@antseed/cli 0.1.154 → 0.1.155

package/dist/cli/commands/tunnel/index.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerTunnelCommands(program: Command): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/commands/tunnel/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAKxC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAK7D"}

package/dist/cli/commands/tunnel/index.js

@@ -0,0 +1,10 @@
+import { registerTunnelStartCommand } from './start.js';
+import { registerTunnelStatusCommand } from './status.js';
+import { registerTunnelStopCommand } from './stop.js';
+export function registerTunnelCommands(program) {
+    const tunnel = program.command('tunnel').description('Expose the buyer API through a secure public HTTPS tunnel');
+    registerTunnelStartCommand(tunnel);
+    registerTunnelStatusCommand(tunnel);
+    registerTunnelStopCommand(tunnel);
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/commands/tunnel/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAErD,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,2DAA2D,CAAC,CAAA;IACjH,0BAA0B,CAAC,MAAM,CAAC,CAAA;IAClC,2BAA2B,CAAC,MAAM,CAAC,CAAA;IACnC,yBAAyB,CAAC,MAAM,CAAC,CAAA;AACnC,CAAC"}

package/dist/cli/commands/tunnel/paths.d.ts

@@ -0,0 +1,4 @@
+export declare function tunnelDir(dataDir: string): string;
+export declare function tunnelPidFile(dataDir: string): string;
+export declare function tunnelStateFile(dataDir: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/cli/commands/tunnel/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/paths.ts"],"names":[],"mappings":"AAEA,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAmC;AACrF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAkD;AACxG,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAyD"}

package/dist/cli/commands/tunnel/paths.js

@@ -0,0 +1,5 @@
+import { join } from 'node:path';
+export function tunnelDir(dataDir) { return join(dataDir, 'tunnel'); }
+export function tunnelPidFile(dataDir) { return join(tunnelDir(dataDir), 'tunnel.pid'); }
+export function tunnelStateFile(dataDir) { return join(tunnelDir(dataDir), 'tunnel.state.json'); }
+//# sourceMappingURL=paths.js.map

package/dist/cli/commands/tunnel/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,UAAU,SAAS,CAAC,OAAe,IAAY,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA,CAAC,CAAC;AACrF,MAAM,UAAU,aAAa,CAAC,OAAe,IAAY,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAA,CAAC,CAAC;AACxG,MAAM,UAAU,eAAe,CAAC,OAAe,IAAY,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,CAAA,CAAC,CAAC"}

package/dist/cli/commands/tunnel/start.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerTunnelStartCommand(cmd: Command): void;
+//# sourceMappingURL=start.d.ts.map

package/dist/cli/commands/tunnel/start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/start.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AA2IxC,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CA2F7D"}

package/dist/cli/commands/tunnel/start.js

@@ -0,0 +1,234 @@
+import { mkdir, unlink, writeFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { spawn } from 'node:child_process';
+import { delimiter, join } from 'node:path';
+import chalk from 'chalk';
+import ora from 'ora';
+import { getGlobalOptions } from '../types.js';
+import { setupShutdownHandler } from '../../shutdown.js';
+import { TunnelGateway } from '../../../tunnel/gateway.js';
+import { ensureCloudflared } from '../../../tunnel/cloudflared.js';
+import { tunnelDir, tunnelPidFile, tunnelStateFile } from './paths.js';
+const DEFAULT_BUYER_PORT = 8377;
+const DEFAULT_GATEWAY_PORT = 8379;
+function parseTunnelProvider(value) {
+    const provider = value.trim().toLowerCase();
+    if (provider === 'cloudflare' || provider === 'ngrok')
+        return provider;
+    throw new Error('Tunnel provider must be cloudflare or ngrok.');
+}
+function providerDisplayName(provider) {
+    return provider === 'cloudflare' ? 'Cloudflare Tunnel' : 'ngrok';
+}
+function providerTokenEnvironmentName(provider) {
+    return provider === 'cloudflare' ? 'CLOUDFLARED_TUNNEL_TOKEN' : 'NGROK_AUTHTOKEN';
+}
+function resolveTunnelToken(provider) {
+    const providerToken = process.env[providerTokenEnvironmentName(provider)];
+    return (process.env['ANTSEED_TUNNEL_TOKEN'] ?? providerToken ?? '').trim();
+}
+function parsePublicUrl(value, provider) {
+    if (!value) {
+        if (provider === 'cloudflare') {
+            throw new Error('ANTSEED_TUNNEL_PUBLIC_URL is required for Cloudflare Tunnel.');
+        }
+        return null;
+    }
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error('ANTSEED_TUNNEL_PUBLIC_URL must be a valid https:// URL.');
+    }
+    if (url.protocol !== 'https:') {
+        throw new Error('ANTSEED_TUNNEL_PUBLIC_URL must be an https:// URL.');
+    }
+    return url;
+}
+function ngrokArgs(gatewayPort, publicUrl) {
+    return [
+        'http',
+        `http://127.0.0.1:${gatewayPort}`,
+        ...(publicUrl ? ['--url', publicUrl.origin] : []),
+        '--log', 'stdout', '--log-format', 'json', '--log-level', 'info',
+    ];
+}
+function waitForProcessStartup(child, provider) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(resolve, 1500);
+        child.once('error', (error) => {
+            clearTimeout(timer);
+            reject(error);
+        });
+        child.once('exit', (code) => {
+            clearTimeout(timer);
+            reject(new Error(`${provider} tunnel exited with code ${String(code)}`));
+        });
+    });
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function findHttpsUrl(value) {
+    if (typeof value === 'string' && value.startsWith('https://'))
+        return value;
+    if (!value || typeof value !== 'object')
+        return null;
+    for (const [key, nested] of Object.entries(value)) {
+        if ((key === 'url' || key === 'public_url') && typeof nested === 'string' && nested.startsWith('https://'))
+            return nested;
+        const found = findHttpsUrl(nested);
+        if (found)
+            return found;
+    }
+    return null;
+}
+function waitForNgrokUrl(child) {
+    return new Promise((resolve, reject) => {
+        let buffer = '';
+        let settled = false;
+        const finish = (error, url) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            child.stdout?.off('data', onData);
+            child.stderr?.off('data', onData);
+            child.off('error', onError);
+            child.off('exit', onExit);
+            if (error)
+                reject(error);
+            else
+                resolve(url);
+        };
+        const onData = (chunk) => {
+            buffer += chunk.toString();
+            const lines = buffer.split(/\r?\n/);
+            buffer = lines.pop() ?? '';
+            for (const line of lines) {
+                try {
+                    const found = findHttpsUrl(JSON.parse(line));
+                    if (found) {
+                        finish(null, new URL(found));
+                        return;
+                    }
+                }
+                catch { /* wait for the structured startup line */ }
+            }
+        };
+        const onError = (error) => finish(error);
+        const onExit = (code) => finish(new Error(`ngrok tunnel exited with code ${String(code)}`));
+        const timer = setTimeout(() => finish(new Error('Timed out waiting for ngrok to publish its HTTPS URL.')), 15_000);
+        child.stdout?.on('data', onData);
+        child.stderr?.on('data', onData);
+        child.once('error', onError);
+        child.once('exit', onExit);
+    });
+}
+function resolveNgrokBinary() {
+    const configured = process.env['ANTSEED_NGROK_BIN']?.trim();
+    if (configured)
+        return configured;
+    const executable = process.platform === 'win32' ? 'ngrok.exe' : 'ngrok';
+    const candidates = [
+        ...(process.env.PATH ?? '').split(delimiter).filter(Boolean).map((directory) => join(directory, executable)),
+        ...(process.platform === 'darwin' ? ['/opt/homebrew/bin/ngrok', '/usr/local/bin/ngrok'] : []),
+    ];
+    const found = candidates.find((candidate) => existsSync(candidate));
+    if (found)
+        return found;
+    throw new Error('ngrok CLI was not found. Install ngrok or set ANTSEED_NGROK_BIN.');
+}
+export function registerTunnelStartCommand(cmd) {
+    cmd
+        .command('start')
+        .description('Expose the local buyer API through an authenticated HTTPS tunnel')
+        .option('--provider <provider>', 'Tunnel provider: cloudflare or ngrok')
+        .option('--buyer-port <number>', 'Local buyer proxy port', String(DEFAULT_BUYER_PORT))
+        .option('--gateway-port <number>', 'Local authenticated gateway port', String(DEFAULT_GATEWAY_PORT))
+        .action(async (options) => {
+        const dataDir = getGlobalOptions(cmd).dataDir;
+        const buyerPort = parseInt(options.buyerPort, 10) || DEFAULT_BUYER_PORT;
+        const gatewayPort = parseInt(options.gatewayPort, 10) || DEFAULT_GATEWAY_PORT;
+        const provider = parseTunnelProvider(options.provider ?? process.env['ANTSEED_TUNNEL_PROVIDER'] ?? 'cloudflare');
+        const tunnelToken = resolveTunnelToken(provider);
+        const configuredPublicUrl = process.env['ANTSEED_TUNNEL_PUBLIC_URL']?.trim() ?? '';
+        const apiKey = process.env['ANTSEED_TUNNEL_API_KEY']?.trim() ?? '';
+        if (!tunnelToken) {
+            throw new Error(`Set ${providerTokenEnvironmentName(provider)} before starting the tunnel.`);
+        }
+        let publicUrl = parsePublicUrl(configuredPublicUrl, provider);
+        if (apiKey.length < 16) {
+            throw new Error('ANTSEED_TUNNEL_API_KEY must be at least 16 characters.');
+        }
+        const gateway = new TunnelGateway({
+            buyerPort,
+            apiKey,
+            listenPort: gatewayPort,
+            onLog: (message) => process.stderr.write(`[tunnel] ${message}\n`),
+        });
+        const spinner = ora('Starting authenticated API gateway...').start();
+        await gateway.start();
+        let tunnelProcess = null;
+        try {
+            const binary = provider === 'cloudflare'
+                ? await ensureCloudflared(dataDir)
+                : resolveNgrokBinary();
+            const args = provider === 'cloudflare'
+                ? ['tunnel', '--no-autoupdate', 'run']
+                : ngrokArgs(gatewayPort, publicUrl);
+            const tunnelEnvironment = provider === 'cloudflare'
+                ? { TUNNEL_TOKEN: tunnelToken }
+                : { NGROK_AUTHTOKEN: tunnelToken };
+            tunnelProcess = spawn(binary, args, {
+                stdio: ['ignore', 'pipe', 'pipe'],
+                env: {
+                    ...process.env,
+                    ...tunnelEnvironment,
+                },
+            });
+            const ngrokUrlPromise = provider === 'ngrok' ? waitForNgrokUrl(tunnelProcess) : null;
+            tunnelProcess.stdout?.pipe(process.stdout);
+            tunnelProcess.stderr?.pipe(process.stderr);
+            if (ngrokUrlPromise) {
+                publicUrl = await ngrokUrlPromise;
+            }
+            else {
+                await waitForProcessStartup(tunnelProcess, provider);
+            }
+        }
+        catch (error) {
+            await gateway.stop();
+            spinner.fail(chalk.red(`Could not start ${providerDisplayName(provider)}: ${errorMessage(error)}`));
+            process.exitCode = 1;
+            return;
+        }
+        if (!publicUrl)
+            throw new Error('Tunnel provider did not publish a public URL.');
+        const baseUrl = `${publicUrl.toString().replace(/\/+$/, '')}/v1`;
+        await mkdir(tunnelDir(dataDir), { recursive: true });
+        await writeFile(tunnelPidFile(dataDir), String(process.pid), 'utf8');
+        await writeFile(tunnelStateFile(dataDir), JSON.stringify({
+            running: true,
+            pid: process.pid,
+            provider,
+            buyerPort,
+            gatewayPort,
+            publicUrl: publicUrl.toString(),
+            baseUrl,
+            startedAt: Date.now(),
+        }), 'utf8');
+        spinner.succeed(chalk.green('Public HTTPS tunnel is running'));
+        console.log(`${chalk.bold('Base URL:')} ${baseUrl}`);
+        console.log(chalk.dim('Use the same ANTSEED_TUNNEL_API_KEY as the client API key.'));
+        setupShutdownHandler(async () => {
+            tunnelProcess?.kill('SIGTERM');
+            await gateway.stop();
+            await unlink(tunnelPidFile(dataDir)).catch(() => undefined);
+            await unlink(tunnelStateFile(dataDir)).catch(() => undefined);
+            console.log(chalk.dim('Public HTTPS tunnel stopped.'));
+        });
+    });
+}
+//# sourceMappingURL=start.js.map

package/dist/cli/commands/tunnel/start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,GAAG,MAAM,KAAK,CAAA;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEtE,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAC/B,MAAM,oBAAoB,GAAG,IAAI,CAAA;AAGjC,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAA;IACtE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAwB;IACnD,OAAO,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAA;AAClE,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAwB;IAC5D,OAAO,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,iBAAiB,CAAA;AACnF,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAwB;IAClD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,QAAwB;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;QACjF,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB,EAAE,SAAqB;IAC3D,OAAO;QACL,MAAM;QACN,oBAAoB,WAAW,EAAE;QACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;KACjE,CAAA;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA+B,EAAE,QAAwB;IACtF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACvC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,KAAK,CAAC,CAAA;QACf,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,QAAQ,4BAA4B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QAC1E,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACpD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,YAAY,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAA;QACzH,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QAClC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;IACzB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,eAAe,CAAC,KAA+B;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,MAAM,GAAG,CAAC,KAAmB,EAAE,GAAS,EAAE,EAAE;YAChD,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACjC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACjC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC3B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACzB,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;;gBACnB,OAAO,CAAC,GAAI,CAAC,CAAA;QACpB,CAAC,CAAA;QACD,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACnC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;YAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;oBAC5C,IAAI,KAAK,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;wBAAC,OAAM;oBAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QAC1G,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAClH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAA;IAC3D,IAAI,UAAU;QAAE,OAAO,UAAU,CAAA;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAA;IACvE,MAAM,UAAU,GAAG;QACjB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5G,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,yBAAyB,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9F,CAAA;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;IACnE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACvB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAY;IACrD,GAAG;SACA,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,MAAM,CAAC,uBAAuB,EAAE,sCAAsC,CAAC;SACvE,MAAM,CAAC,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;SACrF,MAAM,CAAC,yBAAyB,EAAE,kCAAkC,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;SACnG,MAAM,CAAC,KAAK,EAAE,OAAsE,EAAE,EAAE;QACvF,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAA;QAC7C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAA;QACvE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAA;QAC7E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,YAAY,CAAC,CAAA;QAChH,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAClF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAClE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,OAAO,4BAA4B,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAA;QAC9F,CAAC;QACD,IAAI,SAAS,GAAG,cAAc,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAA;QAC7D,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC3E,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;YAChC,SAAS;YACT,MAAM;YACN,UAAU,EAAE,WAAW;YACvB,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,IAAI,CAAC;SAClE,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,GAAG,CAAC,uCAAuC,CAAC,CAAC,KAAK,EAAE,CAAA;QACpE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;QACrB,IAAI,aAAa,GAAoC,IAAI,CAAA;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,KAAK,YAAY;gBACtC,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC;gBAClC,CAAC,CAAC,kBAAkB,EAAE,CAAA;YACxB,MAAM,IAAI,GAAG,QAAQ,KAAK,YAAY;gBACpC,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC;gBACtC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;YACrC,MAAM,iBAAiB,GAAG,QAAQ,KAAK,YAAY;gBACjD,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE;gBAC/B,CAAC,CAAC,EAAE,eAAe,EAAE,WAAW,EAAE,CAAA;YACpC,aAAa,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;gBAClC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,GAAG,iBAAiB;iBACrB;aACF,CAAC,CAAA;YACF,MAAM,eAAe,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACpF,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1C,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1C,IAAI,eAAe,EAAE,CAAC;gBACpB,SAAS,GAAG,MAAM,eAAe,CAAA;YACnC,CAAC;iBAAM,CAAC;gBACN,MAAM,qBAAqB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;YACpB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,mBAAmB,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;YACnG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACpB,OAAM;QACR,CAAC;QAED,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAChF,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAA;QAChE,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACpD,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;QACpE,MAAM,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACvD,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ;YACR,SAAS;YACT,WAAW;YACX,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;YAC/B,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,EAAE,MAAM,CAAC,CAAA;QAEX,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA;QAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,OAAO,EAAE,CAAC,CAAA;QACpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC,CAAA;QAEpF,oBAAoB,CAAC,KAAK,IAAI,EAAE;YAC9B,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YAC9B,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;YACpB,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC3D,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/cli/commands/tunnel/status.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerTunnelStatusCommand(cmd: Command): void;
+//# sourceMappingURL=status.d.ts.map

package/dist/cli/commands/tunnel/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/status.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AASxC,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAqB9D"}

package/dist/cli/commands/tunnel/status.js

@@ -0,0 +1,39 @@
+import { readFile } from 'node:fs/promises';
+import chalk from 'chalk';
+import { getGlobalOptions } from '../types.js';
+import { tunnelStateFile } from './paths.js';
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function registerTunnelStatusCommand(cmd) {
+    cmd
+        .command('status')
+        .description('Show public HTTPS tunnel status')
+        .option('--json', 'Print machine-readable JSON', false)
+        .action(async (options) => {
+        const dataDir = getGlobalOptions(cmd).dataDir;
+        let state = { running: false };
+        try {
+            state = JSON.parse(await readFile(tunnelStateFile(dataDir), 'utf8'));
+            const pid = Number(state['pid']);
+            state.running = Number.isInteger(pid) && pid > 0 && isProcessAlive(pid);
+        }
+        catch { /* not configured */ }
+        if (options.json) {
+            console.log(JSON.stringify(state));
+            return;
+        }
+        console.log(`Tunnel: ${state.running ? chalk.green('running') : chalk.dim('stopped')}`);
+        if (typeof state['provider'] === 'string')
+            console.log(`Provider: ${state['provider']}`);
+        if (state.running && typeof state['baseUrl'] === 'string')
+            console.log(`Base URL: ${state['baseUrl']}`);
+    });
+}
+//# sourceMappingURL=status.js.map

package/dist/cli/commands/tunnel/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE5C,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAY;IACtD,GAAG;SACA,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,iCAAiC,CAAC;SAC9C,MAAM,CAAC,QAAQ,EAAE,6BAA6B,EAAE,KAAK,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,OAA0B,EAAE,EAAE;QAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAA;QAC7C,IAAI,KAAK,GAA4B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QACvD,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAA;YAC/F,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;YAChC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAA;QACzE,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;YAClC,OAAM;QACR,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QACvF,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QACxF,IAAI,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACzG,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/cli/commands/tunnel/stop.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerTunnelStopCommand(cmd: Command): void;
+//# sourceMappingURL=stop.d.ts.map

package/dist/cli/commands/tunnel/stop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/stop.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAKxC,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAkB5D"}

package/dist/cli/commands/tunnel/stop.js

@@ -0,0 +1,28 @@
+import { readFile, unlink } from 'node:fs/promises';
+import chalk from 'chalk';
+import { getGlobalOptions } from '../types.js';
+import { tunnelPidFile, tunnelStateFile } from './paths.js';
+export function registerTunnelStopCommand(cmd) {
+    cmd
+        .command('stop')
+        .description('Stop the public HTTPS tunnel')
+        .action(async () => {
+        const dataDir = getGlobalOptions(cmd).dataDir;
+        try {
+            const pid = parseInt((await readFile(tunnelPidFile(dataDir), 'utf8')).trim(), 10);
+            if (Number.isFinite(pid) && pid > 0)
+                process.kill(pid, 'SIGTERM');
+            console.log(chalk.green('Tunnel stop requested.'));
+        }
+        catch (error) {
+            if (error.code !== 'ESRCH' && error.code !== 'ENOENT')
+                throw error;
+            console.log(chalk.dim('Tunnel is not running.'));
+        }
+        finally {
+            await unlink(tunnelPidFile(dataDir)).catch(() => undefined);
+            await unlink(tunnelStateFile(dataDir)).catch(() => undefined);
+        }
+    });
+}
+//# sourceMappingURL=stop.js.map

package/dist/cli/commands/tunnel/stop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop.js","sourceRoot":"","sources":["../../../../src/cli/commands/tunnel/stop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAEnD,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE3D,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAA;QAC7C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;YACjF,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;YACjE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACxH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAA;QAClD,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC3D,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/cli/index.js

@@ -13,6 +13,7 @@ import { registerDepositAlias } from './commands/buyer/deposit.js';
 import { registerMetricsCommand } from './commands/metrics.js';
 import { registerWrappedToolCommands } from './commands/wrapped-tools.js';
 import { registerSystemProxyCommands } from './commands/system-proxy/index.js';
+import { registerTunnelCommands } from './commands/tunnel/index.js';
 loadEnvFromFiles();
 import pkg from '../../package.json' with { type: 'json' };
 const version = pkg.version;
@@ -36,5 +37,6 @@ registerDepositAlias(program);
 registerMetricsCommand(program);
 registerWrappedToolCommands(program);
 registerSystemProxyCommands(program);
+registerTunnelCommands(program);
 program.parse(process.argv);
 //# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAE/E,gBAAgB,EAAE,CAAC;AAEnB,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;AAE5B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,6BAA6B,CAAC;KAC1C,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,qBAAqB,EAAE,4EAA4E,CAAC;KAC3G,MAAM,CAAC,mBAAmB,EAAE,oFAAoF,CAAC;KACjH,MAAM,CAAC,eAAe,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC;AAE5D,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,2BAA2B,CAAC,OAAO,CAAC,CAAC;AACrC,2BAA2B,CAAC,OAAO,CAAC,CAAC;AAErC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,gBAAgB,EAAE,CAAC;AAEnB,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;AAE5B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,6BAA6B,CAAC;KAC1C,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,qBAAqB,EAAE,4EAA4E,CAAC;KAC3G,MAAM,CAAC,mBAAmB,EAAE,oFAAoF,CAAC;KACjH,MAAM,CAAC,eAAe,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC;AAE5D,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,2BAA2B,CAAC,OAAO,CAAC,CAAC;AACrC,2BAA2B,CAAC,OAAO,CAAC,CAAC;AACrC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAEhC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/tunnel/cloudflared.d.ts

@@ -0,0 +1,2 @@
+export declare function ensureCloudflared(dataDir: string): Promise<string>;
+//# sourceMappingURL=cloudflared.d.ts.map

package/dist/tunnel/cloudflared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflared.d.ts","sourceRoot":"","sources":["../../src/tunnel/cloudflared.ts"],"names":[],"mappings":"AAkBA,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBxE"}

package/dist/tunnel/cloudflared.js

@@ -0,0 +1,57 @@
+import { createHash } from 'node:crypto';
+import { chmod, mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import { gunzipSync } from 'node:zlib';
+import { join } from 'node:path';
+const VERSION = '2026.8.2';
+function assetForPlatform() {
+    if (process.platform === 'darwin' && process.arch === 'arm64')
+        return { name: 'cloudflared-darwin-arm64.tgz', sha256: '9042c2c5d8b2de78e60f313d5fb31b6c5c1cebde787a3caf1f2c9588084ac442', archive: true };
+    if (process.platform === 'darwin' && process.arch === 'x64')
+        return { name: 'cloudflared-darwin-amd64.tgz', sha256: 'f1727723c586500e2092368ae21871b3df7ddfd2cb097f22d81bee4a9c458bb4', archive: true };
+    if (process.platform === 'linux' && process.arch === 'arm64')
+        return { name: 'cloudflared-linux-arm64', sha256: '7747d94570fb390cf47dcb4f9555c193c6355cda9793f0d878d9049e5d6a7790', archive: false };
+    if (process.platform === 'linux' && process.arch === 'x64')
+        return { name: 'cloudflared-linux-amd64', sha256: 'fcfb02b575a52ca1af2e3267af4e1517bcdeb30ac48c834c69abaed3c0576ad2', archive: false };
+    if (process.platform === 'win32' && (process.arch === 'x64' || process.arch === 'arm64'))
+        return { name: 'cloudflared-windows-amd64.exe', sha256: 'c29eee2b121f5436a642eed69fd9767da7e7b8c510fa50aaa130337f931357b5', archive: false };
+    throw new Error(`Cloudflare Tunnel is not supported on ${process.platform}/${process.arch}.`);
+}
+export async function ensureCloudflared(dataDir) {
+    const executable = join(dataDir, 'tunnel', 'bin', process.platform === 'win32' ? 'cloudflared.exe' : 'cloudflared');
+    try {
+        const existing = await readFile(executable);
+        if (existing.length > 1_000_000)
+            return executable;
+    }
+    catch { /* install below */ }
+    const asset = assetForPlatform();
+    const response = await fetch(`https://github.com/cloudflare/cloudflared/releases/download/${VERSION}/${asset.name}`);
+    if (!response.ok)
+        throw new Error(`cloudflared download failed with HTTP ${response.status}.`);
+    const downloaded = Buffer.from(await response.arrayBuffer());
+    const digest = createHash('sha256').update(downloaded).digest('hex');
+    if (digest !== asset.sha256)
+        throw new Error('cloudflared download checksum did not match the pinned release.');
+    const binary = asset.archive ? extractFirstTarFile(gunzipSync(downloaded)) : downloaded;
+    await mkdir(join(dataDir, 'tunnel', 'bin'), { recursive: true });
+    const temporary = `${executable}.tmp`;
+    await writeFile(temporary, binary, { mode: 0o755 });
+    await rename(temporary, executable);
+    if (process.platform !== 'win32')
+        await chmod(executable, 0o755);
+    return executable;
+}
+function extractFirstTarFile(tar) {
+    for (let offset = 0; offset + 512 <= tar.length;) {
+        const header = tar.subarray(offset, offset + 512);
+        const name = header.subarray(0, 100).toString('utf8').replace(/\0.*$/, '');
+        const size = parseInt(header.subarray(124, 136).toString('ascii').replace(/\0.*$/, '').trim() || '0', 8);
+        const type = header[156];
+        const bodyStart = offset + 512;
+        if (name && (type === 0 || type === 48) && size > 0)
+            return tar.subarray(bodyStart, bodyStart + size);
+        offset = bodyStart + Math.ceil(size / 512) * 512;
+    }
+    throw new Error('cloudflared archive did not contain an executable.');
+}
+//# sourceMappingURL=cloudflared.js.map

package/dist/tunnel/cloudflared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflared.js","sourceRoot":"","sources":["../../src/tunnel/cloudflared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,OAAO,GAAG,UAAU,CAAA;AAI1B,SAAS,gBAAgB;IACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,8BAA8B,EAAE,MAAM,EAAE,kEAAkE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACzM,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,8BAA8B,EAAE,MAAM,EAAE,kEAAkE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACvM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,kEAAkE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACpM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,kEAAkE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAClM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,+BAA+B,EAAE,MAAM,EAAE,kEAAkE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACtO,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,CAAA;AAC/F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IACnH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAA;QAC3C,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS;YAAE,OAAO,UAAU,CAAA;IACpD,CAAC;IAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;IAE/B,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAA;IAChC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,+DAA+D,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IACpH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;IAC9F,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpE,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IAC/G,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;IACvF,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAChE,MAAM,SAAS,GAAG,GAAG,UAAU,MAAM,CAAA;IACrC,MAAM,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,MAAM,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IAChE,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QACjD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC1E,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAA;QACxG,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACxB,MAAM,SAAS,GAAG,MAAM,GAAG,GAAG,CAAA;QAC9B,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC,CAAA;QACrG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,CAAA;IAClD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;AACvE,CAAC"}

package/dist/tunnel/gateway.d.ts

@@ -0,0 +1,16 @@
+export interface TunnelGatewayOptions {
+    buyerPort: number;
+    apiKey: string;
+    listenPort?: number;
+    onLog?: (message: string) => void;
+}
+export declare class TunnelGateway {
+    private readonly options;
+    private server;
+    private port;
+    constructor(options: TunnelGatewayOptions);
+    start(): Promise<number>;
+    stop(): Promise<void>;
+    private handle;
+}
+//# sourceMappingURL=gateway.d.ts.map

package/dist/tunnel/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../src/tunnel/gateway.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAClC;AAED,qBAAa,aAAa;IAIZ,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,IAAI,CAAI;gBAEa,OAAO,EAAE,oBAAoB;IAEpD,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAWxB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,OAAO,CAAC,MAAM;CA4Df"}

package/dist/tunnel/gateway.js

@@ -0,0 +1,126 @@
+import { timingSafeEqual } from 'node:crypto';
+import * as http from 'node:http';
+const HOP_BY_HOP = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailers',
+    'transfer-encoding',
+    'upgrade',
+]);
+const ALLOWED_ROUTES = [
+    { method: 'GET', prefix: '/v1/models' },
+    { method: 'POST', prefix: '/v1/messages' },
+    { method: 'POST', prefix: '/v1/messages/count_tokens' },
+    { method: 'POST', prefix: '/v1/chat/completions' },
+    { method: 'POST', prefix: '/v1/responses' },
+    { method: 'POST', prefix: '/v1/images/generations' },
+    { method: 'POST', prefix: '/v1/images/edits' },
+];
+export class TunnelGateway {
+    options;
+    server = null;
+    port = 0;
+    constructor(options) {
+        this.options = options;
+    }
+    async start() {
+        if (this.server)
+            return this.port;
+        this.server = http.createServer((req, res) => this.handle(req, res));
+        await new Promise((resolve, reject) => {
+            this.server.once('error', reject);
+            this.server.listen(this.options.listenPort ?? 0, '127.0.0.1', () => resolve());
+        });
+        this.port = this.server.address().port;
+        return this.port;
+    }
+    async stop() {
+        const server = this.server;
+        this.server = null;
+        this.port = 0;
+        if (!server)
+            return;
+        await new Promise((resolve) => server.close(() => resolve()));
+    }
+    handle(req, res) {
+        const method = req.method ?? 'GET';
+        const path = req.url ?? '/';
+        const canonicalPath = canonicalizeRoute(method, path);
+        if (!canonicalPath) {
+            this.options.onLog?.(`gateway rejected route: ${method} ${path}`);
+            res.writeHead(404, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({ error: { message: 'Not found', type: 'invalid_request_error' } }));
+            return;
+        }
+        if (!matchesBearerKey(req.headers.authorization, this.options.apiKey)) {
+            this.options.onLog?.(`gateway rejected authentication: ${method} ${path}`);
+            res.writeHead(401, {
+                'content-type': 'application/json',
+                'www-authenticate': 'Bearer',
+            });
+            res.end(JSON.stringify({ error: { message: 'Invalid API key', type: 'authentication_error' } }));
+            return;
+        }
+        this.options.onLog?.(`gateway request: ${method} ${path} -> ${canonicalPath}`);
+        const headers = {};
+        for (const [key, value] of Object.entries(req.headers)) {
+            const normalizedKey = key.toLowerCase();
+            if (normalizedKey === 'host' || normalizedKey === 'authorization' || normalizedKey === 'cookie')
+                continue;
+            if (normalizedKey.startsWith('x-forwarded-') || HOP_BY_HOP.has(normalizedKey))
+                continue;
+            headers[key] = value;
+        }
+        headers.host = `127.0.0.1:${this.options.buyerPort}`;
+        headers.connection = 'close';
+        headers['x-antseed-system-proxy-source'] = 'public-tunnel';
+        const upstream = http.request({
+            hostname: '127.0.0.1',
+            port: this.options.buyerPort,
+            method,
+            path: canonicalPath,
+            headers,
+        }, (upstreamRes) => {
+            const responseHeaders = {};
+            for (const [key, value] of Object.entries(upstreamRes.headers)) {
+                if (!HOP_BY_HOP.has(key.toLowerCase()) && value !== undefined)
+                    responseHeaders[key] = value;
+            }
+            responseHeaders.connection = 'close';
+            res.writeHead(upstreamRes.statusCode ?? 502, responseHeaders);
+            upstreamRes.pipe(res);
+        });
+        upstream.on('error', (error) => {
+            this.options.onLog?.(`gateway upstream error: ${error.message}`);
+            if (!res.headersSent) {
+                res.writeHead(502, { 'content-type': 'application/json' });
+                res.end(JSON.stringify({ error: { message: 'AntSeed buyer proxy is unavailable', type: 'api_error' } }));
+            }
+        });
+        req.pipe(upstream);
+    }
+}
+function canonicalizeRoute(method, path) {
+    const queryIndex = path.indexOf('?');
+    const pathname = (queryIndex === -1 ? path : path.slice(0, queryIndex)).toLowerCase();
+    const query = queryIndex === -1 ? '' : path.slice(queryIndex);
+    const candidates = new Set([pathname]);
+    if (!pathname.startsWith('/v1/'))
+        candidates.add(`/v1${pathname}`);
+    if (pathname.startsWith('/v1/v1/'))
+        candidates.add(pathname.slice(3));
+    const route = ALLOWED_ROUTES.find((allowed) => allowed.method === method && candidates.has(allowed.prefix));
+    return route ? `${route.prefix}${query}` : null;
+}
+function matchesBearerKey(header, expected) {
+    const prefix = 'Bearer ';
+    if (!header?.startsWith(prefix))
+        return false;
+    const actual = Buffer.from(header.slice(prefix.length), 'utf8');
+    const wanted = Buffer.from(expected, 'utf8');
+    return actual.length === wanted.length && timingSafeEqual(actual, wanted);
+}
+//# sourceMappingURL=gateway.js.map

package/dist/tunnel/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../src/tunnel/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAGjC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,IAAI;IACJ,UAAU;IACV,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAA;AAEF,MAAM,cAAc,GAAsD;IACxE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE;IACvC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE;IAC1C,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,EAAE;IACvD,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAClD,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE;IAC3C,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE;IACpD,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE;CAC/C,CAAA;AASD,MAAM,OAAO,aAAa;IAIK;IAHrB,MAAM,GAAuB,IAAI,CAAA;IACjC,IAAI,GAAG,CAAC,CAAA;IAEhB,YAA6B,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;IAAG,CAAC;IAE9D,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,IAAI,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QACpE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAClC,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACjF,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,IAAI,GAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAA;QACvD,OAAO,IAAI,CAAC,IAAI,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAA;QACb,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACrE,CAAC;IAEO,MAAM,CAAC,GAAyB,EAAE,GAAwB;QAChE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAA;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAA;QAC3B,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAErD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,2BAA2B,MAAM,IAAI,IAAI,EAAE,CAAC,CAAA;YACjE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC,CAAA;YAC3F,OAAM;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,oCAAoC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAA;YAC1E,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,QAAQ;aAC7B,CAAC,CAAA;YACF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC,CAAA;YAChG,OAAM;QACR,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,oBAAoB,MAAM,IAAI,IAAI,OAAO,aAAa,EAAE,CAAC,CAAA;QAE9E,MAAM,OAAO,GAA6B,EAAE,CAAA;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;YACvC,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,eAAe,IAAI,aAAa,KAAK,QAAQ;gBAAE,SAAQ;YACzG,IAAI,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC;gBAAE,SAAQ;YACvF,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACtB,CAAC;QACD,OAAO,CAAC,IAAI,GAAG,aAAa,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAA;QACpD,OAAO,CAAC,UAAU,GAAG,OAAO,CAAA;QAC5B,OAAO,CAAC,+BAA+B,CAAC,GAAG,eAAe,CAAA;QAE1D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;YAC5B,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YAC5B,MAAM;YACN,IAAI,EAAE,aAAa;YACnB,OAAO;SACR,EAAE,CAAC,WAAW,EAAE,EAAE;YACjB,MAAM,eAAe,GAA6B,EAAE,CAAA;YACpD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,KAAK,SAAS;oBAAE,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAC7F,CAAC;YACD,eAAe,CAAC,UAAU,GAAG,OAAO,CAAA;YACpC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,IAAI,GAAG,EAAE,eAAe,CAAC,CAAA;YAC7D,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACvB,CAAC,CAAC,CAAA;QAEF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC7B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YAChE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAA;YAC1G,CAAC;QACH,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpB,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,IAAY;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACpC,MAAM,QAAQ,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACrF,MAAM,KAAK,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IAEtC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,UAAU,CAAC,GAAG,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAA;IAClE,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAErE,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5C,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAC5D,CAAA;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA0B,EAAE,QAAgB;IACpE,MAAM,MAAM,GAAG,SAAS,CAAA;IACxB,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC5C,OAAO,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAC3E,CAAC"}

package/dist/tunnel/gateway.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=gateway.test.d.ts.map

package/dist/tunnel/gateway.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.test.d.ts","sourceRoot":"","sources":["../../src/tunnel/gateway.test.ts"],"names":[],"mappings":""}

package/dist/tunnel/gateway.test.js

@@ -0,0 +1,65 @@
+import assert from 'node:assert/strict';
+import * as http from 'node:http';
+import { test } from 'node:test';
+import { TunnelGateway } from './gateway.js';
+async function listen(server) {
+    await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+    return server.address().port;
+}
+async function request(port, path, options = {}) {
+    return new Promise((resolve, reject) => {
+        const req = http.request({
+            hostname: '127.0.0.1',
+            port,
+            path,
+            method: options.method ?? 'GET',
+            headers: options.key ? { authorization: `Bearer ${options.key}`, 'content-type': 'application/json' } : {},
+        }, (res) => {
+            const chunks = [];
+            res.on('data', (chunk) => chunks.push(chunk));
+            res.on('end', () => resolve({ status: res.statusCode ?? 0, body: Buffer.concat(chunks).toString('utf8') }));
+        });
+        req.on('error', reject);
+        req.end(options.body);
+    });
+}
+test('TunnelGateway exposes only authenticated supported API routes', async () => {
+    const captured = [];
+    const logs = [];
+    const buyer = http.createServer((req, res) => {
+        captured.push({ url: req.url ?? '', auth: req.headers.authorization });
+        res.writeHead(200, { 'content-type': 'application/json' });
+        res.end(JSON.stringify({ ok: true }));
+    });
+    const buyerPort = await listen(buyer);
+    const gateway = new TunnelGateway({ buyerPort, apiKey: 'secret', onLog: (message) => logs.push(message) });
+    const gatewayPort = await gateway.start();
+    try {
+        assert.equal((await request(gatewayPort, '/_antseed/status', { key: 'secret' })).status, 404);
+        assert.equal((await request(gatewayPort, '/v1/models')).status, 401);
+        assert.equal((await request(gatewayPort, '/v1/models', { key: 'wrong' })).status, 401);
+        assert.equal((await request(gatewayPort, '/v1/models', { key: 'secret' })).status, 200);
+        assert.equal((await request(gatewayPort, '/v1/messages/count_tokens', { method: 'POST', key: 'secret', body: '{}' })).status, 200);
+        assert.equal((await request(gatewayPort, '/messages/count_tokens', { method: 'POST', key: 'secret', body: '{}' })).status, 200);
+        assert.equal((await request(gatewayPort, '/v1/responses', { method: 'POST', key: 'secret', body: '{}' })).status, 200);
+        assert.equal((await request(gatewayPort, '/responses', { method: 'POST', key: 'secret', body: '{}' })).status, 200);
+        assert.equal((await request(gatewayPort, '/v1/v1/responses?cursor=1', { method: 'POST', key: 'secret', body: '{}' })).status, 200);
+        assert.equal((await request(gatewayPort, '/responses/other', { method: 'POST', key: 'secret', body: '{}' })).status, 404);
+        assert.deepEqual(captured, [
+            { url: '/v1/models', auth: undefined },
+            { url: '/v1/messages/count_tokens', auth: undefined },
+            { url: '/v1/messages/count_tokens', auth: undefined },
+            { url: '/v1/responses', auth: undefined },
+            { url: '/v1/responses', auth: undefined },
+            { url: '/v1/responses?cursor=1', auth: undefined },
+        ]);
+        assert.ok(logs.includes('gateway request: POST /messages/count_tokens -> /v1/messages/count_tokens'));
+        assert.ok(logs.includes('gateway request: POST /responses -> /v1/responses'));
+        assert.ok(logs.includes('gateway request: POST /v1/v1/responses?cursor=1 -> /v1/responses?cursor=1'));
+    }
+    finally {
+        await gateway.stop();
+        await new Promise((resolve) => buyer.close(() => resolve()));
+    }
+});
+//# sourceMappingURL=gateway.test.js.map

package/dist/tunnel/gateway.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.test.js","sourceRoot":"","sources":["../../src/tunnel/gateway.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,KAAK,UAAU,MAAM,CAAC,MAAmB;IACvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;IAC5E,OAAQ,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAA;AACpD,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY,EAAE,UAA4D,EAAE;IAC/G,OAAO,IAAI,OAAO,CAAmC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;YACvB,QAAQ,EAAE,WAAW;YACrB,IAAI;YACJ,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE;SAC3G,EAAE,CAAC,GAAG,EAAE,EAAE;YACT,MAAM,MAAM,GAAa,EAAE,CAAA;YAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YACrD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7G,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACvB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;IAC/E,MAAM,QAAQ,GAA0C,EAAE,CAAA;IAC1D,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;QACtE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC1G,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;IAEzC,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,kBAAkB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC7F,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACpE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACvF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,2BAA2B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAClI,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,wBAAwB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC/H,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtH,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACnH,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,2BAA2B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAClI,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACzH,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;YACzB,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;YACtC,EAAE,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,SAAS,EAAE;YACrD,EAAE,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,SAAS,EAAE;YACrD,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE;YACzC,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE;YACzC,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,EAAE;SACnD,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,2EAA2E,CAAC,CAAC,CAAA;QACrG,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC,CAAA;QAC7E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,2EAA2E,CAAC,CAAC,CAAA;IACvG,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QACpB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACpE,CAAC;AACH,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@antseed/cli",
-  "version": "0.1.154",
+  "version": "0.1.155",
   "description": "Antseed Network CLI and Web Dashboard",
   "type": "module",
   "files": [
@@ -22,11 +22,11 @@
     "open": "^11.0.0",
     "ora": "^9.3.0",
     "qrcode": "^1.5.4",
+    "@antseed/provider-core": "0.2.54",
     "@antseed/ant-agent": "0.1.35",
-    "@antseed/api-adapter": "0.1.45",
-    "@antseed/node": "0.2.115",
-    "@antseed/payments": "0.1.42",
-    "@antseed/provider-core": "0.2.54"
+    "@antseed/node": "0.2.116",
+    "@antseed/payments": "0.1.43",
+    "@antseed/api-adapter": "0.1.45"
   },
   "devDependencies": {
     "@types/node": "^20.11.0",
@@ -42,6 +42,6 @@
     "start:seed": "node dist/cli/index.js seed",
     "start:connect": "node dist/cli/index.js connect",
     "typecheck": "tsc --noEmit",
-    "test": "npm run build && node --test dist/config/*.test.js dist/cli/commands/**/*.test.js dist/proxy/*.test.js dist/plugins/*.test.js dist/system-proxy/*.test.js"
+    "test": "npm run build && node --test dist/config/*.test.js dist/cli/commands/**/*.test.js dist/proxy/*.test.js dist/plugins/*.test.js dist/system-proxy/*.test.js dist/tunnel/*.test.js"
   }
 }