@interactive-inc/claude-funnel 0.52.0 → 0.53.0

package/dist/{settings-store-D2XSXTyt.js → gateway-base-url-ssk_He5G.js}

@@ -183,4 +183,17 @@ var FunnelSettingsStore = class extends FunnelSettingsReader {
 	}
 };
 //#endregion
-export { resolveFunnelDir as a, channelConfigSchema as c, settingsSchema as d, connectorConfigSchema as f, SETTINGS_PATH as i, channelDeliveryModeSchema as l, FUNNEL_DIR as n, resolveFunnelPort as o, NodeFunnelIdGenerator as p, FunnelSettingsStore as r, SETTINGS_VERSION as s, DEFAULT_GATEWAY_PORT as t, profileConfigSchema as u };
+//#region lib/gateway/gateway-base-url.ts
+/**
+* The HTTP base URL of a gateway daemon on the loopback interface. The daemon
+* always binds 127.0.0.1 for its management API (only the WS `/ws` endpoint is
+* ever exposed off-box), so every in-process HTTP client — publisher, listeners
+* client, MCP channel server — talks to it here. Centralizing the construction
+* keeps the host/port shape in one place instead of re-spelling
+* `http://127.0.0.1:${port}` at each call site.
+*/
+function gatewayLoopbackUrl(port) {
+	return `http://127.0.0.1:${port}`;
+}
+//#endregion
+export { SETTINGS_PATH as a, SETTINGS_VERSION as c, profileConfigSchema as d, settingsSchema as f, FunnelSettingsStore as i, channelConfigSchema as l, NodeFunnelIdGenerator as m, DEFAULT_GATEWAY_PORT as n, resolveFunnelDir as o, connectorConfigSchema as p, FUNNEL_DIR as r, resolveFunnelPort as s, gatewayLoopbackUrl as t, channelDeliveryModeSchema as u };

package/dist/gateway.d.ts

@@ -1,3 +1,3 @@
 import { _ as connectorConnectionEventSchema, a as ConnectorConnectionStatus, c as ConnectorProcessedQuery, d as ConnectorRawEvent, f as ConnectorRawQuery, g as StoredRawEvent, h as StoredProcessedEvent, i as ConnectorConnectionRecord, l as ConnectorProcessedRecord, m as StoredConnectionEvent, n as ConnectorConnectionEvent, o as ConnectorDiagnosticLog, p as ConnectorRawRecord, r as ConnectorConnectionQuery, s as ConnectorProcessedEvent, t as CONNECTOR_CONNECTION_STATUSES, u as ConnectorQuery, v as connectorProcessedEventSchema, y as connectorRawEventSchema } from "./connector-diagnostic-log-yTOojKUR.js";
-import { $ as FunnelGatewayToken, G as SqliteFunnelEventLog, H as MemoryConnectorDiagnosticLog, J as PublishResponse, K as FunnelChannelPublisher, Q as DEFAULT_GATEWAY_TOKEN_PATH, U as SqliteConnectorDiagnosticLog, W as MemoryFunnelEventLog, X as publishRequestSchema, Y as PublishResult, Z as publishResponseSchema, at as Env, ct as FunnelListenerSupervisor, dt as FunnelBroadcaster, et as FunnelGatewayServer, ft as ReplayableEvent, it as funnelEventSchema, lt as BroadcastEvent, nt as FunnelEventLog, ot as GatewayEmitInput, q as PublishRequest, rt as FunnelEventRecord, st as GatewayRouteDeps, t as GatewayApp, tt as FunnelEvent, ut as BroadcastSubscriber } from "./index-NFs2jzCa.js";
-export { BroadcastEvent, BroadcastSubscriber, CONNECTOR_CONNECTION_STATUSES, ConnectorConnectionEvent, ConnectorConnectionQuery, ConnectorConnectionRecord, ConnectorConnectionStatus, ConnectorDiagnosticLog, ConnectorProcessedEvent, ConnectorProcessedQuery, ConnectorProcessedRecord, ConnectorQuery, ConnectorRawEvent, ConnectorRawQuery, ConnectorRawRecord, DEFAULT_GATEWAY_TOKEN_PATH, FunnelBroadcaster, FunnelChannelPublisher, FunnelEvent, FunnelEventLog, FunnelEventRecord, FunnelGatewayServer, FunnelGatewayToken, FunnelListenerSupervisor, type GatewayApp, type GatewayEmitInput, type GatewayRouteDeps, type Env as GatewayServerEnv, MemoryConnectorDiagnosticLog, MemoryFunnelEventLog, PublishRequest, PublishResponse, PublishResult, ReplayableEvent, SqliteConnectorDiagnosticLog, SqliteFunnelEventLog, StoredConnectionEvent, StoredProcessedEvent, StoredRawEvent, connectorConnectionEventSchema, connectorProcessedEventSchema, connectorRawEventSchema, funnelEventSchema, publishRequestSchema, publishResponseSchema };
+import { $ as DEFAULT_GATEWAY_TOKEN_PATH, G as MemoryFunnelEventLog, J as PublishRequest, K as SqliteFunnelEventLog, Q as publishResponseSchema, U as MemoryConnectorDiagnosticLog, W as SqliteConnectorDiagnosticLog, X as PublishResult, Y as PublishResponse, Z as publishRequestSchema, _t as FunnelBroadcaster, at as FunnelGatewayServer, ct as FunnelEventLog, dt as Env, et as FunnelGatewayToken, ft as GatewayEmitInput, gt as BroadcastSubscriber, ht as BroadcastEvent, it as channelWsUrl, lt as FunnelEventRecord, mt as FunnelListenerSupervisor, nt as ChannelWsUrlInput, ot as GatewayEventStore, pt as GatewayRouteDeps, q as FunnelChannelPublisher, rt as channelWsProtocols, st as FunnelEvent, t as GatewayApp, tt as gatewayLoopbackUrl, ut as funnelEventSchema, vt as ReplayableEvent } from "./index-DF5VmCPJ.js";
+export { BroadcastEvent, BroadcastSubscriber, CONNECTOR_CONNECTION_STATUSES, ChannelWsUrlInput, ConnectorConnectionEvent, ConnectorConnectionQuery, ConnectorConnectionRecord, ConnectorConnectionStatus, ConnectorDiagnosticLog, ConnectorProcessedEvent, ConnectorProcessedQuery, ConnectorProcessedRecord, ConnectorQuery, ConnectorRawEvent, ConnectorRawQuery, ConnectorRawRecord, DEFAULT_GATEWAY_TOKEN_PATH, FunnelBroadcaster, FunnelChannelPublisher, FunnelEvent, FunnelEventLog, FunnelEventRecord, FunnelGatewayServer, FunnelGatewayToken, FunnelListenerSupervisor, type GatewayApp, type GatewayEmitInput, GatewayEventStore, type GatewayRouteDeps, type Env as GatewayServerEnv, MemoryConnectorDiagnosticLog, MemoryFunnelEventLog, PublishRequest, PublishResponse, PublishResult, ReplayableEvent, SqliteConnectorDiagnosticLog, SqliteFunnelEventLog, StoredConnectionEvent, StoredProcessedEvent, StoredRawEvent, channelWsProtocols, channelWsUrl, connectorConnectionEventSchema, connectorProcessedEventSchema, connectorRawEventSchema, funnelEventSchema, gatewayLoopbackUrl, publishRequestSchema, publishResponseSchema };

package/dist/gateway.js

@@ -1,2 +1,3 @@
-import { _ as FunnelBroadcaster, a as connectorConnectionEventSchema, b as publishResponseSchema, c as MemoryFunnelEventLog, d as FunnelGatewayServer, g as funnelEventSchema, h as FunnelEventLog, i as ConnectorDiagnosticLog, l as DEFAULT_GATEWAY_TOKEN_PATH, m as SqliteFunnelEventLog, n as SqliteConnectorDiagnosticLog, o as connectorProcessedEventSchema, p as FunnelListenerSupervisor, r as CONNECTOR_CONNECTION_STATUSES, s as connectorRawEventSchema, t as MemoryConnectorDiagnosticLog, u as FunnelGatewayToken, v as FunnelChannelPublisher, y as publishRequestSchema } from "./memory-connector-diagnostic-log-CrW1ltLM.js";
-export { CONNECTOR_CONNECTION_STATUSES, ConnectorDiagnosticLog, DEFAULT_GATEWAY_TOKEN_PATH, FunnelBroadcaster, FunnelChannelPublisher, FunnelEventLog, FunnelGatewayServer, FunnelGatewayToken, FunnelListenerSupervisor, MemoryConnectorDiagnosticLog, MemoryFunnelEventLog, SqliteConnectorDiagnosticLog, SqliteFunnelEventLog, connectorConnectionEventSchema, connectorProcessedEventSchema, connectorRawEventSchema, funnelEventSchema, publishRequestSchema, publishResponseSchema };
+import { t as gatewayLoopbackUrl } from "./gateway-base-url-ssk_He5G.js";
+import { S as publishResponseSchema, _ as FunnelEventLog, a as connectorConnectionEventSchema, b as FunnelChannelPublisher, c as MemoryFunnelEventLog, d as DEFAULT_GATEWAY_TOKEN_PATH, f as FunnelGatewayToken, g as SqliteFunnelEventLog, h as FunnelListenerSupervisor, i as ConnectorDiagnosticLog, l as channelWsProtocols, n as SqliteConnectorDiagnosticLog, o as connectorProcessedEventSchema, p as FunnelGatewayServer, r as CONNECTOR_CONNECTION_STATUSES, s as connectorRawEventSchema, t as MemoryConnectorDiagnosticLog, u as channelWsUrl, v as funnelEventSchema, x as publishRequestSchema, y as FunnelBroadcaster } from "./memory-connector-diagnostic-log-COUWCsT_.js";
+export { CONNECTOR_CONNECTION_STATUSES, ConnectorDiagnosticLog, DEFAULT_GATEWAY_TOKEN_PATH, FunnelBroadcaster, FunnelChannelPublisher, FunnelEventLog, FunnelGatewayServer, FunnelGatewayToken, FunnelListenerSupervisor, MemoryConnectorDiagnosticLog, MemoryFunnelEventLog, SqliteConnectorDiagnosticLog, SqliteFunnelEventLog, channelWsProtocols, channelWsUrl, connectorConnectionEventSchema, connectorProcessedEventSchema, connectorRawEventSchema, funnelEventSchema, gatewayLoopbackUrl, publishRequestSchema, publishResponseSchema };

package/dist/{index-NFs2jzCa.d.ts → index-DF5VmCPJ.d.ts}

@@ -1,10 +1,10 @@
 import { n as FunnelIdGenerator, s as Settings, t as FunnelSettingsReader } from "./settings-reader-BSU6JyvM.js";
-import { n as FunnelClaude, t as FileProcessGuard } from "./file-process-guard-BgrVHe9I.js";
+import { n as FunnelClaude, t as FileProcessGuard } from "./file-process-guard-DMeLB6Zd.js";
 import { S as FunnelLogger, b as FunnelConnectorListener, c as ConnectorProcessedQuery, f as ConnectorRawQuery, g as StoredRawEvent, h as StoredProcessedEvent, i as ConnectorConnectionRecord, l as ConnectorProcessedRecord, m as StoredConnectionEvent, o as ConnectorDiagnosticLog, p as ConnectorRawRecord, r as ConnectorConnectionQuery } from "./connector-diagnostic-log-yTOojKUR.js";
 import { a as RunOptions, i as ProcessSnapshot, n as DetachOptions, o as RunResult, r as FunnelProcessRunner, t as AttachOptions } from "./process-runner-DfniuWVU.js";
 import { n as FunnelFileSystem, t as FileStat } from "./file-system-BeOKXjlV.js";
 import { t as FunnelProfiles } from "./profiles-f0mNmEyP.js";
-import { a as ChannelConnectorView, d as ConnectorConfig, i as FunnelTokenPrompter, l as ScheduleListenerOptions, m as FunnelLocalConfig, n as FunnelLocalConfigSync, o as FunnelChannels, s as FunnelClock, u as SlackListenerOptions } from "./local-config-sync-BdsrDZOu.js";
+import { a as ChannelConnectorView, d as ConnectorConfig, i as FunnelTokenPrompter, l as ScheduleListenerOptions, m as FunnelLocalConfig, n as FunnelLocalConfigSync, o as FunnelChannels, s as FunnelClock, u as SlackListenerOptions } from "./local-config-sync-Cq39mT6p.js";
 import { hc } from "hono/client";
 import { z } from "zod";
 import * as _$hono_factory0 from "hono/factory";
@@ -306,12 +306,26 @@ declare abstract class FunnelEventLog {
 }
 //#endregion
 //#region lib/gateway/gateway-server.d.ts
-type Deps$5 = {
+/**
+ * Where the gateway's durable replay log lives. The two ways to specify it are
+ * mutually exclusive — modeled as a union so you can't pass both (the old shape
+ * silently ignored `dbPath` when `eventLog` was also given).
+ *
+ * - omit both → SQLite at the default path (`<os.tmpdir()>/funnel/events.db`)
+ * - `dbPath` → SQLite at a custom path (parent dir created on demand)
+ * - `eventLog` → bring your own `FunnelEventLog` (e.g. `MemoryFunnelEventLog`)
+ */
+type GatewayEventStore = {
+  dbPath?: string;
+  eventLog?: undefined;
+} | {
+  dbPath?: undefined;
+  eventLog: FunnelEventLog;
+};
+type Deps$5 = GatewayEventStore & {
   channels: FunnelChannels;
   port?: number; /** Bind address for `Bun.serve`. Defaults to `127.0.0.1` (loopback only). Set to `0.0.0.0` to expose on the network. */
-  hostname?: string; /** SQLite event store file path. Parent directory is created on demand. Defaults to `<os.tmpdir()>/funnel/events.db`. Ignored when `eventLog` is supplied. */
-  dbPath?: string; /** Durable replay log. Defaults to a `SqliteFunnelEventLog` at `dbPath`. Inject a `MemoryFunnelEventLog` (or any `FunnelEventLog`) to swap or disable persistence. */
-  eventLog?: FunnelEventLog;
+  hostname?: string;
   process?: FunnelProcessRunner;
   clock?: FunnelClock;
   logger?: FunnelLogger; /** Host hook for surfacing internal exceptions (broadcaster / supervisor). Defaults to no-op. */
@@ -320,6 +334,13 @@ type Deps$5 = {
   dir?: string;
   killCompetingSlack?: boolean; /** Bearer token required for `/listeners*`, `/status`, and `/ws`. Empty string disables auth (tests only). */
   token?: string;
+  /**
+   * Permit binding a non-loopback hostname without a token. Off by default:
+   * `start()` throws when `hostname` is reachable off-box and `token` is empty,
+   * because every privileged endpoint would then be open to the network. Set
+   * this only when you've deliberately fronted the gateway with your own auth.
+   */
+  allowInsecureHost?: boolean;
   /**
    * Additional hono app mounted before the built-in gateway routes.
    * Use to embed host-specific endpoints (e.g. an MCP route, custom `/api/*`).
@@ -358,6 +379,7 @@ declare class FunnelGatewayServer {
   private readonly dir;
   private readonly killCompetingSlack;
   private readonly token;
+  private readonly allowInsecureHost;
   private readonly broadcaster;
   private readonly eventLog;
   private readonly supervisor;
@@ -419,6 +441,51 @@ declare class FunnelGatewayServer {
   private lookupConnectorId;
 }
 //#endregion
+//#region lib/gateway/channel-ws-url.d.ts
+/**
+ * Builds the WebSocket URL a client uses to subscribe to a gateway channel.
+ *
+ * The gateway's `/ws` upgrade handler reads three query params — `channel`
+ * (required), `id` (the subscriber id for targeted delivery), and `since`
+ * (replay offset). Forgetting `channel=` silently drops the subscription
+ * (the broadcaster never matches the client), which has caused outages when
+ * callers hand-built the URL with string concatenation. This builder makes
+ * `channel` a required field, so the mistake becomes a compile error.
+ *
+ * `subscriberId` enables targeted delivery: events carrying `meta.target=<id>`
+ * reach only this client. Omit it to receive the channel's fanout.
+ *
+ * Pair with `channelWsProtocols()` to authenticate the upgrade when the
+ * gateway requires a token.
+ */
+type ChannelWsUrlInput = {
+  /** Base WS endpoint, e.g. `ws://localhost:9743/ws`. Existing query is preserved. */base: string; /** Channel name to subscribe to. Required — the broadcaster filters by it. */
+  channel: string; /** Opaque subscriber id for targeted delivery (`meta.target=<id>`). Omit for fanout. */
+  subscriberId?: string; /** Replay from this event offset (inclusive). Omit to receive only new events. */
+  since?: number;
+};
+declare function channelWsUrl(input: ChannelWsUrlInput): string;
+/**
+ * Builds the `Sec-WebSocket-Protocol` values that authenticate a gateway WS
+ * upgrade. Browser `WebSocket` cannot set an `Authorization` header, so the
+ * gateway also accepts the token as a `funnel.token.<token>` subprotocol.
+ * Returns an empty array when no token is given (auth disabled / loopback).
+ *
+ * Usage: `new WebSocket(channelWsUrl({ base, channel }), channelWsProtocols(token))`
+ */
+declare function channelWsProtocols(token?: string | null): string[];
+//#endregion
+//#region lib/gateway/gateway-base-url.d.ts
+/**
+ * The HTTP base URL of a gateway daemon on the loopback interface. The daemon
+ * always binds 127.0.0.1 for its management API (only the WS `/ws` endpoint is
+ * ever exposed off-box), so every in-process HTTP client — publisher, listeners
+ * client, MCP channel server — talks to it here. Centralizing the construction
+ * keeps the host/port shape in one place instead of re-spelling
+ * `http://127.0.0.1:${port}` at each call site.
+ */
+declare function gatewayLoopbackUrl(port: number): string;
+//#endregion
 //#region lib/gateway/gateway-token.d.ts
 type Deps$4 = {
   fs?: FunnelFileSystem;
@@ -832,6 +899,18 @@ type Props$5 = {
    */
   tokenPrompter?: FunnelTokenPrompter;
 };
+/**
+ * Options for `Funnel.gatewayServer()`. The event store is a union (`dbPath`
+ * xor `eventLog`) so the two storage modes can't be mixed.
+ */
+type GatewayServerOptions = GatewayEventStore & {
+  port?: number;
+  hostname?: string;
+  killCompetingSlack?: boolean;
+  token?: string; /** Permit a non-loopback `hostname` without a token. See FunnelGatewayServer. */
+  allowInsecureHost?: boolean;
+  extraRoutes?: Hono<Env$1>;
+};
 /**
  * Facade that wires every funnel facet together and exposes the public surface.
  *
@@ -882,15 +961,7 @@ declare class Funnel {
    * this returns a class that runs `Bun.serve` + listeners inside the current process —
    * useful for tests, embedding, or custom hosts.
    */
-  gatewayServer(options?: {
-    port?: number;
-    hostname?: string;
-    dbPath?: string;
-    killCompetingSlack?: boolean;
-    token?: string;
-    eventLog?: FunnelEventLog;
-    extraRoutes?: Hono<Env$1>;
-  }): FunnelGatewayServer;
+  gatewayServer(options?: GatewayServerOptions): FunnelGatewayServer;
   /**
    * Create a ProcessGuard scoped to this Funnel's home directory.
    * Useful for hosts that need to check or manage singleton PID files
@@ -1252,7 +1323,7 @@ declare const routes: _$hono_hono_base0.HonoBase<Env, {
         connectors: {
           id: string;
           name: string;
-          type: "schedule" | "slack" | "discord" | "gh";
+          type: "discord" | "schedule" | "slack" | "gh";
         }[];
       }[];
       outputFormat: "json";
@@ -3407,4 +3478,4 @@ declare function buildGatewayRoutes(): _$hono_hono_base0.HonoBase<Env$1, {
   };
 }, "/", "/channels/:channel/publish">;
 //#endregion
-export { FunnelGatewayToken as $, FUNNEL_DIR as A, ListenerOpResult as B, ProcessListStub as C, MockFunnelSettingsReader as D, NodeFunnelFileSystem as E, Funnel as F, SqliteFunnelEventLog as G, MemoryConnectorDiagnosticLog as H, FunnelDebugReport as I, PublishResponse as J, FunnelChannelPublisher as K, FunnelListenersClient as L, SETTINGS_PATH as M, resolveFunnelDir as N, createSettings as O, resolveFunnelPort as P, DEFAULT_GATEWAY_TOKEN_PATH as Q, ListListenersResult as R, MemoryProcessSyncHandler as S, MemoryFunnelFileSystem as T, SqliteConnectorDiagnosticLog as U, FunnelGateway as V, MemoryFunnelEventLog as W, publishRequestSchema as X, PublishResult as Y, publishResponseSchema as Z, AliveStub as _, toRequest as a, Env$1 as at, MemoryProcessHandler as b, ConnectorDiagnosticSqlReader as c, FunnelListenerSupervisor as ct, MemoryFunnelClock as d, FunnelBroadcaster as dt, FunnelGatewayServer as et, NodeFunnelClock as f, ReplayableEvent as ft, NodeFunnelLogger as g, MemoryFunnelLogger as h, queryToCliArgs as i, funnelEventSchema as it, FunnelSettingsStore as j, DEFAULT_GATEWAY_PORT as k, MemoryFunnelIdGenerator as l, BroadcastEvent as lt, LogEntry as m, CliApp as n, FunnelEventLog as nt, Env as o, GatewayEmitInput as ot, NoopFunnelLogger as p, OnFunnelError as pt, PublishRequest as q, routes as r, FunnelEventRecord as rt, factory as s, GatewayRouteDeps as st, GatewayApp as t, FunnelEvent as tt, NodeFunnelIdGenerator as u, BroadcastSubscriber as ut, MemoryFunnelProcessRunner as v, NodeFunnelProcessRunner as w, MemoryProcessResponse as x, MemoryProcessCall as y, ListenerEntry as z };
+export { DEFAULT_GATEWAY_TOKEN_PATH as $, FUNNEL_DIR as A, ListenerEntry as B, ProcessListStub as C, MockFunnelSettingsReader as D, NodeFunnelFileSystem as E, Funnel as F, MemoryFunnelEventLog as G, FunnelGateway as H, GatewayServerOptions as I, PublishRequest as J, SqliteFunnelEventLog as K, FunnelDebugReport as L, SETTINGS_PATH as M, resolveFunnelDir as N, createSettings as O, resolveFunnelPort as P, publishResponseSchema as Q, FunnelListenersClient as R, MemoryProcessSyncHandler as S, MemoryFunnelFileSystem as T, MemoryConnectorDiagnosticLog as U, ListenerOpResult as V, SqliteConnectorDiagnosticLog as W, PublishResult as X, PublishResponse as Y, publishRequestSchema as Z, AliveStub as _, FunnelBroadcaster as _t, toRequest as a, FunnelGatewayServer as at, MemoryProcessHandler as b, ConnectorDiagnosticSqlReader as c, FunnelEventLog as ct, MemoryFunnelClock as d, Env$1 as dt, FunnelGatewayToken as et, NodeFunnelClock as f, GatewayEmitInput as ft, NodeFunnelLogger as g, BroadcastSubscriber as gt, MemoryFunnelLogger as h, BroadcastEvent as ht, queryToCliArgs as i, channelWsUrl as it, FunnelSettingsStore as j, DEFAULT_GATEWAY_PORT as k, MemoryFunnelIdGenerator as l, FunnelEventRecord as lt, LogEntry as m, FunnelListenerSupervisor as mt, CliApp as n, ChannelWsUrlInput as nt, Env as o, GatewayEventStore as ot, NoopFunnelLogger as p, GatewayRouteDeps as pt, FunnelChannelPublisher as q, routes as r, channelWsProtocols as rt, factory as s, FunnelEvent as st, GatewayApp as t, gatewayLoopbackUrl as tt, NodeFunnelIdGenerator as u, funnelEventSchema as ut, MemoryFunnelProcessRunner as v, ReplayableEvent as vt, NodeFunnelProcessRunner as w, MemoryProcessResponse as x, MemoryProcessCall as y, OnFunnelError as yt, ListListenersResult as z };

package/dist/index.d.ts

@@ -2,10 +2,10 @@ import { a as ProfileConfig, c as channelConfigSchema, d as settingsSchema, i as
 import { S as FunnelLogger, _ as connectorConnectionEventSchema, a as ConnectorConnectionStatus, b as FunnelConnectorListener, c as ConnectorProcessedQuery, d as ConnectorRawEvent, f as ConnectorRawQuery, g as StoredRawEvent, h as StoredProcessedEvent, i as ConnectorConnectionRecord, l as ConnectorProcessedRecord, m as StoredConnectionEvent, n as ConnectorConnectionEvent, o as ConnectorDiagnosticLog, p as ConnectorRawRecord, r as ConnectorConnectionQuery, s as ConnectorProcessedEvent, t as CONNECTOR_CONNECTION_STATUSES, u as ConnectorQuery, v as connectorProcessedEventSchema, x as NotifyFn, y as connectorRawEventSchema } from "./connector-diagnostic-log-yTOojKUR.js";
 import { a as RunOptions, i as ProcessSnapshot, n as DetachOptions, o as RunResult, r as FunnelProcessRunner, t as AttachOptions } from "./process-runner-DfniuWVU.js";
 import { n as FunnelFileSystem, t as FileStat } from "./file-system-BeOKXjlV.js";
-import { a as ChannelConnectorView, c as FunnelConnectorFactory, d as ConnectorConfig, f as ConnectorType, l as ScheduleListenerOptions, o as FunnelChannels, p as connectorConfigSchema, s as FunnelClock, u as SlackListenerOptions } from "./local-config-sync-BdsrDZOu.js";
+import { a as ChannelConnectorView, c as FunnelConnectorFactory, d as ConnectorConfig, f as ConnectorType, l as ScheduleListenerOptions, o as FunnelChannels, p as connectorConfigSchema, s as FunnelClock, u as SlackListenerOptions } from "./local-config-sync-Cq39mT6p.js";
 import { a as ScheduleEntry, c as scheduleEntrySchema, i as ScheduleConnectorConfig, o as scheduleCatchupPolicySchema, r as ScheduleCatchupPolicy, s as scheduleConnectorSchema } from "./schedule-listener-CUyUFFR1.js";
 import { a as slackConnectorSchema, c as SlackProcessedEmit, d as SlackSkipReason, i as SlackConnectorConfig, l as SlackProcessedSkip, o as FunnelSlackEventProcessor, s as SlackProcessed, u as SlackRawEvent } from "./slack-listener-Bv5xI9gC.js";
 import { n as discordConnectorSchema, t as DiscordConnectorConfig } from "./discord-connector-schema-R0Uu-3ns.js";
 import { n as ghConnectorSchema, t as GhConnectorConfig } from "./gh-connector-schema-eoTtHbY6.js";
-import { $ as FunnelGatewayToken, A as FUNNEL_DIR, B as ListenerOpResult, C as ProcessListStub, D as MockFunnelSettingsReader, E as NodeFunnelFileSystem, F as Funnel, G as SqliteFunnelEventLog, H as MemoryConnectorDiagnosticLog, I as FunnelDebugReport, J as PublishResponse, K as FunnelChannelPublisher, L as FunnelListenersClient, M as SETTINGS_PATH, N as resolveFunnelDir, O as createSettings, P as resolveFunnelPort, Q as DEFAULT_GATEWAY_TOKEN_PATH, R as ListListenersResult, S as MemoryProcessSyncHandler, T as MemoryFunnelFileSystem, U as SqliteConnectorDiagnosticLog, V as FunnelGateway, W as MemoryFunnelEventLog, X as publishRequestSchema, Y as PublishResult, Z as publishResponseSchema, _ as AliveStub, a as toRequest, at as Env$1, b as MemoryProcessHandler, c as ConnectorDiagnosticSqlReader, ct as FunnelListenerSupervisor, d as MemoryFunnelClock, dt as FunnelBroadcaster, et as FunnelGatewayServer, f as NodeFunnelClock, ft as ReplayableEvent, g as NodeFunnelLogger, h as MemoryFunnelLogger, i as queryToCliArgs, it as funnelEventSchema, j as FunnelSettingsStore, k as DEFAULT_GATEWAY_PORT, l as MemoryFunnelIdGenerator, lt as BroadcastEvent, m as LogEntry, n as CliApp, nt as FunnelEventLog, o as Env, ot as GatewayEmitInput, p as NoopFunnelLogger, pt as OnFunnelError, q as PublishRequest, r as routes, rt as FunnelEventRecord, s as factory, st as GatewayRouteDeps, t as GatewayApp, tt as FunnelEvent, u as NodeFunnelIdGenerator, ut as BroadcastSubscriber, v as MemoryFunnelProcessRunner, w as NodeFunnelProcessRunner, x as MemoryProcessResponse, y as MemoryProcessCall, z as ListenerEntry } from "./index-NFs2jzCa.js";
-export { AliveStub, AttachOptions, BroadcastEvent, BroadcastSubscriber, CONNECTOR_CONNECTION_STATUSES, ChannelConfig, ChannelConnectorView, ChannelDeliveryMode, CliApp, ConnectorConfig, ConnectorConnectionEvent, ConnectorConnectionQuery, ConnectorConnectionRecord, ConnectorConnectionStatus, ConnectorDiagnosticLog, ConnectorDiagnosticSqlReader, ConnectorProcessedEvent, ConnectorProcessedQuery, ConnectorProcessedRecord, ConnectorQuery, ConnectorRawEvent, ConnectorRawQuery, ConnectorRawRecord, ConnectorType, DEFAULT_GATEWAY_PORT, DEFAULT_GATEWAY_TOKEN_PATH, DetachOptions, DiscordConnectorConfig, Env, FUNNEL_DIR, FileStat, Funnel, FunnelBroadcaster, FunnelChannelPublisher, FunnelChannels, FunnelClock, FunnelConnectorFactory, FunnelConnectorListener, FunnelDebugReport, FunnelEvent, FunnelEventLog, FunnelEventRecord, FunnelFileSystem, FunnelGateway, FunnelGatewayServer, FunnelGatewayToken, FunnelIdGenerator, FunnelListenerSupervisor, FunnelListenersClient, FunnelLogger, FunnelProcessRunner, FunnelSettingsReader, FunnelSettingsStore, FunnelSlackEventProcessor, GatewayApp, GatewayEmitInput, GatewayRouteDeps, Env$1 as GatewayServerEnv, GhConnectorConfig, ListListenersResult, ListenerEntry, ListenerOpResult, LogEntry, MemoryConnectorDiagnosticLog, MemoryFunnelClock, MemoryFunnelEventLog, MemoryFunnelFileSystem, MemoryFunnelIdGenerator, MemoryFunnelLogger, MemoryFunnelProcessRunner, MemoryProcessCall, MemoryProcessHandler, MemoryProcessResponse, MemoryProcessSyncHandler, MockFunnelSettingsReader, NodeFunnelClock, NodeFunnelFileSystem, NodeFunnelIdGenerator, NodeFunnelLogger, NodeFunnelProcessRunner, NoopFunnelLogger, NotifyFn, OnFunnelError, ProcessListStub, ProcessSnapshot, ProfileConfig, PublishRequest, PublishResponse, PublishResult, ReplayableEvent, RunOptions, RunResult, SETTINGS_PATH, SETTINGS_VERSION, ScheduleCatchupPolicy, ScheduleConnectorConfig, ScheduleEntry, ScheduleListenerOptions, Settings, SlackConnectorConfig, SlackListenerOptions, SlackProcessed, SlackProcessedEmit, SlackProcessedSkip, SlackRawEvent, SlackSkipReason, SqliteConnectorDiagnosticLog, SqliteFunnelEventLog, StoredConnectionEvent, StoredProcessedEvent, StoredRawEvent, channelConfigSchema, channelDeliveryModeSchema, routes as cliRoutes, connectorConfigSchema, connectorConnectionEventSchema, connectorProcessedEventSchema, connectorRawEventSchema, createSettings, discordConnectorSchema, factory, funnelEventSchema, ghConnectorSchema, profileConfigSchema, publishRequestSchema, publishResponseSchema, queryToCliArgs, resolveFunnelDir, resolveFunnelPort, scheduleCatchupPolicySchema, scheduleConnectorSchema, scheduleEntrySchema, settingsSchema, slackConnectorSchema, toRequest };
+import { $ as DEFAULT_GATEWAY_TOKEN_PATH, A as FUNNEL_DIR, B as ListenerEntry, C as ProcessListStub, D as MockFunnelSettingsReader, E as NodeFunnelFileSystem, F as Funnel, G as MemoryFunnelEventLog, H as FunnelGateway, I as GatewayServerOptions, J as PublishRequest, K as SqliteFunnelEventLog, L as FunnelDebugReport, M as SETTINGS_PATH, N as resolveFunnelDir, O as createSettings, P as resolveFunnelPort, Q as publishResponseSchema, R as FunnelListenersClient, S as MemoryProcessSyncHandler, T as MemoryFunnelFileSystem, U as MemoryConnectorDiagnosticLog, V as ListenerOpResult, W as SqliteConnectorDiagnosticLog, X as PublishResult, Y as PublishResponse, Z as publishRequestSchema, _ as AliveStub, _t as FunnelBroadcaster, a as toRequest, at as FunnelGatewayServer, b as MemoryProcessHandler, c as ConnectorDiagnosticSqlReader, ct as FunnelEventLog, d as MemoryFunnelClock, dt as Env$1, et as FunnelGatewayToken, f as NodeFunnelClock, ft as GatewayEmitInput, g as NodeFunnelLogger, gt as BroadcastSubscriber, h as MemoryFunnelLogger, ht as BroadcastEvent, i as queryToCliArgs, it as channelWsUrl, j as FunnelSettingsStore, k as DEFAULT_GATEWAY_PORT, l as MemoryFunnelIdGenerator, lt as FunnelEventRecord, m as LogEntry, mt as FunnelListenerSupervisor, n as CliApp, nt as ChannelWsUrlInput, o as Env, ot as GatewayEventStore, p as NoopFunnelLogger, pt as GatewayRouteDeps, q as FunnelChannelPublisher, r as routes, rt as channelWsProtocols, s as factory, st as FunnelEvent, t as GatewayApp, tt as gatewayLoopbackUrl, u as NodeFunnelIdGenerator, ut as funnelEventSchema, v as MemoryFunnelProcessRunner, vt as ReplayableEvent, w as NodeFunnelProcessRunner, x as MemoryProcessResponse, y as MemoryProcessCall, yt as OnFunnelError, z as ListListenersResult } from "./index-DF5VmCPJ.js";
+export { AliveStub, AttachOptions, BroadcastEvent, BroadcastSubscriber, CONNECTOR_CONNECTION_STATUSES, ChannelConfig, ChannelConnectorView, ChannelDeliveryMode, ChannelWsUrlInput, CliApp, ConnectorConfig, ConnectorConnectionEvent, ConnectorConnectionQuery, ConnectorConnectionRecord, ConnectorConnectionStatus, ConnectorDiagnosticLog, ConnectorDiagnosticSqlReader, ConnectorProcessedEvent, ConnectorProcessedQuery, ConnectorProcessedRecord, ConnectorQuery, ConnectorRawEvent, ConnectorRawQuery, ConnectorRawRecord, ConnectorType, DEFAULT_GATEWAY_PORT, DEFAULT_GATEWAY_TOKEN_PATH, DetachOptions, DiscordConnectorConfig, Env, FUNNEL_DIR, FileStat, Funnel, FunnelBroadcaster, FunnelChannelPublisher, FunnelChannels, FunnelClock, FunnelConnectorFactory, FunnelConnectorListener, FunnelDebugReport, FunnelEvent, FunnelEventLog, FunnelEventRecord, FunnelFileSystem, FunnelGateway, FunnelGatewayServer, FunnelGatewayToken, FunnelIdGenerator, FunnelListenerSupervisor, FunnelListenersClient, FunnelLogger, FunnelProcessRunner, FunnelSettingsReader, FunnelSettingsStore, FunnelSlackEventProcessor, GatewayApp, GatewayEmitInput, GatewayEventStore, GatewayRouteDeps, Env$1 as GatewayServerEnv, GatewayServerOptions, GhConnectorConfig, ListListenersResult, ListenerEntry, ListenerOpResult, LogEntry, MemoryConnectorDiagnosticLog, MemoryFunnelClock, MemoryFunnelEventLog, MemoryFunnelFileSystem, MemoryFunnelIdGenerator, MemoryFunnelLogger, MemoryFunnelProcessRunner, MemoryProcessCall, MemoryProcessHandler, MemoryProcessResponse, MemoryProcessSyncHandler, MockFunnelSettingsReader, NodeFunnelClock, NodeFunnelFileSystem, NodeFunnelIdGenerator, NodeFunnelLogger, NodeFunnelProcessRunner, NoopFunnelLogger, NotifyFn, OnFunnelError, ProcessListStub, ProcessSnapshot, ProfileConfig, PublishRequest, PublishResponse, PublishResult, ReplayableEvent, RunOptions, RunResult, SETTINGS_PATH, SETTINGS_VERSION, ScheduleCatchupPolicy, ScheduleConnectorConfig, ScheduleEntry, ScheduleListenerOptions, Settings, SlackConnectorConfig, SlackListenerOptions, SlackProcessed, SlackProcessedEmit, SlackProcessedSkip, SlackRawEvent, SlackSkipReason, SqliteConnectorDiagnosticLog, SqliteFunnelEventLog, StoredConnectionEvent, StoredProcessedEvent, StoredRawEvent, channelConfigSchema, channelDeliveryModeSchema, channelWsProtocols, channelWsUrl, routes as cliRoutes, connectorConfigSchema, connectorConnectionEventSchema, connectorProcessedEventSchema, connectorRawEventSchema, createSettings, discordConnectorSchema, factory, funnelEventSchema, gatewayLoopbackUrl, ghConnectorSchema, profileConfigSchema, publishRequestSchema, publishResponseSchema, queryToCliArgs, resolveFunnelDir, resolveFunnelPort, scheduleCatchupPolicySchema, scheduleConnectorSchema, scheduleEntrySchema, settingsSchema, slackConnectorSchema, toRequest };

package/dist/index.js

@@ -8,14 +8,14 @@ import { t as FunnelFileSystem } from "./file-system-PWKKU7lA.js";
 import { t as NodeFunnelFileSystem } from "./node-file-system-BcrmWN9I.js";
 import { n as FunnelSlackEventProcessor, r as FunnelSlackAdapter, t as FunnelSlackListener } from "./slack-listener-ClQuHhEF.js";
 import { n as FunnelIdGenerator, t as FunnelSettingsReader } from "./settings-reader-DPqrpV7s.js";
-import { a as resolveFunnelDir, c as channelConfigSchema, d as settingsSchema, f as connectorConfigSchema, i as SETTINGS_PATH, l as channelDeliveryModeSchema, n as FUNNEL_DIR, o as resolveFunnelPort, p as NodeFunnelIdGenerator, r as FunnelSettingsStore, s as SETTINGS_VERSION, t as DEFAULT_GATEWAY_PORT, u as profileConfigSchema } from "./settings-store-D2XSXTyt.js";
+import { a as SETTINGS_PATH, c as SETTINGS_VERSION, d as profileConfigSchema, f as settingsSchema, i as FunnelSettingsStore, l as channelConfigSchema, m as NodeFunnelIdGenerator, n as DEFAULT_GATEWAY_PORT, o as resolveFunnelDir, p as connectorConfigSchema, r as FUNNEL_DIR, s as resolveFunnelPort, t as gatewayLoopbackUrl, u as channelDeliveryModeSchema } from "./gateway-base-url-ssk_He5G.js";
 import { t as discordConnectorSchema } from "./discord-connector-schema-CBDyGdOI.js";
 import { n as scheduleConnectorSchema, r as scheduleEntrySchema, t as scheduleCatchupPolicySchema } from "./schedule-connector-schema-iCI61gzU.js";
 import { t as slackConnectorSchema } from "./slack-connector-schema-BCNWluHM.js";
-import { a as FileProcessGuard, i as FunnelMcp, o as FunnelClaude } from "./mcp-Dr-nIBwN.js";
-import { a as FunnelLocalConfig, n as NodeFunnelTokenPrompter, r as FunnelLocalConfigSync, t as funnelJsonSchema } from "./local-config-json-schema-8IHjS4Q7.js";
+import { a as FileProcessGuard, i as FunnelMcp, o as FunnelClaude } from "./mcp-QeNCBhOD.js";
+import { a as FunnelLocalConfig, n as NodeFunnelTokenPrompter, r as FunnelLocalConfigSync, t as funnelJsonSchema } from "./local-config-json-schema-D8i-BogY.js";
 import { t as FunnelProfiles } from "./profiles-wMRnjSid.js";
-import { _ as FunnelBroadcaster, a as connectorConnectionEventSchema, b as publishResponseSchema, c as MemoryFunnelEventLog, d as FunnelGatewayServer, f as ConnectorDiagnosticSqlReader, g as funnelEventSchema, h as FunnelEventLog, i as ConnectorDiagnosticLog, l as DEFAULT_GATEWAY_TOKEN_PATH, m as SqliteFunnelEventLog, n as SqliteConnectorDiagnosticLog, o as connectorProcessedEventSchema, p as FunnelListenerSupervisor, r as CONNECTOR_CONNECTION_STATUSES, s as connectorRawEventSchema, t as MemoryConnectorDiagnosticLog, u as FunnelGatewayToken, v as FunnelChannelPublisher, x as funnelTmpDir, y as publishRequestSchema } from "./memory-connector-diagnostic-log-CrW1ltLM.js";
+import { C as funnelTmpDir, S as publishResponseSchema, _ as FunnelEventLog, a as connectorConnectionEventSchema, b as FunnelChannelPublisher, c as MemoryFunnelEventLog, d as DEFAULT_GATEWAY_TOKEN_PATH, f as FunnelGatewayToken, g as SqliteFunnelEventLog, h as FunnelListenerSupervisor, i as ConnectorDiagnosticLog, l as channelWsProtocols, m as ConnectorDiagnosticSqlReader, n as SqliteConnectorDiagnosticLog, o as connectorProcessedEventSchema, p as FunnelGatewayServer, r as CONNECTOR_CONNECTION_STATUSES, s as connectorRawEventSchema, t as MemoryConnectorDiagnosticLog, u as channelWsUrl, v as funnelEventSchema, x as publishRequestSchema, y as FunnelBroadcaster } from "./memory-connector-diagnostic-log-COUWCsT_.js";
 import { dirname, join, resolve } from "node:path";
 import { hc } from "hono/client";
 import { appendFileSync, existsSync, mkdirSync } from "node:fs";
@@ -931,7 +931,7 @@ var FunnelListenersClient = class {
 	async list() {
 		if (!this.isDaemonRunning()) return { state: "offline" };
 		try {
-			const res = await fetch(`http://127.0.0.1:${this.port}/listeners`, { headers: this.authHeaders() });
+			const res = await fetch(`${gatewayLoopbackUrl(this.port)}/listeners`, { headers: this.authHeaders() });
 			if (!res.ok) return {
 				state: "error",
 				reason: `HTTP ${res.status}`
@@ -973,7 +973,7 @@ var FunnelListenersClient = class {
 	}
 	async call(method, path) {
 		try {
-			const res = await fetch(`http://127.0.0.1:${this.port}${path}`, {
+			const res = await fetch(`${gatewayLoopbackUrl(this.port)}${path}`, {
 				method,
 				headers: this.authHeaders()
 			});
@@ -1223,8 +1223,7 @@ var Funnel = class Funnel {
 			channels: this.channels,
 			port: options.port,
 			hostname: options.hostname,
-			dbPath: options.dbPath,
-			eventLog: options.eventLog,
+			...options.eventLog ? { eventLog: options.eventLog } : { dbPath: options.dbPath },
 			process: this.process,
 			clock: this.clock,
 			logger: this.logger,
@@ -1232,6 +1231,7 @@ var Funnel = class Funnel {
 			dir: this.paths.dir,
 			killCompetingSlack: options.killCompetingSlack,
 			token: options.token ?? this.gatewayToken.ensure(),
+			allowInsecureHost: options.allowInsecureHost,
 			extraRoutes: options.extraRoutes
 		});
 	}
@@ -3516,4 +3516,4 @@ const routes = factory.createApp().onError((error, c) => {
 	return c.text(`error: ${error instanceof Error ? error.message : String(error)}`, 400);
 }).get("/claude", ...claudeHandler).get("/channels", ...channelsGroupHandler).post("/channels/add", ...channelsAddHelpHandler).post("/channels/add/:channel", ...channelsAddHandler).post("/channels/remove", ...channelsRemoveHelpHandler).post("/channels/remove/:channel", ...channelsRemoveHandler).post("/channels/rename/:channel/:newName", ...channelsRenameHandler).post("/channels/:channel/rename/:newName", ...channelsRenameHandler).post("/channels/rename", ...channelsRenameHelpHandler).post("/channels/:channel/rename", ...channelsChannelRenameHelpHandler).post("/channels/:channel/set/delivery/:mode", ...channelsSetDeliveryHandler).post("/channels/publish", ...channelsPublishHelpHandler).post("/channels/:channel/publish", ...channelsPublishHandler).get("/channels/:channel/validate", ...channelsValidateHandler).get("/channels/validate", ...channelsValidateHelpHandler).get("/channels/:channel", ...channelsShowHandler).get("/channels/:channel/connectors", ...channelsConnectorsGroupHandler).post("/channels/:channel/connectors/add", ...channelsConnectorsAddHelpHandler).post("/channels/:channel/connectors/add/:connector", ...channelsConnectorsAddHandler).post("/channels/:channel/connectors/remove", ...channelsConnectorsRemoveHelpHandler).post("/channels/:channel/connectors/remove/:connector", ...channelsConnectorsRemoveHandler).post("/channels/:channel/connectors/set", ...channelsConnectorsSetHelpHandler).post("/channels/:channel/connectors/set/:connector", ...channelsConnectorsSetHandler).post("/channels/:channel/connectors/rename/:connector/:newName", ...channelsConnectorsRenameHandler).post("/channels/:channel/connectors/:connector/rename/:newName", ...channelsConnectorsRenameHandler).post("/channels/:channel/connectors/rename", ...channelsConnectorsRenameHelpHandler).post("/channels/:channel/connectors/:connector/rename", ...channelsConnectorRenameHelpHandler).post("/channels/:channel/connectors/:connector/request", ...channelsConnectorsRequestHandler).get("/channels/:channel/connectors/:connector", ...channelsConnectorsShowHandler).get("/channels/:channel/connectors/:connector/schedules", ...channelsConnectorsSchedulesGroupHandler).post("/channels/:channel/connectors/:connector/schedules/add", ...channelsConnectorSchedulesAddHelpHandler).post("/channels/:channel/connectors/:connector/schedules/add/:id", ...channelsConnectorsSchedulesAddHandler).post("/channels/:channel/connectors/:connector/schedules/remove", ...channelsConnectorSchedulesRemoveHelpHandler).post("/channels/:channel/connectors/:connector/schedules/remove/:id", ...channelsConnectorsSchedulesRemoveHandler).get("/profiles", ...profilesGroupHandler).post("/profiles/add", ...profilesAddHelpHandler).post("/profiles/add/:profile", ...profilesAddHandler).post("/profiles/set", ...profilesSetHelpHandler).post("/profiles/set/:profile", ...profilesSetHandler).post("/profiles/remove", ...profilesRemoveHelpHandler).post("/profiles/remove/:profile", ...profilesRemoveHandler).post("/profiles/rename/:profile/:newName", ...profilesRenameHandler).post("/profiles/:profile/rename/:newName", ...profilesRenameHandler).post("/profiles/rename", ...profilesRenameHelpHandler).post("/profiles/:profile/rename", ...profilesProfileRenameHelpHandler).post("/profiles/:profile/as-default", ...profilesAsDefaultHandler).get("/profiles/:profile/run", ...profilesLaunchHandler).get("/profiles/:profile", ...profilesLaunchHandler).get("/gateway", ...gatewayGroupHandler).get("/gateway/status", ...gatewayStatusHandler).get("/gateway/start", ...gatewayStartHandler).get("/gateway/stop", ...gatewayStopHandler).get("/gateway/restart", ...gatewayRestartHandler).get("/gateway/run", ...gatewayRunHandler).get("/gateway/logs", ...gatewayLogsHandler).get("/gateway/sql", ...gatewaySqlHandler).get("/gateway/listeners", ...gatewayListenersHandler).get("/debug", ...debugHandler).get("/debug/events", ...debugEventsHandler).get("/debug/dropped", ...debugDroppedHandler).get("/debug/errors", ...debugErrorsHandler).get("/debug/replay", ...debugReplayHandler).get("/schema", ...schemaHandler).get("/status", ...statusHandler).get("/update", ...updateHandler);
 //#endregion
-export { CONNECTOR_CONNECTION_STATUSES, ConnectorDiagnosticLog, ConnectorDiagnosticSqlReader, DEFAULT_GATEWAY_PORT, DEFAULT_GATEWAY_TOKEN_PATH, FUNNEL_DIR, Funnel, FunnelBroadcaster, FunnelChannelPublisher, FunnelChannels, FunnelClock, FunnelConnectorFactory, FunnelConnectorListener, FunnelEventLog, FunnelFileSystem, FunnelGateway, FunnelGatewayServer, FunnelGatewayToken, FunnelIdGenerator, FunnelListenerSupervisor, FunnelListenersClient, FunnelLogger, FunnelProcessRunner, FunnelSettingsReader, FunnelSettingsStore, FunnelSlackEventProcessor, MemoryConnectorDiagnosticLog, MemoryFunnelClock, MemoryFunnelEventLog, MemoryFunnelFileSystem, MemoryFunnelIdGenerator, MemoryFunnelLogger, MemoryFunnelProcessRunner, MockFunnelSettingsReader, NodeFunnelClock, NodeFunnelFileSystem, NodeFunnelIdGenerator, NodeFunnelLogger, NodeFunnelProcessRunner, NoopFunnelLogger, SETTINGS_PATH, SETTINGS_VERSION, SqliteConnectorDiagnosticLog, SqliteFunnelEventLog, channelConfigSchema, channelDeliveryModeSchema, routes as cliRoutes, connectorConfigSchema, connectorConnectionEventSchema, connectorProcessedEventSchema, connectorRawEventSchema, createSettings, discordConnectorSchema, factory, funnelEventSchema, ghConnectorSchema, profileConfigSchema, publishRequestSchema, publishResponseSchema, queryToCliArgs, resolveFunnelDir, resolveFunnelPort, scheduleCatchupPolicySchema, scheduleConnectorSchema, scheduleEntrySchema, settingsSchema, slackConnectorSchema, toRequest };
+export { CONNECTOR_CONNECTION_STATUSES, ConnectorDiagnosticLog, ConnectorDiagnosticSqlReader, DEFAULT_GATEWAY_PORT, DEFAULT_GATEWAY_TOKEN_PATH, FUNNEL_DIR, Funnel, FunnelBroadcaster, FunnelChannelPublisher, FunnelChannels, FunnelClock, FunnelConnectorFactory, FunnelConnectorListener, FunnelEventLog, FunnelFileSystem, FunnelGateway, FunnelGatewayServer, FunnelGatewayToken, FunnelIdGenerator, FunnelListenerSupervisor, FunnelListenersClient, FunnelLogger, FunnelProcessRunner, FunnelSettingsReader, FunnelSettingsStore, FunnelSlackEventProcessor, MemoryConnectorDiagnosticLog, MemoryFunnelClock, MemoryFunnelEventLog, MemoryFunnelFileSystem, MemoryFunnelIdGenerator, MemoryFunnelLogger, MemoryFunnelProcessRunner, MockFunnelSettingsReader, NodeFunnelClock, NodeFunnelFileSystem, NodeFunnelIdGenerator, NodeFunnelLogger, NodeFunnelProcessRunner, NoopFunnelLogger, SETTINGS_PATH, SETTINGS_VERSION, SqliteConnectorDiagnosticLog, SqliteFunnelEventLog, channelConfigSchema, channelDeliveryModeSchema, channelWsProtocols, channelWsUrl, routes as cliRoutes, connectorConfigSchema, connectorConnectionEventSchema, connectorProcessedEventSchema, connectorRawEventSchema, createSettings, discordConnectorSchema, factory, funnelEventSchema, gatewayLoopbackUrl, ghConnectorSchema, profileConfigSchema, publishRequestSchema, publishResponseSchema, queryToCliArgs, resolveFunnelDir, resolveFunnelPort, scheduleCatchupPolicySchema, scheduleConnectorSchema, scheduleEntrySchema, settingsSchema, slackConnectorSchema, toRequest };

package/dist/{local-config-json-schema-8IHjS4Q7.js → local-config-json-schema-D8i-BogY.js}

@@ -122,6 +122,18 @@ var FunnelLocalConfig = class {
 	}
 };
 //#endregion
+//#region lib/connectors/either-token.ts
+function botTokenSlot(slot) {
+	if (slot.env !== void 0) return { botTokenEnv: slot.env };
+	if (slot.literal !== void 0) return { botToken: slot.literal };
+	return {};
+}
+function appTokenSlot(slot) {
+	if (slot.env !== void 0) return { appTokenEnv: slot.env };
+	if (slot.literal !== void 0) return { appToken: slot.literal };
+	return {};
+}
+//#endregion
 //#region lib/engine/token-prompter/token-prompter.ts
 /**
 * Asks the user for a secret value on stdin. Used as a last resort when a
@@ -223,7 +235,14 @@ var FunnelLocalConfigSync = class {
 			id: this.channels.addConnector(channelName, {
 				type: "slack",
 				name: spec.name,
-				...update,
+				...botTokenSlot({
+					literal: bot.token,
+					env: bot.tokenEnv
+				}),
+				...appTokenSlot({
+					literal: app.token,
+					env: app.tokenEnv
+				}),
 				...spec.minify !== void 0 ? { minify: spec.minify } : {}
 			}).id,
 			name: spec.name,
@@ -260,7 +279,10 @@ var FunnelLocalConfigSync = class {
 			id: this.channels.addConnector(channelName, {
 				type: "discord",
 				name: spec.name,
-				...update
+				...botTokenSlot({
+					literal: bot.token,
+					env: bot.tokenEnv
+				})
 			}).id,
 			name: spec.name,
 			changed: true

package/dist/{local-config-sync-BdsrDZOu.d.ts → local-config-sync-Cq39mT6p.d.ts}

@@ -2,7 +2,7 @@ import { i as ChannelDeliveryMode, n as FunnelIdGenerator, r as ChannelConfig, t
 import { S as FunnelLogger, b as FunnelConnectorListener, o as ConnectorDiagnosticLog } from "./connector-diagnostic-log-yTOojKUR.js";
 import { r as FunnelProcessRunner } from "./process-runner-DfniuWVU.js";
 import { n as FunnelFileSystem } from "./file-system-BeOKXjlV.js";
-import { n as FunnelConnectorAdapter, t as CallInput } from "./connector-adapter-DKgsVuMH.js";
+import { n as FunnelConnectorAdapter, t as CallInput } from "./connector-adapter-CePYBTgW.js";
 import { a as ScheduleEntry, n as ScheduleOnFired } from "./schedule-listener-CUyUFFR1.js";
 import { n as SlackOnAppCreated, r as SlackPreprocessEvent } from "./slack-listener-Bv5xI9gC.js";
 import { z } from "zod";
@@ -148,6 +148,27 @@ declare const connectorConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
 type ConnectorConfig = z.infer<typeof connectorConfigSchema>;
 type ConnectorType = ConnectorConfig["type"];
 //#endregion
+//#region lib/connectors/either-token.d.ts
+/**
+ * A single connector token slot is supplied one of two non-empty ways, which
+ * are mutually exclusive, or left empty:
+ *
+ *   - the literal secret (`botToken: "xoxb-…"`)
+ *   - the *name* of an env var holding it (`botTokenEnv: "SLACK_BOT_TOKEN"`)
+ *   - neither — left for the CLI / TTY prompt to fill in at launch
+ *
+ * `EitherToken<"botToken", "botTokenEnv">` makes "both set at once" a compile
+ * error while still allowing "neither". Compose multiple slots with `&` (a slack
+ * connector intersects a bot slot and an app slot); the intersection keeps each
+ * slot independently exclusive without enumerating the cross-product.
+ *
+ * To build a value, use the slot helpers below (`botTokenSlot` etc.). They take
+ * a resolved `{ literal, env }` and return the exclusive shape. A generic
+ * builder can't: TS can't prove a `Record<Env, …>` omits the `Literal` key when
+ * both are free type params, so each helper fixes concrete key names instead.
+ */
+type EitherToken<Literal extends string, Env extends string> = (Partial<Record<Literal, string>> & Partial<Record<Env, never>>) | (Partial<Record<Literal, never>> & Partial<Record<Env, string>>);
+//#endregion
 //#region lib/connectors/connector-factory.d.ts
 type SlackListenerOptions = {
   onAppCreated?: SlackOnAppCreated;
@@ -224,24 +245,18 @@ type ChannelConnectorView = ConnectorConfig & {
   channelId: string;
   channelName: string;
 };
-type AddConnectorInput = {
+type AddConnectorInput = ({
   type: "slack";
   name: string;
-  botToken?: string;
-  appToken?: string;
-  botTokenEnv?: string;
-  appTokenEnv?: string;
   minify?: boolean;
-} | {
+} & EitherToken<"botToken", "botTokenEnv"> & EitherToken<"appToken", "appTokenEnv">) | {
   type: "gh";
   name: string;
   pollInterval?: number;
-} | {
+} | ({
   type: "discord";
   name: string;
-  botToken?: string;
-  botTokenEnv?: string;
-} | {
+} & EitherToken<"botToken", "botTokenEnv">) | {
   type: "schedule";
   name: string;
   entries?: ScheduleEntry[];

package/dist/local-config.d.ts

@@ -1,3 +1,3 @@
-import { C as profileSpecSchema, S as localConfigSchema, _ as LOCAL_CONFIG_FILENAME, b as channelSpecSchema, g as ConnectorSpec, h as ChannelSpec, i as FunnelTokenPrompter, m as FunnelLocalConfig, n as FunnelLocalConfigSync, r as LocalConfigSyncResult, t as ConnectorSyncOutcome, v as LocalConfig, x as connectorSpecSchema, y as ProfileSpec } from "./local-config-sync-BdsrDZOu.js";
-import { i as funnelJsonSchema, n as NodeFunnelTokenPrompter, r as FunnelLocalConfigWriter, t as MemoryFunnelTokenPrompter } from "./memory-token-prompter-B5FFCsGP.js";
+import { C as profileSpecSchema, S as localConfigSchema, _ as LOCAL_CONFIG_FILENAME, b as channelSpecSchema, g as ConnectorSpec, h as ChannelSpec, i as FunnelTokenPrompter, m as FunnelLocalConfig, n as FunnelLocalConfigSync, r as LocalConfigSyncResult, t as ConnectorSyncOutcome, v as LocalConfig, x as connectorSpecSchema, y as ProfileSpec } from "./local-config-sync-Cq39mT6p.js";
+import { i as funnelJsonSchema, n as NodeFunnelTokenPrompter, r as FunnelLocalConfigWriter, t as MemoryFunnelTokenPrompter } from "./memory-token-prompter-CKV7VBM5.js";
 export { ChannelSpec, ConnectorSpec, ConnectorSyncOutcome, FunnelLocalConfig, FunnelLocalConfigSync, FunnelLocalConfigWriter, FunnelTokenPrompter, LOCAL_CONFIG_FILENAME, LocalConfig, LocalConfigSyncResult, MemoryFunnelTokenPrompter, NodeFunnelTokenPrompter, ProfileSpec, channelSpecSchema, connectorSpecSchema, funnelJsonSchema, localConfigSchema, profileSpecSchema };

package/dist/local-config.js

@@ -1,3 +1,3 @@
-import { a as FunnelLocalConfig, c as connectorSpecSchema, i as FunnelTokenPrompter, l as localConfigSchema, n as NodeFunnelTokenPrompter, o as LOCAL_CONFIG_FILENAME, r as FunnelLocalConfigSync, s as channelSpecSchema, t as funnelJsonSchema, u as profileSpecSchema } from "./local-config-json-schema-8IHjS4Q7.js";
-import { n as FunnelLocalConfigWriter, t as MemoryFunnelTokenPrompter } from "./memory-token-prompter-CLerGsgM.js";
+import { a as FunnelLocalConfig, c as connectorSpecSchema, i as FunnelTokenPrompter, l as localConfigSchema, n as NodeFunnelTokenPrompter, o as LOCAL_CONFIG_FILENAME, r as FunnelLocalConfigSync, s as channelSpecSchema, t as funnelJsonSchema, u as profileSpecSchema } from "./local-config-json-schema-D8i-BogY.js";
+import { n as FunnelLocalConfigWriter, t as MemoryFunnelTokenPrompter } from "./memory-token-prompter-Q7Snwsv2.js";
 export { FunnelLocalConfig, FunnelLocalConfigSync, FunnelLocalConfigWriter, FunnelTokenPrompter, LOCAL_CONFIG_FILENAME, MemoryFunnelTokenPrompter, NodeFunnelTokenPrompter, channelSpecSchema, connectorSpecSchema, funnelJsonSchema, localConfigSchema, profileSpecSchema };

package/dist/{mcp-Dr-nIBwN.js → mcp-QeNCBhOD.js}

@@ -1,6 +1,6 @@
 import { n as NodeFunnelProcessRunner } from "./gh-connector-schema-o3Q1-ojL.js";
 import { t as NodeFunnelFileSystem } from "./node-file-system-BcrmWN9I.js";
-import { n as FUNNEL_DIR, o as resolveFunnelPort, p as NodeFunnelIdGenerator } from "./settings-store-D2XSXTyt.js";
+import { m as NodeFunnelIdGenerator, r as FUNNEL_DIR, s as resolveFunnelPort } from "./gateway-base-url-ssk_He5G.js";
 import { join } from "node:path";
 import { z } from "zod";
 //#region lib/engine/claude/claude.ts

package/dist/{memory-connector-diagnostic-log-CrW1ltLM.js → memory-connector-diagnostic-log-COUWCsT_.js}

@@ -1,6 +1,6 @@
 import { n as NodeFunnelProcessRunner } from "./gh-connector-schema-o3Q1-ojL.js";
 import { t as NodeFunnelFileSystem } from "./node-file-system-BcrmWN9I.js";
-import { n as FUNNEL_DIR, o as resolveFunnelPort } from "./settings-store-D2XSXTyt.js";
+import { r as FUNNEL_DIR, s as resolveFunnelPort, t as gatewayLoopbackUrl } from "./gateway-base-url-ssk_He5G.js";
 import { dirname, join } from "node:path";
 import { chmodSync, existsSync, mkdirSync } from "node:fs";
 import { z } from "zod";
@@ -65,7 +65,7 @@ var FunnelChannelPublisher = class {
 	async publish(channelName, request) {
 		if (!this.isDaemonRunning()) return OFFLINE;
 		try {
-			const url = `http://127.0.0.1:${this.port}/channels/${encodeURIComponent(channelName)}/publish`;
+			const url = `${gatewayLoopbackUrl(this.port)}/channels/${encodeURIComponent(channelName)}/publish`;
 			const res = await fetch(url, {
 				method: "POST",
 				headers: {
@@ -1040,10 +1040,18 @@ const zParam = (schema) => zValidator("param", schema, (result, c) => {
 });
 //#endregion
 //#region lib/gateway/routes/channels.connectors.call.ts
+const jsonValueSchema = z.lazy(() => z.union([
+	z.string(),
+	z.number(),
+	z.boolean(),
+	z.null(),
+	z.array(jsonValueSchema),
+	z.record(z.string(), jsonValueSchema)
+]));
 const bodySchema = z.object({
 	method: z.string().min(1),
 	path: z.string().min(1),
-	body: z.unknown().optional()
+	body: jsonValueSchema.optional()
 });
 /**
 * POST /channels/:channel/connectors/:connector/call
@@ -1064,7 +1072,7 @@ const channelsConnectorsCallHandler = factory.createHandlers(zParam(z.object({
 	const result = await c.var.deps.channels.call(param.channel, param.connector, {
 		method: parsed.data.method,
 		path: parsed.data.path,
-		body: parsed.data.body ?? {}
+		body: parsed.data.body
 	});
 	return c.json({
 		ok: true,
@@ -1448,6 +1456,7 @@ var FunnelGatewayServer = class {
 	dir;
 	killCompetingSlack;
 	token;
+	allowInsecureHost;
 	broadcaster;
 	eventLog;
 	supervisor;
@@ -1467,6 +1476,7 @@ var FunnelGatewayServer = class {
 		this.dir = deps.dir ?? FUNNEL_DIR;
 		this.killCompetingSlack = deps.killCompetingSlack ?? true;
 		this.token = deps.token ?? "";
+		this.allowInsecureHost = deps.allowInsecureHost ?? false;
 		this.extraRoutes = deps.extraRoutes ?? null;
 		const clock = deps.clock;
 		this.nowMs = clock ? () => clock.millis() : () => Date.now();
@@ -1503,7 +1513,7 @@ var FunnelGatewayServer = class {
 	}
 	async start() {
 		if (this.server) return this.server;
-		if (!this.token && !LOOPBACK_HOSTS.has(this.hostname)) this.logger?.warn("gateway auth is disabled on a non-loopback bind — every endpoint is reachable without a token", { hostname: this.hostname });
+		if (!this.token && !LOOPBACK_HOSTS.has(this.hostname) && !this.allowInsecureHost) throw new Error(`refusing to start gateway: hostname "${this.hostname}" is reachable off-box but no token is set. Set a token, bind to loopback (127.0.0.1), or pass allowInsecureHost: true.`);
 		const app = this.buildApp();
 		this.startedAt = this.nowMs();
 		this.server = Bun.serve({
@@ -1775,6 +1785,27 @@ var FunnelGatewayToken = class {
 };
 const DEFAULT_GATEWAY_TOKEN_PATH = join(homedir(), ".funnel", TOKEN_FILE_NAME);
 //#endregion
+//#region lib/gateway/channel-ws-url.ts
+function channelWsUrl(input) {
+	const url = new URL(input.base);
+	url.searchParams.set("channel", input.channel);
+	if (input.subscriberId !== void 0) url.searchParams.set("id", input.subscriberId);
+	if (input.since !== void 0) url.searchParams.set("since", String(input.since));
+	return url.toString();
+}
+/**
+* Builds the `Sec-WebSocket-Protocol` values that authenticate a gateway WS
+* upgrade. Browser `WebSocket` cannot set an `Authorization` header, so the
+* gateway also accepts the token as a `funnel.token.<token>` subprotocol.
+* Returns an empty array when no token is given (auth disabled / loopback).
+*
+* Usage: `new WebSocket(channelWsUrl({ base, channel }), channelWsProtocols(token))`
+*/
+function channelWsProtocols(token) {
+	if (!token) return [];
+	return [`funnel.token.${token}`];
+}
+//#endregion
 //#region lib/gateway/memory-funnel-event-log.ts
 /**
 * In-process `FunnelEventLog` backed by a plain array. Used by tests and by
@@ -2242,4 +2273,4 @@ const takeRecent = (events, limit) => {
 	return events.slice(-limit);
 };
 //#endregion
-export { FunnelBroadcaster as _, connectorConnectionEventSchema as a, publishResponseSchema as b, MemoryFunnelEventLog as c, FunnelGatewayServer as d, ConnectorDiagnosticSqlReader as f, funnelEventSchema as g, FunnelEventLog as h, ConnectorDiagnosticLog as i, DEFAULT_GATEWAY_TOKEN_PATH as l, SqliteFunnelEventLog as m, SqliteConnectorDiagnosticLog as n, connectorProcessedEventSchema as o, FunnelListenerSupervisor as p, CONNECTOR_CONNECTION_STATUSES as r, connectorRawEventSchema as s, MemoryConnectorDiagnosticLog as t, FunnelGatewayToken as u, FunnelChannelPublisher as v, funnelTmpDir as x, publishRequestSchema as y };
+export { funnelTmpDir as C, publishResponseSchema as S, FunnelEventLog as _, connectorConnectionEventSchema as a, FunnelChannelPublisher as b, MemoryFunnelEventLog as c, DEFAULT_GATEWAY_TOKEN_PATH as d, FunnelGatewayToken as f, SqliteFunnelEventLog as g, FunnelListenerSupervisor as h, ConnectorDiagnosticLog as i, channelWsProtocols as l, ConnectorDiagnosticSqlReader as m, SqliteConnectorDiagnosticLog as n, connectorProcessedEventSchema as o, FunnelGatewayServer as p, CONNECTOR_CONNECTION_STATUSES as r, connectorRawEventSchema as s, MemoryConnectorDiagnosticLog as t, channelWsUrl as u, funnelEventSchema as v, publishRequestSchema as x, FunnelBroadcaster as y };

package/dist/{memory-token-prompter-B5FFCsGP.d.ts → memory-token-prompter-CKV7VBM5.d.ts}

@@ -1,5 +1,5 @@
 import { n as FunnelFileSystem } from "./file-system-BeOKXjlV.js";
-import { i as FunnelTokenPrompter } from "./local-config-sync-BdsrDZOu.js";
+import { i as FunnelTokenPrompter } from "./local-config-sync-Cq39mT6p.js";
 
 //#region lib/engine/local-config/local-config-json-schema.d.ts
 /**

package/dist/{memory-token-prompter-CLerGsgM.js → memory-token-prompter-Q7Snwsv2.js}

@@ -1,4 +1,4 @@
-import { i as FunnelTokenPrompter, o as LOCAL_CONFIG_FILENAME } from "./local-config-json-schema-8IHjS4Q7.js";
+import { i as FunnelTokenPrompter, o as LOCAL_CONFIG_FILENAME } from "./local-config-json-schema-D8i-BogY.js";
 import { join } from "node:path";
 //#region lib/engine/local-config/local-config-writer.ts
 const isRecord = (value) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@interactive-inc/claude-funnel",
-  "version": "0.52.0",
+  "version": "0.53.0",
   "description": "Hub CLI that routes external events (Slack / GitHub / Discord) to Claude Code agents through subscription channels over MCP.",
   "keywords": [
     "bun",

package/dist/connector-adapter-DKgsVuMH.d.ts

@@ -1,11 +0,0 @@
-//#region lib/connectors/connector-adapter.d.ts
-type CallInput = {
-  method: string;
-  path: string;
-  body?: unknown;
-};
-declare abstract class FunnelConnectorAdapter {
-  abstract call(input: CallInput): Promise<unknown>;
-}
-//#endregion
-export { FunnelConnectorAdapter as n, CallInput as t };