@ripeseed/rs-tunnel 0.1.2

package/dist/lib/local-proxy.d.ts

@@ -0,0 +1,27 @@
+export type ProxyRequestEvent = {
+    startedAtEpochMs: number;
+    method: string;
+    path: string;
+    statusCode: number;
+    statusMessage: string;
+    durationMs: number;
+    responseBytes: number | null;
+    error: boolean;
+    protocol: 'http' | 'ws';
+};
+export type ProxyConnectionSnapshot = {
+    totalConnections: number;
+    openConnections: number;
+};
+export type LocalProxy = {
+    port: number;
+    stop: () => Promise<void>;
+};
+type StartLocalProxyInput = {
+    targetPort: number;
+    targetHost?: string;
+    onRequest?: (event: ProxyRequestEvent) => void;
+    onConnectionChange?: (snapshot: ProxyConnectionSnapshot) => void;
+};
+export declare function startLocalProxy(input: StartLocalProxyInput): Promise<LocalProxy>;
+export {};

package/dist/lib/local-proxy.js

@@ -0,0 +1,200 @@
+import http from 'node:http';
+import net from 'node:net';
+function toDurationMs(startedAtHrTimeNs) {
+    return Number(process.hrtime.bigint() - startedAtHrTimeNs) / 1_000_000;
+}
+function getStatusText(statusCode) {
+    return http.STATUS_CODES[statusCode] ?? 'Unknown';
+}
+function emitConnectionSnapshot(onConnectionChange, totalConnections, openConnections) {
+    onConnectionChange?.({
+        totalConnections,
+        openConnections,
+    });
+}
+function buildUpgradeRequest(req) {
+    const requestLine = `${req.method ?? 'GET'} ${req.url ?? '/'} HTTP/${req.httpVersion}`;
+    let headers = '';
+    for (let i = 0; i < req.rawHeaders.length; i += 2) {
+        const headerName = req.rawHeaders[i];
+        const headerValue = req.rawHeaders[i + 1];
+        if (!headerName || headerValue === undefined) {
+            continue;
+        }
+        headers += `${headerName}: ${headerValue}\r\n`;
+    }
+    return `${requestLine}\r\n${headers}\r\n`;
+}
+export async function startLocalProxy(input) {
+    const targetHost = input.targetHost ?? '127.0.0.1';
+    let totalConnections = 0;
+    let openConnections = 0;
+    const sockets = new Set();
+    const server = http.createServer((req, res) => {
+        const startedAtEpochMs = Date.now();
+        const startedAtHrTimeNs = process.hrtime.bigint();
+        const method = req.method ?? 'GET';
+        const path = req.url ?? '/';
+        let responseBytes = 0;
+        let finalized = false;
+        let statusCode = 500;
+        const finalize = (event) => {
+            if (finalized) {
+                return;
+            }
+            finalized = true;
+            const finalStatusCode = event.statusCode ?? statusCode;
+            const responseBytesValue = event.responseBytes ?? responseBytes;
+            input.onRequest?.({
+                startedAtEpochMs,
+                method,
+                path,
+                statusCode: finalStatusCode,
+                statusMessage: getStatusText(finalStatusCode),
+                durationMs: toDurationMs(startedAtHrTimeNs),
+                responseBytes: responseBytesValue,
+                error: event.error ?? finalStatusCode >= 500,
+                protocol: 'http',
+            });
+        };
+        const upstream = http.request({
+            host: targetHost,
+            port: input.targetPort,
+            method,
+            path,
+            headers: req.headers,
+        }, (upstreamResponse) => {
+            statusCode = upstreamResponse.statusCode ?? 502;
+            res.writeHead(statusCode, upstreamResponse.statusMessage, upstreamResponse.headers);
+            upstreamResponse.on('data', (chunk) => {
+                responseBytes += Buffer.isBuffer(chunk) ? chunk.length : Buffer.byteLength(chunk);
+            });
+            upstreamResponse.pipe(res);
+        });
+        upstream.on('error', () => {
+            statusCode = 502;
+            if (!res.headersSent) {
+                res.writeHead(statusCode, getStatusText(statusCode));
+            }
+            res.end('Bad Gateway');
+            finalize({
+                statusCode,
+                error: true,
+            });
+        });
+        req.pipe(upstream);
+        res.once('finish', () => {
+            finalize({
+                statusCode: res.statusCode,
+                error: res.statusCode >= 500,
+            });
+        });
+        res.once('close', () => {
+            if (!finalized) {
+                finalize({
+                    statusCode: res.statusCode || statusCode,
+                    error: true,
+                });
+            }
+        });
+    });
+    server.on('connection', (socket) => {
+        sockets.add(socket);
+        totalConnections += 1;
+        openConnections += 1;
+        emitConnectionSnapshot(input.onConnectionChange, totalConnections, openConnections);
+        socket.on('close', () => {
+            sockets.delete(socket);
+            openConnections = Math.max(0, openConnections - 1);
+            emitConnectionSnapshot(input.onConnectionChange, totalConnections, openConnections);
+        });
+    });
+    server.on('upgrade', (req, clientSocket, head) => {
+        const startedAtEpochMs = Date.now();
+        const startedAtHrTimeNs = process.hrtime.bigint();
+        const method = req.method ?? 'GET';
+        const path = req.url ?? '/';
+        const upstreamSocket = net.connect({
+            host: targetHost,
+            port: input.targetPort,
+        });
+        let finalized = false;
+        const finalize = (statusCode, isError) => {
+            if (finalized) {
+                return;
+            }
+            finalized = true;
+            input.onRequest?.({
+                startedAtEpochMs,
+                method,
+                path,
+                statusCode,
+                statusMessage: getStatusText(statusCode),
+                durationMs: toDurationMs(startedAtHrTimeNs),
+                responseBytes: null,
+                error: isError,
+                protocol: 'ws',
+            });
+        };
+        upstreamSocket.once('connect', () => {
+            upstreamSocket.write(buildUpgradeRequest(req));
+            if (head.length > 0) {
+                upstreamSocket.write(head);
+            }
+            clientSocket.pipe(upstreamSocket);
+            upstreamSocket.pipe(clientSocket);
+            finalize(101, false);
+        });
+        upstreamSocket.once('error', () => {
+            if (!clientSocket.destroyed) {
+                clientSocket.write('HTTP/1.1 502 Bad Gateway\r\nConnection: close\r\n\r\n');
+            }
+            clientSocket.destroy();
+            finalize(502, true);
+        });
+        clientSocket.once('error', () => {
+            upstreamSocket.destroy();
+            finalize(499, true);
+        });
+        clientSocket.once('close', () => {
+            upstreamSocket.destroy();
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            server.off('error', reject);
+            resolve();
+        });
+    });
+    const address = server.address();
+    if (!address || typeof address === 'string') {
+        await new Promise((resolve) => {
+            server.close(() => resolve());
+        });
+        throw new Error('Local proxy failed to bind to a TCP port.');
+    }
+    let stopped = false;
+    return {
+        port: address.port,
+        stop: async () => {
+            if (stopped) {
+                return;
+            }
+            stopped = true;
+            for (const socket of sockets) {
+                socket.destroy();
+            }
+            await new Promise((resolve, reject) => {
+                server.close((error) => {
+                    if (error) {
+                        reject(error);
+                        return;
+                    }
+                    resolve();
+                });
+            });
+        },
+    };
+}
+//# sourceMappingURL=local-proxy.js.map

package/dist/lib/local-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-proxy.js","sourceRoot":"","sources":["../../src/lib/local-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,IAA8B,MAAM,WAAW,CAAC;AACvD,OAAO,GAAG,MAAM,UAAU,CAAC;AA+B3B,SAAS,YAAY,CAAC,iBAAyB;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,SAAS,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB;IACvC,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAC7B,kBAA8D,EAC9D,gBAAwB,EACxB,eAAuB;IAEvB,kBAAkB,EAAE,CAAC;QACnB,gBAAgB;QAChB,eAAe;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAoB;IAC/C,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,CAAC,WAAW,EAAE,CAAC;IACvF,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE1C,IAAI,CAAC,UAAU,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,OAAO,IAAI,GAAG,UAAU,KAAK,WAAW,MAAM,CAAC;IACjD,CAAC;IAED,OAAO,GAAG,WAAW,OAAO,OAAO,MAAM,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAA2B;IAC/D,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,WAAW,CAAC;IAEnD,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAE5B,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,UAAU,GAAG,GAAG,CAAC;QAErB,MAAM,QAAQ,GAAG,CAAC,KAA8E,EAAQ,EAAE;YACxG,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YAED,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC;YACvD,MAAM,kBAAkB,GAAG,KAAK,CAAC,aAAa,IAAI,aAAa,CAAC;YAEhE,KAAK,CAAC,SAAS,EAAE,CAAC;gBAChB,gBAAgB;gBAChB,MAAM;gBACN,IAAI;gBACJ,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,aAAa,CAAC,eAAe,CAAC;gBAC7C,UAAU,EAAE,YAAY,CAAC,iBAAiB,CAAC;gBAC3C,aAAa,EAAE,kBAAkB;gBACjC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,eAAe,IAAI,GAAG;gBAC5C,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAC3B;YACE,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,EACD,CAAC,gBAAgB,EAAE,EAAE;YACnB,UAAU,GAAG,gBAAgB,CAAC,UAAU,IAAI,GAAG,CAAC;YAEhD,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,CAAC,aAAa,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACpF,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;gBACrD,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpF,CAAC,CAAC,CAAC;YAEH,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC,CACF,CAAC;QAEF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,UAAU,GAAG,GAAG,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;YACvD,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACvB,QAAQ,CAAC;gBACP,UAAU;gBACV,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEnB,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;YACtB,QAAQ,CAAC;gBACP,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,KAAK,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG;aAC7B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,QAAQ,CAAC;oBACP,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,UAAU;oBACxC,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;QACjC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,gBAAgB,IAAI,CAAC,CAAC;QACtB,eAAe,IAAI,CAAC,CAAC;QAErB,sBAAsB,CAAC,KAAK,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;QAEpF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC;YACnD,sBAAsB,CAAC,KAAK,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE;QAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAE5B,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC;YACjC,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,KAAK,CAAC,UAAU;SACvB,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,QAAQ,GAAG,CAAC,UAAkB,EAAE,OAAgB,EAAQ,EAAE;YAC9D,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YAED,SAAS,GAAG,IAAI,CAAC;YACjB,KAAK,CAAC,SAAS,EAAE,CAAC;gBAChB,gBAAgB;gBAChB,MAAM;gBACN,IAAI;gBACJ,UAAU;gBACV,aAAa,EAAE,aAAa,CAAC,UAAU,CAAC;gBACxC,UAAU,EAAE,YAAY,CAAC,iBAAiB,CAAC;gBAC3C,aAAa,EAAE,IAAI;gBACnB,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAClC,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YAED,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAClC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAChC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;gBAC5B,YAAY,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC9E,CAAC;YAED,YAAY,CAAC,OAAO,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAC9B,cAAc,CAAC,OAAO,EAAE,CAAC;YACzB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAC9B,cAAc,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,KAAK,IAAmB,EAAE;YAC9B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,OAAO,GAAG,IAAI,CAAC;YAEf,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;YAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACrB,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,CAAC,KAAK,CAAC,CAAC;wBACd,OAAO;oBACT,CAAC;oBAED,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/local-proxy.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/lib/local-proxy.test.js

@@ -0,0 +1,181 @@
+import http from 'node:http';
+import net from 'node:net';
+import { describe, expect, it } from 'vitest';
+import { startLocalProxy } from './local-proxy.js';
+async function listenHttpServer(handler) {
+    const server = http.createServer(handler);
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            server.off('error', reject);
+            resolve();
+        });
+    });
+    const address = server.address();
+    if (!address || typeof address === 'string') {
+        await new Promise((resolve) => server.close(() => resolve()));
+        throw new Error('Failed to bind HTTP server.');
+    }
+    return {
+        server,
+        port: address.port,
+    };
+}
+async function closeServer(server) {
+    await new Promise((resolve) => {
+        server.close(() => resolve());
+    });
+}
+async function reserveUnusedPort() {
+    const reservation = net.createServer();
+    await new Promise((resolve, reject) => {
+        reservation.once('error', reject);
+        reservation.listen(0, '127.0.0.1', () => {
+            reservation.off('error', reject);
+            resolve();
+        });
+    });
+    const address = reservation.address();
+    if (!address || typeof address === 'string') {
+        await new Promise((resolve) => reservation.close(() => resolve()));
+        throw new Error('Failed to reserve port.');
+    }
+    const port = address.port;
+    await new Promise((resolve) => reservation.close(() => resolve()));
+    return port;
+}
+async function wait(ms) {
+    await new Promise((resolve) => setTimeout(resolve, ms));
+}
+describe('startLocalProxy', () => {
+    it('forwards HTTP requests, emits request events, and tracks connections', async () => {
+        const requestEvents = [];
+        const connectionEvents = [];
+        const backend = await listenHttpServer((req, res) => {
+            if (req.url === '/ok') {
+                res.writeHead(200, { 'content-type': 'text/plain' });
+                res.end('ok');
+                return;
+            }
+            res.writeHead(404, { 'content-type': 'text/plain' });
+            res.end('not found');
+        });
+        const proxy = await startLocalProxy({
+            targetPort: backend.port,
+            onRequest: (event) => requestEvents.push(event),
+            onConnectionChange: (snapshot) => connectionEvents.push(snapshot),
+        });
+        try {
+            const okResponse = await fetch(`http://127.0.0.1:${proxy.port}/ok`, {
+                headers: {
+                    connection: 'close',
+                },
+            });
+            const notFoundResponse = await fetch(`http://127.0.0.1:${proxy.port}/missing`, {
+                headers: {
+                    connection: 'close',
+                },
+            });
+            expect(okResponse.status).toBe(200);
+            expect(await okResponse.text()).toBe('ok');
+            expect(notFoundResponse.status).toBe(404);
+            expect(await notFoundResponse.text()).toBe('not found');
+            await wait(60);
+            expect(requestEvents.length).toBe(2);
+            expect(requestEvents[0]?.statusCode).toBe(200);
+            expect(requestEvents[0]?.path).toBe('/ok');
+            expect(requestEvents[1]?.statusCode).toBe(404);
+            expect(requestEvents[1]?.path).toBe('/missing');
+            const maxOpenConnections = Math.max(...connectionEvents.map((event) => event.openConnections));
+            const finalOpenConnections = connectionEvents.at(-1)?.openConnections ?? -1;
+            expect(maxOpenConnections).toBeGreaterThan(0);
+            expect(finalOpenConnections).toBe(0);
+            expect(connectionEvents.at(-1)?.totalConnections).toBeGreaterThanOrEqual(1);
+        }
+        finally {
+            await proxy.stop();
+            await closeServer(backend.server);
+        }
+    });
+    it('returns 502 and emits error events when upstream target is unreachable', async () => {
+        const requestEvents = [];
+        const unreachablePort = await reserveUnusedPort();
+        const proxy = await startLocalProxy({
+            targetPort: unreachablePort,
+            onRequest: (event) => requestEvents.push(event),
+        });
+        try {
+            const response = await fetch(`http://127.0.0.1:${proxy.port}/will-fail`, {
+                headers: {
+                    connection: 'close',
+                },
+            });
+            expect(response.status).toBe(502);
+            expect(await response.text()).toContain('Bad Gateway');
+            await wait(20);
+            expect(requestEvents).toHaveLength(1);
+            expect(requestEvents[0]?.statusCode).toBe(502);
+            expect(requestEvents[0]?.error).toBe(true);
+        }
+        finally {
+            await proxy.stop();
+        }
+    });
+    it('forwards websocket upgrades', async () => {
+        const backendServer = http.createServer((_, res) => {
+            res.writeHead(426);
+            res.end('upgrade required');
+        });
+        backendServer.on('upgrade', (_req, socket) => {
+            socket.write('HTTP/1.1 101 Switching Protocols\r\n' +
+                'Upgrade: websocket\r\n' +
+                'Connection: Upgrade\r\n' +
+                '\r\n');
+            socket.end();
+        });
+        await new Promise((resolve, reject) => {
+            backendServer.once('error', reject);
+            backendServer.listen(0, '127.0.0.1', () => {
+                backendServer.off('error', reject);
+                resolve();
+            });
+        });
+        const backendAddress = backendServer.address();
+        if (!backendAddress || typeof backendAddress === 'string') {
+            await closeServer(backendServer);
+            throw new Error('Backend server failed to bind.');
+        }
+        const proxy = await startLocalProxy({
+            targetPort: backendAddress.port,
+        });
+        try {
+            const rawResponse = await new Promise((resolve, reject) => {
+                const socket = net.connect({ host: '127.0.0.1', port: proxy.port });
+                let data = '';
+                socket.setEncoding('utf8');
+                socket.once('connect', () => {
+                    socket.write('GET /socket HTTP/1.1\r\n' +
+                        `Host: 127.0.0.1:${proxy.port}\r\n` +
+                        'Connection: Upgrade\r\n' +
+                        'Upgrade: websocket\r\n' +
+                        '\r\n');
+                });
+                socket.on('data', (chunk) => {
+                    data += chunk;
+                    if (data.includes('\r\n\r\n')) {
+                        resolve(data);
+                        socket.end();
+                    }
+                });
+                socket.on('error', reject);
+            });
+            expect(rawResponse).toContain('101 Switching Protocols');
+            expect(rawResponse).toContain('Upgrade: websocket');
+        }
+        finally {
+            await proxy.stop();
+            await closeServer(backendServer);
+        }
+    });
+});
+//# sourceMappingURL=local-proxy.test.js.map

package/dist/lib/local-proxy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-proxy.test.js","sourceRoot":"","sources":["../../src/lib/local-proxy.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAwD,MAAM,kBAAkB,CAAC;AAEzG,KAAK,UAAU,gBAAgB,CAC7B,OAAsE;IAEtE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAE1C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,OAAO;QACL,MAAM;QACN,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAmB;IAC5C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;IAEvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACtC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;IACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,EAAU;IAC5B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,aAAa,GAAwB,EAAE,CAAC;QAC9C,MAAM,gBAAgB,GAA8B,EAAE,CAAC;QAEvD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAClD,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;gBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC;YAClC,UAAU,EAAE,OAAO,CAAC,IAAI;YACxB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/C,kBAAkB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;SAClE,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,oBAAoB,KAAK,CAAC,IAAI,KAAK,EAAE;gBAClE,OAAO,EAAE;oBACP,UAAU,EAAE,OAAO;iBACpB;aACF,CAAC,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,oBAAoB,KAAK,CAAC,IAAI,UAAU,EAAE;gBAC7E,OAAO,EAAE;oBACP,UAAU,EAAE,OAAO;iBACpB;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE3C,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAExD,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;YAEf,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAEhD,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YAC/F,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,IAAI,CAAC,CAAC,CAAC;YAE5E,MAAM,CAAC,kBAAkB,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC9E,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,aAAa,GAAwB,EAAE,CAAC;QAC9C,MAAM,eAAe,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAElD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC;YAClC,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;SAChD,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,KAAK,CAAC,IAAI,YAAY,EAAE;gBACvE,OAAO,EAAE;oBACP,UAAU,EAAE,OAAO;iBACpB;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YAEvD,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;YAEf,MAAM,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACjD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,CAAC,KAAK,CACV,sCAAsC;gBACpC,wBAAwB;gBACxB,yBAAyB;gBACzB,MAAM,CACT,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;gBACxC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACnC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC;YAClC,UAAU,EAAE,cAAc,CAAC,IAAI;SAChC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAChE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBACpE,IAAI,IAAI,GAAG,EAAE,CAAC;gBAEd,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAE3B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;oBAC1B,MAAM,CAAC,KAAK,CACV,0BAA0B;wBACxB,mBAAmB,KAAK,CAAC,IAAI,MAAM;wBACnC,yBAAyB;wBACzB,wBAAwB;wBACxB,MAAM,CACT,CAAC;gBACJ,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAClC,IAAI,IAAI,KAAK,CAAC;oBACd,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;wBACd,MAAM,CAAC,GAAG,EAAE,CAAC;oBACf,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;YACzD,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/pkce.d.ts

@@ -0,0 +1,4 @@
+export declare function createPkcePair(): {
+    verifier: string;
+    challenge: string;
+};

package/dist/lib/pkce.js

@@ -0,0 +1,10 @@
+import { createHash, randomBytes } from 'node:crypto';
+export function createPkcePair() {
+    const verifier = randomBytes(64).toString('base64url');
+    const challenge = createHash('sha256').update(verifier).digest('base64url');
+    return {
+        verifier,
+        challenge,
+    };
+}
+//# sourceMappingURL=pkce.js.map

package/dist/lib/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/lib/pkce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,UAAU,cAAc;IAC5B,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5E,OAAO;QACL,QAAQ;QACR,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/lib/session.d.ts

@@ -0,0 +1,4 @@
+import type { StoredSession } from '../types.js';
+import { ApiClient } from './api-client.js';
+export declare function requireSession(apiClient: ApiClient): Promise<StoredSession>;
+export declare function withAuthenticatedSession<T>(apiClient: ApiClient, run: (session: StoredSession) => Promise<T>): Promise<T>;

package/dist/lib/session.js

@@ -0,0 +1,47 @@
+import { clearSession, loadSession, saveSession } from '../store/credentials.js';
+import { ApiClientError } from './api-client.js';
+const REFRESH_HEADROOM_SEC = 30;
+function isExpired(session) {
+    return session.expiresAtEpochSec <= Math.floor(Date.now() / 1000) + REFRESH_HEADROOM_SEC;
+}
+async function refreshSession(apiClient, session) {
+    const refreshed = await apiClient.refreshTokens(session.refreshToken);
+    const next = {
+        accessToken: refreshed.accessToken,
+        refreshToken: refreshed.refreshToken,
+        expiresAtEpochSec: Math.floor(Date.now() / 1000) + refreshed.expiresInSec,
+        profile: refreshed.profile,
+    };
+    await saveSession(next);
+    return next;
+}
+export async function requireSession(apiClient) {
+    const session = await loadSession();
+    if (!session) {
+        throw new Error('Not logged in. Run: rs-tunnel login --email <you@example.com>');
+    }
+    if (isExpired(session)) {
+        try {
+            return await refreshSession(apiClient, session);
+        }
+        catch {
+            await clearSession();
+            throw new Error('Session expired. Please login again.');
+        }
+    }
+    return session;
+}
+export async function withAuthenticatedSession(apiClient, run) {
+    let session = await requireSession(apiClient);
+    try {
+        return await run(session);
+    }
+    catch (error) {
+        if (!(error instanceof ApiClientError) || error.status !== 401) {
+            throw error;
+        }
+        session = await refreshSession(apiClient, session);
+        return run(session);
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/lib/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/lib/session.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAa,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE5D,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,SAAS,SAAS,CAAC,OAAsB;IACvC,OAAO,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,oBAAoB,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,SAAoB,EAAE,OAAsB;IACxE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEtE,MAAM,IAAI,GAAkB;QAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,YAAY;QACzE,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,CAAC;IAEF,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAoB;IACvD,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,YAAY,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,SAAoB,EACpB,GAA2C;IAE3C,IAAI,OAAO,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,cAAc,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;QAED,OAAO,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/lib/tunnel-stats.d.ts

@@ -0,0 +1,19 @@
+import type { ProxyConnectionSnapshot, ProxyRequestEvent } from './local-proxy.js';
+export type TunnelStatsSnapshot = {
+    ttl: number;
+    opn: number;
+    rt1Ms: number | null;
+    rt5Ms: number | null;
+    p50Ms: number | null;
+    p90Ms: number | null;
+};
+export declare class TunnelStats {
+    private totalConnections;
+    private openConnections;
+    private readonly latencySamples;
+    private sampleStartIndex;
+    updateConnections(snapshot: ProxyConnectionSnapshot): void;
+    recordRequest(event: Pick<ProxyRequestEvent, 'startedAtEpochMs' | 'durationMs'>): void;
+    getSnapshot(nowEpochMs?: number): TunnelStatsSnapshot;
+    private prune;
+}

package/dist/lib/tunnel-stats.js

@@ -0,0 +1,75 @@
+const ONE_MINUTE_MS = 60_000;
+const FIVE_MINUTES_MS = 300_000;
+function average(values) {
+    if (values.length === 0) {
+        return null;
+    }
+    const total = values.reduce((sum, value) => sum + value, 0);
+    return total / values.length;
+}
+function percentile(sortedValues, rank) {
+    if (sortedValues.length === 0) {
+        return null;
+    }
+    const index = Math.max(0, Math.ceil(sortedValues.length * rank) - 1);
+    return sortedValues[index] ?? null;
+}
+export class TunnelStats {
+    totalConnections = 0;
+    openConnections = 0;
+    latencySamples = [];
+    sampleStartIndex = 0;
+    updateConnections(snapshot) {
+        this.totalConnections = snapshot.totalConnections;
+        this.openConnections = snapshot.openConnections;
+    }
+    recordRequest(event) {
+        this.latencySamples.push({
+            timestampEpochMs: event.startedAtEpochMs,
+            durationMs: Math.max(0, event.durationMs),
+        });
+        this.prune(event.startedAtEpochMs);
+    }
+    getSnapshot(nowEpochMs = Date.now()) {
+        this.prune(nowEpochMs);
+        const oneMinuteCutoff = nowEpochMs - ONE_MINUTE_MS;
+        const durationsIn1m = [];
+        const durationsIn5m = [];
+        for (let i = this.sampleStartIndex; i < this.latencySamples.length; i += 1) {
+            const sample = this.latencySamples[i];
+            if (!sample) {
+                continue;
+            }
+            durationsIn5m.push(sample.durationMs);
+            if (sample.timestampEpochMs >= oneMinuteCutoff) {
+                durationsIn1m.push(sample.durationMs);
+            }
+        }
+        const sortedIn5m = [...durationsIn5m].sort((a, b) => a - b);
+        return {
+            ttl: this.totalConnections,
+            opn: this.openConnections,
+            rt1Ms: average(durationsIn1m),
+            rt5Ms: average(durationsIn5m),
+            p50Ms: percentile(sortedIn5m, 0.5),
+            p90Ms: percentile(sortedIn5m, 0.9),
+        };
+    }
+    prune(nowEpochMs) {
+        const oldestAllowed = nowEpochMs - FIVE_MINUTES_MS;
+        while (this.sampleStartIndex < this.latencySamples.length) {
+            const sample = this.latencySamples[this.sampleStartIndex];
+            if (!sample || sample.timestampEpochMs >= oldestAllowed) {
+                break;
+            }
+            this.sampleStartIndex += 1;
+        }
+        const shouldCompact = this.sampleStartIndex > 0 &&
+            (this.sampleStartIndex >= 1024 || this.sampleStartIndex > Math.floor(this.latencySamples.length / 2));
+        if (shouldCompact) {
+            this.latencySamples.splice(0, this.sampleStartIndex);
+            this.sampleStartIndex = 0;
+        }
+    }
+}
+//# sourceMappingURL=tunnel-stats.js.map

package/dist/lib/tunnel-stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-stats.js","sourceRoot":"","sources":["../../src/lib/tunnel-stats.ts"],"names":[],"mappings":"AAEA,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,eAAe,GAAG,OAAO,CAAC;AAgBhC,SAAS,OAAO,CAAC,MAAgB;IAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5D,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,YAAsB,EAAE,IAAY;IACtD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AACrC,CAAC;AAED,MAAM,OAAO,WAAW;IACd,gBAAgB,GAAG,CAAC,CAAC;IAErB,eAAe,GAAG,CAAC,CAAC;IAEX,cAAc,GAAoB,EAAE,CAAC;IAC9C,gBAAgB,GAAG,CAAC,CAAC;IAE7B,iBAAiB,CAAC,QAAiC;QACjD,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QAClD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC;IAClD,CAAC;IAED,aAAa,CAAC,KAAiE;QAC7E,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YACvB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC;SAC1C,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrC,CAAC;IAED,WAAW,CAAC,aAAqB,IAAI,CAAC,GAAG,EAAE;QACzC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEvB,MAAM,eAAe,GAAG,UAAU,GAAG,aAAa,CAAC;QACnD,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,aAAa,GAAa,EAAE,CAAC;QAEnC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,gBAAgB,IAAI,eAAe,EAAE,CAAC;gBAC/C,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE5D,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,gBAAgB;YAC1B,GAAG,EAAE,IAAI,CAAC,eAAe;YACzB,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC;YAC7B,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC;YAC7B,KAAK,EAAE,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC;YAClC,KAAK,EAAE,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC;SACnC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAkB;QAC9B,MAAM,aAAa,GAAG,UAAU,GAAG,eAAe,CAAC;QAEnD,OAAO,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,gBAAgB,IAAI,aAAa,EAAE,CAAC;gBACxD,MAAM;YACR,CAAC;YAED,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,aAAa,GACjB,IAAI,CAAC,gBAAgB,GAAG,CAAC;YACzB,CAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,IAAI,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAExG,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACrD,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;CACF"}

package/dist/lib/tunnel-stats.test.d.ts

@@ -0,0 +1 @@
+export {};