@canaryai/cli 0.2.0 → 0.2.1

package/dist/{chunk-2T64Z2NI.js → chunk-7R4YFGP6.js}

@@ -2,8 +2,24 @@
 import fs from "fs/promises";
 import os from "os";
 import path from "path";
+import process from "process";
 var AUTH_DIR = path.join(os.homedir(), ".config", "canary-cli");
 var AUTH_FILE = path.join(AUTH_DIR, "auth.json");
+function getArgValue(argv, key) {
+  const index = argv.indexOf(key);
+  if (index === -1 || index >= argv.length - 1) return void 0;
+  return argv[index + 1];
+}
+function hasFlag(argv, ...flags) {
+  return flags.some((flag) => argv.includes(flag));
+}
+function envToProfile(env) {
+  if (env === "prod" || env === "production") return "production";
+  if (env === "dev") return "dev";
+  if (env === "local") return "local";
+  return env;
+}
+var VALID_ENVS = ["prod", "dev", "local"];
 var ENV_URLS = {
   prod: {
     api: "https://api.trycanary.ai",
@@ -85,13 +101,48 @@ async function saveAuth(auth, profile) {
   await fs.writeFile(AUTH_FILE, JSON.stringify(existing, null, 2), { encoding: "utf8", mode: 384 });
   return AUTH_FILE;
 }
+async function resolveConfig(argv) {
+  const env = getArgValue(argv, "--env");
+  const profile = env ? envToProfile(env) : void 0;
+  if (env && !ENV_URLS[env]) {
+    console.error(`Unknown environment: ${env}`);
+    console.error(`Valid environments: ${VALID_ENVS.join(", ")}`);
+    process.exit(1);
+  }
+  const storedApiUrl = await readStoredApiUrl(profile);
+  const apiUrl = getArgValue(argv, "--api-url") ?? (env ? ENV_URLS[env].api : void 0) ?? process.env.CANARY_API_URL ?? storedApiUrl ?? "https://api.trycanary.ai";
+  const explicitToken = getArgValue(argv, "--token");
+  let token;
+  if (explicitToken) {
+    token = explicitToken;
+  } else if (profile) {
+    token = await readStoredToken(profile) ?? process.env.CANARY_API_TOKEN ?? null;
+    if (!token) {
+      console.error(`Error: No token found for "${env}" profile.`);
+      console.error(`Run: canary login --env ${env}`);
+      process.exit(1);
+    }
+  } else {
+    token = process.env.CANARY_API_TOKEN ?? await readStoredToken() ?? null;
+    if (!token) {
+      console.error("Error: No API token found.");
+      console.error("Run: canary login");
+      process.exit(1);
+    }
+  }
+  return { apiUrl, token };
+}
 
 export {
+  getArgValue,
+  hasFlag,
+  envToProfile,
   ENV_URLS,
   readStoredAuth,
   readStoredToken,
   readStoredApiUrl,
   readAllStoredTokens,
-  saveAuth
+  saveAuth,
+  resolveConfig
 };
-//# sourceMappingURL=chunk-2T64Z2NI.js.map
+//# sourceMappingURL=chunk-7R4YFGP6.js.map

package/dist/chunk-7R4YFGP6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/auth.ts"],"sourcesContent":["import fs from \"node:fs/promises\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport process from \"node:process\";\n\ntype StoredAuth = {\n  token?: string;\n  apiUrl?: string;\n  orgId?: string;\n  orgName?: string;\n};\n\n/** Multi-profile auth file format */\ntype MultiProfileAuth = {\n  profiles: Record<string, StoredAuth>;\n  default: string;\n};\n\n/** Legacy flat format (single profile) */\ntype LegacyAuth = StoredAuth;\n\nconst AUTH_DIR = path.join(os.homedir(), \".config\", \"canary-cli\");\nconst AUTH_FILE = path.join(AUTH_DIR, \"auth.json\");\n\n/* ── Shared argv helpers ─────────────────────────────────────────────── */\n\nexport function getArgValue(argv: string[], key: string): string | undefined {\n  const index = argv.indexOf(key);\n  if (index === -1 || index >= argv.length - 1) return undefined;\n  return argv[index + 1];\n}\n\nexport function hasFlag(argv: string[], ...flags: string[]): boolean {\n  return flags.some((flag) => argv.includes(flag));\n}\n\n/* ── Environment / profile mapping ───────────────────────────────────── */\n\n/** Map --env values to profile names for multi-profile auth storage */\nexport function envToProfile(env: string): string {\n  if (env === \"prod\" || env === \"production\") return \"production\";\n  if (env === \"dev\") return \"dev\";\n  if (env === \"local\") return \"local\";\n  return env;\n}\n\nconst VALID_ENVS = [\"prod\", \"dev\", \"local\"];\n\n/** Environment URL mappings shared across CLI commands */\nexport const ENV_URLS: Record<string, { api: string; app: string }> = {\n  prod: {\n    api: \"https://api.trycanary.ai\",\n    app: \"https://app.trycanary.ai\",\n  },\n  production: {\n    api: \"https://api.trycanary.ai\",\n    app: \"https://app.trycanary.ai\",\n  },\n  dev: {\n    api: \"https://api.dev.trycanary.ai\",\n    app: \"https://app.dev.trycanary.ai\",\n  },\n  local: {\n    api: \"http://localhost:3000\",\n    app: \"http://localhost:5173\",\n  },\n};\n\nfunction isMultiProfile(data: unknown): data is MultiProfileAuth {\n  return typeof data === \"object\" && data !== null && \"profiles\" in data;\n}\n\n/** Read the raw auth file and normalize to multi-profile format */\nasync function readAuthFile(): Promise<MultiProfileAuth | null> {\n  try {\n    const content = await fs.readFile(AUTH_FILE, \"utf8\");\n    const data = JSON.parse(content) as unknown;\n\n    if (isMultiProfile(data)) {\n      return data;\n    }\n\n    // Legacy flat format — treat as the \"default\" profile\n    const legacy = data as LegacyAuth;\n    return {\n      profiles: { default: legacy },\n      default: \"default\",\n    };\n  } catch {\n    return null;\n  }\n}\n\nexport async function readStoredAuth(profile?: string): Promise<StoredAuth | null> {\n  const auth = await readAuthFile();\n  if (!auth) return null;\n\n  const key = profile ?? auth.default;\n  return auth.profiles[key] ?? null;\n}\n\nexport async function readStoredToken(profile?: string): Promise<string | null> {\n  const auth = await readStoredAuth(profile);\n  return auth?.token ?? null;\n}\n\nexport async function readStoredApiUrl(profile?: string): Promise<string | null> {\n  const auth = await readStoredAuth(profile);\n  return auth?.apiUrl ?? null;\n}\n\n/** Return all stored tokens across every profile */\nexport async function readAllStoredTokens(): Promise<string[]> {\n  const auth = await readAuthFile();\n  if (!auth) return [];\n  return Object.values(auth.profiles)\n    .map((p) => p.token)\n    .filter((t): t is string => !!t);\n}\n\nexport async function saveAuth(auth: StoredAuth, profile?: string): Promise<string> {\n  await fs.mkdir(AUTH_DIR, { recursive: true, mode: 0o700 });\n\n  // Read existing file (may be legacy or multi-profile)\n  let existing: MultiProfileAuth;\n  try {\n    const content = await fs.readFile(AUTH_FILE, \"utf8\");\n    const data = JSON.parse(content) as unknown;\n\n    if (isMultiProfile(data)) {\n      existing = data;\n    } else {\n      // Migrate legacy flat format into profiles.default\n      existing = {\n        profiles: { default: data as LegacyAuth },\n        default: \"default\",\n      };\n    }\n  } catch {\n    existing = { profiles: {}, default: \"default\" };\n  }\n\n  const key = profile ?? \"default\";\n  existing.profiles[key] = auth;\n\n  // Set default to this profile if no default exists yet\n  if (!existing.profiles[existing.default]) {\n    existing.default = key;\n  }\n\n  await fs.writeFile(AUTH_FILE, JSON.stringify(existing, null, 2), { encoding: \"utf8\", mode: 0o600 });\n  return AUTH_FILE;\n}\n\n/* ── Shared config resolution ────────────────────────────────────────── */\n\nexport type ResolvedConfig = { apiUrl: string; token: string };\n\n/**\n * Resolve API URL and auth token from argv flags, env vars, and stored profiles.\n * Used by knobs, feature-flag, release, and debug-session commands.\n */\nexport async function resolveConfig(argv: string[]): Promise<ResolvedConfig> {\n  const env = getArgValue(argv, \"--env\");\n  const profile = env ? envToProfile(env) : undefined;\n\n  if (env && !ENV_URLS[env]) {\n    console.error(`Unknown environment: ${env}`);\n    console.error(`Valid environments: ${VALID_ENVS.join(\", \")}`);\n    process.exit(1);\n  }\n\n  const storedApiUrl = await readStoredApiUrl(profile);\n  const apiUrl =\n    getArgValue(argv, \"--api-url\") ??\n    (env ? ENV_URLS[env].api : undefined) ??\n    process.env.CANARY_API_URL ??\n    storedApiUrl ??\n    \"https://api.trycanary.ai\";\n\n  // Explicit --token flag always wins\n  const explicitToken = getArgValue(argv, \"--token\");\n\n  let token: string | null;\n  if (explicitToken) {\n    token = explicitToken;\n  } else if (profile) {\n    // --env was specified: profile token takes priority, env var is fallback\n    token = (await readStoredToken(profile)) ?? process.env.CANARY_API_TOKEN ?? null;\n    if (!token) {\n      console.error(`Error: No token found for \"${env}\" profile.`);\n      console.error(`Run: canary login --env ${env}`);\n      process.exit(1);\n    }\n  } else {\n    // No --env: env var first, then default profile\n    token = process.env.CANARY_API_TOKEN ?? (await readStoredToken()) ?? null;\n    if (!token) {\n      console.error(\"Error: No API token found.\");\n      console.error(\"Run: canary login\");\n      process.exit(1);\n    }\n  }\n\n  return { apiUrl, token };\n}\n"],"mappings":";AAAA,OAAO,QAAQ;AACf,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,OAAO,aAAa;AAkBpB,IAAM,WAAW,KAAK,KAAK,GAAG,QAAQ,GAAG,WAAW,YAAY;AAChE,IAAM,YAAY,KAAK,KAAK,UAAU,WAAW;AAI1C,SAAS,YAAY,MAAgB,KAAiC;AAC3E,QAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,MAAI,UAAU,MAAM,SAAS,KAAK,SAAS,EAAG,QAAO;AACrD,SAAO,KAAK,QAAQ,CAAC;AACvB;AAEO,SAAS,QAAQ,SAAmB,OAA0B;AACnE,SAAO,MAAM,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC;AACjD;AAKO,SAAS,aAAa,KAAqB;AAChD,MAAI,QAAQ,UAAU,QAAQ,aAAc,QAAO;AACnD,MAAI,QAAQ,MAAO,QAAO;AAC1B,MAAI,QAAQ,QAAS,QAAO;AAC5B,SAAO;AACT;AAEA,IAAM,aAAa,CAAC,QAAQ,OAAO,OAAO;AAGnC,IAAM,WAAyD;AAAA,EACpE,MAAM;AAAA,IACJ,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AAAA,EACA,YAAY;AAAA,IACV,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AAAA,EACA,KAAK;AAAA,IACH,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AAAA,EACA,OAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;AAEA,SAAS,eAAe,MAAyC;AAC/D,SAAO,OAAO,SAAS,YAAY,SAAS,QAAQ,cAAc;AACpE;AAGA,eAAe,eAAiD;AAC9D,MAAI;AACF,UAAM,UAAU,MAAM,GAAG,SAAS,WAAW,MAAM;AACnD,UAAM,OAAO,KAAK,MAAM,OAAO;AAE/B,QAAI,eAAe,IAAI,GAAG;AACxB,aAAO;AAAA,IACT;AAGA,UAAM,SAAS;AACf,WAAO;AAAA,MACL,UAAU,EAAE,SAAS,OAAO;AAAA,MAC5B,SAAS;AAAA,IACX;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,eAAe,SAA8C;AACjF,QAAM,OAAO,MAAM,aAAa;AAChC,MAAI,CAAC,KAAM,QAAO;AAElB,QAAM,MAAM,WAAW,KAAK;AAC5B,SAAO,KAAK,SAAS,GAAG,KAAK;AAC/B;AAEA,eAAsB,gBAAgB,SAA0C;AAC9E,QAAM,OAAO,MAAM,eAAe,OAAO;AACzC,SAAO,MAAM,SAAS;AACxB;AAEA,eAAsB,iBAAiB,SAA0C;AAC/E,QAAM,OAAO,MAAM,eAAe,OAAO;AACzC,SAAO,MAAM,UAAU;AACzB;AAGA,eAAsB,sBAAyC;AAC7D,QAAM,OAAO,MAAM,aAAa;AAChC,MAAI,CAAC,KAAM,QAAO,CAAC;AACnB,SAAO,OAAO,OAAO,KAAK,QAAQ,EAC/B,IAAI,CAAC,MAAM,EAAE,KAAK,EAClB,OAAO,CAAC,MAAmB,CAAC,CAAC,CAAC;AACnC;AAEA,eAAsB,SAAS,MAAkB,SAAmC;AAClF,QAAM,GAAG,MAAM,UAAU,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGzD,MAAI;AACJ,MAAI;AACF,UAAM,UAAU,MAAM,GAAG,SAAS,WAAW,MAAM;AACnD,UAAM,OAAO,KAAK,MAAM,OAAO;AAE/B,QAAI,eAAe,IAAI,GAAG;AACxB,iBAAW;AAAA,IACb,OAAO;AAEL,iBAAW;AAAA,QACT,UAAU,EAAE,SAAS,KAAmB;AAAA,QACxC,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF,QAAQ;AACN,eAAW,EAAE,UAAU,CAAC,GAAG,SAAS,UAAU;AAAA,EAChD;AAEA,QAAM,MAAM,WAAW;AACvB,WAAS,SAAS,GAAG,IAAI;AAGzB,MAAI,CAAC,SAAS,SAAS,SAAS,OAAO,GAAG;AACxC,aAAS,UAAU;AAAA,EACrB;AAEA,QAAM,GAAG,UAAU,WAAW,KAAK,UAAU,UAAU,MAAM,CAAC,GAAG,EAAE,UAAU,QAAQ,MAAM,IAAM,CAAC;AAClG,SAAO;AACT;AAUA,eAAsB,cAAc,MAAyC;AAC3E,QAAM,MAAM,YAAY,MAAM,OAAO;AACrC,QAAM,UAAU,MAAM,aAAa,GAAG,IAAI;AAE1C,MAAI,OAAO,CAAC,SAAS,GAAG,GAAG;AACzB,YAAQ,MAAM,wBAAwB,GAAG,EAAE;AAC3C,YAAQ,MAAM,uBAAuB,WAAW,KAAK,IAAI,CAAC,EAAE;AAC5D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,eAAe,MAAM,iBAAiB,OAAO;AACnD,QAAM,SACJ,YAAY,MAAM,WAAW,MAC5B,MAAM,SAAS,GAAG,EAAE,MAAM,WAC3B,QAAQ,IAAI,kBACZ,gBACA;AAGF,QAAM,gBAAgB,YAAY,MAAM,SAAS;AAEjD,MAAI;AACJ,MAAI,eAAe;AACjB,YAAQ;AAAA,EACV,WAAW,SAAS;AAElB,YAAS,MAAM,gBAAgB,OAAO,KAAM,QAAQ,IAAI,oBAAoB;AAC5E,QAAI,CAAC,OAAO;AACV,cAAQ,MAAM,8BAA8B,GAAG,YAAY;AAC3D,cAAQ,MAAM,2BAA2B,GAAG,EAAE;AAC9C,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF,OAAO;AAEL,YAAQ,QAAQ,IAAI,oBAAqB,MAAM,gBAAgB,KAAM;AACrE,QAAI,CAAC,OAAO;AACV,cAAQ,MAAM,4BAA4B;AAC1C,cAAQ,MAAM,mBAAmB;AACjC,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ,MAAM;AACzB;","names":[]}

package/dist/chunk-DXJNFJ3A.js

@@ -0,0 +1,64 @@
+import {
+  getArgValue
+} from "./chunk-7R4YFGP6.js";
+
+// src/cli-helpers.ts
+import process from "process";
+function toLifecycleLabel(stage) {
+  switch (stage) {
+    case "deprecated":
+      return "deprecated";
+    case "ready_for_cleanup":
+      return "ready_for_cleanup";
+    default:
+      return "active";
+  }
+}
+function parseLifecycleStage(argv) {
+  const stage = getArgValue(argv, "--stage");
+  if (!stage || !["active", "deprecated", "ready_for_cleanup"].includes(stage)) {
+    console.error("Error: --stage is required and must be one of: active, deprecated, ready_for_cleanup");
+    process.exit(1);
+  }
+  return stage;
+}
+async function apiRequest(apiUrl, token, method, path, body) {
+  const res = await fetch(`${apiUrl}${path}`, {
+    method,
+    headers: {
+      Authorization: `Bearer ${token}`,
+      "Content-Type": "application/json"
+    },
+    ...body ? { body: JSON.stringify(body) } : {}
+  });
+  if (res.status === 401) {
+    console.error("Error: Unauthorized. Your session may have expired.");
+    console.error("Run: canary login");
+    process.exit(1);
+  }
+  return await res.json();
+}
+async function fetchList(apiUrl, token, path, listKey) {
+  const res = await fetch(`${apiUrl}${path}`, {
+    headers: { Authorization: `Bearer ${token}` }
+  });
+  if (res.status === 401) {
+    console.error("Error: Unauthorized. Your session may have expired.");
+    console.error("Run: canary login");
+    process.exit(1);
+  }
+  const json = await res.json();
+  if (!json.ok) {
+    console.error(`Error: ${json.error}`);
+    process.exit(1);
+  }
+  return json[listKey] ?? [];
+}
+
+export {
+  toLifecycleLabel,
+  parseLifecycleStage,
+  apiRequest,
+  fetchList
+};
+//# sourceMappingURL=chunk-DXJNFJ3A.js.map

package/dist/chunk-DXJNFJ3A.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli-helpers.ts"],"sourcesContent":["/**\n * Shared CLI helpers for superadmin management commands (knobs, feature-flags).\n */\n\nimport process from \"node:process\";\nimport { getArgValue } from \"./auth.js\";\n\nexport type LifecycleStage = \"active\" | \"deprecated\" | \"ready_for_cleanup\";\n\nexport function toLifecycleLabel(stage: LifecycleStage): string {\n  switch (stage) {\n    case \"deprecated\":\n      return \"deprecated\";\n    case \"ready_for_cleanup\":\n      return \"ready_for_cleanup\";\n    default:\n      return \"active\";\n  }\n}\n\nexport function parseLifecycleStage(argv: string[]): LifecycleStage {\n  const stage = getArgValue(argv, \"--stage\");\n  if (!stage || ![\"active\", \"deprecated\", \"ready_for_cleanup\"].includes(stage)) {\n    console.error(\"Error: --stage is required and must be one of: active, deprecated, ready_for_cleanup\");\n    process.exit(1);\n  }\n  return stage as LifecycleStage;\n}\n\nexport async function apiRequest<T extends { ok: boolean; error?: string }>(\n  apiUrl: string,\n  token: string,\n  method: string,\n  path: string,\n  body?: Record<string, unknown>\n): Promise<T> {\n  const res = await fetch(`${apiUrl}${path}`, {\n    method,\n    headers: {\n      Authorization: `Bearer ${token}`,\n      \"Content-Type\": \"application/json\",\n    },\n    ...(body ? { body: JSON.stringify(body) } : {}),\n  });\n\n  if (res.status === 401) {\n    console.error(\"Error: Unauthorized. Your session may have expired.\");\n    console.error(\"Run: canary login\");\n    process.exit(1);\n  }\n\n  return (await res.json()) as T;\n}\n\nexport async function fetchList<T>(\n  apiUrl: string,\n  token: string,\n  path: string,\n  listKey: string\n): Promise<T[]> {\n  const res = await fetch(`${apiUrl}${path}`, {\n    headers: { Authorization: `Bearer ${token}` },\n  });\n\n  if (res.status === 401) {\n    console.error(\"Error: Unauthorized. Your session may have expired.\");\n    console.error(\"Run: canary login\");\n    process.exit(1);\n  }\n\n  const json = (await res.json()) as Record<string, unknown>;\n\n  if (!json.ok) {\n    console.error(`Error: ${json.error}`);\n    process.exit(1);\n  }\n\n  return (json[listKey] as T[]) ?? [];\n}\n"],"mappings":";;;;;AAIA,OAAO,aAAa;AAKb,SAAS,iBAAiB,OAA+B;AAC9D,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEO,SAAS,oBAAoB,MAAgC;AAClE,QAAM,QAAQ,YAAY,MAAM,SAAS;AACzC,MAAI,CAAC,SAAS,CAAC,CAAC,UAAU,cAAc,mBAAmB,EAAE,SAAS,KAAK,GAAG;AAC5E,YAAQ,MAAM,sFAAsF;AACpG,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,SAAO;AACT;AAEA,eAAsB,WACpB,QACA,OACA,QACA,MACA,MACY;AACZ,QAAM,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,IAAI,IAAI;AAAA,IAC1C;AAAA,IACA,SAAS;AAAA,MACP,eAAe,UAAU,KAAK;AAAA,MAC9B,gBAAgB;AAAA,IAClB;AAAA,IACA,GAAI,OAAO,EAAE,MAAM,KAAK,UAAU,IAAI,EAAE,IAAI,CAAC;AAAA,EAC/C,CAAC;AAED,MAAI,IAAI,WAAW,KAAK;AACtB,YAAQ,MAAM,qDAAqD;AACnE,YAAQ,MAAM,mBAAmB;AACjC,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,SAAQ,MAAM,IAAI,KAAK;AACzB;AAEA,eAAsB,UACpB,QACA,OACA,MACA,SACc;AACd,QAAM,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,IAAI,IAAI;AAAA,IAC1C,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,EAC9C,CAAC;AAED,MAAI,IAAI,WAAW,KAAK;AACtB,YAAQ,MAAM,qDAAqD;AACnE,YAAQ,MAAM,mBAAmB;AACjC,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,OAAQ,MAAM,IAAI,KAAK;AAE7B,MAAI,CAAC,KAAK,IAAI;AACZ,YAAQ,MAAM,UAAU,KAAK,KAAK,EAAE;AACpC,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,SAAQ,KAAK,OAAO,KAAa,CAAC;AACpC;","names":[]}

package/dist/{chunk-V7U52ISX.js → chunk-HOYYXZPV.js}

@@ -1,6 +1,6 @@
 import {
   readStoredToken
-} from "./chunk-2T64Z2NI.js";
+} from "./chunk-7R4YFGP6.js";
 
 // src/local-run.ts
 import process from "process";
@@ -99,11 +99,7 @@ async function runTunnel(argv) {
   let reconnectAttempts = 0;
   const connect = async () => {
     try {
-      const data = await createTunnel({
-        apiUrl,
-        token,
-        port
-      });
+      const data = await createTunnel({ apiUrl, token, port });
       console.log(`Tunnel connected: ${data.publicUrl ?? data.tunnelId}`);
       if (data.publicUrl) {
         console.log(`Public URL: ${data.publicUrl}`);
@@ -174,13 +170,128 @@ async function createTunnel(input) {
   }
   return { tunnelId: data.tunnelId, publicUrl: data.publicUrl, token: data.token };
 }
+function handleHttpRequest(ctx, request) {
+  const targetUrl = `http://localhost:${ctx.port}${request.path.startsWith("/") ? request.path : `/${request.path}`}`;
+  const body = request.bodyBase64 ? Buffer.from(request.bodyBase64, "base64") : void 0;
+  const headers = { ...request.headers };
+  delete headers.host;
+  delete headers["content-length"];
+  fetch(targetUrl, { method: request.method, headers, body: body ?? void 0 }).then(async (res) => {
+    const resBody = await res.arrayBuffer();
+    const resHeaders = Object.fromEntries(res.headers.entries());
+    delete resHeaders["set-cookie"];
+    const getSetCookie = res.headers.getSetCookie;
+    const setCookieValues = typeof getSetCookie === "function" ? getSetCookie.call(res.headers) : [];
+    const fallbackSetCookie = res.headers.get("set-cookie");
+    if (setCookieValues.length === 0 && fallbackSetCookie) {
+      setCookieValues.push(fallbackSetCookie);
+    }
+    if (setCookieValues.length > 0) {
+      resHeaders["set-cookie"] = setCookieValues;
+    }
+    const responsePayload = {
+      type: "http_response",
+      id: request.id,
+      status: res.status,
+      headers: resHeaders,
+      bodyBase64: resBody.byteLength ? Buffer.from(resBody).toString("base64") : null
+    };
+    ctx.ws.send(JSON.stringify(responsePayload));
+  }).catch((error) => {
+    const responsePayload = {
+      type: "http_response",
+      id: request.id,
+      status: 502,
+      headers: { "content-type": "text/plain" },
+      bodyBase64: Buffer.from(`Tunnel error: ${String(error)}`).toString("base64")
+    };
+    ctx.ws.send(JSON.stringify(responsePayload));
+  });
+}
+function handleWsOpen(ctx, request) {
+  const targetUrl = `ws://localhost:${ctx.port}${request.path.startsWith("/") ? request.path : `/${request.path}`}`;
+  const protocolsHeader = request.headers["sec-websocket-protocol"] ?? request.headers["Sec-WebSocket-Protocol"];
+  const protocols = protocolsHeader ? protocolsHeader.split(",").map((v) => v.trim()).filter(Boolean) : void 0;
+  const localWs = new WebSocket(targetUrl, protocols);
+  ctx.wsConnections.set(request.id, localWs);
+  localWs.onopen = () => {
+    ctx.ws.send(JSON.stringify({ type: "ws_ready", id: request.id }));
+    const queued = ctx.wsQueues.get(request.id);
+    if (queued) {
+      for (const message of queued) {
+        ctx.ws.send(JSON.stringify(message));
+      }
+      ctx.wsQueues.delete(request.id);
+    }
+  };
+  localWs.onmessage = (event) => {
+    const data = typeof event.data === "string" ? Buffer.from(event.data) : Buffer.from(event.data);
+    const response = {
+      type: "ws_message",
+      id: request.id,
+      dataBase64: data.toString("base64"),
+      isBinary: typeof event.data !== "string"
+    };
+    ctx.ws.send(JSON.stringify(response));
+  };
+  localWs.onclose = (event) => {
+    ctx.wsConnections.delete(request.id);
+    const response = {
+      type: "ws_close",
+      id: request.id,
+      code: event.code,
+      reason: event.reason
+    };
+    ctx.ws.send(JSON.stringify(response));
+  };
+  localWs.onerror = () => {
+    ctx.wsConnections.delete(request.id);
+    const response = {
+      type: "ws_close",
+      id: request.id,
+      code: 1011,
+      reason: "local_ws_error"
+    };
+    ctx.ws.send(JSON.stringify(response));
+  };
+}
+function handleWsMessage(ctx, message) {
+  const localWs = ctx.wsConnections.get(message.id);
+  const data = Buffer.from(message.dataBase64, "base64");
+  if (!localWs || localWs.readyState !== WebSocket.OPEN) {
+    const queued = ctx.wsQueues.get(message.id) ?? [];
+    queued.push(message);
+    ctx.wsQueues.set(message.id, queued);
+    return;
+  }
+  if (message.isBinary) {
+    localWs.send(data);
+  } else {
+    localWs.send(data.toString());
+  }
+}
+function handleWsClose(ctx, message) {
+  const localWs = ctx.wsConnections.get(message.id);
+  if (!localWs) {
+    const queued = ctx.wsQueues.get(message.id) ?? [];
+    queued.push(message);
+    ctx.wsQueues.set(message.id, queued);
+    return;
+  }
+  localWs.close(message.code ?? 1e3, message.reason ?? "");
+  ctx.wsConnections.delete(message.id);
+}
 function connectTunnel(input) {
   const wsUrl = toWebSocketUrl(
     `${input.apiUrl}/local-tests/tunnels/${input.tunnelId}/connect?token=${input.token}`
   );
   const ws = new WebSocket(wsUrl);
-  const wsConnections = /* @__PURE__ */ new Map();
-  const wsQueues = /* @__PURE__ */ new Map();
+  const ctx = {
+    ws,
+    port: input.port,
+    wsConnections: /* @__PURE__ */ new Map(),
+    wsQueues: /* @__PURE__ */ new Map()
+  };
   ws.onopen = () => {
     input.onReady?.();
   };
@@ -194,128 +305,22 @@ function connectTunnel(input) {
     try {
       const raw = typeof event.data === "string" ? event.data : Buffer.from(event.data).toString();
       const payload = JSON.parse(raw);
-      if (payload.type === "http_request") {
-        const request = payload;
-        const targetUrl = `http://localhost:${input.port}${request.path.startsWith("/") ? request.path : `/${request.path}`}`;
-        const body = request.bodyBase64 ? Buffer.from(request.bodyBase64, "base64") : void 0;
-        const headers = { ...request.headers };
-        delete headers.host;
-        delete headers["content-length"];
-        try {
-          const res = await fetch(targetUrl, {
-            method: request.method,
-            headers,
-            body: body ?? void 0
-          });
-          const resBody = await res.arrayBuffer();
-          const resHeaders = Object.fromEntries(res.headers.entries());
-          delete resHeaders["set-cookie"];
-          const getSetCookie = res.headers.getSetCookie;
-          const setCookieValues = typeof getSetCookie === "function" ? getSetCookie.call(res.headers) : [];
-          const fallbackSetCookie = res.headers.get("set-cookie");
-          if (setCookieValues.length === 0 && fallbackSetCookie) {
-            setCookieValues.push(fallbackSetCookie);
-          }
-          if (setCookieValues.length > 0) {
-            resHeaders["set-cookie"] = setCookieValues;
-          }
-          const responsePayload = {
-            type: "http_response",
-            id: request.id,
-            status: res.status,
-            headers: resHeaders,
-            bodyBase64: resBody.byteLength ? Buffer.from(resBody).toString("base64") : null
-          };
-          ws.send(JSON.stringify(responsePayload));
-        } catch (error) {
-          const responsePayload = {
-            type: "http_response",
-            id: request.id,
-            status: 502,
-            headers: { "content-type": "text/plain" },
-            bodyBase64: Buffer.from(`Tunnel error: ${String(error)}`).toString("base64")
-          };
-          ws.send(JSON.stringify(responsePayload));
-        }
-      }
-      if (payload.type === "ws_open") {
-        const request = payload;
-        const targetUrl = `ws://localhost:${input.port}${request.path.startsWith("/") ? request.path : `/${request.path}`}`;
-        const protocolsHeader = request.headers["sec-websocket-protocol"] ?? request.headers["Sec-WebSocket-Protocol"];
-        const protocols = protocolsHeader ? protocolsHeader.split(",").map((value) => value.trim()).filter(Boolean) : void 0;
-        const localWs = new WebSocket(targetUrl, protocols);
-        wsConnections.set(request.id, localWs);
-        localWs.onopen = () => {
-          ws.send(JSON.stringify({ type: "ws_ready", id: request.id }));
-          const queued = wsQueues.get(request.id);
-          if (queued) {
-            for (const message of queued) {
-              ws.send(JSON.stringify(message));
-            }
-            wsQueues.delete(request.id);
-          }
-        };
-        localWs.onmessage = (event2) => {
-          const data = typeof event2.data === "string" ? Buffer.from(event2.data) : Buffer.from(event2.data);
-          const response = {
-            type: "ws_message",
-            id: request.id,
-            dataBase64: data.toString("base64"),
-            isBinary: typeof event2.data !== "string"
-          };
-          ws.send(JSON.stringify(response));
-        };
-        localWs.onclose = (event2) => {
-          wsConnections.delete(request.id);
-          const response = {
-            type: "ws_close",
-            id: request.id,
-            code: event2.code,
-            reason: event2.reason
-          };
-          ws.send(JSON.stringify(response));
-        };
-        localWs.onerror = () => {
-          wsConnections.delete(request.id);
-          const response = {
-            type: "ws_close",
-            id: request.id,
-            code: 1011,
-            reason: "local_ws_error"
-          };
-          ws.send(JSON.stringify(response));
-        };
-      }
-      if (payload.type === "ws_message") {
-        const message = payload;
-        const localWs = wsConnections.get(message.id);
-        const data = Buffer.from(message.dataBase64, "base64");
-        if (!localWs || localWs.readyState !== WebSocket.OPEN) {
-          const queued = wsQueues.get(message.id) ?? [];
-          queued.push(message);
-          wsQueues.set(message.id, queued);
-          return;
-        }
-        if (message.isBinary) {
-          localWs.send(data);
-        } else {
-          localWs.send(data.toString());
-        }
-      }
-      if (payload.type === "ws_close") {
-        const message = payload;
-        const localWs = wsConnections.get(message.id);
-        if (!localWs) {
-          const queued = wsQueues.get(message.id) ?? [];
-          queued.push(message);
-          wsQueues.set(message.id, queued);
-          return;
-        }
-        localWs.close(message.code ?? 1e3, message.reason ?? "");
-        wsConnections.delete(message.id);
-      }
-      if (payload.type === "health_ping") {
-        ws.send(JSON.stringify({ type: "health_pong" }));
+      switch (payload.type) {
+        case "http_request":
+          handleHttpRequest(ctx, payload);
+          break;
+        case "ws_open":
+          handleWsOpen(ctx, payload);
+          break;
+        case "ws_message":
+          handleWsMessage(ctx, payload);
+          break;
+        case "ws_close":
+          handleWsClose(ctx, payload);
+          break;
+        case "health_ping":
+          ws.send(JSON.stringify({ type: "health_pong" }));
+          break;
       }
     } catch (error) {
       console.error("Tunnel message error", error);
@@ -331,4 +336,4 @@ export {
   createTunnel,
   connectTunnel
 };
-//# sourceMappingURL=chunk-V7U52ISX.js.map
+//# sourceMappingURL=chunk-HOYYXZPV.js.map

package/dist/chunk-HOYYXZPV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/local-run.ts","../src/tunnel.ts"],"sourcesContent":["import process from \"node:process\";\nimport { readStoredToken } from \"./auth\";\n\ntype LocalRunOptions = {\n  apiUrl: string;\n  token?: string;\n  title?: string;\n  featureSpec?: string;\n  startUrl?: string;\n  tunnelUrl?: string;\n};\n\ntype LocalRunResponse = {\n  ok: boolean;\n  runId?: string;\n  watchUrl?: string;\n  error?: string;\n};\n\nfunction getArgValue(argv: string[], key: string): string | undefined {\n  const index = argv.indexOf(key);\n  if (index === -1) return undefined;\n  return argv[index + 1];\n}\n\nexport async function runLocalTest(argv: string[]) {\n  const apiUrl = getArgValue(argv, \"--api-url\") ?? process.env.CANARY_API_URL ?? \"https://api.trycanary.ai\";\n  const token =\n    getArgValue(argv, \"--token\") ??\n    process.env.CANARY_API_TOKEN ??\n    (await readStoredToken());\n  const title = getArgValue(argv, \"--title\");\n  const featureSpec = getArgValue(argv, \"--feature\");\n  const startUrl = getArgValue(argv, \"--start-url\");\n  const tunnelUrl = getArgValue(argv, \"--tunnel-url\");\n\n  if (!tunnelUrl && !startUrl) {\n    console.error(\"Missing --tunnel-url or --start-url\");\n    process.exit(1);\n  }\n\n  if (!token) {\n    console.error(\"Missing token. Run `canary login` first or set CANARY_API_TOKEN.\");\n    process.exit(1);\n  }\n\n  const result = await createLocalRun({\n    apiUrl,\n    token,\n    title,\n    featureSpec,\n    startUrl,\n    tunnelUrl,\n  });\n\n  console.log(`Local test queued: ${result.runId}`);\n  if (result.watchUrl) {\n    console.log(`Watch: ${result.watchUrl}`);\n  }\n}\n\nexport async function createLocalRun(input: {\n  apiUrl: string;\n  token: string;\n  title?: string;\n  featureSpec?: string;\n  startUrl?: string;\n  tunnelUrl?: string;\n}): Promise<{ runId: string; watchUrl?: string }> {\n  const body = {\n    title: input.title ?? null,\n    featureSpec: input.featureSpec ?? null,\n    startUrl: input.startUrl ?? null,\n    tunnelPublicUrl: input.tunnelUrl ?? null,\n  };\n\n  const response = await fetch(`${input.apiUrl}/local-tests/runs`, {\n    method: \"POST\",\n    headers: {\n      \"content-type\": \"application/json\",\n      authorization: `Bearer ${input.token}`,\n    },\n    body: JSON.stringify(body),\n  });\n\n  const json = (await response.json()) as LocalRunResponse;\n  if (!response.ok || !json.ok || !json.runId) {\n    throw new Error(json.error ?? response.statusText);\n  }\n\n  return { runId: json.runId, watchUrl: json.watchUrl };\n}\n","import { createHash } from \"node:crypto\";\nimport os from \"node:os\";\nimport process from \"node:process\";\nimport { readStoredToken } from \"./auth\";\n\nexport type CreateTunnelResponse = {\n  ok: boolean;\n  tunnelId?: string;\n  publicUrl?: string;\n  token?: string;\n  error?: string;\n};\n\ntype ProxyRequest = {\n  type: \"http_request\";\n  id: string;\n  method: string;\n  path: string;\n  headers: Record<string, string>;\n  bodyBase64?: string | null;\n};\n\ntype ProxyResponse = {\n  type: \"http_response\";\n  id: string;\n  status: number;\n  headers?: Record<string, string | string[]>;\n  bodyBase64?: string | null;\n};\n\ntype WsOpen = {\n  type: \"ws_open\";\n  id: string;\n  path: string;\n  headers: Record<string, string>;\n};\n\ntype WsReady = {\n  type: \"ws_ready\";\n  id: string;\n};\n\ntype WsMessage = {\n  type: \"ws_message\";\n  id: string;\n  dataBase64: string;\n  isBinary: boolean;\n};\n\ntype WsClose = {\n  type: \"ws_close\";\n  id: string;\n  code?: number;\n  reason?: string;\n};\n\nfunction getArgValue(argv: string[], key: string): string | undefined {\n  const index = argv.indexOf(key);\n  if (index === -1) return undefined;\n  return argv[index + 1];\n}\n\nfunction toWebSocketUrl(apiUrl: string): string {\n  const url = new URL(apiUrl);\n  url.protocol = url.protocol === \"https:\" ? \"wss:\" : \"ws:\";\n  return url.toString();\n}\n\nfunction createFingerprint(): string {\n  const raw = `${os.hostname()}-${os.userInfo().username}-${process.version}`;\n  return createHash(\"sha256\").update(raw).digest(\"hex\").slice(0, 16);\n}\n\nexport async function runTunnel(argv: string[]) {\n  const apiUrl = getArgValue(argv, \"--api-url\") ?? process.env.CANARY_API_URL ?? \"https://api.trycanary.ai\";\n  const token =\n    getArgValue(argv, \"--token\") ??\n    process.env.CANARY_API_TOKEN ??\n    (await readStoredToken());\n  const portRaw = getArgValue(argv, \"--port\") ?? process.env.CANARY_LOCAL_PORT;\n\n  if (!portRaw) {\n    console.error(\"Missing --port\");\n    process.exit(1);\n  }\n\n  const port = Number(portRaw);\n  if (Number.isNaN(port) || port <= 0) {\n    console.error(\"Invalid --port value\");\n    process.exit(1);\n  }\n\n  if (!token) {\n    console.error(\"Missing token. Run `canary login` first or set CANARY_API_TOKEN.\");\n    process.exit(1);\n  }\n\n  const maxReconnectAttempts = 10;\n  const baseReconnectDelayMs = 1000;\n  let reconnectAttempts = 0;\n\n  const connect = async (): Promise<void> => {\n    try {\n      const data = await createTunnel({ apiUrl, token, port });\n\n      console.log(`Tunnel connected: ${data.publicUrl ?? data.tunnelId}`);\n      if (data.publicUrl) {\n        console.log(`Public URL: ${data.publicUrl}`);\n        console.log(\"\");\n        console.log(\"To use this tunnel for sandbox agent callbacks, add to apps/api/.env:\");\n        console.log(`  SANDBOX_AGENT_API_URL=${data.publicUrl}`);\n        console.log(\"\");\n      }\n\n      const ws = connectTunnel({\n        apiUrl,\n        tunnelId: data.tunnelId,\n        token: data.token,\n        port,\n        onReady: () => {\n          reconnectAttempts = 0;\n        },\n      });\n\n      return new Promise<void>((resolve, reject) => {\n        ws.onclose = (event) => {\n          console.log(`Tunnel closed (code: ${event.code})`);\n\n          if (reconnectAttempts < maxReconnectAttempts) {\n            const delay = Math.min(baseReconnectDelayMs * Math.pow(2, reconnectAttempts), 30000);\n            reconnectAttempts++;\n            console.log(`Reconnecting in ${delay}ms (attempt ${reconnectAttempts}/${maxReconnectAttempts})...`);\n            setTimeout(() => {\n              connect().then(resolve).catch(reject);\n            }, delay);\n          } else {\n            console.error(\"Max reconnection attempts reached. Exiting.\");\n            process.exit(1);\n          }\n        };\n\n        ws.onerror = (event) => {\n          console.error(\"Tunnel error:\", event);\n        };\n      });\n    } catch (error) {\n      if (reconnectAttempts < maxReconnectAttempts) {\n        const delay = Math.min(baseReconnectDelayMs * Math.pow(2, reconnectAttempts), 30000);\n        reconnectAttempts++;\n        console.error(`Failed to create tunnel: ${error}`);\n        console.log(`Retrying in ${delay}ms (attempt ${reconnectAttempts}/${maxReconnectAttempts})...`);\n        await new Promise((resolve) => setTimeout(resolve, delay));\n        return connect();\n      } else {\n        console.error(\"Max reconnection attempts reached. Exiting.\");\n        process.exit(1);\n      }\n    }\n  };\n\n  await connect();\n}\n\nexport async function createTunnel(input: {\n  apiUrl: string;\n  token: string;\n  port: number;\n}): Promise<{ tunnelId: string; publicUrl?: string; token: string }> {\n  const response = await fetch(`${input.apiUrl}/local-tests/tunnels`, {\n    method: \"POST\",\n    headers: {\n      \"content-type\": \"application/json\",\n      authorization: `Bearer ${input.token}`,\n    },\n    body: JSON.stringify({\n      requestedPort: input.port,\n      clientFingerprint: createFingerprint(),\n    }),\n  });\n\n  const data = (await response.json()) as CreateTunnelResponse;\n  if (!response.ok || !data.ok || !data.tunnelId || !data.token) {\n    throw new Error(data.error ?? response.statusText);\n  }\n\n  return { tunnelId: data.tunnelId, publicUrl: data.publicUrl, token: data.token };\n}\n\n// === Tunnel Message Handlers ===\n\ntype TunnelContext = {\n  ws: WebSocket;\n  port: number;\n  wsConnections: Map<string, WebSocket>;\n  wsQueues: Map<string, Array<WsMessage | WsClose>>;\n};\n\nfunction handleHttpRequest(ctx: TunnelContext, request: ProxyRequest): void {\n  const targetUrl = `http://localhost:${ctx.port}${\n    request.path.startsWith(\"/\") ? request.path : `/${request.path}`\n  }`;\n  const body = request.bodyBase64 ? Buffer.from(request.bodyBase64, \"base64\") : undefined;\n  const headers = { ...request.headers };\n  delete headers.host;\n  delete headers[\"content-length\"];\n\n  fetch(targetUrl, { method: request.method, headers, body: body ?? undefined })\n    .then(async (res) => {\n      const resBody = await res.arrayBuffer();\n      const resHeaders: Record<string, string | string[]> = Object.fromEntries(res.headers.entries());\n      delete resHeaders[\"set-cookie\"];\n\n      const getSetCookie = (res.headers as Headers & { getSetCookie?: () => string[] }).getSetCookie;\n      const setCookieValues = typeof getSetCookie === \"function\" ? getSetCookie.call(res.headers) : [];\n      const fallbackSetCookie = res.headers.get(\"set-cookie\");\n      if (setCookieValues.length === 0 && fallbackSetCookie) {\n        setCookieValues.push(fallbackSetCookie);\n      }\n      if (setCookieValues.length > 0) {\n        resHeaders[\"set-cookie\"] = setCookieValues;\n      }\n\n      const responsePayload: ProxyResponse = {\n        type: \"http_response\",\n        id: request.id,\n        status: res.status,\n        headers: resHeaders,\n        bodyBase64: resBody.byteLength ? Buffer.from(resBody).toString(\"base64\") : null,\n      };\n      ctx.ws.send(JSON.stringify(responsePayload));\n    })\n    .catch((error) => {\n      const responsePayload: ProxyResponse = {\n        type: \"http_response\",\n        id: request.id,\n        status: 502,\n        headers: { \"content-type\": \"text/plain\" },\n        bodyBase64: Buffer.from(`Tunnel error: ${String(error)}`).toString(\"base64\"),\n      };\n      ctx.ws.send(JSON.stringify(responsePayload));\n    });\n}\n\nfunction handleWsOpen(ctx: TunnelContext, request: WsOpen): void {\n  const targetUrl = `ws://localhost:${ctx.port}${\n    request.path.startsWith(\"/\") ? request.path : `/${request.path}`\n  }`;\n  const protocolsHeader =\n    request.headers[\"sec-websocket-protocol\"] ?? request.headers[\"Sec-WebSocket-Protocol\"];\n  const protocols = protocolsHeader\n    ? protocolsHeader.split(\",\").map((v) => v.trim()).filter(Boolean)\n    : undefined;\n  const localWs = new WebSocket(targetUrl, protocols);\n  ctx.wsConnections.set(request.id, localWs);\n\n  localWs.onopen = () => {\n    ctx.ws.send(JSON.stringify({ type: \"ws_ready\", id: request.id } satisfies WsReady));\n    const queued = ctx.wsQueues.get(request.id);\n    if (queued) {\n      for (const message of queued) {\n        ctx.ws.send(JSON.stringify(message));\n      }\n      ctx.wsQueues.delete(request.id);\n    }\n  };\n\n  localWs.onmessage = (event) => {\n    const data =\n      typeof event.data === \"string\"\n        ? Buffer.from(event.data)\n        : Buffer.from(event.data as ArrayBuffer);\n    const response: WsMessage = {\n      type: \"ws_message\",\n      id: request.id,\n      dataBase64: data.toString(\"base64\"),\n      isBinary: typeof event.data !== \"string\",\n    };\n    ctx.ws.send(JSON.stringify(response));\n  };\n\n  localWs.onclose = (event) => {\n    ctx.wsConnections.delete(request.id);\n    const response: WsClose = {\n      type: \"ws_close\",\n      id: request.id,\n      code: event.code,\n      reason: event.reason,\n    };\n    ctx.ws.send(JSON.stringify(response));\n  };\n\n  localWs.onerror = () => {\n    ctx.wsConnections.delete(request.id);\n    const response: WsClose = {\n      type: \"ws_close\",\n      id: request.id,\n      code: 1011,\n      reason: \"local_ws_error\",\n    };\n    ctx.ws.send(JSON.stringify(response));\n  };\n}\n\nfunction handleWsMessage(ctx: TunnelContext, message: WsMessage): void {\n  const localWs = ctx.wsConnections.get(message.id);\n  const data = Buffer.from(message.dataBase64, \"base64\");\n  if (!localWs || localWs.readyState !== WebSocket.OPEN) {\n    const queued = ctx.wsQueues.get(message.id) ?? [];\n    queued.push(message);\n    ctx.wsQueues.set(message.id, queued);\n    return;\n  }\n  if (message.isBinary) {\n    localWs.send(data);\n  } else {\n    localWs.send(data.toString());\n  }\n}\n\nfunction handleWsClose(ctx: TunnelContext, message: WsClose): void {\n  const localWs = ctx.wsConnections.get(message.id);\n  if (!localWs) {\n    const queued = ctx.wsQueues.get(message.id) ?? [];\n    queued.push(message);\n    ctx.wsQueues.set(message.id, queued);\n    return;\n  }\n  localWs.close(message.code ?? 1000, message.reason ?? \"\");\n  ctx.wsConnections.delete(message.id);\n}\n\n// === Connect ===\n\nexport function connectTunnel(input: {\n  apiUrl: string;\n  tunnelId: string;\n  token: string;\n  port: number;\n  onReady?: () => void;\n}): WebSocket {\n  const wsUrl = toWebSocketUrl(\n    `${input.apiUrl}/local-tests/tunnels/${input.tunnelId}/connect?token=${input.token}`\n  );\n  const ws = new WebSocket(wsUrl);\n  const ctx: TunnelContext = {\n    ws,\n    port: input.port,\n    wsConnections: new Map(),\n    wsQueues: new Map(),\n  };\n\n  ws.onopen = () => {\n    input.onReady?.();\n  };\n\n  ws.onerror = (event) => {\n    console.error(\"Tunnel error\", event);\n  };\n\n  ws.onclose = () => {\n    console.log(\"Tunnel closed\");\n  };\n\n  ws.onmessage = async (event) => {\n    try {\n      const raw =\n        typeof event.data === \"string\"\n          ? event.data\n          : Buffer.from(event.data as ArrayBuffer).toString();\n      const payload = JSON.parse(raw) as { type: string };\n\n      switch (payload.type) {\n        case \"http_request\":\n          handleHttpRequest(ctx, payload as ProxyRequest);\n          break;\n        case \"ws_open\":\n          handleWsOpen(ctx, payload as WsOpen);\n          break;\n        case \"ws_message\":\n          handleWsMessage(ctx, payload as WsMessage);\n          break;\n        case \"ws_close\":\n          handleWsClose(ctx, payload as WsClose);\n          break;\n        case \"health_ping\":\n          ws.send(JSON.stringify({ type: \"health_pong\" }));\n          break;\n      }\n    } catch (error) {\n      console.error(\"Tunnel message error\", error);\n    }\n  };\n\n  return ws;\n}\n"],"mappings":";;;;;AAAA,OAAO,aAAa;AAmBpB,SAAS,YAAY,MAAgB,KAAiC;AACpE,QAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,MAAI,UAAU,GAAI,QAAO;AACzB,SAAO,KAAK,QAAQ,CAAC;AACvB;AAEA,eAAsB,aAAa,MAAgB;AACjD,QAAM,SAAS,YAAY,MAAM,WAAW,KAAK,QAAQ,IAAI,kBAAkB;AAC/E,QAAM,QACJ,YAAY,MAAM,SAAS,KAC3B,QAAQ,IAAI,oBACX,MAAM,gBAAgB;AACzB,QAAM,QAAQ,YAAY,MAAM,SAAS;AACzC,QAAM,cAAc,YAAY,MAAM,WAAW;AACjD,QAAM,WAAW,YAAY,MAAM,aAAa;AAChD,QAAM,YAAY,YAAY,MAAM,cAAc;AAElD,MAAI,CAAC,aAAa,CAAC,UAAU;AAC3B,YAAQ,MAAM,qCAAqC;AACnD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,CAAC,OAAO;AACV,YAAQ,MAAM,kEAAkE;AAChF,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,SAAS,MAAM,eAAe;AAAA,IAClC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,UAAQ,IAAI,sBAAsB,OAAO,KAAK,EAAE;AAChD,MAAI,OAAO,UAAU;AACnB,YAAQ,IAAI,UAAU,OAAO,QAAQ,EAAE;AAAA,EACzC;AACF;AAEA,eAAsB,eAAe,OAOa;AAChD,QAAM,OAAO;AAAA,IACX,OAAO,MAAM,SAAS;AAAA,IACtB,aAAa,MAAM,eAAe;AAAA,IAClC,UAAU,MAAM,YAAY;AAAA,IAC5B,iBAAiB,MAAM,aAAa;AAAA,EACtC;AAEA,QAAM,WAAW,MAAM,MAAM,GAAG,MAAM,MAAM,qBAAqB;AAAA,IAC/D,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,MAAM,KAAK;AAAA,IACtC;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAED,QAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,MAAI,CAAC,SAAS,MAAM,CAAC,KAAK,MAAM,CAAC,KAAK,OAAO;AAC3C,UAAM,IAAI,MAAM,KAAK,SAAS,SAAS,UAAU;AAAA,EACnD;AAEA,SAAO,EAAE,OAAO,KAAK,OAAO,UAAU,KAAK,SAAS;AACtD;;;AC3FA,SAAS,kBAAkB;AAC3B,OAAO,QAAQ;AACf,OAAOA,cAAa;AAsDpB,SAASC,aAAY,MAAgB,KAAiC;AACpE,QAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,MAAI,UAAU,GAAI,QAAO;AACzB,SAAO,KAAK,QAAQ,CAAC;AACvB;AAEA,SAAS,eAAe,QAAwB;AAC9C,QAAM,MAAM,IAAI,IAAI,MAAM;AAC1B,MAAI,WAAW,IAAI,aAAa,WAAW,SAAS;AACpD,SAAO,IAAI,SAAS;AACtB;AAEA,SAAS,oBAA4B;AACnC,QAAM,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,GAAG,SAAS,EAAE,QAAQ,IAAIC,SAAQ,OAAO;AACzE,SAAO,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACnE;AAEA,eAAsB,UAAU,MAAgB;AAC9C,QAAM,SAASD,aAAY,MAAM,WAAW,KAAKC,SAAQ,IAAI,kBAAkB;AAC/E,QAAM,QACJD,aAAY,MAAM,SAAS,KAC3BC,SAAQ,IAAI,oBACX,MAAM,gBAAgB;AACzB,QAAM,UAAUD,aAAY,MAAM,QAAQ,KAAKC,SAAQ,IAAI;AAE3D,MAAI,CAAC,SAAS;AACZ,YAAQ,MAAM,gBAAgB;AAC9B,IAAAA,SAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,OAAO,OAAO,OAAO;AAC3B,MAAI,OAAO,MAAM,IAAI,KAAK,QAAQ,GAAG;AACnC,YAAQ,MAAM,sBAAsB;AACpC,IAAAA,SAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,CAAC,OAAO;AACV,YAAQ,MAAM,kEAAkE;AAChF,IAAAA,SAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,uBAAuB;AAC7B,QAAM,uBAAuB;AAC7B,MAAI,oBAAoB;AAExB,QAAM,UAAU,YAA2B;AACzC,QAAI;AACF,YAAM,OAAO,MAAM,aAAa,EAAE,QAAQ,OAAO,KAAK,CAAC;AAEvD,cAAQ,IAAI,qBAAqB,KAAK,aAAa,KAAK,QAAQ,EAAE;AAClE,UAAI,KAAK,WAAW;AAClB,gBAAQ,IAAI,eAAe,KAAK,SAAS,EAAE;AAC3C,gBAAQ,IAAI,EAAE;AACd,gBAAQ,IAAI,uEAAuE;AACnF,gBAAQ,IAAI,2BAA2B,KAAK,SAAS,EAAE;AACvD,gBAAQ,IAAI,EAAE;AAAA,MAChB;AAEA,YAAM,KAAK,cAAc;AAAA,QACvB;AAAA,QACA,UAAU,KAAK;AAAA,QACf,OAAO,KAAK;AAAA,QACZ;AAAA,QACA,SAAS,MAAM;AACb,8BAAoB;AAAA,QACtB;AAAA,MACF,CAAC;AAED,aAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAC5C,WAAG,UAAU,CAAC,UAAU;AACtB,kBAAQ,IAAI,wBAAwB,MAAM,IAAI,GAAG;AAEjD,cAAI,oBAAoB,sBAAsB;AAC5C,kBAAM,QAAQ,KAAK,IAAI,uBAAuB,KAAK,IAAI,GAAG,iBAAiB,GAAG,GAAK;AACnF;AACA,oBAAQ,IAAI,mBAAmB,KAAK,eAAe,iBAAiB,IAAI,oBAAoB,MAAM;AAClG,uBAAW,MAAM;AACf,sBAAQ,EAAE,KAAK,OAAO,EAAE,MAAM,MAAM;AAAA,YACtC,GAAG,KAAK;AAAA,UACV,OAAO;AACL,oBAAQ,MAAM,6CAA6C;AAC3D,YAAAA,SAAQ,KAAK,CAAC;AAAA,UAChB;AAAA,QACF;AAEA,WAAG,UAAU,CAAC,UAAU;AACtB,kBAAQ,MAAM,iBAAiB,KAAK;AAAA,QACtC;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,oBAAoB,sBAAsB;AAC5C,cAAM,QAAQ,KAAK,IAAI,uBAAuB,KAAK,IAAI,GAAG,iBAAiB,GAAG,GAAK;AACnF;AACA,gBAAQ,MAAM,4BAA4B,KAAK,EAAE;AACjD,gBAAQ,IAAI,eAAe,KAAK,eAAe,iBAAiB,IAAI,oBAAoB,MAAM;AAC9F,cAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,KAAK,CAAC;AACzD,eAAO,QAAQ;AAAA,MACjB,OAAO;AACL,gBAAQ,MAAM,6CAA6C;AAC3D,QAAAA,SAAQ,KAAK,CAAC;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ;AAChB;AAEA,eAAsB,aAAa,OAIkC;AACnE,QAAM,WAAW,MAAM,MAAM,GAAG,MAAM,MAAM,wBAAwB;AAAA,IAClE,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,MAAM,KAAK;AAAA,IACtC;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,eAAe,MAAM;AAAA,MACrB,mBAAmB,kBAAkB;AAAA,IACvC,CAAC;AAAA,EACH,CAAC;AAED,QAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,MAAI,CAAC,SAAS,MAAM,CAAC,KAAK,MAAM,CAAC,KAAK,YAAY,CAAC,KAAK,OAAO;AAC7D,UAAM,IAAI,MAAM,KAAK,SAAS,SAAS,UAAU;AAAA,EACnD;AAEA,SAAO,EAAE,UAAU,KAAK,UAAU,WAAW,KAAK,WAAW,OAAO,KAAK,MAAM;AACjF;AAWA,SAAS,kBAAkB,KAAoB,SAA6B;AAC1E,QAAM,YAAY,oBAAoB,IAAI,IAAI,GAC5C,QAAQ,KAAK,WAAW,GAAG,IAAI,QAAQ,OAAO,IAAI,QAAQ,IAAI,EAChE;AACA,QAAM,OAAO,QAAQ,aAAa,OAAO,KAAK,QAAQ,YAAY,QAAQ,IAAI;AAC9E,QAAM,UAAU,EAAE,GAAG,QAAQ,QAAQ;AACrC,SAAO,QAAQ;AACf,SAAO,QAAQ,gBAAgB;AAE/B,QAAM,WAAW,EAAE,QAAQ,QAAQ,QAAQ,SAAS,MAAM,QAAQ,OAAU,CAAC,EAC1E,KAAK,OAAO,QAAQ;AACnB,UAAM,UAAU,MAAM,IAAI,YAAY;AACtC,UAAM,aAAgD,OAAO,YAAY,IAAI,QAAQ,QAAQ,CAAC;AAC9F,WAAO,WAAW,YAAY;AAE9B,UAAM,eAAgB,IAAI,QAAwD;AAClF,UAAM,kBAAkB,OAAO,iBAAiB,aAAa,aAAa,KAAK,IAAI,OAAO,IAAI,CAAC;AAC/F,UAAM,oBAAoB,IAAI,QAAQ,IAAI,YAAY;AACtD,QAAI,gBAAgB,WAAW,KAAK,mBAAmB;AACrD,sBAAgB,KAAK,iBAAiB;AAAA,IACxC;AACA,QAAI,gBAAgB,SAAS,GAAG;AAC9B,iBAAW,YAAY,IAAI;AAAA,IAC7B;AAEA,UAAM,kBAAiC;AAAA,MACrC,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,QAAQ,IAAI;AAAA,MACZ,SAAS;AAAA,MACT,YAAY,QAAQ,aAAa,OAAO,KAAK,OAAO,EAAE,SAAS,QAAQ,IAAI;AAAA,IAC7E;AACA,QAAI,GAAG,KAAK,KAAK,UAAU,eAAe,CAAC;AAAA,EAC7C,CAAC,EACA,MAAM,CAAC,UAAU;AAChB,UAAM,kBAAiC;AAAA,MACrC,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,aAAa;AAAA,MACxC,YAAY,OAAO,KAAK,iBAAiB,OAAO,KAAK,CAAC,EAAE,EAAE,SAAS,QAAQ;AAAA,IAC7E;AACA,QAAI,GAAG,KAAK,KAAK,UAAU,eAAe,CAAC;AAAA,EAC7C,CAAC;AACL;AAEA,SAAS,aAAa,KAAoB,SAAuB;AAC/D,QAAM,YAAY,kBAAkB,IAAI,IAAI,GAC1C,QAAQ,KAAK,WAAW,GAAG,IAAI,QAAQ,OAAO,IAAI,QAAQ,IAAI,EAChE;AACA,QAAM,kBACJ,QAAQ,QAAQ,wBAAwB,KAAK,QAAQ,QAAQ,wBAAwB;AACvF,QAAM,YAAY,kBACd,gBAAgB,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO,IAC9D;AACJ,QAAM,UAAU,IAAI,UAAU,WAAW,SAAS;AAClD,MAAI,cAAc,IAAI,QAAQ,IAAI,OAAO;AAEzC,UAAQ,SAAS,MAAM;AACrB,QAAI,GAAG,KAAK,KAAK,UAAU,EAAE,MAAM,YAAY,IAAI,QAAQ,GAAG,CAAmB,CAAC;AAClF,UAAM,SAAS,IAAI,SAAS,IAAI,QAAQ,EAAE;AAC1C,QAAI,QAAQ;AACV,iBAAW,WAAW,QAAQ;AAC5B,YAAI,GAAG,KAAK,KAAK,UAAU,OAAO,CAAC;AAAA,MACrC;AACA,UAAI,SAAS,OAAO,QAAQ,EAAE;AAAA,IAChC;AAAA,EACF;AAEA,UAAQ,YAAY,CAAC,UAAU;AAC7B,UAAM,OACJ,OAAO,MAAM,SAAS,WAClB,OAAO,KAAK,MAAM,IAAI,IACtB,OAAO,KAAK,MAAM,IAAmB;AAC3C,UAAM,WAAsB;AAAA,MAC1B,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,YAAY,KAAK,SAAS,QAAQ;AAAA,MAClC,UAAU,OAAO,MAAM,SAAS;AAAA,IAClC;AACA,QAAI,GAAG,KAAK,KAAK,UAAU,QAAQ,CAAC;AAAA,EACtC;AAEA,UAAQ,UAAU,CAAC,UAAU;AAC3B,QAAI,cAAc,OAAO,QAAQ,EAAE;AACnC,UAAM,WAAoB;AAAA,MACxB,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,MAAM,MAAM;AAAA,MACZ,QAAQ,MAAM;AAAA,IAChB;AACA,QAAI,GAAG,KAAK,KAAK,UAAU,QAAQ,CAAC;AAAA,EACtC;AAEA,UAAQ,UAAU,MAAM;AACtB,QAAI,cAAc,OAAO,QAAQ,EAAE;AACnC,UAAM,WAAoB;AAAA,MACxB,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,MAAM;AAAA,MACN,QAAQ;AAAA,IACV;AACA,QAAI,GAAG,KAAK,KAAK,UAAU,QAAQ,CAAC;AAAA,EACtC;AACF;AAEA,SAAS,gBAAgB,KAAoB,SAA0B;AACrE,QAAM,UAAU,IAAI,cAAc,IAAI,QAAQ,EAAE;AAChD,QAAM,OAAO,OAAO,KAAK,QAAQ,YAAY,QAAQ;AACrD,MAAI,CAAC,WAAW,QAAQ,eAAe,UAAU,MAAM;AACrD,UAAM,SAAS,IAAI,SAAS,IAAI,QAAQ,EAAE,KAAK,CAAC;AAChD,WAAO,KAAK,OAAO;AACnB,QAAI,SAAS,IAAI,QAAQ,IAAI,MAAM;AACnC;AAAA,EACF;AACA,MAAI,QAAQ,UAAU;AACpB,YAAQ,KAAK,IAAI;AAAA,EACnB,OAAO;AACL,YAAQ,KAAK,KAAK,SAAS,CAAC;AAAA,EAC9B;AACF;AAEA,SAAS,cAAc,KAAoB,SAAwB;AACjE,QAAM,UAAU,IAAI,cAAc,IAAI,QAAQ,EAAE;AAChD,MAAI,CAAC,SAAS;AACZ,UAAM,SAAS,IAAI,SAAS,IAAI,QAAQ,EAAE,KAAK,CAAC;AAChD,WAAO,KAAK,OAAO;AACnB,QAAI,SAAS,IAAI,QAAQ,IAAI,MAAM;AACnC;AAAA,EACF;AACA,UAAQ,MAAM,QAAQ,QAAQ,KAAM,QAAQ,UAAU,EAAE;AACxD,MAAI,cAAc,OAAO,QAAQ,EAAE;AACrC;AAIO,SAAS,cAAc,OAMhB;AACZ,QAAM,QAAQ;AAAA,IACZ,GAAG,MAAM,MAAM,wBAAwB,MAAM,QAAQ,kBAAkB,MAAM,KAAK;AAAA,EACpF;AACA,QAAM,KAAK,IAAI,UAAU,KAAK;AAC9B,QAAM,MAAqB;AAAA,IACzB;AAAA,IACA,MAAM,MAAM;AAAA,IACZ,eAAe,oBAAI,IAAI;AAAA,IACvB,UAAU,oBAAI,IAAI;AAAA,EACpB;AAEA,KAAG,SAAS,MAAM;AAChB,UAAM,UAAU;AAAA,EAClB;AAEA,KAAG,UAAU,CAAC,UAAU;AACtB,YAAQ,MAAM,gBAAgB,KAAK;AAAA,EACrC;AAEA,KAAG,UAAU,MAAM;AACjB,YAAQ,IAAI,eAAe;AAAA,EAC7B;AAEA,KAAG,YAAY,OAAO,UAAU;AAC9B,QAAI;AACF,YAAM,MACJ,OAAO,MAAM,SAAS,WAClB,MAAM,OACN,OAAO,KAAK,MAAM,IAAmB,EAAE,SAAS;AACtD,YAAM,UAAU,KAAK,MAAM,GAAG;AAE9B,cAAQ,QAAQ,MAAM;AAAA,QACpB,KAAK;AACH,4BAAkB,KAAK,OAAuB;AAC9C;AAAA,QACF,KAAK;AACH,uBAAa,KAAK,OAAiB;AACnC;AAAA,QACF,KAAK;AACH,0BAAgB,KAAK,OAAoB;AACzC;AAAA,QACF,KAAK;AACH,wBAAc,KAAK,OAAkB;AACrC;AAAA,QACF,KAAK;AACH,aAAG,KAAK,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC,CAAC;AAC/C;AAAA,MACJ;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,wBAAwB,KAAK;AAAA,IAC7C;AAAA,EACF;AAEA,SAAO;AACT;","names":["process","getArgValue","process"]}