@hooklink/cli 0.1.69 → 0.1.70

package/dist/agent/state.js

@@ -0,0 +1,63 @@
+"use strict";
+/**
+ * On-disk state for zombie cleanup across agent restarts.
+ *
+ * Stored at `~/.hooklink/agent.state` (0600) with a minimal schema:
+ *   [{ tunnel_id, pid, api_key_hash, local_target, started_at }]
+ *
+ * We hash the API key before writing so a stolen state file doesn't
+ * leak credentials. `api_key_hash === null` identifies trial tunnels.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hashApiKey = hashApiKey;
+exports.readState = readState;
+exports.writeState = writeState;
+const crypto_1 = __importDefault(require("crypto"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const paths_1 = require("./paths");
+function hashApiKey(apiKey) {
+    return crypto_1.default.createHash('sha256').update(apiKey).digest('hex');
+}
+function readState() {
+    try {
+        const raw = fs_1.default.readFileSync((0, paths_1.getStatePath)(), 'utf8');
+        const parsed = JSON.parse(raw);
+        if (!Array.isArray(parsed))
+            return [];
+        return parsed.filter((entry) => entry &&
+            typeof entry.tunnel_id === 'string' &&
+            typeof entry.pid === 'number' &&
+            typeof entry.local_target === 'string' &&
+            typeof entry.started_at === 'string');
+    }
+    catch (err) {
+        // Corrupt or missing. Rename a corrupt file so we can investigate
+        // later and start fresh.
+        const statePath = (0, paths_1.getStatePath)();
+        if (err.code !== 'ENOENT') {
+            try {
+                fs_1.default.renameSync(statePath, `${statePath}.corrupted.${Date.now()}`);
+            }
+            catch {
+                // If we can't rename, just drop it.
+            }
+        }
+        return [];
+    }
+}
+/**
+ * Atomic write via tmpfile + rename. Guarantees readers never see a
+ * half-written file even if the agent crashes mid-write.
+ */
+function writeState(tunnels) {
+    const statePath = (0, paths_1.getStatePath)();
+    fs_1.default.mkdirSync(path_1.default.dirname(statePath), { recursive: true, mode: 0o700 });
+    const tmp = `${statePath}.${process.pid}.${Date.now()}.tmp`;
+    fs_1.default.writeFileSync(tmp, JSON.stringify(tunnels, null, 2), { mode: 0o600 });
+    fs_1.default.renameSync(tmp, statePath);
+}
+//# sourceMappingURL=state.js.map

package/dist/agent/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/agent/state.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;AAgBH,gCAEC;AAED,8BA0BC;AAMD,gCAMC;AAxDD,oDAA4B;AAC5B,4CAAoB;AACpB,gDAAwB;AACxB,mCAAuC;AAWvC,SAAgB,UAAU,CAAC,MAAc;IACvC,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAgB,SAAS;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,IAAA,oBAAY,GAAE,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,KAAK,EAA4B,EAAE,CAClC,KAAK;YACL,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAC7B,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;YACtC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CACvC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,yBAAyB;QACzB,MAAM,SAAS,GAAG,IAAA,oBAAY,GAAE,CAAC;QACjC,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,IAAI,CAAC;gBACH,YAAE,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,SAAS,cAAc,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU,CAAC,OAA0B;IACnD,MAAM,SAAS,GAAG,IAAA,oBAAY,GAAE,CAAC;IACjC,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAC5D,YAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,YAAE,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AAChC,CAAC"}

package/dist/agent/supervisor.d.ts

@@ -0,0 +1,116 @@
+/**
+ * Subprocess supervisor. Spawns one `hooklink connect` (authenticated)
+ * or `hooklink tunnel` (trial) child per tunnel, parses its `--json`
+ * event stream, and exposes a minimal imperative surface
+ * (`startTunnel`, `stopTunnel`, `getTunnel`, `listTunnels`) for the
+ * HTTP server to call.
+ *
+ * The supervisor is storage-less by design: agent.state persistence
+ * lives in state.ts so restart-time zombie cleanup has a single
+ * source of truth.
+ */
+import { ChildProcess } from 'child_process';
+import { EventEmitter } from 'events';
+import fs from 'fs';
+import { getTunnelLogPath } from './paths';
+export type TunnelState = 'starting' | 'live' | 'stopping' | 'stopped' | 'crashed';
+export interface TunnelInfo {
+    tunnel_id: string;
+    public_url: string | null;
+    local_target: string;
+    pid: number | null;
+    started_at: string;
+    state: TunnelState;
+    /** Identity of the plugin/CLI that requested the tunnel.
+     *  - `api_key_hash` for authenticated tunnels
+     *  - `owner_id` (the plugin's X-Hooklink-Owner-Id) for trial tunnels */
+    api_key_hash: string | null;
+    owner_id: string | null;
+    trial: boolean;
+    expires_at?: string;
+    session_id?: string;
+    limits?: {
+        max_requests: number;
+        max_bandwidth_bytes: number;
+        session_duration_seconds: number;
+    };
+    usage?: {
+        requests: number;
+        bytes: number;
+        remaining_seconds: number;
+    };
+    last_error?: {
+        code: string | number;
+        message: string;
+    };
+}
+export interface StartTunnelAuthenticated {
+    mode: 'authenticated';
+    tunnel_id: string;
+    keyword: string;
+    api_key: string;
+    api_key_hash: string;
+    local_target: string;
+    public_url: string;
+}
+export interface StartTunnelTrial {
+    mode: 'trial';
+    owner_id: string;
+    local_target: string;
+}
+export type StartTunnelOptions = StartTunnelAuthenticated | StartTunnelTrial;
+export interface SupervisorOptions {
+    /** Absolute path to the `hooklink` CLI JS entry (e.g. `dist/index.js`).
+     *  The supervisor always invokes it with `process.execPath` so we
+     *  never depend on a shebang + +x bit being preserved through
+     *  packaging, containers, or Windows filesystems. */
+    binaryPath: string;
+    /** Override the node binary. Defaults to `process.execPath`. Useful
+     *  when the service was installed against a specific node (e.g. the
+     *  bundled Node 20 under ~/.hooklink/node/). */
+    nodePath?: string;
+    /** Max seconds to wait for a tunnel_ready event on spawn. */
+    spawnTimeoutMs?: number;
+    /** Max tunnels allowed concurrently; protects the agent from runaway plugins. */
+    maxConcurrent?: number;
+}
+export declare class Supervisor extends EventEmitter {
+    private tunnels;
+    private binaryPath;
+    private nodePath;
+    private spawnTimeoutMs;
+    private maxConcurrent;
+    constructor(opts: SupervisorOptions);
+    /**
+     * Spawn the subprocess and resolve once the child emits
+     * `tunnel_ready` (or rejects on timeout / fatal / early exit).
+     */
+    startTunnel(opts: StartTunnelOptions): Promise<TunnelInfo>;
+    /** Resolve when the tunnel reaches `live`; reject on spawn timeout
+     *  or terminal state. */
+    private waitForReady;
+    private spawnChild;
+    private handleEventLine;
+    stopTunnel(tunnelId: string, graceMs?: number): Promise<boolean>;
+    private cleanupTunnelLog;
+    getTunnel(tunnelId: string): TunnelInfo | null;
+    listTunnels(filter?: (info: TunnelInfo) => boolean): TunnelInfo[];
+    getRecentRequests(tunnelId: string, limit?: number): InternalTunnel['recentRequests'];
+    shutdown(graceMs?: number): Promise<void>;
+    /** Test-only. Accessor used by zombie cleanup to know which PIDs are active. */
+    getTrackedPids(): number[];
+}
+interface InternalTunnel {
+    info: TunnelInfo;
+    child: ChildProcess;
+    logStream: fs.WriteStream;
+    recentRequests: Array<{
+        timestamp: string;
+        method: string;
+        path: string;
+        status: number;
+        ms: number;
+    }>;
+}
+export { getTunnelLogPath };
+//# sourceMappingURL=supervisor.d.ts.map

package/dist/agent/supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/agent/supervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAS,YAAY,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAiB,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE1D,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAEnF,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,WAAW,CAAC;IACnB;;4EAEwE;IACxE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IAEf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE;QACP,YAAY,EAAE,MAAM,CAAC;QACrB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,wBAAwB,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC;IAEvE,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,GAAG,gBAAgB,CAAC;AAE7E,MAAM,WAAW,iBAAiB;IAChC;;;yDAGqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB;;oDAEgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,UAAW,SAAQ,YAAY;IAC1C,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAS;gBAElB,IAAI,EAAE,iBAAiB;IASnC;;;OAGG;IACG,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC;IA+FhE;6BACyB;IACzB,OAAO,CAAC,YAAY;IAoCpB,OAAO,CAAC,UAAU;IA6BlB,OAAO,CAAC,eAAe;IAwGjB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,SAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAwBrE,OAAO,CAAC,gBAAgB;IAQxB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAK9C,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,GAAG,UAAU,EAAE;IAQjE,iBAAiB,CACf,QAAQ,EAAE,MAAM,EAChB,KAAK,SAAK,GACT,cAAc,CAAC,gBAAgB,CAAC;IAM7B,QAAQ,CAAC,OAAO,SAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9C,gFAAgF;IAChF,cAAc,IAAI,MAAM,EAAE;CAK3B;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC;IAC1B,cAAc,EAAE,KAAK,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,EAAE,EAAE,MAAM,CAAC;KACZ,CAAC,CAAC;CACJ;AAcD,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/agent/supervisor.js

@@ -0,0 +1,353 @@
+"use strict";
+/**
+ * Subprocess supervisor. Spawns one `hooklink connect` (authenticated)
+ * or `hooklink tunnel` (trial) child per tunnel, parses its `--json`
+ * event stream, and exposes a minimal imperative surface
+ * (`startTunnel`, `stopTunnel`, `getTunnel`, `listTunnels`) for the
+ * HTTP server to call.
+ *
+ * The supervisor is storage-less by design: agent.state persistence
+ * lives in state.ts so restart-time zombie cleanup has a single
+ * source of truth.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getTunnelLogPath = exports.Supervisor = void 0;
+const child_process_1 = require("child_process");
+const events_1 = require("events");
+const fs_1 = __importDefault(require("fs"));
+const readline_1 = __importDefault(require("readline"));
+const paths_1 = require("./paths");
+Object.defineProperty(exports, "getTunnelLogPath", { enumerable: true, get: function () { return paths_1.getTunnelLogPath; } });
+class Supervisor extends events_1.EventEmitter {
+    constructor(opts) {
+        super();
+        this.tunnels = new Map();
+        this.binaryPath = opts.binaryPath;
+        this.nodePath = opts.nodePath ?? process.execPath;
+        this.spawnTimeoutMs = opts.spawnTimeoutMs ?? 8000;
+        this.maxConcurrent = opts.maxConcurrent ?? 20;
+        fs_1.default.mkdirSync((0, paths_1.getTunnelsDir)(), { recursive: true, mode: 0o700 });
+    }
+    /**
+     * Spawn the subprocess and resolve once the child emits
+     * `tunnel_ready` (or rejects on timeout / fatal / early exit).
+     */
+    async startTunnel(opts) {
+        if (this.tunnels.size >= this.maxConcurrent) {
+            const err = new Error('too_many_local_tunnels');
+            err.code = 'too_many_local_tunnels';
+            throw err;
+        }
+        const { child, args, env } = this.spawnChild(opts);
+        const tunnelId = opts.mode === 'authenticated' ? opts.tunnel_id : `trial-pending-${child.pid}`;
+        const now = new Date().toISOString();
+        const info = {
+            info: {
+                tunnel_id: tunnelId,
+                public_url: opts.mode === 'authenticated' ? opts.public_url : null,
+                local_target: opts.local_target,
+                pid: child.pid ?? null,
+                started_at: now,
+                state: 'starting',
+                api_key_hash: opts.mode === 'authenticated' ? opts.api_key_hash : null,
+                owner_id: opts.mode === 'trial' ? opts.owner_id : null,
+                trial: opts.mode === 'trial',
+            },
+            child,
+            logStream: fs_1.default.createWriteStream((0, paths_1.getTunnelLogPath)(tunnelId), {
+                flags: 'a',
+                mode: 0o600,
+            }),
+            recentRequests: [],
+        };
+        this.tunnels.set(tunnelId, info);
+        // Wire stdout → readline → event parser, with the raw lines also
+        // appended to the per-tunnel log. We keep a reference to `info`
+        // rather than looking it up by id each time — trial tunnels are
+        // re-keyed by `trial_started.session_id`, so a captured id goes
+        // stale after the re-key.
+        const rl = readline_1.default.createInterface({ input: child.stdout });
+        rl.on('line', (line) => {
+            info.logStream.write(line + '\n');
+            this.handleEventLine(info, line);
+        });
+        child.stderr?.on('data', (chunk) => {
+            info.logStream.write(`stderr: ${chunk.toString()}`);
+        });
+        child.on('exit', (code, signal) => {
+            const entry = info;
+            if (!entry)
+                return;
+            if (signal === 'SIGTERM' || signal === 'SIGINT' || code === 0) {
+                entry.info.state = 'stopped';
+            }
+            else if (entry.info.state !== 'crashed') {
+                entry.info.state = 'crashed';
+            }
+            entry.info.pid = null;
+            entry.logStream.end();
+            this.emit('tunnel_exited', entry.info);
+        });
+        child.on('error', (err) => {
+            info.info.state = 'crashed';
+            info.info.last_error = {
+                code: 'spawn_error',
+                message: err.message,
+            };
+            this.emit('tunnel_exited', info.info);
+        });
+        // Wait for tunnel_ready (or rejection).
+        try {
+            await this.waitForReady(info);
+        }
+        catch (err) {
+            // Tear down on failure; don't leak subprocesses. Remove the
+            // entry from the map eagerly so callers observe the failure
+            // immediately, then SIGTERM in the background. Trial mode may
+            // have re-keyed the tunnel under its session id between spawn
+            // and timeout, so we use the live id.
+            const liveId = info.info.tunnel_id;
+            this.tunnels.delete(liveId);
+            try {
+                info.child.kill('SIGTERM');
+            }
+            catch {
+                // Child may already be gone.
+            }
+            throw err;
+        }
+        this.emit('tunnel_started', info.info, { args, env });
+        return { ...info.info };
+    }
+    /** Resolve when the tunnel reaches `live`; reject on spawn timeout
+     *  or terminal state. */
+    waitForReady(entry) {
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                const detail = entry.info.last_error?.message ||
+                    `No tunnel_ready within ${this.spawnTimeoutMs}ms`;
+                const err = new Error(detail);
+                err.code = 'spawn_timeout';
+                reject(err);
+            }, this.spawnTimeoutMs);
+            const onEvent = (id, event) => {
+                if (id !== entry.info.tunnel_id)
+                    return;
+                if (event === 'ready') {
+                    cleanup();
+                    resolve();
+                }
+                else if (event === 'fatal' || event === 'exited') {
+                    cleanup();
+                    const err = new Error(entry.info.last_error?.message || 'Subprocess terminated before ready');
+                    err.code = String(entry.info.last_error?.code || 'spawn_failed');
+                    reject(err);
+                }
+            };
+            const cleanup = () => {
+                clearTimeout(timer);
+                this.off('internal_event', onEvent);
+            };
+            this.on('internal_event', onEvent);
+        });
+    }
+    spawnChild(opts) {
+        let args;
+        let env = { ...process.env };
+        if (opts.mode === 'authenticated') {
+            args = ['connect', opts.keyword, '--target', opts.local_target, '--json'];
+            env = { ...env, HOOKLINK_API_KEY: opts.api_key };
+        }
+        else {
+            args = ['tunnel', opts.local_target, '--json'];
+            // Scrub any ambient API key so the trial subprocess genuinely
+            // hits the unauthenticated trial endpoint.
+            delete env.HOOKLINK_API_KEY;
+        }
+        // Always invoke as `node <entry> ...args` so we don't depend on a
+        // shebang or +x bit surviving packaging/filesystems.
+        const child = (0, child_process_1.spawn)(this.nodePath, [this.binaryPath, ...args], {
+            env,
+            stdio: ['ignore', 'pipe', 'pipe'],
+            detached: false,
+        });
+        return { child, args, env };
+    }
+    handleEventLine(entry, line) {
+        if (!line.trim().startsWith('{'))
+            return;
+        let event;
+        try {
+            event = JSON.parse(line);
+        }
+        catch {
+            return;
+        }
+        const name = event.event;
+        switch (name) {
+            case 'tunnel_ready': {
+                if (typeof event.public_url === 'string') {
+                    entry.info.public_url = event.public_url;
+                }
+                if (typeof event.local_target === 'string' && entry.info.local_target === '') {
+                    entry.info.local_target = event.local_target;
+                }
+                entry.info.state = 'live';
+                this.emit('internal_event', entry.info.tunnel_id, 'ready');
+                break;
+            }
+            case 'authenticated':
+                // Waiting on `tunnel_ready` for the live transition; this is
+                // just a breadcrumb.
+                break;
+            case 'trial_started': {
+                const sessionId = event.session_id;
+                if (sessionId) {
+                    entry.info.session_id = sessionId;
+                    // Re-key the tunnel under its real session id now that we have one.
+                    if (entry.info.tunnel_id !== sessionId) {
+                        this.tunnels.delete(entry.info.tunnel_id);
+                        entry.info.tunnel_id = sessionId;
+                        this.tunnels.set(sessionId, entry);
+                    }
+                }
+                if (typeof event.expires_at === 'string') {
+                    entry.info.expires_at = event.expires_at;
+                }
+                if (event.limits && typeof event.limits === 'object') {
+                    entry.info.limits = event.limits;
+                }
+                if (typeof event.public_url === 'string') {
+                    entry.info.public_url = event.public_url;
+                }
+                break;
+            }
+            case 'usage': {
+                const requests = typeof event.requests === 'number' ? event.requests : 0;
+                const bytes = typeof event.bytes === 'number' ? event.bytes : 0;
+                const remaining = typeof event.remaining_seconds === 'number'
+                    ? event.remaining_seconds
+                    : 0;
+                entry.info.usage = {
+                    requests,
+                    bytes,
+                    remaining_seconds: remaining,
+                };
+                break;
+            }
+            case 'request': {
+                const record = {
+                    timestamp: typeof event.timestamp === 'string'
+                        ? event.timestamp
+                        : new Date().toISOString(),
+                    method: String(event.method ?? ''),
+                    path: String(event.path ?? ''),
+                    status: typeof event.status === 'number' ? event.status : 0,
+                    ms: typeof event.ms === 'number' ? event.ms : 0,
+                };
+                entry.recentRequests.push(record);
+                if (entry.recentRequests.length > 100) {
+                    entry.recentRequests.shift();
+                }
+                break;
+            }
+            case 'trial_expired': {
+                entry.info.state = 'crashed';
+                entry.info.last_error = {
+                    code: 'trial_expired',
+                    message: `trial_expired_${event.reason ?? 'unknown'}`,
+                };
+                break;
+            }
+            case 'fatal': {
+                entry.info.state = 'crashed';
+                entry.info.last_error = {
+                    code: String(event.code ?? 'fatal'),
+                    message: String(event.message ?? 'fatal'),
+                };
+                this.emit('internal_event', entry.info.tunnel_id, 'fatal');
+                break;
+            }
+            case 'disconnected':
+                // Reconnect may follow; don't change state yet.
+                break;
+        }
+    }
+    async stopTunnel(tunnelId, graceMs = 5000) {
+        const entry = this.tunnels.get(tunnelId);
+        if (!entry)
+            return false;
+        entry.info.state = 'stopping';
+        const child = entry.child;
+        if (!child.pid || child.exitCode !== null) {
+            this.tunnels.delete(tunnelId);
+            return true;
+        }
+        child.kill('SIGTERM');
+        const exited = await waitForExit(child, graceMs);
+        if (!exited) {
+            try {
+                child.kill('SIGKILL');
+            }
+            catch {
+                // Already gone.
+            }
+        }
+        this.tunnels.delete(tunnelId);
+        this.emit('internal_event', tunnelId, 'exited');
+        this.cleanupTunnelLog(tunnelId);
+        return true;
+    }
+    cleanupTunnelLog(tunnelId) {
+        try {
+            fs_1.default.unlinkSync((0, paths_1.getTunnelLogPath)(tunnelId));
+        }
+        catch {
+            // Log may be retained for crashed tunnels; ignore.
+        }
+    }
+    getTunnel(tunnelId) {
+        const entry = this.tunnels.get(tunnelId);
+        return entry ? { ...entry.info } : null;
+    }
+    listTunnels(filter) {
+        const out = [];
+        for (const entry of this.tunnels.values()) {
+            if (!filter || filter(entry.info))
+                out.push({ ...entry.info });
+        }
+        return out;
+    }
+    getRecentRequests(tunnelId, limit = 20) {
+        const entry = this.tunnels.get(tunnelId);
+        if (!entry)
+            return [];
+        return entry.recentRequests.slice(-Math.min(limit, 100));
+    }
+    async shutdown(graceMs = 5000) {
+        const ids = Array.from(this.tunnels.keys());
+        await Promise.all(ids.map((id) => this.stopTunnel(id, graceMs)));
+    }
+    /** Test-only. Accessor used by zombie cleanup to know which PIDs are active. */
+    getTrackedPids() {
+        return Array.from(this.tunnels.values())
+            .map((e) => e.info.pid)
+            .filter((pid) => pid !== null);
+    }
+}
+exports.Supervisor = Supervisor;
+function waitForExit(child, ms) {
+    if (child.exitCode !== null)
+        return Promise.resolve(true);
+    return new Promise((resolve) => {
+        const timer = setTimeout(() => resolve(false), ms);
+        child.once('exit', () => {
+            clearTimeout(timer);
+            resolve(true);
+        });
+    });
+}
+//# sourceMappingURL=supervisor.js.map

package/dist/agent/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../src/agent/supervisor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;AAEH,iDAAoD;AACpD,mCAAsC;AACtC,4CAAoB;AACpB,wDAAgC;AAChC,mCAA0D;AA0bjD,iGA1be,wBAAgB,OA0bf;AA1XzB,MAAa,UAAW,SAAQ,qBAAY;IAO1C,YAAY,IAAuB;QACjC,KAAK,EAAE,CAAC;QAPF,YAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;QAQlD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QAClD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAK,CAAC;QACnD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;QAC9C,YAAE,CAAC,SAAS,CAAC,IAAA,qBAAa,GAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC/C,GAAgC,CAAC,IAAI,GAAG,wBAAwB,CAAC;YAClE,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,GAAG,EAAE,CAAC;QAChF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,IAAI,GAAmB;YAC3B,IAAI,EAAE;gBACJ,SAAS,EAAE,QAAQ;gBACnB,UAAU,EACR,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;gBACxD,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;gBACtB,UAAU,EAAE,GAAG;gBACf,KAAK,EAAE,UAAU;gBACjB,YAAY,EACV,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;gBAC1D,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;gBACtD,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO;aAC7B;YACD,KAAK;YACL,SAAS,EAAE,YAAE,CAAC,iBAAiB,CAAC,IAAA,wBAAgB,EAAC,QAAQ,CAAC,EAAE;gBAC1D,KAAK,EAAE,GAAG;gBACV,IAAI,EAAE,KAAK;aACZ,CAAC;YACF,cAAc,EAAE,EAAE;SACnB,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAEjC,iEAAiE;QACjE,gEAAgE;QAChE,gEAAgE;QAChE,gEAAgE;QAChE,0BAA0B;QAC1B,MAAM,EAAE,GAAG,kBAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAO,EAAE,CAAC,CAAC;QAC9D,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC9D,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YAC/B,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YAC/B,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;YACtB,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG;gBACrB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,wCAAwC;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4DAA4D;YAC5D,4DAA4D;YAC5D,8DAA8D;YAC9D,8DAA8D;YAC9D,sCAAsC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED;6BACyB;IACjB,YAAY,CAAC,KAAqB;QACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO;oBAC9B,0BAA0B,IAAI,CAAC,cAAc,IAAI,CAAC;gBACpD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC7B,GAAgC,CAAC,IAAI,GAAG,eAAe,CAAC;gBACzD,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAExB,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,KAAa,EAAE,EAAE;gBAC5C,IAAI,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS;oBAAE,OAAO;gBACxC,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;oBACtB,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACnD,OAAO,EAAE,CAAC;oBACV,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,IAAI,oCAAoC,CACvE,CAAC;oBACD,GAAgC,CAAC,IAAI,GAAG,MAAM,CAC7C,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,IAAI,cAAc,CAC9C,CAAC;oBACF,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;YACtC,CAAC,CAAC;YACF,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,IAAwB;QAKzC,IAAI,IAAc,CAAC;QACnB,IAAI,GAAG,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAEhD,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAClC,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC1E,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC/C,8DAA8D;YAC9D,2CAA2C;YAC3C,OAAO,GAAG,CAAC,gBAAgB,CAAC;QAC9B,CAAC;QAED,kEAAkE;QAClE,qDAAqD;QACrD,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE;YAC7D,GAAG;YACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC9B,CAAC;IAEO,eAAe,CAAC,KAAqB,EAAE,IAAY;QACzD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QACzC,IAAI,KAA8B,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,KAA2B,CAAC;QAC/C,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACzC,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;gBAC3C,CAAC;gBACD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;oBAC7E,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;gBAC/C,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC3D,MAAM;YACR,CAAC;YACD,KAAK,eAAe;gBAClB,6DAA6D;gBAC7D,qBAAqB;gBACrB,MAAM;YACR,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,SAAS,GAAG,KAAK,CAAC,UAAgC,CAAC;gBACzD,IAAI,SAAS,EAAE,CAAC;oBACd,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;oBAClC,oEAAoE;oBACpE,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;wBACvC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAC1C,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;wBACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;gBACD,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACzC,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;gBAC3C,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACrD,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAA8B,CAAC;gBAC3D,CAAC;gBACD,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACzC,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;gBAC3C,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,QAAQ,GACZ,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChE,MAAM,SAAS,GACb,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;oBACzC,CAAC,CAAC,KAAK,CAAC,iBAAiB;oBACzB,CAAC,CAAC,CAAC,CAAC;gBACR,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG;oBACjB,QAAQ;oBACR,KAAK;oBACL,iBAAiB,EAAE,SAAS;iBAC7B,CAAC;gBACF,MAAM;YACR,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,MAAM,GAAG;oBACb,SAAS,EACP,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;wBACjC,CAAC,CAAC,KAAK,CAAC,SAAS;wBACjB,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC9B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;oBAClC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC9B,MAAM,EACJ,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBACrD,EAAE,EAAE,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;iBAChD,CAAC;gBACF,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBACtC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;gBAC/B,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG;oBACtB,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,iBAAiB,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE;iBACtD,CAAC;gBACF,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG;oBACtB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC;oBACnC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC;iBAC1C,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC3D,MAAM;YACR,CAAC;YACD,KAAK,cAAc;gBACjB,gDAAgD;gBAChD,MAAM;QACV,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,OAAO,GAAG,IAAK;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB,CAAC,QAAgB;QACvC,IAAI,CAAC;YACH,YAAE,CAAC,UAAU,CAAC,IAAA,wBAAgB,EAAC,QAAQ,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,WAAW,CAAC,MAAsC;QAChD,MAAM,GAAG,GAAiB,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,iBAAiB,CACf,QAAgB,EAChB,KAAK,GAAG,EAAE;QAEV,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAK;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,gFAAgF;IAChF,cAAc;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;aACtB,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IAClD,CAAC;CACF;AA/VD,gCA+VC;AAeD,SAAS,WAAW,CAAC,KAAmB,EAAE,EAAU;IAClD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/agent/zombie-cleanup.d.ts

@@ -0,0 +1,20 @@
+/**
+ * On agent startup, reap any subprocesses left behind by a previous
+ * agent run. We read `agent.state` for PIDs we know about; for a
+ * belt-and-braces pass we also scan `ps` output for processes whose
+ * argv looks like one of ours.
+ *
+ * This is best-effort: failures to kill an orphan don't stop startup.
+ */
+import { PersistedTunnel } from './state';
+export interface CleanupResult {
+    reapedFromState: number[];
+    reapedFromScan: number[];
+}
+export declare function cleanupZombies(cliEntryAbs: string): CleanupResult;
+declare function scanForHooklinkChildren(cliEntryAbs: string): number[];
+export declare const _internal: {
+    scanForHooklinkChildren: typeof scanForHooklinkChildren;
+};
+export type { PersistedTunnel };
+//# sourceMappingURL=zombie-cleanup.d.ts.map

package/dist/agent/zombie-cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zombie-cleanup.d.ts","sourceRoot":"","sources":["../../src/agent/zombie-cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAyB,eAAe,EAAE,MAAM,SAAS,CAAC;AAEjE,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAMjE;AAqBD,iBAAS,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAK9D;AAgED,eAAO,MAAM,SAAS;;CAA8B,CAAC;AAGrD,YAAY,EAAE,eAAe,EAAE,CAAC"}