@debugg-ai/debugg-ai-mcp 2.1.0 → 2.1.2

package/CHANGELOG.md

@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed — ngrok now dials IPv4 loopback explicitly (fixes ERR_NGROK_8012 on macOS Next.js)
+
+- `ngrok.connect({addr})` now passes `127.0.0.1:<port>` instead of the bare port number for plain-http localhost URLs. Bare port / `localhost` could resolve to IPv6 `[::1]` first on modern macOS, but Next.js / Vite / most Node dev servers bind to `127.0.0.1` only. Result was a successful tunnel that dialed `[::1]:<port>` and got `connection refused`, surfacing to users as `ERR_NGROK_8012` inside the browser agent trace. Bead `fhg`. Evidenced by real incident log 2026-04-24T19:37Z.
+- Docker (`DOCKER_CONTAINER=true`) and https-localhost paths unchanged.
+
+### Fixed — concurrent callers joining a pending tunnel revoke their redundant key
+
+- When caller B's request for a localhost URL arrives while caller A's tunnel for the same port is still provisioning, B used to silently join A's promise and throw away B's own minted ngrok key (and its `revokeKey` callback) — an orphan-key-on-backend leak. B now revokes its redundant key immediately on join. Bead `7qh` finding 2.
+
 ### Added — tunnel fault-injection + trace harness for diagnosis
 
 - New `DEBUGG_TUNNEL_FAULT_MODE` env var (dev/test only — inert when `NODE_ENV=production`) lets developers force specific ngrok-side failures without mocking, to reproduce client-reported transient "Tunnel setup failed" incidents. Modes: `fail-connect-N:<count>`, `empty-url-N:<count>`, `delay-connect:<ms>`, combinable with commas. Bead `42g`.

package/dist/services/ngrok/tunnelManager.js

@@ -213,6 +213,13 @@ class TunnelManager {
         // 2. Deduplicate concurrent creation requests for the same port
         const pending = this.pendingTunnels.get(port);
         if (pending) {
+            // Bead 7qh Finding 2: our minted tunnelKey/keyId are now redundant — the
+            // in-flight call owns the tunnel for this port. Revoke our key up-front
+            // so it doesn't orphan on the backend. Failures are swallowed: we can't
+            // let cleanup break the join.
+            if (revokeKey) {
+                revokeKey().catch((err) => logger.warn(`Failed to revoke redundant key while joining pending tunnel for port ${port}:`, err));
+            }
             const info = await pending;
             return { url: info.publicUrl, tunnelId: info.tunnelId, isLocalhost: true };
         }
@@ -266,12 +273,17 @@ class TunnelManager {
         const isHttpsLocal = originalUrl.startsWith('https:');
         const inDocker = process.env.DOCKER_CONTAINER === 'true';
         const dockerHost = 'host.docker.internal';
+        // Bead fhg: force IPv4 loopback when running against localhost. ngrok's
+        // default resolution of a bare port or "localhost" can pick IPv6 [::1]
+        // first on macOS/modern OSes, but most dev servers (Next.js, Vite) bind
+        // only to 127.0.0.1 — resulting in ngrok connect:refused + ERR_NGROK_8012
+        // on the browser side with no actionable error back to the MCP caller.
         let localAddr;
         if (isHttpsLocal) {
             localAddr = inDocker ? `https://${dockerHost}:${port}` : `https://localhost:${port}`;
         }
         else {
-            localAddr = inDocker ? `${dockerHost}:${port}` : port;
+            localAddr = inDocker ? `${dockerHost}:${port}` : `127.0.0.1:${port}`;
         }
         // Bead ixh: 3-attempt retry for ngrok.connect transient failures. Previously
         // only retried ONCE (with agent reset), which is insufficient against real

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@debugg-ai/debugg-ai-mcp",
-  "version": "2.1.0",
+  "version": "2.1.2",
   "description": "Zero-Config, Fully AI-Managed End-to-End Testing for all code gen platforms.",
   "type": "module",
   "bin": {