@hooklink/cli 0.1.68 → 0.1.70

package/dist/__tests__/agent/lease.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=lease.test.d.ts.map

package/dist/__tests__/agent/lease.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/agent/lease.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/agent/lease.test.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const lease_1 = require("../../agent/lease");
+describe('LeaseManager', () => {
+    it('treats a fresh tunnel as dead until refreshed', () => {
+        const mgr = new lease_1.LeaseManager(1000);
+        expect(mgr.isAlive('a')).toBe(false);
+    });
+    it('refreshes extend the TTL from now', () => {
+        const mgr = new lease_1.LeaseManager(1000);
+        mgr.refresh('a', 10000);
+        expect(mgr.isAlive('a', 10500)).toBe(true);
+        expect(mgr.isAlive('a', 11500)).toBe(false);
+        mgr.refresh('a', 11500);
+        expect(mgr.isAlive('a', 12000)).toBe(true);
+    });
+    it('returns expired IDs in a single pass', () => {
+        const mgr = new lease_1.LeaseManager(1000);
+        mgr.refresh('alive', 10000);
+        mgr.refresh('dead', 5000);
+        expect(mgr.getExpired(10500).sort()).toEqual(['dead']);
+    });
+    it('release removes a lease completely', () => {
+        const mgr = new lease_1.LeaseManager(1000);
+        mgr.refresh('a', 10000);
+        mgr.release('a');
+        expect(mgr.isAlive('a', 10500)).toBe(false);
+        expect(mgr.has('a')).toBe(false);
+    });
+});
+//# sourceMappingURL=lease.test.js.map

package/dist/__tests__/agent/lease.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.test.js","sourceRoot":"","sources":["../../../src/__tests__/agent/lease.test.ts"],"names":[],"mappings":";;AAAA,6CAAiD;AAEjD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,GAAG,GAAG,IAAI,oBAAY,CAAC,IAAK,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,GAAG,GAAG,IAAI,oBAAY,CAAC,IAAK,CAAC,CAAC;QACpC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAM,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAM,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,GAAG,GAAG,IAAI,oBAAY,CAAC,IAAK,CAAC,CAAC;QACpC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,KAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAK,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,GAAG,GAAG,IAAI,oBAAY,CAAC,IAAK,CAAC,CAAC;QACpC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAM,CAAC,CAAC;QACzB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/agent/local-server.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Integration test: real HTTP server + real supervisor + fake CLI.
+ *
+ * Covers the paths the WP plugin will hit: discovery (health), auth
+ * (bearer token), create, idempotency, ownership isolation, status
+ * polling, recent-requests tail, and delete.
+ */
+export {};
+//# sourceMappingURL=local-server.test.d.ts.map

package/dist/__tests__/agent/local-server.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-server.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/agent/local-server.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/__tests__/agent/local-server.test.js

@@ -0,0 +1,218 @@
+"use strict";
+/**
+ * Integration test: real HTTP server + real supervisor + fake CLI.
+ *
+ * Covers the paths the WP plugin will hit: discovery (health), auth
+ * (bearer token), create, idempotency, ownership isolation, status
+ * polling, recent-requests tail, and delete.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = __importDefault(require("fs"));
+const http_1 = __importDefault(require("http"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const supervisor_1 = require("../../agent/supervisor");
+const local_server_1 = require("../../agent/local-server");
+const FAKE_CLI = path_1.default.join(__dirname, 'fixtures', 'fake-cli.js');
+async function req(port, method, pathname, opts = {}) {
+    return new Promise((resolve, reject) => {
+        const payload = opts.body ? JSON.stringify(opts.body) : undefined;
+        const r = http_1.default.request({
+            host: '127.0.0.1',
+            port,
+            method,
+            path: pathname,
+            headers: {
+                'content-type': 'application/json',
+                ...(payload ? { 'content-length': Buffer.byteLength(payload) } : {}),
+                ...opts.headers,
+            },
+        }, (res) => {
+            let data = '';
+            res.on('data', (c) => (data += c));
+            res.on('end', () => {
+                try {
+                    resolve({
+                        status: res.statusCode ?? 0,
+                        body: data ? JSON.parse(data) : {},
+                    });
+                }
+                catch {
+                    reject(new Error('Invalid JSON response: ' + data));
+                }
+            });
+        });
+        r.on('error', reject);
+        if (payload)
+            r.write(payload);
+        r.end();
+    });
+}
+describe('LocalServer', () => {
+    let home;
+    let supervisor;
+    let server;
+    let port;
+    const localToken = 'a'.repeat(64);
+    // Fake resolver + reachable local target: we stand up a mini HTTP
+    // server on 127.0.0.1 so preflight succeeds.
+    let targetServer;
+    let targetUrl;
+    beforeAll((done) => {
+        targetServer = http_1.default
+            .createServer((_, res) => {
+            res.writeHead(200);
+            res.end('ok');
+        })
+            .listen(0, '127.0.0.1', () => {
+            const addr = targetServer.address();
+            if (addr && typeof addr === 'object') {
+                targetUrl = `http://127.0.0.1:${addr.port}`;
+            }
+            done();
+        });
+    });
+    afterAll((done) => void targetServer.close(() => done()));
+    beforeEach(async () => {
+        home = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'hooklink-server-'));
+        process.env.HOOKLINK_HOME = home;
+        process.env.FAKE_MODE = 'ready';
+        process.env.FAKE_READY_DELAY_MS = '10';
+        supervisor = new supervisor_1.Supervisor({ binaryPath: FAKE_CLI, spawnTimeoutMs: 2000 });
+        server = new local_server_1.LocalServer({
+            port: 0, // pick a free port
+            localToken,
+            supervisor,
+            apiUrl: 'https://api.hooklink.net',
+            version: 'test',
+            resolver: async (opts) => ({
+                id: 'ep-fake-' + opts.localTarget.length,
+                keyword: 'wp-' + Math.random().toString(36).slice(2, 7),
+                local_target_url: opts.localTarget,
+                endpoint_type: 'tunnel',
+                reused: false,
+            }),
+        });
+        port = await server.listen();
+    });
+    afterEach(async () => {
+        await supervisor.shutdown(500);
+        await server.close();
+        delete process.env.HOOKLINK_HOME;
+        delete process.env.FAKE_MODE;
+        delete process.env.FAKE_READY_DELAY_MS;
+        fs_1.default.rmSync(home, { recursive: true, force: true });
+    });
+    it('health does not require auth and reports version', async () => {
+        const res = await req(port, 'GET', '/v1/health');
+        expect(res.status).toBe(200);
+        expect(res.body.ok).toBe(true);
+        expect(res.body.version).toBe('test');
+    });
+    it('rejects missing / invalid bearer on protected routes', async () => {
+        const noToken = await req(port, 'GET', '/v1/status');
+        expect(noToken.status).toBe(401);
+        const badToken = await req(port, 'GET', '/v1/status', {
+            headers: { authorization: 'Bearer nope' },
+        });
+        expect(badToken.status).toBe(401);
+    });
+    it('creates + lists + deletes an authenticated tunnel', async () => {
+        const auth = {
+            authorization: `Bearer ${localToken}`,
+            'x-hooklink-api-key': 'hlk_test_1234567890',
+        };
+        const create = await req(port, 'POST', '/v1/tunnels', {
+            headers: auth,
+            body: { local_target: targetUrl },
+        });
+        expect(create.status).toBe(200);
+        expect(create.body.state).toBe('live');
+        const tunnelId = create.body.tunnel_id;
+        const status = await req(port, 'GET', '/v1/status', { headers: auth });
+        expect(status.status).toBe(200);
+        expect(status.body.active_tunnels.length).toBe(1);
+        const del = await req(port, 'DELETE', `/v1/tunnels/${tunnelId}`, {
+            headers: auth,
+        });
+        expect(del.status).toBe(200);
+        const statusAfter = await req(port, 'GET', '/v1/status', { headers: auth });
+        expect(statusAfter.body.active_tunnels.length).toBe(0);
+    });
+    it('returns the same tunnel_id on idempotent POSTs with same (apiKey, target)', async () => {
+        const auth = {
+            authorization: `Bearer ${localToken}`,
+            'x-hooklink-api-key': 'hlk_dup',
+        };
+        const first = await req(port, 'POST', '/v1/tunnels', {
+            headers: auth,
+            body: { local_target: targetUrl },
+        });
+        const second = await req(port, 'POST', '/v1/tunnels', {
+            headers: auth,
+            body: { local_target: targetUrl },
+        });
+        expect(second.status).toBe(200);
+        expect(second.body.tunnel_id).toBe(first.body.tunnel_id);
+    });
+    it('rejects cross-owner deletes with 403 not_owner', async () => {
+        const alice = {
+            authorization: `Bearer ${localToken}`,
+            'x-hooklink-api-key': 'hlk_alice',
+        };
+        const mallory = {
+            authorization: `Bearer ${localToken}`,
+            'x-hooklink-api-key': 'hlk_mallory',
+        };
+        const create = await req(port, 'POST', '/v1/tunnels', {
+            headers: alice,
+            body: { local_target: targetUrl },
+        });
+        const del = await req(port, 'DELETE', `/v1/tunnels/${create.body.tunnel_id}`, { headers: mallory });
+        expect(del.status).toBe(403);
+        expect(del.body.error).toBe('not_owner');
+    });
+    it('returns 422 target_unreachable when preflight fails', async () => {
+        const auth = {
+            authorization: `Bearer ${localToken}`,
+            'x-hooklink-api-key': 'hlk_preflight',
+        };
+        const res = await req(port, 'POST', '/v1/tunnels', {
+            headers: auth,
+            body: { local_target: 'http://127.0.0.1:1' },
+        });
+        expect(res.status).toBe(422);
+        expect(res.body.error).toBe('target_unreachable');
+    });
+    it('trial mode: creates a tunnel keyed by owner_id', async () => {
+        process.env.FAKE_MODE = 'trial_ready';
+        const res = await req(port, 'POST', '/v1/tunnels', {
+            headers: {
+                authorization: `Bearer ${localToken}`,
+                'x-hooklink-owner-id': 'wp-plugin-123',
+            },
+            body: { local_target: targetUrl },
+        });
+        expect(res.status).toBe(200);
+        expect(res.body.trial).toBe(true);
+        expect(res.body.tunnel_id).toBe('fake-session');
+    });
+    it('recent-requests returns a bounded slice of the request events', async () => {
+        const auth = {
+            authorization: `Bearer ${localToken}`,
+            'x-hooklink-api-key': 'hlk_recent',
+        };
+        const create = await req(port, 'POST', '/v1/tunnels', {
+            headers: auth,
+            body: { local_target: targetUrl },
+        });
+        const tunnelId = create.body.tunnel_id;
+        const res = await req(port, 'GET', `/v1/tunnels/${tunnelId}/recent?limit=5`, { headers: auth });
+        expect(res.status).toBe(200);
+        expect(Array.isArray(res.body.requests)).toBe(true);
+    });
+});
+//# sourceMappingURL=local-server.test.js.map

package/dist/__tests__/agent/local-server.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-server.test.js","sourceRoot":"","sources":["../../../src/__tests__/agent/local-server.test.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;AAEH,4CAAoB;AACpB,gDAAwB;AACxB,4CAAoB;AACpB,gDAAwB;AACxB,uDAAoD;AACpD,2DAAuD;AAGvD,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AAOjE,KAAK,UAAU,GAAG,CAChB,IAAY,EACZ,MAAc,EACd,QAAgB,EAChB,OAA6D,EAAE;IAE/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,MAAM,CAAC,GAAG,cAAI,CAAC,OAAO,CACpB;YACE,IAAI,EAAE,WAAW;YACjB,IAAI;YACJ,MAAM;YACN,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,IAAI,CAAC,OAAO;aAChB;SACF,EACD,CAAC,GAAG,EAAE,EAAE;YACN,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,OAAO,CAAC;wBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;wBAC3B,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,EAAE;qBAChE,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtB,IAAI,OAAO;YAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC,CAAC,GAAG,EAAE,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,IAAY,CAAC;IACjB,IAAI,UAAsB,CAAC;IAC3B,IAAI,MAAmB,CAAC;IACxB,IAAI,IAAY,CAAC;IACjB,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAElC,kEAAkE;IAClE,6CAA6C;IAC7C,IAAI,YAAyB,CAAC;IAC9B,IAAI,SAAiB,CAAC;IAEtB,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE;QACjB,YAAY,GAAG,cAAI;aAChB,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACvB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAC3B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,SAAS,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9C,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CACN,CAAC,IAAI,EAAE,EAAE,CACP,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CACxC,CAAC;IAEF,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,IAAI,GAAG,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,IAAI,CAAC;QACvC,UAAU,GAAG,IAAI,uBAAU,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAK,EAAE,CAAC,CAAC;QAC7E,MAAM,GAAG,IAAI,0BAAW,CAAC;YACvB,IAAI,EAAE,CAAC,EAAE,mBAAmB;YAC5B,UAAU;YACV,UAAU;YACV,MAAM,EAAE,0BAA0B;YAClC,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,KAAK,EAAE,IAAI,EAA6B,EAAE,CAAC,CAAC;gBACpD,EAAE,EAAE,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM;gBACxC,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACvD,gBAAgB,EAAE,IAAI,CAAC,WAAW;gBAClC,aAAa,EAAE,QAAQ;gBACvB,MAAM,EAAE,KAAK;aACd,CAAC;SACH,CAAC,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,YAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE;YACpD,OAAO,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE;SAC1C,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,IAAI,GAAG;YACX,aAAa,EAAE,UAAU,UAAU,EAAE;YACrC,oBAAoB,EAAE,qBAAqB;SAC5C,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;YACpD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAmB,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,CAAE,MAAM,CAAC,IAAI,CAAC,cAA4B,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,QAAQ,EAAE,EAAE;YAC/D,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAE,WAAW,CAAC,IAAI,CAAC,cAA4B,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,IAAI,GAAG;YACX,aAAa,EAAE,UAAU,UAAU,EAAE;YACrC,oBAAoB,EAAE,SAAS;SAChC,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;YACnD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;YACpD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,KAAK,GAAG;YACZ,aAAa,EAAE,UAAU,UAAU,EAAE;YACrC,oBAAoB,EAAE,WAAW;SAClC,CAAC;QACF,MAAM,OAAO,GAAG;YACd,aAAa,EAAE,UAAU,UAAU,EAAE;YACrC,oBAAoB,EAAE,aAAa;SACpC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;YACpD,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CACnB,IAAI,EACJ,QAAQ,EACR,eAAe,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EACtC,EAAE,OAAO,EAAE,OAAO,EAAE,CACrB,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,IAAI,GAAG;YACX,aAAa,EAAE,UAAU,UAAU,EAAE;YACrC,oBAAoB,EAAE,eAAe;SACtC,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;YACjD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE,YAAY,EAAE,oBAAoB,EAAE;SAC7C,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,aAAa,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;YACjD,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,qBAAqB,EAAE,eAAe;aACvC;YACD,IAAI,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,IAAI,GAAG;YACX,aAAa,EAAE,UAAU,UAAU,EAAE;YACrC,oBAAoB,EAAE,YAAY;SACnC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;YACpD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAmB,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,GAAG,CACnB,IAAI,EACJ,KAAK,EACL,eAAe,QAAQ,iBAAiB,EACxC,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/agent/local-token.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=local-token.test.d.ts.map

package/dist/__tests__/agent/local-token.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-token.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/agent/local-token.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/agent/local-token.test.js

@@ -0,0 +1,42 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const local_token_1 = require("../../agent/local-token");
+describe('local-token', () => {
+    let home;
+    beforeEach(() => {
+        home = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'hooklink-token-'));
+        process.env.HOOKLINK_HOME = home;
+    });
+    afterEach(() => {
+        delete process.env.HOOKLINK_HOME;
+        fs_1.default.rmSync(home, { recursive: true, force: true });
+    });
+    it('creates a 64-char hex token on first call and reuses it after', () => {
+        const first = (0, local_token_1.ensureLocalToken)();
+        expect(first).toMatch(/^[0-9a-f]{64}$/);
+        const second = (0, local_token_1.ensureLocalToken)();
+        expect(second).toBe(first);
+        expect((0, local_token_1.readLocalToken)()).toBe(first);
+    });
+    it('persists with 0600 perms', () => {
+        (0, local_token_1.ensureLocalToken)();
+        const stats = fs_1.default.statSync(path_1.default.join(home, 'local-token'));
+        if (process.platform !== 'win32') {
+            // 0o777 mask; expect owner-only 0o600.
+            expect(stats.mode & 0o777).toBe(0o600);
+        }
+    });
+    it('tokenMatches uses constant-time compare', () => {
+        expect((0, local_token_1.tokenMatches)('abc', 'abc')).toBe(true);
+        expect((0, local_token_1.tokenMatches)('abc', 'abd')).toBe(false);
+        // Length mismatch must not throw.
+        expect((0, local_token_1.tokenMatches)('abc', 'abcd')).toBe(false);
+    });
+});
+//# sourceMappingURL=local-token.test.js.map

package/dist/__tests__/agent/local-token.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-token.test.js","sourceRoot":"","sources":["../../../src/__tests__/agent/local-token.test.ts"],"names":[],"mappings":";;;;;AAAA,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,yDAIiC;AAEjC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,IAAY,CAAC;IAEjB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,GAAG,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACjC,YAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,KAAK,GAAG,IAAA,8BAAgB,GAAE,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAA,8BAAgB,GAAE,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAA,4BAAc,GAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,IAAA,8BAAgB,GAAE,CAAC;QACnB,MAAM,KAAK,GAAG,YAAE,CAAC,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,uCAAuC;YACvC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,IAAA,0BAAY,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAA,0BAAY,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,kCAAkC;QAClC,MAAM,CAAC,IAAA,0BAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/agent/state.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=state.test.d.ts.map

package/dist/__tests__/agent/state.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/agent/state.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/agent/state.test.js

@@ -0,0 +1,63 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const state_1 = require("../../agent/state");
+describe('agent state', () => {
+    let home;
+    beforeEach(() => {
+        home = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'hooklink-state-'));
+        process.env.HOOKLINK_HOME = home;
+    });
+    afterEach(() => {
+        delete process.env.HOOKLINK_HOME;
+        fs_1.default.rmSync(home, { recursive: true, force: true });
+    });
+    it('round-trips persisted tunnels', () => {
+        (0, state_1.writeState)([
+            {
+                tunnel_id: 'abc',
+                pid: 12345,
+                api_key_hash: (0, state_1.hashApiKey)('hlk_test'),
+                local_target: 'http://localhost:8080',
+                started_at: '2026-04-24T07:00:00Z',
+                owner_id: null,
+            },
+        ]);
+        const loaded = (0, state_1.readState)();
+        expect(loaded).toHaveLength(1);
+        expect(loaded[0].tunnel_id).toBe('abc');
+        expect(loaded[0].api_key_hash).toBe((0, state_1.hashApiKey)('hlk_test'));
+    });
+    it('returns [] and renames a corrupted file', () => {
+        fs_1.default.mkdirSync(home, { recursive: true });
+        const state = path_1.default.join(home, 'agent.state');
+        fs_1.default.writeFileSync(state, '{ not valid json');
+        expect((0, state_1.readState)()).toEqual([]);
+        // A .corrupted.* sibling should now exist.
+        const siblings = fs_1.default.readdirSync(home);
+        expect(siblings.some((f) => f.startsWith('agent.state.corrupted.'))).toBe(true);
+    });
+    it('writes atomically via a tmp file', () => {
+        (0, state_1.writeState)([
+            {
+                tunnel_id: 'x',
+                pid: 1,
+                api_key_hash: null,
+                local_target: 'http://localhost',
+                started_at: 'now',
+                owner_id: 'owner-1',
+            },
+        ]);
+        // After writeState returns, no .tmp leftovers must remain.
+        const leftovers = fs_1.default
+            .readdirSync(home)
+            .filter((f) => f.endsWith('.tmp'));
+        expect(leftovers).toEqual([]);
+    });
+});
+//# sourceMappingURL=state.test.js.map

package/dist/__tests__/agent/state.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.test.js","sourceRoot":"","sources":["../../../src/__tests__/agent/state.test.ts"],"names":[],"mappings":";;;;;AAAA,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,6CAAsE;AAEtE,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,IAAY,CAAC;IAEjB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,GAAG,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACjC,YAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,IAAA,kBAAU,EAAC;YACT;gBACE,SAAS,EAAE,KAAK;gBAChB,GAAG,EAAE,KAAK;gBACV,YAAY,EAAE,IAAA,kBAAU,EAAC,UAAU,CAAC;gBACpC,YAAY,EAAE,uBAAuB;gBACrC,UAAU,EAAE,sBAAsB;gBAClC,QAAQ,EAAE,IAAI;aACf;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,iBAAS,GAAE,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAA,kBAAU,EAAC,UAAU,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,YAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC7C,YAAE,CAAC,aAAa,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAA,iBAAS,GAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChC,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,YAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,IAAA,kBAAU,EAAC;YACT;gBACE,SAAS,EAAE,GAAG;gBACd,GAAG,EAAE,CAAC;gBACN,YAAY,EAAE,IAAI;gBAClB,YAAY,EAAE,kBAAkB;gBAChC,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,SAAS;aACpB;SACF,CAAC,CAAC;QACH,2DAA2D;QAC3D,MAAM,SAAS,GAAG,YAAE;aACjB,WAAW,CAAC,IAAI,CAAC;aACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/agent/supervisor.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=supervisor.test.d.ts.map

package/dist/__tests__/agent/supervisor.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/agent/supervisor.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/agent/supervisor.test.js

@@ -0,0 +1,126 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const supervisor_1 = require("../../agent/supervisor");
+const FAKE_CLI = path_1.default.join(__dirname, 'fixtures', 'fake-cli.js');
+describe('Supervisor', () => {
+    let home;
+    let sup;
+    beforeEach(() => {
+        home = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'hooklink-sup-'));
+        process.env.HOOKLINK_HOME = home;
+        process.env.FAKE_MODE = 'ready';
+        process.env.FAKE_READY_DELAY_MS = '20';
+    });
+    afterEach(async () => {
+        if (sup)
+            await sup.shutdown(500).catch(() => { });
+        delete process.env.HOOKLINK_HOME;
+        delete process.env.FAKE_MODE;
+        delete process.env.FAKE_READY_DELAY_MS;
+        fs_1.default.rmSync(home, { recursive: true, force: true });
+    });
+    it('resolves when child emits tunnel_ready', async () => {
+        sup = new supervisor_1.Supervisor({ binaryPath: FAKE_CLI, spawnTimeoutMs: 2000 });
+        const info = await sup.startTunnel({
+            mode: 'authenticated',
+            tunnel_id: 'ep-1',
+            keyword: 'wp-abc',
+            api_key: 'hlk_test',
+            api_key_hash: 'hash',
+            local_target: 'http://localhost:8080',
+            public_url: 'https://wp-abc.hooklink.net',
+        });
+        expect(info.state).toBe('live');
+        expect(info.public_url).toBe('https://fake.hooklink.net');
+        expect(info.pid).toBeGreaterThan(0);
+    });
+    it('rejects with spawn_timeout when child never emits ready', async () => {
+        process.env.FAKE_MODE = 'slow';
+        sup = new supervisor_1.Supervisor({ binaryPath: FAKE_CLI, spawnTimeoutMs: 200 });
+        await expect(sup.startTunnel({
+            mode: 'authenticated',
+            tunnel_id: 'ep-2',
+            keyword: 'wp-xyz',
+            api_key: 'hlk_test',
+            api_key_hash: 'hash',
+            local_target: 'http://localhost:8080',
+            public_url: 'https://wp-xyz.hooklink.net',
+        })).rejects.toMatchObject({ code: 'spawn_timeout' });
+        // Failed spawn must have been cleaned up.
+        expect(sup.listTunnels()).toHaveLength(0);
+    });
+    it('marks tunnel crashed and surfaces fatal code on fatal event', async () => {
+        process.env.FAKE_MODE = 'fatal';
+        sup = new supervisor_1.Supervisor({ binaryPath: FAKE_CLI, spawnTimeoutMs: 2000 });
+        await expect(sup.startTunnel({
+            mode: 'authenticated',
+            tunnel_id: 'ep-3',
+            keyword: 'wp-fatal',
+            api_key: 'hlk_test',
+            api_key_hash: 'hash',
+            local_target: 'http://localhost:8080',
+            public_url: 'https://wp-fatal.hooklink.net',
+        })).rejects.toMatchObject({ code: '4001' });
+    });
+    it('re-keys trial tunnels to the real session id from trial_started', async () => {
+        process.env.FAKE_MODE = 'trial_ready';
+        sup = new supervisor_1.Supervisor({ binaryPath: FAKE_CLI, spawnTimeoutMs: 2000 });
+        const info = await sup.startTunnel({
+            mode: 'trial',
+            owner_id: 'owner-xyz',
+            local_target: 'http://localhost:3000',
+        });
+        expect(info.tunnel_id).toBe('fake-session');
+        expect(info.trial).toBe(true);
+        expect(info.limits?.max_requests).toBe(50);
+        expect(sup.getTunnel('fake-session')?.tunnel_id).toBe('fake-session');
+    });
+    it('enforces maxConcurrent cap', async () => {
+        sup = new supervisor_1.Supervisor({
+            binaryPath: FAKE_CLI,
+            spawnTimeoutMs: 2000,
+            maxConcurrent: 1,
+        });
+        await sup.startTunnel({
+            mode: 'authenticated',
+            tunnel_id: 'ep-a',
+            keyword: 'wp-a',
+            api_key: 'hlk_test',
+            api_key_hash: 'hash',
+            local_target: 'http://localhost:8080',
+            public_url: 'https://wp-a.hooklink.net',
+        });
+        await expect(sup.startTunnel({
+            mode: 'authenticated',
+            tunnel_id: 'ep-b',
+            keyword: 'wp-b',
+            api_key: 'hlk_test',
+            api_key_hash: 'hash',
+            local_target: 'http://localhost:8081',
+            public_url: 'https://wp-b.hooklink.net',
+        })).rejects.toMatchObject({ code: 'too_many_local_tunnels' });
+    });
+    it('stopTunnel SIGTERMs the child and cleans up', async () => {
+        sup = new supervisor_1.Supervisor({ binaryPath: FAKE_CLI, spawnTimeoutMs: 2000 });
+        const info = await sup.startTunnel({
+            mode: 'authenticated',
+            tunnel_id: 'ep-stop',
+            keyword: 'wp-s',
+            api_key: 'hlk_test',
+            api_key_hash: 'hash',
+            local_target: 'http://localhost:8080',
+            public_url: 'https://wp-s.hooklink.net',
+        });
+        expect(sup.getTunnel(info.tunnel_id)).not.toBeNull();
+        const ok = await sup.stopTunnel(info.tunnel_id, 500);
+        expect(ok).toBe(true);
+        expect(sup.getTunnel(info.tunnel_id)).toBeNull();
+    });
+});
+//# sourceMappingURL=supervisor.test.js.map

package/dist/__tests__/agent/supervisor.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.test.js","sourceRoot":"","sources":["../../../src/__tests__/agent/supervisor.test.ts"],"names":[],"mappings":";;;;;AAAA,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,uDAAoD;AAEpD,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AAEjE,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAI,IAAY,CAAC;IACjB,IAAI,GAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,GAAG,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,IAAI,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,GAAG;YAAE,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,YAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,GAAG,GAAG,IAAI,uBAAU,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAK,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC;YACjC,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,UAAU;YACnB,YAAY,EAAE,MAAM;YACpB,YAAY,EAAE,uBAAuB;YACrC,UAAU,EAAE,6BAA6B;SAC1C,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC;QAC/B,GAAG,GAAG,IAAI,uBAAU,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CACV,GAAG,CAAC,WAAW,CAAC;YACd,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,UAAU;YACnB,YAAY,EAAE,MAAM;YACpB,YAAY,EAAE,uBAAuB;YACrC,UAAU,EAAE,6BAA6B;SAC1C,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACnD,0CAA0C;QAC1C,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC;QAChC,GAAG,GAAG,IAAI,uBAAU,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAK,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,CACV,GAAG,CAAC,WAAW,CAAC;YACd,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,UAAU;YACnB,OAAO,EAAE,UAAU;YACnB,YAAY,EAAE,MAAM;YACpB,YAAY,EAAE,uBAAuB;YACrC,UAAU,EAAE,+BAA+B;SAC5C,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,aAAa,CAAC;QACtC,GAAG,GAAG,IAAI,uBAAU,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAK,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC;YACjC,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,WAAW;YACrB,YAAY,EAAE,uBAAuB;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,GAAG,GAAG,IAAI,uBAAU,CAAC;YACnB,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,IAAK;YACrB,aAAa,EAAE,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,WAAW,CAAC;YACpB,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,UAAU;YACnB,YAAY,EAAE,MAAM;YACpB,YAAY,EAAE,uBAAuB;YACrC,UAAU,EAAE,2BAA2B;SACxC,CAAC,CAAC;QACH,MAAM,MAAM,CACV,GAAG,CAAC,WAAW,CAAC;YACd,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,UAAU;YACnB,YAAY,EAAE,MAAM;YACpB,YAAY,EAAE,uBAAuB;YACrC,UAAU,EAAE,2BAA2B;SACxC,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,GAAG,GAAG,IAAI,uBAAU,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAK,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC;YACjC,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,UAAU;YACnB,YAAY,EAAE,MAAM;YACpB,YAAY,EAAE,uBAAuB;YACrC,UAAU,EAAE,2BAA2B;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/json-events.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=json-events.test.d.ts.map

package/dist/__tests__/json-events.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-events.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/json-events.test.ts"],"names":[],"mappings":""}