchor: routingNodeSchema
+});
 var routingSchema = z3.discriminatedUnion("decision", [
-  z3.object({ decision: z3.literal("routed"), tunnel: routedTunnelSchema }),
+  z3.object({
+    decision: z3.literal("routed"),
+    tunnel: routedTunnelSchema,
+    path: routingPathSchema.optional()
+  }),
   z3.object({ decision: z3.literal("not_routed"), failure: failureSchema })
 ]);
 var streamConnectedMetricsSchema = z3.object({

package/dist/openapi.mjs

@@ -1,7 +1,7 @@
 import {
   engineOpenApiDocument,
   engineOpenApiJson
-} from "./chunk-6OUCIT5G.mjs";
+} from "./chunk-3VBF43NB.mjs";
 export {
   engineOpenApiDocument,
   engineOpenApiJson

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rstreamlabs/tunnels",
-  "version": "3.6.2",
+  "version": "3.8.0",
   "description": "JS/TS SDK for the rstream Engine API and tunnel runtime APIs.",
   "author": "@uartnet <hello@rstream.io>",
   "repository": {
@@ -38,16 +38,16 @@
     "type-check": "tsc --noEmit"
   },
   "devDependencies": {
-    "@turbo/gen": "^2.10.0",
+    "@turbo/gen": "^2.10.6",
     "@types/node": "^26",
-    "eslint": "9.39.4",
+    "eslint": "9.39.5",
     "eslint-config": "*",
     "tsup": "^8.5.1",
-    "typescript": "5.9.3",
+    "typescript": "6.0.3",
     "typescript-config": "*"
   },
   "dependencies": {
-    "@rstreamlabs/rstream": "3.6.0",
+    "@rstreamlabs/rstream": "3.8.0",
     "@types/jsonwebtoken": "^9.0.10",
     "jsonwebtoken": "^9.0.3",
     "zod": "^4.4.3"