npm - @openchambery/web - Versions diffs - 1.17.1-beta.7 → 1.17.1-beta.8 - Mend

@openchambery/web 1.17.1-beta.7 → 1.17.1-beta.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (139) hide show

package/dist/index.html CHANGED Viewed

@@ -552,7 +552,7 @@
         opacity: 0.72;
       }
     </style>
-    <script type="module" crossorigin src="/assets/main-DY27kMV5.js"></script>
+    <script type="module" crossorigin src="/assets/main-CcyyPAib.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
@@ -560,15 +560,15 @@
     <link rel="modulepreload" crossorigin href="/assets/vendor-pathe-vBmvQE8f.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-DLPElpoQ.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-tanstack-query-core-BWz0ose6.js">
-    <link rel="modulepreload" crossorigin href="/assets/persistence-CHA81Od7.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-D5m_ggY1.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-C5vYnSTd.js">
+    <link rel="modulepreload" crossorigin href="/assets/persistence-C_KCiMcY.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-BpjUSDz4.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-BzUEk1i7.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-opencode-sdk-C07HQypa.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-aparajita-capacitor-secure-storage-CjQdwfjS.js">
-    <link rel="modulepreload" crossorigin href="/assets/gitApiHttp-DvIIcDAO.js">
-    <link rel="modulepreload" crossorigin href="/assets/terminalApi-DAu7xKli.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-49YbZaqI.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-BtkWqMFu.css">
+    <link rel="modulepreload" crossorigin href="/assets/gitApiHttp-C1DaEMKR.js">
+    <link rel="modulepreload" crossorigin href="/assets/terminalApi-BYTA045F.js">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-JSaYFA5x.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-B8mzksNL.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <!-- Keep the startup layer outside #root. React replaces every child of

package/dist/mini-chat.html CHANGED Viewed

@@ -74,7 +74,7 @@
       }
     </style>
-    <script type="module" crossorigin src="/assets/miniChat-BWbpl5SN.js"></script>
+    <script type="module" crossorigin src="/assets/miniChat-BsNf9y48.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
@@ -82,15 +82,15 @@
     <link rel="modulepreload" crossorigin href="/assets/vendor-pathe-vBmvQE8f.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-DLPElpoQ.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-tanstack-query-core-BWz0ose6.js">
-    <link rel="modulepreload" crossorigin href="/assets/persistence-CHA81Od7.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-D5m_ggY1.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-C5vYnSTd.js">
+    <link rel="modulepreload" crossorigin href="/assets/persistence-C_KCiMcY.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-BpjUSDz4.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-BzUEk1i7.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-opencode-sdk-C07HQypa.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-aparajita-capacitor-secure-storage-CjQdwfjS.js">
-    <link rel="modulepreload" crossorigin href="/assets/gitApiHttp-DvIIcDAO.js">
-    <link rel="modulepreload" crossorigin href="/assets/terminalApi-DAu7xKli.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-49YbZaqI.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-BtkWqMFu.css">
+    <link rel="modulepreload" crossorigin href="/assets/gitApiHttp-C1DaEMKR.js">
+    <link rel="modulepreload" crossorigin href="/assets/terminalApi-BYTA045F.js">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-JSaYFA5x.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-B8mzksNL.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <div id="root" class="h-full">

package/dist/mobile.html CHANGED Viewed

@@ -63,7 +63,7 @@
       })();
     </script>
-    <script type="module" crossorigin src="/assets/mobile-DEQeGskq.js"></script>
+    <script type="module" crossorigin src="/assets/mobile-CsJg2IAq.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
@@ -71,15 +71,15 @@
     <link rel="modulepreload" crossorigin href="/assets/vendor-pathe-vBmvQE8f.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-DLPElpoQ.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-tanstack-query-core-BWz0ose6.js">
-    <link rel="modulepreload" crossorigin href="/assets/persistence-CHA81Od7.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-D5m_ggY1.js">
-    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-C5vYnSTd.js">
+    <link rel="modulepreload" crossorigin href="/assets/persistence-C_KCiMcY.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopHosts-BpjUSDz4.js">
+    <link rel="modulepreload" crossorigin href="/assets/desktopRelayRestore-BzUEk1i7.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-opencode-sdk-C07HQypa.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-aparajita-capacitor-secure-storage-CjQdwfjS.js">
-    <link rel="modulepreload" crossorigin href="/assets/gitApiHttp-DvIIcDAO.js">
-    <link rel="modulepreload" crossorigin href="/assets/terminalApi-DAu7xKli.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-49YbZaqI.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-BtkWqMFu.css">
+    <link rel="modulepreload" crossorigin href="/assets/gitApiHttp-C1DaEMKR.js">
+    <link rel="modulepreload" crossorigin href="/assets/terminalApi-BYTA045F.js">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-JSaYFA5x.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-B8mzksNL.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <div id="root" class="h-full"></div>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@openchambery/web",
-  "version": "1.17.1-beta.7",
+  "version": "1.17.1-beta.8",
   "private": false,
   "type": "module",
   "main": "./server/index.js",

package/server/index.d.ts CHANGED Viewed

@@ -34,10 +34,4 @@ export declare function parseArgs(argv?: string[]): {
   port: number;
   host?: string;
   uiPassword: string | null;
-  tryCfTunnel: boolean;
-  tunnelProvider?: string;
-  tunnelMode?: string;
-  tunnelConfigPath?: string | null;
-  tunnelToken?: string;
-  tunnelHostname?: string;
 };

package/server/index.js CHANGED Viewed

@@ -12,28 +12,12 @@ import crypto from 'crypto';
 import http2 from 'node:http2';
 import { createUiAuth } from './lib/ui-auth/ui-auth.js';
 import { createTunnelAuth } from './lib/opencode/tunnel-auth.js';
-import { createManagedTunnelConfigRuntime } from './lib/tunnels/managed-config.js';
-import { createTunnelProviderRegistry } from './lib/tunnels/registry.js';
-import { createCloudflareTunnelProvider } from './lib/tunnels/providers/cloudflare.js';
-import { createNgrokTunnelProvider } from './lib/tunnels/providers/ngrok.js';
 import { createRequestSecurityRuntime } from './lib/security/request-security.js';
 import {
   getUnauthenticatedLanErrorMessage,
   isNetworkExposedBindHost,
   isUnsafeUnauthenticatedLanAllowed,
 } from './lib/security/bind-host.js';
-import {
-  TUNNEL_MODE_MANAGED_LOCAL,
-  TUNNEL_MODE_MANAGED_REMOTE,
-  TUNNEL_MODE_QUICK,
-  TUNNEL_PROVIDER_CLOUDFLARE,
-  TunnelServiceError,
-  isSupportedTunnelMode,
-  normalizeOptionalPath,
-  normalizeTunnelStartRequest,
-  normalizeTunnelMode,
-  normalizeTunnelProvider,
-} from './lib/tunnels/types.js';
 import { prepareNotificationLastMessage } from './lib/notifications/index.js';
 import { registerTtsRoutes } from './lib/tts/routes.js';
 import { detectSayTtsCapability } from './lib/tts/capability-runtime.js';
@@ -124,9 +108,6 @@ const SHUTDOWN_TIMEOUT = 10000;
 const CLIENT_RELOAD_DELAY_MS = 800;
 const OPEN_CODE_READY_GRACE_MS = 12000;
 const LONG_REQUEST_TIMEOUT_MS = 4 * 60 * 1000;
-const TUNNEL_BOOTSTRAP_TTL_DEFAULT_MS = 30 * 60 * 1000;
-const TUNNEL_BOOTSTRAP_TTL_MIN_MS = 60 * 1000;
-const TUNNEL_BOOTSTRAP_TTL_MAX_MS = 24 * 60 * 60 * 1000;
 const TUNNEL_SESSION_TTL_DEFAULT_MS = 8 * 60 * 60 * 1000;
 const TUNNEL_SESSION_TTL_MIN_MS = 5 * 60 * 1000;
 const TUNNEL_SESSION_TTL_MAX_MS = 30 * 24 * 60 * 60 * 1000;
@@ -233,9 +214,6 @@ const settingsNormalizationRuntime = createSettingsNormalizationRuntime({
   path,
   processLike: process,
   realpathSync: fs.realpathSync,
-  tunnelBootstrapTtlDefaultMs: TUNNEL_BOOTSTRAP_TTL_DEFAULT_MS,
-  tunnelBootstrapTtlMinMs: TUNNEL_BOOTSTRAP_TTL_MIN_MS,
-  tunnelBootstrapTtlMaxMs: TUNNEL_BOOTSTRAP_TTL_MAX_MS,
   tunnelSessionTtlDefaultMs: TUNNEL_SESSION_TTL_DEFAULT_MS,
   tunnelSessionTtlMinMs: TUNNEL_SESSION_TTL_MIN_MS,
   tunnelSessionTtlMaxMs: TUNNEL_SESSION_TTL_MAX_MS,
@@ -244,14 +222,7 @@ const settingsNormalizationRuntime = createSettingsNormalizationRuntime({
 const normalizeDirectoryPath = (...args) => settingsNormalizationRuntime.normalizeDirectoryPath(...args);
 const normalizePathForPersistence = (...args) => settingsNormalizationRuntime.normalizePathForPersistence(...args);
 const normalizeSettingsPaths = (...args) => settingsNormalizationRuntime.normalizeSettingsPaths(...args);
-const normalizeTunnelBootstrapTtlMs = (...args) => settingsNormalizationRuntime.normalizeTunnelBootstrapTtlMs(...args);
 const normalizeTunnelSessionTtlMs = (...args) => settingsNormalizationRuntime.normalizeTunnelSessionTtlMs(...args);
-const normalizeManagedRemoteTunnelHostname = (...args) =>
-  settingsNormalizationRuntime.normalizeManagedRemoteTunnelHostname(...args);
-const normalizeManagedRemoteTunnelPresets = (...args) =>
-  settingsNormalizationRuntime.normalizeManagedRemoteTunnelPresets(...args);
-const normalizeManagedRemoteTunnelPresetTokens = (...args) =>
-  settingsNormalizationRuntime.normalizeManagedRemoteTunnelPresetTokens(...args);
 const isUnsafeSkillRelativePath = (...args) => settingsNormalizationRuntime.isUnsafeSkillRelativePath(...args);
 const sanitizeTypographySizesPartial = (...args) =>
   settingsNormalizationRuntime.sanitizeTypographySizesPartial(...args);
@@ -299,38 +270,10 @@ const PUSH_SUBSCRIPTIONS_FILE_PATH = path.join(OPENCHAMBER_DATA_DIR, 'push-subsc
 const APNS_TOKENS_FILE_PATH = path.join(OPENCHAMBER_DATA_DIR, 'apns-tokens.json');
 const REMOTE_CLIENTS_FILE_PATH = path.join(OPENCHAMBER_DATA_DIR, 'remote-clients.json');
 const CLIENT_PAIRING_SESSIONS_FILE_PATH = path.join(OPENCHAMBER_DATA_DIR, 'client-pairing-sessions.json');
-const CLOUDFLARE_MANAGED_REMOTE_TUNNELS_FILE_PATH = path.join(OPENCHAMBER_DATA_DIR, 'cloudflare-managed-remote-tunnels.json');
-const CLOUDFLARE_LEGACY_NAMED_TUNNELS_FILE_PATH = path.join(OPENCHAMBER_DATA_DIR, 'cloudflare-named-tunnels.json');
-const CLOUDFLARE_MANAGED_REMOTE_TUNNELS_VERSION = 1;
-const managedTunnelConfigRuntime = createManagedTunnelConfigRuntime({
-  fsPromises,
-  path,
-  normalizeManagedRemoteTunnelHostname,
-  normalizeManagedRemoteTunnelPresets,
-  constants: {
-    CLOUDFLARE_MANAGED_REMOTE_TUNNELS_FILE_PATH,
-    CLOUDFLARE_LEGACY_NAMED_TUNNELS_FILE_PATH,
-    CLOUDFLARE_MANAGED_REMOTE_TUNNELS_VERSION,
-  },
-});
-const readManagedRemoteTunnelConfigFromDisk = (...args) => managedTunnelConfigRuntime.readManagedRemoteTunnelConfigFromDisk(...args);
-const syncManagedRemoteTunnelConfigWithPresets = (...args) => managedTunnelConfigRuntime.syncManagedRemoteTunnelConfigWithPresets(...args);
-const upsertManagedRemoteTunnelToken = (...args) => managedTunnelConfigRuntime.upsertManagedRemoteTunnelToken(...args);
-const resolveManagedRemoteTunnelToken = (...args) => managedTunnelConfigRuntime.resolveManagedRemoteTunnelToken(...args);
 const settingsHelpers = createSettingsHelpers({
   normalizePathForPersistence,
   normalizeDirectoryPath,
-  normalizeTunnelBootstrapTtlMs,
-  normalizeTunnelSessionTtlMs,
-  normalizeTunnelProvider,
-  normalizeTunnelMode,
-  normalizeOptionalPath,
-  normalizeManagedRemoteTunnelHostname,
-  normalizeManagedRemoteTunnelPresets,
-  normalizeManagedRemoteTunnelPresetTokens,
   sanitizeTypographySizesPartial,
   normalizeStringArray,
   sanitizeModelRefs,
@@ -369,11 +312,6 @@ const settingsRuntime = createSettingsRuntime({
   normalizeStringArray,
   formatSettingsResponse,
   resolveDirectoryCandidate,
-  normalizeManagedRemoteTunnelHostname,
-  normalizeManagedRemoteTunnelPresets,
-  normalizeManagedRemoteTunnelPresetTokens,
-  syncManagedRemoteTunnelConfigWithPresets,
-  upsertManagedRemoteTunnelToken,
 });
 const readSettingsFromDiskMigrated = (...args) => settingsRuntime.readSettingsFromDiskMigrated(...args);
@@ -506,16 +444,8 @@ let openCodeNotReadySince = 0;
 let isExternalOpenCode = false;
 let exitOnShutdown = true;
 let uiAuthController = null;
-let activeTunnelController = null;
 let globalWatcherStartPromise = null;
-const tunnelProviderRegistry = createTunnelProviderRegistry([
-  createCloudflareTunnelProvider(),
-  createNgrokTunnelProvider(),
-]);
-tunnelProviderRegistry.seal();
 const tunnelAuthController = createTunnelAuth();
-let runtimeManagedRemoteTunnelToken = '';
-let runtimeManagedRemoteTunnelHostname = '';
 let terminalRuntime = null;
 let dictationRuntime = null;
 let messageStreamRuntime = null;
@@ -996,40 +926,7 @@ const bootstrapRuntime = createBootstrapRuntime({
   registerOpenChamberRoutes,
   express,
 });
-const tunnelWiringRuntime = createTunnelWiringRuntime({
-  crypto,
-  URL,
-  tunnelProviderRegistry,
-  tunnelAuthController,
-  readSettingsFromDiskMigrated,
-  readManagedRemoteTunnelConfigFromDisk,
-  normalizeTunnelProvider,
-  normalizeTunnelMode,
-  normalizeOptionalPath,
-  normalizeManagedRemoteTunnelHostname,
-  normalizeTunnelBootstrapTtlMs,
-  normalizeTunnelSessionTtlMs,
-  isSupportedTunnelMode,
-  upsertManagedRemoteTunnelToken,
-  resolveManagedRemoteTunnelToken,
-  TUNNEL_MODE_QUICK,
-  TUNNEL_MODE_MANAGED_LOCAL,
-  TUNNEL_MODE_MANAGED_REMOTE,
-  TUNNEL_PROVIDER_CLOUDFLARE,
-  TunnelServiceError,
-  getActiveTunnelController: () => activeTunnelController,
-  setActiveTunnelController: (value) => {
-    activeTunnelController = value;
-  },
-  getRuntimeManagedRemoteTunnelHostname: () => runtimeManagedRemoteTunnelHostname,
-  setRuntimeManagedRemoteTunnelHostname: (value) => {
-    runtimeManagedRemoteTunnelHostname = value;
-  },
-  getRuntimeManagedRemoteTunnelToken: () => runtimeManagedRemoteTunnelToken,
-  setRuntimeManagedRemoteTunnelToken: (value) => {
-    runtimeManagedRemoteTunnelToken = value;
-  },
-});
+const tunnelWiringRuntime = createTunnelWiringRuntime();
 const startupPipelineRuntime = createStartupPipelineRuntime({
   createTerminalRuntime,
   createDictationRuntime,
@@ -1229,10 +1126,6 @@ const gracefulShutdownRuntime = createGracefulShutdownRuntime({
   setUiAuthController: (value) => {
     uiAuthController = value;
   },
-  getActiveTunnelController: () => activeTunnelController,
-  setActiveTunnelController: (value) => {
-    activeTunnelController = value;
-  },
   tunnelAuthController,
   scheduledTasksRuntime,
   closeFeatureRoutes: () => featureRoutesRuntime.close(),
@@ -1334,33 +1227,8 @@ async function main(options = {}) {
   ) {
     throw new Error(getUnauthenticatedLanErrorMessage(effectiveBindHost));
   }
-  const tryCfTunnel = options.tryCfTunnel === true;
   const apiOnly = options.apiOnly === true || isEnvFlagEnabled(process.env.OPENCHAMBER_API_ONLY);
-  const shouldUseCanonicalTunnelConfig = typeof options.tunnelMode === 'string'
-    || typeof options.tunnelProvider === 'string'
-    || options.tunnelConfigPath === null
-    || typeof options.tunnelConfigPath === 'string'
-    || typeof options.tunnelToken === 'string'
-    || typeof options.tunnelHostname === 'string';
-  const startupTunnelRequest = shouldUseCanonicalTunnelConfig
-    ? normalizeTunnelStartRequest({
-        provider: normalizeTunnelProvider(options.tunnelProvider),
-        mode: options.tunnelMode,
-        configPath: normalizeOptionalPath(options.tunnelConfigPath),
-        token: typeof options.tunnelToken === 'string' ? options.tunnelToken.trim() : '',
-        hostname: normalizeManagedRemoteTunnelHostname(options.tunnelHostname),
-      })
-    : (tryCfTunnel
-      ? {
-          provider: TUNNEL_PROVIDER_CLOUDFLARE,
-          mode: TUNNEL_MODE_QUICK,
-          configPath: undefined,
-          token: '',
-          hostname: undefined,
-        }
-      : null);
   const attachSignals = options.attachSignals !== false;
-  const onTunnelReady = typeof options.onTunnelReady === 'function' ? options.onTunnelReady : null;
   if (typeof options.exitOnShutdown === 'boolean') {
     exitOnShutdown = options.exitOnShutdown;
   }
@@ -1490,8 +1358,8 @@ async function main(options = {}) {
   server = http.createServer(app);
   let realtimeProxyRuntime = { stop: () => {} };
-  // The relay service is constructed further below (it depends on the tunnel
-  // runtime's active port). The pairing routes registered here only read the
+  // The relay service is constructed further below (it depends on the active
+  // loopback port). The pairing routes registered here only read the
   // relay candidate lazily at request time, so a late-bound holder is enough.
   let relayServiceInstance = null;
@@ -1608,11 +1476,10 @@ async function main(options = {}) {
   });
   const tunnelRuntimeContext = tunnelWiringRuntime.initialize(app, port);
-  const { tunnelService, startTunnelWithNormalizedRequest } = tunnelRuntimeContext;
   // Private relay host service: config + management routes + host client
-  // lifecycle. Loopback port comes from the same source the tunnel uses so
-  // relay-tunneled requests hit the local Express app on 127.0.0.1.
+  // lifecycle. Loopback port comes from the same active-port source used by
+  // pairing/LAN URLs so relay-tunneled requests hit the local Express app on 127.0.0.1.
   const relayService = createRelayService({
     crypto,
     os,
@@ -1735,23 +1602,14 @@ async function main(options = {}) {
     staticRoutesRuntime,
     process,
     crypto,
-    normalizeTunnelBootstrapTtlMs,
-    readSettingsFromDiskMigrated,
-    tunnelAuthController,
-    startTunnelWithNormalizedRequest,
     gracefulShutdown,
     getSignalsAttached: () => signalsAttached,
     setSignalsAttached: (value) => {
       signalsAttached = value;
     },
     syncToHmrState,
-    TUNNEL_MODE_QUICK,
-    TUNNEL_MODE_MANAGED_LOCAL,
-    TUNNEL_MODE_MANAGED_REMOTE,
     host,
     port,
-    startupTunnelRequest,
-    onTunnelReady,
     tunnelRuntimeContext,
     attachSignals,
     apiOnly,
@@ -1786,11 +1644,7 @@ async function main(options = {}) {
     httpServer: server,
     getPort: () => tunnelRuntimeContext.getActivePort(),
     getOpenCodePort: () => openCodePort,
-    getTunnelUrl: () => tunnelService.getPublicUrl(),
     getQuitRiskStatus: () => ({
-      tunnel: {
-        active: Boolean(tunnelService.getPublicUrl()),
-      },
       scheduledTasks: scheduledTasksRuntime.getStatus(),
     }),
     isReady: () => isOpenCodeReady,
@@ -1853,8 +1707,6 @@ runCliEntryIfMain({
   currentFilename: __filename,
   parseServeCliOptions,
   defaultPort: DEFAULT_PORT,
-  cloudflareProvider: TUNNEL_PROVIDER_CLOUDFLARE,
-  managedLocalMode: TUNNEL_MODE_MANAGED_LOCAL,
   setExitOnShutdown: (value) => {
     exitOnShutdown = value;
   },

package/server/lib/opencode/DOCUMENTATION.md CHANGED Viewed

@@ -24,13 +24,13 @@ This module provides OpenCode server integration utilities for the web server ru
 - `packages/web/server/lib/opencode/cli-options.js`: CLI/environment option parsing for server startup arguments.
 - `packages/web/server/lib/opencode/core-routes.js`: server status/system routes, auth/access guard routes, and settings utility route registration.
 - `packages/web/server/lib/opencode/shutdown-runtime.js`: graceful shutdown orchestration runtime for watcher/session/terminal/process/server teardown.
-- `packages/web/server/lib/opencode/server-startup-runtime.js`: server listen/startup tunnel flow and process/signal handler orchestration runtime.
+- `packages/web/server/lib/opencode/server-startup-runtime.js`: server listen/startup flow and process/signal handler orchestration runtime.
 - `packages/web/server/lib/opencode/static-routes-runtime.js`: static asset/SPA fallback route registration and manifest route wiring.
 - `packages/web/server/lib/opencode/feature-routes-runtime.js`: feature route composition runtime for dynamic import-backed config/skill/provider route registration.
 - `packages/web/server/lib/conversations/`: combined create-session-and-prompt orchestration (OpenChamber-owned, registered before generic proxy).
 - `packages/web/server/lib/session-turn-pages/`: turn-window session message pagination (`GET /api/openchamber/sessions/:sessionID/messages`) and anchor reconcile (`GET .../messages/reconcile`); loops official OpenCode `session.messages` for turn pages and head→anchor gap recovery with continuation/budgets/`resetRequired`; registered before generic proxy. See `session-turn-pages/DOCUMENTATION.md`.
 - `packages/web/server/lib/opencode/opencode-resolution-runtime.js`: OpenCode binary resolution snapshot runtime for settings routes and diagnostics.
-- `packages/web/server/lib/opencode/tunnel-wiring-runtime.js`: tunnel service/routes composition runtime and active-port wiring for main server startup.
+- `packages/web/server/lib/opencode/tunnel-wiring-runtime.js`: active loopback-port wiring shared by pairing/LAN URLs and the private relay host.
 - `packages/web/server/lib/opencode/startup-pipeline-runtime.js`: server startup tail orchestration runtime for terminal/proxy/static/start-listen flow.
 - `packages/web/server/lib/opencode/server-utils-runtime.js`: shared server runtime utilities for OpenCode proxy wiring, OpenCode port/readiness helpers, and snapshot fetchers.
 - `packages/web/server/lib/opencode/openchamber-routes.js`: OpenChamber update, models metadata, session-index, and transcript-cache route registration.
@@ -40,7 +40,7 @@ This module provides OpenCode server integration utilities for the web server ru
 - `packages/web/server/lib/opencode/skill-routes.js`: route registration for skill config CRUD, supporting files, and skills catalog scan/install flows.
 - `packages/web/server/lib/opencode/settings-runtime.js`: Settings persistence runtime (disk IO, migrations, normalization, project validation, and persisted update serialization).
 - `packages/web/server/lib/opencode/settings-helpers.js`: Settings payload sanitization/format helpers runtime for response shaping and persisted merge prep.
-- `packages/web/server/lib/opencode/settings-normalization-runtime.js`: path/settings/tunnel normalization and sanitization helpers runtime used by settings/routes/config wiring.
+- `packages/web/server/lib/opencode/settings-normalization-runtime.js`: path/settings normalization and sanitization helpers runtime used by settings/routes/config wiring.
 - `packages/web/server/lib/opencode/theme-runtime.js`: custom theme JSON validation and theme directory loading runtime for settings utility routes.
 - `packages/web/server/lib/opencode/proxy.js`: OpenCode API/SSE forwarding and readiness-gate route registration.
 - `packages/web/server/lib/opencode/instance-recovery-runtime.js`: directory-instance health recovery before turn admission (`prompt_async` / `command` / `shell`). When OpenCode's per-directory instance is poisoned (MCP probe returns 503 empty while HTTP still accepts prompts that immediately abort as `MessageAbortedError`), dispose the instance so the next admission recreates a healthy one.
@@ -202,16 +202,12 @@ This module provides OpenCode server integration utilities for the web server ru
   - `projectBootstrapSettingsResponse(response)`: projects a formatted settings response into the schema-versioned bootstrap allowlist. General strings are bounded to 512 characters, STT URLs to 4096, language to 64, and custom response-style instructions to 200000.
 ## Public exports (settings-normalization-runtime.js)
-- `createSettingsNormalizationRuntime(dependencies)`: creates normalization/sanitization runtime for shared settings and tunnel helper logic.
+- `createSettingsNormalizationRuntime(dependencies)`: creates normalization/sanitization runtime for shared settings helper logic.
 - Returned API:
   - `normalizeDirectoryPath(value)`
   - `normalizePathForPersistence(value)`
   - `normalizeSettingsPaths(input)`
-  - `normalizeTunnelBootstrapTtlMs(value)`
   - `normalizeTunnelSessionTtlMs(value)`
-  - `normalizeManagedRemoteTunnelHostname(value)`
-  - `normalizeManagedRemoteTunnelPresets(value)`
-  - `normalizeManagedRemoteTunnelPresetTokens(value)`
   - `isUnsafeSkillRelativePath(value)`
   - `sanitizeTypographySizesPartial(input)`
   - `normalizeStringArray(input)`
@@ -318,7 +314,7 @@ When adding or changing Host HTTP APIs that mobile/desktop clients reach over Pr
   - `gracefulShutdown(options?)`: accepts `forceCloseConnections: true` for runtimes that close remaining HTTP connections after initiating server close.
 ## Public exports (server-startup-runtime.js)
-- `createServerStartupRuntime(dependencies)`: creates runtime for server bind/startup tunnel and process handler wiring.
+- `createServerStartupRuntime(dependencies)`: creates runtime for server bind/listen and process handler wiring.
 - Returned API:
   - `resolveBindHost(host)`
   - `startListeningAndMaybeTunnel(options)`
@@ -340,7 +336,7 @@ When adding or changing Host HTTP APIs that mobile/desktop clients reach over Pr
   - `getOpenCodeResolutionSnapshot(settings)`: returns configured/resolved OpenCode binary details plus effective managed-launch fields (`launchBinary`, `launchArgs`, `launchWrapperType`) when applicable.
 ## Public exports (tunnel-wiring-runtime.js)
-- `createTunnelWiringRuntime(dependencies)`: creates runtime for tunnel service construction and tunnel route registration.
+- `createTunnelWiringRuntime()`: creates runtime for tracking the active loopback listen port used by pairing/LAN URLs and the private relay host.
 - Returned API:
   - `initialize(app, initialPort)`

package/server/lib/opencode/cli-entry-runtime.js CHANGED Viewed

@@ -4,8 +4,6 @@ export const runCliEntryIfMain = (dependencies) => {
     currentFilename,
     parseServeCliOptions,
     defaultPort,
-    cloudflareProvider,
-    managedLocalMode,
     setExitOnShutdown,
     startServer,
   } = dependencies;
@@ -19,20 +17,12 @@ export const runCliEntryIfMain = (dependencies) => {
     argv: process.argv.slice(2),
     env: process.env,
     defaultPort,
-    cloudflareProvider,
-    managedLocalMode,
   });
   setExitOnShutdown(true);
   startServer({
     port: cliOptions.port,
     host: cliOptions.host,
-    tryCfTunnel: cliOptions.tryCfTunnel,
-    tunnelProvider: cliOptions.tunnelProvider,
-    tunnelMode: cliOptions.tunnelMode,
-    tunnelConfigPath: cliOptions.tunnelConfigPath,
-    tunnelToken: cliOptions.tunnelToken,
-    tunnelHostname: cliOptions.tunnelHostname,
     attachSignals: true,
     exitOnShutdown: true,
     uiPassword: cliOptions.uiPassword,

package/server/lib/opencode/cli-options.js CHANGED Viewed

@@ -2,35 +2,18 @@ export const parseServeCliOptions = ({
   argv = [],
   env = {},
   defaultPort,
-  cloudflareProvider,
-  managedLocalMode,
 }) => {
   const args = Array.isArray(argv) ? [...argv] : [];
   const envPassword =
     env.OPENCHAMBER_UI_PASSWORD ||
     env.OPENCODE_UI_PASSWORD ||
     null;
-  const envCfTunnel = env.OPENCHAMBER_TRY_CF_TUNNEL === 'true';
-  const envTunnelProvider = env.OPENCHAMBER_TUNNEL_PROVIDER || undefined;
-  const envTunnelMode = env.OPENCHAMBER_TUNNEL_MODE || undefined;
-  const envTunnelConfigRaw = env.OPENCHAMBER_TUNNEL_CONFIG;
-  const envTunnelConfig = typeof envTunnelConfigRaw === 'string'
-    ? (envTunnelConfigRaw.trim().length > 0 ? envTunnelConfigRaw.trim() : null)
-    : undefined;
-  const envTunnelToken = env.OPENCHAMBER_TUNNEL_TOKEN || undefined;
-  const envTunnelHostname = env.OPENCHAMBER_TUNNEL_HOSTNAME || undefined;
   const envApiOnly = env.OPENCHAMBER_API_ONLY === '1' || env.OPENCHAMBER_API_ONLY === 'true';
   const options = {
     port: defaultPort,
     host: undefined,
     uiPassword: envPassword,
-    tryCfTunnel: envCfTunnel,
-    tunnelProvider: envTunnelProvider,
-    tunnelMode: envTunnelMode,
-    tunnelConfigPath: envTunnelConfig,
-    tunnelToken: envTunnelToken,
-    tunnelHostname: envTunnelHostname,
     apiOnly: envApiOnly,
   };
@@ -81,54 +64,6 @@ export const parseServeCliOptions = ({
       options.apiOnly = true;
       continue;
     }
-    if (optionName === 'try-cf-tunnel') {
-      options.tryCfTunnel = true;
-      continue;
-    }
-    if (optionName === 'tunnel-provider') {
-      const { value, nextIndex } = consumeValue(i, inlineValue);
-      i = nextIndex;
-      options.tunnelProvider = typeof value === 'string' ? value : options.tunnelProvider;
-      continue;
-    }
-    if (optionName === 'tunnel-mode') {
-      const { value, nextIndex } = consumeValue(i, inlineValue);
-      i = nextIndex;
-      options.tunnelMode = typeof value === 'string' ? value : options.tunnelMode;
-      continue;
-    }
-    if (optionName === 'tunnel-config') {
-      const { value, nextIndex } = consumeValue(i, inlineValue);
-      i = nextIndex;
-      options.tunnelConfigPath = typeof value === 'string' ? value : null;
-      continue;
-    }
-    if (optionName === 'tunnel-token') {
-      const { value, nextIndex } = consumeValue(i, inlineValue);
-      i = nextIndex;
-      options.tunnelToken = typeof value === 'string' ? value : options.tunnelToken;
-      continue;
-    }
-    if (optionName === 'tunnel-hostname') {
-      const { value, nextIndex } = consumeValue(i, inlineValue);
-      i = nextIndex;
-      options.tunnelHostname = typeof value === 'string' ? value : options.tunnelHostname;
-      continue;
-    }
-    if (optionName === 'tunnel') {
-      const { value, nextIndex } = consumeValue(i, inlineValue);
-      i = nextIndex;
-      options.tunnelProvider = cloudflareProvider;
-      options.tunnelMode = managedLocalMode;
-      options.tunnelConfigPath = typeof value === 'string' ? value : null;
-    }
   }
   return options;

package/server/lib/opencode/core-routes.js CHANGED Viewed

@@ -1000,8 +1000,7 @@ export const registerAuthAndAccessRoutes = (app, dependencies) => {
   app.get('/connect', async (req, res) => {
     try {
       const token = typeof req.query?.t === 'string' ? req.query.t : '';
-      const settings = await readSettingsFromDiskMigrated();
-      const tunnelSessionTtlMs = normalizeTunnelSessionTtlMs(settings?.tunnelSessionTtlMs);
+      const tunnelSessionTtlMs = normalizeTunnelSessionTtlMs();
       const exchange = tunnelAuthController.exchangeBootstrapToken({
         req,
@@ -1164,8 +1163,7 @@ export const registerCommonRequestMiddleware = (app, dependencies) => {
       req.path.startsWith('/api/goals') ||
       req.path.startsWith('/api/text') ||
       req.path.startsWith('/api/voice') ||
-      req.path.startsWith('/api/tts') ||
-      req.path.startsWith('/api/openchamber/tunnel')
+      req.path.startsWith('/api/tts')
     ) {
       express.json({ limit: '50mb' })(req, res, next);
     } else if (req.path.startsWith('/api')) {

package/server/lib/opencode/routes.test.js CHANGED Viewed

@@ -68,7 +68,6 @@ describe('settings route', () => {
       responseStylePreset: 'concise',
       responseStyleCustomInstructions: 'Keep it brief.',
       summaryCustomAPIToken: 'response-secret-sentinel',
-      managedRemoteTunnelToken: 'tunnel-secret-sentinel',
       themeId: 'default',
     };
     const formatSettingsResponse = vi.fn(() => formatted);