@paperclipai/server 2026.817.0 → 2026.818.0-beta.1

package/dist/services/runtime-exposure/exposure-manager.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exposure-manager.test.js","sourceRoot":"","sources":["../../../src/services/runtime-exposure/exposure-manager.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,6BAA6B,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEvF,OAAO,EACL,iBAAiB,GAOlB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,GAEhB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,UAAU,GAAG,sCAAsC,CAAC;AAC1D,MAAM,QAAQ,GAAG,6BAA6B,CAAC;AAC/C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAC7C,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAEhD,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,iBAA0B;IAChC,QAAQ,EAAE,MAAe;IACzB,UAAU,EAAE,MAAe;IAC3B,uBAAuB,EAAE,IAAI;IAC7B,aAAa,EAAE,aAAsB;CACtC,CAAC;AAgBF,SAAS,UAAU,CAAC,MAAwB;IAC1C,MAAM,KAAK,GAAoB,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAChF,MAAM,MAAM,GAAiB;QAC3B,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS;YAChC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;YACxF,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM;YAC5B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;YACtF,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM;YAC5B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;YACtF,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,IAAI;YACR,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;YAChB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,CAAC;KACF,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,MAAM,GAAG,yBAAyB,CAAC;AAEzC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YACnC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACnE,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC7B,SAAS,EAAE,UAAU;gBACrB,SAAS,EAAE;oBACT,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAClC,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACxC;aACF,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YACnC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACnE,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,IAAI,CAAC,MAAoB,EAAE,WAAmC;IACrE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,0BAA0B,EAAE,CAAC;AACxE,CAAC;AAED,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YACnC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,MAAM,IAAI,GAAe,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC;YACE,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;YACjC,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjB,OAAO,QAAQ,QAAQ,+CAA+C,CAAC;YACzE,CAAC;SACF,EACD,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CACjG,CAAC;QAEF,4EAA4E;QAC5E,yDAAyD;QACzD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,wEAAwE;QACxE,qDAAqD;QACrD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChD,+EAA+E;QAC/E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YACnC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,qBAAqB,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,EAC9E,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CACjG,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE;gBACX,MAAM,IAAI,iBAAiB,CACzB,6BAA6B,EAC7B,eAAe,QAAQ,uBAAuB,CAC/C,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACrE,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,QAAQ,uBAAuB,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE;gBACX,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YAC5D,CAAC;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACrE,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YACnC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;SACzF,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACjF,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YACnC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;SAC/E,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACzE,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACnG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACjF,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,IAAI,EAAE,oCAAoC;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE;gBACX,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC;YAChE,CAAC;SACF,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACjF,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YACnC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,cAAc;YAC9F,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACjF,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB;QAC7D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;SACzF,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;YAClF,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,mCAAmC;QAC7E,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACjD,4EAA4E;QAC5E,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;SACzF,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CACxC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC,CAAC,EACF,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CACjG,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YAC7F,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACjG,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YAC7F,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,yBAAyB;YACjC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE;gBACX,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;YACxD,CAAC;SACF,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YAC7F,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,yBAAyB;YACjC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE;gBACX,MAAM,IAAI,iBAAiB,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;YACrE,CAAC;SACF,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YAC7F,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,yBAAyB;YACjC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YACnC,IAAI,EAAE,GAAG,EAAE,CAAC;gBACV,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;gBACzD,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE;aAC/D;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACtE,iBAAiB,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;YACxC,kBAAkB,EAAE,IAAI,GAAG,EAAE;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG,sCAAsC,CAAC;QACtD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YACnC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACnE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACtE,iBAAiB,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;YACxC,kBAAkB,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,MAAM,GAAG,sCAAsC,CAAC;QACtD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YACnC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACtE,iBAAiB,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;YACxC,kBAAkB,EAAE,IAAI,GAAG,EAAE;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,OAAO,GAAG,sCAAsC,CAAC;QACvD,MAAM,OAAO,GAAG,sCAAsC,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC5B,IAAI,EAAE,GAAG,EAAE,CAAC;gBACV,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;gBACtD,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;aAC3D;YACD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE;gBACpB,IAAI,SAAS,KAAK,OAAO;oBAAE,MAAM,IAAI,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBAC5E,OAAO,EAAE,YAAY,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1C,CAAC;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACtE,iBAAiB,EAAE,IAAI,GAAG,EAAE;YAC5B,kBAAkB,EAAE,IAAI,GAAG,CAAC;gBAC1B,CAAC,OAAO,EAAE,yBAAyB,CAAC;gBACpC,CAAC,OAAO,EAAE,yBAAyB,CAAC;aACrC,CAAC;SACH,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/runtime-exposure/loopback-listener.d.ts

@@ -0,0 +1,33 @@
+/** One listening row from `/proc/net/tcp` or `/proc/net/tcp6`. */
+export interface ProcListenerRow {
+    localAddressHex: string;
+    localPortHex: string;
+    state: string;
+}
+export interface ListenerBindFacts {
+    present: boolean;
+    loopbackOnly: boolean;
+    /** Bound addresses in human-readable form, for the diagnosis message. */
+    addresses: string[];
+}
+/** Parse one `/proc/net/tcp{,6}` table into its listening rows. */
+export declare function parseProcNetListeners(content: string): ProcListenerRow[];
+/**
+ * Render a `/proc` address for humans. Both tables store 32-bit words in host
+ * (little-endian) byte order, so each 8-hex-digit word is byte-swapped.
+ */
+export declare function formatProcAddressHex(addrHex: string): string;
+/** Reduce both `/proc` tables to bind facts for one port. */
+export declare function listenerBindFactsForPort(tcp: ProcListenerRow[], tcp6: ProcListenerRow[], port: number): ListenerBindFacts;
+/** Read live bind facts for one port. Unreadable `/proc` yields "unknown". */
+export declare function readListenerBindFacts(port: number): Promise<ListenerBindFacts | null>;
+/**
+ * Build the operator-facing diagnosis for a set of ports about to be exposed, or
+ * null when nothing is provably wrong.
+ *
+ * Only a *proven* violation is reported. A missing listener is not treated as a
+ * violation here: readiness already gates on the bind, and guessing would turn a
+ * benign race into a misleading error.
+ */
+export declare function diagnoseRuntimeListenerBinds(ports: number[]): Promise<string | null>;
+//# sourceMappingURL=loopback-listener.d.ts.map

package/dist/services/runtime-exposure/loopback-listener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-listener.d.ts","sourceRoot":"","sources":["../../../src/services/runtime-exposure/loopback-listener.ts"],"names":[],"mappings":"AAuBA,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,yEAAyE;IACzE,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAID,mEAAmE;AACnE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,EAAE,CAUxE;AAOD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAsB5D;AAeD,6DAA6D;AAC7D,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,eAAe,EAAE,EACtB,IAAI,EAAE,eAAe,EAAE,EACvB,IAAI,EAAE,MAAM,GACX,iBAAiB,CAkBnB;AAED,8EAA8E;AAC9E,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAgB3F;AAED;;;;;;;GAOG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAc1F"}

package/dist/services/runtime-exposure/loopback-listener.js

@@ -0,0 +1,146 @@
+/**
+ * Server-side loopback listener diagnosis for the `tailscale_https` mode
+ * (PAP-17256).
+ *
+ * The broker already refuses to expose a port whose listener is not
+ * loopback-only, and it must keep doing that check itself — it cannot trust the
+ * caller. But the broker only answers with a stable machine code, so when a
+ * managed lane bound `0.0.0.0` the operator saw a bare
+ * `listener_ownership_mismatch` with no port, no address, and no hint about
+ * which side was wrong. That opacity, not the denial, is what turned one bug
+ * into three diagnostic cycles.
+ *
+ * So the server runs the same read *before* it calls the broker, purely to
+ * produce a sentence a human can act on. This is deliberately a duplicate of
+ * the broker's `proc-listener` logic rather than a shared import: the broker is
+ * host-privileged and its gate must stay independent of anything the server
+ * says. If the two ever disagree, the broker still wins — this one only
+ * explains.
+ *
+ * Parsing helpers are exported pure so they can be tested without /proc.
+ */
+import { readFile } from "node:fs/promises";
+const TCP_STATE_LISTEN = "0A";
+/** Parse one `/proc/net/tcp{,6}` table into its listening rows. */
+export function parseProcNetListeners(content) {
+    const rows = [];
+    for (const line of content.split("\n").slice(1)) {
+        const cols = line.trim().split(/\s+/);
+        if (cols.length < 10)
+            continue;
+        const [addr, port] = cols[1].split(":");
+        if (!addr || !port)
+            continue;
+        rows.push({ localAddressHex: addr, localPortHex: port, state: cols[3] });
+    }
+    return rows;
+}
+/** True for a wildcard bind (`0.0.0.0` / `::`), reachable off-loopback. */
+function isWildcardHex(addrHex) {
+    return /^0+$/.test(addrHex);
+}
+/**
+ * Render a `/proc` address for humans. Both tables store 32-bit words in host
+ * (little-endian) byte order, so each 8-hex-digit word is byte-swapped.
+ */
+export function formatProcAddressHex(addrHex) {
+    if (addrHex.length === 8) {
+        const octets = [6, 4, 2, 0].map((offset) => parseInt(addrHex.slice(offset, offset + 2), 16));
+        return octets.join(".");
+    }
+    if (addrHex.length === 32) {
+        const bytes = [];
+        for (let word = 0; word < 4; word += 1) {
+            const hex = addrHex.slice(word * 8, word * 8 + 8);
+            for (let offset = 6; offset >= 0; offset -= 2) {
+                bytes.push(parseInt(hex.slice(offset, offset + 2), 16));
+            }
+        }
+        if (bytes.every((byte) => byte === 0))
+            return "::";
+        if (bytes.slice(0, 15).every((byte) => byte === 0) && bytes[15] === 1)
+            return "::1";
+        const groups = [];
+        for (let index = 0; index < 16; index += 2) {
+            groups.push(((bytes[index] << 8) | bytes[index + 1]).toString(16));
+        }
+        return groups.join(":");
+    }
+    return `0x${addrHex}`;
+}
+/** True when a `/proc` IPv4 hex address is in 127.0.0.0/8. */
+function isLoopbackIpv4Hex(addrHex) {
+    if (addrHex.length !== 8)
+        return false;
+    return parseInt(addrHex.slice(6, 8), 16) === 127;
+}
+/** `::1` as `/proc/net/tcp6` stores it — final word byte-swapped. */
+const LOOPBACK_IPV6_PROC_HEX = "00000000000000000000000001000000";
+function isLoopbackIpv6Hex(addrHex) {
+    return addrHex.toUpperCase() === LOOPBACK_IPV6_PROC_HEX;
+}
+/** Reduce both `/proc` tables to bind facts for one port. */
+export function listenerBindFactsForPort(tcp, tcp6, port) {
+    const wantHex = port.toString(16).toUpperCase().padStart(4, "0");
+    const addresses = [];
+    let present = false;
+    let loopbackOnly = true;
+    const scan = (rows, isLoopback) => {
+        for (const row of rows) {
+            if (row.localPortHex.toUpperCase() !== wantHex || row.state !== TCP_STATE_LISTEN)
+                continue;
+            present = true;
+            addresses.push(formatProcAddressHex(row.localAddressHex));
+            if (isWildcardHex(row.localAddressHex) || !isLoopback(row.localAddressHex)) {
+                loopbackOnly = false;
+            }
+        }
+    };
+    scan(tcp, isLoopbackIpv4Hex);
+    scan(tcp6, isLoopbackIpv6Hex);
+    return { present, loopbackOnly, addresses: [...new Set(addresses)] };
+}
+/** Read live bind facts for one port. Unreadable `/proc` yields "unknown". */
+export async function readListenerBindFacts(port) {
+    let tcp;
+    try {
+        tcp = parseProcNetListeners(await readFile("/proc/net/tcp", "utf8"));
+    }
+    catch {
+        // No /proc (non-Linux, or a restricted sandbox): the server simply cannot
+        // explain, so it stays silent and lets the broker's own gate decide.
+        return null;
+    }
+    let tcp6 = [];
+    try {
+        tcp6 = parseProcNetListeners(await readFile("/proc/net/tcp6", "utf8"));
+    }
+    catch {
+        /* optional table */
+    }
+    return listenerBindFactsForPort(tcp, tcp6, port);
+}
+/**
+ * Build the operator-facing diagnosis for a set of ports about to be exposed, or
+ * null when nothing is provably wrong.
+ *
+ * Only a *proven* violation is reported. A missing listener is not treated as a
+ * violation here: readiness already gates on the bind, and guessing would turn a
+ * benign race into a misleading error.
+ */
+export async function diagnoseRuntimeListenerBinds(ports) {
+    const violations = [];
+    for (const port of ports) {
+        const facts = await readListenerBindFacts(port);
+        if (!facts || !facts.present || facts.loopbackOnly)
+            continue;
+        violations.push(`port ${port} is bound to ${facts.addresses.join(", ")}`);
+    }
+    if (violations.length === 0)
+        return null;
+    return (`${violations.join("; ")} instead of loopback only. The broker will not expose a listener `
+        + "reachable off-loopback. This means the workspace checkout's dev server ignored the managed "
+        + "loopback bind — a checkout that predates managed HTTPS exposure overwrites PAPERCLIP_BIND "
+        + "from its own --bind argv, so the start command must pass --bind custom --bind-host 127.0.0.1.");
+}
+//# sourceMappingURL=loopback-listener.js.map

package/dist/services/runtime-exposure/loopback-listener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-listener.js","sourceRoot":"","sources":["../../../src/services/runtime-exposure/loopback-listener.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAgB5C,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,SAAS;QAC/B,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,SAAS;QAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7F,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACpF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,OAAO,EAAE,CAAC;AACxB,CAAC;AAED,8DAA8D;AAC9D,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC;AACnD,CAAC;AAED,qEAAqE;AACrE,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AAElE,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,OAAO,CAAC,WAAW,EAAE,KAAK,sBAAsB,CAAC;AAC1D,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,wBAAwB,CACtC,GAAsB,EACtB,IAAuB,EACvB,IAAY;IAEZ,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,CAAC,IAAuB,EAAE,UAAoC,EAAE,EAAE;QAC7E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,GAAG,CAAC,KAAK,KAAK,gBAAgB;gBAAE,SAAS;YAC3F,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;YAC1D,IAAI,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC3E,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,IAAI,GAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,GAAG,GAAG,qBAAqB,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,qEAAqE;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,GAAsB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,qBAAqB,CAAC,MAAM,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;IACD,OAAO,wBAAwB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAAe;IAChE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,YAAY;YAAE,SAAS;QAC7D,UAAU,CAAC,IAAI,CAAC,QAAQ,IAAI,gBAAgB,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,CACL,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,mEAAmE;UACzF,6FAA6F;UAC7F,4FAA4F;UAC5F,+FAA+F,CAClG,CAAC;AACJ,CAAC"}

package/dist/services/runtime-exposure/loopback-listener.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=loopback-listener.test.d.ts.map

package/dist/services/runtime-exposure/loopback-listener.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-listener.test.d.ts","sourceRoot":"","sources":["../../../src/services/runtime-exposure/loopback-listener.test.ts"],"names":[],"mappings":""}

package/dist/services/runtime-exposure/loopback-listener.test.js

@@ -0,0 +1,116 @@
+import net from "node:net";
+import { describe, expect, it } from "vitest";
+import { RUNTIME_EXPOSURE_APP_PORT_MIN, deriveViteHmrPort } from "@paperclipai/shared";
+import { diagnoseRuntimeListenerBinds, formatProcAddressHex, listenerBindFactsForPort, parseProcNetListeners, } from "./loopback-listener.js";
+// Real header and row shape, copied from a live /proc/net/tcp{,6} on the host
+// that produced the PAP-17256 failures. Port 42003 is A40B; 52003 is CB23.
+const TCP_HEADER = "  sl  local_address rem_address   st tx_queue rx_queue tr tm->when retrnsmt   uid  timeout inode                                                     ";
+const TCP6_HEADER = "  sl  local_address                         remote_address                        st tx_queue rx_queue tr tm->when retrnsmt   uid  timeout inode";
+function tcpRow(addrHex, portHex, state = "0A") {
+    return `   0: ${addrHex}:${portHex} 00000000:0000 ${state} 00000000:00000000 00:00000000 00000000   999        0 74815359 1 0000000000000000 100 0 0 10 0`;
+}
+function tcp6Row(addrHex, portHex, state = "0A") {
+    return `   0: ${addrHex}:${portHex} 00000000000000000000000000000000:0000 ${state} 00000000:00000000 00:00000000 00000000   999        0 74815360 2 0000000000000000 100 0 0 10 0`;
+}
+/** The app port from the PAP-17256 lane, and its `/proc` hex form. */
+const APP_PORT = 42_003;
+const portHex = (port) => port.toString(16).toUpperCase().padStart(4, "0");
+const APP_PORT_HEX = portHex(APP_PORT);
+describe("formatProcAddressHex", () => {
+    it("byte-swaps IPv4 words", () => {
+        expect(formatProcAddressHex("0100007F")).toBe("127.0.0.1");
+        expect(formatProcAddressHex("00000000")).toBe("0.0.0.0");
+        expect(formatProcAddressHex("0400007F")).toBe("127.0.0.4");
+    });
+    it("renders the IPv6 loopback and wildcard forms /proc actually stores", () => {
+        expect(formatProcAddressHex("00000000000000000000000001000000")).toBe("::1");
+        expect(formatProcAddressHex("00000000000000000000000000000000")).toBe("::");
+    });
+});
+describe("listenerBindFactsForPort", () => {
+    it("accepts an IPv4 loopback listener", () => {
+        const facts = listenerBindFactsForPort(parseProcNetListeners(`${TCP_HEADER}\n${tcpRow("0100007F", APP_PORT_HEX)}\n`), [], APP_PORT);
+        expect(facts).toEqual({ present: true, loopbackOnly: true, addresses: ["127.0.0.1"] });
+    });
+    it("accepts an IPv6 loopback listener in the little-endian ::1 form", () => {
+        const facts = listenerBindFactsForPort([], parseProcNetListeners(`${TCP6_HEADER}\n${tcp6Row("00000000000000000000000001000000", APP_PORT_HEX)}\n`), APP_PORT);
+        expect(facts).toEqual({ present: true, loopbackOnly: true, addresses: ["::1"] });
+    });
+    it("rejects the 0.0.0.0 wildcard bind that broke every managed lane", () => {
+        const facts = listenerBindFactsForPort(parseProcNetListeners(`${TCP_HEADER}\n${tcpRow("00000000", APP_PORT_HEX)}\n`), [], APP_PORT);
+        expect(facts).toEqual({ present: true, loopbackOnly: false, addresses: ["0.0.0.0"] });
+    });
+    it("rejects the :: wildcard bind", () => {
+        const facts = listenerBindFactsForPort([], parseProcNetListeners(`${TCP6_HEADER}\n${tcp6Row("00000000000000000000000000000000", APP_PORT_HEX)}\n`), APP_PORT);
+        expect(facts.loopbackOnly).toBe(false);
+        expect(facts.addresses).toEqual(["::"]);
+    });
+    it("rejects a non-loopback unicast bind", () => {
+        // 100.123.243.20 — the tailnet address, stored little-endian.
+        const facts = listenerBindFactsForPort(parseProcNetListeners(`${TCP_HEADER}\n${tcpRow("14F37B64", APP_PORT_HEX)}\n`), [], APP_PORT);
+        expect(facts.loopbackOnly).toBe(false);
+        expect(facts.addresses).toEqual(["100.123.243.20"]);
+    });
+    it("reports absent for a port with no LISTEN row", () => {
+        const facts = listenerBindFactsForPort(
+        // Same port, but ESTABLISHED (01) rather than LISTEN (0A).
+        parseProcNetListeners(`${TCP_HEADER}\n${tcpRow("0100007F", APP_PORT_HEX, "01")}\n`), [], APP_PORT);
+        expect(facts).toEqual({ present: false, loopbackOnly: true, addresses: [] });
+    });
+    it("ignores rows for other ports", () => {
+        const facts = listenerBindFactsForPort(parseProcNetListeners(`${TCP_HEADER}\n${tcpRow("00000000", portHex(52_003))}\n`), [], APP_PORT);
+        expect(facts.present).toBe(false);
+    });
+    it("is not loopback-only when a wildcard row accompanies a loopback row", () => {
+        const facts = listenerBindFactsForPort(parseProcNetListeners(`${TCP_HEADER}\n${tcpRow("0100007F", APP_PORT_HEX)}\n${tcpRow("00000000", APP_PORT_HEX)}\n`), [], APP_PORT);
+        expect(facts.loopbackOnly).toBe(false);
+        expect(facts.addresses).toEqual(["127.0.0.1", "0.0.0.0"]);
+    });
+});
+describe("diagnoseRuntimeListenerBinds against live listeners", () => {
+    const appPort = RUNTIME_EXPOSURE_APP_PORT_MIN + 900;
+    const hmrPort = deriveViteHmrPort(appPort);
+    async function withListener(port, host, body) {
+        const server = net.createServer();
+        await new Promise((resolve, reject) => {
+            server.once("error", reject);
+            if (host === undefined)
+                server.listen(port, () => resolve());
+            else
+                server.listen(port, host, () => resolve());
+        });
+        try {
+            return await body();
+        }
+        finally {
+            await new Promise((resolve) => server.close(() => resolve()));
+        }
+    }
+    it("stays silent for a real loopback listener", async () => {
+        await withListener(appPort, "127.0.0.1", async () => {
+            expect(await diagnoseRuntimeListenerBinds([appPort])).toBeNull();
+        });
+    });
+    it("names the port and the wildcard address for a real 0.0.0.0 listener", async () => {
+        await withListener(appPort, undefined, async () => {
+            const diagnosis = await diagnoseRuntimeListenerBinds([appPort]);
+            expect(diagnosis).toContain(`port ${appPort}`);
+            // Node's hostless listen is dual-stack, so /proc shows :: and/or 0.0.0.0.
+            expect(diagnosis).toMatch(/0\.0\.0\.0|::/);
+            expect(diagnosis).toContain("--bind custom --bind-host 127.0.0.1");
+        });
+    });
+    it("catches the HMR companion port too, not just the app port", async () => {
+        await withListener(appPort, "127.0.0.1", async () => {
+            await withListener(hmrPort, undefined, async () => {
+                const diagnosis = await diagnoseRuntimeListenerBinds([appPort, hmrPort]);
+                expect(diagnosis).toContain(`port ${hmrPort}`);
+                expect(diagnosis).not.toContain(`port ${appPort} is bound`);
+            });
+        });
+    });
+    it("stays silent for a port with no listener, leaving the verdict to the broker", async () => {
+        expect(await diagnoseRuntimeListenerBinds([appPort])).toBeNull();
+    });
+});
+//# sourceMappingURL=loopback-listener.test.js.map

package/dist/services/runtime-exposure/loopback-listener.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-listener.test.js","sourceRoot":"","sources":["../../../src/services/runtime-exposure/loopback-listener.test.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,6BAA6B,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEvF,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAEhC,8EAA8E;AAC9E,2EAA2E;AAC3E,MAAM,UAAU,GACd,uJAAuJ,CAAC;AAC1J,MAAM,WAAW,GACf,kJAAkJ,CAAC;AAErJ,SAAS,MAAM,CAAC,OAAe,EAAE,OAAe,EAAE,KAAK,GAAG,IAAI;IAC5D,OAAO,SAAS,OAAO,IAAI,OAAO,kBAAkB,KAAK,iGAAiG,CAAC;AAC7J,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,OAAe,EAAE,KAAK,GAAG,IAAI;IAC7D,OAAO,SAAS,OAAO,IAAI,OAAO,0CAA0C,KAAK,iGAAiG,CAAC;AACrL,CAAC;AAED,sEAAsE;AACtE,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnF,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvC,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,oBAAoB,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,MAAM,CAAC,oBAAoB,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,KAAK,GAAG,wBAAwB,CACpC,qBAAqB,CAAC,GAAG,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,EAC7E,EAAE,EACF,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,KAAK,GAAG,wBAAwB,CACpC,EAAE,EACF,qBAAqB,CACnB,GAAG,WAAW,KAAK,OAAO,CAAC,kCAAkC,EAAE,YAAY,CAAC,IAAI,CACjF,EACD,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,KAAK,GAAG,wBAAwB,CACpC,qBAAqB,CAAC,GAAG,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,EAC7E,EAAE,EACF,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,wBAAwB,CACpC,EAAE,EACF,qBAAqB,CACnB,GAAG,WAAW,KAAK,OAAO,CAAC,kCAAkC,EAAE,YAAY,CAAC,IAAI,CACjF,EACD,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,8DAA8D;QAC9D,MAAM,KAAK,GAAG,wBAAwB,CACpC,qBAAqB,CAAC,GAAG,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,EAC7E,EAAE,EACF,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,KAAK,GAAG,wBAAwB;QACpC,2DAA2D;QAC3D,qBAAqB,CAAC,GAAG,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,EACnF,EAAE,EACF,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,wBAAwB,CACpC,qBAAqB,CAAC,GAAG,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAChF,EAAE,EACF,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,KAAK,GAAG,wBAAwB,CACpC,qBAAqB,CACnB,GAAG,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,CAC5F,EACD,EAAE,EACF,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,MAAM,OAAO,GAAG,6BAA6B,GAAG,GAAG,CAAC;IACpD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE3C,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,IAAwB,EACxB,IAAsB;QAEtB,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;;gBACxD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,CAAC,MAAM,4BAA4B,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC;YAC/C,0EAA0E;YAC1E,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE;gBAChD,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACzE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC;gBAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,OAAO,WAAW,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,CAAC,MAAM,4BAA4B,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/runtime-exposure/port-pair.d.ts

@@ -0,0 +1,47 @@
+export interface ExposurePortPair {
+    appPort: number;
+    hmrPort: number;
+}
+export interface AllocateExposurePortPairInput {
+    /**
+     * Returns true if the port can currently be bound loopback-only. Both the app
+     * port and its HMR companion must pass before a pair is returned.
+     */
+    isPortAvailable: (port: number) => Promise<boolean>;
+    /**
+     * Ports that must never be handed out — e.g. quarantined after an ambiguous
+     * cleanup, or already reserved by other live runtimes this cycle.
+     */
+    reserved?: ReadonlySet<number>;
+    /**
+     * The port this runtime is already using, if any. Tried first so a restart or
+     * a backfilled service keeps its port instead of drifting across the range on
+     * every deploy ("keep existing runtime ports when safe", PAP-17158).
+     *
+     * Only honored when it is genuinely safe: the port must be an allowlisted app
+     * port, unreserved, and free together with its HMR companion. A legacy pinned
+     * port outside the dedicated range (the Paperclip App template's 45439) can
+     * never be published by the broker, so it is ignored here rather than making
+     * the caller special-case it.
+     */
+    preferredAppPort?: number | null;
+    /**
+     * Atomically take the pair for this allocation, or refuse it. Returning false
+     * makes the scan move on as if the pair were busy.
+     *
+     * Without it, two concurrent allocators observe identical reservations and
+     * identical probe results and both walk away with the lowest free pair —
+     * neither has bound anything yet, so nothing downstream can tell them apart.
+     * The claim must cover both ports together: a half-claimed pair is the
+     * orphaned-HMR-companion failure this allocator exists to prevent.
+     */
+    claimPair?: (pair: ExposurePortPair) => boolean;
+}
+/**
+ * Return an app port whose HMR companion is also free and unreserved: the
+ * preferred port when it is eligible, otherwise the first such port scanning the
+ * dedicated range in ascending order. Throws when the range is exhausted so the
+ * caller fails closed rather than binding an out-of-range port.
+ */
+export declare function allocateExposurePortPair(input: AllocateExposurePortPairInput): Promise<ExposurePortPair>;
+//# sourceMappingURL=port-pair.d.ts.map

package/dist/services/runtime-exposure/port-pair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-pair.d.ts","sourceRoot":"","sources":["../../../src/services/runtime-exposure/port-pair.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC;CACjD;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,gBAAgB,CAAC,CA+B3B"}

package/dist/services/runtime-exposure/port-pair.js

@@ -0,0 +1,57 @@
+/**
+ * Paired app + Vite HMR port allocation for the `tailscale_https` exposure mode.
+ *
+ * A managed runtime that opts into HTTPS exposure needs TWO deterministically
+ * related loopback ports reserved together (PAP-17049 plan, PAP-17050 verdict
+ * requirement #2): the app port and its Paperclip Vite HMR companion at a fixed
+ * offset. Allocating them as a pair — and only from the dedicated allowlisted
+ * range — means a compromised caller can never ask the broker to publish an
+ * arbitrary existing loopback service, and the HMR listener is never orphaned
+ * from its app listener.
+ *
+ * Pure orchestration over an injected availability probe: no sockets here, so
+ * the scan order and skip logic are unit-testable.
+ */
+import { RUNTIME_EXPOSURE_APP_PORT_MIN, RUNTIME_EXPOSURE_APP_PORT_MAX, deriveViteHmrPort, isRuntimeExposureAppPort, } from "@paperclipai/shared";
+/**
+ * Return an app port whose HMR companion is also free and unreserved: the
+ * preferred port when it is eligible, otherwise the first such port scanning the
+ * dedicated range in ascending order. Throws when the range is exhausted so the
+ * caller fails closed rather than binding an out-of-range port.
+ */
+export async function allocateExposurePortPair(input) {
+    const reserved = input.reserved ?? new Set();
+    const claimIfFree = async (appPort) => {
+        if (reserved.has(appPort))
+            return null;
+        if (!isRuntimeExposureAppPort(appPort))
+            return null;
+        const hmrPort = deriveViteHmrPort(appPort);
+        if (reserved.has(hmrPort))
+            return null;
+        // Probe the app port first; short-circuit before probing the companion.
+        if (!(await input.isPortAvailable(appPort)))
+            return null;
+        if (!(await input.isPortAvailable(hmrPort)))
+            return null;
+        const pair = { appPort, hmrPort };
+        // Claim last: the probes are the cheap filter, and claiming a pair we then
+        // reject would leak a hold on it for the claim's whole TTL.
+        if (input.claimPair && !input.claimPair(pair))
+            return null;
+        return pair;
+    };
+    if (input.preferredAppPort != null) {
+        const preferred = await claimIfFree(input.preferredAppPort);
+        if (preferred)
+            return preferred;
+    }
+    for (let appPort = RUNTIME_EXPOSURE_APP_PORT_MIN; appPort <= RUNTIME_EXPOSURE_APP_PORT_MAX; appPort += 1) {
+        const pair = await claimIfFree(appPort);
+        if (pair)
+            return pair;
+    }
+    throw new Error(`no free app/HMR port pair available in the dedicated runtime exposure range ` +
+        `[${RUNTIME_EXPOSURE_APP_PORT_MIN}, ${RUNTIME_EXPOSURE_APP_PORT_MAX}]`);
+}
+//# sourceMappingURL=port-pair.js.map

package/dist/services/runtime-exposure/port-pair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-pair.js","sourceRoot":"","sources":["../../../src/services/runtime-exposure/port-pair.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AA2C7B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAoC;IAEpC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,GAAG,EAAU,CAAC;IAErD,MAAM,WAAW,GAAG,KAAK,EAAE,OAAe,EAAoC,EAAE;QAC9E,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,wEAAwE;QACxE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACzD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAClC,2EAA2E;QAC3E,4DAA4D;QAC5D,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,IAAI,KAAK,CAAC,gBAAgB,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC5D,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;IAClC,CAAC;IAED,KAAK,IAAI,OAAO,GAAG,6BAA6B,EAAE,OAAO,IAAI,6BAA6B,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,MAAM,IAAI,KAAK,CACb,8EAA8E;QAC5E,IAAI,6BAA6B,KAAK,6BAA6B,GAAG,CACzE,CAAC;AACJ,CAAC"}

package/dist/services/runtime-exposure/port-pair.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=port-pair.test.d.ts.map

package/dist/services/runtime-exposure/port-pair.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-pair.test.d.ts","sourceRoot":"","sources":["../../../src/services/runtime-exposure/port-pair.test.ts"],"names":[],"mappings":""}

package/dist/services/runtime-exposure/port-pair.test.js

@@ -0,0 +1,92 @@
+import { describe, expect, it } from "vitest";
+import { RUNTIME_EXPOSURE_APP_PORT_MIN, RUNTIME_EXPOSURE_HMR_PORT_OFFSET, } from "@paperclipai/shared";
+import { allocateExposurePortPair } from "./port-pair.js";
+describe("allocateExposurePortPair", () => {
+    it("returns the first free app port with a free HMR companion", async () => {
+        const pair = await allocateExposurePortPair({ isPortAvailable: async () => true });
+        expect(pair.appPort).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN);
+        expect(pair.hmrPort).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN + RUNTIME_EXPOSURE_HMR_PORT_OFFSET);
+    });
+    it("skips an app port whose HMR companion is busy", async () => {
+        const busyHmr = RUNTIME_EXPOSURE_APP_PORT_MIN + RUNTIME_EXPOSURE_HMR_PORT_OFFSET;
+        const pair = await allocateExposurePortPair({
+            isPortAvailable: async (port) => port !== busyHmr,
+        });
+        // First app port's companion is busy, so it advances to the next app port.
+        expect(pair.appPort).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN + 1);
+        expect(pair.hmrPort).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN + 1 + RUNTIME_EXPOSURE_HMR_PORT_OFFSET);
+    });
+    it("skips a busy app port", async () => {
+        const pair = await allocateExposurePortPair({
+            isPortAvailable: async (port) => port !== RUNTIME_EXPOSURE_APP_PORT_MIN,
+        });
+        expect(pair.appPort).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN + 1);
+    });
+    it("never returns a reserved (e.g. quarantined) app or HMR port", async () => {
+        const reserved = new Set([
+            RUNTIME_EXPOSURE_APP_PORT_MIN,
+            // reserve the SECOND app port's HMR companion too
+            RUNTIME_EXPOSURE_APP_PORT_MIN + 1 + RUNTIME_EXPOSURE_HMR_PORT_OFFSET,
+        ]);
+        const pair = await allocateExposurePortPair({
+            isPortAvailable: async () => true,
+            reserved,
+        });
+        expect(pair.appPort).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN + 2);
+    });
+    describe("preferredAppPort (keep existing runtime ports when safe)", () => {
+        it("keeps a preferred in-range port instead of restarting the scan", async () => {
+            const pair = await allocateExposurePortPair({
+                isPortAvailable: async () => true,
+                preferredAppPort: 42_500,
+            });
+            expect(pair.appPort).toBe(42_500);
+            expect(pair.hmrPort).toBe(42_500 + RUNTIME_EXPOSURE_HMR_PORT_OFFSET);
+        });
+        it("ignores a legacy pinned port outside the dedicated range", async () => {
+            // 45439 is the pre-feature Paperclip App port; the broker can never
+            // publish it, so the allocator must relocate rather than fail.
+            const pair = await allocateExposurePortPair({
+                isPortAvailable: async () => true,
+                preferredAppPort: 45_439,
+            });
+            expect(pair.appPort).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN);
+        });
+        it("falls back to the scan when the preferred port is busy or reserved", async () => {
+            const busy = await allocateExposurePortPair({
+                isPortAvailable: async (port) => port !== 42_500,
+                preferredAppPort: 42_500,
+            });
+            expect(busy.appPort).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN);
+            const reservedCompanion = await allocateExposurePortPair({
+                isPortAvailable: async () => true,
+                reserved: new Set([42_500 + RUNTIME_EXPOSURE_HMR_PORT_OFFSET]),
+                preferredAppPort: 42_500,
+            });
+            expect(reservedCompanion.appPort).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN);
+        });
+        it("ignores a preferred HMR-range port (never an app port)", async () => {
+            const pair = await allocateExposurePortPair({
+                isPortAvailable: async () => true,
+                preferredAppPort: RUNTIME_EXPOSURE_APP_PORT_MIN + RUNTIME_EXPOSURE_HMR_PORT_OFFSET,
+            });
+            expect(pair.appPort).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN);
+        });
+    });
+    it("throws when the dedicated range is exhausted", async () => {
+        await expect(allocateExposurePortPair({ isPortAvailable: async () => false })).rejects.toThrow(/no free app\/HMR port pair/);
+    });
+    it("only probes the companion after the app port is free (short-circuits)", async () => {
+        const probed = [];
+        await allocateExposurePortPair({
+            isPortAvailable: async (port) => {
+                probed.push(port);
+                return true;
+            },
+        });
+        // First two probes are the first app port and its companion, in order.
+        expect(probed[0]).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN);
+        expect(probed[1]).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN + RUNTIME_EXPOSURE_HMR_PORT_OFFSET);
+    });
+});
+//# sourceMappingURL=port-pair.test.js.map

package/dist/services/runtime-exposure/port-pair.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-pair.test.js","sourceRoot":"","sources":["../../../src/services/runtime-exposure/port-pair.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,GAAG,gCAAgC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,OAAO,GAAG,6BAA6B,GAAG,gCAAgC,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC;YAC1C,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO;SAClD,CAAC,CAAC;QACH,2EAA2E;QAC3E,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,GAAG,gCAAgC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC;YAC1C,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,6BAA6B;SACxE,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS;YAC/B,6BAA6B;YAC7B,kDAAkD;YAClD,6BAA6B,GAAG,CAAC,GAAG,gCAAgC;SACrE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC;YAC1C,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;YACjC,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACxE,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC;gBAC1C,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;gBACjC,gBAAgB,EAAE,MAAM;aACzB,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,gCAAgC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,oEAAoE;YACpE,+DAA+D;YAC/D,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC;gBAC1C,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;gBACjC,gBAAgB,EAAE,MAAM;aACzB,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC;gBAC1C,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM;gBAChD,gBAAgB,EAAE,MAAM;aACzB,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAEzD,MAAM,iBAAiB,GAAG,MAAM,wBAAwB,CAAC;gBACvD,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;gBACjC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,gCAAgC,CAAC,CAAC;gBAC9D,gBAAgB,EAAE,MAAM;aACzB,CAAC,CAAC;YACH,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC;gBAC1C,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;gBACjC,gBAAgB,EAAE,6BAA6B,GAAG,gCAAgC;aACnF,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,CACV,wBAAwB,CAAC,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CACjE,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,wBAAwB,CAAC;YAC7B,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClB,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QACH,uEAAuE;QACvE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,GAAG,gCAAgC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}