alpic 0.0.0-dev.fdfada2 → 0.0.0-dev.fe594dc

package/dist/env.js

@@ -0,0 +1,10 @@
+import { createEnv } from "@t3-oss/env-core";
+import { z } from "zod";
+export const env = createEnv({
+    server: {
+        ALPIC_API_BASE_URL: z.string().default("https://api.alpic.ai"),
+        ALPIC_COGNITO_CLIENT_ID: z.string().default("1023dpimab488tfv4sh4bdk2r"),
+    },
+    runtimeEnv: process.env,
+});
+//# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,GAAG,GAAG,SAAS,CAAC;IAC3B,MAAM,EAAE;QACN,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC;QAC9D,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC;KACzE;IACD,UAAU,EAAE,OAAO,CAAC,GAAG;CACxB,CAAC,CAAC"}

package/dist/lib/alpic-command.d.ts

@@ -0,0 +1,4 @@
+import { Command } from "@oclif/core";
+export declare abstract class AlpicCommand extends Command {
+    catch(error: unknown): Promise<void>;
+}

package/dist/lib/alpic-command.js

@@ -0,0 +1,17 @@
+import * as p from "@clack/prompts";
+import { Command } from "@oclif/core";
+import { ORPCError } from "@orpc/client";
+export class AlpicCommand extends Command {
+    async catch(error) {
+        if (error instanceof ORPCError) {
+            p.cancel(`An error occurred while connecting to Alpic: ${error.message}`);
+            return;
+        }
+        if (error instanceof Error) {
+            p.cancel(error.message);
+            return;
+        }
+        p.cancel(String(error));
+    }
+}
+//# sourceMappingURL=alpic-command.js.map

package/dist/lib/alpic-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alpic-command.js","sourceRoot":"","sources":["../../src/lib/alpic-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,OAAgB,YAAa,SAAQ,OAAO;IACvC,KAAK,CAAC,KAAK,CAAC,KAAc;QACjC,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,CAAC,CAAC,MAAM,CAAC,gDAAgD,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/lib/auth/auth.d.ts

@@ -0,0 +1,2 @@
+export declare function getApiToken(): Promise<string | undefined>;
+export declare function isAuthenticated(): Promise<boolean>;

package/dist/lib/auth/auth.js

@@ -0,0 +1,21 @@
+import { oAuthClient } from "./oauth/client.js";
+export async function getApiToken() {
+    const token = process.env.ALPIC_API_KEY ?? (await oAuthClient.getValidAccessToken())?.access_token;
+    return token;
+}
+export async function isAuthenticated() {
+    const isAuthenticatedViaApiKey = hasApiKey();
+    if (isAuthenticatedViaApiKey)
+        return true;
+    const isAuthenticatedViaOAuth = await hasValidAccessToken();
+    if (isAuthenticatedViaOAuth)
+        return true;
+    return false;
+}
+function hasApiKey() {
+    return process.env.ALPIC_API_KEY !== undefined;
+}
+async function hasValidAccessToken() {
+    return (await oAuthClient.getValidAccessToken()) !== null;
+}
+//# sourceMappingURL=auth.js.map

package/dist/lib/auth/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/lib/auth/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,WAAW,CAAC,mBAAmB,EAAE,CAAC,EAAE,YAAY,CAAC;IAEnG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,wBAAwB,GAAG,SAAS,EAAE,CAAC;IAC7C,IAAI,wBAAwB;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,uBAAuB,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC5D,IAAI,uBAAuB;QAAE,OAAO,IAAI,CAAC;IAEzC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,OAAO,CAAC,MAAM,WAAW,CAAC,mBAAmB,EAAE,CAAC,KAAK,IAAI,CAAC;AAC5D,CAAC"}

package/dist/lib/auth/oauth/client.d.ts

@@ -0,0 +1,29 @@
+import * as openid from "openid-client";
+import { type Credentials } from "../../global-store.js";
+export declare class OAuthClient {
+    private config;
+    initialize: Promise<void>;
+    constructor();
+    getValidAccessToken(): Promise<Credentials | null>;
+    fetchUserInfo(credentials: Credentials): Promise<openid.UserInfoResponse>;
+    refreshAccessToken(credentials: Credentials): Promise<Credentials>;
+    prepareOAuthConfig(): Promise<{
+        authorizeUrl: URL;
+        state: string;
+        nonce: string;
+        codeVerifier: string;
+    }>;
+    exchangeAuthorizationCode({ url, codeVerifier, state, nonce, }: {
+        url: URL;
+        codeVerifier: string;
+        state: string;
+        nonce: string;
+    }): Promise<openid.TokenEndpointResponse & openid.TokenEndpointResponseHelpers>;
+    getExpiresAt(expires_in: number): number;
+    private getCallbackUrl;
+    private loadConfig;
+    private fetchOAuthProtectedResourceConfig;
+    private getConfig;
+    private isAccessTokenExpired;
+}
+export declare const oAuthClient: OAuthClient;

package/dist/lib/auth/oauth/client.js

@@ -0,0 +1,112 @@
+import * as openid from "openid-client";
+import { env } from "../../../env.js";
+import { globalStore } from "../../global-store.js";
+import { LOOPBACK_HOST, LOOPBACK_PORT } from "./constants.js";
+const SCOPES = ["openid", "email", "profile"];
+export class OAuthClient {
+    config = null;
+    initialize;
+    constructor() {
+        this.initialize = this.loadConfig();
+    }
+    async getValidAccessToken() {
+        await this.initialize;
+        const stored = globalStore.getCredentials();
+        if (!stored) {
+            return null;
+        }
+        if (this.isAccessTokenExpired(stored)) {
+            try {
+                return await this.refreshAccessToken(stored);
+            }
+            catch {
+                return null;
+            }
+        }
+        return stored;
+    }
+    async fetchUserInfo(credentials) {
+        return openid.fetchUserInfo(await this.getConfig(), credentials.access_token, credentials.sub);
+    }
+    async refreshAccessToken(credentials) {
+        if (!credentials.refresh_token) {
+            throw new Error("No refresh token available");
+        }
+        const response = await openid.refreshTokenGrant(await this.getConfig(), credentials.refresh_token);
+        const refreshed = {
+            access_token: response.access_token,
+            refresh_token: response.refresh_token ?? credentials.refresh_token,
+            expires_at: this.getExpiresAt(response.expires_in ?? 0),
+            sub: credentials.sub,
+        };
+        globalStore.saveCredentials(refreshed);
+        return refreshed;
+    }
+    async prepareOAuthConfig() {
+        await this.initialize;
+        if (!this.config) {
+            throw new Error("Config not loaded");
+        }
+        const codeVerifier = openid.randomPKCECodeVerifier();
+        const codeChallenge = await openid.calculatePKCECodeChallenge(codeVerifier);
+        const state = openid.randomState();
+        const nonce = openid.randomNonce();
+        const authorizeUrl = openid.buildAuthorizationUrl(this.config, {
+            redirect_uri: this.getCallbackUrl().toString(),
+            scope: SCOPES.join(" "),
+            code_challenge: codeChallenge,
+            code_challenge_method: "S256",
+            state,
+            nonce,
+        });
+        return { authorizeUrl, state, nonce, codeVerifier };
+    }
+    async exchangeAuthorizationCode({ url, codeVerifier, state, nonce, }) {
+        return await openid.authorizationCodeGrant(await this.getConfig(), url, {
+            pkceCodeVerifier: codeVerifier,
+            expectedState: state,
+            expectedNonce: nonce,
+        });
+    }
+    getExpiresAt(expires_in) {
+        return expires_in !== undefined ? Math.floor(Date.now() / 1000) + expires_in : Date.now() / 1000 + 3600;
+    }
+    getCallbackUrl() {
+        return new URL(`http://${LOOPBACK_HOST}:${LOOPBACK_PORT}/callback`);
+    }
+    async loadConfig() {
+        const protectedResourceConfig = await this.fetchOAuthProtectedResourceConfig();
+        const issuer = protectedResourceConfig.authorization_servers[0];
+        if (!issuer) {
+            throw new Error("No authorization server in OAuth protected resource config");
+        }
+        const issuerUrl = new URL(issuer);
+        try {
+            this.config = await openid.discovery(issuerUrl, env.ALPIC_COGNITO_CLIENT_ID);
+        }
+        catch {
+            throw new Error("Failed to discover OAuth config");
+        }
+    }
+    async fetchOAuthProtectedResourceConfig() {
+        const baseUrl = env.ALPIC_API_BASE_URL;
+        const response = await fetch(`${baseUrl}/.well-known/oauth-protected-resource`);
+        if (!response.ok) {
+            throw new Error(`Failed to load service config from ${baseUrl} (${response.status} ${response.statusText})`);
+        }
+        return (await response.json());
+    }
+    async getConfig() {
+        await this.initialize;
+        if (!this.config) {
+            throw new Error("Config not loaded");
+        }
+        return this.config;
+    }
+    isAccessTokenExpired(credentials) {
+        const EXPIRATION_WINDOW_IN_SECONDS = 300;
+        return Date.now() / 1000 + EXPIRATION_WINDOW_IN_SECONDS >= credentials.expires_at;
+    }
+}
+export const oAuthClient = new OAuthClient();
+//# sourceMappingURL=client.js.map

package/dist/lib/auth/oauth/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../../src/lib/auth/oauth/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAoB,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE9D,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAU9C,MAAM,OAAO,WAAW;IACd,MAAM,GAAgC,IAAI,CAAC;IACnD,UAAU,CAAgB;IAE1B;QACE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,MAAM,IAAI,CAAC,UAAU,CAAC;QACtB,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAAwB;QAC1C,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,WAAwB;QAC/C,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;QAEnG,MAAM,SAAS,GAAgB;YAC7B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,WAAW,CAAC,aAAa;YAClE,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACvD,GAAG,EAAE,WAAW,CAAC,GAAG;SACrB,CAAC;QAEF,WAAW,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,IAAI,CAAC,UAAU,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACrD,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,YAAY,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAEnC,MAAM,YAAY,GAAG,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE;YAC7D,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE;YAC9C,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,MAAM;YAC7B,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QAEH,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,EAC9B,GAAG,EACH,YAAY,EACZ,KAAK,EACL,KAAK,GAMN;QACC,OAAO,MAAM,MAAM,CAAC,sBAAsB,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE;YACtE,gBAAgB,EAAE,YAAY;YAC9B,aAAa,EAAE,KAAK;YACpB,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,UAAkB;QAC7B,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAC1G,CAAC;IAEO,cAAc;QACpB,OAAO,IAAI,GAAG,CAAC,UAAU,aAAa,IAAI,aAAa,WAAW,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,iCAAiC,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAG,uBAAuB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iCAAiC;QAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,uCAAuC,CAAC,CAAC;QAChF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,IAAI,CAAC,UAAU,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,oBAAoB,CAAC,WAAwB;QACnD,MAAM,4BAA4B,GAAG,GAAG,CAAC;QACzC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,4BAA4B,IAAI,WAAW,CAAC,UAAU,CAAC;IACpF,CAAC;CACF;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC"}

package/dist/lib/auth/oauth/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const LOOPBACK_HOST = "127.0.0.1";
+export declare const LOOPBACK_PORT = 38472;

package/dist/lib/auth/oauth/constants.js

@@ -0,0 +1,3 @@
+export const LOOPBACK_HOST = "127.0.0.1";
+export const LOOPBACK_PORT = 38472;
+//# sourceMappingURL=constants.js.map

package/dist/lib/auth/oauth/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../src/lib/auth/oauth/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC;AACzC,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC"}

package/dist/lib/auth/oauth/pages/CallbackPage.d.ts

@@ -0,0 +1,7 @@
+interface CallbackPageProps {
+    title: string;
+    body: string;
+    success: boolean;
+}
+export declare function CallbackPage({ title, body, success }: CallbackPageProps): import("preact").JSX.Element;
+export {};

package/dist/lib/auth/oauth/pages/CallbackPage.js

@@ -0,0 +1,6 @@
+import { jsx as _jsx, jsxs as _jsxs } from "preact/jsx-runtime";
+import { Layout } from "./Layout.jsx";
+export function CallbackPage({ title, body, success }) {
+    return (_jsx(Layout, { pageTitle: title, children: _jsxs("div", { class: success ? "callback callback--success" : "callback callback--error", children: [_jsx("h1", { children: title }), _jsx("p", { class: "subtitle", children: body })] }) }));
+}
+//# sourceMappingURL=CallbackPage.js.map

package/dist/lib/auth/oauth/pages/CallbackPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CallbackPage.js","sourceRoot":"","sources":["../../../../../src/lib/auth/oauth/pages/CallbackPage.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAQtC,MAAM,UAAU,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAqB;IACtE,OAAO,CACL,KAAC,MAAM,IAAC,SAAS,EAAE,KAAK,YACtB,eAAK,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,0BAA0B,aAC7E,uBAAK,KAAK,GAAM,EAChB,YAAG,KAAK,EAAC,UAAU,YAAE,IAAI,GAAK,IAC1B,GACC,CACV,CAAC;AACJ,CAAC"}

package/dist/lib/auth/oauth/pages/Layout.d.ts

@@ -0,0 +1,7 @@
+import type { ComponentChildren } from "preact";
+interface LayoutProps {
+    pageTitle: string;
+    children: ComponentChildren;
+}
+export declare function Layout({ pageTitle, children }: LayoutProps): import("preact").JSX.Element;
+export {};

package/dist/lib/auth/oauth/pages/Layout.js

@@ -0,0 +1,6 @@
+import { jsx as _jsx, jsxs as _jsxs } from "preact/jsx-runtime";
+import { STYLES } from "./styles.js";
+export function Layout({ pageTitle, children }) {
+    return (_jsxs("html", { lang: "en", children: [_jsxs("head", { children: [_jsx("meta", { charset: "UTF-8" }), _jsx("meta", { name: "viewport", content: "width=device-width, initial-scale=1.0" }), _jsx("title", { children: pageTitle }), _jsx("link", { href: "https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600&family=Mozilla+Text:wght@200..700&display=swap", rel: "stylesheet" }), _jsx("style", { dangerouslySetInnerHTML: { __html: STYLES } })] }), _jsx("body", { children: _jsx("div", { class: "card", children: children }) })] }));
+}
+//# sourceMappingURL=Layout.js.map

package/dist/lib/auth/oauth/pages/Layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Layout.js","sourceRoot":"","sources":["../../../../../src/lib/auth/oauth/pages/Layout.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAOrC,MAAM,UAAU,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAe;IACzD,OAAO,CACL,gBAAM,IAAI,EAAC,IAAI,aACb,2BACE,eAAM,OAAO,EAAC,OAAO,GAAG,EACxB,eAAM,IAAI,EAAC,UAAU,EAAC,OAAO,EAAC,uCAAuC,GAAG,EACxE,0BAAQ,SAAS,GAAS,EAC1B,eACE,IAAI,EAAC,gHAAgH,EACrH,GAAG,EAAC,YAAY,GAChB,EACF,gBAAO,uBAAuB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAI,IACjD,EACP,yBACE,cAAK,KAAK,EAAC,MAAM,YAAE,QAAQ,GAAO,GAC7B,IACF,CACR,CAAC;AACJ,CAAC"}

package/dist/lib/auth/oauth/pages/PickerPage.d.ts

@@ -0,0 +1,5 @@
+interface PickerPageProps {
+    authorizeUrlEscaped: string;
+}
+export declare function PickerPage({ authorizeUrlEscaped }: PickerPageProps): import("preact").JSX.Element;
+export {};

package/dist/lib/auth/oauth/pages/PickerPage.js

@@ -0,0 +1,9 @@
+import { jsx as _jsx, jsxs as _jsxs } from "preact/jsx-runtime";
+import { Layout } from "./Layout.jsx";
+function providerHref(authorizeUrlEscaped, provider) {
+    return `${authorizeUrlEscaped}&identity_provider=${encodeURIComponent(provider)}`;
+}
+export function PickerPage({ authorizeUrlEscaped }) {
+    return (_jsxs(Layout, { pageTitle: "Sign in to Alpic", children: [_jsx("h1", { children: "Welcome to Alpic" }), _jsx("p", { class: "subtitle", children: "Sign in to manage your MCP Servers" }), _jsxs("div", { class: "buttons", children: [_jsxs("a", { href: providerHref(authorizeUrlEscaped, "Github"), class: "btn btn-github", children: [_jsxs("svg", { viewBox: "0 0 24 24", xmlns: "http://www.w3.org/2000/svg", children: [_jsx("title", { children: "GitHub" }), _jsx("path", { d: "M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12" })] }), "Sign in with GitHub"] }), _jsxs("a", { href: providerHref(authorizeUrlEscaped, "Google"), class: "btn btn-google", children: [_jsxs("svg", { viewBox: "0 0 24 24", xmlns: "http://www.w3.org/2000/svg", children: [_jsx("title", { children: "Google" }), _jsx("path", { d: "M12.48 10.92v3.28h7.84c-.24 1.84-.853 3.187-1.8 4.133-1.147 1.147-2.933 2.4-6.04 2.4-4.827 0-8.6-3.893-8.6-8.72s3.773-8.72 8.6-8.72c2.6 0 4.507 1.027 5.907 2.347l2.307-2.307C18.747 1.44 16.133 0 12.48 0 5.867 0 .307 5.387.307 12s5.56 12 12.173 12c3.573 0 6.267-1.173 8.373-3.36 2.16-2.16 2.84-5.213 2.84-7.667 0-.76-.053-1.467-.173-2.053H12.48z" })] }), "Sign in with Google"] })] })] }));
+}
+//# sourceMappingURL=PickerPage.js.map

package/dist/lib/auth/oauth/pages/PickerPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PickerPage.js","sourceRoot":"","sources":["../../../../../src/lib/auth/oauth/pages/PickerPage.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAMtC,SAAS,YAAY,CAAC,mBAA2B,EAAE,QAAgB;IACjE,OAAO,GAAG,mBAAmB,sBAAsB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAE,mBAAmB,EAAmB;IACjE,OAAO,CACL,MAAC,MAAM,IAAC,SAAS,EAAC,kBAAkB,aAClC,4CAAyB,EACzB,YAAG,KAAK,EAAC,UAAU,mDAAuC,EAC1D,eAAK,KAAK,EAAC,SAAS,aAClB,aAAG,IAAI,EAAE,YAAY,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAC,gBAAgB,aAC1E,eAAK,OAAO,EAAC,WAAW,EAAC,KAAK,EAAC,4BAA4B,aACzD,qCAAqB,EACrB,eAAM,CAAC,EAAC,0sBAA0sB,GAAG,IACjtB,2BAEJ,EACJ,aAAG,IAAI,EAAE,YAAY,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAC,gBAAgB,aAC1E,eAAK,OAAO,EAAC,WAAW,EAAC,KAAK,EAAC,4BAA4B,aACzD,qCAAqB,EACrB,eAAM,CAAC,EAAC,0VAA0V,GAAG,IACjW,2BAEJ,IACA,IACC,CACV,CAAC;AACJ,CAAC"}

package/dist/lib/auth/oauth/pages/styles.d.ts

@@ -0,0 +1 @@
+export declare const STYLES = "\n  *,\n  *::before,\n  *::after {\n    margin: 0;\n    padding: 0;\n    box-sizing: border-box;\n  }\n\n  a {\n    color: inherit;\n    text-decoration: none;\n  }\n\n  :root {\n    --midnight: #051413;\n  }\n\n  body {\n    font-family: \"Inter\", system-ui, sans-serif;\n    background-color: var(--midnight);\n    min-height: 100vh;\n    display: flex;\n    padding: 64px;\n  }\n\n  .card {\n    background: #fff;\n    border-radius: 2px;\n    padding: 48px;\n    width: 50%;\n    min-height: calc(100vh - 128px);\n    display: flex;\n    flex-direction: column;\n    align-items: center;\n    justify-content: center;\n  }\n\n  h1 {\n    font-family: \"Mozilla Text\", system-ui, sans-serif;\n    font-weight: 400;\n    font-size: 48px;\n    color: var(--midnight);\n    margin-bottom: 8px;\n  }\n\n  .subtitle {\n    font-size: 20px;\n    color: var(--midnight);\n    margin-bottom: 32px;\n  }\n\n  .buttons {\n    display: flex;\n    flex-direction: column;\n    gap: 12px;\n  }\n\n  .btn {\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 8px;\n    height: 48px;\n    width: 256px;\n    padding: 0 16px;\n    border-radius: 2px;\n    border: 1px solid var(--midnight);\n    font-family: \"Inter\", system-ui, sans-serif;\n    font-size: 16px;\n    font-weight: 500;\n    cursor: pointer;\n    transition: background 0.15s;\n  }\n\n  .btn:focus-visible {\n    outline: none;\n    box-shadow: 0 0 0 2px var(--midnight);\n  }\n\n  .btn svg {\n    width: 20px;\n    height: 20px;\n    flex-shrink: 0;\n  }\n\n  .btn-github {\n    background: var(--midnight);\n    color: #fff;\n  }\n  .btn-github svg {\n    fill: #fff;\n  }\n  .btn-github:hover {\n    background: rgba(5, 20, 19, 0.9);\n  }\n\n  .btn-google {\n    background: #fff;\n    color: var(--midnight);\n  }\n  .btn-google svg {\n    fill: var(--midnight);\n  }\n  .btn-google:hover {\n    background: rgba(5, 20, 19, 0.1);\n  }\n\n  .callback {\n    padding-left: 24px;\n    border-left: 4px solid var(--midnight);\n    border-radius: 2px;\n  }\n  .callback--success {\n    border-left-color: #10b981;\n  }\n  .callback--error {\n    border-left-color: #ef4444;\n  }\n  .callback h1 {\n    font-size: 36px;\n    margin-bottom: 8px;\n  }\n  .callback .subtitle {\n    margin-bottom: 0;\n  }\n\n  @media (max-width: 768px) {\n    body {\n      padding: 16px;\n    }\n    .card {\n      width: 100%;\n      height: auto;\n      padding: 24px;\n    }\n    h1 {\n      font-size: 36px;\n    }\n    .subtitle {\n      font-size: 18px;\n    }\n  }\n";

package/dist/lib/auth/oauth/pages/styles.js

@@ -0,0 +1,145 @@
+export const STYLES = `
+  *,
+  *::before,
+  *::after {
+    margin: 0;
+    padding: 0;
+    box-sizing: border-box;
+  }
+
+  a {
+    color: inherit;
+    text-decoration: none;
+  }
+
+  :root {
+    --midnight: #051413;
+  }
+
+  body {
+    font-family: "Inter", system-ui, sans-serif;
+    background-color: var(--midnight);
+    min-height: 100vh;
+    display: flex;
+    padding: 64px;
+  }
+
+  .card {
+    background: #fff;
+    border-radius: 2px;
+    padding: 48px;
+    width: 50%;
+    min-height: calc(100vh - 128px);
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    justify-content: center;
+  }
+
+  h1 {
+    font-family: "Mozilla Text", system-ui, sans-serif;
+    font-weight: 400;
+    font-size: 48px;
+    color: var(--midnight);
+    margin-bottom: 8px;
+  }
+
+  .subtitle {
+    font-size: 20px;
+    color: var(--midnight);
+    margin-bottom: 32px;
+  }
+
+  .buttons {
+    display: flex;
+    flex-direction: column;
+    gap: 12px;
+  }
+
+  .btn {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    gap: 8px;
+    height: 48px;
+    width: 256px;
+    padding: 0 16px;
+    border-radius: 2px;
+    border: 1px solid var(--midnight);
+    font-family: "Inter", system-ui, sans-serif;
+    font-size: 16px;
+    font-weight: 500;
+    cursor: pointer;
+    transition: background 0.15s;
+  }
+
+  .btn:focus-visible {
+    outline: none;
+    box-shadow: 0 0 0 2px var(--midnight);
+  }
+
+  .btn svg {
+    width: 20px;
+    height: 20px;
+    flex-shrink: 0;
+  }
+
+  .btn-github {
+    background: var(--midnight);
+    color: #fff;
+  }
+  .btn-github svg {
+    fill: #fff;
+  }
+  .btn-github:hover {
+    background: rgba(5, 20, 19, 0.9);
+  }
+
+  .btn-google {
+    background: #fff;
+    color: var(--midnight);
+  }
+  .btn-google svg {
+    fill: var(--midnight);
+  }
+  .btn-google:hover {
+    background: rgba(5, 20, 19, 0.1);
+  }
+
+  .callback {
+    padding-left: 24px;
+    border-left: 4px solid var(--midnight);
+    border-radius: 2px;
+  }
+  .callback--success {
+    border-left-color: #10b981;
+  }
+  .callback--error {
+    border-left-color: #ef4444;
+  }
+  .callback h1 {
+    font-size: 36px;
+    margin-bottom: 8px;
+  }
+  .callback .subtitle {
+    margin-bottom: 0;
+  }
+
+  @media (max-width: 768px) {
+    body {
+      padding: 16px;
+    }
+    .card {
+      width: 100%;
+      height: auto;
+      padding: 24px;
+    }
+    h1 {
+      font-size: 36px;
+    }
+    .subtitle {
+      font-size: 18px;
+    }
+  }
+`;
+//# sourceMappingURL=styles.js.map

package/dist/lib/auth/oauth/pages/styles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"styles.js","sourceRoot":"","sources":["../../../../../src/lib/auth/oauth/pages/styles.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+IrB,CAAC"}

package/dist/lib/auth/oauth/server.d.ts

@@ -0,0 +1,8 @@
+import type { Credentials } from "../../global-store.js";
+export declare const getLoginPageUrl: () => string;
+export declare const listenToOAuthCallback: ({ state, nonce, codeVerifier, authorizeUrl, }: {
+    state: string;
+    nonce: string;
+    codeVerifier: string;
+    authorizeUrl?: string;
+}) => Promise<Credentials>;

package/dist/lib/auth/oauth/server.js

@@ -0,0 +1,76 @@
+import { jsx as _jsx } from "preact/jsx-runtime";
+import * as p from "@clack/prompts";
+import { createServer } from "node:http";
+import { renderToString } from "preact-render-to-string";
+import { oAuthClient } from "./client.js";
+import { LOOPBACK_HOST, LOOPBACK_PORT } from "./constants.js";
+import { CallbackPage } from "./pages/CallbackPage.js";
+import { PickerPage } from "./pages/PickerPage.js";
+const createCallbackServer = ({ state, nonce, codeVerifier, authorizeUrl, onSuccess, onError, }) => createServer(async (req, res) => {
+    const url = req.url ?? "/";
+    const path = url.split("?")[0];
+    if (path === "/" || path === "/login") {
+        if (authorizeUrl) {
+            res.writeHead(200, { "Content-Type": "text/html" });
+            res.end(renderToString(_jsx(PickerPage, { authorizeUrlEscaped: authorizeUrl })));
+            return;
+        }
+        p.log.message(`Ignoring request to ${url}`);
+        res.writeHead(404).end();
+        return;
+    }
+    if (!url.startsWith("/callback")) {
+        p.log.message(`Ignoring request to ${url}`);
+        res.writeHead(404).end();
+        return;
+    }
+    try {
+        const tokens = await oAuthClient.exchangeAuthorizationCode({
+            url: new URL(url, `http://${req.headers.host}`),
+            codeVerifier,
+            state,
+            nonce,
+        });
+        const sub = tokens.claims()?.sub;
+        if (!sub || !tokens.refresh_token) {
+            throw new Error("ID token did not contain sub");
+        }
+        const stored = {
+            access_token: tokens.access_token,
+            refresh_token: tokens.refresh_token,
+            expires_at: oAuthClient.getExpiresAt(tokens.expires_in ?? 0),
+            sub,
+        };
+        p.log.success("✅ Authentication successful");
+        res.writeHead(200, { "Content-Type": "text/html" });
+        res.end(renderToString(_jsx(CallbackPage, { title: "Logged in", body: "You can close this window.", success: true })));
+        onSuccess(stored);
+    }
+    catch (e) {
+        p.log.error(e instanceof Error ? e.message : String(e));
+        res.writeHead(500, { "Content-Type": "text/html" });
+        res.end(renderToString(_jsx(CallbackPage, { title: "Login failed", body: "Token exchange error. Try again.", success: false })));
+        onError(e instanceof Error ? e : new Error(String(e)));
+    }
+});
+export const getLoginPageUrl = () => `http://${LOOPBACK_HOST}:${LOOPBACK_PORT}/`;
+export const listenToOAuthCallback = ({ state, nonce, codeVerifier, authorizeUrl, }) => {
+    return new Promise((resolve, reject) => {
+        const callbackServer = createCallbackServer({
+            state,
+            nonce,
+            codeVerifier,
+            authorizeUrl,
+            onSuccess: (storedToken) => {
+                callbackServer.close();
+                resolve(storedToken);
+            },
+            onError: (err) => {
+                callbackServer.close();
+                reject(err);
+            },
+        });
+        callbackServer.listen(LOOPBACK_PORT, LOOPBACK_HOST);
+    });
+};
+//# sourceMappingURL=server.js.map

package/dist/lib/auth/oauth/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../../src/lib/auth/oauth/server.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAA6C,YAAY,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,oBAAoB,GAAG,CAAC,EAC5B,KAAK,EACL,KAAK,EACL,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,OAAO,GAQR,EAAE,EAAE,CACH,YAAY,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;IAC/D,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,IAAI,YAAY,EAAE,CAAC;YACjB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,KAAC,UAAU,IAAC,mBAAmB,EAAE,YAAY,GAAI,CAAC,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QACD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAC5C,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAC5C,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,yBAAyB,CAAC;YACzD,GAAG,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/C,YAAY;YACZ,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC;QACjC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,MAAM,GAAgB;YAC1B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,UAAU,EAAE,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;YAC5D,GAAG;SACJ,CAAC;QACF,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,KAAC,YAAY,IAAC,KAAK,EAAC,WAAW,EAAC,IAAI,EAAC,4BAA4B,EAAC,OAAO,EAAE,IAAI,GAAI,CAAC,CAAC,CAAC;QAC7G,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,GAAG,CACL,cAAc,CAAC,KAAC,YAAY,IAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,kCAAkC,EAAC,OAAO,EAAE,KAAK,GAAI,CAAC,CAC9G,CAAC;QACF,OAAO,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,aAAa,IAAI,aAAa,GAAG,CAAC;AAEjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EACpC,KAAK,EACL,KAAK,EACL,YAAY,EACZ,YAAY,GAMb,EAAE,EAAE;IACH,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClD,MAAM,cAAc,GAAG,oBAAoB,CAAC;YAC1C,KAAK;YACL,KAAK;YACL,YAAY;YACZ,YAAY;YACZ,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE;gBACzB,cAAc,CAAC,KAAK,EAAE,CAAC;gBACvB,OAAO,CAAC,WAAW,CAAC,CAAC;YACvB,CAAC;YACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,cAAc,CAAC,KAAK,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QACH,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/lib/auth/whoami.d.ts

@@ -0,0 +1,28 @@
+export type WhoamiInfo = {
+    method: "api_key";
+    team: {
+        id: string;
+        name: string;
+    };
+} | {
+    method: "oauth";
+    email: string;
+    name: string;
+} | null;
+export declare function getWhoamiInfo(): Promise<{
+    method: string;
+    team: {
+        id: string;
+        name: string;
+        createdAt: Date;
+        hasStripeAccount: boolean;
+        hasActiveSubscription: boolean;
+    } | undefined;
+    email?: undefined;
+    name?: undefined;
+} | {
+    method: string;
+    email: string | undefined;
+    name: string | undefined;
+    team?: undefined;
+} | null>;

package/dist/lib/auth/whoami.js

@@ -0,0 +1,35 @@
+import { api } from "../../api.js";
+import { oAuthClient } from "./oauth/client.js";
+export async function getWhoamiInfo() {
+    if (process.env.ALPIC_API_KEY !== undefined) {
+        const team = await getApiKeyTeam();
+        return {
+            method: "api_key",
+            team,
+        };
+    }
+    const token = await oAuthClient.getValidAccessToken();
+    if (!token)
+        return null;
+    const userInfo = await fetchOAuthUserInfo(token);
+    if (!userInfo)
+        return null;
+    return {
+        method: "oauth",
+        email: userInfo.email,
+        name: userInfo.name,
+    };
+}
+async function fetchOAuthUserInfo(credentials) {
+    try {
+        return await oAuthClient.fetchUserInfo(credentials);
+    }
+    catch {
+        return null;
+    }
+}
+async function getApiKeyTeam() {
+    const teams = await api.teams.list.v1();
+    return teams[0];
+}
+//# sourceMappingURL=whoami.js.map

package/dist/lib/auth/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../../src/lib/auth/whoami.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAOhD,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;QACnC,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,IAAI;SACL,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,mBAAmB,EAAE,CAAC;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,OAAO;QACL,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,WAAwB;IACxD,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IACxC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/lib/deployment.d.ts

@@ -1,10 +1,8 @@
 import type { RouterOutput } from "@alpic-ai/api";
 export declare function formatElapsed(ms: number): string;
-export declare function deployAndWait({ initial, startedAt, teamId, projectId, }: {
+export declare function deployAndWait({ initial, startedAt, }: {
     initial: RouterOutput["deployments"]["get"]["v1"];
     startedAt: number;
-    teamId: string;
-    projectId: string;
 }): Promise<{
     deployment: {
         id: string;
@@ -16,6 +14,7 @@ export declare function deployAndWait({ initial, startedAt, teamId, projectId, }
         authorAvatarUrl: string | null;
         startedAt: Date | null;
         completedAt: Date | null;
+        deploymentPageUrl: string | null;
     };
     elapsedMs: number;
 }>;