@atomic-chat/core 0.5.1

package/dist/remote-access/manager.js

@@ -0,0 +1,316 @@
+/**
+ * Remote access: a Cloudflare quick tunnel in front of the Local API Server.
+ *
+ * `cloudflared` gives the OpenAI-compatible API a temporary public `https://<words>.trycloudflare.com`
+ * address, so another Atomic Chat, an SDK or a coding agent can use this machine's models from
+ * anywhere. No account, no domain, a new URL on every start.
+ *
+ * Shape of the code:
+ *
+ *  - `RemoteAccessManager` is the state machine the control routes talk to. JavaScript gives it what
+ *    the Rust original needed a mutex for: nothing here awaits between reading the state and writing
+ *    it, so `start` and `stop` decide on a consistent view.
+ *  - One *supervisor* per run owns the child process. It waits for the tunnel to register, proves the
+ *    URL reaches this server before anybody sees it, then watches for the process to exit. A `run`
+ *    counter makes a supervisor that was overtaken (a stop timed out, the core is shutting down)
+ *    unable to write state any more.
+ *  - Every transition is pushed to clients as `remote-access:status`, because the URL arrives seconds
+ *    after the request that asked for it has answered.
+ *
+ * The API key is deliberately not a precondition: exposing the server without one is the user's
+ * call, made explicit by the frontend.
+ *
+ * PRIVACY: the tunnel URL is never logged.
+ *
+ * Ported from: src-tauri/src/core/server/remote_access/mod.rs (image-generation line, `767ff6350`).
+ * ADR 2026-09-17-the-core-owns-the-cloudflare-quick-tunnel.
+ */
+import { AtomicCoreError } from '../contracts/index.js';
+import { DEFAULT_TUNNEL_TIMINGS } from './process.js';
+import { OFF, deriveStatus, failed, hostOf } from './status.js';
+/**
+ * cloudflared picks QUIC (UDP) by itself. Networks that drop UDP still let the HTTP/2 (TCP)
+ * transport through, on the same port 7844, so that is the one retry worth making.
+ */
+const PROTOCOL_ATTEMPTS = [undefined, 'http2'];
+/** How long `stop` waits for the supervisor beyond its own grace periods. */
+const STOP_SUPERVISOR_MARGIN_MS = 2_000;
+const REFUSAL_CODES = {
+    server_stopped: 'REMOTE_ACCESS_SERVER_STOPPED',
+    operation_in_progress: 'REMOTE_ACCESS_OPERATION_IN_PROGRESS',
+    stop_failed: 'REMOTE_ACCESS_STOP_FAILED',
+};
+const REFUSAL_MESSAGES = {
+    server_stopped: 'Start the Local API Server before opening a tunnel to it.',
+    operation_in_progress: 'The tunnel is being stopped; try again once it is down.',
+    stop_failed: 'The previous tunnel may still be running; stop it first.',
+};
+/** The refusal of a start. `details` is the app's machine-readable reason, which its parser reads. */
+export function remoteAccessRefusal(reason) {
+    return new AtomicCoreError(REFUSAL_CODES[reason], REFUSAL_MESSAGES[reason], reason);
+}
+const defaultExitHook = (hook) => {
+    process.once('exit', hook);
+    return () => process.off('exit', hook);
+};
+export class RemoteAccessManager {
+    deps;
+    phase = OFF;
+    url;
+    /** Identifies the supervisor allowed to write this state. */
+    run = 0;
+    /** Kept while the process may still be alive: for shutdown, and to retry a stop that was not confirmed. */
+    tunnel;
+    signalStop;
+    supervisor;
+    stopping;
+    probe;
+    removeExitHook;
+    timings;
+    constructor(deps) {
+        this.deps = deps;
+        this.timings = { ...DEFAULT_TUNNEL_TIMINGS, ...deps.timings };
+    }
+    status() {
+        return deriveStatus({ phase: this.phase, url: this.url }, this.deps.server());
+    }
+    /**
+     * Computes the status and pushes it to clients. Also called when the public server starts or
+     * stops: `blockReason` and `canStart` follow the server, not only the tunnel.
+     */
+    announce() {
+        const status = this.status();
+        this.deps.emit(status);
+        return status;
+    }
+    /**
+     * Starts a tunnel and answers at once with `starting`; the rest is reported through events.
+     * Refuses with a machine-readable reason. Synchronous on purpose: the endpoint is read and the
+     * phase flipped with nothing in between.
+     */
+    start() {
+        const server = this.deps.server();
+        if (!server)
+            throw remoteAccessRefusal('server_stopped');
+        const phase = this.phase;
+        if (phase.kind === 'stopping')
+            throw remoteAccessRefusal('operation_in_progress');
+        if (phase.kind === 'failed' && phase.error === 'stop_failed')
+            throw remoteAccessRefusal('stop_failed');
+        // `starting` and `online` are already on their way or up: asking again changes nothing. A failed
+        // attempt is simply dismissed by the next one.
+        if (phase.kind === 'off' || phase.kind === 'failed') {
+            const run = ++this.run;
+            this.phase = { kind: 'starting' };
+            this.url = undefined;
+            this.tunnel = undefined;
+            const stopped = new Promise((resolve) => (this.signalStop = resolve));
+            // The endpoint carries the *bound* port (a fallback can change it) and a host that listens.
+            this.supervisor = this.supervise(run, server.origin, stopped).catch((error) => {
+                this.deps.log?.('warn', `remote access: the tunnel supervisor failed: ${error.message}`);
+                if (this.isCurrent(run))
+                    return this.endRun(run, this.tunnel, failed('exited'));
+            });
+        }
+        return this.announce();
+    }
+    /**
+     * Stops the tunnel and answers once it is down (normally well under a second; up to the two
+     * grace periods when the process does not react). A stop already under way is joined, so whoever
+     * needs the tunnel gone — the public server, above all — can rely on the answer.
+     */
+    stop() {
+        if (this.stopping)
+            return this.stopping;
+        const stopping = this.stopNow().finally(() => {
+            if (this.stopping === stopping)
+                this.stopping = undefined;
+        });
+        this.stopping = stopping;
+        return stopping;
+    }
+    async stopNow() {
+        const phase = this.phase;
+        if (phase.kind === 'failed' && phase.error === 'stop_failed') {
+            // The retry goes through the handle that was kept for it.
+            const confirmed = this.tunnel ? await this.tunnel.terminate(this.timings) : true;
+            if (confirmed)
+                await this.settleStopped();
+        }
+        else if (phase.kind === 'failed') {
+            this.phase = OFF;
+            this.url = undefined;
+        }
+        else if (phase.kind === 'starting' || phase.kind === 'online') {
+            const run = this.run;
+            this.phase = { kind: 'stopping' };
+            this.announce();
+            this.signalStop?.();
+            this.signalStop = undefined;
+            const limit = this.timings.termGraceMs + this.timings.killGraceMs + STOP_SUPERVISOR_MARGIN_MS;
+            const finished = await this.within(this.supervisor, limit);
+            if (!finished && this.run === run && this.phase.kind === 'stopping') {
+                // The supervisor is stuck. Take the state away from it so it cannot write later, and say
+                // what is true: a tunnel may still be running.
+                this.run++;
+                this.phase = failed('stop_failed');
+                this.url = undefined;
+                this.probe?.abort();
+                this.deps.hosts.clearTunnelHost();
+            }
+        }
+        return this.announce();
+    }
+    /**
+     * Synchronous teardown for a shutdown that cannot wait: signals only. Whatever the supervisor
+     * still does, it no longer owns the state.
+     */
+    killNow() {
+        this.run++;
+        this.phase = OFF;
+        this.url = undefined;
+        this.signalStop = undefined;
+        this.probe?.abort();
+        this.deps.hosts.clearTunnelHost();
+        this.tunnel?.killNow();
+        this.tunnel = undefined;
+        this.removeExitHook?.();
+        this.removeExitHook = undefined;
+        void this.deps.journal?.clear().catch(() => { });
+    }
+    isCurrent(run) {
+        return this.run === run;
+    }
+    within(work, ms) {
+        if (!work)
+            return Promise.resolve(true);
+        return new Promise((resolve) => {
+            const timer = setTimeout(() => resolve(false), ms);
+            timer.unref?.();
+            void work.then(() => {
+                clearTimeout(timer);
+                resolve(true);
+            });
+        });
+    }
+    async settleStopped() {
+        this.deps.hosts.clearTunnelHost();
+        this.phase = OFF;
+        this.url = undefined;
+        this.tunnel = undefined;
+        this.removeExitHook?.();
+        this.removeExitHook = undefined;
+        await this.deps.journal?.clear().catch(() => { });
+    }
+    recordChild(run, tunnel) {
+        if (!this.isCurrent(run))
+            return;
+        this.tunnel = tunnel;
+        this.removeExitHook?.();
+        this.removeExitHook = (this.deps.onProcessExit ?? defaultExitHook)(() => tunnel.killNow());
+        if (tunnel.pid !== undefined)
+            void this.deps.journal?.record(tunnel.pid, tunnel.exe).catch(() => { });
+    }
+    /** Flips `starting` to `online`. `false` means a stop got there first. */
+    goOnline(run, url) {
+        if (!this.isCurrent(run) || this.phase.kind !== 'starting')
+            return false;
+        this.phase = { kind: 'online' };
+        this.url = url;
+        return true;
+    }
+    /**
+     * Ends the process and records how the run ended. An exit that cannot be confirmed overrides
+     * `outcome`: the truth is then "may still be running".
+     */
+    async endRun(run, tunnel, outcome) {
+        const confirmed = tunnel ? await tunnel.terminate(this.timings) : true;
+        // Overtaken (a stop timed out, or the core is shutting down): whoever took over has already
+        // written the state and cleared the host.
+        if (!this.isCurrent(run))
+            return;
+        this.deps.hosts.clearTunnelHost();
+        this.url = undefined;
+        this.signalStop = undefined;
+        if (confirmed) {
+            // A stop that raced with a failure still ends in `off`: the user asked for nothing to be
+            // running, and nothing is.
+            this.phase = this.phase.kind === 'stopping' ? OFF : outcome;
+            this.tunnel = undefined;
+            this.removeExitHook?.();
+            this.removeExitHook = undefined;
+            await this.deps.journal?.clear().catch(() => { });
+        }
+        else {
+            this.phase = failed('stop_failed');
+        }
+        if (outcome.kind === 'failed')
+            this.deps.log?.('warn', `remote access: the tunnel ended: ${outcome.error}`);
+        this.announce();
+    }
+    async supervise(run, origin, stopped) {
+        const timings = this.timings;
+        for (const [attempt, protocol] of PROTOCOL_ATTEMPTS.entries()) {
+            const tunnel = await this.deps.spawner(origin, protocol);
+            if (!tunnel)
+                return this.endRun(run, undefined, failed('cloudflared_unavailable'));
+            if (!this.isCurrent(run)) {
+                // Shut down while the binary was being located: this process was never ours to keep.
+                tunnel.killNow();
+                return;
+            }
+            this.recordChild(run, tunnel);
+            const ready = await Promise.race([stopped.then(() => undefined), tunnel.waitReady(timings.readyMs)]);
+            if (ready === undefined)
+                return this.endRun(run, tunnel, OFF);
+            if (ready.kind === 'spawn-failed')
+                return this.endRun(run, tunnel, failed('cloudflared_unavailable'));
+            if (ready.kind !== 'url') {
+                const isLastAttempt = attempt + 1 === PROTOCOL_ATTEMPTS.length;
+                // A URL without a registered connection is what a network that drops QUIC looks like; no
+                // URL at all means Cloudflare was not reached, and another transport will not help.
+                if (ready.sawUrl && !isLastAttempt) {
+                    if (!(await tunnel.terminate(timings)))
+                        return this.endRun(run, tunnel, failed('stop_failed'));
+                    this.deps.log?.('info', 'remote access: no edge connection registered; retrying over HTTP/2');
+                    continue;
+                }
+                return this.endRun(run, tunnel, failed(ready.sawUrl ? 'not_registered' : 'no_url'));
+            }
+            const host = hostOf(ready.url);
+            if (host === undefined)
+                return this.endRun(run, tunnel, failed('no_url'));
+            // Before the probe, not after it: the probe path is exempt from Host validation, the first
+            // real request is not.
+            if (this.isCurrent(run))
+                this.deps.hosts.setTunnelHost(host);
+            const probe = new AbortController();
+            this.probe = probe;
+            const verified = await Promise.race([
+                stopped.then(() => 'stopped'),
+                tunnel.waitExit().then(() => 'exited'),
+                this.deps.prober
+                    .verify(ready.url, timings.probeTotalMs, probe.signal)
+                    .then((reachable) => (reachable ? 'reachable' : 'unreachable')),
+            ]);
+            probe.abort();
+            if (verified === 'stopped')
+                return this.endRun(run, tunnel, OFF);
+            if (verified === 'exited')
+                return this.endRun(run, tunnel, failed('exited'));
+            if (verified === 'unreachable')
+                return this.endRun(run, tunnel, failed('not_reachable'));
+            // A stop arrived between the probe and here.
+            if (!this.goOnline(run, ready.url))
+                return this.endRun(run, tunnel, OFF);
+            this.deps.log?.('info', 'remote access: the tunnel is online');
+            this.announce();
+            const outcome = await Promise.race([
+                stopped.then(() => OFF),
+                tunnel.waitExit().then(() => failed('exited')),
+            ]);
+            return this.endRun(run, tunnel, outcome);
+        }
+    }
+}
+//# sourceMappingURL=manager.js.map

package/dist/remote-access/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/remote-access/manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAGvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAErD,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAG/D;;;GAGG;AACH,MAAM,iBAAiB,GAAsC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;AAEjF,6EAA6E;AAC7E,MAAM,yBAAyB,GAAG,KAAK,CAAA;AAEvC,MAAM,aAAa,GAA2C;IAC5D,cAAc,EAAE,8BAA8B;IAC9C,qBAAqB,EAAE,qCAAqC;IAC5D,WAAW,EAAE,2BAA2B;CACzC,CAAA;AAED,MAAM,gBAAgB,GAAwC;IAC5D,cAAc,EAAE,2DAA2D;IAC3E,qBAAqB,EAAE,yDAAyD;IAChF,WAAW,EAAE,0DAA0D;CACxE,CAAA;AAED,sGAAsG;AACtG,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,OAAO,IAAI,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;AACrF,CAAC;AA0BD,MAAM,eAAe,GAAG,CAAC,IAAgB,EAAgB,EAAE;IACzD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC1B,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AACxC,CAAC,CAAA;AAID,MAAM,OAAO,mBAAmB;IAcD;IAbrB,KAAK,GAAU,GAAG,CAAA;IAClB,GAAG,CAAoB;IAC/B,6DAA6D;IACrD,GAAG,GAAG,CAAC,CAAA;IACf,2GAA2G;IACnG,MAAM,CAA2B;IACjC,UAAU,CAA0B;IACpC,UAAU,CAA2B;IACrC,QAAQ,CAAyC;IACjD,KAAK,CAA6B;IAClC,cAAc,CAA0B;IAC/B,OAAO,CAAe;IAEvC,YAA6B,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;QACxD,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,sBAAsB,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;IAC/D,CAAC;IAED,MAAM;QACJ,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/E,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACtB,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;QACjC,IAAI,CAAC,MAAM;YAAE,MAAM,mBAAmB,CAAC,gBAAgB,CAAC,CAAA;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACxB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;QACjF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa;YAAE,MAAM,mBAAmB,CAAC,aAAa,CAAC,CAAA;QACtG,iGAAiG;QACjG,+CAA+C;QAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,GAAG,CAAA;YACtB,IAAI,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;YACjC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAA;YACpB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;YACvB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC,CAAA;YAC3E,4FAA4F;YAC5F,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;gBACnF,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,gDAAgD,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBACxF,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;YACjF,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAA;IACxB,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAA;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAC3C,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBAAE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;QAC3D,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,OAAO,QAAQ,CAAA;IACjB,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACxB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YAC7D,0DAA0D;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAChF,IAAI,SAAS;gBAAE,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;QAC3C,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAA;YAChB,IAAI,CAAC,GAAG,GAAG,SAAS,CAAA;QACtB,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;YACpB,IAAI,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;YACjC,IAAI,CAAC,QAAQ,EAAE,CAAA;YACf,IAAI,CAAC,UAAU,EAAE,EAAE,CAAA;YACnB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,yBAAyB,CAAA;YAC7F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;YAC1D,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACpE,yFAAyF;gBACzF,+CAA+C;gBAC/C,IAAI,CAAC,GAAG,EAAE,CAAA;gBACV,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,CAAA;gBAClC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAA;gBACpB,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAA;gBACnB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;YACnC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAA;IACxB,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,IAAI,CAAC,GAAG,EAAE,CAAA;QACV,IAAI,CAAC,KAAK,GAAG,GAAG,CAAA;QAChB,IAAI,CAAC,GAAG,GAAG,SAAS,CAAA;QACpB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;QAC3B,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAA;QACnB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;QACjC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;QACvB,IAAI,CAAC,cAAc,EAAE,EAAE,CAAA;QACvB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAA;QAC/B,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACjD,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,OAAO,IAAI,CAAC,GAAG,KAAK,GAAG,CAAA;IACzB,CAAC;IAEO,MAAM,CAAC,IAAkC,EAAE,EAAU;QAC3D,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACvC,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;YAClD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;YACf,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClB,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,OAAO,CAAC,IAAI,CAAC,CAAA;YACf,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;QACjC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAA;QAChB,IAAI,CAAC,GAAG,GAAG,SAAS,CAAA;QACpB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;QACvB,IAAI,CAAC,cAAc,EAAE,EAAE,CAAA;QACvB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAA;QAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAClD,CAAC;IAEO,WAAW,CAAC,GAAW,EAAE,MAAqB;QACpD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;YAAE,OAAM;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,cAAc,EAAE,EAAE,CAAA;QACvB,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,eAAe,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QAC1F,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;YAAE,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACtG,CAAC;IAED,0EAA0E;IAClE,QAAQ,CAAC,GAAW,EAAE,GAAW;QACvC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,KAAK,CAAA;QACxE,IAAI,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;QAC/B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,MAAiC,EAAE,OAAc;QACjF,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACtE,4FAA4F;QAC5F,0CAA0C;QAC1C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;YAAE,OAAM;QAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;QACjC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAA;QACpB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;QAC3B,IAAI,SAAS,EAAE,CAAC;YACd,yFAAyF;YACzF,2BAA2B;YAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAA;YAC3D,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;YACvB,IAAI,CAAC,cAAc,EAAE,EAAE,CAAA;YACvB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAA;YAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,CAAA;QACpC,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;YAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,oCAAoC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;QAC9E,IAAI,CAAC,QAAQ,EAAE,CAAA;IACjB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,MAAc,EAAE,OAAsB;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YACxD,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAA;YAClF,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,qFAAqF;gBACrF,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,OAAM;YACR,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAE7B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YACpG,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;YAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAA;YACrG,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACzB,MAAM,aAAa,GAAG,OAAO,GAAG,CAAC,KAAK,iBAAiB,CAAC,MAAM,CAAA;gBAC9D,yFAAyF;gBACzF,oFAAoF;gBACpF,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;wBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;oBAC9F,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,oEAAoE,CAAC,CAAA;oBAC7F,SAAQ;gBACV,CAAC;gBACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;YACrF,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;YACzE,2FAA2F;YAC3F,uBAAuB;YACvB,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;YAE5D,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;YACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;YAClB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAW;gBAC5C,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;gBAC7B,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,MAAM;qBACb,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC;qBACrD,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;aAClE,CAAC,CAAA;YACF,KAAK,CAAC,KAAK,EAAE,CAAA;YACb,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;YAChE,IAAI,QAAQ,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC5E,IAAI,QAAQ,KAAK,aAAa;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAA;YAExF,6CAA6C;YAC7C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;YACxE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAA;YAC9D,IAAI,CAAC,QAAQ,EAAE,CAAA;YAEf,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAQ;gBACxC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC;gBACvB,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;aAC/C,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC;CACF"}

package/dist/remote-access/probe.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Proves a freshly minted tunnel URL reaches *this* server before it is shown to the user.
+ *
+ * "Registered" only means cloudflared has an edge connection. The public name still has to
+ * propagate, and until it does a visitor gets Cloudflare's own error page. A QR code that opens an
+ * error page is worse than a few more seconds of "Starting…", so the URL is fetched once from the
+ * outside first.
+ *
+ * The probe goes through Cloudflare's edge *by SNI* before it ever asks DNS for the new name: the
+ * edge routes on the TLS server name, so it serves the tunnel before the hostname resolves anywhere,
+ * and an early OS lookup would negative-cache the NXDOMAIN (for up to half an hour on some
+ * resolvers) and blind every later attempt. Only when the edge path gives nothing does the probe
+ * fall back to the hostname, inside the same overall budget.
+ *
+ * Through the raw-socket client, not `node:https`: an agent or `lookup` override is what Bun ignores
+ * silently (ADR 2026-09-17-probe-the-tunnel-through-the-raw-socket-client-with-an-address-pin).
+ *
+ * Ported from: src-tauri/src/core/server/remote_access/probe.rs (image-generation line, `767ff6350`).
+ */
+import type { ProxyPolicy } from '../downloads/index.js';
+/**
+ * Served without an API key and exempt from Host validation (it is the Swagger document), so it
+ * answers the same whatever the user configured.
+ */
+export declare const PROBE_PATH = "/openapi.json";
+/**
+ * `info.title` of the server's OpenAPI document. A Cloudflare error page, a captive portal or
+ * somebody else's server is an *answer*, but not this one.
+ */
+export declare const PROBE_MARKER = "Atomic Chat API Server Endpoints";
+/** The real document is ~33 KB; anything far larger is not ours. */
+export declare const PROBE_BODY_CAP: number;
+export interface ProbeTimings {
+    /** Leaves most of the budget to the hostname fallback. */
+    edgeWaitMaxMs: number;
+    edgeRetryDelayMs: number;
+    hostnameRetryDelayMs: number;
+    attemptTimeoutMs: number;
+}
+export declare const DEFAULT_PROBE_TIMINGS: ProbeTimings;
+export interface EdgeAddress {
+    host: string;
+    port: number;
+}
+/** What one fetch established. */
+export type ProbeAnswer = 
+/** Our document came back. */
+'ours'
+/** Something answered, but not this server (yet). */
+ | 'foreign'
+/** Nothing answered at all. */
+ | 'unreachable';
+export interface Prober {
+    /**
+     * `true` once `url` answers as this core's public server, `false` if it never does within
+     * `budgetMs` or `signal` aborts first.
+     */
+    verify(url: string, budgetMs: number, signal?: AbortSignal): Promise<boolean>;
+}
+export declare function bodyIsOurs(body: string): boolean;
+/** One fetch of the probe document from `baseUrl`, on its own connection. */
+export declare function probeOnce(fetchImpl: typeof fetch, baseUrl: string, timeoutMs: number, signal?: AbortSignal): Promise<ProbeAnswer>;
+export interface PublicProberDeps {
+    /** Cloudflare's edge addresses; at most two are tried, IPv4 first. */
+    edgeAddresses?: () => Promise<EdgeAddress[]>;
+    /** The client for one attempt; the seam that lets a test stand in for the edge. */
+    fetchFor?: (policy: ProxyPolicy) => typeof fetch;
+    timings?: Partial<ProbeTimings>;
+    /** Extra trusted CA certificates, PEM — a test hook, as for the ChatGPT endpoints. */
+    ca?: ProxyPolicy['ca'];
+    now?: () => number;
+    sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
+}
+/** Cloudflare's edge addresses, IPv4 first, at most two distinct ones. */
+export declare function resolveEdgeAddresses(resolve?: (host: string) => Promise<Array<{
+    address: string;
+    family: number;
+}>>): Promise<EdgeAddress[]>;
+/** The production prober: edge-by-SNI first, then the hostname. */
+export declare class PublicProber implements Prober {
+    private readonly deps;
+    private readonly timings;
+    private readonly edgeAddresses;
+    private readonly fetchFor;
+    private readonly now;
+    private readonly sleep;
+    constructor(deps?: PublicProberDeps);
+    verify(url: string, budgetMs: number, signal?: AbortSignal): Promise<boolean>;
+    private policy;
+    private verifyThroughEdge;
+    private verifyThroughHostname;
+}

package/dist/remote-access/probe.js

@@ -0,0 +1,186 @@
+/**
+ * Proves a freshly minted tunnel URL reaches *this* server before it is shown to the user.
+ *
+ * "Registered" only means cloudflared has an edge connection. The public name still has to
+ * propagate, and until it does a visitor gets Cloudflare's own error page. A QR code that opens an
+ * error page is worse than a few more seconds of "Starting…", so the URL is fetched once from the
+ * outside first.
+ *
+ * The probe goes through Cloudflare's edge *by SNI* before it ever asks DNS for the new name: the
+ * edge routes on the TLS server name, so it serves the tunnel before the hostname resolves anywhere,
+ * and an early OS lookup would negative-cache the NXDOMAIN (for up to half an hour on some
+ * resolvers) and blind every later attempt. Only when the edge path gives nothing does the probe
+ * fall back to the hostname, inside the same overall budget.
+ *
+ * Through the raw-socket client, not `node:https`: an agent or `lookup` override is what Bun ignores
+ * silently (ADR 2026-09-17-probe-the-tunnel-through-the-raw-socket-client-with-an-address-pin).
+ *
+ * Ported from: src-tauri/src/core/server/remote_access/probe.rs (image-generation line, `767ff6350`).
+ */
+import { lookup } from 'node:dns/promises';
+import { createPolicyFetch } from '../downloads/index.js';
+import { hostOf } from './status.js';
+/**
+ * Served without an API key and exempt from Host validation (it is the Swagger document), so it
+ * answers the same whatever the user configured.
+ */
+export const PROBE_PATH = '/openapi.json';
+/**
+ * `info.title` of the server's OpenAPI document. A Cloudflare error page, a captive portal or
+ * somebody else's server is an *answer*, but not this one.
+ */
+export const PROBE_MARKER = 'Atomic Chat API Server Endpoints';
+/** The real document is ~33 KB; anything far larger is not ours. */
+export const PROBE_BODY_CAP = 256 * 1024;
+const EDGE_HOST = 'trycloudflare.com';
+const EDGE_PORT = 443;
+export const DEFAULT_PROBE_TIMINGS = {
+    edgeWaitMaxMs: 15_000,
+    edgeRetryDelayMs: 500,
+    hostnameRetryDelayMs: 1_000,
+    attemptTimeoutMs: 5_000,
+};
+/** A network that blocks the edge blocks every attempt; stop paying for it. */
+const EDGE_MAX_UNREACHABLE_ROUNDS = 2;
+export function bodyIsOurs(body) {
+    try {
+        const json = JSON.parse(body);
+        return json?.info?.title === PROBE_MARKER;
+    }
+    catch {
+        return false;
+    }
+}
+/** One fetch of the probe document from `baseUrl`, on its own connection. */
+export async function probeOnce(fetchImpl, baseUrl, timeoutMs, signal) {
+    const limit = AbortSignal.timeout(timeoutMs);
+    const combined = signal ? AbortSignal.any([signal, limit]) : limit;
+    let response;
+    try {
+        response = await fetchImpl(`${baseUrl.replace(/\/+$/, '')}${PROBE_PATH}`, {
+            signal: combined,
+            headers: { 'user-agent': 'atomic-chat-remote-access-probe', 'accept': 'application/json' },
+        });
+    }
+    catch {
+        return 'unreachable';
+    }
+    if (!response.ok) {
+        await response.body?.cancel().catch(() => { });
+        return 'foreign';
+    }
+    try {
+        const reader = (response.body ?? new ReadableStream({ start: (c) => c.close() })).getReader();
+        const decoder = new TextDecoder();
+        let body = '';
+        let size = 0;
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            size += value.byteLength;
+            if (size > PROBE_BODY_CAP) {
+                await reader.cancel().catch(() => { });
+                return 'foreign';
+            }
+            body += decoder.decode(value, { stream: true });
+        }
+        return bodyIsOurs(body + decoder.decode()) ? 'ours' : 'foreign';
+    }
+    catch {
+        return 'foreign';
+    }
+}
+/** Cloudflare's edge addresses, IPv4 first, at most two distinct ones. */
+export async function resolveEdgeAddresses(resolve = (host) => lookup(host, { all: true })) {
+    let resolved;
+    try {
+        resolved = await resolve(EDGE_HOST);
+    }
+    catch {
+        return [];
+    }
+    const distinct = resolved.filter((entry, index) => resolved.findIndex((other) => other.address === entry.address) === index);
+    return [...distinct]
+        .sort((left, right) => Number(left.family !== 4) - Number(right.family !== 4))
+        .slice(0, 2)
+        .map((entry) => ({ host: entry.address, port: EDGE_PORT }));
+}
+function defaultSleep(ms, signal) {
+    return new Promise((resolve) => {
+        if (signal?.aborted)
+            return resolve();
+        const timer = setTimeout(done, ms);
+        timer.unref?.();
+        function done() {
+            clearTimeout(timer);
+            signal?.removeEventListener('abort', done);
+            resolve();
+        }
+        signal?.addEventListener('abort', done, { once: true });
+    });
+}
+/** The production prober: edge-by-SNI first, then the hostname. */
+export class PublicProber {
+    deps;
+    timings;
+    edgeAddresses;
+    fetchFor;
+    now;
+    sleep;
+    constructor(deps = {}) {
+        this.deps = deps;
+        this.timings = { ...DEFAULT_PROBE_TIMINGS, ...deps.timings };
+        this.edgeAddresses = deps.edgeAddresses ?? (() => resolveEdgeAddresses());
+        this.fetchFor = deps.fetchFor ?? createPolicyFetch;
+        this.now = deps.now ?? Date.now;
+        this.sleep = deps.sleep ?? defaultSleep;
+    }
+    async verify(url, budgetMs, signal) {
+        if (hostOf(url) === undefined)
+            return false;
+        const deadline = this.now() + budgetMs;
+        if (await this.verifyThroughEdge(url, deadline, signal))
+            return true;
+        return this.verifyThroughHostname(url, deadline, signal);
+    }
+    policy(extra = {}) {
+        return this.deps.ca === undefined ? extra : { ...extra, ca: this.deps.ca };
+    }
+    async verifyThroughEdge(url, deadline, signal) {
+        const edgeDeadline = Math.min(deadline, this.now() + this.timings.edgeWaitMaxMs);
+        const addresses = await this.edgeAddresses();
+        if (addresses.length === 0)
+            return false;
+        let unreachableRounds = 0;
+        while (this.now() < edgeDeadline && !signal?.aborted) {
+            let anyAnswer = false;
+            for (const address of addresses) {
+                // The pin keeps the connection on the edge address while the TLS server name and `Host`
+                // stay the tunnel's: the SNI route. A fresh client per attempt means a fresh connection.
+                const pinned = this.fetchFor(this.policy({ connectTo: address }));
+                const answer = await probeOnce(pinned, url, this.timings.attemptTimeoutMs, signal);
+                if (answer === 'ours')
+                    return true;
+                if (answer === 'foreign')
+                    anyAnswer = true;
+            }
+            if (anyAnswer)
+                unreachableRounds = 0;
+            else if (++unreachableRounds >= EDGE_MAX_UNREACHABLE_ROUNDS)
+                return false;
+            await this.sleep(this.timings.edgeRetryDelayMs, signal);
+        }
+        return false;
+    }
+    async verifyThroughHostname(url, deadline, signal) {
+        while (this.now() < deadline && !signal?.aborted) {
+            const direct = this.fetchFor(this.policy());
+            if ((await probeOnce(direct, url, this.timings.attemptTimeoutMs, signal)) === 'ours')
+                return true;
+            await this.sleep(this.timings.hostnameRetryDelayMs, signal);
+        }
+        return false;
+    }
+}
+//# sourceMappingURL=probe.js.map

package/dist/remote-access/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../src/remote-access/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAEzD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,eAAe,CAAA;AACzC;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,kCAAkC,CAAA;AAC9D,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAA;AAExC,MAAM,SAAS,GAAG,mBAAmB,CAAA;AACrC,MAAM,SAAS,GAAG,GAAG,CAAA;AAUrB,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,aAAa,EAAE,MAAM;IACrB,gBAAgB,EAAE,GAAG;IACrB,oBAAoB,EAAE,KAAK;IAC3B,gBAAgB,EAAE,KAAK;CACxB,CAAA;AAED,+EAA+E;AAC/E,MAAM,2BAA2B,GAAG,CAAC,CAAA;AAwBrC,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0C,CAAA;QACtE,OAAO,IAAI,EAAE,IAAI,EAAE,KAAK,KAAK,YAAY,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAAuB,EACvB,OAAe,EACf,SAAiB,EACjB,MAAoB;IAEpB,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAClE,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,UAAU,EAAE,EAAE;YACxE,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,EAAE,YAAY,EAAE,iCAAiC,EAAE,QAAQ,EAAE,kBAAkB,EAAE;SAC3F,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC7C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,cAAc,CAAa,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;QACzG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;QACjC,IAAI,IAAI,GAAG,EAAE,CAAA;QACb,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAC3C,IAAI,IAAI;gBAAE,MAAK;YACf,IAAI,IAAI,KAAK,CAAC,UAAU,CAAA;YACxB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;gBAC1B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBACrC,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAcD,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAiF,CAAC,IAAI,EAAE,EAAE,CACxF,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAE7B,IAAI,QAAoD,CAAA;IACxD,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAC3F,CAAA;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC;SACjB,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;SAC7E,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,EAAU,EAAE,MAAoB;IACpD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,EAAE,CAAA;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAClC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;QACf,SAAS,IAAI;YACX,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,OAAO,EAAE,CAAA;QACX,CAAC;QACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,OAAO,YAAY;IAOM;IANZ,OAAO,CAAc;IACrB,aAAa,CAA8B;IAC3C,QAAQ,CAAuC;IAC/C,GAAG,CAAc;IACjB,KAAK,CAAqD;IAE3E,YAA6B,OAAyB,EAAE;QAA3B,SAAI,GAAJ,IAAI,CAAuB;QACtD,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,qBAAqB,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAC5D,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,EAAE,CAAC,CAAA;QACzE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAA;QAClD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,QAAgB,EAAE,MAAoB;QAC9D,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAA;QACtC,IAAI,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;QACpE,OAAO,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC1D,CAAC;IAEO,MAAM,CAAC,QAAqB,EAAE;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;IAC5E,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAW,EAAE,QAAgB,EAAE,MAAoB;QACjF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAChF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;QAC5C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QACxC,IAAI,iBAAiB,GAAG,CAAC,CAAA;QACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACrD,IAAI,SAAS,GAAG,KAAK,CAAA;YACrB,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;gBAChC,wFAAwF;gBACxF,yFAAyF;gBACzF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;gBACjE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;gBAClF,IAAI,MAAM,KAAK,MAAM;oBAAE,OAAO,IAAI,CAAA;gBAClC,IAAI,MAAM,KAAK,SAAS;oBAAE,SAAS,GAAG,IAAI,CAAA;YAC5C,CAAC;YACD,IAAI,SAAS;gBAAE,iBAAiB,GAAG,CAAC,CAAA;iBAC/B,IAAI,EAAE,iBAAiB,IAAI,2BAA2B;gBAAE,OAAO,KAAK,CAAA;YACzE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;QACzD,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,GAAW,EAAE,QAAgB,EAAE,MAAoB;QACrF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;YAC3C,IAAI,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAA;YACjG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAA;QAC7D,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;CACF"}