@openchambery/web 1.17.1-beta.7 → 1.17.1-beta.8

package/bin/lib/cli-args.js

@@ -63,23 +63,11 @@ function parseArgs(argv = process.argv.slice(2)) {
     all: false,
     follow: true,
     lines: DEFAULT_TAIL_LINES,
-    provider: undefined,
-    mode: undefined,
-    profile: undefined,
     name: undefined,
-    configPath: undefined,
-    token: undefined,
-    tokenFile: undefined,
-    tokenStdin: false,
     hostname: undefined,
     server: undefined,
-    connectTtl: undefined,
-    sessionTtl: undefined,
     qr: false,
     explicitQr: false,
-    force: false,
-    showSecrets: false,
-    dryRun: false,
     plain: false,
     quiet: false,
     explicitPort: false,
@@ -170,51 +158,12 @@ function parseArgs(argv = process.argv.slice(2)) {
         options.explicitUiPassword = true;
         break;
       }
-      case 'provider': {
-        const { value, nextIndex } = consumeValue(i, inlineValue);
-        i = nextIndex;
-        options.provider = typeof value === 'string' ? value : options.provider;
-        break;
-      }
-      case 'mode': {
-        const { value, nextIndex } = consumeValue(i, inlineValue);
-        i = nextIndex;
-        options.mode = typeof value === 'string' ? value : options.mode;
-        break;
-      }
-      case 'profile': {
-        const { value, nextIndex } = consumeValue(i, inlineValue);
-        i = nextIndex;
-        options.profile = typeof value === 'string' ? value : options.profile;
-        break;
-      }
       case 'name': {
         const { value, nextIndex } = consumeValue(i, inlineValue);
         i = nextIndex;
         options.name = typeof value === 'string' ? value : options.name;
         break;
       }
-      case 'config': {
-        const { value, nextIndex } = consumeValue(i, inlineValue);
-        i = nextIndex;
-        options.configPath = typeof value === 'string' ? value : null;
-        break;
-      }
-      case 'token': {
-        const { value, nextIndex } = consumeValue(i, inlineValue);
-        i = nextIndex;
-        options.token = typeof value === 'string' ? value : options.token;
-        break;
-      }
-      case 'token-file': {
-        const { value, nextIndex } = consumeValue(i, inlineValue);
-        i = nextIndex;
-        options.tokenFile = typeof value === 'string' ? value : options.tokenFile;
-        break;
-      }
-      case 'token-stdin':
-        options.tokenStdin = true;
-        break;
       case 'hostname': {
         const { value, nextIndex } = consumeValue(i, inlineValue);
         i = nextIndex;
@@ -231,18 +180,6 @@ function parseArgs(argv = process.argv.slice(2)) {
         options.server = value.trim();
         break;
       }
-      case 'connect-ttl': {
-        const { value, nextIndex } = consumeValue(i, inlineValue);
-        i = nextIndex;
-        options.connectTtl = typeof value === 'string' ? value : options.connectTtl;
-        break;
-      }
-      case 'session-ttl': {
-        const { value, nextIndex } = consumeValue(i, inlineValue);
-        i = nextIndex;
-        options.sessionTtl = typeof value === 'string' ? value : options.sessionTtl;
-        break;
-      }
       case 'json':
         options.json = true;
         break;
@@ -275,15 +212,6 @@ function parseArgs(argv = process.argv.slice(2)) {
         options.qr = false;
         options.explicitQr = true;
         break;
-      case 'force':
-        options.force = true;
-        break;
-      case 'show-secrets':
-        options.showSecrets = true;
-        break;
-      case 'dry-run':
-        options.dryRun = true;
-        break;
       case 'plain':
         options.plain = true;
         break;
@@ -312,21 +240,15 @@ function parseArgs(argv = process.argv.slice(2)) {
         // may still pass this when starting a remote server.
         break;
       case 'try-cf-tunnel':
-        removedFlagErrors.push('`--try-cf-tunnel` was removed. Use: openchamber tunnel start --provider cloudflare --mode quick');
-        break;
       case 'tunnel-qr':
-        removedFlagErrors.push('`--tunnel-qr` was removed. Use: openchamber tunnel start ... --qr');
-        break;
       case 'tunnel-password-url':
-        removedFlagErrors.push('`--tunnel-password-url` was removed. Use UI password auth directly after tunnel start.');
-        break;
       case 'tunnel-provider':
       case 'tunnel-mode':
       case 'tunnel-config':
       case 'tunnel-token':
       case 'tunnel-hostname':
       case 'tunnel':
-        removedFlagErrors.push(`\`--${name}\` was removed from top-level serve flow. Use: openchamber tunnel start ...`);
+        removedFlagErrors.push(`\`--${name}\` was removed. Use LAN pairing (\`openchamber connect-url\`) or private relay instead.`);
         break;
       default:
         if (!long && name.length === 1) {
@@ -339,22 +261,18 @@ function parseArgs(argv = process.argv.slice(2)) {
   }
 
   const command = positional[0] || 'serve';
-  const subcommand = command === 'tunnel' ? (positional[1] || 'help') : null;
-  const tunnelAction = command === 'tunnel' ? (positional[2] || null) : null;
   const startupAction = command === 'startup' ? (positional[1] || 'status') : null;
 
   if (options.lan && typeof options.host !== 'string') {
     options.host = '0.0.0.0';
   }
 
-  if (command !== 'tunnel' && typeof options.hostname === 'string' && typeof options.host !== 'string') {
+  if (typeof options.hostname === 'string' && typeof options.host !== 'string') {
     options.host = options.hostname;
   }
 
   return {
     command,
-    subcommand,
-    tunnelAction,
     startupAction,
     options,
     removedFlagErrors,
@@ -375,7 +293,6 @@ COMMANDS:
   stop           Stop running instance(s)
   restart        Stop and start the server
   status         Show server status
-  tunnel         Tunnel lifecycle commands
   startup        Manage launch at system startup
   logs           Tail OpenChamber logs
   connect-url    Generate URL/QR for connecting another client
@@ -384,7 +301,7 @@ COMMANDS:
 OPTIONS:
   -p, --port              Web server port (default: ${DEFAULT_PORT})
   --host                  Bind address (default: 127.0.0.1)
-  --hostname              Alias for --host outside tunnel commands
+  --hostname              Alias for --host
   --lan                   Bind to 0.0.0.0 for LAN access
   --server <url>          Public/server URL for connect-url links
   --relay                 connect-url: also include the end-to-end-encrypted relay transport
@@ -413,7 +330,6 @@ EXAMPLES:
   openchamber connect-url --port 3000 --qr
   openchamber connect-url --server https://openchamber.example.com
   openchamber startup enable     # Start OpenChamber at user login
-  openchamber tunnel help        # Show tunnel lifecycle help
   openchamber logs               # Follow logs for latest running instance
 `);
 }
@@ -486,251 +402,11 @@ EXAMPLES:
 `);
 }
 
-function showTunnelHelp() {
-  console.log(`
- Tunnel Lifecycle Commands
-
-USAGE:
-  openchamber tunnel <SUBCOMMAND> [OPTIONS]
-
-SUBCOMMANDS:
-  help        Show this tunnel help
-  providers   Show available tunnel providers and capabilities
-  ready       Check tunnel readiness for a provider
-  doctor      Run deep tunnel diagnostics
-  status      Show tunnel status
-  start       Start a tunnel
-  stop        Stop active tunnel (keep server running)
-  profile     Manage saved managed-remote profiles
-
-COMMON OPTIONS:
-  -p, --port              Target OpenChamber instance port
-  --host                  Bind address when auto-starting an instance
-  --lan                   Bind to 0.0.0.0 when auto-starting an instance
-  --ui-password           Protect browser UI when auto-starting an instance
-  --api-only              Start API routes only when auto-starting an instance
-  --json                  Output machine-readable JSON
-  --all                   Apply to all running instances (doctor default, stop)
-
-START OPTIONS:
-  --provider <id>         Tunnel provider id (default: cloudflare)
-  --mode <id>             Tunnel mode (default: quick)
-  --profile <name>        Start tunnel from saved profile name
-  --config [path]         Managed-local config path (optional)
-  --token <token>         Managed-remote token (visible in process list)
-  --token-file <path>     Read token from file (recommended)
-  --token-stdin           Read token from stdin
-  --hostname <hostname>   Managed-remote hostname
-  --connect-ttl <value>   Connect-link TTL (e.g. 30m, 24h, 1d)
-  --session-ttl <value>   Session TTL (e.g. 8h, 24h, 1d)
-  --qr                    Print QR code for resulting tunnel URL
-  --no-qr                 Disable QR output
-  --dry-run               Validate inputs without applying changes
-
-OUTPUT OPTIONS:
-  --show-secrets          Show full tokens in output (default: redacted)
-  --plain                 Disable colors and decorations
-  -q, --quiet             Suppress non-essential output
-  --json                  Output machine-readable JSON
-
-BEHAVIOR NOTES:
-  - One active tunnel per OpenChamber instance.
-  - Starting a different mode/provider replaces the current tunnel and revokes old connect links/sessions.
-  - Connect links are one-time; generating a new link revokes the previous unused link.
-
-PROFILE USAGE:
-  openchamber tunnel profile list [--provider <id>] [--json]
-  openchamber tunnel profile show --name <name> [--provider <id>] [--json]
-  openchamber tunnel profile add --provider <id> --mode managed-remote --name <name> --hostname <host> --token <token> [--force] [--json]
-  openchamber tunnel profile add --provider <id> --mode managed-remote --name <name> --hostname <host> --token-file <path> [--force] [--json]
-  openchamber tunnel profile remove --name <name> [--provider <id>] [--json]
-
-SHELL COMPLETION:
-  openchamber tunnel completion bash   Generate Bash completion script
-  openchamber tunnel completion zsh    Generate Zsh completion script
-  openchamber tunnel completion fish   Generate Fish completion script
-
-EXAMPLES:
-  openchamber tunnel providers
-  openchamber tunnel ready --provider cloudflare
-  openchamber tunnel doctor --provider cloudflare
-  openchamber tunnel status
-  openchamber tunnel start --qr
-  openchamber tunnel start --profile prod-main
-  openchamber tunnel start --provider cloudflare --mode managed-remote --token-file ~/.secrets/cf-token --hostname app.example.com
-  openchamber tunnel start --provider cloudflare --mode managed-local --config ~/.cloudflared/config.yml
-  openchamber tunnel start --dry-run --provider cloudflare --mode managed-remote --token-file ~/.secrets/cf-token --hostname app.example.com
-  echo "$TOKEN" | openchamber tunnel profile add --provider cloudflare --mode managed-remote --name prod-main --hostname app.example.com --token-stdin
-  openchamber tunnel profile list --provider cloudflare
-  openchamber tunnel profile list --json --show-secrets
-  openchamber tunnel stop --port 3000
-`);
-}
-
-function generateCompletionScript(shell) {
-  const normalized = typeof shell === 'string' ? shell.trim().toLowerCase() : '';
-
-  if (normalized === 'bash') {
-    return `# Bash completion for openchamber tunnel
-# Add to ~/.bashrc: eval "$(openchamber tunnel completion bash)"
-_openchamber_tunnel() {
-  local cur prev commands tunnel_commands profile_commands common_flags start_flags
-  COMPREPLY=()
-  cur="\${COMP_WORDS[COMP_CWORD]}"
-  prev="\${COMP_WORDS[COMP_CWORD-1]}"
-
-  commands="serve stop restart status tunnel logs update"
-  tunnel_commands="help providers ready doctor status start stop profile completion"
-  profile_commands="list show add remove"
-  common_flags="--port --foreground --no-daemon --json --all --help --version --plain --quiet"
-  start_flags="--provider --mode --profile --config --token --token-file --token-stdin --hostname --connect-ttl --session-ttl --qr --no-qr --dry-run --show-secrets"
-
-  if [[ \${COMP_CWORD} -eq 1 ]]; then
-    COMPREPLY=( $(compgen -W "\${commands}" -- "\${cur}") )
-    return 0
-  fi
-
-  if [[ "\${COMP_WORDS[1]}" == "tunnel" ]]; then
-    if [[ \${COMP_CWORD} -eq 2 ]]; then
-      COMPREPLY=( $(compgen -W "\${tunnel_commands}" -- "\${cur}") )
-      return 0
-    fi
-    if [[ "\${COMP_WORDS[2]}" == "profile" && \${COMP_CWORD} -eq 3 ]]; then
-      COMPREPLY=( $(compgen -W "\${profile_commands}" -- "\${cur}") )
-      return 0
-    fi
-    if [[ "\${COMP_WORDS[2]}" == "completion" && \${COMP_CWORD} -eq 3 ]]; then
-      COMPREPLY=( $(compgen -W "bash zsh fish" -- "\${cur}") )
-      return 0
-    fi
-    if [[ "\${COMP_WORDS[2]}" == "start" ]]; then
-      COMPREPLY=( $(compgen -W "\${start_flags} \${common_flags}" -- "\${cur}") )
-      return 0
-    fi
-    COMPREPLY=( $(compgen -W "\${common_flags}" -- "\${cur}") )
-    return 0
-  fi
-
-  COMPREPLY=( $(compgen -W "\${common_flags}" -- "\${cur}") )
-  return 0
-}
-complete -F _openchamber_tunnel openchamber
-`;
-  }
-
-  if (normalized === 'zsh') {
-    return `#compdef openchamber
-# Zsh completion for openchamber tunnel
-# Add to ~/.zshrc: eval "$(openchamber tunnel completion zsh)"
-
-_openchamber() {
-  local -a commands tunnel_commands profile_commands
-
-  commands=(
-    'serve:Start the web server'
-    'stop:Stop running instance(s)'
-    'restart:Stop and start the server'
-    'status:Show server status'
-    'tunnel:Tunnel lifecycle commands'
-    'logs:Tail OpenChamber logs'
-    'update:Check for and install updates'
-  )
-
-  tunnel_commands=(
-    'help:Show tunnel help'
-    'providers:Show available providers'
-    'ready:Check tunnel readiness'
-    'doctor:Run tunnel diagnostics'
-    'status:Show tunnel status'
-    'start:Start a tunnel'
-    'stop:Stop active tunnel'
-    'profile:Manage saved profiles'
-    'completion:Generate shell completion'
-  )
-
-  profile_commands=(
-    'list:List profiles'
-    'show:Show profile details'
-    'add:Add a profile'
-    'remove:Remove a profile'
-  )
-
-  _arguments -C \\
-    '1:command:->command' \\
-    '*::arg:->args'
-
-  case \$state in
-    command)
-      _describe 'command' commands
-      ;;
-    args)
-      case \$words[1] in
-        tunnel)
-          if (( CURRENT == 2 )); then
-            _describe 'tunnel command' tunnel_commands
-          elif [[ \$words[2] == "profile" ]] && (( CURRENT == 3 )); then
-            _describe 'profile action' profile_commands
-          elif [[ \$words[2] == "completion" ]] && (( CURRENT == 3 )); then
-            _values 'shell' bash zsh fish
-          fi
-          ;;
-      esac
-      ;;
-  esac
-}
-
-compdef _openchamber openchamber
-`;
-  }
-
-  if (normalized === 'fish') {
-    return `# Fish completion for openchamber tunnel
-# Save to ~/.config/fish/completions/openchamber.fish
-
-complete -c openchamber -n '__fish_use_subcommand' -a 'serve' -d 'Start the web server'
-complete -c openchamber -n '__fish_seen_subcommand_from serve' -l foreground -d 'Run in foreground (for systemd/process managers)'
-complete -c openchamber -n '__fish_seen_subcommand_from serve' -l no-daemon -d 'Run in foreground (alias for --foreground)'
-complete -c openchamber -n '__fish_use_subcommand' -a 'stop' -d 'Stop running instance(s)'
-complete -c openchamber -n '__fish_use_subcommand' -a 'restart' -d 'Stop and start the server'
-complete -c openchamber -n '__fish_use_subcommand' -a 'status' -d 'Show server status'
-complete -c openchamber -n '__fish_use_subcommand' -a 'tunnel' -d 'Tunnel lifecycle commands'
-complete -c openchamber -n '__fish_use_subcommand' -a 'logs' -d 'Tail logs'
-complete -c openchamber -n '__fish_use_subcommand' -a 'update' -d 'Check for updates'
-
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and not __fish_seen_subcommand_from help providers ready doctor status start stop profile completion' -a 'help' -d 'Show tunnel help'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and not __fish_seen_subcommand_from help providers ready doctor status start stop profile completion' -a 'providers' -d 'Show providers'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and not __fish_seen_subcommand_from help providers ready doctor status start stop profile completion' -a 'ready' -d 'Check readiness'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and not __fish_seen_subcommand_from help providers ready doctor status start stop profile completion' -a 'doctor' -d 'Run diagnostics'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and not __fish_seen_subcommand_from help providers ready doctor status start stop profile completion' -a 'status' -d 'Show tunnel status'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and not __fish_seen_subcommand_from help providers ready doctor status start stop profile completion' -a 'start' -d 'Start a tunnel'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and not __fish_seen_subcommand_from help providers ready doctor status start stop profile completion' -a 'stop' -d 'Stop tunnel'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and not __fish_seen_subcommand_from help providers ready doctor status start stop profile completion' -a 'profile' -d 'Manage profiles'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and not __fish_seen_subcommand_from help providers ready doctor status start stop profile completion' -a 'completion' -d 'Generate completions'
-
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and __fish_seen_subcommand_from start' -l provider -d 'Provider id'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and __fish_seen_subcommand_from start' -l mode -d 'Tunnel mode'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and __fish_seen_subcommand_from start' -l profile -d 'Profile name'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and __fish_seen_subcommand_from start' -l config -d 'Config path'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and __fish_seen_subcommand_from start' -l token -d 'Token'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and __fish_seen_subcommand_from start' -l token-file -d 'Token file path'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and __fish_seen_subcommand_from start' -l token-stdin -d 'Read token from stdin'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and __fish_seen_subcommand_from start' -l hostname -d 'Hostname'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and __fish_seen_subcommand_from start' -l dry-run -d 'Validate without applying'
-complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and __fish_seen_subcommand_from start' -l qr -d 'Show QR code'
-`;
-  }
-
-  return null;
-}
-
-
 export {
   DEFAULT_PORT,
   parseArgs,
   showHelp,
   showStartupHelp,
   showConnectUrlHelp,
-  showTunnelHelp,
-  generateCompletionScript,
   findClosestMatch,
 };

package/bin/lib/cli-http.js

@@ -163,21 +163,6 @@ async function waitForServerHealth(port, {
 }
 
 
-async function fetchTunnelProvidersFromPort(port, fetchImpl = globalThis.fetch) {
-  if (!Number.isFinite(port) || port <= 0 || typeof fetchImpl !== 'function') {
-    return null;
-  }
-  try {
-    const response = await fetchImpl(buildLocalUrl(port, '/api/openchamber/tunnel/providers'));
-    if (!response.ok) return null;
-    const body = await response.json().catch(() => null);
-    if (!body || !Array.isArray(body.providers)) return null;
-    return body.providers;
-  } catch {
-    return null;
-  }
-}
-
 async function fetchSystemInfoFromPort(port, fetchImpl = globalThis.fetch, hostOverride) {
   if (!Number.isFinite(port) || port <= 0 || typeof fetchImpl !== 'function') {
     return null;
@@ -211,6 +196,5 @@ export {
   requestJson,
   isServerHealthReady,
   waitForServerHealth,
-  fetchTunnelProvidersFromPort,
   fetchSystemInfoFromPort,
 };

package/bin/lib/cli-lifecycle.js

@@ -1,9 +1,8 @@
 import fs from 'fs';
 import path from 'path';
-import { DEFAULT_PORT } from './cli-args.js';
 import { getRunDir, readDesktopLocalPortFromSettings } from './cli-paths.js';
-import { resolveApiHost, buildLocalUrl } from './cli-network.js';
-import { fetchTunnelProvidersFromPort, fetchSystemInfoFromPort, isServerHealthReady } from './cli-http.js';
+import { resolveApiHost } from './cli-network.js';
+import { fetchSystemInfoFromPort, isServerHealthReady } from './cli-http.js';
 import { isPortAvailable } from './cli-ports.js';
 import {
   getPidFilePath,
@@ -15,8 +14,6 @@ import {
   getOpenchamberProcessState,
   hasOpenchamberRuntimeInfo,
 } from './cli-process.js';
-import { DEFAULT_TUNNEL_PROVIDER_CAPABILITIES } from './cli-tunnel-capabilities.js';
-
 function createLivePortInstance(port, info, host) {
   if (!hasOpenchamberRuntimeInfo(info)) return null;
   return {
@@ -87,79 +84,6 @@ async function fetchSystemInfoFromPortCandidates(port, fetchImpl, hosts, expecte
   return { info: null, host: null };
 }
 
-async function resolveDoctorPortStatuses(options = {}) {
-  const runningEntries = await discoverRunningInstances();
-  const desktopEntry = await discoverDesktopInstance();
-  const statuses = [];
-
-  if (options.explicitPort) {
-    const requestedPort = options.port;
-    const runningMatch = runningEntries.find((entry) => entry.port === requestedPort);
-    if (runningMatch) {
-      statuses.push({
-        port: requestedPort,
-        available: true,
-        status: 'success',
-        line: `port ${requestedPort} available for tunneling`,
-        detail: 'Double-check this same port is configured in your provider dashboard/config.',
-      });
-      return { statuses, availableEntries: [runningMatch] };
-    }
-
-    if (desktopEntry && desktopEntry.port === requestedPort) {
-      statuses.push({
-        port: requestedPort,
-        available: false,
-        status: 'warning',
-        line: `port ${requestedPort} not available (desktop runtime)`,
-        detail: 'Use a CLI instance port from `openchamber serve` for tunneling.',
-      });
-      return { statuses, availableEntries: [] };
-    }
-
-    statuses.push({
-      port: requestedPort,
-      available: false,
-      status: 'error',
-      line: `port ${requestedPort} not available (no running instance)`,
-      detail: `Start one with \`openchamber serve --port ${requestedPort}\`.`,
-    });
-    return { statuses, availableEntries: [] };
-  }
-
-  for (const entry of runningEntries) {
-    statuses.push({
-      port: entry.port,
-      available: true,
-      status: 'success',
-      line: `port ${entry.port} available for tunneling`,
-      detail: 'Double-check this same port is configured in your provider dashboard/config.',
-    });
-  }
-
-  if (desktopEntry && !runningEntries.some((entry) => entry.port === desktopEntry.port)) {
-    statuses.push({
-      port: desktopEntry.port,
-      available: false,
-      status: 'warning',
-      line: `port ${desktopEntry.port} not available (desktop runtime)`,
-      detail: 'Use a CLI instance port from `openchamber serve` for tunneling.',
-    });
-  }
-
-  if (runningEntries.length === 0) {
-    statuses.push({
-      port: null,
-      available: false,
-      status: 'warning',
-      line: 'no CLI ports available for tunneling',
-      detail: 'Start one with `openchamber serve`.',
-    });
-  }
-
-  return { statuses, availableEntries: runningEntries };
-}
-
 async function discoverRunningInstances(options = {}) {
   const instances = [];
   const runDir = getRunDir();
@@ -376,39 +300,7 @@ async function discoverDesktopInstance(fetchImpl = globalThis.fetch) {
   };
 }
 
-async function resolveTunnelProviders(options = {}, deps = {}) {
-  const readPorts = typeof deps.readPorts === 'function'
-    ? deps.readPorts
-    : async () => (await discoverRunningInstances()).map((entry) => entry.port);
-  const fetchImpl = typeof deps.fetchImpl === 'function' ? deps.fetchImpl : globalThis.fetch;
-
-  const candidatePorts = [];
-  if (Number.isFinite(options.port) && options.port > 0) {
-    candidatePorts.push(options.port);
-  }
-
-  const discoveredPorts = await Promise.resolve(readPorts());
-  if (Array.isArray(discoveredPorts)) {
-    candidatePorts.push(...discoveredPorts);
-  }
-
-  if (!candidatePorts.includes(DEFAULT_PORT)) {
-    candidatePorts.push(DEFAULT_PORT);
-  }
-
-  for (const port of candidatePorts) {
-    const providers = await fetchTunnelProvidersFromPort(port, fetchImpl);
-    if (providers) {
-      return { providers, source: `api:${port}` };
-    }
-  }
-
-  return { providers: DEFAULT_TUNNEL_PROVIDER_CAPABILITIES, source: 'fallback' };
-}
-
-
 export {
-  resolveDoctorPortStatuses,
   discoverRunningInstances,
   discoverOpenChamberInstanceOnPort,
   discoverLifecycleInstances,
@@ -417,5 +309,4 @@ export {
   isDesktopRuntimeForPort,
   inspectTunnelAttachability,
   discoverDesktopInstance,
-  resolveTunnelProviders,
 };

package/bin/lib/cli-paths.js

@@ -2,10 +2,6 @@ import fs from 'fs';
 import os from 'os';
 import path from 'path';
 
-const TUNNEL_PROFILES_FILE_NAME = 'tunnel-profiles.json';
-const LEGACY_CLOUDFLARE_MANAGED_REMOTE_FILE_NAME = 'cloudflare-managed-remote-tunnels.json';
-const TUNNEL_CLI_STATE_FILE_NAME = 'tunnel-cli-state.json';
-
 function getDataDir() {
   if (typeof process.env.OPENCHAMBER_DATA_DIR === 'string' && process.env.OPENCHAMBER_DATA_DIR.trim().length > 0) {
     return path.resolve(process.env.OPENCHAMBER_DATA_DIR.trim());
@@ -43,55 +39,6 @@ function getLogFilePath(port) {
   return path.join(getLogsDir(), `openchamber-${port}.log`);
 }
 
-function getTunnelProfilesFilePath() {
-  return path.join(getDataDir(), TUNNEL_PROFILES_FILE_NAME);
-}
-
-function getLegacyCloudflareManagedRemoteFilePath() {
-  return path.join(getDataDir(), LEGACY_CLOUDFLARE_MANAGED_REMOTE_FILE_NAME);
-}
-
-function getTunnelCliStateFilePath() {
-  return path.join(getDataDir(), TUNNEL_CLI_STATE_FILE_NAME);
-}
-
-function readTunnelCliState() {
-  const filePath = getTunnelCliStateFilePath();
-  try {
-    const raw = fs.readFileSync(filePath, 'utf8');
-    const parsed = JSON.parse(raw);
-    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
-      return {};
-    }
-    return parsed;
-  } catch {
-    return {};
-  }
-}
-
-function readLastManagedLocalConfigPath() {
-  const state = readTunnelCliState();
-  if (typeof state.lastManagedLocalConfigPath !== 'string') {
-    return '';
-  }
-  return state.lastManagedLocalConfigPath.trim();
-}
-
-function writeLastManagedLocalConfigPath(configPath) {
-  if (typeof configPath !== 'string' || configPath.trim().length === 0) {
-    return;
-  }
-  const filePath = getTunnelCliStateFilePath();
-  const current = readTunnelCliState();
-  const next = {
-    ...current,
-    lastManagedLocalConfigPath: configPath.trim(),
-    updatedAt: Date.now(),
-  };
-  fs.mkdirSync(path.dirname(filePath), { recursive: true });
-  fs.writeFileSync(filePath, JSON.stringify(next, null, 2), 'utf8');
-}
-
 
 function getRunDir() {
   const dir = path.join(getDataDir(), 'run');
@@ -105,9 +52,5 @@ export {
   readDesktopLocalPortFromSettings,
   ensureLogsDir,
   getLogFilePath,
-  getTunnelProfilesFilePath,
-  getLegacyCloudflareManagedRemoteFilePath,
-  readLastManagedLocalConfigPath,
-  writeLastManagedLocalConfigPath,
   getRunDir,
 };