@opendatalabs/personal-server-ts-server 0.0.1-canary.0078f25

package/dist/tunnel/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/tunnel/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAEhF,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED,uDAAuD;AACvD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMrD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAiBtB"}

package/dist/tunnel/auth.js

@@ -0,0 +1,46 @@
+/**
+ * Tunnel authentication via EIP-191 signed claims.
+ *
+ * Generates signed claims for FRP server plugin-first Login/NewProxy validation.
+ * The claim is a base64url-encoded JSON payload signed with EIP-191.
+ */
+/** Claim time-to-live in seconds. Used for refresh scheduling. */
+export const CLAIM_TTL_SECONDS = 300;
+/** Encode a UTF-8 string to base64url (no padding). */
+export function base64urlEncode(input) {
+    return Buffer.from(input, "utf-8")
+        .toString("base64")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=+$/, "");
+}
+/**
+ * Generate a signed claim for tunnel authentication.
+ *
+ * The claim payload contains:
+ * - aud: "https://tunnel.vana.org" (audience)
+ * - iat: issued-at timestamp (seconds)
+ * - exp: expiration timestamp (5 min TTL)
+ * - owner: owner wallet address
+ * - wallet: server wallet address
+ * - subdomain: lowercased wallet address
+ * - runId: unique per-process session ID
+ *
+ * The signature is EIP-191 over the base64url-encoded claim string.
+ */
+export async function generateSignedClaim(config) {
+    const now = Math.floor(Date.now() / 1000);
+    const payload = {
+        aud: "https://tunnel.vana.org",
+        iat: now,
+        exp: now + CLAIM_TTL_SECONDS,
+        owner: config.ownerAddress,
+        wallet: config.walletAddress,
+        subdomain: config.walletAddress.toLowerCase(),
+        runId: config.runId,
+    };
+    const claim = base64urlEncode(JSON.stringify(payload));
+    const sig = await config.serverKeypair.signMessage(claim);
+    return { claim, sig };
+}
+//# sourceMappingURL=auth.js.map

package/dist/tunnel/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/tunnel/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,kEAAkE;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAwBrC,uDAAuD;AACvD,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;SAC/B,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,MAAM,OAAO,GAAiB;QAC5B,GAAG,EAAE,yBAAyB;QAC9B,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,iBAAiB;QAC5B,KAAK,EAAE,MAAM,CAAC,YAAY;QAC1B,MAAM,EAAE,MAAM,CAAC,aAAa;QAC5B,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE;QAC7C,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;IAEF,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAE1D,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC"}

package/dist/tunnel/binary.d.ts

@@ -0,0 +1,57 @@
+/**
+ * On-demand frpc binary download and version management.
+ *
+ * Downloads the correct frpc binary for the current platform from GitHub
+ * releases, stores it in the user's data directory, and re-downloads only
+ * when the pinned version changes.
+ */
+/** Pinned frpc version — bump this to trigger re-download on next startup. */
+export declare const FRPC_VERSION = "0.67.0";
+export interface PlatformInfo {
+    /** e.g. "darwin_arm64" */
+    name: string;
+    /** Archive extension: "tar.gz" or "zip" */
+    ext: "tar.gz" | "zip";
+    /** Binary file name inside the archive */
+    binaryName: string;
+}
+/**
+ * Map current process.platform / process.arch to frp release naming.
+ */
+export declare function getPlatformInfo(): PlatformInfo;
+/**
+ * Return the expected path to the frpc binary under storageRoot.
+ */
+export declare function getBinaryPath(storageRoot: string): string;
+/**
+ * Read the installed version from the metadata file.
+ * Returns null if the file is missing or corrupt.
+ */
+export declare function getInstalledVersion(storageRoot: string): Promise<string | null>;
+/**
+ * Write version metadata after successful installation.
+ */
+export declare function writeVersionFile(storageRoot: string, version: string): Promise<void>;
+/**
+ * Build the GitHub release download URL for a given version and platform.
+ */
+export declare function getDownloadUrl(version: string, platformInfo: PlatformInfo): string;
+/**
+ * Download a file from `url` to `destPath` using fetch + stream pipeline.
+ */
+export declare function downloadArchive(url: string, destPath: string): Promise<void>;
+/**
+ * Extract the frpc binary from a downloaded archive into destDir.
+ */
+export declare function extractBinary(archivePath: string, destDir: string, version: string, platformInfo: PlatformInfo): Promise<string>;
+export interface EnsureFrpcOptions {
+    log?: (msg: string) => void;
+}
+/**
+ * Main entry point: ensure the correct frpc binary is available.
+ *
+ * 1. Check version file — if version matches and binary exists, return path (fast path).
+ * 2. Otherwise download, extract, chmod, write version file, return path.
+ */
+export declare function ensureFrpcBinary(storageRoot: string, options?: EnsureFrpcOptions): Promise<string>;
+//# sourceMappingURL=binary.d.ts.map

package/dist/tunnel/binary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary.d.ts","sourceRoot":"","sources":["../../src/tunnel/binary.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAqBH,8EAA8E;AAC9E,eAAO,MAAM,YAAY,WAAW,CAAC;AAIrC,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,GAAG,EAAE,QAAQ,GAAG,KAAK,CAAC;IACtB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;CACpB;AAQD;;GAEG;AACH,wBAAgB,eAAe,IAAI,YAAY,CA+B9C;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAGzD;AAMD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQxB;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,YAAY,GACzB,MAAM,CAGR;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,MAAM,CAAC,CA6BjB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,CAAC,CA8CjB"}

package/dist/tunnel/binary.js

@@ -0,0 +1,180 @@
+/**
+ * On-demand frpc binary download and version management.
+ *
+ * Downloads the correct frpc binary for the current platform from GitHub
+ * releases, stores it in the user's data directory, and re-downloads only
+ * when the pinned version changes.
+ */
+import { createWriteStream } from "node:fs";
+import { access, chmod, mkdir, readFile, rename, rm, writeFile, constants, } from "node:fs/promises";
+import { join } from "node:path";
+import { pipeline } from "node:stream/promises";
+import { Readable } from "node:stream";
+import { exec } from "node:child_process";
+import { promisify } from "node:util";
+const execAsync = promisify(exec);
+/** Pinned frpc version — bump this to trigger re-download on next startup. */
+export const FRPC_VERSION = "0.67.0";
+const GITHUB_RELEASE_BASE = "https://github.com/fatedier/frp/releases/download";
+/**
+ * Map current process.platform / process.arch to frp release naming.
+ */
+export function getPlatformInfo() {
+    const platform = process.platform;
+    const arch = process.arch;
+    if (platform === "darwin") {
+        const archName = arch === "arm64" ? "arm64" : "amd64";
+        return {
+            name: `darwin_${archName}`,
+            ext: "tar.gz",
+            binaryName: "frpc",
+        };
+    }
+    if (platform === "linux") {
+        const archName = arch === "arm64" ? "arm64" : "amd64";
+        return {
+            name: `linux_${archName}`,
+            ext: "tar.gz",
+            binaryName: "frpc",
+        };
+    }
+    if (platform === "win32") {
+        return {
+            name: "windows_amd64",
+            ext: "zip",
+            binaryName: "frpc.exe",
+        };
+    }
+    throw new Error(`Unsupported platform: ${platform} ${arch}`);
+}
+/**
+ * Return the expected path to the frpc binary under storageRoot.
+ */
+export function getBinaryPath(storageRoot) {
+    const isWindows = process.platform === "win32";
+    return join(storageRoot, "bin", isWindows ? "frpc.exe" : "frpc");
+}
+function versionFilePath(storageRoot) {
+    return join(storageRoot, "bin", "frpc-version.json");
+}
+/**
+ * Read the installed version from the metadata file.
+ * Returns null if the file is missing or corrupt.
+ */
+export async function getInstalledVersion(storageRoot) {
+    try {
+        const raw = await readFile(versionFilePath(storageRoot), "utf-8");
+        const meta = JSON.parse(raw);
+        return meta.version ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Write version metadata after successful installation.
+ */
+export async function writeVersionFile(storageRoot, version) {
+    const meta = {
+        version,
+        platform: `${process.platform}_${process.arch}`,
+        installedAt: new Date().toISOString(),
+    };
+    await writeFile(versionFilePath(storageRoot), JSON.stringify(meta, null, 2));
+}
+/**
+ * Build the GitHub release download URL for a given version and platform.
+ */
+export function getDownloadUrl(version, platformInfo) {
+    const archiveName = `frp_${version}_${platformInfo.name}.${platformInfo.ext}`;
+    return `${GITHUB_RELEASE_BASE}/v${version}/${archiveName}`;
+}
+/**
+ * Download a file from `url` to `destPath` using fetch + stream pipeline.
+ */
+export async function downloadArchive(url, destPath) {
+    const response = await fetch(url);
+    if (!response.ok) {
+        throw new Error(`Failed to download frpc: HTTP ${response.status} from ${url}`);
+    }
+    if (!response.body) {
+        throw new Error("No response body received");
+    }
+    const fileStream = createWriteStream(destPath);
+    await pipeline(Readable.fromWeb(response.body), fileStream);
+}
+/**
+ * Extract the frpc binary from a downloaded archive into destDir.
+ */
+export async function extractBinary(archivePath, destDir, version, platformInfo) {
+    const extractDir = join(destDir, "_extract");
+    await mkdir(extractDir, { recursive: true });
+    try {
+        if (platformInfo.ext === "tar.gz") {
+            await execAsync(`tar -xzf "${archivePath}" -C "${extractDir}"`);
+        }
+        else {
+            // Windows: use PowerShell
+            await execAsync(`powershell -Command "Expand-Archive -Path '${archivePath}' -DestinationPath '${extractDir}' -Force"`);
+        }
+        // The archive extracts to frp_<version>_<platform>/frpc
+        const innerDir = join(extractDir, `frp_${version}_${platformInfo.name}`);
+        const srcBinary = join(innerDir, platformInfo.binaryName);
+        // Verify extracted binary exists
+        await access(srcBinary, constants.F_OK);
+        // Move binary to final destination
+        const finalPath = join(destDir, platformInfo.binaryName);
+        await rename(srcBinary, finalPath);
+        return finalPath;
+    }
+    finally {
+        await rm(extractDir, { recursive: true, force: true });
+    }
+}
+/**
+ * Main entry point: ensure the correct frpc binary is available.
+ *
+ * 1. Check version file — if version matches and binary exists, return path (fast path).
+ * 2. Otherwise download, extract, chmod, write version file, return path.
+ */
+export async function ensureFrpcBinary(storageRoot, options) {
+    const log = options?.log ?? (() => { });
+    const binDir = join(storageRoot, "bin");
+    const binaryPath = getBinaryPath(storageRoot);
+    // Fast path: version matches and binary exists
+    const installedVersion = await getInstalledVersion(storageRoot);
+    if (installedVersion === FRPC_VERSION) {
+        try {
+            await access(binaryPath, constants.F_OK);
+            log(`frpc v${FRPC_VERSION} already installed`);
+            return binaryPath;
+        }
+        catch {
+            // Binary missing despite version file — re-download
+        }
+    }
+    // Need to download
+    log(`Downloading frpc v${FRPC_VERSION}...`);
+    await mkdir(binDir, { recursive: true });
+    const platformInfo = getPlatformInfo();
+    const url = getDownloadUrl(FRPC_VERSION, platformInfo);
+    // Download to a temp file in the bin directory
+    const tempArchive = join(binDir, `_frpc_download.${platformInfo.ext}`);
+    try {
+        await downloadArchive(url, tempArchive);
+        log("Download complete, extracting...");
+        await extractBinary(tempArchive, binDir, FRPC_VERSION, platformInfo);
+        // Make executable on unix
+        if (process.platform !== "win32") {
+            await chmod(binaryPath, 0o755);
+        }
+        await writeVersionFile(storageRoot, FRPC_VERSION);
+        log(`frpc v${FRPC_VERSION} installed successfully`);
+        return binaryPath;
+    }
+    finally {
+        // Clean up temp archive
+        await rm(tempArchive, { force: true });
+    }
+}
+//# sourceMappingURL=binary.js.map

package/dist/tunnel/binary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary.js","sourceRoot":"","sources":["../../src/tunnel/binary.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,MAAM,EACN,KAAK,EACL,KAAK,EACL,QAAQ,EACR,MAAM,EACN,EAAE,EACF,SAAS,EACT,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAErC,MAAM,mBAAmB,GAAG,mDAAmD,CAAC;AAiBhF;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,UAAU,QAAQ,EAAE;YAC1B,GAAG,EAAE,QAAQ;YACb,UAAU,EAAE,MAAM;SACnB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,SAAS,QAAQ,EAAE;YACzB,GAAG,EAAE,QAAQ;YACb,UAAU,EAAE,MAAM;SACnB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,GAAG,EAAE,KAAK;YACV,UAAU,EAAE,UAAU;SACvB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/C,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,eAAe,CAAC,WAAmB;IAC1C,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;QAClE,MAAM,IAAI,GAAoB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,OAAe;IAEf,MAAM,IAAI,GAAoB;QAC5B,OAAO;QACP,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;QAC/C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IACF,MAAM,SAAS,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,YAA0B;IAE1B,MAAM,WAAW,GAAG,OAAO,OAAO,IAAI,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC;IAC9E,OAAO,GAAG,mBAAmB,KAAK,OAAO,IAAI,WAAW,EAAE,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,iCAAiC,QAAQ,CAAC,MAAM,SAAS,GAAG,EAAE,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,QAAQ,CACZ,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAA8C,CAAC,EACzE,UAAU,CACX,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,OAAe,EACf,OAAe,EACf,YAA0B;IAE1B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,SAAS,CAAC,aAAa,WAAW,SAAS,UAAU,GAAG,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,0BAA0B;YAC1B,MAAM,SAAS,CACb,8CAA8C,WAAW,uBAAuB,UAAU,WAAW,CACtG,CAAC;QACJ,CAAC;QAED,wDAAwD;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QAE1D,iCAAiC;QACjC,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAExC,mCAAmC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAEnC,OAAO,SAAS,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAMD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,OAA2B;IAE3B,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAE9C,+CAA+C;IAC/C,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAChE,IAAI,gBAAgB,KAAK,YAAY,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACzC,GAAG,CAAC,SAAS,YAAY,oBAAoB,CAAC,CAAC;YAC/C,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,GAAG,CAAC,qBAAqB,YAAY,KAAK,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,cAAc,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAEvD,+CAA+C;IAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,kBAAkB,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;IAEvE,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACxC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAExC,MAAM,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAErE,0BAA0B;QAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,YAAY,yBAAyB,CAAC,CAAC;QAEpD,OAAO,UAAU,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,wBAAwB;QACxB,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/tunnel/config.d.ts

@@ -0,0 +1,27 @@
+/**
+ * FRP client configuration generation.
+ *
+ * Generates frpc.toml configuration for connecting to the FRP server.
+ */
+export interface FrpcConfigOptions {
+    serverAddr: string;
+    serverPort: number;
+    localPort: number;
+    subdomain: string;
+    walletAddress: string;
+    ownerAddress: string;
+    runId: string;
+    authClaim: string;
+    authSig: string;
+}
+/**
+ * Generate frpc.toml configuration content.
+ *
+ * Uses TOML format with:
+ * - serverAddr/serverPort for FRP control plane connection
+ * - loginFailExit = false for resilience (keeps trying on auth failure)
+ * - HTTP proxy with subdomain routing
+ * - Root-level metadatas for Auth Plugin validation (required by frps server)
+ */
+export declare function generateFrpcConfig(options: FrpcConfigOptions): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/tunnel/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/tunnel/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAsBrE"}

package/dist/tunnel/config.js

@@ -0,0 +1,38 @@
+/**
+ * FRP client configuration generation.
+ *
+ * Generates frpc.toml configuration for connecting to the FRP server.
+ */
+/**
+ * Generate frpc.toml configuration content.
+ *
+ * Uses TOML format with:
+ * - serverAddr/serverPort for FRP control plane connection
+ * - loginFailExit = false for resilience (keeps trying on auth failure)
+ * - HTTP proxy with subdomain routing
+ * - Root-level metadatas for Auth Plugin validation (required by frps server)
+ */
+export function generateFrpcConfig(options) {
+    return `# Auto-generated frpc configuration
+# Do not edit - regenerated on each server start
+
+serverAddr = "${options.serverAddr}"
+serverPort = ${options.serverPort}
+loginFailExit = false
+
+# Metadata for Auth Plugin validation (at root level for Login operation)
+metadatas.wallet = "${options.walletAddress}"
+metadatas.owner = "${options.ownerAddress}"
+metadatas.run_id = "${options.runId}"
+metadatas.auth_claim = "${options.authClaim}"
+metadatas.auth_sig = "${options.authSig}"
+
+[[proxies]]
+name = "personal-server"
+type = "http"
+localIP = "127.0.0.1"
+localPort = ${options.localPort}
+subdomain = "${options.subdomain}"
+`;
+}
+//# sourceMappingURL=config.js.map

package/dist/tunnel/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/tunnel/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B;IAC3D,OAAO;;;gBAGO,OAAO,CAAC,UAAU;eACnB,OAAO,CAAC,UAAU;;;;sBAIX,OAAO,CAAC,aAAa;qBACtB,OAAO,CAAC,YAAY;sBACnB,OAAO,CAAC,KAAK;0BACT,OAAO,CAAC,SAAS;wBACnB,OAAO,CAAC,OAAO;;;;;;cAMzB,OAAO,CAAC,SAAS;eAChB,OAAO,CAAC,SAAS;CAC/B,CAAC;AACF,CAAC"}

package/dist/tunnel/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * FRP tunnel module for establishing reverse proxy connections.
+ */
+export { generateSignedClaim, base64urlEncode, CLAIM_TTL_SECONDS, } from "./auth.js";
+export type { SignedClaim, ClaimPayload, ClaimConfig } from "./auth.js";
+export { generateFrpcConfig } from "./config.js";
+export type { FrpcConfigOptions } from "./config.js";
+export { TunnelManager } from "./manager.js";
+export type { TunnelConfig, TunnelStatus, TunnelStatusInfo, } from "./manager.js";
+export { ensureFrpcBinary, getBinaryPath } from "./binary.js";
+export { buildTunnelUrl, verifyTunnelUrl } from "./verify.js";
+export type { VerifyTunnelOptions, VerifyTunnelResult } from "./verify.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/tunnel/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tunnel/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,YAAY,EACV,YAAY,EACZ,YAAY,EACZ,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9D,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/tunnel/index.js

@@ -0,0 +1,9 @@
+/**
+ * FRP tunnel module for establishing reverse proxy connections.
+ */
+export { generateSignedClaim, base64urlEncode, CLAIM_TTL_SECONDS, } from "./auth.js";
+export { generateFrpcConfig } from "./config.js";
+export { TunnelManager } from "./manager.js";
+export { ensureFrpcBinary, getBinaryPath } from "./binary.js";
+export { buildTunnelUrl, verifyTunnelUrl } from "./verify.js";
+//# sourceMappingURL=index.js.map

package/dist/tunnel/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tunnel/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAO7C,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/tunnel/manager.d.ts

@@ -0,0 +1,88 @@
+/**
+ * TunnelManager handles the frpc process lifecycle.
+ *
+ * Responsibilities:
+ * - Generate signed claim and frpc.toml config
+ * - Spawn frpc process with a caller-provided binary path
+ * - Monitor process lifecycle
+ * - Periodically refresh the auth claim before it expires
+ * - Provide status for health endpoint
+ */
+import type { ServerAccount } from "@opendatalabs/personal-server-ts-core/keys";
+export type TunnelStatus = "stopped" | "starting" | "connected" | "disconnected" | "error";
+export interface TunnelStatusInfo {
+    enabled: boolean;
+    status: TunnelStatus;
+    publicUrl: string | null;
+    connectedSince: string | null;
+    error?: string;
+}
+export interface TunnelConfig {
+    walletAddress: string;
+    ownerAddress: string;
+    serverKeypair: ServerAccount;
+    runId: string;
+    serverAddr: string;
+    serverPort: number;
+    localPort: number;
+}
+export declare class TunnelManager {
+    private storageRoot;
+    private process;
+    private status;
+    private publicUrl;
+    private connectedSince;
+    private lastError;
+    private config;
+    private binaryPath;
+    private refreshTimer;
+    private refreshing;
+    constructor(storageRoot: string);
+    /**
+     * Start the frpc process with the given configuration.
+     * Returns the public URL once the tunnel is established.
+     * Automatically schedules periodic claim refresh.
+     */
+    start(config: TunnelConfig, binaryPath: string): Promise<string>;
+    /**
+     * Stop the frpc process gracefully.
+     */
+    stop(): Promise<void>;
+    /**
+     * Check if the tunnel is currently running.
+     */
+    isRunning(): boolean;
+    /**
+     * Update status based on external verification of the tunnel URL.
+     */
+    setVerified(reachable: boolean, error?: string): void;
+    /**
+     * Get the current tunnel status.
+     */
+    getStatus(): TunnelStatusInfo;
+    /**
+     * Get the public URL if connected.
+     */
+    getPublicUrl(): string | null;
+    /**
+     * Generate a fresh signed claim, write frpc.toml, and return the config path.
+     */
+    private writeFreshConfig;
+    /**
+     * Spawn the frpc process and wait for it to report a successful connection
+     * (or resolve optimistically after a timeout).
+     */
+    private spawnProcess;
+    /**
+     * Kill the running frpc process and wait for it to exit.
+     */
+    private killProcess;
+    private scheduleRefresh;
+    private clearRefreshTimer;
+    /**
+     * Refresh the auth claim by rewriting frpc.toml and restarting the process.
+     * On failure, retries after a shorter interval.
+     */
+    private refreshClaim;
+}
+//# sourceMappingURL=manager.d.ts.map

package/dist/tunnel/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/tunnel/manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAKhF,MAAM,MAAM,YAAY,GACpB,SAAS,GACT,UAAU,GACV,WAAW,GACX,cAAc,GACd,OAAO,CAAC;AAEZ,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,aAAa,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAQD,qBAAa,aAAa;IACxB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,UAAU,CAAS;gBAEf,WAAW,EAAE,MAAM;IAI/B;;;;OAIG;IACG,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkCtE;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA8B3B;;OAEG;IACH,SAAS,IAAI,OAAO;IAIpB;;OAEG;IACH,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAUrD;;OAEG;IACH,SAAS,IAAI,gBAAgB;IAU7B;;OAEG;IACH,YAAY,IAAI,MAAM,GAAG,IAAI;IAQ7B;;OAEG;YACW,gBAAgB;IA8B9B;;;OAGG;YACW,YAAY;IAkE1B;;OAEG;YACW,WAAW;IAsBzB,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,iBAAiB;IAOzB;;;OAGG;YACW,YAAY;CA0B3B"}