@databricks/appkit 0.21.0 → 0.23.0

package/dist/plugins/server/remote-tunnel/remote-tunnel-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-tunnel-manager.js","names":[],"sources":["../../../../src/plugins/server/remote-tunnel/remote-tunnel-manager.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport fs from \"node:fs\";\nimport type { Server as HTTPServer } from \"node:http\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport type express from \"express\";\nimport type { TunnelConnection } from \"shared\";\nimport { WebSocketServer } from \"ws\";\nimport { createLogger } from \"../../../logging/logger\";\nimport {\n  generateTunnelIdFromEmail,\n  getConfigScript,\n  parseCookies,\n} from \"../utils\";\nimport { REMOTE_TUNNEL_ASSET_PREFIXES } from \"./gate\";\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\nconst MAX_ASSET_FETCH_TIMEOUT = 60_000;\n\nconst logger = createLogger(\"server:remote-tunnel\");\n\ninterface DevFileReader {\n  registerTunnelGetter(\n    getter: (req: express.Request) => TunnelConnection | null,\n  ): void;\n}\n\n/**\n * WebSocket message types for CLI <-> Server communication\n */\ntype WebSocketMessage =\n  | {\n      type: \"connection:response\";\n      viewer: string;\n      approved: boolean;\n    }\n  | {\n      type: \"fetch:response:meta\";\n      requestId: string;\n      status: number;\n      headers: Record<string, string>;\n    }\n  | {\n      type: \"file:read:response\";\n      requestId: string;\n      content?: string;\n      error?: string;\n    }\n  | {\n      type: \"dir:list:response\";\n      requestId: string;\n      content?: string;\n      error?: string;\n    }\n  | {\n      type: \"hmr:message\";\n      body: string;\n    };\n\n/**\n * Type guard to validate WebSocket message structure\n */\nfunction isWebSocketMessage(data: unknown): data is WebSocketMessage {\n  if (!data || typeof data !== \"object\") {\n    return false;\n  }\n\n  const msg = data as Record<string, unknown>;\n  return typeof msg.type === \"string\";\n}\n\n/**\n * Remote tunnel manager for the AppKit.\n *\n * This class is responsible for managing the remote tunnels for the development server.\n * It also handles the asset fetching and the HMR for the development server.\n *\n * @example\n * ```ts\n * const remoteTunnelManager = new RemoteTunnelManager(devFileReader);\n * remoteTunnelManager.setup(app);\n * ```\n */\nexport class RemoteTunnelManager {\n  private tunnels = new Map<string, TunnelConnection>();\n  private wss: WebSocketServer;\n  private hmrWss: WebSocketServer;\n  private server?: HTTPServer;\n  private devFileReader: DevFileReader;\n\n  constructor(devFileReader: DevFileReader) {\n    this.devFileReader = devFileReader;\n    this.wss = new WebSocketServer({ noServer: true, path: \"/dev-tunnel\" });\n    this.hmrWss = new WebSocketServer({ noServer: true, path: \"/dev-hmr\" });\n\n    this.registerTunnelGetter();\n  }\n\n  setServer(server: HTTPServer) {\n    this.server = server;\n  }\n\n  /** Asset middleware for the development server. */\n  assetMiddleware() {\n    return async (req: express.Request, res: express.Response) => {\n      const email = req.headers[\"x-forwarded-email\"] as string;\n\n      // Try cookie first, then generate from email\n      let tunnelId: string | undefined;\n      const cookieHeader = req.headers.cookie;\n\n      if (cookieHeader) {\n        // Fast path: extract dev-tunnel-id from cookie without full parse\n        const match = cookieHeader.match(/dev-tunnel-id=([^;]+)/);\n        if (match) {\n          tunnelId = match[1];\n        }\n      }\n\n      if (!tunnelId) {\n        tunnelId = generateTunnelIdFromEmail(email);\n      }\n\n      if (!tunnelId) return res.status(404).send(\"Tunnel not ready\");\n\n      const tunnel = this.tunnels.get(tunnelId);\n\n      if (!tunnel) return res.status(404).send(\"Tunnel not found\");\n\n      const { ws, approvedViewers, pendingFetches } = tunnel;\n\n      if (!approvedViewers.has(email)) {\n        return res.status(403).send(\"Not approved for this tunnel\");\n      }\n\n      const path = req.originalUrl;\n      const requestId = randomUUID();\n\n      const request = { type: \"fetch\", path, method: req.method, requestId };\n\n      const response = await new Promise((resolve, reject) => {\n        const timeout = setTimeout(() => {\n          pendingFetches.delete(requestId);\n          reject(new Error(\"Asset fetch timeout\"));\n        }, MAX_ASSET_FETCH_TIMEOUT);\n\n        pendingFetches.set(requestId, { resolve, reject, timeout });\n\n        ws.send(JSON.stringify(request));\n      }).catch((err) => {\n        logger.error(\"Failed to fetch %s: %s\", path, err.message);\n        return { status: 504, body: Buffer.from(\"\"), headers: {} };\n      });\n\n      const r = response as any;\n\n      res\n        .status(r.status)\n        .set(r.headers)\n        .send(r.body || Buffer.from(\"\"));\n    };\n  }\n\n  /** Dev mode middleware for the development server. */\n  devModeMiddleware() {\n    return async (\n      req: express.Request,\n      res: express.Response,\n      next: express.NextFunction,\n    ) => {\n      const dev = req.query?.dev;\n\n      if (dev === undefined) {\n        return next();\n      }\n\n      if (\n        req.path.startsWith(\"/api\") ||\n        req.path.startsWith(\"/query\") ||\n        req.path.match(/\\.(js|css|png|jpg|jpeg|svg|ico|json|woff|woff2|ttf)$/)\n      ) {\n        return next();\n      }\n\n      const viewerEmail = req.headers[\"x-forwarded-email\"] as string;\n      const isOwnerMode = dev === \"\" || dev === \"true\";\n\n      const tunnelId = isOwnerMode\n        ? generateTunnelIdFromEmail(viewerEmail)\n        : dev.toString();\n\n      if (!tunnelId) {\n        return res.status(400).send(\"Invalid tunnel ID\");\n      }\n\n      if (!isOwnerMode) {\n        const approvalResponse = this.handleViewerApproval(\n          tunnelId,\n          viewerEmail,\n          req.query.retry === \"true\",\n          res,\n        );\n\n        if (approvalResponse) {\n          return approvalResponse;\n        }\n      }\n\n      res.cookie(\"dev-tunnel-id\", tunnelId, {\n        httpOnly: false,\n        sameSite: \"lax\",\n      });\n\n      const indexPath = path.join(__dirname, \"index.html\");\n      let html = fs.readFileSync(indexPath, \"utf-8\");\n      html = html.replace(\"<body>\", `<body>${getConfigScript()}`);\n\n      res.send(html);\n    };\n  }\n\n  /** Setup the dev mode middleware. */\n  setup(app: express.Application) {\n    app.use(this.devModeMiddleware());\n    app.use(REMOTE_TUNNEL_ASSET_PREFIXES, this.assetMiddleware());\n  }\n\n  static isRemoteServerEnabled() {\n    return (\n      process.env.NODE_ENV !== \"production\" &&\n      process.env.DISABLE_REMOTE_SERVING !== \"true\" &&\n      // DATABRICKS_CLIENT_SECRET is set in the .env file for deployed environments\n      Boolean(process.env.DATABRICKS_CLIENT_SECRET)\n    );\n  }\n\n  private loadHtmlTemplate(\n    filename: string,\n    replacements: Record<string, string>,\n  ): string {\n    const filePath = path.join(__dirname, filename);\n    let content = fs.readFileSync(filePath, \"utf-8\");\n\n    for (const [key, value] of Object.entries(replacements)) {\n      content = content.replaceAll(`{{${key}}}`, value);\n    }\n\n    return content;\n  }\n\n  private handleViewerApproval(\n    tunnelId: string,\n    viewerEmail: string,\n    retry: boolean,\n    res: express.Response,\n  ): express.Response | null {\n    const tunnel = this.tunnels.get(tunnelId);\n\n    if (!tunnel) {\n      return res.status(404).send(\"Tunnel not found\");\n    }\n\n    if (viewerEmail === tunnel.owner) {\n      return null;\n    }\n\n    if (retry) {\n      tunnel.rejectedViewers.delete(viewerEmail);\n    }\n\n    if (tunnel.rejectedViewers.has(viewerEmail)) {\n      const html = this.loadHtmlTemplate(\"denied.html\", { tunnelId });\n      return res.status(403).send(html);\n    }\n\n    if (tunnel.approvedViewers.has(viewerEmail)) {\n      return null;\n    }\n\n    if (!tunnel.pendingRequests.has(viewerEmail)) {\n      const requestId = randomUUID();\n      tunnel.pendingRequests.add(viewerEmail);\n      tunnel.ws.send(\n        JSON.stringify({\n          type: \"connection:request\",\n          requestId,\n          viewer: viewerEmail,\n        }),\n      );\n    }\n\n    const html = this.loadHtmlTemplate(\"wait.html\", { tunnelId });\n    return res.status(200).send(html);\n  }\n\n  setupWebSocket() {\n    this.wss.on(\"connection\", (ws, req) => {\n      const email = req.headers[\"x-forwarded-email\"] as string;\n      const tunnelId = generateTunnelIdFromEmail(email);\n\n      if (!tunnelId) return ws.close();\n\n      this.tunnels.set(tunnelId, {\n        ws,\n        owner: email,\n        approvedViewers: new Set([email]),\n        pendingRequests: new Set(),\n        rejectedViewers: new Set(),\n        pendingFetches: new Map(),\n        pendingFileReads: new Map(),\n        waitingForBinaryBody: null,\n      });\n\n      ws.on(\"message\", (msg, isBinary) => {\n        const tunnel = this.tunnels.get(tunnelId);\n        if (!tunnel) return;\n\n        if (isBinary) {\n          if (!tunnel.waitingForBinaryBody) {\n            logger.debug(\n              \"Received binary message but no requestId is waiting for body\",\n            );\n            return;\n          }\n\n          const requestId = tunnel.waitingForBinaryBody;\n          const pending = tunnel.pendingFetches.get(requestId);\n\n          if (!pending || !pending.metadata) {\n            logger.debug(\"Received binary message but pending fetch not found\");\n            tunnel.waitingForBinaryBody = null;\n            return;\n          }\n\n          tunnel.waitingForBinaryBody = null;\n          clearTimeout(pending.timeout);\n          tunnel.pendingFetches.delete(requestId);\n\n          pending.resolve({\n            status: pending.metadata.status,\n            headers: pending.metadata.headers,\n            body: msg as Buffer,\n          });\n          return;\n        }\n\n        try {\n          const data = JSON.parse(msg.toString());\n\n          // Validate message structure\n          if (!isWebSocketMessage(data)) {\n            logger.error(\"Invalid WebSocket message format: %O\", data);\n            return;\n          }\n\n          if (data.type === \"connection:response\") {\n            if (tunnel && data.viewer) {\n              tunnel.pendingRequests.delete(data.viewer);\n\n              if (data.approved) {\n                tunnel.approvedViewers.add(data.viewer);\n                logger.debug(\n                  \"✅ Approved %s for tunnel %s\",\n                  data.viewer,\n                  tunnelId,\n                );\n              } else {\n                tunnel.rejectedViewers.add(data.viewer);\n                logger.debug(\n                  \"❌ Denied %s for tunnel %s\",\n                  data.viewer,\n                  tunnelId,\n                );\n              }\n            }\n          } else if (data.type === \"fetch:response:meta\") {\n            const pending = tunnel.pendingFetches.get(data.requestId);\n            if (pending) {\n              pending.metadata = {\n                status: data.status,\n                headers: data.headers,\n              };\n              if (\n                data.status === 304 ||\n                data.status === 204 ||\n                (data.status >= 300 && data.status < 400)\n              ) {\n                clearTimeout(pending.timeout);\n                tunnel.pendingFetches.delete(data.requestId);\n                pending.resolve({\n                  status: data.status,\n                  headers: data.headers,\n                  body: Buffer.from(\"\"),\n                });\n              } else {\n                tunnel.waitingForBinaryBody = data.requestId;\n              }\n            }\n          } else if (data.type === \"file:read:response\") {\n            const pending = tunnel.pendingFileReads.get(data.requestId);\n            if (pending) {\n              clearTimeout(pending.timeout);\n              tunnel.pendingFileReads.delete(data.requestId);\n\n              if (data.error) {\n                pending.reject(new Error(data.error));\n              } else if (data.content !== undefined) {\n                pending.resolve(data.content);\n              } else {\n                pending.reject(\n                  new Error(\"Missing content in file:read:response\"),\n                );\n              }\n            }\n          } else if (data.type === \"dir:list:response\") {\n            const pending = tunnel.pendingFileReads.get(data.requestId);\n            if (pending) {\n              clearTimeout(pending.timeout);\n              tunnel.pendingFileReads.delete(data.requestId);\n\n              if (data.error) {\n                pending.reject(new Error(data.error));\n              } else if (data.content !== undefined) {\n                pending.resolve(data.content);\n              } else {\n                pending.reject(\n                  new Error(\"Missing content in dir:list:response\"),\n                );\n              }\n            }\n          }\n        } catch (e) {\n          logger.error(\"Failed to parse WebSocket message: %O\", e);\n        }\n      });\n\n      ws.send(JSON.stringify({ type: \"tunnel:ready\", tunnelId }));\n\n      ws.on(\"close\", () => {\n        const tunnel = this.tunnels.get(tunnelId);\n\n        if (tunnel) {\n          for (const [_, pending] of tunnel.pendingFetches) {\n            clearTimeout(pending.timeout);\n            pending.reject(new Error(\"Tunnel closed\"));\n          }\n          tunnel.pendingFetches.clear();\n        }\n\n        this.tunnels.delete(tunnelId);\n      });\n    });\n\n    this.hmrWss.on(\"connection\", (browserWs, req) => {\n      const cookies = parseCookies(req);\n      const email = req.headers[\"x-forwarded-email\"] as string;\n      const tunnelId =\n        cookies[\"dev-tunnel-id\"] || generateTunnelIdFromEmail(email);\n\n      if (!tunnelId) return browserWs.close();\n\n      const cliTunnel = this.tunnels.get(tunnelId);\n\n      if (!cliTunnel) return browserWs.close();\n\n      const { ws: cliWs, approvedViewers } = cliTunnel;\n\n      if (!approvedViewers.has(email)) {\n        return browserWs.close(1008, \"Not approved\");\n      }\n      // Browser → CLI\n      browserWs.on(\"message\", (msg) => {\n        const hmrStart = Date.now();\n        logger.debug(\"browser -> cli browserWS message: %s\", msg.toString());\n        cliWs.send(\n          JSON.stringify({\n            type: \"hmr:message\",\n            body: msg.toString(),\n            timestamp: hmrStart,\n          }),\n        );\n      });\n\n      // // CLI → Browser\n      const cliHandler = (msg: Buffer | string, isBinary: boolean) => {\n        // Ignore binary messages (they're for fetch responses, not HMR)\n        if (isBinary) return;\n\n        try {\n          const data = JSON.parse(msg.toString());\n\n          if (data.type === \"hmr:message\") {\n            browserWs.send(data.body);\n          }\n        } catch {\n          logger.error(\n            \"Failed to parse CLI message for HMR: %s\",\n            msg.toString().substring(0, 100),\n          );\n        }\n      };\n      cliWs.on(\"message\", cliHandler);\n\n      browserWs.on(\"close\", () => {\n        cliWs.off(\"message\", cliHandler);\n      });\n    });\n\n    // // Browser HMR connection\n    this.server?.on(\"upgrade\", (req, socket, head) => {\n      const url = req.url ?? \"\";\n\n      if (url.startsWith(\"/dev-tunnel\")) {\n        this.wss.handleUpgrade(req, socket, head, (ws) => {\n          this.wss.emit(\"connection\", ws, req);\n        });\n      } else if (url.startsWith(\"/dev-hmr\")) {\n        this.hmrWss.handleUpgrade(req, socket, head, (browserWs) => {\n          this.hmrWss.emit(\"connection\", browserWs, req);\n        });\n      }\n    });\n  }\n\n  registerTunnelGetter() {\n    this.devFileReader.registerTunnelGetter(\n      this.getTunnelForRequest.bind(this),\n    );\n  }\n\n  getTunnelForRequest(req: express.Request) {\n    const email = req.headers[\"x-forwarded-email\"] as string;\n    const cookieHeader = req.headers.cookie;\n\n    let tunnelId: string | undefined;\n\n    if (cookieHeader) {\n      const match = cookieHeader.match(/dev-tunnel-id=([^;]+)/);\n      if (match) {\n        tunnelId = match[1];\n      }\n    }\n\n    if (!tunnelId) {\n      tunnelId = generateTunnelIdFromEmail(email);\n    }\n\n    return tunnelId ? this.tunnels.get(tunnelId) || null : null;\n  }\n\n  cleanup() {\n    for (const [, tunnel] of this.tunnels) {\n      for (const [_, pending] of tunnel.pendingFetches) {\n        clearTimeout(pending.timeout);\n        pending.reject(new Error(\"Server shutting down\"));\n      }\n      tunnel.pendingFetches.clear();\n      tunnel.ws.close();\n    }\n    this.tunnels.clear();\n\n    if (this.wss) {\n      this.wss.close();\n    }\n    if (this.hmrWss) {\n      this.hmrWss.close();\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;AAgBA,MAAM,aAAa,cAAc,OAAO,KAAK,IAAI;AACjD,MAAM,YAAY,KAAK,QAAQ,WAAW;AAC1C,MAAM,0BAA0B;AAEhC,MAAM,SAAS,aAAa,uBAAuB;;;;AA2CnD,SAAS,mBAAmB,MAAyC;AACnE,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO;AAIT,QAAO,OADK,KACM,SAAS;;;;;;;;;;;;;;AAe7B,IAAa,sBAAb,MAAiC;CAC/B,AAAQ,0BAAU,IAAI,KAA+B;CACrD,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YAAY,eAA8B;AACxC,OAAK,gBAAgB;AACrB,OAAK,MAAM,IAAI,gBAAgB;GAAE,UAAU;GAAM,MAAM;GAAe,CAAC;AACvE,OAAK,SAAS,IAAI,gBAAgB;GAAE,UAAU;GAAM,MAAM;GAAY,CAAC;AAEvE,OAAK,sBAAsB;;CAG7B,UAAU,QAAoB;AAC5B,OAAK,SAAS;;;CAIhB,kBAAkB;AAChB,SAAO,OAAO,KAAsB,QAA0B;GAC5D,MAAM,QAAQ,IAAI,QAAQ;GAG1B,IAAI;GACJ,MAAM,eAAe,IAAI,QAAQ;AAEjC,OAAI,cAAc;IAEhB,MAAM,QAAQ,aAAa,MAAM,wBAAwB;AACzD,QAAI,MACF,YAAW,MAAM;;AAIrB,OAAI,CAAC,SACH,YAAW,0BAA0B,MAAM;AAG7C,OAAI,CAAC,SAAU,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,mBAAmB;GAE9D,MAAM,SAAS,KAAK,QAAQ,IAAI,SAAS;AAEzC,OAAI,CAAC,OAAQ,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,mBAAmB;GAE5D,MAAM,EAAE,IAAI,iBAAiB,mBAAmB;AAEhD,OAAI,CAAC,gBAAgB,IAAI,MAAM,CAC7B,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,+BAA+B;GAG7D,MAAM,OAAO,IAAI;GACjB,MAAM,YAAY,YAAY;GAE9B,MAAM,UAAU;IAAE,MAAM;IAAS;IAAM,QAAQ,IAAI;IAAQ;IAAW;GAgBtE,MAAM,IAdW,MAAM,IAAI,SAAS,SAAS,WAAW;IACtD,MAAM,UAAU,iBAAiB;AAC/B,oBAAe,OAAO,UAAU;AAChC,4BAAO,IAAI,MAAM,sBAAsB,CAAC;OACvC,wBAAwB;AAE3B,mBAAe,IAAI,WAAW;KAAE;KAAS;KAAQ;KAAS,CAAC;AAE3D,OAAG,KAAK,KAAK,UAAU,QAAQ,CAAC;KAChC,CAAC,OAAO,QAAQ;AAChB,WAAO,MAAM,0BAA0B,MAAM,IAAI,QAAQ;AACzD,WAAO;KAAE,QAAQ;KAAK,MAAM,OAAO,KAAK,GAAG;KAAE,SAAS,EAAE;KAAE;KAC1D;AAIF,OACG,OAAO,EAAE,OAAO,CAChB,IAAI,EAAE,QAAQ,CACd,KAAK,EAAE,QAAQ,OAAO,KAAK,GAAG,CAAC;;;;CAKtC,oBAAoB;AAClB,SAAO,OACL,KACA,KACA,SACG;GACH,MAAM,MAAM,IAAI,OAAO;AAEvB,OAAI,QAAQ,OACV,QAAO,MAAM;AAGf,OACE,IAAI,KAAK,WAAW,OAAO,IAC3B,IAAI,KAAK,WAAW,SAAS,IAC7B,IAAI,KAAK,MAAM,uDAAuD,CAEtE,QAAO,MAAM;GAGf,MAAM,cAAc,IAAI,QAAQ;GAChC,MAAM,cAAc,QAAQ,MAAM,QAAQ;GAE1C,MAAM,WAAW,cACb,0BAA0B,YAAY,GACtC,IAAI,UAAU;AAElB,OAAI,CAAC,SACH,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,oBAAoB;AAGlD,OAAI,CAAC,aAAa;IAChB,MAAM,mBAAmB,KAAK,qBAC5B,UACA,aACA,IAAI,MAAM,UAAU,QACpB,IACD;AAED,QAAI,iBACF,QAAO;;AAIX,OAAI,OAAO,iBAAiB,UAAU;IACpC,UAAU;IACV,UAAU;IACX,CAAC;GAEF,MAAM,YAAY,KAAK,KAAK,WAAW,aAAa;GACpD,IAAI,OAAO,GAAG,aAAa,WAAW,QAAQ;AAC9C,UAAO,KAAK,QAAQ,UAAU,SAAS,iBAAiB,GAAG;AAE3D,OAAI,KAAK,KAAK;;;;CAKlB,MAAM,KAA0B;AAC9B,MAAI,IAAI,KAAK,mBAAmB,CAAC;AACjC,MAAI,IAAI,8BAA8B,KAAK,iBAAiB,CAAC;;CAG/D,OAAO,wBAAwB;AAC7B,SACE,QAAQ,IAAI,aAAa,gBACzB,QAAQ,IAAI,2BAA2B,UAEvC,QAAQ,QAAQ,IAAI,yBAAyB;;CAIjD,AAAQ,iBACN,UACA,cACQ;EACR,MAAM,WAAW,KAAK,KAAK,WAAW,SAAS;EAC/C,IAAI,UAAU,GAAG,aAAa,UAAU,QAAQ;AAEhD,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,aAAa,CACrD,WAAU,QAAQ,WAAW,KAAK,IAAI,KAAK,MAAM;AAGnD,SAAO;;CAGT,AAAQ,qBACN,UACA,aACA,OACA,KACyB;EACzB,MAAM,SAAS,KAAK,QAAQ,IAAI,SAAS;AAEzC,MAAI,CAAC,OACH,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,mBAAmB;AAGjD,MAAI,gBAAgB,OAAO,MACzB,QAAO;AAGT,MAAI,MACF,QAAO,gBAAgB,OAAO,YAAY;AAG5C,MAAI,OAAO,gBAAgB,IAAI,YAAY,EAAE;GAC3C,MAAM,OAAO,KAAK,iBAAiB,eAAe,EAAE,UAAU,CAAC;AAC/D,UAAO,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK;;AAGnC,MAAI,OAAO,gBAAgB,IAAI,YAAY,CACzC,QAAO;AAGT,MAAI,CAAC,OAAO,gBAAgB,IAAI,YAAY,EAAE;GAC5C,MAAM,YAAY,YAAY;AAC9B,UAAO,gBAAgB,IAAI,YAAY;AACvC,UAAO,GAAG,KACR,KAAK,UAAU;IACb,MAAM;IACN;IACA,QAAQ;IACT,CAAC,CACH;;EAGH,MAAM,OAAO,KAAK,iBAAiB,aAAa,EAAE,UAAU,CAAC;AAC7D,SAAO,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK;;CAGnC,iBAAiB;AACf,OAAK,IAAI,GAAG,eAAe,IAAI,QAAQ;GACrC,MAAM,QAAQ,IAAI,QAAQ;GAC1B,MAAM,WAAW,0BAA0B,MAAM;AAEjD,OAAI,CAAC,SAAU,QAAO,GAAG,OAAO;AAEhC,QAAK,QAAQ,IAAI,UAAU;IACzB;IACA,OAAO;IACP,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC;IACjC,iCAAiB,IAAI,KAAK;IAC1B,iCAAiB,IAAI,KAAK;IAC1B,gCAAgB,IAAI,KAAK;IACzB,kCAAkB,IAAI,KAAK;IAC3B,sBAAsB;IACvB,CAAC;AAEF,MAAG,GAAG,YAAY,KAAK,aAAa;IAClC,MAAM,SAAS,KAAK,QAAQ,IAAI,SAAS;AACzC,QAAI,CAAC,OAAQ;AAEb,QAAI,UAAU;AACZ,SAAI,CAAC,OAAO,sBAAsB;AAChC,aAAO,MACL,+DACD;AACD;;KAGF,MAAM,YAAY,OAAO;KACzB,MAAM,UAAU,OAAO,eAAe,IAAI,UAAU;AAEpD,SAAI,CAAC,WAAW,CAAC,QAAQ,UAAU;AACjC,aAAO,MAAM,sDAAsD;AACnE,aAAO,uBAAuB;AAC9B;;AAGF,YAAO,uBAAuB;AAC9B,kBAAa,QAAQ,QAAQ;AAC7B,YAAO,eAAe,OAAO,UAAU;AAEvC,aAAQ,QAAQ;MACd,QAAQ,QAAQ,SAAS;MACzB,SAAS,QAAQ,SAAS;MAC1B,MAAM;MACP,CAAC;AACF;;AAGF,QAAI;KACF,MAAM,OAAO,KAAK,MAAM,IAAI,UAAU,CAAC;AAGvC,SAAI,CAAC,mBAAmB,KAAK,EAAE;AAC7B,aAAO,MAAM,wCAAwC,KAAK;AAC1D;;AAGF,SAAI,KAAK,SAAS,uBAChB;UAAI,UAAU,KAAK,QAAQ;AACzB,cAAO,gBAAgB,OAAO,KAAK,OAAO;AAE1C,WAAI,KAAK,UAAU;AACjB,eAAO,gBAAgB,IAAI,KAAK,OAAO;AACvC,eAAO,MACL,+BACA,KAAK,QACL,SACD;cACI;AACL,eAAO,gBAAgB,IAAI,KAAK,OAAO;AACvC,eAAO,MACL,6BACA,KAAK,QACL,SACD;;;gBAGI,KAAK,SAAS,uBAAuB;MAC9C,MAAM,UAAU,OAAO,eAAe,IAAI,KAAK,UAAU;AACzD,UAAI,SAAS;AACX,eAAQ,WAAW;QACjB,QAAQ,KAAK;QACb,SAAS,KAAK;QACf;AACD,WACE,KAAK,WAAW,OAChB,KAAK,WAAW,OACf,KAAK,UAAU,OAAO,KAAK,SAAS,KACrC;AACA,qBAAa,QAAQ,QAAQ;AAC7B,eAAO,eAAe,OAAO,KAAK,UAAU;AAC5C,gBAAQ,QAAQ;SACd,QAAQ,KAAK;SACb,SAAS,KAAK;SACd,MAAM,OAAO,KAAK,GAAG;SACtB,CAAC;aAEF,QAAO,uBAAuB,KAAK;;gBAG9B,KAAK,SAAS,sBAAsB;MAC7C,MAAM,UAAU,OAAO,iBAAiB,IAAI,KAAK,UAAU;AAC3D,UAAI,SAAS;AACX,oBAAa,QAAQ,QAAQ;AAC7B,cAAO,iBAAiB,OAAO,KAAK,UAAU;AAE9C,WAAI,KAAK,MACP,SAAQ,OAAO,IAAI,MAAM,KAAK,MAAM,CAAC;gBAC5B,KAAK,YAAY,OAC1B,SAAQ,QAAQ,KAAK,QAAQ;WAE7B,SAAQ,uBACN,IAAI,MAAM,wCAAwC,CACnD;;gBAGI,KAAK,SAAS,qBAAqB;MAC5C,MAAM,UAAU,OAAO,iBAAiB,IAAI,KAAK,UAAU;AAC3D,UAAI,SAAS;AACX,oBAAa,QAAQ,QAAQ;AAC7B,cAAO,iBAAiB,OAAO,KAAK,UAAU;AAE9C,WAAI,KAAK,MACP,SAAQ,OAAO,IAAI,MAAM,KAAK,MAAM,CAAC;gBAC5B,KAAK,YAAY,OAC1B,SAAQ,QAAQ,KAAK,QAAQ;WAE7B,SAAQ,uBACN,IAAI,MAAM,uCAAuC,CAClD;;;aAIA,GAAG;AACV,YAAO,MAAM,yCAAyC,EAAE;;KAE1D;AAEF,MAAG,KAAK,KAAK,UAAU;IAAE,MAAM;IAAgB;IAAU,CAAC,CAAC;AAE3D,MAAG,GAAG,eAAe;IACnB,MAAM,SAAS,KAAK,QAAQ,IAAI,SAAS;AAEzC,QAAI,QAAQ;AACV,UAAK,MAAM,CAAC,GAAG,YAAY,OAAO,gBAAgB;AAChD,mBAAa,QAAQ,QAAQ;AAC7B,cAAQ,uBAAO,IAAI,MAAM,gBAAgB,CAAC;;AAE5C,YAAO,eAAe,OAAO;;AAG/B,SAAK,QAAQ,OAAO,SAAS;KAC7B;IACF;AAEF,OAAK,OAAO,GAAG,eAAe,WAAW,QAAQ;GAC/C,MAAM,UAAU,aAAa,IAAI;GACjC,MAAM,QAAQ,IAAI,QAAQ;GAC1B,MAAM,WACJ,QAAQ,oBAAoB,0BAA0B,MAAM;AAE9D,OAAI,CAAC,SAAU,QAAO,UAAU,OAAO;GAEvC,MAAM,YAAY,KAAK,QAAQ,IAAI,SAAS;AAE5C,OAAI,CAAC,UAAW,QAAO,UAAU,OAAO;GAExC,MAAM,EAAE,IAAI,OAAO,oBAAoB;AAEvC,OAAI,CAAC,gBAAgB,IAAI,MAAM,CAC7B,QAAO,UAAU,MAAM,MAAM,eAAe;AAG9C,aAAU,GAAG,YAAY,QAAQ;IAC/B,MAAM,WAAW,KAAK,KAAK;AAC3B,WAAO,MAAM,wCAAwC,IAAI,UAAU,CAAC;AACpE,UAAM,KACJ,KAAK,UAAU;KACb,MAAM;KACN,MAAM,IAAI,UAAU;KACpB,WAAW;KACZ,CAAC,CACH;KACD;GAGF,MAAM,cAAc,KAAsB,aAAsB;AAE9D,QAAI,SAAU;AAEd,QAAI;KACF,MAAM,OAAO,KAAK,MAAM,IAAI,UAAU,CAAC;AAEvC,SAAI,KAAK,SAAS,cAChB,WAAU,KAAK,KAAK,KAAK;YAErB;AACN,YAAO,MACL,2CACA,IAAI,UAAU,CAAC,UAAU,GAAG,IAAI,CACjC;;;AAGL,SAAM,GAAG,WAAW,WAAW;AAE/B,aAAU,GAAG,eAAe;AAC1B,UAAM,IAAI,WAAW,WAAW;KAChC;IACF;AAGF,OAAK,QAAQ,GAAG,YAAY,KAAK,QAAQ,SAAS;GAChD,MAAM,MAAM,IAAI,OAAO;AAEvB,OAAI,IAAI,WAAW,cAAc,CAC/B,MAAK,IAAI,cAAc,KAAK,QAAQ,OAAO,OAAO;AAChD,SAAK,IAAI,KAAK,cAAc,IAAI,IAAI;KACpC;YACO,IAAI,WAAW,WAAW,CACnC,MAAK,OAAO,cAAc,KAAK,QAAQ,OAAO,cAAc;AAC1D,SAAK,OAAO,KAAK,cAAc,WAAW,IAAI;KAC9C;IAEJ;;CAGJ,uBAAuB;AACrB,OAAK,cAAc,qBACjB,KAAK,oBAAoB,KAAK,KAAK,CACpC;;CAGH,oBAAoB,KAAsB;EACxC,MAAM,QAAQ,IAAI,QAAQ;EAC1B,MAAM,eAAe,IAAI,QAAQ;EAEjC,IAAI;AAEJ,MAAI,cAAc;GAChB,MAAM,QAAQ,aAAa,MAAM,wBAAwB;AACzD,OAAI,MACF,YAAW,MAAM;;AAIrB,MAAI,CAAC,SACH,YAAW,0BAA0B,MAAM;AAG7C,SAAO,WAAW,KAAK,QAAQ,IAAI,SAAS,IAAI,OAAO;;CAGzD,UAAU;AACR,OAAK,MAAM,GAAG,WAAW,KAAK,SAAS;AACrC,QAAK,MAAM,CAAC,GAAG,YAAY,OAAO,gBAAgB;AAChD,iBAAa,QAAQ,QAAQ;AAC7B,YAAQ,uBAAO,IAAI,MAAM,uBAAuB,CAAC;;AAEnD,UAAO,eAAe,OAAO;AAC7B,UAAO,GAAG,OAAO;;AAEnB,OAAK,QAAQ,OAAO;AAEpB,MAAI,KAAK,IACP,MAAK,IAAI,OAAO;AAElB,MAAI,KAAK,OACP,MAAK,OAAO,OAAO"}
+{"version":3,"file":"remote-tunnel-manager.js","names":[],"sources":["../../../../src/plugins/server/remote-tunnel/remote-tunnel-manager.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport fs from \"node:fs\";\nimport type { Server as HTTPServer } from \"node:http\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport type express from \"express\";\nimport type { TunnelConnection } from \"shared\";\nimport { WebSocketServer } from \"ws\";\nimport { createLogger } from \"../../../logging/logger\";\nimport {\n  generateTunnelIdFromEmail,\n  getConfigScript,\n  parseCookies,\n} from \"../utils\";\nimport { REMOTE_TUNNEL_ASSET_PREFIXES } from \"./gate\";\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\nconst MAX_ASSET_FETCH_TIMEOUT = 60_000;\n\nconst logger = createLogger(\"server:remote-tunnel\");\n\ninterface DevFileReader {\n  registerTunnelGetter(\n    getter: (req: express.Request) => TunnelConnection | null,\n  ): void;\n}\n\n/**\n * WebSocket message types for CLI <-> Server communication\n */\ntype WebSocketMessage =\n  | {\n      type: \"connection:response\";\n      viewer: string;\n      approved: boolean;\n    }\n  | {\n      type: \"fetch:response:meta\";\n      requestId: string;\n      status: number;\n      headers: Record<string, string>;\n    }\n  | {\n      type: \"file:read:response\";\n      requestId: string;\n      content?: string;\n      error?: string;\n    }\n  | {\n      type: \"dir:list:response\";\n      requestId: string;\n      content?: string;\n      error?: string;\n    }\n  | {\n      type: \"hmr:message\";\n      body: string;\n    };\n\n/**\n * Type guard to validate WebSocket message structure\n */\nfunction isWebSocketMessage(data: unknown): data is WebSocketMessage {\n  if (!data || typeof data !== \"object\") {\n    return false;\n  }\n\n  const msg = data as Record<string, unknown>;\n  return typeof msg.type === \"string\";\n}\n\n/**\n * Remote tunnel manager for the AppKit.\n *\n * This class is responsible for managing the remote tunnels for the development server.\n * It also handles the asset fetching and the HMR for the development server.\n *\n * @example\n * ```ts\n * const remoteTunnelManager = new RemoteTunnelManager(devFileReader);\n * remoteTunnelManager.setup(app);\n * ```\n */\nexport class RemoteTunnelManager {\n  private tunnels = new Map<string, TunnelConnection>();\n  private wss: WebSocketServer;\n  private hmrWss: WebSocketServer;\n  private server?: HTTPServer;\n  private devFileReader: DevFileReader;\n\n  constructor(devFileReader: DevFileReader) {\n    this.devFileReader = devFileReader;\n    this.wss = new WebSocketServer({ noServer: true, path: \"/dev-tunnel\" });\n    this.hmrWss = new WebSocketServer({ noServer: true, path: \"/dev-hmr\" });\n\n    this.registerTunnelGetter();\n  }\n\n  setServer(server: HTTPServer) {\n    this.server = server;\n  }\n\n  /** Asset middleware for the development server. */\n  assetMiddleware() {\n    return async (req: express.Request, res: express.Response) => {\n      const email = req.headers[\"x-forwarded-email\"] as string;\n\n      // Try cookie first, then generate from email\n      let tunnelId: string | undefined;\n      const cookieHeader = req.headers.cookie;\n\n      if (cookieHeader) {\n        // Fast path: extract dev-tunnel-id from cookie without full parse\n        const match = cookieHeader.match(/dev-tunnel-id=([^;]+)/);\n        if (match) {\n          tunnelId = match[1];\n        }\n      }\n\n      if (!tunnelId) {\n        tunnelId = generateTunnelIdFromEmail(email);\n      }\n\n      if (!tunnelId) return res.status(404).send(\"Tunnel not ready\");\n\n      const tunnel = this.tunnels.get(tunnelId);\n\n      if (!tunnel) return res.status(404).send(\"Tunnel not found\");\n\n      const { ws, approvedViewers, pendingFetches } = tunnel;\n\n      if (!approvedViewers.has(email)) {\n        return res.status(403).send(\"Not approved for this tunnel\");\n      }\n\n      const path = req.originalUrl;\n      const requestId = randomUUID();\n\n      const request = { type: \"fetch\", path, method: req.method, requestId };\n\n      const response = await new Promise((resolve, reject) => {\n        const timeout = setTimeout(() => {\n          pendingFetches.delete(requestId);\n          reject(new Error(\"Asset fetch timeout\"));\n        }, MAX_ASSET_FETCH_TIMEOUT);\n\n        pendingFetches.set(requestId, { resolve, reject, timeout });\n\n        ws.send(JSON.stringify(request));\n      }).catch((err) => {\n        logger.error(\"Failed to fetch %s: %s\", path, err.message);\n        return { status: 504, body: Buffer.from(\"\"), headers: {} };\n      });\n\n      const r = response as any;\n\n      res\n        .status(r.status)\n        .set(r.headers)\n        .send(r.body || Buffer.from(\"\"));\n    };\n  }\n\n  /** Dev mode middleware for the development server. */\n  devModeMiddleware() {\n    return async (\n      req: express.Request,\n      res: express.Response,\n      next: express.NextFunction,\n    ) => {\n      const dev = req.query?.dev;\n\n      if (dev === undefined) {\n        return next();\n      }\n\n      if (\n        req.path.startsWith(\"/api\") ||\n        req.path.startsWith(\"/query\") ||\n        req.path.match(/\\.(js|css|png|jpg|jpeg|svg|ico|json|woff|woff2|ttf)$/)\n      ) {\n        return next();\n      }\n\n      const viewerEmail = req.headers[\"x-forwarded-email\"] as string;\n      const isOwnerMode = dev === \"\" || dev === \"true\";\n\n      const tunnelId = isOwnerMode\n        ? generateTunnelIdFromEmail(viewerEmail)\n        : dev.toString();\n\n      if (!tunnelId) {\n        return res.status(400).send(\"Invalid tunnel ID\");\n      }\n\n      if (!isOwnerMode) {\n        const approvalResponse = this.handleViewerApproval(\n          tunnelId,\n          viewerEmail,\n          req.query.retry === \"true\",\n          res,\n        );\n\n        if (approvalResponse) {\n          return approvalResponse;\n        }\n      }\n\n      res.cookie(\"dev-tunnel-id\", tunnelId, {\n        httpOnly: true,\n        secure: true,\n        sameSite: \"lax\",\n      });\n\n      const indexPath = path.join(__dirname, \"index.html\");\n      let html = fs.readFileSync(indexPath, \"utf-8\");\n      html = html.replace(\"<body>\", `<body>${getConfigScript()}`);\n\n      res.send(html);\n    };\n  }\n\n  /** Setup the dev mode middleware. */\n  setup(app: express.Application) {\n    app.use(this.devModeMiddleware());\n    app.use(REMOTE_TUNNEL_ASSET_PREFIXES, this.assetMiddleware());\n  }\n\n  static isRemoteServerEnabled() {\n    return (\n      process.env.NODE_ENV !== \"production\" &&\n      process.env.DISABLE_REMOTE_SERVING !== \"true\" &&\n      // DATABRICKS_CLIENT_SECRET is set in the .env file for deployed environments\n      Boolean(process.env.DATABRICKS_CLIENT_SECRET)\n    );\n  }\n\n  private loadHtmlTemplate(\n    filename: string,\n    replacements: Record<string, string>,\n  ): string {\n    const filePath = path.join(__dirname, filename);\n    let content = fs.readFileSync(filePath, \"utf-8\");\n\n    for (const [key, value] of Object.entries(replacements)) {\n      content = content.replaceAll(`{{${key}}}`, value);\n    }\n\n    return content;\n  }\n\n  private handleViewerApproval(\n    tunnelId: string,\n    viewerEmail: string,\n    retry: boolean,\n    res: express.Response,\n  ): express.Response | null {\n    const tunnel = this.tunnels.get(tunnelId);\n\n    if (!tunnel) {\n      return res.status(404).send(\"Tunnel not found\");\n    }\n\n    if (viewerEmail === tunnel.owner) {\n      return null;\n    }\n\n    if (retry) {\n      tunnel.rejectedViewers.delete(viewerEmail);\n    }\n\n    if (tunnel.rejectedViewers.has(viewerEmail)) {\n      const html = this.loadHtmlTemplate(\"denied.html\", { tunnelId });\n      return res.status(403).send(html);\n    }\n\n    if (tunnel.approvedViewers.has(viewerEmail)) {\n      return null;\n    }\n\n    if (!tunnel.pendingRequests.has(viewerEmail)) {\n      const requestId = randomUUID();\n      tunnel.pendingRequests.add(viewerEmail);\n      tunnel.ws.send(\n        JSON.stringify({\n          type: \"connection:request\",\n          requestId,\n          viewer: viewerEmail,\n        }),\n      );\n    }\n\n    const html = this.loadHtmlTemplate(\"wait.html\", { tunnelId });\n    return res.status(200).send(html);\n  }\n\n  setupWebSocket() {\n    this.wss.on(\"connection\", (ws, req) => {\n      const email = req.headers[\"x-forwarded-email\"] as string;\n      const tunnelId = generateTunnelIdFromEmail(email);\n\n      if (!tunnelId) return ws.close();\n\n      this.tunnels.set(tunnelId, {\n        ws,\n        owner: email,\n        approvedViewers: new Set([email]),\n        pendingRequests: new Set(),\n        rejectedViewers: new Set(),\n        pendingFetches: new Map(),\n        pendingFileReads: new Map(),\n        waitingForBinaryBody: null,\n      });\n\n      ws.on(\"message\", (msg, isBinary) => {\n        const tunnel = this.tunnels.get(tunnelId);\n        if (!tunnel) return;\n\n        if (isBinary) {\n          if (!tunnel.waitingForBinaryBody) {\n            logger.debug(\n              \"Received binary message but no requestId is waiting for body\",\n            );\n            return;\n          }\n\n          const requestId = tunnel.waitingForBinaryBody;\n          const pending = tunnel.pendingFetches.get(requestId);\n\n          if (!pending || !pending.metadata) {\n            logger.debug(\"Received binary message but pending fetch not found\");\n            tunnel.waitingForBinaryBody = null;\n            return;\n          }\n\n          tunnel.waitingForBinaryBody = null;\n          clearTimeout(pending.timeout);\n          tunnel.pendingFetches.delete(requestId);\n\n          pending.resolve({\n            status: pending.metadata.status,\n            headers: pending.metadata.headers,\n            body: msg as Buffer,\n          });\n          return;\n        }\n\n        try {\n          const data = JSON.parse(msg.toString());\n\n          // Validate message structure\n          if (!isWebSocketMessage(data)) {\n            logger.error(\"Invalid WebSocket message format: %O\", data);\n            return;\n          }\n\n          if (data.type === \"connection:response\") {\n            if (tunnel && data.viewer) {\n              tunnel.pendingRequests.delete(data.viewer);\n\n              if (data.approved) {\n                tunnel.approvedViewers.add(data.viewer);\n                logger.debug(\n                  \"✅ Approved %s for tunnel %s\",\n                  data.viewer,\n                  tunnelId,\n                );\n              } else {\n                tunnel.rejectedViewers.add(data.viewer);\n                logger.debug(\n                  \"❌ Denied %s for tunnel %s\",\n                  data.viewer,\n                  tunnelId,\n                );\n              }\n            }\n          } else if (data.type === \"fetch:response:meta\") {\n            const pending = tunnel.pendingFetches.get(data.requestId);\n            if (pending) {\n              pending.metadata = {\n                status: data.status,\n                headers: data.headers,\n              };\n              if (\n                data.status === 304 ||\n                data.status === 204 ||\n                (data.status >= 300 && data.status < 400)\n              ) {\n                clearTimeout(pending.timeout);\n                tunnel.pendingFetches.delete(data.requestId);\n                pending.resolve({\n                  status: data.status,\n                  headers: data.headers,\n                  body: Buffer.from(\"\"),\n                });\n              } else {\n                tunnel.waitingForBinaryBody = data.requestId;\n              }\n            }\n          } else if (data.type === \"file:read:response\") {\n            const pending = tunnel.pendingFileReads.get(data.requestId);\n            if (pending) {\n              clearTimeout(pending.timeout);\n              tunnel.pendingFileReads.delete(data.requestId);\n\n              if (data.error) {\n                pending.reject(new Error(data.error));\n              } else if (data.content !== undefined) {\n                pending.resolve(data.content);\n              } else {\n                pending.reject(\n                  new Error(\"Missing content in file:read:response\"),\n                );\n              }\n            }\n          } else if (data.type === \"dir:list:response\") {\n            const pending = tunnel.pendingFileReads.get(data.requestId);\n            if (pending) {\n              clearTimeout(pending.timeout);\n              tunnel.pendingFileReads.delete(data.requestId);\n\n              if (data.error) {\n                pending.reject(new Error(data.error));\n              } else if (data.content !== undefined) {\n                pending.resolve(data.content);\n              } else {\n                pending.reject(\n                  new Error(\"Missing content in dir:list:response\"),\n                );\n              }\n            }\n          }\n        } catch (e) {\n          logger.error(\"Failed to parse WebSocket message: %O\", e);\n        }\n      });\n\n      ws.send(JSON.stringify({ type: \"tunnel:ready\", tunnelId }));\n\n      ws.on(\"close\", () => {\n        const tunnel = this.tunnels.get(tunnelId);\n\n        if (tunnel) {\n          for (const [_, pending] of tunnel.pendingFetches) {\n            clearTimeout(pending.timeout);\n            pending.reject(new Error(\"Tunnel closed\"));\n          }\n          tunnel.pendingFetches.clear();\n        }\n\n        this.tunnels.delete(tunnelId);\n      });\n    });\n\n    this.hmrWss.on(\"connection\", (browserWs, req) => {\n      const cookies = parseCookies(req);\n      const email = req.headers[\"x-forwarded-email\"] as string;\n      const tunnelId =\n        cookies[\"dev-tunnel-id\"] || generateTunnelIdFromEmail(email);\n\n      if (!tunnelId) return browserWs.close();\n\n      const cliTunnel = this.tunnels.get(tunnelId);\n\n      if (!cliTunnel) return browserWs.close();\n\n      const { ws: cliWs, approvedViewers } = cliTunnel;\n\n      if (!approvedViewers.has(email)) {\n        return browserWs.close(1008, \"Not approved\");\n      }\n      // Browser → CLI\n      browserWs.on(\"message\", (msg) => {\n        const hmrStart = Date.now();\n        logger.debug(\"browser -> cli browserWS message: %s\", msg.toString());\n        cliWs.send(\n          JSON.stringify({\n            type: \"hmr:message\",\n            body: msg.toString(),\n            timestamp: hmrStart,\n          }),\n        );\n      });\n\n      // // CLI → Browser\n      const cliHandler = (msg: Buffer | string, isBinary: boolean) => {\n        // Ignore binary messages (they're for fetch responses, not HMR)\n        if (isBinary) return;\n\n        try {\n          const data = JSON.parse(msg.toString());\n\n          if (data.type === \"hmr:message\") {\n            browserWs.send(data.body);\n          }\n        } catch {\n          logger.error(\n            \"Failed to parse CLI message for HMR: %s\",\n            msg.toString().substring(0, 100),\n          );\n        }\n      };\n      cliWs.on(\"message\", cliHandler);\n\n      browserWs.on(\"close\", () => {\n        cliWs.off(\"message\", cliHandler);\n      });\n    });\n\n    // // Browser HMR connection\n    this.server?.on(\"upgrade\", (req, socket, head) => {\n      const url = req.url ?? \"\";\n\n      if (url.startsWith(\"/dev-tunnel\")) {\n        this.wss.handleUpgrade(req, socket, head, (ws) => {\n          this.wss.emit(\"connection\", ws, req);\n        });\n      } else if (url.startsWith(\"/dev-hmr\")) {\n        this.hmrWss.handleUpgrade(req, socket, head, (browserWs) => {\n          this.hmrWss.emit(\"connection\", browserWs, req);\n        });\n      }\n    });\n  }\n\n  registerTunnelGetter() {\n    this.devFileReader.registerTunnelGetter(\n      this.getTunnelForRequest.bind(this),\n    );\n  }\n\n  getTunnelForRequest(req: express.Request) {\n    const email = req.headers[\"x-forwarded-email\"] as string;\n    const cookieHeader = req.headers.cookie;\n\n    let tunnelId: string | undefined;\n\n    if (cookieHeader) {\n      const match = cookieHeader.match(/dev-tunnel-id=([^;]+)/);\n      if (match) {\n        tunnelId = match[1];\n      }\n    }\n\n    if (!tunnelId) {\n      tunnelId = generateTunnelIdFromEmail(email);\n    }\n\n    return tunnelId ? this.tunnels.get(tunnelId) || null : null;\n  }\n\n  cleanup() {\n    for (const [, tunnel] of this.tunnels) {\n      for (const [_, pending] of tunnel.pendingFetches) {\n        clearTimeout(pending.timeout);\n        pending.reject(new Error(\"Server shutting down\"));\n      }\n      tunnel.pendingFetches.clear();\n      tunnel.ws.close();\n    }\n    this.tunnels.clear();\n\n    if (this.wss) {\n      this.wss.close();\n    }\n    if (this.hmrWss) {\n      this.hmrWss.close();\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;AAgBA,MAAM,aAAa,cAAc,OAAO,KAAK,IAAI;AACjD,MAAM,YAAY,KAAK,QAAQ,WAAW;AAC1C,MAAM,0BAA0B;AAEhC,MAAM,SAAS,aAAa,uBAAuB;;;;AA2CnD,SAAS,mBAAmB,MAAyC;AACnE,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO;AAIT,QAAO,OADK,KACM,SAAS;;;;;;;;;;;;;;AAe7B,IAAa,sBAAb,MAAiC;CAC/B,AAAQ,0BAAU,IAAI,KAA+B;CACrD,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YAAY,eAA8B;AACxC,OAAK,gBAAgB;AACrB,OAAK,MAAM,IAAI,gBAAgB;GAAE,UAAU;GAAM,MAAM;GAAe,CAAC;AACvE,OAAK,SAAS,IAAI,gBAAgB;GAAE,UAAU;GAAM,MAAM;GAAY,CAAC;AAEvE,OAAK,sBAAsB;;CAG7B,UAAU,QAAoB;AAC5B,OAAK,SAAS;;;CAIhB,kBAAkB;AAChB,SAAO,OAAO,KAAsB,QAA0B;GAC5D,MAAM,QAAQ,IAAI,QAAQ;GAG1B,IAAI;GACJ,MAAM,eAAe,IAAI,QAAQ;AAEjC,OAAI,cAAc;IAEhB,MAAM,QAAQ,aAAa,MAAM,wBAAwB;AACzD,QAAI,MACF,YAAW,MAAM;;AAIrB,OAAI,CAAC,SACH,YAAW,0BAA0B,MAAM;AAG7C,OAAI,CAAC,SAAU,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,mBAAmB;GAE9D,MAAM,SAAS,KAAK,QAAQ,IAAI,SAAS;AAEzC,OAAI,CAAC,OAAQ,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,mBAAmB;GAE5D,MAAM,EAAE,IAAI,iBAAiB,mBAAmB;AAEhD,OAAI,CAAC,gBAAgB,IAAI,MAAM,CAC7B,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,+BAA+B;GAG7D,MAAM,OAAO,IAAI;GACjB,MAAM,YAAY,YAAY;GAE9B,MAAM,UAAU;IAAE,MAAM;IAAS;IAAM,QAAQ,IAAI;IAAQ;IAAW;GAgBtE,MAAM,IAdW,MAAM,IAAI,SAAS,SAAS,WAAW;IACtD,MAAM,UAAU,iBAAiB;AAC/B,oBAAe,OAAO,UAAU;AAChC,4BAAO,IAAI,MAAM,sBAAsB,CAAC;OACvC,wBAAwB;AAE3B,mBAAe,IAAI,WAAW;KAAE;KAAS;KAAQ;KAAS,CAAC;AAE3D,OAAG,KAAK,KAAK,UAAU,QAAQ,CAAC;KAChC,CAAC,OAAO,QAAQ;AAChB,WAAO,MAAM,0BAA0B,MAAM,IAAI,QAAQ;AACzD,WAAO;KAAE,QAAQ;KAAK,MAAM,OAAO,KAAK,GAAG;KAAE,SAAS,EAAE;KAAE;KAC1D;AAIF,OACG,OAAO,EAAE,OAAO,CAChB,IAAI,EAAE,QAAQ,CACd,KAAK,EAAE,QAAQ,OAAO,KAAK,GAAG,CAAC;;;;CAKtC,oBAAoB;AAClB,SAAO,OACL,KACA,KACA,SACG;GACH,MAAM,MAAM,IAAI,OAAO;AAEvB,OAAI,QAAQ,OACV,QAAO,MAAM;AAGf,OACE,IAAI,KAAK,WAAW,OAAO,IAC3B,IAAI,KAAK,WAAW,SAAS,IAC7B,IAAI,KAAK,MAAM,uDAAuD,CAEtE,QAAO,MAAM;GAGf,MAAM,cAAc,IAAI,QAAQ;GAChC,MAAM,cAAc,QAAQ,MAAM,QAAQ;GAE1C,MAAM,WAAW,cACb,0BAA0B,YAAY,GACtC,IAAI,UAAU;AAElB,OAAI,CAAC,SACH,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,oBAAoB;AAGlD,OAAI,CAAC,aAAa;IAChB,MAAM,mBAAmB,KAAK,qBAC5B,UACA,aACA,IAAI,MAAM,UAAU,QACpB,IACD;AAED,QAAI,iBACF,QAAO;;AAIX,OAAI,OAAO,iBAAiB,UAAU;IACpC,UAAU;IACV,QAAQ;IACR,UAAU;IACX,CAAC;GAEF,MAAM,YAAY,KAAK,KAAK,WAAW,aAAa;GACpD,IAAI,OAAO,GAAG,aAAa,WAAW,QAAQ;AAC9C,UAAO,KAAK,QAAQ,UAAU,SAAS,iBAAiB,GAAG;AAE3D,OAAI,KAAK,KAAK;;;;CAKlB,MAAM,KAA0B;AAC9B,MAAI,IAAI,KAAK,mBAAmB,CAAC;AACjC,MAAI,IAAI,8BAA8B,KAAK,iBAAiB,CAAC;;CAG/D,OAAO,wBAAwB;AAC7B,SACE,QAAQ,IAAI,aAAa,gBACzB,QAAQ,IAAI,2BAA2B,UAEvC,QAAQ,QAAQ,IAAI,yBAAyB;;CAIjD,AAAQ,iBACN,UACA,cACQ;EACR,MAAM,WAAW,KAAK,KAAK,WAAW,SAAS;EAC/C,IAAI,UAAU,GAAG,aAAa,UAAU,QAAQ;AAEhD,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,aAAa,CACrD,WAAU,QAAQ,WAAW,KAAK,IAAI,KAAK,MAAM;AAGnD,SAAO;;CAGT,AAAQ,qBACN,UACA,aACA,OACA,KACyB;EACzB,MAAM,SAAS,KAAK,QAAQ,IAAI,SAAS;AAEzC,MAAI,CAAC,OACH,QAAO,IAAI,OAAO,IAAI,CAAC,KAAK,mBAAmB;AAGjD,MAAI,gBAAgB,OAAO,MACzB,QAAO;AAGT,MAAI,MACF,QAAO,gBAAgB,OAAO,YAAY;AAG5C,MAAI,OAAO,gBAAgB,IAAI,YAAY,EAAE;GAC3C,MAAM,OAAO,KAAK,iBAAiB,eAAe,EAAE,UAAU,CAAC;AAC/D,UAAO,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK;;AAGnC,MAAI,OAAO,gBAAgB,IAAI,YAAY,CACzC,QAAO;AAGT,MAAI,CAAC,OAAO,gBAAgB,IAAI,YAAY,EAAE;GAC5C,MAAM,YAAY,YAAY;AAC9B,UAAO,gBAAgB,IAAI,YAAY;AACvC,UAAO,GAAG,KACR,KAAK,UAAU;IACb,MAAM;IACN;IACA,QAAQ;IACT,CAAC,CACH;;EAGH,MAAM,OAAO,KAAK,iBAAiB,aAAa,EAAE,UAAU,CAAC;AAC7D,SAAO,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK;;CAGnC,iBAAiB;AACf,OAAK,IAAI,GAAG,eAAe,IAAI,QAAQ;GACrC,MAAM,QAAQ,IAAI,QAAQ;GAC1B,MAAM,WAAW,0BAA0B,MAAM;AAEjD,OAAI,CAAC,SAAU,QAAO,GAAG,OAAO;AAEhC,QAAK,QAAQ,IAAI,UAAU;IACzB;IACA,OAAO;IACP,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC;IACjC,iCAAiB,IAAI,KAAK;IAC1B,iCAAiB,IAAI,KAAK;IAC1B,gCAAgB,IAAI,KAAK;IACzB,kCAAkB,IAAI,KAAK;IAC3B,sBAAsB;IACvB,CAAC;AAEF,MAAG,GAAG,YAAY,KAAK,aAAa;IAClC,MAAM,SAAS,KAAK,QAAQ,IAAI,SAAS;AACzC,QAAI,CAAC,OAAQ;AAEb,QAAI,UAAU;AACZ,SAAI,CAAC,OAAO,sBAAsB;AAChC,aAAO,MACL,+DACD;AACD;;KAGF,MAAM,YAAY,OAAO;KACzB,MAAM,UAAU,OAAO,eAAe,IAAI,UAAU;AAEpD,SAAI,CAAC,WAAW,CAAC,QAAQ,UAAU;AACjC,aAAO,MAAM,sDAAsD;AACnE,aAAO,uBAAuB;AAC9B;;AAGF,YAAO,uBAAuB;AAC9B,kBAAa,QAAQ,QAAQ;AAC7B,YAAO,eAAe,OAAO,UAAU;AAEvC,aAAQ,QAAQ;MACd,QAAQ,QAAQ,SAAS;MACzB,SAAS,QAAQ,SAAS;MAC1B,MAAM;MACP,CAAC;AACF;;AAGF,QAAI;KACF,MAAM,OAAO,KAAK,MAAM,IAAI,UAAU,CAAC;AAGvC,SAAI,CAAC,mBAAmB,KAAK,EAAE;AAC7B,aAAO,MAAM,wCAAwC,KAAK;AAC1D;;AAGF,SAAI,KAAK,SAAS,uBAChB;UAAI,UAAU,KAAK,QAAQ;AACzB,cAAO,gBAAgB,OAAO,KAAK,OAAO;AAE1C,WAAI,KAAK,UAAU;AACjB,eAAO,gBAAgB,IAAI,KAAK,OAAO;AACvC,eAAO,MACL,+BACA,KAAK,QACL,SACD;cACI;AACL,eAAO,gBAAgB,IAAI,KAAK,OAAO;AACvC,eAAO,MACL,6BACA,KAAK,QACL,SACD;;;gBAGI,KAAK,SAAS,uBAAuB;MAC9C,MAAM,UAAU,OAAO,eAAe,IAAI,KAAK,UAAU;AACzD,UAAI,SAAS;AACX,eAAQ,WAAW;QACjB,QAAQ,KAAK;QACb,SAAS,KAAK;QACf;AACD,WACE,KAAK,WAAW,OAChB,KAAK,WAAW,OACf,KAAK,UAAU,OAAO,KAAK,SAAS,KACrC;AACA,qBAAa,QAAQ,QAAQ;AAC7B,eAAO,eAAe,OAAO,KAAK,UAAU;AAC5C,gBAAQ,QAAQ;SACd,QAAQ,KAAK;SACb,SAAS,KAAK;SACd,MAAM,OAAO,KAAK,GAAG;SACtB,CAAC;aAEF,QAAO,uBAAuB,KAAK;;gBAG9B,KAAK,SAAS,sBAAsB;MAC7C,MAAM,UAAU,OAAO,iBAAiB,IAAI,KAAK,UAAU;AAC3D,UAAI,SAAS;AACX,oBAAa,QAAQ,QAAQ;AAC7B,cAAO,iBAAiB,OAAO,KAAK,UAAU;AAE9C,WAAI,KAAK,MACP,SAAQ,OAAO,IAAI,MAAM,KAAK,MAAM,CAAC;gBAC5B,KAAK,YAAY,OAC1B,SAAQ,QAAQ,KAAK,QAAQ;WAE7B,SAAQ,uBACN,IAAI,MAAM,wCAAwC,CACnD;;gBAGI,KAAK,SAAS,qBAAqB;MAC5C,MAAM,UAAU,OAAO,iBAAiB,IAAI,KAAK,UAAU;AAC3D,UAAI,SAAS;AACX,oBAAa,QAAQ,QAAQ;AAC7B,cAAO,iBAAiB,OAAO,KAAK,UAAU;AAE9C,WAAI,KAAK,MACP,SAAQ,OAAO,IAAI,MAAM,KAAK,MAAM,CAAC;gBAC5B,KAAK,YAAY,OAC1B,SAAQ,QAAQ,KAAK,QAAQ;WAE7B,SAAQ,uBACN,IAAI,MAAM,uCAAuC,CAClD;;;aAIA,GAAG;AACV,YAAO,MAAM,yCAAyC,EAAE;;KAE1D;AAEF,MAAG,KAAK,KAAK,UAAU;IAAE,MAAM;IAAgB;IAAU,CAAC,CAAC;AAE3D,MAAG,GAAG,eAAe;IACnB,MAAM,SAAS,KAAK,QAAQ,IAAI,SAAS;AAEzC,QAAI,QAAQ;AACV,UAAK,MAAM,CAAC,GAAG,YAAY,OAAO,gBAAgB;AAChD,mBAAa,QAAQ,QAAQ;AAC7B,cAAQ,uBAAO,IAAI,MAAM,gBAAgB,CAAC;;AAE5C,YAAO,eAAe,OAAO;;AAG/B,SAAK,QAAQ,OAAO,SAAS;KAC7B;IACF;AAEF,OAAK,OAAO,GAAG,eAAe,WAAW,QAAQ;GAC/C,MAAM,UAAU,aAAa,IAAI;GACjC,MAAM,QAAQ,IAAI,QAAQ;GAC1B,MAAM,WACJ,QAAQ,oBAAoB,0BAA0B,MAAM;AAE9D,OAAI,CAAC,SAAU,QAAO,UAAU,OAAO;GAEvC,MAAM,YAAY,KAAK,QAAQ,IAAI,SAAS;AAE5C,OAAI,CAAC,UAAW,QAAO,UAAU,OAAO;GAExC,MAAM,EAAE,IAAI,OAAO,oBAAoB;AAEvC,OAAI,CAAC,gBAAgB,IAAI,MAAM,CAC7B,QAAO,UAAU,MAAM,MAAM,eAAe;AAG9C,aAAU,GAAG,YAAY,QAAQ;IAC/B,MAAM,WAAW,KAAK,KAAK;AAC3B,WAAO,MAAM,wCAAwC,IAAI,UAAU,CAAC;AACpE,UAAM,KACJ,KAAK,UAAU;KACb,MAAM;KACN,MAAM,IAAI,UAAU;KACpB,WAAW;KACZ,CAAC,CACH;KACD;GAGF,MAAM,cAAc,KAAsB,aAAsB;AAE9D,QAAI,SAAU;AAEd,QAAI;KACF,MAAM,OAAO,KAAK,MAAM,IAAI,UAAU,CAAC;AAEvC,SAAI,KAAK,SAAS,cAChB,WAAU,KAAK,KAAK,KAAK;YAErB;AACN,YAAO,MACL,2CACA,IAAI,UAAU,CAAC,UAAU,GAAG,IAAI,CACjC;;;AAGL,SAAM,GAAG,WAAW,WAAW;AAE/B,aAAU,GAAG,eAAe;AAC1B,UAAM,IAAI,WAAW,WAAW;KAChC;IACF;AAGF,OAAK,QAAQ,GAAG,YAAY,KAAK,QAAQ,SAAS;GAChD,MAAM,MAAM,IAAI,OAAO;AAEvB,OAAI,IAAI,WAAW,cAAc,CAC/B,MAAK,IAAI,cAAc,KAAK,QAAQ,OAAO,OAAO;AAChD,SAAK,IAAI,KAAK,cAAc,IAAI,IAAI;KACpC;YACO,IAAI,WAAW,WAAW,CACnC,MAAK,OAAO,cAAc,KAAK,QAAQ,OAAO,cAAc;AAC1D,SAAK,OAAO,KAAK,cAAc,WAAW,IAAI;KAC9C;IAEJ;;CAGJ,uBAAuB;AACrB,OAAK,cAAc,qBACjB,KAAK,oBAAoB,KAAK,KAAK,CACpC;;CAGH,oBAAoB,KAAsB;EACxC,MAAM,QAAQ,IAAI,QAAQ;EAC1B,MAAM,eAAe,IAAI,QAAQ;EAEjC,IAAI;AAEJ,MAAI,cAAc;GAChB,MAAM,QAAQ,aAAa,MAAM,wBAAwB;AACzD,OAAI,MACF,YAAW,MAAM;;AAIrB,MAAI,CAAC,SACH,YAAW,0BAA0B,MAAM;AAG7C,SAAO,WAAW,KAAK,QAAQ,IAAI,SAAS,IAAI,OAAO;;CAGzD,UAAU;AACR,OAAK,MAAM,GAAG,WAAW,KAAK,SAAS;AACrC,QAAK,MAAM,CAAC,GAAG,YAAY,OAAO,gBAAgB;AAChD,iBAAa,QAAQ,QAAQ;AAC7B,YAAQ,uBAAO,IAAI,MAAM,uBAAuB,CAAC;;AAEnD,UAAO,eAAe,OAAO;AAC7B,UAAO,GAAG,OAAO;;AAEnB,OAAK,QAAQ,OAAO;AAEpB,MAAI,KAAK,IACP,MAAK,IAAI,OAAO;AAElB,MAAI,KAAK,OACP,MAAK,OAAO,OAAO"}

package/dist/plugins/server/remote-tunnel/wait.html

@@ -0,0 +1,158 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <title>Waiting for Approval</title>
+    <meta http-equiv="refresh" content="2">
+  </head>
+  <body>
+    <div id="root">
+      <style>
+        body {
+          background: #1b1b1d;
+          height: 100vh;
+          margin: 0;
+          display: flex;
+          align-items: center;
+          justify-content: center;
+          font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", "Roboto",
+            "Helvetica", "Arial", sans-serif;
+        }
+        .loader-container {
+          display: flex;
+          flex-direction: column;
+          align-items: center;
+          padding: 50px 70px;
+        }
+        .logo {
+          width: 64px;
+          height: 64px;
+          margin-bottom: 32px;
+          position: relative;
+        }
+        .logo svg {
+          width: 100%;
+          height: 100%;
+        }
+        .spinner {
+          width: 32px;
+          height: 32px;
+          border: 3px solid rgba(255, 255, 255, 0.1);
+          border-top: 3px solid #ff3621;
+          border-radius: 50%;
+          animation: spin 0.8s linear infinite;
+          margin-bottom: 32px;
+        }
+        @keyframes spin {
+          0% {
+            transform: rotate(0deg);
+          }
+          100% {
+            transform: rotate(360deg);
+          }
+        }
+        .loading-text {
+          font-size: 1.125rem;
+          color: #ffffff;
+          letter-spacing: 0.02em;
+          font-weight: 400;
+          text-align: center;
+          margin-top: 0;
+          opacity: 0.9;
+        }
+        .sub-text {
+          font-size: 0.875rem;
+          color: rgba(255, 255, 255, 0.6);
+          margin-top: 12px;
+          text-align: center;
+        }
+        .tunnel-id {
+          font-size: 0.75rem;
+          color: rgba(255, 255, 255, 0.4);
+          margin-top: 8px;
+          letter-spacing: 0.05em;
+          font-family: monospace;
+        }
+        .databricks-brand {
+          font-size: 0.875rem;
+          color: rgba(255, 255, 255, 0.5);
+          margin-top: 24px;
+          letter-spacing: 0.05em;
+          text-transform: uppercase;
+          font-weight: 500;
+        }
+        .dots {
+          display: inline-block;
+          animation: dots 1.5s steps(4, end) infinite;
+        }
+        @keyframes dots {
+          0%,
+          20% {
+            content: ".";
+          }
+          40% {
+            content: "..";
+          }
+          60%,
+          100% {
+            content: "...";
+          }
+        }
+      </style>
+      <div class="loader-container">
+        <div class="logo">
+          <svg
+            version="1.1"
+            id="Layer_1"
+            xmlns:x="ns_extend;"
+            xmlns:i="ns_ai;"
+            xmlns:graph="ns_graphs;"
+            xmlns="http://www.w3.org/2000/svg"
+            xmlns:xlink="http://www.w3.org/1999/xlink"
+            x="0px"
+            y="0px"
+            viewBox="0 0 40.1 42"
+            style="enable-background: new 0 0 40.1 42"
+            xml:space="preserve"
+          >
+            <style type="text/css">
+              .st0 {
+                fill: #ff3621;
+              }
+            </style>
+            <metadata>
+              <sfw xmlns="ns_sfw;">
+                <slices></slices>
+                <sliceSourceBounds
+                  bottomLeftOrigin="true"
+                  height="42"
+                  width="40.1"
+                  x="-69.1"
+                  y="-10.5"
+                ></sliceSourceBounds>
+              </sfw>
+            </metadata>
+            <g>
+              <path
+                class="st0"
+                d="M40.1,31.1v-7.4l-0.8-0.5L20.1,33.7l-18.2-10l0-4.3l18.2,9.9l20.1-10.9v-7.3l-0.8-0.5L20.1,21.2L2.6,11.6
+           L20.1,2l14.1,7.7l1.1-0.6V8.3L20.1,0L0,10.9V12L20.1,23l18.2-10v4.4l-18.2,10L0.8,16.8L0,17.3v7.4l20.1,10.9l18.2-9.9v4.3l-18.2,10
+           L0.8,29.5L0,30v1.1L20.1,42L40.1,31.1z"
+              ></path>
+            </g>
+          </svg>
+        </div>
+
+        <div class="spinner"></div>
+        <div class="loading-text">
+          Waiting for approval<span class="dots">...</span>
+        </div>
+        <div class="sub-text">
+          Requesting access to tunnel from owner
+        </div>
+        <div class="tunnel-id">Tunnel ID: {{tunnelId}}</div>
+        <div class="databricks-brand">Databricks</div>
+      </div>
+    </div>
+  </body>
+</html>

package/dist/plugins/server/static-server.js

@@ -18,8 +18,8 @@ import express from "express";
 */
 var StaticServer = class extends BaseServer {
 	staticPath;
-	constructor(app, staticPath, endpoints = {}) {
-		super(app, endpoints);
+	constructor(app, staticPath, endpoints = {}, pluginConfigs = {}) {
+		super(app, endpoints, pluginConfigs);
 		this.staticPath = staticPath;
 	}
 	/** Setup the static server. */

package/dist/plugins/server/static-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"static-server.js","names":["expressStatic"],"sources":["../../../src/plugins/server/static-server.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport type express from \"express\";\nimport expressStatic from \"express\";\nimport { BaseServer } from \"./base-server\";\nimport type { PluginEndpoints } from \"./utils\";\n\n/**\n * Static server for the AppKit.\n *\n * Serves pre-built static files in production mode. Handles SPA routing\n * by serving index.html for non-API routes and injects runtime configuration.\n *\n * @example\n * ```ts\n * const staticServer = new StaticServer(app, staticPath, endpoints);\n * staticServer.setup();\n * ```\n */\nexport class StaticServer extends BaseServer {\n  private staticPath: string;\n\n  constructor(\n    app: express.Application,\n    staticPath: string,\n    endpoints: PluginEndpoints = {},\n  ) {\n    super(app, endpoints);\n    this.staticPath = staticPath;\n  }\n\n  /** Setup the static server. */\n  setup() {\n    this.app.use(\n      expressStatic.static(this.staticPath, {\n        index: false,\n      }),\n    );\n\n    this.app.get(\"*\", (req, res, next) => {\n      if (req.path.startsWith(\"/api\") || req.path.startsWith(\"/query\")) {\n        return next();\n      }\n      this.serveIndex(res);\n    });\n  }\n\n  /** Serve the index.html file. */\n  private serveIndex(res: express.Response) {\n    const indexPath = path.join(this.staticPath, \"index.html\");\n\n    if (!fs.existsSync(indexPath)) {\n      res.status(404).send(\"index.html not found\");\n      return;\n    }\n\n    let html = fs.readFileSync(indexPath, \"utf-8\");\n    html = html.replace(\"<body>\", `<body>${this.getConfigScript()}`);\n    res.send(html);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAmBA,IAAa,eAAb,cAAkC,WAAW;CAC3C,AAAQ;CAER,YACE,KACA,YACA,YAA6B,EAAE,EAC/B;AACA,QAAM,KAAK,UAAU;AACrB,OAAK,aAAa;;;CAIpB,QAAQ;AACN,OAAK,IAAI,IACPA,QAAc,OAAO,KAAK,YAAY,EACpC,OAAO,OACR,CAAC,CACH;AAED,OAAK,IAAI,IAAI,MAAM,KAAK,KAAK,SAAS;AACpC,OAAI,IAAI,KAAK,WAAW,OAAO,IAAI,IAAI,KAAK,WAAW,SAAS,CAC9D,QAAO,MAAM;AAEf,QAAK,WAAW,IAAI;IACpB;;;CAIJ,AAAQ,WAAW,KAAuB;EACxC,MAAM,YAAY,KAAK,KAAK,KAAK,YAAY,aAAa;AAE1D,MAAI,CAAC,GAAG,WAAW,UAAU,EAAE;AAC7B,OAAI,OAAO,IAAI,CAAC,KAAK,uBAAuB;AAC5C;;EAGF,IAAI,OAAO,GAAG,aAAa,WAAW,QAAQ;AAC9C,SAAO,KAAK,QAAQ,UAAU,SAAS,KAAK,iBAAiB,GAAG;AAChE,MAAI,KAAK,KAAK"}
+{"version":3,"file":"static-server.js","names":["expressStatic"],"sources":["../../../src/plugins/server/static-server.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport type express from \"express\";\nimport expressStatic from \"express\";\nimport { BaseServer } from \"./base-server\";\nimport type { PluginClientConfigs, PluginEndpoints } from \"./utils\";\n\n/**\n * Static server for the AppKit.\n *\n * Serves pre-built static files in production mode. Handles SPA routing\n * by serving index.html for non-API routes and injects runtime configuration.\n *\n * @example\n * ```ts\n * const staticServer = new StaticServer(app, staticPath, endpoints);\n * staticServer.setup();\n * ```\n */\nexport class StaticServer extends BaseServer {\n  private staticPath: string;\n\n  constructor(\n    app: express.Application,\n    staticPath: string,\n    endpoints: PluginEndpoints = {},\n    pluginConfigs: PluginClientConfigs = {},\n  ) {\n    super(app, endpoints, pluginConfigs);\n    this.staticPath = staticPath;\n  }\n\n  /** Setup the static server. */\n  setup() {\n    this.app.use(\n      expressStatic.static(this.staticPath, {\n        index: false,\n      }),\n    );\n\n    this.app.get(\"*\", (req, res, next) => {\n      if (req.path.startsWith(\"/api\") || req.path.startsWith(\"/query\")) {\n        return next();\n      }\n      this.serveIndex(res);\n    });\n  }\n\n  /** Serve the index.html file. */\n  private serveIndex(res: express.Response) {\n    const indexPath = path.join(this.staticPath, \"index.html\");\n\n    if (!fs.existsSync(indexPath)) {\n      res.status(404).send(\"index.html not found\");\n      return;\n    }\n\n    let html = fs.readFileSync(indexPath, \"utf-8\");\n    html = html.replace(\"<body>\", `<body>${this.getConfigScript()}`);\n    res.send(html);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAmBA,IAAa,eAAb,cAAkC,WAAW;CAC3C,AAAQ;CAER,YACE,KACA,YACA,YAA6B,EAAE,EAC/B,gBAAqC,EAAE,EACvC;AACA,QAAM,KAAK,WAAW,cAAc;AACpC,OAAK,aAAa;;;CAIpB,QAAQ;AACN,OAAK,IAAI,IACPA,QAAc,OAAO,KAAK,YAAY,EACpC,OAAO,OACR,CAAC,CACH;AAED,OAAK,IAAI,IAAI,MAAM,KAAK,KAAK,SAAS;AACpC,OAAI,IAAI,KAAK,WAAW,OAAO,IAAI,IAAI,KAAK,WAAW,SAAS,CAC9D,QAAO,MAAM;AAEf,QAAK,WAAW,IAAI;IACpB;;;CAIJ,AAAQ,WAAW,KAAuB;EACxC,MAAM,YAAY,KAAK,KAAK,KAAK,YAAY,aAAa;AAE1D,MAAI,CAAC,GAAG,WAAW,UAAU,EAAE;AAC7B,OAAI,OAAO,IAAI,CAAC,KAAK,uBAAuB;AAC5C;;EAGF,IAAI,OAAO,GAAG,aAAa,WAAW,QAAQ;AAC9C,SAAO,KAAK,QAAQ,UAAU,SAAS,KAAK,iBAAiB,GAAG;AAChE,MAAI,KAAK,KAAK"}

package/dist/plugins/server/utils.js

@@ -77,22 +77,45 @@ function getQueries(configFolder) {
 	if (!fs.existsSync(queriesFolder)) return {};
 	return Object.fromEntries(fs.readdirSync(queriesFolder).filter((f) => path.extname(f) === ".sql").map((f) => [path.basename(f, ".sql"), path.basename(f, ".sql")]));
 }
-function getRuntimeConfig(endpoints = {}) {
+const APPKIT_CONFIG_SCRIPT_ID = "__appkit__";
+const EMPTY_RUNTIME_CONFIG_JSON = JSON.stringify({
+	appName: "",
+	queries: {},
+	endpoints: {},
+	plugins: {}
+});
+const JSON_SCRIPT_ESCAPE_MAP = {
+	"<": "\\u003c",
+	">": "\\u003e",
+	"&": "\\u0026",
+	"\u2028": "\\u2028",
+	"\u2029": "\\u2029"
+};
+function getRuntimeConfig(endpoints = {}, pluginConfigs = {}) {
 	const configFolder = path.join(process.cwd(), "config");
 	return {
 		appName: process.env.DATABRICKS_APP_NAME || "",
 		queries: getQueries(configFolder),
-		endpoints
+		endpoints,
+		plugins: pluginConfigs
 	};
 }
-function getConfigScript(endpoints = {}) {
-	const config = getRuntimeConfig(endpoints);
+function getConfigScript(endpoints = {}, pluginConfigs = {}) {
 	return `
+    <script id="${APPKIT_CONFIG_SCRIPT_ID}" type="application/json">
+      ${serializeRuntimeConfig(getRuntimeConfig(endpoints, pluginConfigs))}
+    <\/script>
     <script>
-      window.__CONFIG__ = ${JSON.stringify(config)};
+      window.__appkit__ = JSON.parse(
+        document.getElementById("${APPKIT_CONFIG_SCRIPT_ID}")?.textContent ||
+          '${EMPTY_RUNTIME_CONFIG_JSON}',
+      );
     <\/script>
   `;
 }
+function serializeRuntimeConfig(config) {
+	return JSON.stringify(config).replace(/[<>&\u2028\u2029]/g, (char) => JSON_SCRIPT_ESCAPE_MAP[char] ?? char);
+}
 
 //#endregion
 export { generateTunnelIdFromEmail, getConfigScript, getRoutes, parseCookies, printRoutes };

package/dist/plugins/server/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","names":[],"sources":["../../../src/plugins/server/utils.ts"],"sourcesContent":["import crypto from \"node:crypto\";\nimport fs from \"node:fs\";\nimport type http from \"node:http\";\nimport path from \"node:path\";\nimport pc from \"picocolors\";\n\nexport function parseCookies(\n  req: http.IncomingMessage,\n): Record<string, string> {\n  const cookieHeader = req.headers.cookie;\n  if (!cookieHeader) return {};\n\n  // Fast path: if there's no semicolon, there's only one cookie\n  const semicolonIndex = cookieHeader.indexOf(\";\");\n  if (semicolonIndex === -1) {\n    const eqIndex = cookieHeader.indexOf(\"=\");\n    if (eqIndex === -1) return {};\n    return {\n      [cookieHeader.slice(0, eqIndex).trim()]: cookieHeader.slice(eqIndex + 1),\n    };\n  }\n\n  // Multiple cookies: parse them all\n  const cookies: Record<string, string> = {};\n  const parts = cookieHeader.split(\";\");\n  for (let i = 0; i < parts.length; i++) {\n    const eqIndex = parts[i].indexOf(\"=\");\n    if (eqIndex !== -1) {\n      const key = parts[i].slice(0, eqIndex).trim();\n      const value = parts[i].slice(eqIndex + 1);\n      cookies[key] = value;\n    }\n  }\n  return cookies;\n}\n\nexport function generateTunnelIdFromEmail(email?: string): string | undefined {\n  if (!email) return undefined;\n\n  const tunnelId = crypto\n    .createHash(\"sha256\")\n    .update(email)\n    .digest(\"base64url\")\n    .slice(0, 8);\n\n  return tunnelId;\n}\n\nexport function getRoutes(stack: unknown[], basePath = \"\") {\n  const routes: Array<{ path: string; methods: string[] }> = [];\n\n  stack.forEach((layer: any) => {\n    if (layer.route) {\n      // normal route\n      const path = basePath + layer.route.path;\n      const methods = Object.keys(layer.route.methods).map((m) =>\n        m.toUpperCase(),\n      );\n      routes.push({ path, methods });\n    } else if (layer.name === \"router\" && layer.handle.stack) {\n      // nested router\n      const nestedBase =\n        basePath +\n          layer.regexp.source\n            .replace(\"^\\\\\", \"\")\n            .replace(\"\\\\/?(?=\\\\/|$)\", \"\")\n            .replace(/\\\\\\//g, \"/\") // convert escaped slashes\n            .replace(/\\$$/, \"\") || \"\";\n      routes.push(...getRoutes(layer.handle.stack, nestedBase));\n    }\n  });\n\n  return routes;\n}\n\nconst METHOD_COLORS: Record<string, (s: string) => string> = {\n  GET: pc.green,\n  POST: pc.blue,\n  PUT: pc.yellow,\n  PATCH: pc.yellow,\n  DELETE: pc.red,\n  HEAD: pc.magenta,\n  OPTIONS: pc.magenta,\n};\n\nexport function printRoutes(\n  routes: Array<{ path: string; methods: string[] }>,\n) {\n  if (routes.length === 0) return;\n\n  const rows = routes\n    .flatMap((r) => r.methods.map((m) => ({ method: m, path: r.path })))\n    .sort(\n      (a, b) =>\n        a.method.localeCompare(b.method) || a.path.localeCompare(b.path),\n    );\n\n  const maxMethodLen = Math.max(...rows.map((r) => r.method.length));\n  const separator = pc.dim(\"─\".repeat(50));\n\n  const colorizeParams = (p: string) =>\n    p.replace(/(:[a-zA-Z_]\\w*)/g, (match) => pc.cyan(match));\n\n  console.log(\"\");\n  console.log(\n    `  ${pc.bold(\"Registered Routes\")} ${pc.dim(`(${rows.length})`)}`,\n  );\n  console.log(`  ${separator}`);\n\n  for (const { method, path } of rows) {\n    const colorize = METHOD_COLORS[method] || pc.white;\n    const methodStr = colorize(pc.bold(method.padEnd(maxMethodLen)));\n    console.log(`  ${methodStr}  ${colorizeParams(path)}`);\n  }\n\n  console.log(`  ${separator}`);\n  console.log(\"\");\n}\n\nexport function getQueries(configFolder: string) {\n  const queriesFolder = path.join(configFolder, \"queries\");\n\n  if (!fs.existsSync(queriesFolder)) {\n    return {};\n  }\n\n  return Object.fromEntries(\n    fs\n      .readdirSync(queriesFolder)\n      .filter((f) => path.extname(f) === \".sql\")\n      .map((f) => [path.basename(f, \".sql\"), path.basename(f, \".sql\")]),\n  );\n}\n\nimport type { PluginEndpoints } from \"shared\";\n\nexport type { PluginEndpoints };\n\ninterface RuntimeConfig {\n  appName: string;\n  queries: Record<string, string>;\n  endpoints: PluginEndpoints;\n}\n\nfunction getRuntimeConfig(endpoints: PluginEndpoints = {}): RuntimeConfig {\n  const configFolder = path.join(process.cwd(), \"config\");\n\n  return {\n    appName: process.env.DATABRICKS_APP_NAME || \"\",\n    queries: getQueries(configFolder),\n    endpoints,\n  };\n}\n\nexport function getConfigScript(endpoints: PluginEndpoints = {}): string {\n  const config = getRuntimeConfig(endpoints);\n\n  return `\n    <script>\n      window.__CONFIG__ = ${JSON.stringify(config)};\n    </script>\n  `;\n}\n"],"mappings":";;;;;;AAMA,SAAgB,aACd,KACwB;CACxB,MAAM,eAAe,IAAI,QAAQ;AACjC,KAAI,CAAC,aAAc,QAAO,EAAE;AAI5B,KADuB,aAAa,QAAQ,IAAI,KACzB,IAAI;EACzB,MAAM,UAAU,aAAa,QAAQ,IAAI;AACzC,MAAI,YAAY,GAAI,QAAO,EAAE;AAC7B,SAAO,GACJ,aAAa,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,aAAa,MAAM,UAAU,EAAE,EACzE;;CAIH,MAAM,UAAkC,EAAE;CAC1C,MAAM,QAAQ,aAAa,MAAM,IAAI;AACrC,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,UAAU,MAAM,GAAG,QAAQ,IAAI;AACrC,MAAI,YAAY,IAAI;GAClB,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM;AAE7C,WAAQ,OADM,MAAM,GAAG,MAAM,UAAU,EAAE;;;AAI7C,QAAO;;AAGT,SAAgB,0BAA0B,OAAoC;AAC5E,KAAI,CAAC,MAAO,QAAO;AAQnB,QANiB,OACd,WAAW,SAAS,CACpB,OAAO,MAAM,CACb,OAAO,YAAY,CACnB,MAAM,GAAG,EAAE;;AAKhB,SAAgB,UAAU,OAAkB,WAAW,IAAI;CACzD,MAAM,SAAqD,EAAE;AAE7D,OAAM,SAAS,UAAe;AAC5B,MAAI,MAAM,OAAO;GAEf,MAAM,OAAO,WAAW,MAAM,MAAM;GACpC,MAAM,UAAU,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC,KAAK,MACpD,EAAE,aAAa,CAChB;AACD,UAAO,KAAK;IAAE;IAAM;IAAS,CAAC;aACrB,MAAM,SAAS,YAAY,MAAM,OAAO,OAAO;GAExD,MAAM,aACJ,WACE,MAAM,OAAO,OACV,QAAQ,OAAO,GAAG,CAClB,QAAQ,iBAAiB,GAAG,CAC5B,QAAQ,SAAS,IAAI,CACrB,QAAQ,OAAO,GAAG,IAAI;AAC7B,UAAO,KAAK,GAAG,UAAU,MAAM,OAAO,OAAO,WAAW,CAAC;;GAE3D;AAEF,QAAO;;AAGT,MAAM,gBAAuD;CAC3D,KAAK,GAAG;CACR,MAAM,GAAG;CACT,KAAK,GAAG;CACR,OAAO,GAAG;CACV,QAAQ,GAAG;CACX,MAAM,GAAG;CACT,SAAS,GAAG;CACb;AAED,SAAgB,YACd,QACA;AACA,KAAI,OAAO,WAAW,EAAG;CAEzB,MAAM,OAAO,OACV,SAAS,MAAM,EAAE,QAAQ,KAAK,OAAO;EAAE,QAAQ;EAAG,MAAM,EAAE;EAAM,EAAE,CAAC,CACnE,MACE,GAAG,MACF,EAAE,OAAO,cAAc,EAAE,OAAO,IAAI,EAAE,KAAK,cAAc,EAAE,KAAK,CACnE;CAEH,MAAM,eAAe,KAAK,IAAI,GAAG,KAAK,KAAK,MAAM,EAAE,OAAO,OAAO,CAAC;CAClE,MAAM,YAAY,GAAG,IAAI,IAAI,OAAO,GAAG,CAAC;CAExC,MAAM,kBAAkB,MACtB,EAAE,QAAQ,qBAAqB,UAAU,GAAG,KAAK,MAAM,CAAC;AAE1D,SAAQ,IAAI,GAAG;AACf,SAAQ,IACN,KAAK,GAAG,KAAK,oBAAoB,CAAC,GAAG,GAAG,IAAI,IAAI,KAAK,OAAO,GAAG,GAChE;AACD,SAAQ,IAAI,KAAK,YAAY;AAE7B,MAAK,MAAM,EAAE,QAAQ,UAAU,MAAM;EAEnC,MAAM,aADW,cAAc,WAAW,GAAG,OAClB,GAAG,KAAK,OAAO,OAAO,aAAa,CAAC,CAAC;AAChE,UAAQ,IAAI,KAAK,UAAU,IAAI,eAAe,KAAK,GAAG;;AAGxD,SAAQ,IAAI,KAAK,YAAY;AAC7B,SAAQ,IAAI,GAAG;;AAGjB,SAAgB,WAAW,cAAsB;CAC/C,MAAM,gBAAgB,KAAK,KAAK,cAAc,UAAU;AAExD,KAAI,CAAC,GAAG,WAAW,cAAc,CAC/B,QAAO,EAAE;AAGX,QAAO,OAAO,YACZ,GACG,YAAY,cAAc,CAC1B,QAAQ,MAAM,KAAK,QAAQ,EAAE,KAAK,OAAO,CACzC,KAAK,MAAM,CAAC,KAAK,SAAS,GAAG,OAAO,EAAE,KAAK,SAAS,GAAG,OAAO,CAAC,CAAC,CACpE;;AAaH,SAAS,iBAAiB,YAA6B,EAAE,EAAiB;CACxE,MAAM,eAAe,KAAK,KAAK,QAAQ,KAAK,EAAE,SAAS;AAEvD,QAAO;EACL,SAAS,QAAQ,IAAI,uBAAuB;EAC5C,SAAS,WAAW,aAAa;EACjC;EACD;;AAGH,SAAgB,gBAAgB,YAA6B,EAAE,EAAU;CACvE,MAAM,SAAS,iBAAiB,UAAU;AAE1C,QAAO;;4BAEmB,KAAK,UAAU,OAAO,CAAC"}
+{"version":3,"file":"utils.js","names":[],"sources":["../../../src/plugins/server/utils.ts"],"sourcesContent":["import crypto from \"node:crypto\";\nimport fs from \"node:fs\";\nimport type http from \"node:http\";\nimport path from \"node:path\";\nimport pc from \"picocolors\";\nimport type { PluginClientConfigs, PluginEndpoints } from \"shared\";\n\nexport function parseCookies(\n  req: http.IncomingMessage,\n): Record<string, string> {\n  const cookieHeader = req.headers.cookie;\n  if (!cookieHeader) return {};\n\n  // Fast path: if there's no semicolon, there's only one cookie\n  const semicolonIndex = cookieHeader.indexOf(\";\");\n  if (semicolonIndex === -1) {\n    const eqIndex = cookieHeader.indexOf(\"=\");\n    if (eqIndex === -1) return {};\n    return {\n      [cookieHeader.slice(0, eqIndex).trim()]: cookieHeader.slice(eqIndex + 1),\n    };\n  }\n\n  // Multiple cookies: parse them all\n  const cookies: Record<string, string> = {};\n  const parts = cookieHeader.split(\";\");\n  for (let i = 0; i < parts.length; i++) {\n    const eqIndex = parts[i].indexOf(\"=\");\n    if (eqIndex !== -1) {\n      const key = parts[i].slice(0, eqIndex).trim();\n      const value = parts[i].slice(eqIndex + 1);\n      cookies[key] = value;\n    }\n  }\n  return cookies;\n}\n\nexport function generateTunnelIdFromEmail(email?: string): string | undefined {\n  if (!email) return undefined;\n\n  const tunnelId = crypto\n    .createHash(\"sha256\")\n    .update(email)\n    .digest(\"base64url\")\n    .slice(0, 8);\n\n  return tunnelId;\n}\n\nexport function getRoutes(stack: unknown[], basePath = \"\") {\n  const routes: Array<{ path: string; methods: string[] }> = [];\n\n  stack.forEach((layer: any) => {\n    if (layer.route) {\n      // normal route\n      const path = basePath + layer.route.path;\n      const methods = Object.keys(layer.route.methods).map((m) =>\n        m.toUpperCase(),\n      );\n      routes.push({ path, methods });\n    } else if (layer.name === \"router\" && layer.handle.stack) {\n      // nested router\n      const nestedBase =\n        basePath +\n          layer.regexp.source\n            .replace(\"^\\\\\", \"\")\n            .replace(\"\\\\/?(?=\\\\/|$)\", \"\")\n            .replace(/\\\\\\//g, \"/\") // convert escaped slashes\n            .replace(/\\$$/, \"\") || \"\";\n      routes.push(...getRoutes(layer.handle.stack, nestedBase));\n    }\n  });\n\n  return routes;\n}\n\nconst METHOD_COLORS: Record<string, (s: string) => string> = {\n  GET: pc.green,\n  POST: pc.blue,\n  PUT: pc.yellow,\n  PATCH: pc.yellow,\n  DELETE: pc.red,\n  HEAD: pc.magenta,\n  OPTIONS: pc.magenta,\n};\n\nexport function printRoutes(\n  routes: Array<{ path: string; methods: string[] }>,\n) {\n  if (routes.length === 0) return;\n\n  const rows = routes\n    .flatMap((r) => r.methods.map((m) => ({ method: m, path: r.path })))\n    .sort(\n      (a, b) =>\n        a.method.localeCompare(b.method) || a.path.localeCompare(b.path),\n    );\n\n  const maxMethodLen = Math.max(...rows.map((r) => r.method.length));\n  const separator = pc.dim(\"─\".repeat(50));\n\n  const colorizeParams = (p: string) =>\n    p.replace(/(:[a-zA-Z_]\\w*)/g, (match) => pc.cyan(match));\n\n  console.log(\"\");\n  console.log(\n    `  ${pc.bold(\"Registered Routes\")} ${pc.dim(`(${rows.length})`)}`,\n  );\n  console.log(`  ${separator}`);\n\n  for (const { method, path } of rows) {\n    const colorize = METHOD_COLORS[method] || pc.white;\n    const methodStr = colorize(pc.bold(method.padEnd(maxMethodLen)));\n    console.log(`  ${methodStr}  ${colorizeParams(path)}`);\n  }\n\n  console.log(`  ${separator}`);\n  console.log(\"\");\n}\n\nexport function getQueries(configFolder: string) {\n  const queriesFolder = path.join(configFolder, \"queries\");\n\n  if (!fs.existsSync(queriesFolder)) {\n    return {};\n  }\n\n  return Object.fromEntries(\n    fs\n      .readdirSync(queriesFolder)\n      .filter((f) => path.extname(f) === \".sql\")\n      .map((f) => [path.basename(f, \".sql\"), path.basename(f, \".sql\")]),\n  );\n}\n\nexport type { PluginClientConfigs, PluginEndpoints };\n\ninterface RuntimeConfig {\n  appName: string;\n  queries: Record<string, string>;\n  endpoints: PluginEndpoints;\n  plugins: PluginClientConfigs;\n}\n\nconst APPKIT_CONFIG_SCRIPT_ID = \"__appkit__\";\nconst EMPTY_RUNTIME_CONFIG: RuntimeConfig = {\n  appName: \"\",\n  queries: {},\n  endpoints: {},\n  plugins: {},\n};\nconst EMPTY_RUNTIME_CONFIG_JSON = JSON.stringify(EMPTY_RUNTIME_CONFIG);\nconst JSON_SCRIPT_ESCAPE_MAP: Record<string, string> = {\n  \"<\": \"\\\\u003c\",\n  \">\": \"\\\\u003e\",\n  \"&\": \"\\\\u0026\",\n  \"\\u2028\": \"\\\\u2028\",\n  \"\\u2029\": \"\\\\u2029\",\n};\n\nexport function getRuntimeConfig(\n  endpoints: PluginEndpoints = {},\n  pluginConfigs: PluginClientConfigs = {},\n): RuntimeConfig {\n  const configFolder = path.join(process.cwd(), \"config\");\n\n  return {\n    appName: process.env.DATABRICKS_APP_NAME || \"\",\n    queries: getQueries(configFolder),\n    endpoints,\n    plugins: pluginConfigs,\n  };\n}\n\nexport function getConfigScript(\n  endpoints: PluginEndpoints = {},\n  pluginConfigs: PluginClientConfigs = {},\n): string {\n  const config = getRuntimeConfig(endpoints, pluginConfigs);\n\n  return `\n    <script id=\"${APPKIT_CONFIG_SCRIPT_ID}\" type=\"application/json\">\n      ${serializeRuntimeConfig(config)}\n    </script>\n    <script>\n      window.__appkit__ = JSON.parse(\n        document.getElementById(\"${APPKIT_CONFIG_SCRIPT_ID}\")?.textContent ||\n          '${EMPTY_RUNTIME_CONFIG_JSON}',\n      );\n    </script>\n  `;\n}\n\nfunction serializeRuntimeConfig(config: RuntimeConfig): string {\n  return JSON.stringify(config).replace(\n    /[<>&\\u2028\\u2029]/g,\n    (char) => JSON_SCRIPT_ESCAPE_MAP[char] ?? char,\n  );\n}\n"],"mappings":";;;;;;AAOA,SAAgB,aACd,KACwB;CACxB,MAAM,eAAe,IAAI,QAAQ;AACjC,KAAI,CAAC,aAAc,QAAO,EAAE;AAI5B,KADuB,aAAa,QAAQ,IAAI,KACzB,IAAI;EACzB,MAAM,UAAU,aAAa,QAAQ,IAAI;AACzC,MAAI,YAAY,GAAI,QAAO,EAAE;AAC7B,SAAO,GACJ,aAAa,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,aAAa,MAAM,UAAU,EAAE,EACzE;;CAIH,MAAM,UAAkC,EAAE;CAC1C,MAAM,QAAQ,aAAa,MAAM,IAAI;AACrC,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,UAAU,MAAM,GAAG,QAAQ,IAAI;AACrC,MAAI,YAAY,IAAI;GAClB,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM;AAE7C,WAAQ,OADM,MAAM,GAAG,MAAM,UAAU,EAAE;;;AAI7C,QAAO;;AAGT,SAAgB,0BAA0B,OAAoC;AAC5E,KAAI,CAAC,MAAO,QAAO;AAQnB,QANiB,OACd,WAAW,SAAS,CACpB,OAAO,MAAM,CACb,OAAO,YAAY,CACnB,MAAM,GAAG,EAAE;;AAKhB,SAAgB,UAAU,OAAkB,WAAW,IAAI;CACzD,MAAM,SAAqD,EAAE;AAE7D,OAAM,SAAS,UAAe;AAC5B,MAAI,MAAM,OAAO;GAEf,MAAM,OAAO,WAAW,MAAM,MAAM;GACpC,MAAM,UAAU,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC,KAAK,MACpD,EAAE,aAAa,CAChB;AACD,UAAO,KAAK;IAAE;IAAM;IAAS,CAAC;aACrB,MAAM,SAAS,YAAY,MAAM,OAAO,OAAO;GAExD,MAAM,aACJ,WACE,MAAM,OAAO,OACV,QAAQ,OAAO,GAAG,CAClB,QAAQ,iBAAiB,GAAG,CAC5B,QAAQ,SAAS,IAAI,CACrB,QAAQ,OAAO,GAAG,IAAI;AAC7B,UAAO,KAAK,GAAG,UAAU,MAAM,OAAO,OAAO,WAAW,CAAC;;GAE3D;AAEF,QAAO;;AAGT,MAAM,gBAAuD;CAC3D,KAAK,GAAG;CACR,MAAM,GAAG;CACT,KAAK,GAAG;CACR,OAAO,GAAG;CACV,QAAQ,GAAG;CACX,MAAM,GAAG;CACT,SAAS,GAAG;CACb;AAED,SAAgB,YACd,QACA;AACA,KAAI,OAAO,WAAW,EAAG;CAEzB,MAAM,OAAO,OACV,SAAS,MAAM,EAAE,QAAQ,KAAK,OAAO;EAAE,QAAQ;EAAG,MAAM,EAAE;EAAM,EAAE,CAAC,CACnE,MACE,GAAG,MACF,EAAE,OAAO,cAAc,EAAE,OAAO,IAAI,EAAE,KAAK,cAAc,EAAE,KAAK,CACnE;CAEH,MAAM,eAAe,KAAK,IAAI,GAAG,KAAK,KAAK,MAAM,EAAE,OAAO,OAAO,CAAC;CAClE,MAAM,YAAY,GAAG,IAAI,IAAI,OAAO,GAAG,CAAC;CAExC,MAAM,kBAAkB,MACtB,EAAE,QAAQ,qBAAqB,UAAU,GAAG,KAAK,MAAM,CAAC;AAE1D,SAAQ,IAAI,GAAG;AACf,SAAQ,IACN,KAAK,GAAG,KAAK,oBAAoB,CAAC,GAAG,GAAG,IAAI,IAAI,KAAK,OAAO,GAAG,GAChE;AACD,SAAQ,IAAI,KAAK,YAAY;AAE7B,MAAK,MAAM,EAAE,QAAQ,UAAU,MAAM;EAEnC,MAAM,aADW,cAAc,WAAW,GAAG,OAClB,GAAG,KAAK,OAAO,OAAO,aAAa,CAAC,CAAC;AAChE,UAAQ,IAAI,KAAK,UAAU,IAAI,eAAe,KAAK,GAAG;;AAGxD,SAAQ,IAAI,KAAK,YAAY;AAC7B,SAAQ,IAAI,GAAG;;AAGjB,SAAgB,WAAW,cAAsB;CAC/C,MAAM,gBAAgB,KAAK,KAAK,cAAc,UAAU;AAExD,KAAI,CAAC,GAAG,WAAW,cAAc,CAC/B,QAAO,EAAE;AAGX,QAAO,OAAO,YACZ,GACG,YAAY,cAAc,CAC1B,QAAQ,MAAM,KAAK,QAAQ,EAAE,KAAK,OAAO,CACzC,KAAK,MAAM,CAAC,KAAK,SAAS,GAAG,OAAO,EAAE,KAAK,SAAS,GAAG,OAAO,CAAC,CAAC,CACpE;;AAYH,MAAM,0BAA0B;AAOhC,MAAM,4BAA4B,KAAK,UANK;CAC1C,SAAS;CACT,SAAS,EAAE;CACX,WAAW,EAAE;CACb,SAAS,EAAE;CACZ,CACqE;AACtE,MAAM,yBAAiD;CACrD,KAAK;CACL,KAAK;CACL,KAAK;CACL,UAAU;CACV,UAAU;CACX;AAED,SAAgB,iBACd,YAA6B,EAAE,EAC/B,gBAAqC,EAAE,EACxB;CACf,MAAM,eAAe,KAAK,KAAK,QAAQ,KAAK,EAAE,SAAS;AAEvD,QAAO;EACL,SAAS,QAAQ,IAAI,uBAAuB;EAC5C,SAAS,WAAW,aAAa;EACjC;EACA,SAAS;EACV;;AAGH,SAAgB,gBACd,YAA6B,EAAE,EAC/B,gBAAqC,EAAE,EAC/B;AAGR,QAAO;kBACS,wBAAwB;QAClC,uBAJS,iBAAiB,WAAW,cAAc,CAIrB,CAAC;;;;mCAIJ,wBAAwB;aAC9C,0BAA0B;;;;;AAMvC,SAAS,uBAAuB,QAA+B;AAC7D,QAAO,KAAK,UAAU,OAAO,CAAC,QAC5B,uBACC,SAAS,uBAAuB,SAAS,KAC3C"}

package/dist/plugins/server/vite-dev-server.js

@@ -3,6 +3,7 @@ import { ServerError } from "../../errors/server.js";
 import { init_errors } from "../../errors/index.js";
 import { mergeConfigDedup } from "../../utils/vite-config-merge.js";
 import { BaseServer } from "./base-server.js";
+import { appKitServingTypesPlugin } from "../../type-generator/serving/vite-plugin.js";
 import { appKitTypesPlugin } from "../../type-generator/vite-plugin.js";
 import path from "node:path";
 import fs from "node:fs";
@@ -24,8 +25,8 @@ const logger = createLogger("server:vite");
 */
 var ViteDevServer = class extends BaseServer {
 	vite;
-	constructor(app, endpoints = {}) {
-		super(app, endpoints);
+	constructor(app, endpoints = {}, pluginConfigs = {}) {
+		super(app, endpoints, pluginConfigs);
 		this.vite = null;
 	}
 	/**
@@ -55,7 +56,11 @@ var ViteDevServer = class extends BaseServer {
 					ignored: ["**/node_modules/**", "!**/node_modules/@databricks/**"]
 				}
 			},
-			plugins: [react.default(), appKitTypesPlugin()],
+			plugins: [
+				react.default(),
+				appKitTypesPlugin(),
+				appKitServingTypesPlugin()
+			],
 			appType: "custom"
 		}, mergeConfig));
 		this.app.use(this.vite.middlewares);

package/dist/plugins/server/vite-dev-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"vite-dev-server.js","names":[],"sources":["../../../src/plugins/server/vite-dev-server.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport type express from \"express\";\nimport type { ViteDevServer as ViteDevServerType } from \"vite\";\nimport { mergeConfigDedup } from \"@/utils\";\nimport { ServerError } from \"../../errors\";\nimport { createLogger } from \"../../logging/logger\";\nimport { appKitTypesPlugin } from \"../../type-generator/vite-plugin\";\nimport { BaseServer } from \"./base-server\";\nimport type { PluginEndpoints } from \"./utils\";\n\nconst logger = createLogger(\"server:vite\");\n\n/**\n * Vite dev server for the AppKit.\n *\n * This class is responsible for serving the Vite dev server for the development server.\n * It also handles the index.html file for the development server.\n *\n * @example\n * ```ts\n * const viteDevServer = new ViteDevServer(app, endpoints);\n * await viteDevServer.setup();\n * ```\n */\nexport class ViteDevServer extends BaseServer {\n  private vite: ViteDevServerType | null;\n\n  constructor(app: express.Application, endpoints: PluginEndpoints = {}) {\n    super(app, endpoints);\n    this.vite = null;\n  }\n\n  /**\n   * Setup the Vite dev server.\n   *\n   * This method sets up the Vite dev server and the index.html file for the development server.\n   *\n   * @returns\n   */\n  async setup() {\n    const {\n      createServer: createViteServer,\n      loadConfigFromFile,\n      mergeConfig,\n    } = await import(\"vite\");\n    const react = await import(\"@vitejs/plugin-react\");\n\n    const clientRoot = this.findClientRoot();\n\n    const loadedConfig = await loadConfigFromFile(\n      {\n        mode: \"development\",\n        command: \"serve\",\n      },\n      undefined,\n      clientRoot,\n    );\n\n    const userConfig = loadedConfig?.config ?? {};\n    const viteClientPort = process.env.VITE_CLIENT_PORT;\n    const serverHmr = viteClientPort\n      ? { hmr: { clientPort: viteClientPort } }\n      : {};\n\n    const coreConfig = {\n      configFile: false,\n      root: clientRoot,\n      server: {\n        middlewareMode: true,\n        ...serverHmr,\n        watch: {\n          useFsEvents: true,\n          ignored: [\"**/node_modules/**\", \"!**/node_modules/@databricks/**\"],\n        },\n      },\n      plugins: [react.default(), appKitTypesPlugin()],\n      appType: \"custom\",\n    };\n\n    const mergedConfigs = mergeConfigDedup(userConfig, coreConfig, mergeConfig);\n    this.vite = await createViteServer(mergedConfigs);\n\n    this.app.use(this.vite.middlewares);\n\n    this.app.use(\"*\", async (req, res, next) => {\n      if (\n        req.originalUrl.startsWith(\"/api\") ||\n        req.originalUrl.startsWith(\"/query\")\n      ) {\n        return next();\n      }\n      const vite = this.vite;\n      this.validateVite(vite);\n\n      try {\n        const indexPath = path.resolve(clientRoot, \"index.html\");\n        let html = fs.readFileSync(indexPath, \"utf-8\");\n        html = html.replace(\"<body>\", `<body>${this.getConfigScript()}`);\n        html = await vite.transformIndexHtml(req.originalUrl, html);\n        res.status(200).set({ \"Content-Type\": \"text/html\" }).end(html);\n      } catch (e) {\n        vite.ssrFixStacktrace(e as Error);\n        next(e);\n      }\n    });\n  }\n\n  /** Close the Vite dev server. */\n  async close() {\n    await this.vite?.close();\n  }\n\n  /** Find the client root. */\n  private findClientRoot(): string {\n    const cwd = process.cwd();\n    const candidates = [\"client\", \"src\", \"app\", \"frontend\", \".\"];\n\n    for (const dir of candidates) {\n      const fullPath = path.resolve(cwd, dir);\n      const hasViteConfig =\n        fs.existsSync(path.join(fullPath, \"vite.config.ts\")) ||\n        fs.existsSync(path.join(fullPath, \"vite.config.js\"));\n      const hasIndexHtml = fs.existsSync(path.join(fullPath, \"index.html\"));\n\n      if (hasViteConfig && hasIndexHtml) {\n        logger.debug(\"Vite dev server: using client root %s\", fullPath);\n        return fullPath;\n      }\n    }\n\n    throw ServerError.clientDirectoryNotFound(candidates);\n  }\n\n  // type assertion to ensure vite is not null\n  private validateVite(\n    vite: ViteDevServerType | null,\n  ): asserts vite is ViteDevServerType {\n    if (!vite) {\n      throw ServerError.viteNotInitialized();\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;aAK2C;AAM3C,MAAM,SAAS,aAAa,cAAc;;;;;;;;;;;;;AAc1C,IAAa,gBAAb,cAAmC,WAAW;CAC5C,AAAQ;CAER,YAAY,KAA0B,YAA6B,EAAE,EAAE;AACrE,QAAM,KAAK,UAAU;AACrB,OAAK,OAAO;;;;;;;;;CAUd,MAAM,QAAQ;EACZ,MAAM,EACJ,cAAc,kBACd,oBACA,gBACE,MAAM,OAAO;EACjB,MAAM,QAAQ,MAAM,OAAO;EAE3B,MAAM,aAAa,KAAK,gBAAgB;EAWxC,MAAM,cATe,MAAM,mBACzB;GACE,MAAM;GACN,SAAS;GACV,EACD,QACA,WACD,GAEgC,UAAU,EAAE;EAC7C,MAAM,iBAAiB,QAAQ,IAAI;AAqBnC,OAAK,OAAO,MAAM,iBADI,iBAAiB,YAfpB;GACjB,YAAY;GACZ,MAAM;GACN,QAAQ;IACN,gBAAgB;IAChB,GATc,iBACd,EAAE,KAAK,EAAE,YAAY,gBAAgB,EAAE,GACvC,EAAE;IAQF,OAAO;KACL,aAAa;KACb,SAAS,CAAC,sBAAsB,kCAAkC;KACnE;IACF;GACD,SAAS,CAAC,MAAM,SAAS,EAAE,mBAAmB,CAAC;GAC/C,SAAS;GACV,EAE8D,YAAY,CAC1B;AAEjD,OAAK,IAAI,IAAI,KAAK,KAAK,YAAY;AAEnC,OAAK,IAAI,IAAI,KAAK,OAAO,KAAK,KAAK,SAAS;AAC1C,OACE,IAAI,YAAY,WAAW,OAAO,IAClC,IAAI,YAAY,WAAW,SAAS,CAEpC,QAAO,MAAM;GAEf,MAAM,OAAO,KAAK;AAClB,QAAK,aAAa,KAAK;AAEvB,OAAI;IACF,MAAM,YAAY,KAAK,QAAQ,YAAY,aAAa;IACxD,IAAI,OAAO,GAAG,aAAa,WAAW,QAAQ;AAC9C,WAAO,KAAK,QAAQ,UAAU,SAAS,KAAK,iBAAiB,GAAG;AAChE,WAAO,MAAM,KAAK,mBAAmB,IAAI,aAAa,KAAK;AAC3D,QAAI,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,aAAa,CAAC,CAAC,IAAI,KAAK;YACvD,GAAG;AACV,SAAK,iBAAiB,EAAW;AACjC,SAAK,EAAE;;IAET;;;CAIJ,MAAM,QAAQ;AACZ,QAAM,KAAK,MAAM,OAAO;;;CAI1B,AAAQ,iBAAyB;EAC/B,MAAM,MAAM,QAAQ,KAAK;EACzB,MAAM,aAAa;GAAC;GAAU;GAAO;GAAO;GAAY;GAAI;AAE5D,OAAK,MAAM,OAAO,YAAY;GAC5B,MAAM,WAAW,KAAK,QAAQ,KAAK,IAAI;GACvC,MAAM,gBACJ,GAAG,WAAW,KAAK,KAAK,UAAU,iBAAiB,CAAC,IACpD,GAAG,WAAW,KAAK,KAAK,UAAU,iBAAiB,CAAC;GACtD,MAAM,eAAe,GAAG,WAAW,KAAK,KAAK,UAAU,aAAa,CAAC;AAErE,OAAI,iBAAiB,cAAc;AACjC,WAAO,MAAM,yCAAyC,SAAS;AAC/D,WAAO;;;AAIX,QAAM,YAAY,wBAAwB,WAAW;;CAIvD,AAAQ,aACN,MACmC;AACnC,MAAI,CAAC,KACH,OAAM,YAAY,oBAAoB"}
+{"version":3,"file":"vite-dev-server.js","names":[],"sources":["../../../src/plugins/server/vite-dev-server.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport type express from \"express\";\nimport type { ViteDevServer as ViteDevServerType } from \"vite\";\nimport { mergeConfigDedup } from \"@/utils\";\nimport { ServerError } from \"../../errors\";\nimport { createLogger } from \"../../logging/logger\";\nimport { appKitServingTypesPlugin } from \"../../type-generator/serving/vite-plugin\";\nimport { appKitTypesPlugin } from \"../../type-generator/vite-plugin\";\nimport { BaseServer } from \"./base-server\";\nimport type { PluginClientConfigs, PluginEndpoints } from \"./utils\";\n\nconst logger = createLogger(\"server:vite\");\n\n/**\n * Vite dev server for the AppKit.\n *\n * This class is responsible for serving the Vite dev server for the development server.\n * It also handles the index.html file for the development server.\n *\n * @example\n * ```ts\n * const viteDevServer = new ViteDevServer(app, endpoints);\n * await viteDevServer.setup();\n * ```\n */\nexport class ViteDevServer extends BaseServer {\n  private vite: ViteDevServerType | null;\n\n  constructor(\n    app: express.Application,\n    endpoints: PluginEndpoints = {},\n    pluginConfigs: PluginClientConfigs = {},\n  ) {\n    super(app, endpoints, pluginConfigs);\n    this.vite = null;\n  }\n\n  /**\n   * Setup the Vite dev server.\n   *\n   * This method sets up the Vite dev server and the index.html file for the development server.\n   *\n   * @returns\n   */\n  async setup() {\n    const {\n      createServer: createViteServer,\n      loadConfigFromFile,\n      mergeConfig,\n    } = await import(\"vite\");\n    const react = await import(\"@vitejs/plugin-react\");\n\n    const clientRoot = this.findClientRoot();\n\n    const loadedConfig = await loadConfigFromFile(\n      {\n        mode: \"development\",\n        command: \"serve\",\n      },\n      undefined,\n      clientRoot,\n    );\n\n    const userConfig = loadedConfig?.config ?? {};\n    const viteClientPort = process.env.VITE_CLIENT_PORT;\n    const serverHmr = viteClientPort\n      ? { hmr: { clientPort: viteClientPort } }\n      : {};\n\n    const coreConfig = {\n      configFile: false,\n      root: clientRoot,\n      server: {\n        middlewareMode: true,\n        ...serverHmr,\n        watch: {\n          useFsEvents: true,\n          ignored: [\"**/node_modules/**\", \"!**/node_modules/@databricks/**\"],\n        },\n      },\n      plugins: [\n        react.default(),\n        appKitTypesPlugin(),\n        appKitServingTypesPlugin(),\n      ],\n      appType: \"custom\",\n    };\n\n    const mergedConfigs = mergeConfigDedup(userConfig, coreConfig, mergeConfig);\n    this.vite = await createViteServer(mergedConfigs);\n\n    this.app.use(this.vite.middlewares);\n\n    this.app.use(\"*\", async (req, res, next) => {\n      if (\n        req.originalUrl.startsWith(\"/api\") ||\n        req.originalUrl.startsWith(\"/query\")\n      ) {\n        return next();\n      }\n      const vite = this.vite;\n      this.validateVite(vite);\n\n      try {\n        const indexPath = path.resolve(clientRoot, \"index.html\");\n        let html = fs.readFileSync(indexPath, \"utf-8\");\n        html = html.replace(\"<body>\", `<body>${this.getConfigScript()}`);\n        html = await vite.transformIndexHtml(req.originalUrl, html);\n        res.status(200).set({ \"Content-Type\": \"text/html\" }).end(html);\n      } catch (e) {\n        vite.ssrFixStacktrace(e as Error);\n        next(e);\n      }\n    });\n  }\n\n  /** Close the Vite dev server. */\n  async close() {\n    await this.vite?.close();\n  }\n\n  /** Find the client root. */\n  private findClientRoot(): string {\n    const cwd = process.cwd();\n    const candidates = [\"client\", \"src\", \"app\", \"frontend\", \".\"];\n\n    for (const dir of candidates) {\n      const fullPath = path.resolve(cwd, dir);\n      const hasViteConfig =\n        fs.existsSync(path.join(fullPath, \"vite.config.ts\")) ||\n        fs.existsSync(path.join(fullPath, \"vite.config.js\"));\n      const hasIndexHtml = fs.existsSync(path.join(fullPath, \"index.html\"));\n\n      if (hasViteConfig && hasIndexHtml) {\n        logger.debug(\"Vite dev server: using client root %s\", fullPath);\n        return fullPath;\n      }\n    }\n\n    throw ServerError.clientDirectoryNotFound(candidates);\n  }\n\n  // type assertion to ensure vite is not null\n  private validateVite(\n    vite: ViteDevServerType | null,\n  ): asserts vite is ViteDevServerType {\n    if (!vite) {\n      throw ServerError.viteNotInitialized();\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;aAK2C;AAO3C,MAAM,SAAS,aAAa,cAAc;;;;;;;;;;;;;AAc1C,IAAa,gBAAb,cAAmC,WAAW;CAC5C,AAAQ;CAER,YACE,KACA,YAA6B,EAAE,EAC/B,gBAAqC,EAAE,EACvC;AACA,QAAM,KAAK,WAAW,cAAc;AACpC,OAAK,OAAO;;;;;;;;;CAUd,MAAM,QAAQ;EACZ,MAAM,EACJ,cAAc,kBACd,oBACA,gBACE,MAAM,OAAO;EACjB,MAAM,QAAQ,MAAM,OAAO;EAE3B,MAAM,aAAa,KAAK,gBAAgB;EAWxC,MAAM,cATe,MAAM,mBACzB;GACE,MAAM;GACN,SAAS;GACV,EACD,QACA,WACD,GAEgC,UAAU,EAAE;EAC7C,MAAM,iBAAiB,QAAQ,IAAI;AAyBnC,OAAK,OAAO,MAAM,iBADI,iBAAiB,YAnBpB;GACjB,YAAY;GACZ,MAAM;GACN,QAAQ;IACN,gBAAgB;IAChB,GATc,iBACd,EAAE,KAAK,EAAE,YAAY,gBAAgB,EAAE,GACvC,EAAE;IAQF,OAAO;KACL,aAAa;KACb,SAAS,CAAC,sBAAsB,kCAAkC;KACnE;IACF;GACD,SAAS;IACP,MAAM,SAAS;IACf,mBAAmB;IACnB,0BAA0B;IAC3B;GACD,SAAS;GACV,EAE8D,YAAY,CAC1B;AAEjD,OAAK,IAAI,IAAI,KAAK,KAAK,YAAY;AAEnC,OAAK,IAAI,IAAI,KAAK,OAAO,KAAK,KAAK,SAAS;AAC1C,OACE,IAAI,YAAY,WAAW,OAAO,IAClC,IAAI,YAAY,WAAW,SAAS,CAEpC,QAAO,MAAM;GAEf,MAAM,OAAO,KAAK;AAClB,QAAK,aAAa,KAAK;AAEvB,OAAI;IACF,MAAM,YAAY,KAAK,QAAQ,YAAY,aAAa;IACxD,IAAI,OAAO,GAAG,aAAa,WAAW,QAAQ;AAC9C,WAAO,KAAK,QAAQ,UAAU,SAAS,KAAK,iBAAiB,GAAG;AAChE,WAAO,MAAM,KAAK,mBAAmB,IAAI,aAAa,KAAK;AAC3D,QAAI,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,aAAa,CAAC,CAAC,IAAI,KAAK;YACvD,GAAG;AACV,SAAK,iBAAiB,EAAW;AACjC,SAAK,EAAE;;IAET;;;CAIJ,MAAM,QAAQ;AACZ,QAAM,KAAK,MAAM,OAAO;;;CAI1B,AAAQ,iBAAyB;EAC/B,MAAM,MAAM,QAAQ,KAAK;EACzB,MAAM,aAAa;GAAC;GAAU;GAAO;GAAO;GAAY;GAAI;AAE5D,OAAK,MAAM,OAAO,YAAY;GAC5B,MAAM,WAAW,KAAK,QAAQ,KAAK,IAAI;GACvC,MAAM,gBACJ,GAAG,WAAW,KAAK,KAAK,UAAU,iBAAiB,CAAC,IACpD,GAAG,WAAW,KAAK,KAAK,UAAU,iBAAiB,CAAC;GACtD,MAAM,eAAe,GAAG,WAAW,KAAK,KAAK,UAAU,aAAa,CAAC;AAErE,OAAI,iBAAiB,cAAc;AACjC,WAAO,MAAM,yCAAyC,SAAS;AAC/D,WAAO;;;AAIX,QAAM,YAAY,wBAAwB,WAAW;;CAIvD,AAAQ,aACN,MACmC;AACnC,MAAI,CAAC,KACH,OAAM,YAAY,oBAAoB"}

package/dist/plugins/serving/defaults.js

@@ -0,0 +1,10 @@
+//#region src/plugins/serving/defaults.ts
+const servingInvokeDefaults = {
+	cache: { enabled: false },
+	retry: { enabled: false },
+	timeout: 12e4
+};
+
+//#endregion
+export { servingInvokeDefaults };
+//# sourceMappingURL=defaults.js.map

package/dist/plugins/serving/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","names":[],"sources":["../../../src/plugins/serving/defaults.ts"],"sourcesContent":["export const servingInvokeDefaults = {\n  cache: {\n    enabled: false,\n  },\n  retry: {\n    enabled: false,\n  },\n  timeout: 120_000,\n};\n"],"mappings":";AAAA,MAAa,wBAAwB;CACnC,OAAO,EACL,SAAS,OACV;CACD,OAAO,EACL,SAAS,OACV;CACD,SAAS;CACV"}

package/dist/plugins/serving/index.d.ts

@@ -0,0 +1,2 @@
+import { EndpointConfig, IServingConfig, ServingEndpointEntry, ServingEndpointHandle, ServingEndpointMethods, ServingEndpointRegistry, ServingFactory } from "./types.js";
+import { ServingPlugin, serving } from "./serving.js";

package/dist/plugins/serving/index.js

@@ -0,0 +1,3 @@
+import { ServingPlugin, serving } from "./serving.js";
+
+export {  };

package/dist/plugins/serving/manifest.js

@@ -0,0 +1,53 @@
+//#region src/plugins/serving/manifest.json
+var manifest_default = {
+	$schema: "https://databricks.github.io/appkit/schemas/plugin-manifest.schema.json",
+	name: "serving",
+	displayName: "Model Serving Plugin",
+	description: "Authenticated proxy to Databricks Model Serving endpoints",
+	resources: {
+		"required": [{
+			"type": "serving_endpoint",
+			"alias": "Serving Endpoint",
+			"resourceKey": "serving-endpoint",
+			"description": "Model Serving endpoint for inference",
+			"permission": "CAN_QUERY",
+			"fields": { "name": {
+				"env": "DATABRICKS_SERVING_ENDPOINT_NAME",
+				"description": "Serving endpoint name"
+			} }
+		}],
+		"optional": []
+	},
+	config: { "schema": {
+		"type": "object",
+		"properties": {
+			"endpoints": {
+				"type": "object",
+				"description": "Map of alias names to endpoint configurations",
+				"additionalProperties": {
+					"type": "object",
+					"properties": {
+						"env": {
+							"type": "string",
+							"description": "Environment variable holding the endpoint name"
+						},
+						"servedModel": {
+							"type": "string",
+							"description": "Target a specific served model (bypasses traffic routing)"
+						}
+					},
+					"required": ["env"]
+				}
+			},
+			"timeout": {
+				"type": "number",
+				"default": 12e4,
+				"description": "Request timeout in ms. Default: 120000 (2 min)"
+			}
+		}
+	} }
+};
+
+//#endregion
+export { manifest_default as default };
+//# sourceMappingURL=manifest.js.map

package/dist/plugins/serving/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","names":[],"sources":["../../../src/plugins/serving/manifest.json"],"sourcesContent":[""],"mappings":""}

package/dist/plugins/serving/schema-filter.js

@@ -0,0 +1,52 @@
+import { createLogger } from "../../logging/logger.js";
+import { CACHE_VERSION } from "../../type-generator/serving/cache.js";
+import fs from "node:fs/promises";
+
+//#region src/plugins/serving/schema-filter.ts
+const logger = createLogger("serving:schema-filter");
+function isValidCache(data) {
+	return typeof data === "object" && data !== null && "version" in data && data.version === CACHE_VERSION && "endpoints" in data && typeof data.endpoints === "object";
+}
+/**
+* Loads endpoint schemas from the type generation cache file.
+* Returns a map of alias → allowed parameter keys.
+*/
+async function loadEndpointSchemas(cacheFile) {
+	const allowlists = /* @__PURE__ */ new Map();
+	try {
+		const raw = await fs.readFile(cacheFile, "utf8");
+		const parsed = JSON.parse(raw);
+		if (!isValidCache(parsed)) {
+			logger.warn("Serving types cache has invalid structure, skipping");
+			return allowlists;
+		}
+		const cache = parsed;
+		for (const [alias, entry] of Object.entries(cache.endpoints)) if (entry.requestKeys && entry.requestKeys.length > 0) allowlists.set(alias, new Set(entry.requestKeys));
+	} catch (err) {
+		if (err.code !== "ENOENT") logger.warn("Failed to load serving types cache: %s", err.message);
+	}
+	return allowlists;
+}
+/**
+* Filters a request body against the allowed keys for an endpoint alias.
+* Returns the filtered body and logs a warning for stripped params.
+*
+* If no allowlist exists for the alias, returns the body unchanged (passthrough).
+*/
+function filterRequestBody(body, allowlists, alias, filterMode = "strip") {
+	const allowed = allowlists.get(alias);
+	if (!allowed) return body;
+	const stripped = [];
+	const filtered = {};
+	for (const [key, value] of Object.entries(body)) if (allowed.has(key)) filtered[key] = value;
+	else stripped.push(key);
+	if (stripped.length > 0) {
+		if (filterMode === "reject") throw new Error(`Unknown request parameters: ${stripped.join(", ")}`);
+		logger.warn("Stripped unknown params from '%s': %s", alias, stripped.join(", "));
+	}
+	return filtered;
+}
+
+//#endregion
+export { filterRequestBody, loadEndpointSchemas };
+//# sourceMappingURL=schema-filter.js.map

package/dist/plugins/serving/schema-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-filter.js","names":[],"sources":["../../../src/plugins/serving/schema-filter.ts"],"sourcesContent":["import fs from \"node:fs/promises\";\nimport { createLogger } from \"../../logging/logger\";\nimport {\n  CACHE_VERSION,\n  type ServingCache,\n} from \"../../type-generator/serving/cache\";\n\nconst logger = createLogger(\"serving:schema-filter\");\n\nfunction isValidCache(data: unknown): data is ServingCache {\n  return (\n    typeof data === \"object\" &&\n    data !== null &&\n    \"version\" in data &&\n    (data as ServingCache).version === CACHE_VERSION &&\n    \"endpoints\" in data &&\n    typeof (data as ServingCache).endpoints === \"object\"\n  );\n}\n\n/**\n * Loads endpoint schemas from the type generation cache file.\n * Returns a map of alias → allowed parameter keys.\n */\nexport async function loadEndpointSchemas(\n  cacheFile: string,\n): Promise<Map<string, Set<string>>> {\n  const allowlists = new Map<string, Set<string>>();\n\n  try {\n    const raw = await fs.readFile(cacheFile, \"utf8\");\n    const parsed: unknown = JSON.parse(raw);\n    if (!isValidCache(parsed)) {\n      logger.warn(\"Serving types cache has invalid structure, skipping\");\n      return allowlists;\n    }\n    const cache = parsed;\n\n    for (const [alias, entry] of Object.entries(cache.endpoints)) {\n      if (entry.requestKeys && entry.requestKeys.length > 0) {\n        allowlists.set(alias, new Set(entry.requestKeys));\n      }\n    }\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") {\n      logger.warn(\n        \"Failed to load serving types cache: %s\",\n        (err as Error).message,\n      );\n    }\n    // No cache → no filtering, passthrough mode\n  }\n\n  return allowlists;\n}\n\n/**\n * Filters a request body against the allowed keys for an endpoint alias.\n * Returns the filtered body and logs a warning for stripped params.\n *\n * If no allowlist exists for the alias, returns the body unchanged (passthrough).\n */\nexport function filterRequestBody(\n  body: Record<string, unknown>,\n  allowlists: Map<string, Set<string>>,\n  alias: string,\n  filterMode: \"strip\" | \"reject\" = \"strip\",\n): Record<string, unknown> {\n  const allowed = allowlists.get(alias);\n  if (!allowed) return body;\n\n  const stripped: string[] = [];\n  const filtered: Record<string, unknown> = {};\n\n  for (const [key, value] of Object.entries(body)) {\n    if (allowed.has(key)) {\n      filtered[key] = value;\n    } else {\n      stripped.push(key);\n    }\n  }\n\n  if (stripped.length > 0) {\n    if (filterMode === \"reject\") {\n      throw new Error(`Unknown request parameters: ${stripped.join(\", \")}`);\n    }\n    logger.warn(\n      \"Stripped unknown params from '%s': %s\",\n      alias,\n      stripped.join(\", \"),\n    );\n  }\n\n  return filtered;\n}\n"],"mappings":";;;;;AAOA,MAAM,SAAS,aAAa,wBAAwB;AAEpD,SAAS,aAAa,MAAqC;AACzD,QACE,OAAO,SAAS,YAChB,SAAS,QACT,aAAa,QACZ,KAAsB,YAAY,iBACnC,eAAe,QACf,OAAQ,KAAsB,cAAc;;;;;;AAQhD,eAAsB,oBACpB,WACmC;CACnC,MAAM,6BAAa,IAAI,KAA0B;AAEjD,KAAI;EACF,MAAM,MAAM,MAAM,GAAG,SAAS,WAAW,OAAO;EAChD,MAAM,SAAkB,KAAK,MAAM,IAAI;AACvC,MAAI,CAAC,aAAa,OAAO,EAAE;AACzB,UAAO,KAAK,sDAAsD;AAClE,UAAO;;EAET,MAAM,QAAQ;AAEd,OAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,MAAM,UAAU,CAC1D,KAAI,MAAM,eAAe,MAAM,YAAY,SAAS,EAClD,YAAW,IAAI,OAAO,IAAI,IAAI,MAAM,YAAY,CAAC;UAG9C,KAAK;AACZ,MAAK,IAA8B,SAAS,SAC1C,QAAO,KACL,0CACC,IAAc,QAChB;;AAKL,QAAO;;;;;;;;AAST,SAAgB,kBACd,MACA,YACA,OACA,aAAiC,SACR;CACzB,MAAM,UAAU,WAAW,IAAI,MAAM;AACrC,KAAI,CAAC,QAAS,QAAO;CAErB,MAAM,WAAqB,EAAE;CAC7B,MAAM,WAAoC,EAAE;AAE5C,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,CAC7C,KAAI,QAAQ,IAAI,IAAI,CAClB,UAAS,OAAO;KAEhB,UAAS,KAAK,IAAI;AAItB,KAAI,SAAS,SAAS,GAAG;AACvB,MAAI,eAAe,SACjB,OAAM,IAAI,MAAM,+BAA+B,SAAS,KAAK,KAAK,GAAG;AAEvE,SAAO,KACL,yCACA,OACA,SAAS,KAAK,KAAK,CACpB;;AAGH,QAAO"}