rb-portless 0.3.0.dev.20260630.fb5fc36 → 0.3.0.dev.20260630.7305b58

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ad245d30c0c47ba8ac0be15c5483524cedc6d2a6fffd30b4df35ad0904287af6
-  data.tar.gz: 64e421e608545dc03fa7ad75506cd473ae86cece15b90bc38395c03fa8db0bba
+  metadata.gz: 77efce157b70a56f16f260b04bfad49a83b55d1aa1c5367b8b24f4d596ce1541
+  data.tar.gz: 17f9a98ff52119a61fc2d770e7c3df451b3bdc39547f897f0e432b7b9fb2b57d
 SHA512:
-  metadata.gz: cf6f98facf2bc05067f832f1f865b18977a00b9cbd608189289d5c89284a2b887f1d056cbcf3c664ef5a5a4762808e30dea9c1b8f582e430750562ce8b3c3b4b
-  data.tar.gz: '02658fcdf8c2ad85e58a3d5cf71148dcbec8819adb2d0bc439ec06cb44aad599d5e84a0055804ce910374f72012720e758ed418a7ded1e25033f57760f433d13'
+  metadata.gz: f4e976fc65b4887516767d64b8d273066e8b03cfccebca66e762e473d8f77b6a441dd78b24ff4fe3a5485628e845ce904e8898a75e0e4db80e5d3852b9767869
+  data.tar.gz: e320411a2f3104a3ab3ab4f5c61cd7f41c423d4978a0e4b001fbf67554c008c7ea396da8950a0cd09928facaa192cb518d16cda6f97391b87a8f5387f7483b41

data/CHANGELOG.md

@@ -6,20 +6,8 @@ All notable changes to this project are documented here. The format follows
 
 ## [0.3.0]
 
-### Fixed / hardened
-
-- **Health probes can't hang.** Added a read timeout to the TLS and plain probes
-  so a port that accepts but never answers no longer blocks `discover_port`.
-
 ### Added
 
-- **Risky-TLD warning.** Warn when the configured `tld` ends in a real/reserved
-  TLD (`dev`, `app`, `local`, …) that could intercept live traffic.
-- **More tests** — health probes and privilege logic. (Verified manually, since
-  the Async proxy can't be driven in-process without deadlock: HTTP/HTTPS/HTTP-2
-  forwarding, wildcard routing, and the **WebSocket upgrade relay** / ActionCable.)
-
-
 - **Startup banner.** Running a dev server through rb-portless now prints a clear
   banner with the named URL(s) it's reachable at — not just `127.0.0.1:port`.
 - **Monorepo / multi-app.** A `portless.json` `apps` map runs several apps under
@@ -28,13 +16,7 @@ All notable changes to this project are documented here. The format follows
   detects the LAN IP, registers `<name>.local`, and publishes it over mDNS
   (`dns-sd`/`avahi-publish`). `--ip` overrides the detected address.
 - **Public sharing (experimental).** `--ngrok`, `--tailscale`, `--funnel` expose
-  the app via ngrok / your tailnet (their CLIs, installed separately). When a
-  tool is missing or unconfigured, print an **actionable** message (install link,
-  `ngrok config add-authtoken`, "enable HTTPS in your tailnet DNS settings",
-  "run `tailscale up`") rather than failing silently — mirroring portless. Tailscale is **non-destructive**: it reads
-  `tailscale serve status`, picks a free HTTPS port (never clobbering your
-  existing serve/funnel config), registers with `--yes`, and removes only the
-  port it created on exit — mirroring portless's port-conflict handling.
+  the app via ngrok / your tailnet. Degrade gracefully when the tool is absent.
 
 ## [0.2.0]
 

data/README.md

@@ -95,17 +95,7 @@ rb-portless run --ngrok bin/dev        # https://xxxx.ngrok.app
 rb-portless run --tailscale bin/dev    # your-machine.tailnet.ts.net
 rb-portless run --funnel bin/dev       # tailscale Funnel (public)
 ```
-
-These use the tools' own CLIs — **install them separately** (we don't bundle
-anything, same as portless), and each degrades gracefully if the tool is absent:
-- **ngrok** — install the `ngrok` CLI and configure an authtoken (free account).
-- **tailscale** — install `tailscale`, be logged into a tailnet, and enable HTTPS
-  certificates (and Funnel, for `--funnel`) in your tailnet settings.
-
-> **Your tailnet config is safe.** rb-portless reads `tailscale serve status`,
-> picks a **free** HTTPS port (never one you're already serving on), registers
-> with `--yes`, and on exit turns off **only the port it created** — it never
-> touches your existing `serve`/`funnel` setup.
+Each degrades gracefully if the tool isn't installed.
 
 ## Commands
 

data/lib/portless/config.rb

@@ -32,17 +32,6 @@ module Portless
       tld.split(".").include?(name) ? tld : "#{name}.#{tld}"
     end
 
-    # Real/reserved TLDs that can intercept live traffic or clash with mDNS.
-    RISKY_TLDS = %w[dev app page zip mov local].freeze
-
-    # A warning string if the tld looks risky, else nil. (.localhost / .test are safe.)
-    def tld_warning
-      last = tld.split(".").last
-      return unless RISKY_TLDS.include?(last)
-
-      "tld \".#{last}\" is a real/reserved TLD — prefer \".localhost\" so you don't intercept real traffic"
-    end
-
     def self.read_file(dir)
       json = File.join(dir, "portless.json")
       return JSON.parse(File.read(json)) if File.exist?(json)

data/lib/portless/health.rb

@@ -2,7 +2,6 @@
 
 require "socket"
 require "openssl"
-require "timeout"
 
 module Portless
   # "Is *our* proxy on this port?" — every proxied response carries the
@@ -27,8 +26,7 @@ module Portless
       ssl.sync_close = true
       ssl.connect
       ssl.write(REQUEST)
-      # Read timeout too — a port that accepts but never answers must not hang us.
-      marker?(Timeout.timeout(timeout) { ssl.read(4096) })
+      marker?(ssl.read(4096))
     rescue StandardError
       false
     ensure
@@ -40,7 +38,7 @@ module Portless
       Socket.tcp("127.0.0.1", port, connect_timeout: timeout) do |sock|
         sock.write(REQUEST)
         sock.close_write
-        marker?(Timeout.timeout(timeout) { sock.read(4096) })
+        marker?(sock.read(4096))
       end
     rescue StandardError
       false

data/lib/portless/runner.rb

@@ -21,7 +21,6 @@ module Portless
       command = Frameworks.inject(command, port) # --port/--host for vite/astro/etc.
       hostname = @config.hostname
 
-      warn "rb-portless: #{@config.tld_warning}" if @config.tld_warning
       ensure_trusted if @config.tls
       proxy_port = Daemon.ensure_running(tls: @config.tls)
       @route_store.add(hostname: hostname, port: port, pid: Process.pid, force: true)

data/lib/portless/share/ngrok.rb

@@ -16,10 +16,7 @@ module Portless
       API = "http://127.0.0.1:4040/api/tunnels"
 
       def start(hostname:, backend_port:)
-        unless Portless.which("ngrok")
-          warn "rb-portless: ngrok not found — install it (https://ngrok.com/download) to use --ngrok"
-          return nil
-        end
+        return nil unless Portless.which("ngrok")
 
         pid = Process.spawn("ngrok", "http", backend_port.to_s, "--host-header=#{hostname}",
                             out: File::NULL, err: File::NULL)
@@ -29,11 +26,9 @@ module Portless
           { pid: pid, url: url }
         else
           stop(pid: pid)
-          warn "rb-portless: ngrok didn't produce a public URL — is your authtoken set? (`ngrok config add-authtoken <token>`)"
           nil
         end
-      rescue StandardError => e
-        warn "rb-portless: ngrok failed (#{e.message})"
+      rescue StandardError
         nil
       end
 

data/lib/portless/share/tailscale.rb

@@ -5,121 +5,41 @@ require "json"
 module Portless
   module Share
     # Expose the local app on your tailnet (`serve`) or publicly (`funnel`) via
-    # the tailscale CLI. Returns { mode:, port:, url: } or nil. EXPERIMENTAL.
-    #
-    # SAFETY (mirrors portless's tailscale.ts): we never clobber your existing
-    # serve config — we read `tailscale serve status` for ports already in use
-    # and pick the first FREE one from the preferred list, register with `--yes`
-    # (no prompt), and on teardown turn off ONLY the port we registered.
+    # the tailscale CLI. Returns { mode:, url: } or nil. EXPERIMENTAL. Mirrors
+    # portless's tailscale.ts.
     module Tailscale
       module_function
 
-      PREFERRED_SERVE_PORTS = [ 443, 8443, 8444, 8445, 8446, 8447, 8448, 8449, 8450 ].freeze
-      FUNNEL_PORTS = [ 443, 8443, 10_000 ].freeze # Funnel supports only these
-
       def start(backend_port:, funnel: false)
-        unless Portless.which("tailscale")
-          warn "rb-portless: tailscale not found — install it (https://tailscale.com/download) to use --tailscale"
-          return nil
-        end
-
-        status = status_json
-        unless status
-          warn "rb-portless: tailscale isn't connected — run `tailscale up`, then retry"
-          return nil
-        end
-        unless capability?(status, "https")
-          warn "rb-portless: tailscale HTTPS certs aren't enabled — turn on HTTPS in your tailnet DNS settings"
-          return nil
-        end
-        if funnel && !capability?(status, "funnel")
-          warn "rb-portless: tailscale Funnel isn't enabled for this node — enable it, then retry --funnel"
-          return nil
-        end
+        return nil unless Portless.which("tailscale")
 
         mode = funnel ? "funnel" : "serve"
-        port = available_port(funnel: funnel)
-        unless port
-          warn "rb-portless: all tailscale Funnel ports are in use (443/8443/10000)"
-          return nil
-        end
-
-        unless system("tailscale", mode, "--bg", "--yes", "--https=#{port}",
-                      "http://127.0.0.1:#{backend_port}", out: File::NULL, err: File::NULL)
-          warn "rb-portless: `tailscale #{mode}` failed to register"
-          return nil
-        end
+        ok = system("tailscale", mode, "--bg", "--https=443", "http://127.0.0.1:#{backend_port}",
+                    out: File::NULL, err: File::NULL)
+        return nil unless ok
 
-        base = dns_name(status)
-        return (off(mode, port) and nil) unless base
-
-        { mode: mode, port: port, url: format_url(base, port) }
-      rescue StandardError => e
-        warn "rb-portless: tailscale sharing failed (#{e.message})"
+        url = magic_dns_url
+        url ? { mode: mode, url: url } : nil
+      rescue StandardError
         nil
       end
 
       def stop(handle)
         return unless handle && Portless.which("tailscale")
 
-        off(handle[:mode], handle[:port])
-      end
-
-      # Turn off ONLY the registration we created (scoped to our port).
-      def off(mode, port)
-        system("tailscale", mode, "--yes", "--https=#{port}", "off", out: File::NULL, err: File::NULL)
+        system("tailscale", handle[:mode], "--https=443", "off", out: File::NULL, err: File::NULL)
       rescue StandardError
         nil
       end
 
-      # First free HTTPS port from the preferred pool, never one already in use by
-      # the user's existing serve/funnel config. nil if the funnel pool is full.
-      def available_port(funnel:)
-        used = used_serve_ports
-        pool = funnel ? FUNNEL_PORTS : PREFERRED_SERVE_PORTS
-        free = pool.find { |port| !used.include?(port) }
-        return free if free
-        return nil if funnel
-
-        port = PREFERRED_SERVE_PORTS.last + 1
-        port += 1 while used.include?(port)
-        port
-      end
-
-      # HTTPS ports the user's current serve config already occupies.
-      def used_serve_ports
-        config = JSON.parse(`tailscale serve status --json 2>/dev/null`)
-        ports = []
-        (config["Web"] || {}).each_key { |host_port| ports << Regexp.last_match(1).to_i if host_port =~ /:(\d+)\z/ }
-        (config["TCP"] || {}).each_key { |port| ports << port.to_i }
-        ports
-      rescue StandardError
-        []
-      end
-
-      def status_json
+      # The machine's MagicDNS name → its tailnet HTTPS URL.
+      def magic_dns_url
         json = JSON.parse(`tailscale status --json 2>/dev/null`)
-        json.is_a?(Hash) ? json : nil
+        dns = json.dig("Self", "DNSName").to_s.chomp(".")
+        dns.empty? ? nil : "https://#{dns}"
       rescue StandardError
         nil
       end
-
-      def dns_name(status)
-        dns = status.dig("Self", "DNSName").to_s.chomp(".")
-        dns.empty? ? nil : "https://#{dns}"
-      end
-
-      # Does this node have the HTTPS / Funnel capability? (mirrors portless)
-      def capability?(status, name)
-        node = status["Self"] || {}
-        names = Array(node["Capabilities"]) + (node["CapMap"] || {}).keys
-        names.any? { |cap| down = cap.to_s.downcase; down == name || down.end_with?("/#{name}") }
-      end
-
-      def format_url(base, port)
-        base = base.chomp("/")
-        port == 443 ? base : "#{base}:#{port}"
-      end
     end
   end
 end

data/lib/portless/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Portless
-  VERSION = "0.3.0.dev.20260630.fb5fc36"
+  VERSION = "0.3.0.dev.20260630.7305b58"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rb-portless
 version: !ruby/object:Gem::Version
-  version: 0.3.0.dev.20260630.fb5fc36
+  version: 0.3.0.dev.20260630.7305b58
 platform: ruby
 authors:
 - David Afonso