@linxin666/dsh-remote-web-ui 0.3.12 → 0.3.13

package/lib/types/pairing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../src/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAEnD,uDAAuD;AACvD,MAAM,MAAM,YAAY;AACtB,mEAAmE;AACjE,cAAc;AAChB,oEAAoE;GAClE,SAAS;AACX,4DAA4D;GAC1D,SAAS;AACX,sDAAsD;GACpD,WAAW;AACb,6EAA6E;GAC3E,cAAc,CAAA;AAElB,sDAAsD;AACtD,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAA;IAChB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IACjB,iDAAiD;IACjD,QAAQ,EAAE,OAAO,CAAA;IACjB,sFAAsF;IACtF,EAAE,EAAE,MAAM,CAAA;IACV,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,QAA2B,CAAA;AAK9D,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAA;IAClB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAA;IACV,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAA;IAClB,uDAAuD;IACvD,MAAM,EAAE,OAAO,CAAA;IACf,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,gFAAgF;IAChF,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAA;IACxC,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAA;IACnB,yEAAyE;IACzE,YAAY,EAAE,OAAO,CAAA;IACrB,oEAAoE;IACpE,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mEAAmE;IACnE,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,OAAO,EAAE,cAAc,EAAE,CAAA;CAC1B;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAA;IAClB,oEAAoE;IACpE,cAAc,EAAE,MAAM,CAAA;IACtB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,sCAAsC;AACtC,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAAA;CAAE,CAAA;AAE3C,yEAAyE;AACzE,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C;;OAEG;gBACS,OAAO,EAAE,MAAM;CAI5B;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,GAAG,IAAI,MAAM,CAAA;IACb,WAAW,IAAI,MAAM,CAAA;CACtB;AAED,yDAAyD;AACzD,eAAO,MAAM,YAAY,EAAE,YAG1B,CAAA;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAc;IAwBhB,MAAM,EAAE,aAAa;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAxBxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiD;IAC3E,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,WAAW,CAAI;IACvB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAA4B;IAC5C,sEAAsE;IACtE,OAAO,CAAC,UAAU,CAAoB;IACtC,mEAAmE;IACnE,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,OAAO,CAA6B;IAC5C,8EAA8E;IAC9E,OAAO,CAAC,KAAK,CAAQ;IAErB;;;;;OAKG;gBAEM,MAAM,EAAE,aAAa,EACX,KAAK,GAAE,YAA2B;IAKrD;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA6BrB,8EAA8E;IAC9E,OAAO,CAAC,iBAAiB;IAOzB,iEAAiE;IACjE,OAAO,CAAC,SAAS;IAajB;;;;;;;;;OASG;IACH,OAAO,CAAC,OAAO;IAgBf,wFAAwF;IACxF,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IAED,oFAAoF;IACpF,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIlD,wEAAwE;IACxE,IAAI,YAAY,IAAI,MAAM,EAAE,CAE3B;IAED,6EAA6E;IAC7E,WAAW,CAAC,OAAO,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,IAAI;IAKxE,+DAA+D;IAC/D,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,2EAA2E;IAC3E,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAK/C,qFAAqF;IACrF,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,IAAI;IAKvD,iEAAiE;IACjE,UAAU,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI;IAKvD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAwBnF;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY;IA6BvD;;;;OAIG;IACH,IAAI,IAAI,IAAI;IAQZ;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQjC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQtC,oEAAoE;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpC;;;;;OAKG;IACH,KAAK,IAAI,IAAI;IAMb,2EAA2E;IAC3E,QAAQ,IAAI,eAAe;IAqB3B,+EAA+E;IAC/E,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpC,yEAAyE;IACzE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI,GAAG,MAAM,IAAI;IAKlE,OAAO,CAAC,WAAW;IASnB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,MAAM;CAaf;AAwCD,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK7E"}
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../src/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAEnD,uDAAuD;AACvD,MAAM,MAAM,YAAY;AACtB,mEAAmE;AACjE,cAAc;AAChB,oEAAoE;GAClE,SAAS;AACX,4DAA4D;GAC1D,SAAS;AACX,sDAAsD;GACpD,WAAW;AACb,6EAA6E;GAC3E,cAAc,CAAA;AAElB,sDAAsD;AACtD,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAA;IAChB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IACjB,iDAAiD;IACjD,QAAQ,EAAE,OAAO,CAAA;IACjB,sFAAsF;IACtF,EAAE,EAAE,MAAM,CAAA;IACV,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,QAA2B,CAAA;AAK9D,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAA;IAClB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAA;IACV,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAA;IAClB,uDAAuD;IACvD,MAAM,EAAE,OAAO,CAAA;IACf,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,gFAAgF;IAChF,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAA;IACxC,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,KAAK,EAAE,KAAK,GAAG,aAAa,GAAG,SAAS,GAAG,QAAQ,CAAA;IACnD,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAA;IACnB,yEAAyE;IACzE,YAAY,EAAE,OAAO,CAAA;IACrB,oEAAoE;IACpE,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mEAAmE;IACnE,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,uEAAuE;IACvE,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,OAAO,EAAE,cAAc,EAAE,CAAA;CAC1B;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAA;IAClB,oEAAoE;IACpE,cAAc,EAAE,MAAM,CAAA;IACtB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,sCAAsC;AACtC,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAAA;CAAE,CAAA;AAE3C,yEAAyE;AACzE,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C;;OAEG;gBACS,OAAO,EAAE,MAAM;CAI5B;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,GAAG,IAAI,MAAM,CAAA;IACb,WAAW,IAAI,MAAM,CAAA;CACtB;AAED,yDAAyD;AACzD,eAAO,MAAM,YAAY,EAAE,YAG1B,CAAA;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAc;IAyBhB,MAAM,EAAE,aAAa;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAzBxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiD;IAC3E,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,WAAW,CAAI;IACvB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAA4B;IAC5C,sEAAsE;IACtE,OAAO,CAAC,UAAU,CAAoB;IACtC,mEAAmE;IACnE,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,OAAO,CAA6B;IAC5C,8EAA8E;IAC9E,OAAO,CAAC,KAAK,CAAQ;IAErB;;;;;OAKG;gBAEM,MAAM,EAAE,aAAa,EACX,KAAK,GAAE,YAA2B;IAKrD;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA6BrB,8EAA8E;IAC9E,OAAO,CAAC,iBAAiB;IAOzB,iEAAiE;IACjE,OAAO,CAAC,SAAS;IAajB;;;;;;;;;OASG;IACH,OAAO,CAAC,OAAO;IAgBf,wFAAwF;IACxF,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IAED,oFAAoF;IACpF,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIlD,wEAAwE;IACxE,IAAI,YAAY,IAAI,MAAM,EAAE,CAE3B;IAED,6EAA6E;IAC7E,WAAW,CAAC,OAAO,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,IAAI;IAKxE,+DAA+D;IAC/D,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,2EAA2E;IAC3E,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAK/C,qFAAqF;IACrF,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,IAAI;IAKvD,iFAAiF;IACjF,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI;IAKrD,iEAAiE;IACjE,UAAU,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI;IAKvD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAwBnF;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY;IA6BvD;;;;OAIG;IACH,IAAI,IAAI,IAAI;IAQZ;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQjC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQtC,oEAAoE;IACpE,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpC;;;;;OAKG;IACH,KAAK,IAAI,IAAI;IAMb,2EAA2E;IAC3E,QAAQ,IAAI,eAAe;IAsB3B,+EAA+E;IAC/E,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpC,yEAAyE;IACzE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI,GAAG,MAAM,IAAI;IAKlE,OAAO,CAAC,WAAW;IASnB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,MAAM;CAaf;AA+CD,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK7E"}

package/lib/types/pairing.js

@@ -74,6 +74,7 @@ export class PairingService {
     publicBase;
     /** Auto-tunnel status, while the auto-tunnel feature is active. */
     tunnelStatus;
+    relayStatus;
     posture;
     /** True when lastSeenAt changed since the last persist (flushed on sweep). */
     dirty = false;
@@ -205,6 +206,11 @@ export class PairingService {
         this.tunnelStatus = status;
         this.notify();
     }
+    /** Set or clear the relay-registry status frame (undefined when not in play). */
+    setRelayStatus(status) {
+        this.relayStatus = status;
+        this.notify();
+    }
     /** Set the latest /api posture probe result (see posture.ts). */
     setPosture(snapshot) {
         this.posture = snapshot;
@@ -361,6 +367,7 @@ export class PairingService {
             lanAddresses: [...this.lanBases.keys()],
             ...(this.publicBase !== undefined ? { publicUrl: this.publicBase } : {}),
             ...(this.tunnelStatus !== undefined ? { tunnel: this.tunnelStatus } : {}),
+            ...(this.relayStatus !== undefined ? { relay: this.relayStatus } : {}),
             ...(this.posture !== undefined ? { posture: this.posture } : {}),
             ...(token !== undefined ? { tokenId: token.record.id, tokenExpiresAt: token.record.expiresAt } : {}),
             deviceCount: this.devices.size,
@@ -454,6 +461,7 @@ function snapshotsEqual(a, b) {
         && sameStrings(a.lanAddresses, b.lanAddresses)
         && a.publicUrl === b.publicUrl
         && tunnelEqual(a.tunnel, b.tunnel)
+        && relayEqual(a.relay, b.relay)
         && a.tokenId === b.tokenId
         && a.tokenExpiresAt === b.tokenExpiresAt
         && a.deviceCount === b.deviceCount
@@ -477,6 +485,11 @@ function tunnelEqual(a, b) {
     return a === b || (a !== undefined && b !== undefined
         && a.state === b.state && a.url === b.url && a.error === b.error);
 }
+/** Relay frame equality (same shape as the tunnel frame). */
+function relayEqual(a, b) {
+    return a === b || (a !== undefined && b !== undefined
+        && a.state === b.state && a.url === b.url && a.error === b.error);
+}
 /** Element-wise string list equality (interface order is meaningful). */
 function sameStrings(a, b) {
     return a.length === b.length && a.every((value, index) => value === b[index]);

package/lib/types/relay-registry.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Relay registry client: a stable `https://<id>.dsh-market.com` origin in
+ * front of the plugin-managed quick tunnel, so a paired phone keeps one
+ * bookmark and one cookie context across `dsh web` restarts.
+ *
+ * The plugin mints an id + secret on first run and persists them per profile
+ * under `$DSH_HOME/remote-web-ui-registry/`; every tunnel (re)start
+ * re-registers the current quick URL with the market worker. Registration is
+ * best-effort: a registry outage never blocks the tunnel — the QR just falls
+ * back to the raw quick URL for that session (the pre-relay behavior).
+ */
+/** The market worker's registration endpoints (dsh-market.com edge API). */
+export declare const RELAY_REGISTER_URL = "https://dsh-market.com/api/relay/register";
+export declare const RELAY_UNREGISTER_URL = "https://dsh-market.com/api/relay/unregister";
+/**
+ * The public origin template: one stable single-label subdomain per
+ * registration id. Single label on purpose — Universal SSL covers exactly
+ * one subdomain level, so a two-level hostname would get no certificate.
+ */
+export declare const RELAY_BASE_SUFFIX = ".dsh-market.com";
+export declare const RELAY_ID_RE: RegExp;
+export declare const RELAY_SECRET_RE: RegExp;
+/** Persisted per-profile relay identity. */
+export interface RelayIdentity {
+    id: string;
+    secret: string;
+    /**
+     * True only for an identity minted in this process that has never been
+     * accepted by the registry: the first register carries `new_secret` so
+     * the endpoint may create the row; refreshes authenticate with `secret`
+     * alone and must not re-claim an id that already exists.
+     */
+    fresh?: boolean;
+}
+/** The observable relay lifecycle the settings card renders. */
+export type RelayState = {
+    state: 'off';
+} | {
+    state: 'registering';
+} | {
+    state: 'running';
+    url: string;
+} | {
+    state: 'failed';
+    error: string;
+};
+/** Registry storage layout: one file per profile under the relay directory. */
+export declare function relayIdentityFile(profile: string, home?: string): string;
+/** Generate one identity pair (id: 8-byte hex slug; secret: 32-byte base64url). */
+export declare function generateRelayIdentity(random?: (size: number) => Buffer): RelayIdentity;
+/**
+ * Load (or lazily mint) the per-profile relay identity. The file is written
+ * owner-only on first mint; a corrupt file is reminted (the phone then
+ * re-pairs once — the same cost as losing the devices file).
+ */
+export declare function loadRelayIdentity(profile: string, home?: string, random?: (size: number) => Buffer): RelayIdentity;
+/** Best-effort removal of the mapping (used on disable; errors are swallowed). */
+export declare function unregisterRelay(identity: RelayIdentity, endpoint?: string, fetchFn?: typeof fetch): Promise<void>;
+/**
+ * The stable relay base for one identity — the origin the QR and the phone
+ * bookmark use while (or after) the registration is accepted.
+ */
+export declare function relayBaseOf(identity: RelayIdentity): string;
+/**
+ * Registration loop with capped exponential backoff. Re-registration happens
+ * on every tunnel start (the quick URL can change after a crash-restart);
+ * failures retry with backoff and surface the last error to the card.
+ */
+export declare class RelayRegistrar {
+    private readonly identity;
+    private readonly setState;
+    private readonly options;
+    private timer;
+    private attempts;
+    private lastError;
+    private disposed;
+    constructor(identity: RelayIdentity, setState: (state: RelayState) => void, options?: {
+        fetchFn?: typeof fetch;
+        registerUrl?: string;
+        unregisterUrl?: string;
+        baseDelayMs?: number;
+        maxDelayMs?: number;
+        timerFn?: (fn: () => void, ms: number) => NodeJS.Timeout;
+    });
+    /** The stable relay base for the QR while registered. */
+    get baseUrl(): string;
+    /** The last registration failure detail (undefined while healthy). */
+    get error(): string | undefined;
+    /** Push one tunnel target; resolves the stable base once accepted. */
+    announce(target: string): Promise<string | undefined>;
+    /** Best-effort removal of the registry row (the relay toggle turned off). */
+    unregister(): Promise<void>;
+    private scheduleRetry;
+    /** Stop retrying and clear the card state (tunnel stopped or disabled). */
+    dispose(): void;
+}
+//# sourceMappingURL=relay-registry.d.ts.map

package/lib/types/relay-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-registry.d.ts","sourceRoot":"","sources":["../../src/relay-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,8CAA8C,CAAA;AAC7E,eAAO,MAAM,oBAAoB,gDAAgD,CAAA;AACjF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,oBAAoB,CAAA;AAElD,eAAO,MAAM,WAAW,QAAmB,CAAA;AAC3C,eAAO,MAAM,eAAe,QAAwB,CAAA;AAEpD,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,gEAAgE;AAChE,MAAM,MAAM,UAAU,GAClB;IAAE,KAAK,EAAE,KAAK,CAAA;CAAE,GAChB;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,GACxB;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtC,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAkB,GAAG,MAAM,CAKnF;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAoB,GAAG,aAAa,CAMnG;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAkB,EAAE,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAoB,GAAG,aAAa,CAmB1I;AAYD,kFAAkF;AAClF,wBAAsB,eAAe,CACnC,QAAQ,EAAE,aAAa,EACvB,QAAQ,GAAE,MAA6B,EACvC,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAE3D;AAED;;;;GAIG;AACH,qBAAa,cAAc;IAOvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAR1B,OAAO,CAAC,KAAK,CAA4B;IACzC,OAAO,CAAC,QAAQ,CAAI;IACpB,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,QAAQ,CAAQ;gBAGL,QAAQ,EAAE,aAAa,EACvB,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,EACrC,OAAO,GAAE;QACxB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;QACtB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC,OAAO,CAAA;KACpD;IAGR,yDAAyD;IACzD,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,sEAAsE;IACtE,IAAI,KAAK,IAAI,MAAM,GAAG,SAAS,CAE9B;IAED,sEAAsE;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAyC3D,6EAA6E;IACvE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,OAAO,CAAC,aAAa;IAiBrB,2EAA2E;IAC3E,OAAO,IAAI,IAAI;CAQhB"}

package/lib/types/relay-registry.js

@@ -0,0 +1,191 @@
+/**
+ * Relay registry client: a stable `https://<id>.dsh-market.com` origin in
+ * front of the plugin-managed quick tunnel, so a paired phone keeps one
+ * bookmark and one cookie context across `dsh web` restarts.
+ *
+ * The plugin mints an id + secret on first run and persists them per profile
+ * under `$DSH_HOME/remote-web-ui-registry/`; every tunnel (re)start
+ * re-registers the current quick URL with the market worker. Registration is
+ * best-effort: a registry outage never blocks the tunnel — the QR just falls
+ * back to the raw quick URL for that session (the pre-relay behavior).
+ */
+import { randomBytes } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { dshHome } from "./dsh-home.js";
+/** The market worker's registration endpoints (dsh-market.com edge API). */
+export const RELAY_REGISTER_URL = 'https://dsh-market.com/api/relay/register';
+export const RELAY_UNREGISTER_URL = 'https://dsh-market.com/api/relay/unregister';
+/**
+ * The public origin template: one stable single-label subdomain per
+ * registration id. Single label on purpose — Universal SSL covers exactly
+ * one subdomain level, so a two-level hostname would get no certificate.
+ */
+export const RELAY_BASE_SUFFIX = '.dsh-market.com';
+export const RELAY_ID_RE = /^[a-z0-9]{16}$/;
+export const RELAY_SECRET_RE = /^[A-Za-z0-9_-]{43}$/;
+/** Registry storage layout: one file per profile under the relay directory. */
+export function relayIdentityFile(profile, home = dshHome()) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(profile)) {
+        throw new Error(`relay registry: profile ${JSON.stringify(profile)} is not a safe path segment`);
+    }
+    return join(home, 'remote-web-ui-registry', `${profile}.json`);
+}
+/** Generate one identity pair (id: 8-byte hex slug; secret: 32-byte base64url). */
+export function generateRelayIdentity(random = randomBytes) {
+    return {
+        id: random(8).toString('hex'),
+        secret: random(32).toString('base64url'),
+        fresh: true,
+    };
+}
+/**
+ * Load (or lazily mint) the per-profile relay identity. The file is written
+ * owner-only on first mint; a corrupt file is reminted (the phone then
+ * re-pairs once — the same cost as losing the devices file).
+ */
+export function loadRelayIdentity(profile, home = dshHome(), random = randomBytes) {
+    const file = relayIdentityFile(profile, home);
+    try {
+        if (existsSync(file)) {
+            const parsed = JSON.parse(readFileSync(file, 'utf8'));
+            if (typeof parsed.id === 'string' && RELAY_ID_RE.test(parsed.id)
+                && typeof parsed.secret === 'string' && RELAY_SECRET_RE.test(parsed.secret)) {
+                // A persisted identity has certainly been registered before.
+                return { id: parsed.id, secret: parsed.secret };
+            }
+            console.warn(`relay registry: ${file} is malformed — reminting the identity (paired devices must scan the QR once more)`);
+        }
+    }
+    catch (error) {
+        console.warn(`relay registry: could not read ${file} (${error instanceof Error ? error.message : String(error)}) — reminting`);
+    }
+    const identity = generateRelayIdentity(random);
+    mkdirSync(dirname(file), { recursive: true });
+    writeFileSync(file, JSON.stringify({ id: identity.id, secret: identity.secret }, null, 2) + '\n', { mode: 0o600 });
+    return identity;
+}
+/** Build the registration request body for one identity + tunnel target. */
+function registrationBody(identity, target) {
+    return JSON.stringify({
+        id: identity.id,
+        secret: identity.secret,
+        new_secret: identity.fresh === true ? identity.secret : undefined,
+        target,
+    });
+}
+/** Best-effort removal of the mapping (used on disable; errors are swallowed). */
+export async function unregisterRelay(identity, endpoint = RELAY_UNREGISTER_URL, fetchFn = fetch) {
+    await fetchFn(endpoint, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ id: identity.id, secret: identity.secret }),
+    });
+}
+/**
+ * The stable relay base for one identity — the origin the QR and the phone
+ * bookmark use while (or after) the registration is accepted.
+ */
+export function relayBaseOf(identity) {
+    return `https://${identity.id}${RELAY_BASE_SUFFIX}`;
+}
+/**
+ * Registration loop with capped exponential backoff. Re-registration happens
+ * on every tunnel start (the quick URL can change after a crash-restart);
+ * failures retry with backoff and surface the last error to the card.
+ */
+export class RelayRegistrar {
+    identity;
+    setState;
+    options;
+    timer;
+    attempts = 0;
+    lastError;
+    disposed = false;
+    constructor(identity, setState, options = {}) {
+        this.identity = identity;
+        this.setState = setState;
+        this.options = options;
+    }
+    /** The stable relay base for the QR while registered. */
+    get baseUrl() {
+        return relayBaseOf(this.identity);
+    }
+    /** The last registration failure detail (undefined while healthy). */
+    get error() {
+        return this.lastError;
+    }
+    /** Push one tunnel target; resolves the stable base once accepted. */
+    async announce(target) {
+        // A disposed registrar stays disposed: a pending retry timer must not
+        // resurrect it (re-enabling creates a fresh registrar instead).
+        if (this.disposed)
+            return undefined;
+        if (this.timer !== undefined) {
+            clearTimeout(this.timer);
+            this.timer = undefined;
+        }
+        this.setState({ state: 'registering' });
+        try {
+            const fetchFn = this.options.fetchFn ?? fetch;
+            const response = await fetchFn(this.options.registerUrl ?? RELAY_REGISTER_URL, {
+                method: 'PUT',
+                headers: { 'content-type': 'application/json' },
+                body: registrationBody(this.identity, target),
+            });
+            if (!response.ok) {
+                const detail = await response.json().catch(() => undefined);
+                const error = detail && typeof detail.error === 'string' ? detail.error : `HTTP ${String(response.status)}`;
+                throw new Error(error);
+            }
+            // The row exists now: never claim a fresh id twice.
+            this.identity.fresh = false;
+            this.attempts = 0;
+            this.lastError = undefined;
+            this.setState({ state: 'running', url: this.baseUrl });
+            return this.baseUrl;
+        }
+        catch (error) {
+            this.lastError = error instanceof Error ? error.message : String(error);
+            if (this.lastError === 'invalid-params' && this.identity.fresh !== true) {
+                // The registry lost the row (a D1 restore or manual wipe): re-claim
+                // the id with a fresh claim on the next retry. A 403 auth-failed
+                // means the id is owned by another secret and stays failed.
+                this.identity.fresh = true;
+            }
+            this.setState({ state: 'failed', error: this.lastError });
+            this.scheduleRetry(target);
+            return undefined;
+        }
+    }
+    /** Best-effort removal of the registry row (the relay toggle turned off). */
+    async unregister() {
+        await unregisterRelay(this.identity, this.options.unregisterUrl, this.options.fetchFn);
+    }
+    scheduleRetry(target) {
+        if (this.disposed)
+            return;
+        const base = this.options.baseDelayMs ?? 5_000;
+        const max = this.options.maxDelayMs ?? 60_000;
+        const delay = Math.min(base * 2 ** this.attempts, max);
+        this.attempts += 1;
+        const timerFn = this.options.timerFn ?? ((fn, ms) => {
+            const timer = setTimeout(fn, ms);
+            timer.unref?.();
+            return timer;
+        });
+        this.timer = timerFn(() => {
+            this.timer = undefined;
+            void this.announce(target);
+        }, delay);
+    }
+    /** Stop retrying and clear the card state (tunnel stopped or disabled). */
+    dispose() {
+        this.disposed = true;
+        if (this.timer !== undefined) {
+            clearTimeout(this.timer);
+            this.timer = undefined;
+        }
+        this.setState({ state: 'off' });
+    }
+}

package/lib/types/tunnel-plan.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Pure planner for the settings-sync tunnel branch: given the resolved
+ * settings slice, decide which tunnel mode runs and with what target. Kept
+ * free of cordis types so the precedence matrix is unit-testable without a
+ * host context.
+ */
+/** Whether a configured public base is a parseable http(s) URL with a host. */
+export declare function isHttpUrl(value: string): boolean;
+/** How the settings sync should drive the tunnel for one resolved value. */
+export type TunnelPlan = {
+    mode: 'off';
+} | {
+    mode: 'quick';
+    targetUrl: string;
+    ignored: Array<'tunnelToken' | 'publicBaseUrl'>;
+} | {
+    mode: 'named';
+    token: string;
+    publicUrl: string;
+};
+/**
+ * Decide the tunnel mode and target from one resolved settings value.
+ * Precedence: the quick tunnel wins when `autoTunnel` is on (anything else
+ * configured is reported as ignored); the named tunnel runs only with a
+ * token AND a valid public hostname (the token does not carry the hostname,
+ * so the QR base and the fence trust would have no source without it);
+ * otherwise no tunnel and the manual public base applies.
+ * @param value - the resolved settings slice that drives the tunnel.
+ * @param port - the local webServer port the tunnel forwards to.
+ */
+export declare function tunnelPlanOf(value: {
+    autoTunnel?: boolean;
+    tunnelToken?: string;
+    publicBaseUrl?: string;
+}, port: number): TunnelPlan;
+//# sourceMappingURL=tunnel-plan.d.ts.map

package/lib/types/tunnel-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-plan.d.ts","sourceRoot":"","sources":["../../src/tunnel-plan.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,+EAA+E;AAC/E,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAOhD;AAED,4EAA4E;AAC5E,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GACf;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC,aAAa,GAAG,eAAe,CAAC,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvD;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,EAC7E,IAAI,EAAE,MAAM,GACX,UAAU,CAcZ"}

package/lib/types/tunnel-plan.js

@@ -0,0 +1,43 @@
+/**
+ * Pure planner for the settings-sync tunnel branch: given the resolved
+ * settings slice, decide which tunnel mode runs and with what target. Kept
+ * free of cordis types so the precedence matrix is unit-testable without a
+ * host context.
+ */
+/** Whether a configured public base is a parseable http(s) URL with a host. */
+export function isHttpUrl(value) {
+    try {
+        const url = new URL(value);
+        return (url.protocol === 'http:' || url.protocol === 'https:') && url.hostname !== '';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Decide the tunnel mode and target from one resolved settings value.
+ * Precedence: the quick tunnel wins when `autoTunnel` is on (anything else
+ * configured is reported as ignored); the named tunnel runs only with a
+ * token AND a valid public hostname (the token does not carry the hostname,
+ * so the QR base and the fence trust would have no source without it);
+ * otherwise no tunnel and the manual public base applies.
+ * @param value - the resolved settings slice that drives the tunnel.
+ * @param port - the local webServer port the tunnel forwards to.
+ */
+export function tunnelPlanOf(value, port) {
+    if (value.autoTunnel === true) {
+        const ignored = [];
+        if (value.tunnelToken !== undefined && value.tunnelToken !== '')
+            ignored.push('tunnelToken');
+        if (value.publicBaseUrl !== undefined && value.publicBaseUrl !== '')
+            ignored.push('publicBaseUrl');
+        return { mode: 'quick', targetUrl: `http://127.0.0.1:${String(port)}`, ignored };
+    }
+    if (value.tunnelToken !== undefined && value.tunnelToken !== '') {
+        if (value.publicBaseUrl !== undefined && isHttpUrl(value.publicBaseUrl)) {
+            return { mode: 'named', token: value.tunnelToken, publicUrl: value.publicBaseUrl };
+        }
+        return { mode: 'off' };
+    }
+    return { mode: 'off' };
+}

package/lib/types/tunnel.d.ts

@@ -1,9 +1,12 @@
 /**
- * Auto-tunnel manager: spawns a Cloudflare quick tunnel (`cloudflared
- * tunnel --url <local>`) through the `cloudflared` npm package — its
- * postinstall downloads the platform binary, so no user-side tooling is
- * involved — surfaces the minted `https://xxx.trycloudflare.com` URL, and
- * restarts the process after unexpected exits with exponential backoff.
+ * Auto-tunnel manager: spawns a Cloudflare tunnel through the `cloudflared`
+ * npm package — its postinstall downloads the platform binary, so no
+ * user-side tooling is involved — surfaces the public URL, and restarts the
+ * process after unexpected exits with exponential backoff. Two modes: the
+ * accountless quick tunnel (`https://xxx.trycloudflare.com`, hostname minted
+ * per start) and an account named tunnel (`cloudflared tunnel run --token`,
+ * fixed public hostname — the mode that lets a paired phone keep its
+ * bookmark and pairing cookie across restarts).
  *
  * The cloudflared package's Tunnel is a thin spawn wrapper; this manager
  * owns the lifecycle policy (binary readiness, URL timeout, restart
@@ -13,6 +16,42 @@
  */
 /** The observable tunnel lifecycle the settings/panel surfaces render. */
 export type TunnelPhase = 'stopped' | 'starting' | 'running' | 'failed';
+/**
+ * What the manager should run. `quick` is the accountless trycloudflare
+ * tunnel whose hostname is minted per start (and dies with the process);
+ * `named` is an account tunnel whose public hostname is fixed — the point
+ * of the named mode is that a paired phone keeps its bookmark and its
+ * pairing cookie across restarts.
+ */
+export type TunnelTarget = {
+    kind: 'quick';
+    targetUrl: string;
+    originHostHeader?: string;
+} | {
+    kind: 'named';
+    token: string;
+    publicUrl: string;
+};
+/** The event face the named adapter wraps (a cloudflared package Tunnel). */
+interface NamedTunnelProcess {
+    on(event: 'connected', listener: () => void): unknown;
+    on(event: 'exit', listener: (code: number | null, signal: NodeJS.Signals | null) => void): unknown;
+    on(event: 'error', listener: (value: Error) => void): unknown;
+    off(event: string, listener: (...args: any[]) => void): unknown;
+    stop(): boolean;
+}
+/**
+ * Wrap a named-tunnel process so it fits the quick-tunnel handle shape: the
+ * fixed public URL is reported through the same `url` event once the first
+ * edge connection registers (cloudflared fires `connected` per connection,
+ * so only the first is taken), and exit/error pass through. The manager's
+ * URL timeout, crash-restart backoff, and stop semantics then stay fully
+ * mode-agnostic.
+ * @param inner - the running named-tunnel process.
+ * @param publicUrl - the fixed public hostname ingress maps to this server.
+ * @returns a handle emitting `url` once the tunnel is reachable.
+ */
+export declare function namedTunnelHandle(inner: NamedTunnelProcess, publicUrl: string): TunnelHandle;
 /** One tunnel status frame. */
 export interface TunnelInfo {
     phase: TunnelPhase;
@@ -29,8 +68,8 @@ export interface TunnelHandle {
 }
 /** Injectable seams (defaults are the real cloudflared package + node timers). */
 export interface TunnelManagerOptions {
-    /** Spawn one quick tunnel toward the local target URL. */
-    factory?: (targetUrl: string) => TunnelHandle;
+    /** Spawn one tunnel process for the target (quick or named). */
+    factory?: (target: TunnelTarget) => TunnelHandle;
     /** Make sure the cloudflared binary exists, downloading it when absent. */
     ensureBinary?: () => Promise<void>;
     /** Wait up to this long for the tunnel URL before failing the attempt. */
@@ -45,6 +84,15 @@ export interface TunnelManagerOptions {
         clearTimeout(t: unknown): void;
     };
 }
+/**
+ * Spawn flags for one quick target. `originHostHeader` stamps the Host the
+ * local webserver sees: the plugin's phone-facing fence trusts the configured
+ * public host (the stable relay origin, Host-bound) and the harness
+ * browser-auth binds cookies to the Host authority, while the Workers relay
+ * cannot control the origin-side Host at all (fetch forces it to the URL
+ * authority) — so the connector must restamp it with the stable origin.
+ */
+export declare function quickTunnelFlags(originHostHeader?: string): Record<string, string | boolean>;
 /**
  * Own the lifecycle of one auto-tunnel: start/stop, URL surfacing, and
  * crash-restart backoff.
@@ -59,7 +107,7 @@ export declare class TunnelManager {
     private phase;
     private url;
     private error;
-    private targetUrl;
+    private target;
     private handle;
     private urlTimer;
     private restartTimer;
@@ -75,12 +123,16 @@ export declare class TunnelManager {
     /** The current status frame. */
     get info(): TunnelInfo;
     /**
-     * Start (or keep) a quick tunnel toward `targetUrl`. Restarting with a
-     * different target tears the old tunnel down first; restarting with the
-     * same target while running is a no-op.
-     * @param targetUrl - the local URL to expose, e.g. `http://127.0.0.1:3080`.
+     * Start (or keep) a tunnel toward `target`. Restarting with a different
+     * target tears the old tunnel down first; restarting with the same target
+     * while running is a no-op. A string is the quick mode's local target URL.
+     *
+     * In quick mode the URL surfaces when cloudflared mints the ephemeral
+     * trycloudflare hostname; in named mode the fixed `publicUrl` surfaces
+     * once the first edge connection registers (see {@link namedTunnelHandle}).
+     * @param target - what to run (a string means quick toward that local URL).
      */
-    start(targetUrl: string): void;
+    start(target: TunnelTarget | string): void;
     /** Stop the tunnel for good: no restarts, no state. */
     stop(): void;
     /** Alias of {@link stop} for plugin-effect disposal. */
@@ -97,4 +149,5 @@ export declare class TunnelManager {
     private teardown;
     private setPhase;
 }
+export {};
 //# sourceMappingURL=tunnel.d.ts.map

package/lib/types/tunnel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tunnel.d.ts","sourceRoot":"","sources":["../../src/tunnel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,0EAA0E;AAC1E,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEvE,+BAA+B;AAC/B,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,WAAW,CAAA;IAClB,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,GAAG,OAAO,CAAA;IAC9D,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,GAAG,OAAO,CAAA;IAC/D,IAAI,IAAI,OAAO,CAAA;CAChB;AAED,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACnC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,YAAY,CAAA;IAC7C,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wCAAwC;IACxC,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAA;CAC5F;AAwBD;;;GAGG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAC7D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqF;IAE3G,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,GAAG,CAAoB;IAC/B,OAAO,CAAC,KAAK,CAAoB;IACjC,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAI;IAGpB,OAAO,CAAC,UAAU,CAAI;IACtB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmC;IAChE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwC;IAEvE;;OAEG;gBACS,OAAO,GAAE,oBAAyB;IAS9C,gCAAgC;IAChC,IAAI,IAAI,IAAI,UAAU,CAMrB;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAU9B,uDAAuD;IACvD,IAAI,IAAI,IAAI;IAOZ,wDAAwD;IACxD,OAAO,IAAI,IAAI;IAIf,4EAA4E;IAC5E,KAAK,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAKlD,uCAAuC;IACvC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI;IAKzD,OAAO,CAAC,OAAO;IAqCf,OAAO,CAAC,SAAS;IAkBjB,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,IAAI;IAqBZ,iFAAiF;IACjF,OAAO,CAAC,QAAQ;IAgBhB,OAAO,CAAC,QAAQ;CAWjB"}
+{"version":3,"file":"tunnel.d.ts","sourceRoot":"","sources":["../../src/tunnel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,0EAA0E;AAC1E,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEvE;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAA;AAQvD,6EAA6E;AAC7E,UAAU,kBAAkB;IAC1B,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAA;IACrD,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,KAAK,IAAI,GAAG,OAAO,CAAA;IAClG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAA;IAC7D,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,GAAG,OAAO,CAAA;IAC/D,IAAI,IAAI,OAAO,CAAA;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,CA4B5F;AAED,+BAA+B;AAC/B,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,WAAW,CAAA;IAClB,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,GAAG,OAAO,CAAA;IAC9D,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,GAAG,OAAO,CAAA;IAC/D,IAAI,IAAI,OAAO,CAAA;CAChB;AAED,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACnC,gEAAgE;IAChE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,YAAY,CAAA;IAChD,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wCAAwC;IACxC,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAA;CAC5F;AAWD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAI5F;AAqBD;;;GAGG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAChE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqF;IAE3G,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,GAAG,CAAoB;IAC/B,OAAO,CAAC,KAAK,CAAoB;IACjC,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAI;IAGpB,OAAO,CAAC,UAAU,CAAI;IACtB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmC;IAChE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwC;IAEvE;;OAEG;gBACS,OAAO,GAAE,oBAAyB;IAS9C,gCAAgC;IAChC,IAAI,IAAI,IAAI,UAAU,CAMrB;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,GAAG,IAAI;IAW1C,uDAAuD;IACvD,IAAI,IAAI,IAAI;IAOZ,wDAAwD;IACxD,OAAO,IAAI,IAAI;IAIf,4EAA4E;IAC5E,KAAK,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAKlD,uCAAuC;IACvC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI;IAKzD,OAAO,CAAC,OAAO;IAqCf,OAAO,CAAC,SAAS;IAkBjB,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,IAAI;IAqBZ,iFAAiF;IACjF,OAAO,CAAC,QAAQ;IAgBhB,OAAO,CAAC,QAAQ;CAWjB"}