@betterportal/tunnels 1.0.24 → 1.0.26

package/lib/plugins/service-tunnels-admin/bp-routes/tunnels/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-tunnels-admin/bp-routes/tunnels/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,UAAU,EAChB,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,MAAM,2BAA2B,CAAC;AAC/C,eAAO,MAAM,KAAK,kBAAkB,CAAC;AACrC,eAAO,MAAM,WAAW,kDAAkD,CAAC;AAE3E,eAAO,MAAM,IAAI,EAAE,kBAKlB,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,UAGxB,CAAC"}

package/lib/plugins/service-tunnels-admin/bp-routes/tunnels/index.js

@@ -0,0 +1,14 @@
+export const viewId = "better-tunnels.tunnels";
+export const title = "BetterTunnels";
+export const description = "Tunnel sessions, status, and recent activity.";
+export const auth = {
+    required: true,
+    permissions: [
+        { serviceId: "service.betterportal.tunnels", viewId, permissions: ["read"] }
+    ]
+};
+export const cacheHints = {
+    ttlSeconds: 5,
+    varyBy: ["accept", "authorization", "x-bp-tenant-id", "x-bp-app-id"]
+};
+//# sourceMappingURL=index.js.map

package/lib/plugins/service-tunnels-admin/bp-routes/tunnels/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/plugins/service-tunnels-admin/bp-routes/tunnels/index.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,MAAM,GAAG,wBAAwB,CAAC;AAC/C,MAAM,CAAC,MAAM,KAAK,GAAG,eAAe,CAAC;AACrC,MAAM,CAAC,MAAM,WAAW,GAAG,+CAA+C,CAAC;AAE3E,MAAM,CAAC,MAAM,IAAI,GAAuB;IACtC,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE;QACX,EAAE,SAAS,EAAE,8BAA8B,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE;KAC7E;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAe;IACpC,UAAU,EAAE,CAAC;IACb,MAAM,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,CAAC;CACrE,CAAC"}

package/lib/plugins/service-tunnels-admin/brand-assets.d.ts

@@ -0,0 +1,7 @@
+export type BrandAssets = {
+    logoUrl: string;
+    markUrl: string;
+    faviconUrl: string;
+};
+export declare function loadBrandAssets(): Promise<BrandAssets>;
+//# sourceMappingURL=brand-assets.d.ts.map

package/lib/plugins/service-tunnels-admin/brand-assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brand-assets.d.ts","sourceRoot":"","sources":["../../../src/plugins/service-tunnels-admin/brand-assets.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAMF,wBAAsB,eAAe,IAAI,OAAO,CAAC,WAAW,CAAC,CAgB5D"}

package/lib/plugins/service-tunnels-admin/brand-assets.js

@@ -0,0 +1,24 @@
+import { readFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+let cached;
+const assetRoot = join(dirname(fileURLToPath(import.meta.url)), "assets/brand");
+export async function loadBrandAssets() {
+    if (cached)
+        return cached;
+    const [logo, mark, favicon] = await Promise.all([
+        readFile(join(assetRoot, "bettertunnels-horizontal-light.svg"), "utf8"),
+        readFile(join(assetRoot, "bettertunnels-square-dark-1024x1024.png")),
+        readFile(join(assetRoot, "favicon.svg"), "utf8")
+    ]);
+    cached = {
+        logoUrl: svgDataUrl(logo),
+        markUrl: `data:image/png;base64,${mark.toString("base64")}`,
+        faviconUrl: svgDataUrl(favicon)
+    };
+    return cached;
+}
+function svgDataUrl(value) {
+    return `data:image/svg+xml;base64,${Buffer.from(value).toString("base64")}`;
+}
+//# sourceMappingURL=brand-assets.js.map

package/lib/plugins/service-tunnels-admin/brand-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brand-assets.js","sourceRoot":"","sources":["../../../src/plugins/service-tunnels-admin/brand-assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAQzC,IAAI,MAA+B,CAAC;AAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AAEhF,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,oCAAoC,CAAC,EAAE,MAAM,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC;QACpE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC;KACjD,CAAC,CAAC;IAEH,MAAM,GAAG;QACP,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC;QACzB,OAAO,EAAE,yBAAyB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAC3D,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC;KAChC,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,6BAA6B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC9E,CAAC"}

package/lib/plugins/service-tunnels-admin/index.d.ts

@@ -0,0 +1,64 @@
+import { type BSBServiceConstructor, type Observable } from "@bsb/base";
+import * as av from "anyvali";
+import { BPService, type BPServiceDefinition } from "@betterportal/plugin-bsb";
+declare const Config: import("@bsb/base").BSBPluginConfigClass<av.ObjectSchema<{
+    host: av.StringSchema;
+    port: av.IntSchema;
+    database: av.ObjectSchema<{
+        connectionString: av.StringSchema;
+    }>;
+    betterportal: av.OptionalSchema<av.ObjectSchema<{
+        bpConfigPath: av.OptionalSchema<av.StringSchema>;
+        configApiToken: av.OptionalSchema<av.StringSchema>;
+        configEncryptionKey: av.OptionalSchema<av.StringSchema>;
+        controlPlaneUrl: av.OptionalSchema<av.StringSchema>;
+        serviceApiKey: av.OptionalSchema<av.StringSchema>;
+        bootstrapStatePath: av.StringSchema;
+        scopedConfigCachePath: av.StringSchema;
+        trustedProxyHeaders: av.BoolSchema;
+        cfProxy: av.BoolSchema;
+        trustedProxyIps: av.ArraySchema<av.StringSchema>;
+    }>>;
+}>>;
+declare const EventSchemas: {
+    readonly emitEvents: {};
+    readonly onEvents: {};
+    readonly emitReturnableEvents: {};
+    readonly onReturnableEvents: {};
+    readonly emitBroadcast: {};
+    readonly onBroadcast: {};
+};
+export declare class Plugin extends BPService<InstanceType<typeof Config>, typeof EventSchemas> {
+    static Config: import("@bsb/base").BSBPluginConfigClass<av.ObjectSchema<{
+        host: av.StringSchema;
+        port: av.IntSchema;
+        database: av.ObjectSchema<{
+            connectionString: av.StringSchema;
+        }>;
+        betterportal: av.OptionalSchema<av.ObjectSchema<{
+            bpConfigPath: av.OptionalSchema<av.StringSchema>;
+            configApiToken: av.OptionalSchema<av.StringSchema>;
+            configEncryptionKey: av.OptionalSchema<av.StringSchema>;
+            controlPlaneUrl: av.OptionalSchema<av.StringSchema>;
+            serviceApiKey: av.OptionalSchema<av.StringSchema>;
+            bootstrapStatePath: av.StringSchema;
+            scopedConfigCachePath: av.StringSchema;
+            trustedProxyHeaders: av.BoolSchema;
+            cfProxy: av.BoolSchema;
+            trustedProxyIps: av.ArraySchema<av.StringSchema>;
+        }>>;
+    }>>;
+    static EventSchemas: {
+        readonly emitEvents: {};
+        readonly onEvents: {};
+        readonly emitReturnableEvents: {};
+        readonly onReturnableEvents: {};
+        readonly emitBroadcast: {};
+        readonly onBroadcast: {};
+    };
+    constructor(cfg: BSBServiceConstructor<InstanceType<typeof Config>, typeof EventSchemas>);
+    init(obs: Observable): Promise<void>;
+    protected definition(): BPServiceDefinition;
+}
+export { Config, EventSchemas };
+//# sourceMappingURL=index.d.ts.map

package/lib/plugins/service-tunnels-admin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/plugins/service-tunnels-admin/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,UAAU,EAGhB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAA4B,SAAS,EAAE,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAazG,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;GAQX,CAAC;AAEF,QAAA,MAAM,YAAY;;;;;;;CAOhB,CAAC;AA6DH,qBAAa,MAAO,SAAQ,SAAS,CAAC,YAAY,CAAC,OAAO,MAAM,CAAC,EAAE,OAAO,YAAY,CAAC;IACrF,MAAM,CAAC,MAAM;;;;;;;;;;;;;;;;;;QAAU;IACvB,MAAM,CAAC,YAAY;;;;;;;MAAgB;gBAEvB,GAAG,EAAE,qBAAqB,CAAC,YAAY,CAAC,OAAO,MAAM,CAAC,EAAE,OAAO,YAAY,CAAC;IAIlF,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1C,SAAS,CAAC,UAAU,IAAI,mBAAmB;CAkB5C;AAED,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC"}

package/lib/plugins/service-tunnels-admin/index.js

@@ -0,0 +1,116 @@
+import { createConfigSchema, createEventSchemas } from "@bsb/base";
+import * as av from "anyvali";
+import { BetterPortalConfigSchema, BPService } from "@betterportal/plugin-bsb";
+import { registry } from "./.bp-generated/registry.js";
+import { initializePrisma } from "../../prisma.js";
+const PluginConfigSchema = av.object({
+    host: av.string().minLength(1).default("0.0.0.0"),
+    port: av.int().min(1).default(8083),
+    database: av.object({
+        connectionString: av.string().minLength(1).describe("PostgreSQL connection string")
+    }, { unknownKeys: "strip" }).describe("Database configuration"),
+    betterportal: BetterPortalConfigSchema
+}, { unknownKeys: "strip" });
+const Config = createConfigSchema({
+    name: "service-tunnels-admin",
+    description: "BetterPortal public and management UI for BetterTunnels",
+    image: "./betterportal-logo.png",
+    tags: ["betterportal", "web", "management", "tunnels"]
+}, PluginConfigSchema);
+const EventSchemas = createEventSchemas({
+    emitEvents: {},
+    onEvents: {},
+    emitReturnableEvents: {},
+    onReturnableEvents: {},
+    emitBroadcast: {},
+    onBroadcast: {}
+});
+const ConfigSchemas = [
+    {
+        id: "better-tunnels.tenant",
+        title: "BetterTunnels",
+        description: "Tenant-level BetterTunnels settings.",
+        scope: "tenant",
+        jsonSchema: {
+            type: "object",
+            properties: {
+                mainAuthAppPublicUrl: { type: "string" },
+                mainAuthAppId: { type: "string" }
+            },
+            required: ["mainAuthAppPublicUrl"]
+        },
+        groups: [
+            {
+                id: "cli-auth",
+                title: "CLI authentication",
+                description: "The BetterPortal app used for BetterTunnels CLI login.",
+                order: 10
+            }
+        ],
+        fields: [
+            {
+                key: "mainAuthAppPublicUrl",
+                title: "Main auth app public URL",
+                description: "Public BetterPortal app URL used to start CLI authentication.",
+                scope: "tenant",
+                visibility: "protected",
+                ownership: "bp",
+                sourceOfTruth: "bp",
+                groupId: "cli-auth",
+                order: 10,
+                required: true,
+                ui: {
+                    control: "url",
+                    placeholder: "https://betterportal.cloud"
+                }
+            },
+            {
+                key: "mainAuthAppId",
+                title: "Main auth app id",
+                description: "Optional BetterPortal app id to enforce on CLI verification.",
+                scope: "tenant",
+                visibility: "protected",
+                ownership: "bp",
+                sourceOfTruth: "bp",
+                groupId: "cli-auth",
+                order: 20,
+                required: false,
+                ui: {
+                    control: "text",
+                    placeholder: "app id"
+                }
+            }
+        ]
+    }
+];
+export class Plugin extends BPService {
+    static Config = Config;
+    static EventSchemas = EventSchemas;
+    constructor(cfg) {
+        super({ ...cfg, eventSchemas: EventSchemas });
+    }
+    async init(obs) {
+        await initializePrisma(this.config.database.connectionString, obs);
+        await super.init(obs);
+    }
+    definition() {
+        return {
+            manifest: {
+                pluginId: "service.betterportal.tunnels",
+                title: "BetterTunnels",
+                description: "Public site and management surface for BetterTunnels.",
+                category: "service",
+                capabilities: [
+                    "tunnels.public-landing",
+                    "tunnels.management",
+                    "tunnels.observability",
+                    "tunnels.client-auth"
+                ],
+                configSchemas: ConfigSchemas
+            },
+            registry
+        };
+    }
+}
+export { Config, EventSchemas };
+//# sourceMappingURL=index.js.map

package/lib/plugins/service-tunnels-admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/plugins/service-tunnels-admin/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAA4B,MAAM,0BAA0B,CAAC;AACzG,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,kBAAkB,GAAG,EAAE,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACjD,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC;QAClB,gBAAgB,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;KACpF,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC/D,YAAY,EAAE,wBAAwB;CACvC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7B,MAAM,MAAM,GAAG,kBAAkB,CAC/B;IACE,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,yDAAyD;IACtE,KAAK,EAAE,yBAAyB;IAChC,IAAI,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC;CACvD,EACD,kBAAkB,CACnB,CAAC;AAEF,MAAM,YAAY,GAAG,kBAAkB,CAAC;IACtC,UAAU,EAAE,EAAE;IACd,QAAQ,EAAE,EAAE;IACZ,oBAAoB,EAAE,EAAE;IACxB,kBAAkB,EAAE,EAAE;IACtB,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,EAAE;CAChB,CAAC,CAAC;AAEH,MAAM,aAAa,GAA6B;IAC9C;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,sCAAsC;QACnD,KAAK,EAAE,QAAQ;QACf,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAClC;YACD,QAAQ,EAAE,CAAC,sBAAsB,CAAC;SACnC;QACD,MAAM,EAAE;YACN;gBACE,EAAE,EAAE,UAAU;gBACd,KAAK,EAAE,oBAAoB;gBAC3B,WAAW,EAAE,wDAAwD;gBACrE,KAAK,EAAE,EAAE;aACV;SACF;QACD,MAAM,EAAE;YACN;gBACE,GAAG,EAAE,sBAAsB;gBAC3B,KAAK,EAAE,0BAA0B;gBACjC,WAAW,EAAE,+DAA+D;gBAC5E,KAAK,EAAE,QAAQ;gBACf,UAAU,EAAE,WAAW;gBACvB,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,OAAO,EAAE,UAAU;gBACnB,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,IAAI;gBACd,EAAE,EAAE;oBACF,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,4BAA4B;iBAC1C;aACF;YACD;gBACE,GAAG,EAAE,eAAe;gBACpB,KAAK,EAAE,kBAAkB;gBACzB,WAAW,EAAE,8DAA8D;gBAC3E,KAAK,EAAE,QAAQ;gBACf,UAAU,EAAE,WAAW;gBACvB,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,OAAO,EAAE,UAAU;gBACnB,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,KAAK;gBACf,EAAE,EAAE;oBACF,OAAO,EAAE,MAAM;oBACf,WAAW,EAAE,QAAQ;iBACtB;aACF;SACF;KACF;CACF,CAAC;AAEF,MAAM,OAAO,MAAO,SAAQ,SAA2D;IACrF,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;IAEnC,YAAY,GAA4E;QACtF,KAAK,CAAC,EAAE,GAAG,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAe;QACxB,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACnE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAES,UAAU;QAClB,OAAO;YACL,QAAQ,EAAE;gBACR,QAAQ,EAAE,8BAA8B;gBACxC,KAAK,EAAE,eAAe;gBACtB,WAAW,EAAE,uDAAuD;gBACpE,QAAQ,EAAE,SAAS;gBACnB,YAAY,EAAE;oBACZ,wBAAwB;oBACxB,oBAAoB;oBACpB,uBAAuB;oBACvB,qBAAqB;iBACtB;gBACD,aAAa,EAAE,aAAa;aAC7B;YACD,QAAQ;SACT,CAAC;IACJ,CAAC;;AAGH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC"}

package/lib/plugins/service-tunnels-client/ids.d.ts

@@ -0,0 +1,6 @@
+export declare function randomPrefix(): string;
+export declare function hashValue(value: string): string;
+export declare function normalizeHostPart(value: string): string;
+export declare function buildSubdomain(prefix: string, port: number, host: string): string;
+export declare function buildTunnelSubdomain(prefix: string, port: number, creatorIp: string): string;
+//# sourceMappingURL=ids.d.ts.map

package/lib/plugins/service-tunnels-client/ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../../src/plugins/service-tunnels-client/ids.ts"],"names":[],"mappings":"AAEA,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjF;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE5F"}

package/lib/plugins/service-tunnels-client/ids.js

@@ -0,0 +1,17 @@
+import { createHash, randomBytes } from "node:crypto";
+export function randomPrefix() {
+    return randomBytes(4).toString("base64url").toLowerCase().replace(/[^a-z0-9]/g, "").slice(0, 6).padEnd(6, "0");
+}
+export function hashValue(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+export function normalizeHostPart(value) {
+    return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || "host";
+}
+export function buildSubdomain(prefix, port, host) {
+    return `${prefix}-port${port}-${normalizeHostPart(host)}`;
+}
+export function buildTunnelSubdomain(prefix, port, creatorIp) {
+    return buildSubdomain(prefix, port, creatorIp);
+}
+//# sourceMappingURL=ids.js.map

package/lib/plugins/service-tunnels-client/ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../../src/plugins/service-tunnels-client/ids.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,UAAU,YAAY;IAC1B,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,IAAY,EAAE,IAAY;IACvE,OAAO,GAAG,MAAM,QAAQ,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,IAAY,EAAE,SAAiB;IAClF,OAAO,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AACjD,CAAC"}

package/lib/plugins/service-tunnels-client/index.d.ts

@@ -0,0 +1,166 @@
+import { BSBService, type BSBServiceConstructor, type Observable } from "@bsb/base";
+import * as av from "anyvali";
+export declare const Config: import("@bsb/base").BSBPluginConfigClass<av.ObjectSchema<{
+    database: av.ObjectSchema<{
+        connectionString: av.StringSchema;
+    }>;
+    port: av.NumberSchema;
+    domain: av.StringSchema;
+    publicUrl: av.StringSchema;
+    authAppBaseUrl: av.StringSchema;
+    authVerifyPath: av.StringSchema;
+}>>;
+export declare const EventSchemas: {
+    readonly emitEvents: {};
+    readonly onEvents: {
+        readonly "ws.toOrigin": {
+            input: av.ObjectSchema<{
+                publicServerId: av.StringSchema;
+                publicSocketId: av.StringSchema;
+                hostname: av.StringSchema;
+                path: av.StringSchema;
+                frameType: av.StringSchema;
+                event: av.OptionalSchema<av.StringSchema>;
+                body: av.OptionalSchema<av.StringSchema>;
+            }>;
+            description?: string;
+            readonly __brand: "fire-and-forget";
+        };
+        readonly "proxy.metrics": {
+            input: av.ObjectSchema<{
+                hostname: av.StringSchema;
+                requestId: av.StringSchema;
+                totalMs: import("@bsb/base").BSBType;
+                clientApiRoundtripMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+                cliOverheadMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+                originMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+                internalServerMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+            }>;
+            description?: string;
+            readonly __brand: "fire-and-forget";
+        };
+    };
+    readonly emitReturnableEvents: {};
+    readonly onReturnableEvents: {
+        readonly "proxy.request": {
+            input: av.ObjectSchema<{
+                hostname: av.StringSchema;
+                method: av.StringSchema;
+                path: av.StringSchema;
+                headers: av.RecordSchema<av.StringSchema>;
+                body: av.OptionalSchema<av.StringSchema>;
+                webStartedAt: import("@bsb/base").BSBType;
+            }>;
+            output: av.ObjectSchema<{
+                requestId: av.StringSchema;
+                ownerServerId: av.StringSchema;
+                status: import("@bsb/base").BSBType;
+                headers: av.RecordSchema<av.StringSchema>;
+                body: av.StringSchema;
+                webStartedAt: import("@bsb/base").BSBType;
+                clientApiRoundtripMs: import("@bsb/base").BSBType;
+                cliOverheadMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+                originMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+            }>;
+            description?: string;
+            defaultTimeout?: number;
+            readonly __brand: "returnable";
+        };
+    };
+    readonly emitBroadcast: {};
+    readonly onBroadcast: {};
+};
+export declare class Plugin extends BSBService<InstanceType<typeof Config>, typeof EventSchemas> {
+    static Config: import("@bsb/base").BSBPluginConfigClass<av.ObjectSchema<{
+        database: av.ObjectSchema<{
+            connectionString: av.StringSchema;
+        }>;
+        port: av.NumberSchema;
+        domain: av.StringSchema;
+        publicUrl: av.StringSchema;
+        authAppBaseUrl: av.StringSchema;
+        authVerifyPath: av.StringSchema;
+    }>>;
+    static EventSchemas: {
+        readonly emitEvents: {};
+        readonly onEvents: {
+            readonly "ws.toOrigin": {
+                input: av.ObjectSchema<{
+                    publicServerId: av.StringSchema;
+                    publicSocketId: av.StringSchema;
+                    hostname: av.StringSchema;
+                    path: av.StringSchema;
+                    frameType: av.StringSchema;
+                    event: av.OptionalSchema<av.StringSchema>;
+                    body: av.OptionalSchema<av.StringSchema>;
+                }>;
+                description?: string;
+                readonly __brand: "fire-and-forget";
+            };
+            readonly "proxy.metrics": {
+                input: av.ObjectSchema<{
+                    hostname: av.StringSchema;
+                    requestId: av.StringSchema;
+                    totalMs: import("@bsb/base").BSBType;
+                    clientApiRoundtripMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+                    cliOverheadMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+                    originMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+                    internalServerMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+                }>;
+                description?: string;
+                readonly __brand: "fire-and-forget";
+            };
+        };
+        readonly emitReturnableEvents: {};
+        readonly onReturnableEvents: {
+            readonly "proxy.request": {
+                input: av.ObjectSchema<{
+                    hostname: av.StringSchema;
+                    method: av.StringSchema;
+                    path: av.StringSchema;
+                    headers: av.RecordSchema<av.StringSchema>;
+                    body: av.OptionalSchema<av.StringSchema>;
+                    webStartedAt: import("@bsb/base").BSBType;
+                }>;
+                output: av.ObjectSchema<{
+                    requestId: av.StringSchema;
+                    ownerServerId: av.StringSchema;
+                    status: import("@bsb/base").BSBType;
+                    headers: av.RecordSchema<av.StringSchema>;
+                    body: av.StringSchema;
+                    webStartedAt: import("@bsb/base").BSBType;
+                    clientApiRoundtripMs: import("@bsb/base").BSBType;
+                    cliOverheadMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+                    originMs: av.OptionalSchema<import("@bsb/base").BSBType>;
+                }>;
+                description?: string;
+                defaultTimeout?: number;
+                readonly __brand: "returnable";
+            };
+        };
+        readonly emitBroadcast: {};
+        readonly onBroadcast: {};
+    };
+    readonly initBeforePlugins: string[];
+    readonly initAfterPlugins: string[];
+    readonly runBeforePlugins: string[];
+    readonly runAfterPlugins: string[];
+    private readonly registry;
+    private readonly app;
+    private readonly server;
+    private readonly wss;
+    private readonly web;
+    private pluginPackageVersion;
+    constructor(cfg: BSBServiceConstructor<InstanceType<typeof Config>, typeof EventSchemas>);
+    init(obs: Observable): Promise<void>;
+    run(obs: Observable): Promise<void>;
+    dispose(): Promise<void>;
+    private handleTunnelSocket;
+    private proxyRequest;
+    private handleClientFrame;
+    private resetIdleTimer;
+    private failPending;
+    private clearPendingTimers;
+}
+export declare function buildProxyResponse(body: Buffer, status: number, headers: HeadersInit): Response;
+//# sourceMappingURL=index.d.ts.map

package/lib/plugins/service-tunnels-client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/plugins/service-tunnels-client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,KAAK,qBAAqB,EAC1B,KAAK,UAAU,EAOhB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAuB9B,eAAO,MAAM,MAAM;;;;;;;;;GAgBlB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwDvB,CAAC;AAEH,qBAAa,MAAO,SAAQ,UAAU,CAAC,YAAY,CAAC,OAAO,MAAM,CAAC,EAAE,OAAO,YAAY,CAAC;IACtF,MAAM,CAAC,MAAM;;;;;;;;;QAAU;IACvB,MAAM,CAAC,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAAgB;IACnC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAAM;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAM;IACzC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAM;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAM;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAK;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAkB;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAkB;IACtC,OAAO,CAAC,oBAAoB,CAAW;gBAE3B,GAAG,EAAE,qBAAqB,CAAC,YAAY,CAAC,OAAO,MAAM,CAAC,EAAE,OAAO,YAAY,CAAC;IAQlF,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA+MpC,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAehB,kBAAkB;YAuKlB,YAAY;IA0E1B,OAAO,CAAC,iBAAiB;IA0DzB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,kBAAkB;CAK3B;AAwCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,QAAQ,CAG/F"}