@miraj181/ipingyou 1.0.0 → 1.0.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraj181/ipingyou",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "SecureLink-CLI — Secure peer-to-peer remote access via SSH & Cloudflare Tunnels",
   "main": "src/cli.js",
   "bin": {
@@ -8,14 +8,14 @@
     "securelink": "src/cli.js"
   },
   "files": [
-    "src/",
+    "src/cli.js",
+    "src/lib/",
+    "src/modes/",
     "README.md",
     "LICENSE"
   ],
   "scripts": {
     "start": "node src/cli.js",
-    "broker": "node src/server.js",
-    "dev:broker": "nodemon src/server.js",
     "dev:cli": "node src/cli.js",
     "prepublishOnly": "node -e \"require('fs').accessSync('LICENSE')\" && node src/cli.js --help"
   },
@@ -44,9 +44,7 @@
   "dependencies": {
     "chalk": "^5.3.0",
     "commander": "^12.1.0",
-    "dotenv": "^16.4.5",
     "execa": "^9.5.2",
-    "express": "^4.21.0",
     "inquirer": "^12.3.2",
     "nanoid": "^5.0.9",
     "ora": "^8.1.1",

package/src/cli.js

@@ -11,7 +11,6 @@
  *    npx ipingyou              — Interactive mode
  *    npx ipingyou host         — Start as host directly
  *    npx ipingyou connect      — Start as client directly
- *    npx ipingyou broker       — Start the central broker
  *
  *  Security:
  *    All tunnel URLs are AES-256-CBC encrypted on the CLI side.
@@ -19,7 +18,6 @@
  * ============================================================
  */
 
-import 'dotenv/config';
 import { Command } from 'commander';
 import inquirer from 'inquirer';
 import chalk from 'chalk';
@@ -61,7 +59,6 @@ function showRichHelp() {
   console.log(`    ${chalk.green('host')}    : Generates a secure session UID and exposes your local machine.`);
   console.log(`    ${chalk.blue('connect')} : Prompts for a UID to connect to a remote host.`);
   console.log(`              ${chalk.dim('Supports Interactive SSH Shell & SCP File Transfers')}`);
-  console.log(`    ${chalk.yellow('broker')}  : Start your own relay server (for self-hosting).`);
   console.log('');
   
   console.log(chalk.bold.white('  🔒 Security Architecture:'));
@@ -74,7 +71,6 @@ function showRichHelp() {
   console.log(`    $ npx ipingyou          ${chalk.dim('# Interactive wizard (Recommended)')}`);
   console.log(`    $ npx ipingyou host     ${chalk.dim('# Quick start as Host')}`);
   console.log(`    $ npx ipingyou connect  ${chalk.dim('# Quick start as Client')}`);
-  console.log(`    $ npx ipingyou broker   ${chalk.dim('# Start Relay')}`);
   console.log('');
 }
 
@@ -134,10 +130,6 @@ async function interactiveMode() {
           value: 'client',
         },
         new inquirer.Separator(),
-        {
-          name: `${chalk.yellow('📡 Start Broker Server')}  ${chalk.dim('— Run the central relay (for self-hosting)')}`,
-          value: 'broker',
-        },
         {
           name: `${chalk.magenta('📖 Help / Information')}   ${chalk.dim('— Learn how iPingYou works')}`,
           value: 'help',
@@ -153,23 +145,12 @@ async function interactiveMode() {
     case 'client':
       await startClientMode();
       break;
-    case 'broker':
-      await startBroker();
-      break;
     case 'help':
       showRichHelp();
       break;
   }
 }
 
-// ─── Broker Start ────────────────────────────────────────────
-async function startBroker() {
-  console.log(chalk.cyan('  Starting broker server...'));
-  console.log('');
-  // Dynamically import the server (it self-starts on import)
-  await import('./server.js');
-}
-
 // ─── Commander Setup ─────────────────────────────────────────
 const program = new Command();
 
@@ -214,20 +195,6 @@ program
     }
   });
 
-program
-  .command('broker')
-  .description('Start the central broker server')
-  .option('-p, --port <port>', 'Port to listen on', '4000')
-  .action(async (opts) => {
-    try {
-      if (opts.port) process.env.BROKER_PORT = opts.port;
-      showBanner();
-      await startBroker();
-    } catch (err) {
-      fatal('broker', err);
-    }
-  });
-
 // ─── Default: interactive mode ──────────────────────────────
 program.action(async () => {
   try {

package/src/modes/client.js

@@ -19,7 +19,7 @@ import { decrypt } from '../lib/crypto.js';
 import { trackPID, untrackPID } from '../lib/cleanup.js';
 import { createSpinner, sshSpinner, networkSpinner, fileTransferSpinner, showConnectionTrace, animatedSteps, simulateTransferProgress } from '../lib/animations.js';
 
-const BROKER_URL = process.env.BROKER_URL || 'http://localhost:4000';
+const BROKER_URL = process.env.BROKER_URL || 'https://ipingyou.onrender.com';
 
 /**
  * Resolve a UID to a tunnel URL via the broker.

package/src/modes/host.js

@@ -22,7 +22,7 @@ import { trackPID, untrackPID, setRevokeOnExit } from '../lib/cleanup.js';
 import { detectOS } from '../lib/platform.js';
 import { createSpinner, cryptoSpinner, tunnelSpinner, networkSpinner, typeText } from '../lib/animations.js';
 
-const BROKER_URL = process.env.BROKER_URL || 'http://localhost:4000';
+const BROKER_URL = process.env.BROKER_URL || 'https://ipingyou.onrender.com';
 
 /**
  * Ensure the local SSH server is running.
@@ -307,7 +307,6 @@ export async function startHostMode() {
   const registered = await registerWithBroker(uid, tunnel.url);
   if (!registered) {
     console.error(chalk.red(`\n  ❌ FATAL: Could not register with broker at ${BROKER_URL}`));
-    console.log(chalk.dim('     Is the broker running? Try: npx ipingyou broker'));
     process.exit(1);
   }
 

package/src/server.js

@@ -1,144 +0,0 @@
-/**
- * ============================================================
- *  SecureLink-CLI — Central Broker Server
- * ============================================================
- *  A lightweight REST relay that pairs hosts and clients via
- *  temporary UIDs.  The broker is a DUMB PIPE — it stores and
- *  returns encrypted blobs without ever seeing plaintext.
- *  Encryption/decryption happens ONLY on the CLI side.
- * ============================================================
- */
-
-import 'dotenv/config';
-import express from 'express';
-
-const app = express();
-app.use(express.json());
-
-// ─── In-memory store — auto-expire after TTL ─────────────────
-const TTL_MS = 60 * 60 * 1000; // 1 hour
-const store = new Map(); // uid → { iv, ciphertext, createdAt }
-
-function pruneExpired() {
-  const now = Date.now();
-  for (const [uid, entry] of store) {
-    if (now - entry.createdAt > TTL_MS) {
-      store.delete(uid);
-      console.log(`🗑️  Expired UID: ${uid}`);
-    }
-  }
-}
-
-// Run pruning every 5 minutes
-setInterval(pruneExpired, 5 * 60 * 1000);
-
-// ─── Routes ──────────────────────────────────────────────────
-
-// Health
-app.get('/health', (_req, res) => {
-  res.json({ status: 'ok', uptime: process.uptime(), activeUIDs: store.size });
-});
-
-/**
- * POST /register
- * Body: { uid: string, iv: string, ciphertext: string }
- *
- * The broker receives an ALREADY-ENCRYPTED blob from the host CLI.
- * It never decrypts — just stores the { iv, ciphertext } pair.
- */
-app.post('/register', (req, res) => {
-  try {
-    const { uid, iv, ciphertext } = req.body;
-
-    if (!uid || !iv || !ciphertext) {
-      return res.status(400).json({ error: 'Missing uid, iv, or ciphertext' });
-    }
-
-    if (typeof uid !== 'string' || uid.length < 6 || uid.length > 16) {
-      return res.status(400).json({ error: 'Invalid UID format (6-16 chars)' });
-    }
-
-    // Validate IV format — must be 32 hex chars (16 bytes)
-    if (!/^[a-f0-9]{32}$/i.test(iv)) {
-      return res.status(400).json({ error: 'Invalid IV format (expected 32 hex chars)' });
-    }
-
-    // Validate ciphertext is non-empty base64
-    if (typeof ciphertext !== 'string' || ciphertext.length === 0) {
-      return res.status(400).json({ error: 'Invalid ciphertext' });
-    }
-
-    // Store the encrypted blob as-is — broker NEVER decrypts
-    store.set(uid, {
-      iv,
-      ciphertext,
-      createdAt: Date.now(),
-    });
-
-    console.log(`✅ [${new Date().toLocaleTimeString()}] Registered UID: ${uid} (encrypted, ${ciphertext.length} bytes)`);
-    res.json({ status: 'registered', uid, expiresIn: '1 hour' });
-  } catch (err) {
-    console.error('❌ Register error:', err.message);
-    res.status(500).json({ error: 'Internal server error' });
-  }
-});
-
-/**
- * GET /resolve/:uid
- * Returns the ENCRYPTED blob { iv, ciphertext } for a given UID.
- * The client CLI decrypts it locally — the broker never sees plaintext.
- */
-app.get('/resolve/:uid', (req, res) => {
-  try {
-    const { uid } = req.params;
-    const entry = store.get(uid);
-
-    if (!entry) {
-      return res.status(404).json({ error: 'UID not found or expired' });
-    }
-
-    // Check TTL
-    if (Date.now() - entry.createdAt > TTL_MS) {
-      store.delete(uid);
-      return res.status(410).json({ error: 'UID expired' });
-    }
-
-    console.log(`🔍 [${new Date().toLocaleTimeString()}] Resolved UID: ${uid} (returning encrypted blob)`);
-
-    // Return encrypted blob — client decrypts
-    res.json({ uid, iv: entry.iv, ciphertext: entry.ciphertext });
-  } catch (err) {
-    console.error('❌ Resolve error:', err.message);
-    res.status(500).json({ error: 'Internal server error' });
-  }
-});
-
-/**
- * DELETE /revoke/:uid
- * Allows host to explicitly remove their UID before expiry.
- */
-app.delete('/revoke/:uid', (req, res) => {
-  const { uid } = req.params;
-  const existed = store.delete(uid);
-  console.log(`🚫 [${new Date().toLocaleTimeString()}] Revoked UID: ${uid} (existed: ${existed})`);
-  res.json({ status: existed ? 'revoked' : 'not_found' });
-});
-
-// ─── Launch ──────────────────────────────────────────────────
-// Render injects PORT; locally we use BROKER_PORT; fallback 4000
-const PORT = process.env.PORT || process.env.BROKER_PORT || 4000;
-const HOST = process.env.HOST || '0.0.0.0';
-
-app.listen(PORT, HOST, () => {
-  console.log('');
-  console.log('  ╔══════════════════════════════════════════╗');
-  console.log('  ║   🔗  SecureLink Broker — Active         ║');
-  console.log(`  ║   📡  Port: ${String(PORT).padEnd(29)}║`);
-  console.log('  ║   🔒  Zero-Knowledge Encrypted Store     ║');
-  console.log('  ║   ⏱️   TTL: 1 hour per UID                ║');
-  console.log('  ║   🚫  Broker NEVER sees plaintext        ║');
-  console.log('  ╚══════════════════════════════════════════╝');
-  console.log('');
-});
-
-export default app;