@ripeseed/rs-tunnel 0.1.2

package/dist/config.test.js

@@ -0,0 +1,67 @@
+import os from 'node:os';
+import path from 'node:path';
+import fs from 'node:fs/promises';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { DEFAULT_API_BASE_URL, ensureApiBaseUrlConfigured, getCliConfig, getCliConfigPath, setApiBaseUrlOverride, } from './config.js';
+const originalEnv = { ...process.env };
+let tempHomeDir = '';
+beforeEach(async () => {
+    tempHomeDir = await fs.mkdtemp(path.join(os.tmpdir(), 'rs-tunnel-cli-config-'));
+    vi.spyOn(os, 'homedir').mockReturnValue(tempHomeDir);
+});
+afterEach(async () => {
+    process.env = { ...originalEnv };
+    setApiBaseUrlOverride(undefined);
+    vi.restoreAllMocks();
+    if (tempHomeDir) {
+        await fs.rm(tempHomeDir, { recursive: true, force: true });
+    }
+});
+describe('cli config', () => {
+    it('uses RS_TUNNEL_API_URL when configured', () => {
+        process.env.RS_TUNNEL_API_URL = 'https://api.selfhosted.example.com/';
+        process.env.RS_TUNNEL_API_BASE_URL = 'https://legacy.example.com';
+        const config = getCliConfig();
+        expect(config.apiBaseUrl).toBe('https://api.selfhosted.example.com');
+    });
+    it('falls back to RS_TUNNEL_API_BASE_URL for backwards compatibility', () => {
+        delete process.env.RS_TUNNEL_API_URL;
+        process.env.RS_TUNNEL_API_BASE_URL = 'https://legacy.example.com/';
+        const config = getCliConfig();
+        expect(config.apiBaseUrl).toBe('https://legacy.example.com');
+    });
+    it('uses the default API URL when env vars are absent', () => {
+        delete process.env.RS_TUNNEL_API_URL;
+        delete process.env.RS_TUNNEL_API_BASE_URL;
+        const config = getCliConfig();
+        expect(config.apiBaseUrl).toBe(DEFAULT_API_BASE_URL);
+    });
+    it('supports command-level domain overrides', () => {
+        process.env.RS_TUNNEL_API_URL = 'https://api.default.example.com';
+        setApiBaseUrlOverride('https://api.override.example.com/');
+        const config = getCliConfig();
+        expect(config.apiBaseUrl).toBe('https://api.override.example.com');
+    });
+    it('rejects invalid command-level domain overrides', () => {
+        expect(() => setApiBaseUrlOverride('not-a-valid-url')).toThrow(/Invalid API base URL/);
+    });
+    it('loads API URL from persisted local config when env vars are absent', async () => {
+        delete process.env.RS_TUNNEL_API_URL;
+        delete process.env.RS_TUNNEL_API_BASE_URL;
+        await fs.mkdir(path.dirname(getCliConfigPath()), { recursive: true });
+        await fs.writeFile(getCliConfigPath(), JSON.stringify({
+            apiBaseUrl: 'https://persisted.example.com/',
+        }, null, 2));
+        const config = getCliConfig();
+        expect(config.apiBaseUrl).toBe('https://persisted.example.com');
+    });
+    it('persists command-level --domain for future commands', async () => {
+        delete process.env.RS_TUNNEL_API_URL;
+        delete process.env.RS_TUNNEL_API_BASE_URL;
+        await ensureApiBaseUrlConfigured('https://saved.example.com/');
+        setApiBaseUrlOverride(undefined);
+        const config = getCliConfig();
+        expect(config.apiBaseUrl).toBe('https://saved.example.com');
+    });
+});
+//# sourceMappingURL=config.test.js.map

package/dist/config.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../src/config.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AACvC,IAAI,WAAW,GAAG,EAAE,CAAC;AAErB,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAChF,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IACjC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjC,EAAE,CAAC,eAAe,EAAE,CAAC;IAErB,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,qCAAqC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,4BAA4B,CAAC;QAElE,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,6BAA6B,CAAC;QAEnE,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAE1C,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,iCAAiC,CAAC;QAElE,qBAAqB,CAAC,mCAAmC,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAE1C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,EAAE,CAAC,SAAS,CAChB,gBAAgB,EAAE,EAClB,IAAI,CAAC,SAAS,CACZ;YACE,UAAU,EAAE,gCAAgC;SAC7C,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QAEF,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAE1C,MAAM,0BAA0B,CAAC,4BAA4B,CAAC,CAAC;QAC/D,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import { doctorCommand } from './commands/doctor.js';
+import { listCommand } from './commands/list.js';
+import { loginCommand } from './commands/login.js';
+import { logoutCommand } from './commands/logout.js';
+import { stopCommand } from './commands/stop.js';
+import { upCommand } from './commands/up.js';
+import { ensureApiBaseUrlConfigured } from './config.js';
+const program = new Command();
+const domainOptionDescription = 'Infisical-style domain override for this command (example: https://api.example.com). Saved for future commands.';
+async function applyDomainOption(domain) {
+    await ensureApiBaseUrlConfigured(domain);
+}
+program
+    .name('rs-tunnel')
+    .description('Self-hostable Cloudflare tunnel CLI')
+    .version('0.1.0');
+program
+    .command('login')
+    .requiredOption('--email <email>', 'Email for Slack OAuth')
+    .option('--domain <domain-url>', domainOptionDescription)
+    .action(async (options) => {
+    await applyDomainOption(options.domain);
+    await loginCommand(options.email);
+});
+program
+    .command('up')
+    .requiredOption('--port <port>', 'Local port to expose', (value) => Number.parseInt(value, 10))
+    .option('--url <slug>', 'Optional URL slug (single label only)')
+    .option('--domain <domain-url>', domainOptionDescription)
+    .option('--verbose', 'Show raw cloudflared logs')
+    .action(async (options) => {
+    await applyDomainOption(options.domain);
+    await upCommand({
+        port: options.port,
+        url: options.url,
+        verbose: options.verbose,
+    });
+});
+program
+    .command('list')
+    .option('--domain <domain-url>', domainOptionDescription)
+    .action(async (options) => {
+    await applyDomainOption(options.domain);
+    await listCommand();
+});
+program
+    .command('stop')
+    .argument('<tunnel-id-or-hostname>', 'Tunnel ID or hostname')
+    .option('--domain <domain-url>', domainOptionDescription)
+    .action(async (tunnelIdentifier, options) => {
+    await applyDomainOption(options.domain);
+    await stopCommand(tunnelIdentifier);
+});
+program
+    .command('logout')
+    .option('--domain <domain-url>', domainOptionDescription)
+    .action(async (options) => {
+    await applyDomainOption(options.domain);
+    await logoutCommand();
+});
+program
+    .command('doctor')
+    .option('--domain <domain-url>', domainOptionDescription)
+    .action(async (options) => {
+    await applyDomainOption(options.domain);
+    await doctorCommand();
+});
+program.showHelpAfterError();
+program.parseAsync(process.argv).catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAEzD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,MAAM,uBAAuB,GAC3B,iHAAiH,CAAC;AAEpH,KAAK,UAAU,iBAAiB,CAAC,MAAe;IAC9C,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,qCAAqC,CAAC;KAClD,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,cAAc,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;KAC1D,MAAM,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;KACxD,MAAM,CAAC,KAAK,EAAE,OAA2C,EAAE,EAAE;IAC5D,MAAM,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,IAAI,CAAC;KACb,cAAc,CAAC,eAAe,EAAE,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;KAC9F,MAAM,CAAC,cAAc,EAAE,uCAAuC,CAAC;KAC/D,MAAM,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;KACxD,MAAM,CAAC,WAAW,EAAE,2BAA2B,CAAC;KAChD,MAAM,CAAC,KAAK,EAAE,OAA2E,EAAE,EAAE;IAC5F,MAAM,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,SAAS,CAAC;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,MAAM,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;KACxD,MAAM,CAAC,KAAK,EAAE,OAA4B,EAAE,EAAE;IAC7C,MAAM,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,QAAQ,CAAC,yBAAyB,EAAE,uBAAuB,CAAC;KAC5D,MAAM,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;KACxD,MAAM,CAAC,KAAK,EAAE,gBAAwB,EAAE,OAA4B,EAAE,EAAE;IACvE,MAAM,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,WAAW,CAAC,gBAAgB,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,MAAM,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;KACxD,MAAM,CAAC,KAAK,EAAE,OAA4B,EAAE,EAAE;IAC7C,MAAM,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,aAAa,EAAE,CAAC;AACxB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,MAAM,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;KACxD,MAAM,CAAC,KAAK,EAAE,OAA4B,EAAE,EAAE;IAC7C,MAAM,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,aAAa,EAAE,CAAC;AACxB,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,kBAAkB,EAAE,CAAC;AAE7B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IACxD,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/lib/api-client.d.ts

@@ -0,0 +1,73 @@
+import type { TunnelTelemetryIngestRequest } from '@ripeseed/shared';
+export declare class ApiClientError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly details?: unknown | undefined;
+    constructor(status: number, code: string, message: string, details?: unknown | undefined);
+}
+export declare class ApiClient {
+    private readonly baseUrl;
+    constructor(baseUrl: string);
+    health(): Promise<boolean>;
+    startSlackAuth(input: {
+        email: string;
+        codeChallenge: string;
+        cliCallbackUrl: string;
+    }): Promise<{
+        authorizeUrl: string;
+        state: string;
+    }>;
+    exchangeLoginCode(input: {
+        loginCode: string;
+        codeVerifier: string;
+    }): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        expiresInSec: number;
+        profile: {
+            email: string;
+            slackUserId: string;
+            slackTeamId: string;
+        };
+    }>;
+    refreshTokens(refreshToken: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        expiresInSec: number;
+        profile: {
+            email: string;
+            slackUserId: string;
+            slackTeamId: string;
+        };
+    }>;
+    logout(accessToken: string, refreshToken?: string): Promise<void>;
+    createTunnel(accessToken: string, input: {
+        port: number;
+        requestedSlug?: string;
+    }): Promise<{
+        tunnelId: string;
+        hostname: string;
+        cloudflaredToken: string;
+        heartbeatIntervalSec: 20;
+    }>;
+    listTunnels(accessToken: string): Promise<{
+        status: "creating" | "active" | "stopping" | "stopped" | "failed";
+        hostname: string;
+        id: string;
+        slug: string;
+        requestedPort: number;
+        createdAt: string;
+        lease: {
+            expiresAt: string;
+            lastHeartbeatAt: string;
+        } | null;
+        stoppedAt: string | null;
+        lastError: string | null;
+    }[]>;
+    heartbeat(accessToken: string, tunnelIdOrHostname: string): Promise<{
+        expiresAt: string;
+    }>;
+    ingestTelemetry(accessToken: string, tunnelIdOrHostname: string, input: TunnelTelemetryIngestRequest): Promise<void>;
+    stopTunnel(accessToken: string, tunnelIdOrHostname: string): Promise<void>;
+    private request;
+}

package/dist/lib/api-client.js

@@ -0,0 +1,146 @@
+import { apiErrorSchema, authExchangeRequestSchema, authStartRequestSchema, authStartResponseSchema, heartbeatResponseSchema, refreshRequestSchema, tokenPairSchema, tunnelCreateRequestSchema, tunnelCreateResponseSchema, tunnelListResponseSchema, tunnelTelemetryIngestRequestSchema, tunnelTelemetryIngestResponseSchema, } from '@ripeseed/shared';
+function formatNetworkFailure(error) {
+    if (!(error instanceof Error)) {
+        return 'unknown network error';
+    }
+    const cause = error.cause;
+    if (!cause || typeof cause !== 'object') {
+        return error.message;
+    }
+    const code = typeof cause.code === 'string' ? cause.code : undefined;
+    const message = typeof cause.message === 'string'
+        ? cause.message
+        : error.message;
+    return code ? `${code}: ${message}` : message;
+}
+export class ApiClientError extends Error {
+    status;
+    code;
+    details;
+    constructor(status, code, message, details) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.details = details;
+    }
+}
+export class ApiClient {
+    baseUrl;
+    constructor(baseUrl) {
+        this.baseUrl = baseUrl;
+    }
+    async health() {
+        try {
+            const response = await fetch(`${this.baseUrl}/healthz`);
+            return response.ok;
+        }
+        catch {
+            return false;
+        }
+    }
+    async startSlackAuth(input) {
+        const body = authStartRequestSchema.parse(input);
+        const response = await this.request('/v1/auth/slack/start', {
+            method: 'POST',
+            body,
+        });
+        return authStartResponseSchema.parse(response);
+    }
+    async exchangeLoginCode(input) {
+        const body = authExchangeRequestSchema.parse(input);
+        const response = await this.request('/v1/auth/exchange', {
+            method: 'POST',
+            body,
+        });
+        return tokenPairSchema.parse(response);
+    }
+    async refreshTokens(refreshToken) {
+        const body = refreshRequestSchema.parse({ refreshToken });
+        const response = await this.request('/v1/auth/refresh', {
+            method: 'POST',
+            body,
+        });
+        return tokenPairSchema.parse(response);
+    }
+    async logout(accessToken, refreshToken) {
+        await this.request('/v1/auth/logout', {
+            method: 'POST',
+            accessToken,
+            body: {
+                refreshToken,
+            },
+        });
+    }
+    async createTunnel(accessToken, input) {
+        const body = tunnelCreateRequestSchema.parse(input);
+        const response = await this.request('/v1/tunnels', {
+            method: 'POST',
+            accessToken,
+            body,
+        });
+        return tunnelCreateResponseSchema.parse(response);
+    }
+    async listTunnels(accessToken) {
+        const response = await this.request('/v1/tunnels', {
+            method: 'GET',
+            accessToken,
+        });
+        return tunnelListResponseSchema.parse(response);
+    }
+    async heartbeat(accessToken, tunnelIdOrHostname) {
+        const response = await this.request(`/v1/tunnels/${encodeURIComponent(tunnelIdOrHostname)}/heartbeat`, {
+            method: 'POST',
+            accessToken,
+        });
+        const parsed = heartbeatResponseSchema.parse(response);
+        return { expiresAt: parsed.expiresAt };
+    }
+    async ingestTelemetry(accessToken, tunnelIdOrHostname, input) {
+        const body = tunnelTelemetryIngestRequestSchema.parse(input);
+        const response = await this.request(`/v1/tunnels/${encodeURIComponent(tunnelIdOrHostname)}/telemetry`, {
+            method: 'POST',
+            accessToken,
+            body,
+        });
+        tunnelTelemetryIngestResponseSchema.parse(response);
+    }
+    async stopTunnel(accessToken, tunnelIdOrHostname) {
+        await this.request(`/v1/tunnels/${encodeURIComponent(tunnelIdOrHostname)}`, {
+            method: 'DELETE',
+            accessToken,
+        });
+    }
+    async request(path, init) {
+        let response;
+        try {
+            response = await fetch(`${this.baseUrl}${path}`, {
+                method: init.method,
+                headers: {
+                    'Content-Type': 'application/json',
+                    ...(init.accessToken ? { Authorization: `Bearer ${init.accessToken}` } : {}),
+                },
+                body: init.body !== undefined ? JSON.stringify(init.body) : undefined,
+            });
+        }
+        catch (error) {
+            const networkFailure = formatNetworkFailure(error);
+            throw new ApiClientError(0, 'NETWORK_ERROR', `Unable to reach API at ${this.baseUrl} (${networkFailure}). Verify /healthz from this shell, or run the command with --domain <url>.`);
+        }
+        if (response.status === 204) {
+            return {};
+        }
+        const contentType = response.headers.get('content-type') ?? '';
+        const payload = contentType.includes('application/json')
+            ? await response.json()
+            : { message: await response.text() };
+        if (!response.ok) {
+            const parsed = apiErrorSchema.safeParse(payload);
+            if (parsed.success) {
+                throw new ApiClientError(response.status, parsed.data.code, parsed.data.message, parsed.data.details);
+            }
+            throw new ApiClientError(response.status, 'HTTP_ERROR', `Request failed with status ${response.status}`);
+        }
+        return payload;
+    }
+}
+//# sourceMappingURL=api-client.js.map

package/dist/lib/api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../src/lib/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,eAAe,EACf,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,kBAAkB,CAAC;AAG1B,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,MAAM,IAAI,GAAG,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,KAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,MAAM,OAAO,GACX,OAAQ,KAA+B,CAAC,OAAO,KAAK,QAAQ;QAC1D,CAAC,CAAE,KAA6B,CAAC,OAAO;QACxC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAEpB,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAChD,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IAErB;IACA;IAEA;IAJlB,YACkB,MAAc,EACd,IAAY,EAC5B,OAAe,EACC,OAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAEZ,YAAO,GAAP,OAAO,CAAU;IAGnC,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IACS;IAA7B,YAA6B,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;IAEhD,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,UAAU,CAAC,CAAC;YACxD,OAAO,QAAQ,CAAC,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAuE;QAI1F,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,IAAI;SACL,CAAC,CAAC;QAEH,OAAO,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAkD;QACxE,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,IAAI;SACL,CAAC,CAAC;QAEH,OAAO,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,YAAoB;QACtC,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,IAAI;SACL,CAAC,CAAC;QAEH,OAAO,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,YAAqB;QACrD,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,WAAW;YACX,IAAI,EAAE;gBACJ,YAAY;aACb;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB,EAAE,KAA+C;QACrF,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,WAAW;YACX,IAAI;SACL,CAAC,CAAC;QAEH,OAAO,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;YACjD,MAAM,EAAE,KAAK;YACb,WAAW;SACZ,CAAC,CAAC;QAEH,OAAO,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAAmB,EAAE,kBAA0B;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,kBAAkB,CAAC,kBAAkB,CAAC,YAAY,EAAE;YACrG,MAAM,EAAE,MAAM;YACd,WAAW;SACZ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvD,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,kBAA0B,EAC1B,KAAmC;QAEnC,MAAM,IAAI,GAAG,kCAAkC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,kBAAkB,CAAC,kBAAkB,CAAC,YAAY,EAAE;YACrG,MAAM,EAAE,MAAM;YACd,WAAW;YACX,IAAI;SACL,CAAC,CAAC;QAEH,mCAAmC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,kBAA0B;QAC9D,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,kBAAkB,CAAC,kBAAkB,CAAC,EAAE,EAAE;YAC1E,MAAM,EAAE,QAAQ;YAChB,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,IAIC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;gBAC/C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7E;gBACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;aACtE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,IAAI,cAAc,CACtB,CAAC,EACD,eAAe,EACf,0BAA0B,IAAI,CAAC,OAAO,KAAK,cAAc,6EAA6E,CACvI,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACtD,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE;YACvB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAEvC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxG,CAAC;YAED,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,8BAA8B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/lib/cloudflared.d.ts

@@ -0,0 +1,3 @@
+export declare function findCloudflaredBinary(): Promise<string | null>;
+export declare function ensureCloudflaredInstalled(): Promise<string>;
+export declare function getCloudflaredVersion(binaryPath: string): string | null;

package/dist/lib/cloudflared.js

@@ -0,0 +1,165 @@
+import { createHash } from 'node:crypto';
+import fs from 'node:fs/promises';
+import { constants as fsConstants } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { getBundledBinDir } from '../config.js';
+function commandExists(command) {
+    const result = spawnSync(command, ['--version'], { stdio: 'ignore' });
+    return !result.error;
+}
+function getCloudflaredAsset() {
+    const platform = os.platform();
+    const arch = os.arch();
+    if (platform === 'darwin' && arch === 'arm64') {
+        return {
+            assetName: 'cloudflared-darwin-arm64',
+            binaryName: 'cloudflared',
+        };
+    }
+    if (platform === 'darwin' && arch === 'x64') {
+        return {
+            assetName: 'cloudflared-darwin-amd64',
+            binaryName: 'cloudflared',
+        };
+    }
+    if (platform === 'linux' && arch === 'arm64') {
+        return {
+            assetName: 'cloudflared-linux-arm64',
+            binaryName: 'cloudflared',
+        };
+    }
+    if (platform === 'linux' && arch === 'x64') {
+        return {
+            assetName: 'cloudflared-linux-amd64',
+            binaryName: 'cloudflared',
+        };
+    }
+    if (platform === 'win32' && arch === 'x64') {
+        return {
+            assetName: 'cloudflared-windows-amd64.exe',
+            binaryName: 'cloudflared.exe',
+        };
+    }
+    if (platform === 'win32' && arch === 'arm64') {
+        return {
+            assetName: 'cloudflared-windows-arm64.exe',
+            binaryName: 'cloudflared.exe',
+        };
+    }
+    throw new Error(`Unsupported OS/architecture combination: ${platform}/${arch}`);
+}
+export async function findCloudflaredBinary() {
+    const envOverride = process.env.RS_TUNNEL_CLOUDFLARED_PATH;
+    if (envOverride) {
+        return envOverride;
+    }
+    if (commandExists('cloudflared')) {
+        return 'cloudflared';
+    }
+    const fallback = path.join(getBundledBinDir(), getCloudflaredAsset().binaryName);
+    try {
+        await fs.access(fallback, fsConstants.X_OK);
+        return fallback;
+    }
+    catch {
+        return null;
+    }
+}
+async function runInstallCommand(command, args) {
+    const result = spawnSync(command, args, {
+        stdio: 'inherit',
+    });
+    return result.status === 0;
+}
+async function tryPackageManagerInstall() {
+    const platform = os.platform();
+    if (platform === 'darwin') {
+        if (await runInstallCommand('brew', ['install', 'cloudflared'])) {
+            return true;
+        }
+    }
+    if (platform === 'linux') {
+        const installers = [
+            ['apt-get', ['install', '-y', 'cloudflared']],
+            ['dnf', ['install', '-y', 'cloudflared']],
+            ['pacman', ['-S', '--noconfirm', 'cloudflared']],
+        ];
+        for (const [command, args] of installers) {
+            if (!commandExists(command)) {
+                continue;
+            }
+            if (await runInstallCommand('sudo', [command, ...args])) {
+                return true;
+            }
+        }
+    }
+    if (platform === 'win32') {
+        if (await runInstallCommand('winget', ['install', '--id', 'Cloudflare.cloudflared', '--silent'])) {
+            return true;
+        }
+    }
+    return false;
+}
+function parseSha256Line(line) {
+    const first = line.trim().split(/\s+/)[0];
+    if (!first) {
+        throw new Error('Invalid cloudflared checksum format.');
+    }
+    return first;
+}
+async function downloadWithChecksum(assetName, destination) {
+    const baseUrl = 'https://github.com/cloudflare/cloudflared/releases/latest/download';
+    const binaryUrl = `${baseUrl}/${assetName}`;
+    const checksumUrl = `${binaryUrl}.sha256`;
+    const [binaryResponse, checksumResponse] = await Promise.all([fetch(binaryUrl), fetch(checksumUrl)]);
+    if (!binaryResponse.ok) {
+        throw new Error(`Failed downloading cloudflared binary: ${binaryResponse.status}`);
+    }
+    if (!checksumResponse.ok) {
+        throw new Error(`Failed downloading cloudflared checksum: ${checksumResponse.status}`);
+    }
+    const [binaryBuffer, checksumText] = await Promise.all([
+        binaryResponse.arrayBuffer(),
+        checksumResponse.text(),
+    ]);
+    const expected = parseSha256Line(checksumText);
+    const actual = createHash('sha256').update(Buffer.from(binaryBuffer)).digest('hex');
+    if (expected.toLowerCase() !== actual.toLowerCase()) {
+        throw new Error('cloudflared checksum verification failed.');
+    }
+    await fs.mkdir(path.dirname(destination), { recursive: true, mode: 0o755 });
+    await fs.writeFile(destination, Buffer.from(binaryBuffer));
+    if (os.platform() !== 'win32') {
+        await fs.chmod(destination, 0o755);
+    }
+}
+async function installFromDownload() {
+    const asset = getCloudflaredAsset();
+    const destination = path.join(getBundledBinDir(), asset.binaryName);
+    await downloadWithChecksum(asset.assetName, destination);
+    return destination;
+}
+export async function ensureCloudflaredInstalled() {
+    const existing = await findCloudflaredBinary();
+    if (existing) {
+        return existing;
+    }
+    const packageInstallSuccess = await tryPackageManagerInstall();
+    if (packageInstallSuccess) {
+        const afterInstall = await findCloudflaredBinary();
+        if (afterInstall) {
+            return afterInstall;
+        }
+    }
+    return installFromDownload();
+}
+export function getCloudflaredVersion(binaryPath) {
+    const result = spawnSync(binaryPath, ['--version'], { encoding: 'utf8' });
+    if (result.error || result.status !== 0) {
+        return null;
+    }
+    return result.stdout.trim() || result.stderr.trim() || null;
+}
+//# sourceMappingURL=cloudflared.js.map

package/dist/lib/cloudflared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflared.js","sourceRoot":"","sources":["../../src/lib/cloudflared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAOhD,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;AACvB,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IAEvB,IAAI,QAAQ,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9C,OAAO;YACL,SAAS,EAAE,0BAA0B;YACrC,UAAU,EAAE,aAAa;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QAC5C,OAAO;YACL,SAAS,EAAE,0BAA0B;YACrC,UAAU,EAAE,aAAa;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7C,OAAO;YACL,SAAS,EAAE,yBAAyB;YACpC,UAAU,EAAE,aAAa;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3C,OAAO;YACL,SAAS,EAAE,yBAAyB;YACpC,UAAU,EAAE,aAAa;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3C,OAAO;YACL,SAAS,EAAE,+BAA+B;YAC1C,UAAU,EAAE,iBAAiB;SAC9B,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7C,OAAO;YACL,SAAS,EAAE,+BAA+B;YAC1C,UAAU,EAAE,iBAAiB;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IAC3D,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,mBAAmB,EAAE,CAAC,UAAU,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAe,EAAE,IAAc;IAC9D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACtC,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,wBAAwB;IACrC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAE/B,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,MAAM,iBAAiB,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,UAAU,GAA8B;YAC5C,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAC7C,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YACzC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;SACjD,CAAC;QAEF,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;YACzC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YAED,IAAI,MAAM,iBAAiB,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,MAAM,iBAAiB,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,wBAAwB,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YACjG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,WAAmB;IACxE,MAAM,OAAO,GAAG,oEAAoE,CAAC;IACrF,MAAM,SAAS,GAAG,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,GAAG,SAAS,SAAS,CAAC;IAE1C,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAErG,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,4CAA4C,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrD,cAAc,CAAC,WAAW,EAAE;QAC5B,gBAAgB,CAAC,IAAI,EAAE;KACxB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEpF,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAE3D,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACpE,MAAM,oBAAoB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACzD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,qBAAqB,GAAG,MAAM,wBAAwB,EAAE,CAAC;IAC/D,IAAI,qBAAqB,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,MAAM,qBAAqB,EAAE,CAAC;QACnD,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,mBAAmB,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;AAC9D,CAAC"}

package/dist/lib/local-callback.d.ts

@@ -0,0 +1,9 @@
+export type CallbackServer = {
+    callbackUrl: string;
+    waitForCode: () => Promise<{
+        code: string;
+        state: string;
+    }>;
+    close: () => Promise<void>;
+};
+export declare function startCallbackServer(): Promise<CallbackServer>;

package/dist/lib/local-callback.js

@@ -0,0 +1,68 @@
+import http from 'node:http';
+import { URL } from 'node:url';
+export async function startCallbackServer() {
+    let resolveHandler;
+    let rejectHandler;
+    const waitForCodePromise = new Promise((resolve, reject) => {
+        resolveHandler = resolve;
+        rejectHandler = reject;
+    });
+    const server = http.createServer((req, res) => {
+        const requestUrl = new URL(req.url ?? '/', 'http://127.0.0.1');
+        if (requestUrl.pathname !== '/callback') {
+            res.statusCode = 404;
+            res.end('Not found');
+            return;
+        }
+        const code = requestUrl.searchParams.get('code');
+        const state = requestUrl.searchParams.get('state');
+        if (!code || !state) {
+            res.statusCode = 400;
+            res.end('Missing code or state');
+            rejectHandler?.(new Error('OAuth callback missing code or state'));
+            return;
+        }
+        res.statusCode = 200;
+        res.setHeader('Content-Type', 'text/plain');
+        res.end('Login complete. You can close this tab.');
+        resolveHandler?.({ code, state });
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            server.off('error', reject);
+            resolve();
+        });
+    });
+    const address = server.address();
+    if (!address || typeof address === 'string') {
+        throw new Error('Unable to bind local callback server.');
+    }
+    const timeout = setTimeout(() => {
+        rejectHandler?.(new Error('Timed out waiting for Slack OAuth callback.'));
+    }, 120_000);
+    return {
+        callbackUrl: `http://127.0.0.1:${address.port}/callback`,
+        waitForCode: async () => {
+            try {
+                return await waitForCodePromise;
+            }
+            finally {
+                clearTimeout(timeout);
+            }
+        },
+        close: async () => {
+            await new Promise((resolve, reject) => {
+                server.close((error) => {
+                    if (error) {
+                        reject(error);
+                        return;
+                    }
+                    resolve();
+                });
+            });
+            clearTimeout(timeout);
+        },
+    };
+}
+//# sourceMappingURL=local-callback.js.map

package/dist/lib/local-callback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-callback.js","sourceRoot":"","sources":["../../src/lib/local-callback.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAQ/B,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,cAA8E,CAAC;IACnF,IAAI,aAAuD,CAAC;IAE5D,MAAM,kBAAkB,GAAG,IAAI,OAAO,CAAkC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1F,cAAc,GAAG,OAAO,CAAC;QACzB,aAAa,GAAG,MAAM,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAE/D,IAAI,UAAU,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACxC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEnD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACjC,aAAa,EAAE,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QAEnD,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;QAC9B,aAAa,EAAE,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;IAC5E,CAAC,EAAE,OAAO,CAAC,CAAC;IAEZ,OAAO;QACL,WAAW,EAAE,oBAAoB,OAAO,CAAC,IAAI,WAAW;QACxD,WAAW,EAAE,KAAK,IAAI,EAAE;YACtB,IAAI,CAAC;gBACH,OAAO,MAAM,kBAAkB,CAAC;YAClC,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACrB,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,CAAC,KAAK,CAAC,CAAC;wBACd,OAAO;oBACT,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC"}