@agimon-ai/doompi-core 0.0.1-alpha.70

package/dist/services/transcriptPages/index.cjs

@@ -0,0 +1,74 @@
+//#region src/services/transcriptPages/index.ts
+const PAGE_SIZE = 100;
+function transcriptCursor(sessionId, lane, generation, seq) {
+	return Buffer.from(JSON.stringify([
+		sessionId,
+		lane,
+		generation,
+		seq
+	])).toString("base64url");
+}
+/** Branch-relative keyset reads never materialize the complete conversation. */
+async function readTranscriptPage(runtime, request, generation, context) {
+	const limit = request.limit ?? PAGE_SIZE;
+	if (!Number.isInteger(limit) || limit < 1 || limit > PAGE_SIZE) throw new Error("Transcript page limit must be between 1 and 100");
+	const newer = request.direction === "newer";
+	if (request.direction !== void 0 && !["older", "newer"].includes(request.direction)) throw new Error("Invalid transcript direction");
+	let seq;
+	if (request.cursor !== void 0) {
+		if (typeof request.cursor !== "string" || request.cursor.length > 1024) throw new Error("Invalid transcript cursor");
+		let cursor;
+		try {
+			cursor = JSON.parse(Buffer.from(request.cursor, "base64url").toString("utf8"));
+		} catch {
+			throw new Error("Invalid transcript cursor");
+		}
+		if (!Array.isArray(cursor) || cursor.length !== 4 || cursor[0] !== runtime.sessionId || cursor[1] !== runtime.laneName || !Number.isSafeInteger(cursor[3]) || cursor[3] < 0) throw new Error("Invalid transcript cursor");
+		if (cursor[2] !== generation) throw new Error("STALE_TRANSCRIPT_CURSOR");
+		seq = cursor[3];
+	} else if (newer) throw new Error("Loading newer entries requires a cursor");
+	const tip = await runtime.lane.getTipId(context);
+	if (!tip) return {
+		entries: [],
+		context: [],
+		startCursor: null,
+		endCursor: null,
+		olderCursor: null,
+		newerCursor: null,
+		generation
+	};
+	const rows = await runtime.lane.findEntries({
+		start: tip,
+		order: newer ? "oldestFirst" : "newestFirst",
+		limit: limit + 1,
+		...seq === void 0 ? {} : { cursor: { seq } }
+	}, context);
+	const more = rows.length > limit;
+	const entries = rows.slice(0, limit);
+	if (!newer) entries.reverse();
+	const encode = (position) => transcriptCursor(runtime.sessionId, runtime.laneName, generation, position);
+	const first = entries[0];
+	const last = entries.at(-1);
+	const identities = first ? await runtime.lane.findEntries({
+		start: tip,
+		type: "custom",
+		customType: "doom-profile-identity",
+		order: "newestFirst",
+		limit: 1,
+		cursor: { seq: first.seq }
+	}, context) : [];
+	return {
+		entries: JSON.parse(JSON.stringify(entries)),
+		context: JSON.parse(JSON.stringify(identities)),
+		startCursor: first ? encode(first.seq) : null,
+		endCursor: last ? encode(last.seq) : null,
+		olderCursor: first && (newer ? seq !== void 0 : more) ? encode(first.seq) : null,
+		newerCursor: last && (newer ? more : seq !== void 0) ? encode(last.seq) : null,
+		generation
+	};
+}
+//#endregion
+exports.readTranscriptPage = readTranscriptPage;
+exports.transcriptCursor = transcriptCursor;
+
+//# sourceMappingURL=index.cjs.map

package/dist/services/transcriptPages/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../src/services/transcriptPages/index.ts"],"sourcesContent":["import type { Context } from '@earendil-works/chord';\n\nimport type { JsonValue, TranscriptPage, TranscriptPageRequest } from '../../exports/sessionProtocol';\nimport type { DirectHarnessRuntime } from '../../types/server/directHarnessRuntime';\n\nconst PAGE_SIZE = 100;\n\nexport function transcriptCursor(sessionId: string, lane: string, generation: number, seq: number): string {\n  return Buffer.from(JSON.stringify([sessionId, lane, generation, seq])).toString('base64url');\n}\n\n/** Branch-relative keyset reads never materialize the complete conversation. */\nexport async function readTranscriptPage(\n  runtime: Pick<DirectHarnessRuntime, 'sessionId' | 'laneName'> & {\n    lane: Pick<DirectHarnessRuntime['lane'], 'getTipId' | 'findEntries'>;\n  },\n  request: TranscriptPageRequest,\n  generation: number,\n  context: Context,\n): Promise<Omit<TranscriptPage, 'revision' | 'drafts'>> {\n  const limit = request.limit ?? PAGE_SIZE;\n  if (!Number.isInteger(limit) || limit < 1 || limit > PAGE_SIZE)\n    throw new Error('Transcript page limit must be between 1 and 100');\n  const newer = request.direction === 'newer';\n  if (request.direction !== undefined && !['older', 'newer'].includes(request.direction))\n    throw new Error('Invalid transcript direction');\n  let seq: number | undefined;\n  if (request.cursor !== undefined) {\n    if (typeof request.cursor !== 'string' || request.cursor.length > 1024)\n      throw new Error('Invalid transcript cursor');\n    let cursor: unknown;\n    try {\n      cursor = JSON.parse(Buffer.from(request.cursor, 'base64url').toString('utf8'));\n    } catch {\n      throw new Error('Invalid transcript cursor');\n    }\n    if (\n      !Array.isArray(cursor) ||\n      cursor.length !== 4 ||\n      cursor[0] !== runtime.sessionId ||\n      cursor[1] !== runtime.laneName ||\n      !Number.isSafeInteger(cursor[3]) ||\n      cursor[3] < 0\n    )\n      throw new Error('Invalid transcript cursor');\n    if (cursor[2] !== generation) throw new Error('STALE_TRANSCRIPT_CURSOR');\n    seq = cursor[3] as number;\n  } else if (newer) throw new Error('Loading newer entries requires a cursor');\n  const tip = await runtime.lane.getTipId(context);\n  if (!tip)\n    return {\n      entries: [],\n      context: [],\n      startCursor: null,\n      endCursor: null,\n      olderCursor: null,\n      newerCursor: null,\n      generation,\n    };\n  const rows = await runtime.lane.findEntries(\n    {\n      start: tip,\n      order: newer ? 'oldestFirst' : 'newestFirst',\n      limit: limit + 1,\n      ...(seq === undefined ? {} : { cursor: { seq } }),\n    },\n    context,\n  );\n  const more = rows.length > limit;\n  const entries = rows.slice(0, limit);\n  if (!newer) entries.reverse();\n  const encode = (position: number): string =>\n    transcriptCursor(runtime.sessionId, runtime.laneName, generation, position);\n  const first = entries[0];\n  const last = entries.at(-1);\n  const identities = first\n    ? await runtime.lane.findEntries(\n        {\n          start: tip,\n          type: 'custom',\n          customType: 'doom-profile-identity',\n          order: 'newestFirst',\n          limit: 1,\n          cursor: { seq: first.seq },\n        },\n        context,\n      )\n    : [];\n  return {\n    entries: JSON.parse(JSON.stringify(entries)) as JsonValue[],\n    context: JSON.parse(JSON.stringify(identities)) as JsonValue[],\n    startCursor: first ? encode(first.seq) : null,\n    endCursor: last ? encode(last.seq) : null,\n    olderCursor: first && (newer ? seq !== undefined : more) ? encode(first.seq) : null,\n    newerCursor: last && (newer ? more : seq !== undefined) ? encode(last.seq) : null,\n    generation,\n  };\n}\n"],"mappings":";AAKA,MAAM,YAAY;AAElB,SAAgB,iBAAiB,WAAmB,MAAc,YAAoB,KAAqB;CACzG,OAAO,OAAO,KAAK,KAAK,UAAU;EAAC;EAAW;EAAM;EAAY;CAAG,CAAC,CAAC,CAAC,CAAC,SAAS,WAAW;AAC7F;;AAGA,eAAsB,mBACpB,SAGA,SACA,YACA,SACsD;CACtD,MAAM,QAAQ,QAAQ,SAAS;CAC/B,IAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,WACnD,MAAM,IAAI,MAAM,iDAAiD;CACnE,MAAM,QAAQ,QAAQ,cAAc;CACpC,IAAI,QAAQ,cAAc,KAAA,KAAa,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,SAAS,QAAQ,SAAS,GACnF,MAAM,IAAI,MAAM,8BAA8B;CAChD,IAAI;CACJ,IAAI,QAAQ,WAAW,KAAA,GAAW;EAChC,IAAI,OAAO,QAAQ,WAAW,YAAY,QAAQ,OAAO,SAAS,MAChE,MAAM,IAAI,MAAM,2BAA2B;EAC7C,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EAC/E,QAAQ;GACN,MAAM,IAAI,MAAM,2BAA2B;EAC7C;EACA,IACE,CAAC,MAAM,QAAQ,MAAM,KACrB,OAAO,WAAW,KAClB,OAAO,OAAO,QAAQ,aACtB,OAAO,OAAO,QAAQ,YACtB,CAAC,OAAO,cAAc,OAAO,EAAE,KAC/B,OAAO,KAAK,GAEZ,MAAM,IAAI,MAAM,2BAA2B;EAC7C,IAAI,OAAO,OAAO,YAAY,MAAM,IAAI,MAAM,yBAAyB;EACvE,MAAM,OAAO;CACf,OAAO,IAAI,OAAO,MAAM,IAAI,MAAM,yCAAyC;CAC3E,MAAM,MAAM,MAAM,QAAQ,KAAK,SAAS,OAAO;CAC/C,IAAI,CAAC,KACH,OAAO;EACL,SAAS,CAAC;EACV,SAAS,CAAC;EACV,aAAa;EACb,WAAW;EACX,aAAa;EACb,aAAa;EACb;CACF;CACF,MAAM,OAAO,MAAM,QAAQ,KAAK,YAC9B;EACE,OAAO;EACP,OAAO,QAAQ,gBAAgB;EAC/B,OAAO,QAAQ;EACf,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;CACjD,GACA,OACF;CACA,MAAM,OAAO,KAAK,SAAS;CAC3B,MAAM,UAAU,KAAK,MAAM,GAAG,KAAK;CACnC,IAAI,CAAC,OAAO,QAAQ,QAAQ;CAC5B,MAAM,UAAU,aACd,iBAAiB,QAAQ,WAAW,QAAQ,UAAU,YAAY,QAAQ;CAC5E,MAAM,QAAQ,QAAQ;CACtB,MAAM,OAAO,QAAQ,GAAG,EAAE;CAC1B,MAAM,aAAa,QACf,MAAM,QAAQ,KAAK,YACjB;EACE,OAAO;EACP,MAAM;EACN,YAAY;EACZ,OAAO;EACP,OAAO;EACP,QAAQ,EAAE,KAAK,MAAM,IAAI;CAC3B,GACA,OACF,IACA,CAAC;CACL,OAAO;EACL,SAAS,KAAK,MAAM,KAAK,UAAU,OAAO,CAAC;EAC3C,SAAS,KAAK,MAAM,KAAK,UAAU,UAAU,CAAC;EAC9C,aAAa,QAAQ,OAAO,MAAM,GAAG,IAAI;EACzC,WAAW,OAAO,OAAO,KAAK,GAAG,IAAI;EACrC,aAAa,UAAU,QAAQ,QAAQ,KAAA,IAAY,QAAQ,OAAO,MAAM,GAAG,IAAI;EAC/E,aAAa,SAAS,QAAQ,OAAO,QAAQ,KAAA,KAAa,OAAO,KAAK,GAAG,IAAI;EAC7E;CACF;AACF"}

package/dist/services/transcriptPages/index.mjs

@@ -0,0 +1,73 @@
+//#region src/services/transcriptPages/index.ts
+const PAGE_SIZE = 100;
+function transcriptCursor(sessionId, lane, generation, seq) {
+	return Buffer.from(JSON.stringify([
+		sessionId,
+		lane,
+		generation,
+		seq
+	])).toString("base64url");
+}
+/** Branch-relative keyset reads never materialize the complete conversation. */
+async function readTranscriptPage(runtime, request, generation, context) {
+	const limit = request.limit ?? PAGE_SIZE;
+	if (!Number.isInteger(limit) || limit < 1 || limit > PAGE_SIZE) throw new Error("Transcript page limit must be between 1 and 100");
+	const newer = request.direction === "newer";
+	if (request.direction !== void 0 && !["older", "newer"].includes(request.direction)) throw new Error("Invalid transcript direction");
+	let seq;
+	if (request.cursor !== void 0) {
+		if (typeof request.cursor !== "string" || request.cursor.length > 1024) throw new Error("Invalid transcript cursor");
+		let cursor;
+		try {
+			cursor = JSON.parse(Buffer.from(request.cursor, "base64url").toString("utf8"));
+		} catch {
+			throw new Error("Invalid transcript cursor");
+		}
+		if (!Array.isArray(cursor) || cursor.length !== 4 || cursor[0] !== runtime.sessionId || cursor[1] !== runtime.laneName || !Number.isSafeInteger(cursor[3]) || cursor[3] < 0) throw new Error("Invalid transcript cursor");
+		if (cursor[2] !== generation) throw new Error("STALE_TRANSCRIPT_CURSOR");
+		seq = cursor[3];
+	} else if (newer) throw new Error("Loading newer entries requires a cursor");
+	const tip = await runtime.lane.getTipId(context);
+	if (!tip) return {
+		entries: [],
+		context: [],
+		startCursor: null,
+		endCursor: null,
+		olderCursor: null,
+		newerCursor: null,
+		generation
+	};
+	const rows = await runtime.lane.findEntries({
+		start: tip,
+		order: newer ? "oldestFirst" : "newestFirst",
+		limit: limit + 1,
+		...seq === void 0 ? {} : { cursor: { seq } }
+	}, context);
+	const more = rows.length > limit;
+	const entries = rows.slice(0, limit);
+	if (!newer) entries.reverse();
+	const encode = (position) => transcriptCursor(runtime.sessionId, runtime.laneName, generation, position);
+	const first = entries[0];
+	const last = entries.at(-1);
+	const identities = first ? await runtime.lane.findEntries({
+		start: tip,
+		type: "custom",
+		customType: "doom-profile-identity",
+		order: "newestFirst",
+		limit: 1,
+		cursor: { seq: first.seq }
+	}, context) : [];
+	return {
+		entries: JSON.parse(JSON.stringify(entries)),
+		context: JSON.parse(JSON.stringify(identities)),
+		startCursor: first ? encode(first.seq) : null,
+		endCursor: last ? encode(last.seq) : null,
+		olderCursor: first && (newer ? seq !== void 0 : more) ? encode(first.seq) : null,
+		newerCursor: last && (newer ? more : seq !== void 0) ? encode(last.seq) : null,
+		generation
+	};
+}
+//#endregion
+export { readTranscriptPage, transcriptCursor };
+
+//# sourceMappingURL=index.mjs.map

package/dist/services/transcriptPages/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/services/transcriptPages/index.ts"],"sourcesContent":["import type { Context } from '@earendil-works/chord';\n\nimport type { JsonValue, TranscriptPage, TranscriptPageRequest } from '../../exports/sessionProtocol';\nimport type { DirectHarnessRuntime } from '../../types/server/directHarnessRuntime';\n\nconst PAGE_SIZE = 100;\n\nexport function transcriptCursor(sessionId: string, lane: string, generation: number, seq: number): string {\n  return Buffer.from(JSON.stringify([sessionId, lane, generation, seq])).toString('base64url');\n}\n\n/** Branch-relative keyset reads never materialize the complete conversation. */\nexport async function readTranscriptPage(\n  runtime: Pick<DirectHarnessRuntime, 'sessionId' | 'laneName'> & {\n    lane: Pick<DirectHarnessRuntime['lane'], 'getTipId' | 'findEntries'>;\n  },\n  request: TranscriptPageRequest,\n  generation: number,\n  context: Context,\n): Promise<Omit<TranscriptPage, 'revision' | 'drafts'>> {\n  const limit = request.limit ?? PAGE_SIZE;\n  if (!Number.isInteger(limit) || limit < 1 || limit > PAGE_SIZE)\n    throw new Error('Transcript page limit must be between 1 and 100');\n  const newer = request.direction === 'newer';\n  if (request.direction !== undefined && !['older', 'newer'].includes(request.direction))\n    throw new Error('Invalid transcript direction');\n  let seq: number | undefined;\n  if (request.cursor !== undefined) {\n    if (typeof request.cursor !== 'string' || request.cursor.length > 1024)\n      throw new Error('Invalid transcript cursor');\n    let cursor: unknown;\n    try {\n      cursor = JSON.parse(Buffer.from(request.cursor, 'base64url').toString('utf8'));\n    } catch {\n      throw new Error('Invalid transcript cursor');\n    }\n    if (\n      !Array.isArray(cursor) ||\n      cursor.length !== 4 ||\n      cursor[0] !== runtime.sessionId ||\n      cursor[1] !== runtime.laneName ||\n      !Number.isSafeInteger(cursor[3]) ||\n      cursor[3] < 0\n    )\n      throw new Error('Invalid transcript cursor');\n    if (cursor[2] !== generation) throw new Error('STALE_TRANSCRIPT_CURSOR');\n    seq = cursor[3] as number;\n  } else if (newer) throw new Error('Loading newer entries requires a cursor');\n  const tip = await runtime.lane.getTipId(context);\n  if (!tip)\n    return {\n      entries: [],\n      context: [],\n      startCursor: null,\n      endCursor: null,\n      olderCursor: null,\n      newerCursor: null,\n      generation,\n    };\n  const rows = await runtime.lane.findEntries(\n    {\n      start: tip,\n      order: newer ? 'oldestFirst' : 'newestFirst',\n      limit: limit + 1,\n      ...(seq === undefined ? {} : { cursor: { seq } }),\n    },\n    context,\n  );\n  const more = rows.length > limit;\n  const entries = rows.slice(0, limit);\n  if (!newer) entries.reverse();\n  const encode = (position: number): string =>\n    transcriptCursor(runtime.sessionId, runtime.laneName, generation, position);\n  const first = entries[0];\n  const last = entries.at(-1);\n  const identities = first\n    ? await runtime.lane.findEntries(\n        {\n          start: tip,\n          type: 'custom',\n          customType: 'doom-profile-identity',\n          order: 'newestFirst',\n          limit: 1,\n          cursor: { seq: first.seq },\n        },\n        context,\n      )\n    : [];\n  return {\n    entries: JSON.parse(JSON.stringify(entries)) as JsonValue[],\n    context: JSON.parse(JSON.stringify(identities)) as JsonValue[],\n    startCursor: first ? encode(first.seq) : null,\n    endCursor: last ? encode(last.seq) : null,\n    olderCursor: first && (newer ? seq !== undefined : more) ? encode(first.seq) : null,\n    newerCursor: last && (newer ? more : seq !== undefined) ? encode(last.seq) : null,\n    generation,\n  };\n}\n"],"mappings":";AAKA,MAAM,YAAY;AAElB,SAAgB,iBAAiB,WAAmB,MAAc,YAAoB,KAAqB;CACzG,OAAO,OAAO,KAAK,KAAK,UAAU;EAAC;EAAW;EAAM;EAAY;CAAG,CAAC,CAAC,CAAC,CAAC,SAAS,WAAW;AAC7F;;AAGA,eAAsB,mBACpB,SAGA,SACA,YACA,SACsD;CACtD,MAAM,QAAQ,QAAQ,SAAS;CAC/B,IAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,WACnD,MAAM,IAAI,MAAM,iDAAiD;CACnE,MAAM,QAAQ,QAAQ,cAAc;CACpC,IAAI,QAAQ,cAAc,KAAA,KAAa,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,SAAS,QAAQ,SAAS,GACnF,MAAM,IAAI,MAAM,8BAA8B;CAChD,IAAI;CACJ,IAAI,QAAQ,WAAW,KAAA,GAAW;EAChC,IAAI,OAAO,QAAQ,WAAW,YAAY,QAAQ,OAAO,SAAS,MAChE,MAAM,IAAI,MAAM,2BAA2B;EAC7C,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EAC/E,QAAQ;GACN,MAAM,IAAI,MAAM,2BAA2B;EAC7C;EACA,IACE,CAAC,MAAM,QAAQ,MAAM,KACrB,OAAO,WAAW,KAClB,OAAO,OAAO,QAAQ,aACtB,OAAO,OAAO,QAAQ,YACtB,CAAC,OAAO,cAAc,OAAO,EAAE,KAC/B,OAAO,KAAK,GAEZ,MAAM,IAAI,MAAM,2BAA2B;EAC7C,IAAI,OAAO,OAAO,YAAY,MAAM,IAAI,MAAM,yBAAyB;EACvE,MAAM,OAAO;CACf,OAAO,IAAI,OAAO,MAAM,IAAI,MAAM,yCAAyC;CAC3E,MAAM,MAAM,MAAM,QAAQ,KAAK,SAAS,OAAO;CAC/C,IAAI,CAAC,KACH,OAAO;EACL,SAAS,CAAC;EACV,SAAS,CAAC;EACV,aAAa;EACb,WAAW;EACX,aAAa;EACb,aAAa;EACb;CACF;CACF,MAAM,OAAO,MAAM,QAAQ,KAAK,YAC9B;EACE,OAAO;EACP,OAAO,QAAQ,gBAAgB;EAC/B,OAAO,QAAQ;EACf,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;CACjD,GACA,OACF;CACA,MAAM,OAAO,KAAK,SAAS;CAC3B,MAAM,UAAU,KAAK,MAAM,GAAG,KAAK;CACnC,IAAI,CAAC,OAAO,QAAQ,QAAQ;CAC5B,MAAM,UAAU,aACd,iBAAiB,QAAQ,WAAW,QAAQ,UAAU,YAAY,QAAQ;CAC5E,MAAM,QAAQ,QAAQ;CACtB,MAAM,OAAO,QAAQ,GAAG,EAAE;CAC1B,MAAM,aAAa,QACf,MAAM,QAAQ,KAAK,YACjB;EACE,OAAO;EACP,MAAM;EACN,YAAY;EACZ,OAAO;EACP,OAAO;EACP,QAAQ,EAAE,KAAK,MAAM,IAAI;CAC3B,GACA,OACF,IACA,CAAC;CACL,OAAO;EACL,SAAS,KAAK,MAAM,KAAK,UAAU,OAAO,CAAC;EAC3C,SAAS,KAAK,MAAM,KAAK,UAAU,UAAU,CAAC;EAC9C,aAAa,QAAQ,OAAO,MAAM,GAAG,IAAI;EACzC,WAAW,OAAO,OAAO,KAAK,GAAG,IAAI;EACrC,aAAa,UAAU,QAAQ,QAAQ,KAAA,IAAY,QAAQ,OAAO,MAAM,GAAG,IAAI;EAC/E,aAAa,SAAS,QAAQ,OAAO,QAAQ,KAAA,KAAa,OAAO,KAAK,GAAG,IAAI;EAC7E;CACF;AACF"}

package/dist/services/tunnelOutput/index.cjs

@@ -0,0 +1,58 @@
+//#region src/services/tunnelOutput/index.ts
+/**
+* A trycloudflare hostname, and nothing that merely ends near one.
+*
+* The trailing lookahead is the whole point. Without it,
+* `https://evil.trycloudflare.com.attacker.tld` printed by a confused or
+* hostile process would match, and the extracted value becomes the origin the
+* guard then trusts for every subsequent request.
+*/
+const QUICK_TUNNEL_URL = /https:\/\/[a-z0-9][a-z0-9-]*(?:\.[a-z0-9-]+)*\.trycloudflare\.com(?![a-z0-9.-])/iu;
+/** Cloudflare reports a connection registered; readiness waits for this as well as a URL. */
+const CONNECTION_READY = /registered tunnel connection|connection .* registered/iu;
+function tunnelTarget(port) {
+	return `http://127.0.0.1:${String(port)}`;
+}
+/**
+* The cloudflared argument vector.
+*
+* `--url` is a flag on the `tunnel` command rather than on `run`, so it comes
+* before the subcommand in both shapes. `--token-file` belongs to `run`.
+*
+* Flag placement here follows cloudflared's documented usage and local help.
+*/
+function tunnelArgs(config, port, tokenFile) {
+	const args = ["tunnel", "--no-autoupdate"];
+	if (config.kind === "named" && config.configFile !== void 0) args.push("--config", config.configFile);
+	args.push("--url", tunnelTarget(port));
+	if (config.kind === "quick") return args;
+	args.push("run");
+	if (tokenFile !== void 0 && tokenFile !== "") args.push("--token-file", tokenFile);
+	if (config.name !== void 0) args.push(config.name);
+	return args;
+}
+/** The public origin a quick tunnel announced, or undefined if this output does not carry one. */
+function extractTunnelUrl(text) {
+	return QUICK_TUNNEL_URL.exec(text)?.[0].toLowerCase();
+}
+function mentionsRegisteredConnection(text) {
+	return CONNECTION_READY.test(text);
+}
+/** Operator-facing copy for a failure, with the cause appended by the caller. */
+function describeTunnelFailure(failure) {
+	switch (failure) {
+		case "not_installed": return "cloudflared is not installed. Install it (brew install cloudflared) or set DOOMPI_CLOUDFLARED.";
+		case "spawn_failed": return "cloudflared could not be started.";
+		case "timeout": return "cloudflared did not report a public URL in time.";
+		case "self_test_failed": return "The tunnel came up unguarded and was closed immediately.";
+		case "exited": return "cloudflared stopped on its own.";
+	}
+}
+//#endregion
+exports.describeTunnelFailure = describeTunnelFailure;
+exports.extractTunnelUrl = extractTunnelUrl;
+exports.mentionsRegisteredConnection = mentionsRegisteredConnection;
+exports.tunnelArgs = tunnelArgs;
+exports.tunnelTarget = tunnelTarget;
+
+//# sourceMappingURL=index.cjs.map

package/dist/services/tunnelOutput/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../src/services/tunnelOutput/index.ts"],"sourcesContent":["/**\n * Turning a tunnel configuration into a command line, and cloudflared's output\n * back into a public origin.\n *\n * The parsing half only exists for quick tunnels. A named tunnel is configured\n * with its hostname, so nothing has to be scraped and the origin is known\n * before the process starts. That difference is the strongest practical\n * argument for named mode: the banner cloudflared prints is an undocumented\n * detail of its logging, and a release that reformats it breaks quick mode\n * until the readiness deadline fires.\n */\n\nimport type { TunnelConfig, TunnelFailure } from '../../types/remote';\n\n/**\n * A trycloudflare hostname, and nothing that merely ends near one.\n *\n * The trailing lookahead is the whole point. Without it,\n * `https://evil.trycloudflare.com.attacker.tld` printed by a confused or\n * hostile process would match, and the extracted value becomes the origin the\n * guard then trusts for every subsequent request.\n */\nconst QUICK_TUNNEL_URL = /https:\\/\\/[a-z0-9][a-z0-9-]*(?:\\.[a-z0-9-]+)*\\.trycloudflare\\.com(?![a-z0-9.-])/iu;\n\n/** Cloudflare reports a connection registered; readiness waits for this as well as a URL. */\nconst CONNECTION_READY = /registered tunnel connection|connection .* registered/iu;\n\nexport function tunnelTarget(port: number): string {\n  return `http://127.0.0.1:${String(port)}`;\n}\n\n/**\n * The cloudflared argument vector.\n *\n * `--url` is a flag on the `tunnel` command rather than on `run`, so it comes\n * before the subcommand in both shapes. `--token-file` belongs to `run`.\n *\n * Flag placement here follows cloudflared's documented usage and local help.\n */\nexport function tunnelArgs(config: TunnelConfig, port: number, tokenFile?: string): string[] {\n  const args = ['tunnel', '--no-autoupdate'];\n  if (config.kind === 'named' && config.configFile !== undefined) args.push('--config', config.configFile);\n  args.push('--url', tunnelTarget(port));\n  if (config.kind === 'quick') return args;\n  args.push('run');\n  if (tokenFile !== undefined && tokenFile !== '') args.push('--token-file', tokenFile);\n  if (config.name !== undefined) args.push(config.name);\n  return args;\n}\n\n/** The public origin a quick tunnel announced, or undefined if this output does not carry one. */\nexport function extractTunnelUrl(text: string): string | undefined {\n  return QUICK_TUNNEL_URL.exec(text)?.[0].toLowerCase();\n}\n\nexport function mentionsRegisteredConnection(text: string): boolean {\n  return CONNECTION_READY.test(text);\n}\n\n/** Operator-facing copy for a failure, with the cause appended by the caller. */\nexport function describeTunnelFailure(failure: TunnelFailure): string {\n  switch (failure) {\n    case 'not_installed':\n      return 'cloudflared is not installed. Install it (brew install cloudflared) or set DOOMPI_CLOUDFLARED.';\n    case 'spawn_failed':\n      return 'cloudflared could not be started.';\n    case 'timeout':\n      return 'cloudflared did not report a public URL in time.';\n    case 'self_test_failed':\n      return 'The tunnel came up unguarded and was closed immediately.';\n    case 'exited':\n      return 'cloudflared stopped on its own.';\n  }\n}\n"],"mappings":";;;;;;;;;AAsBA,MAAM,mBAAmB;;AAGzB,MAAM,mBAAmB;AAEzB,SAAgB,aAAa,MAAsB;CACjD,OAAO,oBAAoB,OAAO,IAAI;AACxC;;;;;;;;;AAUA,SAAgB,WAAW,QAAsB,MAAc,WAA8B;CAC3F,MAAM,OAAO,CAAC,UAAU,iBAAiB;CACzC,IAAI,OAAO,SAAS,WAAW,OAAO,eAAe,KAAA,GAAW,KAAK,KAAK,YAAY,OAAO,UAAU;CACvG,KAAK,KAAK,SAAS,aAAa,IAAI,CAAC;CACrC,IAAI,OAAO,SAAS,SAAS,OAAO;CACpC,KAAK,KAAK,KAAK;CACf,IAAI,cAAc,KAAA,KAAa,cAAc,IAAI,KAAK,KAAK,gBAAgB,SAAS;CACpF,IAAI,OAAO,SAAS,KAAA,GAAW,KAAK,KAAK,OAAO,IAAI;CACpD,OAAO;AACT;;AAGA,SAAgB,iBAAiB,MAAkC;CACjE,OAAO,iBAAiB,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY;AACtD;AAEA,SAAgB,6BAA6B,MAAuB;CAClE,OAAO,iBAAiB,KAAK,IAAI;AACnC;;AAGA,SAAgB,sBAAsB,SAAgC;CACpE,QAAQ,SAAR;EACE,KAAK,iBACH,OAAO;EACT,KAAK,gBACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,oBACH,OAAO;EACT,KAAK,UACH,OAAO;CACX;AACF"}

package/dist/services/tunnelOutput/index.mjs

@@ -0,0 +1,54 @@
+//#region src/services/tunnelOutput/index.ts
+/**
+* A trycloudflare hostname, and nothing that merely ends near one.
+*
+* The trailing lookahead is the whole point. Without it,
+* `https://evil.trycloudflare.com.attacker.tld` printed by a confused or
+* hostile process would match, and the extracted value becomes the origin the
+* guard then trusts for every subsequent request.
+*/
+const QUICK_TUNNEL_URL = /https:\/\/[a-z0-9][a-z0-9-]*(?:\.[a-z0-9-]+)*\.trycloudflare\.com(?![a-z0-9.-])/iu;
+/** Cloudflare reports a connection registered; readiness waits for this as well as a URL. */
+const CONNECTION_READY = /registered tunnel connection|connection .* registered/iu;
+function tunnelTarget(port) {
+	return `http://127.0.0.1:${String(port)}`;
+}
+/**
+* The cloudflared argument vector.
+*
+* `--url` is a flag on the `tunnel` command rather than on `run`, so it comes
+* before the subcommand in both shapes. `--token-file` belongs to `run`.
+*
+* Flag placement here follows cloudflared's documented usage and local help.
+*/
+function tunnelArgs(config, port, tokenFile) {
+	const args = ["tunnel", "--no-autoupdate"];
+	if (config.kind === "named" && config.configFile !== void 0) args.push("--config", config.configFile);
+	args.push("--url", tunnelTarget(port));
+	if (config.kind === "quick") return args;
+	args.push("run");
+	if (tokenFile !== void 0 && tokenFile !== "") args.push("--token-file", tokenFile);
+	if (config.name !== void 0) args.push(config.name);
+	return args;
+}
+/** The public origin a quick tunnel announced, or undefined if this output does not carry one. */
+function extractTunnelUrl(text) {
+	return QUICK_TUNNEL_URL.exec(text)?.[0].toLowerCase();
+}
+function mentionsRegisteredConnection(text) {
+	return CONNECTION_READY.test(text);
+}
+/** Operator-facing copy for a failure, with the cause appended by the caller. */
+function describeTunnelFailure(failure) {
+	switch (failure) {
+		case "not_installed": return "cloudflared is not installed. Install it (brew install cloudflared) or set DOOMPI_CLOUDFLARED.";
+		case "spawn_failed": return "cloudflared could not be started.";
+		case "timeout": return "cloudflared did not report a public URL in time.";
+		case "self_test_failed": return "The tunnel came up unguarded and was closed immediately.";
+		case "exited": return "cloudflared stopped on its own.";
+	}
+}
+//#endregion
+export { describeTunnelFailure, extractTunnelUrl, mentionsRegisteredConnection, tunnelArgs, tunnelTarget };
+
+//# sourceMappingURL=index.mjs.map

package/dist/services/tunnelOutput/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/services/tunnelOutput/index.ts"],"sourcesContent":["/**\n * Turning a tunnel configuration into a command line, and cloudflared's output\n * back into a public origin.\n *\n * The parsing half only exists for quick tunnels. A named tunnel is configured\n * with its hostname, so nothing has to be scraped and the origin is known\n * before the process starts. That difference is the strongest practical\n * argument for named mode: the banner cloudflared prints is an undocumented\n * detail of its logging, and a release that reformats it breaks quick mode\n * until the readiness deadline fires.\n */\n\nimport type { TunnelConfig, TunnelFailure } from '../../types/remote';\n\n/**\n * A trycloudflare hostname, and nothing that merely ends near one.\n *\n * The trailing lookahead is the whole point. Without it,\n * `https://evil.trycloudflare.com.attacker.tld` printed by a confused or\n * hostile process would match, and the extracted value becomes the origin the\n * guard then trusts for every subsequent request.\n */\nconst QUICK_TUNNEL_URL = /https:\\/\\/[a-z0-9][a-z0-9-]*(?:\\.[a-z0-9-]+)*\\.trycloudflare\\.com(?![a-z0-9.-])/iu;\n\n/** Cloudflare reports a connection registered; readiness waits for this as well as a URL. */\nconst CONNECTION_READY = /registered tunnel connection|connection .* registered/iu;\n\nexport function tunnelTarget(port: number): string {\n  return `http://127.0.0.1:${String(port)}`;\n}\n\n/**\n * The cloudflared argument vector.\n *\n * `--url` is a flag on the `tunnel` command rather than on `run`, so it comes\n * before the subcommand in both shapes. `--token-file` belongs to `run`.\n *\n * Flag placement here follows cloudflared's documented usage and local help.\n */\nexport function tunnelArgs(config: TunnelConfig, port: number, tokenFile?: string): string[] {\n  const args = ['tunnel', '--no-autoupdate'];\n  if (config.kind === 'named' && config.configFile !== undefined) args.push('--config', config.configFile);\n  args.push('--url', tunnelTarget(port));\n  if (config.kind === 'quick') return args;\n  args.push('run');\n  if (tokenFile !== undefined && tokenFile !== '') args.push('--token-file', tokenFile);\n  if (config.name !== undefined) args.push(config.name);\n  return args;\n}\n\n/** The public origin a quick tunnel announced, or undefined if this output does not carry one. */\nexport function extractTunnelUrl(text: string): string | undefined {\n  return QUICK_TUNNEL_URL.exec(text)?.[0].toLowerCase();\n}\n\nexport function mentionsRegisteredConnection(text: string): boolean {\n  return CONNECTION_READY.test(text);\n}\n\n/** Operator-facing copy for a failure, with the cause appended by the caller. */\nexport function describeTunnelFailure(failure: TunnelFailure): string {\n  switch (failure) {\n    case 'not_installed':\n      return 'cloudflared is not installed. Install it (brew install cloudflared) or set DOOMPI_CLOUDFLARED.';\n    case 'spawn_failed':\n      return 'cloudflared could not be started.';\n    case 'timeout':\n      return 'cloudflared did not report a public URL in time.';\n    case 'self_test_failed':\n      return 'The tunnel came up unguarded and was closed immediately.';\n    case 'exited':\n      return 'cloudflared stopped on its own.';\n  }\n}\n"],"mappings":";;;;;;;;;AAsBA,MAAM,mBAAmB;;AAGzB,MAAM,mBAAmB;AAEzB,SAAgB,aAAa,MAAsB;CACjD,OAAO,oBAAoB,OAAO,IAAI;AACxC;;;;;;;;;AAUA,SAAgB,WAAW,QAAsB,MAAc,WAA8B;CAC3F,MAAM,OAAO,CAAC,UAAU,iBAAiB;CACzC,IAAI,OAAO,SAAS,WAAW,OAAO,eAAe,KAAA,GAAW,KAAK,KAAK,YAAY,OAAO,UAAU;CACvG,KAAK,KAAK,SAAS,aAAa,IAAI,CAAC;CACrC,IAAI,OAAO,SAAS,SAAS,OAAO;CACpC,KAAK,KAAK,KAAK;CACf,IAAI,cAAc,KAAA,KAAa,cAAc,IAAI,KAAK,KAAK,gBAAgB,SAAS;CACpF,IAAI,OAAO,SAAS,KAAA,GAAW,KAAK,KAAK,OAAO,IAAI;CACpD,OAAO;AACT;;AAGA,SAAgB,iBAAiB,MAAkC;CACjE,OAAO,iBAAiB,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY;AACtD;AAEA,SAAgB,6BAA6B,MAAuB;CAClE,OAAO,iBAAiB,KAAK,IAAI;AACnC;;AAGA,SAAgB,sBAAsB,SAAgC;CACpE,QAAQ,SAAR;EACE,KAAK,iBACH,OAAO;EACT,KAAK,gBACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,oBACH,OAAO;EACT,KAAK,UACH,OAAO;CACX;AACF"}