@vibecontrols/vibe-plugin-tunnel 2026.429.2 → 2026.507.2

package/dist/index.js

@@ -1,2 +1,10 @@
 // @bun
-var __require=import.meta.require;function agentBaseUrl(){return process.env.AGENT_BASE_URL??"http://localhost:3005"}function authHeaders(){let fromEnv=process.env.AGENT_API_KEY??process.env.X_AGENT_API_KEY;if(fromEnv)return{"x-agent-api-key":fromEnv};try{let{readFileSync,existsSync}=__require("fs"),{join,resolve}=__require("path"),dir=process.env.VIBECONTROLS_HOME??join(process.cwd(),".boff","vibecontrols"),configPath=join(resolve(dir),"agents",process.env.VIBECONTROLS_AGENT_ID??"default","config.json");if(existsSync(configPath)){let cfg=JSON.parse(readFileSync(configPath,"utf-8"));if(cfg["static-api-key"])return{"x-agent-api-key":cfg["static-api-key"]}}}catch{}return{}}async function apiGet(path){let res=await fetch(`${agentBaseUrl()}/api/tunnels${path}`,{headers:authHeaders()});if(!res.ok){let text=await res.text().catch(()=>"");throw Error(`GET ${path} failed (${res.status}): ${text}`)}return await res.json()}async function apiPost(path,body){let res=await fetch(`${agentBaseUrl()}/api/tunnels${path}`,{method:"POST",headers:{"Content-Type":"application/json",...authHeaders()},body:body?JSON.stringify(body):void 0});if(!res.ok){let text=await res.text().catch(()=>"");throw Error(`POST ${path} failed (${res.status}): ${text}`)}return await res.json()}async function apiDelete(path){let res=await fetch(`${agentBaseUrl()}/api/tunnels${path}`,{method:"DELETE",headers:authHeaders()});if(!res.ok){let text=await res.text().catch(()=>"");throw Error(`DELETE ${path} failed (${res.status}): ${text}`)}return await res.json()}function registerTunnelCommands(program,_hostServices){let cmd=program.command("tunnel").description("Manage tunnels across providers");cmd.command("list").description("List tunnels (optionally filtered by provider)").option("--provider <name>","Limit to a specific provider").action(async(opts)=>{let qs=opts.provider?`?provider=${encodeURIComponent(opts.provider)}`:"",result=await apiGet(`/${qs}`);if(result.tunnels.length===0){console.log("No tunnels.");return}for(let t of result.tunnels)console.log(`${t.id}	${t.providerName}	${t.status}	${t.url}	${t.protocol}:${t.localPort}`)}),cmd.command("get <tunnelId>").description("Get tunnel status").option("--provider <name>").action(async(tunnelId,opts)=>{let qs=opts.provider?`?provider=${encodeURIComponent(opts.provider)}`:"",result=await apiGet(`/${tunnelId}${qs}`);console.log(JSON.stringify(result,null,2))}),cmd.command("start <tunnelId>").description("Start a prepared tunnel session").option("--provider <name>").action(async(tunnelId,opts)=>{let result=await apiPost(`/${tunnelId}/start`,{provider:opts.provider});console.log(JSON.stringify(result,null,2))}),cmd.command("stop <tunnelId>").description("Stop an active tunnel").option("--provider <name>").action(async(tunnelId,opts)=>{let result=await apiPost(`/${tunnelId}/stop`,{provider:opts.provider});console.log(JSON.stringify(result,null,2))}),cmd.command("delete <tunnelId>").description("Delete a tunnel").option("--provider <name>").action(async(tunnelId,opts)=>{let qs=opts.provider?`?provider=${encodeURIComponent(opts.provider)}`:"",result=await apiDelete(`/${tunnelId}${qs}`);console.log(JSON.stringify(result,null,2))}),cmd.command("sessions <tunnelId>").description("List sessions for a tunnel").option("--provider <name>").action(async(tunnelId,opts)=>{let qs=opts.provider?`?provider=${encodeURIComponent(opts.provider)}`:"",result=await apiGet(`/${tunnelId}/sessions${qs}`);console.log(JSON.stringify(result,null,2))}),cmd.command("status").description("Manager + per-provider health summary").action(async()=>{let result=await apiGet("/health");console.log(JSON.stringify(result,null,2))});let providersCmd=cmd.command("providers").description("Manage tunnel providers");providersCmd.command("list").description("List registered tunnel providers and capabilities").action(async()=>{let result=await apiGet("/providers");for(let p of result.providers){let star=p.isDefault?"* ":"  ",ok=p.health.ok?"ok":`error (${p.health.message??""})`;console.log(`${star}${p.name}	[${ok}]`)}}),providersCmd.command("set-default <name>").description("Set the default tunnel provider").action(async(name)=>{let result=await apiPost("/default",{provider:name});console.log(JSON.stringify(result,null,2))});let domainsCmd=cmd.command("domains").description("Manage custom domains on a tunnel");domainsCmd.command("add <tunnelId> <domain>").option("--provider <name>").action(async(tunnelId,domain,opts)=>{let result=await apiPost(`/${tunnelId}/domains`,{domain,provider:opts.provider});console.log(JSON.stringify(result,null,2))}),domainsCmd.command("rm <tunnelId> <domain>").option("--provider <name>").action(async(tunnelId,domain,opts)=>{let qs=opts.provider?`?provider=${encodeURIComponent(opts.provider)}`:"",result=await apiDelete(`/${tunnelId}/domains/${encodeURIComponent(domain)}${qs}`);console.log(JSON.stringify(result,null,2))}),cmd.command("doctor").description("Diagnose tunnel providers").action(async()=>{try{let health=await apiGet("/health");console.log(`manager: ${health.manager}`);for(let p of health.providers)console.log(`  ${p.name}: ${p.ok?"ok":`fail - ${p.message}`}`)}catch(err){console.error(`Failed to reach agent: ${err}`),process.exitCode=1}})}var DEFAULT_PROVIDER_CONFIG_KEY="provider:default:tunnel";var LOG_SOURCE="tunnel-manager";class TunnelManager{registry;host;log={info:()=>{},warn:()=>{},error:()=>{},debug:()=>{}};init(host){if(this.host=host,this.registry=host.serviceRegistry,host.logger)this.log=host.logger;this.log.info(LOG_SOURCE,"Tunnel manager initialized")}async resolveProvider(name){if(!this.registry)throw Error("Service registry not available");let explicit=name?.trim();if(explicit){let provider2=this.registry.getProviderByName("tunnel",explicit);if(!provider2)throw Error(`Tunnel provider '${explicit}' is not registered`);return provider2}let fallback=await this.defaultProviderName();if(!fallback)throw Error("No default tunnel provider configured and none specified");let provider=this.registry.getProviderByName("tunnel",fallback);if(!provider)throw Error(`Default tunnel provider '${fallback}' is not registered`);return provider}async defaultProviderName(){let fromConfig=await this.host?.getConfig?.(DEFAULT_PROVIDER_CONFIG_KEY);if(fromConfig)return fromConfig;let entries=this.registry?.listProvidersForType("tunnel")??[],flagged=entries.find((e)=>e.isDefault);if(flagged)return flagged.pluginName;if(entries.length===1)return entries[0].pluginName;return}listProviderEntries(){return this.registry?.listProvidersForType("tunnel")??[]}async listAllTunnels(filterProvider){let entries=this.listProviderEntries(),targeted=filterProvider?entries.filter((e)=>e.pluginName===filterProvider):entries,results=[];for(let entry of targeted){let provider=this.registry?.getProviderByName("tunnel",entry.pluginName);if(!provider)continue;try{let tunnels=await provider.list();results.push({provider:entry.pluginName,tunnels})}catch(err){this.log.warn(LOG_SOURCE,`listAllTunnels: ${entry.pluginName} failed`,{error:String(err)})}}return results}async listProviders(){let entries=this.listProviderEntries(),snapshots=[];for(let entry of entries){let provider=this.registry?.getProviderByName("tunnel",entry.pluginName);if(!provider)continue;let health;try{health=await provider.healthCheck()}catch(err){health={ok:!1,message:String(err)}}snapshots.push({name:entry.pluginName,isDefault:entry.isDefault,capabilities:provider.getCapabilities(),health})}return snapshots}async getTunnel(id,opts={}){if(opts.provider){let provider=await this.resolveProvider(opts.provider),tunnel=await provider.getStatus(id);return tunnel?{provider:provider.name,tunnel}:null}for(let entry of this.listProviderEntries()){let provider=this.registry?.getProviderByName("tunnel",entry.pluginName);if(!provider)continue;try{let tunnel=await provider.getStatus(id);if(tunnel)return{provider:entry.pluginName,tunnel}}catch{}}return null}async issueSession(req){let{provider:providerName,...rest}=req,provider=await this.resolveProvider(providerName);return{...await provider.issueSession(rest),provider:provider.name}}async startTunnel(id,opts={}){return(await this.resolveProvider(opts.provider)).start(id)}async stopTunnel(id,opts={}){return(await this.resolveProvider(opts.provider)).stop(id)}async deleteTunnel(id,opts={}){return(await this.resolveProvider(opts.provider)).delete(id)}async rotate(id,opts={}){return(await this.resolveProvider(opts.provider)).rotate(id)}async attachDomain(id,domain,opts={}){return(await this.resolveProvider(opts.provider)).attachCustomDomain(id,domain)}async detachDomain(id,domain,opts={}){return(await this.resolveProvider(opts.provider)).detachCustomDomain(id,domain)}async listSessions(id,opts={}){return(await this.resolveProvider(opts.provider)).listSessions(id)}async getHealth(){let entries=this.listProviderEntries(),providers=[];for(let entry of entries){let provider=this.registry?.getProviderByName("tunnel",entry.pluginName);if(!provider){providers.push({name:entry.pluginName,ok:!1,message:"unavailable"});continue}try{let result=await provider.healthCheck();providers.push({name:entry.pluginName,ok:result.ok,message:result.message})}catch(err){providers.push({name:entry.pluginName,ok:!1,message:String(err)})}}return{manager:"ok",providers}}async setDefault(providerName){if(await this.resolveProvider(providerName),this.registry?.setProviderDefault)this.registry.setProviderDefault("tunnel",providerName);if(this.host?.setConfig)await this.host.setConfig(DEFAULT_PROVIDER_CONFIG_KEY,providerName);this.log.info(LOG_SOURCE,`Default tunnel provider set to ${providerName}`)}}import{Elysia,t}from"elysia";function readProvider(query){return query?.provider??void 0}function createTunnelManagerRoutes(manager){return new Elysia().get("/providers",async({set})=>{try{return{providers:await manager.listProviders()}}catch(err){return set.status=500,{error:"Failed to list providers",details:String(err)}}}).post("/default",async({body,set})=>{try{return await manager.setDefault(body.provider),{success:!0,provider:body.provider}}catch(err){return set.status=400,{error:String(err)}}},{body:t.Object({provider:t.String()})}).get("/health",async({set})=>{try{return await manager.getHealth()}catch(err){return set.status=500,{error:"Failed to get health",details:String(err)}}}).get("/",async({query,set})=>{try{let providerName=readProvider(query),results=await manager.listAllTunnels(providerName);return{tunnels:results.flatMap((r)=>r.tunnels.map((t2)=>({...t2,providerName:r.provider}))),byProvider:results}}catch(err){return set.status=500,{error:"Failed to list tunnels",details:String(err)}}}).post("/issue-session",async({body,set})=>{try{return await manager.issueSession({provider:body.provider,protocol:body.protocol,localPort:body.localPort,localHost:body.localHost,subdomain:body.subdomain,customDomain:body.customDomain,ttlSeconds:body.ttlSeconds,metadata:body.metadata,controlPlanePayload:body.controlPlanePayload})}catch(err){return set.status=500,{error:"Failed to issue session",details:String(err)}}},{body:t.Object({provider:t.Optional(t.String()),protocol:t.Union([t.Literal("http"),t.Literal("https"),t.Literal("tcp"),t.Literal("udp")]),localPort:t.Number(),localHost:t.Optional(t.String()),subdomain:t.Optional(t.String()),customDomain:t.Optional(t.String()),ttlSeconds:t.Optional(t.Number()),metadata:t.Optional(t.Any()),controlPlanePayload:t.Optional(t.Any())})}).get("/:id",async({params,query,set})=>{try{let result=await manager.getTunnel(params.id,{provider:readProvider(query)});if(!result)return set.status=404,{error:"Tunnel not found"};return result}catch(err){return set.status=500,{error:"Failed to get tunnel",details:String(err)}}}).get("/:id/sessions",async({params,query,set})=>{try{return{sessions:await manager.listSessions(params.id,{provider:readProvider(query)})}}catch(err){return set.status=500,{error:"Failed to list sessions",details:String(err)}}}).post("/:id/start",async({params,body,set})=>{try{return{success:!0,tunnel:await manager.startTunnel(params.id,{provider:body?.provider})}}catch(err){return set.status=500,{error:"Failed to start tunnel",details:String(err)}}},{body:t.Optional(t.Object({provider:t.Optional(t.String())}))}).post("/:id/stop",async({params,body,set})=>{try{return await manager.stopTunnel(params.id,{provider:body?.provider}),{success:!0}}catch(err){return set.status=500,{error:"Failed to stop tunnel",details:String(err)}}},{body:t.Optional(t.Object({provider:t.Optional(t.String())}))}).post("/:id/rotate",async({params,body,set})=>{try{return{success:!0,session:await manager.rotate(params.id,{provider:body?.provider})}}catch(err){return set.status=500,{error:"Failed to rotate tunnel",details:String(err)}}},{body:t.Optional(t.Object({provider:t.Optional(t.String())}))}).delete("/:id",async({params,query,set})=>{try{return await manager.deleteTunnel(params.id,{provider:readProvider(query)}),{success:!0}}catch(err){return set.status=500,{error:"Failed to delete tunnel",details:String(err)}}}).post("/:id/domains",async({params,body,set})=>{try{return await manager.attachDomain(params.id,body.domain,{provider:body.provider}),{success:!0}}catch(err){return set.status=500,{error:"Failed to attach domain",details:String(err)}}},{body:t.Object({domain:t.String(),provider:t.Optional(t.String())})}).delete("/:id/domains/:domain",async({params,query,set})=>{try{return await manager.detachDomain(params.id,params.domain,{provider:readProvider(query)}),{success:!0}}catch(err){return set.status=500,{error:"Failed to detach domain",details:String(err)}}})}var manager=new TunnelManager,vibePlugin={name:"tunnel",version:"0.1.0",description:"VibeTunnels manager \u2014 dispatches to registered tunnel providers",tags:["backend","cli","integration"],cliCommand:"tunnel",apiPrefix:"/api/tunnels",createRoutes:()=>createTunnelManagerRoutes(manager),onServerStart:(_app,hostServices)=>{manager.init(hostServices)},onCliSetup:(program,hostServices)=>{registerTunnelCommands(program,hostServices)}},src_default=vibePlugin;export{vibePlugin,src_default as default,TunnelManager};
+var __require=import.meta.require;function isInteractive(){return!!process.stdout.isTTY&&!!process.stdin.isTTY}function pickOutputMode(flags){if(flags.json)return"json";if(flags.plain)return"plain";if(flags.interactive)return"interactive";return"auto"}function isCi(){return!!process.env.CI||!!process.env.NO_COLOR||process.env.TERM==="dumb"}async function runMultimode(opts){let data=await opts.fetchData(),mode=opts.mode??"auto";if(mode==="json"){let shaped=opts.json?opts.json(data):data;process.stdout.write(`${JSON.stringify(shaped,null,2)}
+`);return}if(mode==="plain"){await opts.plain(data);return}if((mode==="interactive"||isInteractive()&&!isCi())&&!!opts.interactive&&opts.interactive)try{await opts.interactive(data);return}catch{}await opts.plain(data)}function maybePrintJson(flags,data){if(!flags.json)return!1;return process.stdout.write(`${JSON.stringify(data,null,2)}
+`),!0}async function loadCore(){return await import("@opentui/core")}async function interactiveTable(opts){if(opts.rows.length===0)return null;let core=await loadCore(),{createCliRenderer,BoxRenderable,TextRenderable,SelectRenderable,SelectRenderableEvents}=core,renderer=await createCliRenderer({exitOnCtrlC:!0,targetFps:30}),ctx=renderer.root.ctx,root=new BoxRenderable(ctx,{width:"100%",height:"100%",flexDirection:"column",backgroundColor:"#0b0d12"}),title=new TextRenderable(ctx,{content:`  ${opts.title}`,fg:"#8be9fd",height:1}),footer=new TextRenderable(ctx,{content:`  ${opts.footer??"\u2191/\u2193 navigate \xB7 Enter select \xB7 q quit"}`,fg:"#6c7086",height:1}),body=new BoxRenderable(ctx,{width:"100%",flexGrow:1,flexDirection:"row"}),list=new SelectRenderable(ctx,{width:opts.listWidth??28,height:"100%",options:opts.rows.map((r)=>({name:r.label,description:r.hint??"",value:r.id})),selectedIndex:0,showDescription:!0,backgroundColor:"#0b0d12",textColor:"#cdd6f4",focusedBackgroundColor:"#0b0d12",focusedTextColor:"#cdd6f4",selectedBackgroundColor:"#1f2335",selectedTextColor:"#a6e3a1",descriptionColor:"#6c7086",selectedDescriptionColor:"#9399b2",showScrollIndicator:!0,wrapSelection:!0}),detailPane=new BoxRenderable(ctx,{flexGrow:1,height:"100%",flexDirection:"column",paddingLeft:2,paddingRight:2,backgroundColor:"#11141c"}),detailText=new TextRenderable(ctx,{content:"",fg:"#cdd6f4"});detailPane.add(detailText),body.add(list),body.add(detailPane),root.add(title),root.add(body),root.add(footer),renderer.root.add(root),list.focus();let renderDetail=(idx)=>{let row=opts.rows[idx];if(!row)return;detailText.content=`
+${row.detail}
+`};return renderDetail(0),list.on(SelectRenderableEvents.SELECTION_CHANGED,(idx)=>{renderDetail(idx)}),await new Promise((resolve)=>{let cleanup=(chosen)=>{try{renderer.destroy()}catch{}resolve(chosen)};list.on(SelectRenderableEvents.ITEM_SELECTED,()=>{let row=opts.rows[list.getSelectedIndex()];cleanup(row??null)}),renderer.keyInput.on("keypress",(key)=>{if(key.name==="escape"||key.name==="q")cleanup(null)})}).then(async(chosen)=>{if(chosen&&opts.onSelect)await opts.onSelect(chosen);return chosen})}async function interactiveDetail(opts){let core=await loadCore(),{createCliRenderer,BoxRenderable,TextRenderable}=core,renderer=await createCliRenderer({exitOnCtrlC:!0,targetFps:30}),ctx=renderer.root.ctx,root=new BoxRenderable(ctx,{width:"100%",height:"100%",flexDirection:"column",backgroundColor:"#0b0d12"}),title=new TextRenderable(ctx,{content:`  ${opts.title}`,fg:"#8be9fd",height:1}),bodyBox=new BoxRenderable(ctx,{width:"100%",flexGrow:1,paddingLeft:2,paddingRight:2,backgroundColor:"#11141c"}),bodyText=new TextRenderable(ctx,{content:`
+${opts.body}
+`,fg:"#cdd6f4"}),footer=new TextRenderable(ctx,{content:`  ${opts.footer??"q to quit"}`,fg:"#6c7086",height:1});bodyBox.add(bodyText),root.add(title),root.add(bodyBox),root.add(footer),renderer.root.add(root),await new Promise((resolve)=>{let cleanup=()=>{try{renderer.destroy()}catch{}resolve()};renderer.keyInput.on("keypress",(key)=>{if(key.name==="escape"||key.name==="q"||key.name==="return")cleanup()})})}var DEFAULT_AGENT_URL="http://localhost:3005";function agentBaseUrl(){return process.env.AGENT_BASE_URL??DEFAULT_AGENT_URL}function redactSecrets(value){if(Array.isArray(value))return value.map(redactSecrets);if(value&&typeof value==="object"){let out={};for(let[k,v]of Object.entries(value))if(/(token|secret|password|apikey|api_key)/i.test(k))out[k]="[REDACTED]";else out[k]=redactSecrets(v);return out}return value}function authHeaders(){let fromEnv=process.env.AGENT_API_KEY??process.env.X_AGENT_API_KEY;if(fromEnv)return{"x-agent-api-key":fromEnv};try{let{readFileSync,existsSync}=__require("fs"),{join,resolve}=__require("path"),dir=process.env.VIBECONTROLS_HOME??join(process.cwd(),".boff","vibecontrols"),configPath=join(resolve(dir),"agents",process.env.VIBECONTROLS_PROFILE??"default","config.json");if(existsSync(configPath)){let cfg=JSON.parse(readFileSync(configPath,"utf-8"));if(cfg["static-api-key"])return{"x-agent-api-key":cfg["static-api-key"]}}}catch{}return{}}async function apiGet(path){let res=await fetch(`${agentBaseUrl()}/api/tunnels${path}`,{headers:authHeaders()});if(!res.ok){let text=await res.text().catch(()=>"");throw Error(`GET ${path} failed (${res.status}): ${text}`)}return await res.json()}async function apiPost(path,body){let res=await fetch(`${agentBaseUrl()}/api/tunnels${path}`,{method:"POST",headers:{"Content-Type":"application/json",...authHeaders()},body:body?JSON.stringify(body):void 0});if(!res.ok){let text=await res.text().catch(()=>"");throw Error(`POST ${path} failed (${res.status}): ${text}`)}return await res.json()}async function apiDelete(path){let res=await fetch(`${agentBaseUrl()}/api/tunnels${path}`,{method:"DELETE",headers:authHeaders()});if(!res.ok){let text=await res.text().catch(()=>"");throw Error(`DELETE ${path} failed (${res.status}): ${text}`)}return await res.json()}function tunnelDetail(t){let lines=[`id:        ${t.id}`,`provider:  ${t.providerName??"-"}`,`status:    ${t.status??"-"}`,`url:       ${t.url??"-"}`,`protocol:  ${t.protocol??"-"}`,`localPort: ${t.localPort??"-"}`];if(t.domains&&Array.isArray(t.domains)&&t.domains.length>0)lines.push(`domains:   ${t.domains.join(", ")}`);return lines.join(`
+`)}function registerTunnelCommands(program,_hostServices){let cmd=program.command("tunnel").description("Manage tunnels across providers");cmd.command("list").description("List tunnels (optionally filtered by provider)").option("--provider <name>","Limit to a specific provider").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(opts)=>{let qs=opts.provider?`?provider=${encodeURIComponent(opts.provider)}`:"";await runMultimode({mode:pickOutputMode(opts),fetchData:()=>apiGet(`/${qs}`),plain:(result)=>{if(result.tunnels.length===0){console.log("No tunnels.");return}for(let t of result.tunnels)console.log(`${t.id}	${t.providerName}	${t.status}	${t.url}	${t.protocol}:${t.localPort}`)},interactive:async(result)=>{if(result.tunnels.length===0){console.log("No tunnels.");return}let rows=result.tunnels.map((t)=>({id:String(t.id),label:`${t.id} ${t.providerName??""}`.trim(),hint:t.status??"",detail:tunnelDetail(t)}));await interactiveTable({title:`tunnels \u2014 ${result.tunnels.length}`,rows})},json:(result)=>redactSecrets(result)})}),cmd.command("get <tunnelId>").description("Get tunnel status").option("--provider <name>").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(tunnelId,opts)=>{let qs=opts.provider?`?provider=${encodeURIComponent(opts.provider)}`:"";await runMultimode({mode:pickOutputMode(opts),fetchData:()=>apiGet(`/${tunnelId}${qs}`),plain:(result)=>{console.log(JSON.stringify(result,null,2))},interactive:async(result)=>{await interactiveDetail({title:`tunnel ${tunnelId}`,body:tunnelDetail(result)})},json:(result)=>redactSecrets(result)})}),cmd.command("start <tunnelId>").description("Start a prepared tunnel session").option("--provider <name>").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(tunnelId,opts)=>{let result=await apiPost(`/${tunnelId}/start`,{provider:opts.provider});if(maybePrintJson(opts,{ok:!0,action:"start",tunnelId,result:redactSecrets(result)}))return;console.log(JSON.stringify(result,null,2))}),cmd.command("stop <tunnelId>").description("Stop an active tunnel").option("--provider <name>").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(tunnelId,opts)=>{let result=await apiPost(`/${tunnelId}/stop`,{provider:opts.provider});if(maybePrintJson(opts,{ok:!0,action:"stop",tunnelId,result:redactSecrets(result)}))return;console.log(JSON.stringify(result,null,2))}),cmd.command("delete <tunnelId>").description("Delete a tunnel").option("--provider <name>").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(tunnelId,opts)=>{let qs=opts.provider?`?provider=${encodeURIComponent(opts.provider)}`:"",result=await apiDelete(`/${tunnelId}${qs}`);if(maybePrintJson(opts,{ok:!0,action:"delete",tunnelId,result:redactSecrets(result)}))return;console.log(JSON.stringify(result,null,2))}),cmd.command("sessions <tunnelId>").description("List sessions for a tunnel").option("--provider <name>").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(tunnelId,opts)=>{let qs=opts.provider?`?provider=${encodeURIComponent(opts.provider)}`:"";await runMultimode({mode:pickOutputMode(opts),fetchData:()=>apiGet(`/${tunnelId}/sessions${qs}`),plain:(result)=>{console.log(JSON.stringify(result,null,2))},interactive:async(result)=>{let sessions=Array.isArray(result?.sessions)?result.sessions:Array.isArray(result)?result:[];if(sessions.length===0){await interactiveDetail({title:`sessions \u2014 ${tunnelId}`,body:"No sessions."});return}let rows=sessions.map((s,i)=>({id:String(s.id??i),label:String(s.id??`session-${i}`),hint:s.status??"",detail:JSON.stringify(s,null,2)}));await interactiveTable({title:`sessions \u2014 ${tunnelId} (${sessions.length})`,rows})},json:(result)=>redactSecrets(result)})}),cmd.command("status").description("Manager + per-provider health summary").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(opts)=>{await runMultimode({mode:pickOutputMode(opts),fetchData:()=>apiGet("/health"),plain:(result)=>{console.log(JSON.stringify(result,null,2))},interactive:async(result)=>{await interactiveDetail({title:"tunnel status",body:JSON.stringify(result,null,2)})},json:(result)=>redactSecrets(result)})});let providersCmd=cmd.command("providers").description("Manage tunnel providers");providersCmd.command("list").description("List registered tunnel providers and capabilities").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(opts)=>{await runMultimode({mode:pickOutputMode(opts),fetchData:()=>apiGet("/providers"),plain:(result)=>{for(let p of result.providers){let star=p.isDefault?"* ":"  ",ok=p.health.ok?"ok":`error (${p.health.message??""})`;console.log(`${star}${p.name}	[${ok}]`)}},interactive:async(result)=>{if(result.providers.length===0){await interactiveDetail({title:"providers",body:"No providers."});return}let rows=result.providers.map((p)=>({id:String(p.name),label:`${p.isDefault?"* ":"  "}${p.name}`,hint:p.health?.ok?"ok":"error",detail:JSON.stringify(p,null,2)}));await interactiveTable({title:`providers \u2014 ${result.providers.length}`,rows})},json:(result)=>redactSecrets(result)})}),providersCmd.command("set-default <name>").description("Set the default tunnel provider").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(name,opts)=>{let result=await apiPost("/default",{provider:name});if(maybePrintJson(opts,{ok:!0,action:"set-default",provider:name,result:redactSecrets(result)}))return;console.log(JSON.stringify(result,null,2))});let domainsCmd=cmd.command("domains").description("Manage custom domains on a tunnel");domainsCmd.command("add <tunnelId> <domain>").option("--provider <name>").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(tunnelId,domain,opts)=>{let result=await apiPost(`/${tunnelId}/domains`,{domain,provider:opts.provider});if(maybePrintJson(opts,{ok:!0,action:"domains-add",tunnelId,domain,result:redactSecrets(result)}))return;console.log(JSON.stringify(result,null,2))}),domainsCmd.command("rm <tunnelId> <domain>").option("--provider <name>").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(tunnelId,domain,opts)=>{let qs=opts.provider?`?provider=${encodeURIComponent(opts.provider)}`:"",result=await apiDelete(`/${tunnelId}/domains/${encodeURIComponent(domain)}${qs}`);if(maybePrintJson(opts,{ok:!0,action:"domains-rm",tunnelId,domain,result:redactSecrets(result)}))return;console.log(JSON.stringify(result,null,2))}),cmd.command("doctor").description("Diagnose tunnel providers").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(opts)=>{try{await runMultimode({mode:pickOutputMode(opts),fetchData:()=>apiGet("/health"),plain:(health)=>{console.log(`manager: ${health.manager}`);for(let p of health.providers)console.log(`  ${p.name}: ${p.ok?"ok":`fail - ${p.message}`}`)},interactive:async(health)=>{let lines=[`manager: ${health.manager}`];for(let p of health.providers)lines.push(`  ${p.name}: ${p.ok?"ok":`fail - ${p.message}`}`);await interactiveDetail({title:"tunnel doctor",body:lines.join(`
+`)})},json:(health)=>redactSecrets(health)})}catch(err){console.error(`Failed to reach agent: ${err}`),process.exitCode=1}})}var DEFAULT_PROVIDER_CONFIG_KEY="provider:default:tunnel";var LOG_SOURCE="tunnel-manager";class TunnelManager{registry;host;log={info:()=>{},warn:()=>{},error:()=>{},debug:()=>{}};init(host){if(this.host=host,this.registry=host.serviceRegistry,host.logger)this.log=host.logger;this.log.info(LOG_SOURCE,"Tunnel manager initialized")}async resolveProvider(name){if(!this.registry)throw Error("Service registry not available");let explicit=name?.trim();if(explicit){let provider2=this.registry.getProviderByName("tunnel",explicit);if(!provider2)throw Error(`Tunnel provider '${explicit}' is not registered`);return provider2}let fallback=await this.defaultProviderName();if(!fallback)throw Error("No default tunnel provider configured and none specified");let provider=this.registry.getProviderByName("tunnel",fallback);if(!provider)throw Error(`Default tunnel provider '${fallback}' is not registered`);return provider}async defaultProviderName(){let fromConfig=await this.host?.getConfig?.(DEFAULT_PROVIDER_CONFIG_KEY);if(fromConfig)return fromConfig;let entries=this.registry?.listProvidersForType("tunnel")??[],flagged=entries.find((e)=>e.isDefault);if(flagged)return flagged.pluginName;if(entries.length===1)return entries[0].pluginName;return}listProviderEntries(){return this.registry?.listProvidersForType("tunnel")??[]}async listAllTunnels(filterProvider){let entries=this.listProviderEntries(),targeted=filterProvider?entries.filter((e)=>e.pluginName===filterProvider):entries,results=[];for(let entry of targeted){let provider=this.registry?.getProviderByName("tunnel",entry.pluginName);if(!provider)continue;try{let tunnels=await provider.list();results.push({provider:entry.pluginName,tunnels})}catch(err){this.log.warn(LOG_SOURCE,`listAllTunnels: ${entry.pluginName} failed`,{error:String(err)})}}return results}async listProviders(){let entries=this.listProviderEntries(),snapshots=[];for(let entry of entries){let provider=this.registry?.getProviderByName("tunnel",entry.pluginName);if(!provider)continue;let health;try{health=await provider.healthCheck()}catch(err){health={ok:!1,message:String(err)}}snapshots.push({name:entry.pluginName,isDefault:entry.isDefault,capabilities:provider.getCapabilities(),health})}return snapshots}async getTunnel(id,opts={}){if(opts.provider){let provider=await this.resolveProvider(opts.provider),tunnel=await provider.getStatus(id);return tunnel?{provider:provider.name,tunnel}:null}for(let entry of this.listProviderEntries()){let provider=this.registry?.getProviderByName("tunnel",entry.pluginName);if(!provider)continue;try{let tunnel=await provider.getStatus(id);if(tunnel)return{provider:entry.pluginName,tunnel}}catch{}}return null}async issueSession(req){let{provider:providerName,...rest}=req,provider=await this.resolveProvider(providerName);return{...await provider.issueSession(rest),provider:provider.name}}async startTunnel(id,opts={}){return(await this.resolveProvider(opts.provider)).start(id)}async stopTunnel(id,opts={}){return(await this.resolveProvider(opts.provider)).stop(id)}async deleteTunnel(id,opts={}){return(await this.resolveProvider(opts.provider)).delete(id)}async rotate(id,opts={}){return(await this.resolveProvider(opts.provider)).rotate(id)}async attachDomain(id,domain,opts={}){return(await this.resolveProvider(opts.provider)).attachCustomDomain(id,domain)}async detachDomain(id,domain,opts={}){return(await this.resolveProvider(opts.provider)).detachCustomDomain(id,domain)}async listSessions(id,opts={}){return(await this.resolveProvider(opts.provider)).listSessions(id)}async getHealth(){let entries=this.listProviderEntries(),providers=[];for(let entry of entries){let provider=this.registry?.getProviderByName("tunnel",entry.pluginName);if(!provider){providers.push({name:entry.pluginName,ok:!1,message:"unavailable"});continue}try{let result=await provider.healthCheck();providers.push({name:entry.pluginName,ok:result.ok,message:result.message})}catch(err){providers.push({name:entry.pluginName,ok:!1,message:String(err)})}}return{manager:"ok",providers}}async setDefault(providerName){if(await this.resolveProvider(providerName),this.registry?.setProviderDefault)this.registry.setProviderDefault("tunnel",providerName);if(this.host?.setConfig)await this.host.setConfig(DEFAULT_PROVIDER_CONFIG_KEY,providerName);this.log.info(LOG_SOURCE,`Default tunnel provider set to ${providerName}`)}}import{Elysia,t}from"elysia";function readProvider(query){return query?.provider??void 0}function createTunnelManagerRoutes(manager){return new Elysia().get("/providers",async({set})=>{try{return{providers:await manager.listProviders()}}catch(err){return set.status=500,{error:"Failed to list providers",details:String(err)}}}).post("/default",async({body,set})=>{try{return await manager.setDefault(body.provider),{success:!0,provider:body.provider}}catch(err){return set.status=400,{error:String(err)}}},{body:t.Object({provider:t.String()})}).get("/health",async({set})=>{try{return await manager.getHealth()}catch(err){return set.status=500,{error:"Failed to get health",details:String(err)}}}).get("/",async({query,set})=>{try{let providerName=readProvider(query),results=await manager.listAllTunnels(providerName);return{tunnels:results.flatMap((r)=>r.tunnels.map((t2)=>({...t2,providerName:r.provider}))),byProvider:results}}catch(err){return set.status=500,{error:"Failed to list tunnels",details:String(err)}}}).post("/issue-session",async({body,set})=>{try{return await manager.issueSession({provider:body.provider,protocol:body.protocol,localPort:body.localPort,localHost:body.localHost,subdomain:body.subdomain,customDomain:body.customDomain,ttlSeconds:body.ttlSeconds,metadata:body.metadata,controlPlanePayload:body.controlPlanePayload})}catch(err){return set.status=500,{error:"Failed to issue session",details:String(err)}}},{body:t.Object({provider:t.Optional(t.String()),protocol:t.Union([t.Literal("http"),t.Literal("https"),t.Literal("tcp"),t.Literal("udp")]),localPort:t.Number(),localHost:t.Optional(t.String()),subdomain:t.Optional(t.String()),customDomain:t.Optional(t.String()),ttlSeconds:t.Optional(t.Number()),metadata:t.Optional(t.Any()),controlPlanePayload:t.Optional(t.Any())})}).get("/:id",async({params,query,set})=>{try{let result=await manager.getTunnel(params.id,{provider:readProvider(query)});if(!result)return set.status=404,{error:"Tunnel not found"};return result}catch(err){return set.status=500,{error:"Failed to get tunnel",details:String(err)}}}).get("/:id/sessions",async({params,query,set})=>{try{return{sessions:await manager.listSessions(params.id,{provider:readProvider(query)})}}catch(err){return set.status=500,{error:"Failed to list sessions",details:String(err)}}}).post("/:id/start",async({params,body,set})=>{try{return{success:!0,tunnel:await manager.startTunnel(params.id,{provider:body?.provider})}}catch(err){return set.status=500,{error:"Failed to start tunnel",details:String(err)}}},{body:t.Optional(t.Object({provider:t.Optional(t.String())}))}).post("/:id/stop",async({params,body,set})=>{try{return await manager.stopTunnel(params.id,{provider:body?.provider}),{success:!0}}catch(err){return set.status=500,{error:"Failed to stop tunnel",details:String(err)}}},{body:t.Optional(t.Object({provider:t.Optional(t.String())}))}).post("/:id/rotate",async({params,body,set})=>{try{return{success:!0,session:await manager.rotate(params.id,{provider:body?.provider})}}catch(err){return set.status=500,{error:"Failed to rotate tunnel",details:String(err)}}},{body:t.Optional(t.Object({provider:t.Optional(t.String())}))}).delete("/:id",async({params,query,set})=>{try{return await manager.deleteTunnel(params.id,{provider:readProvider(query)}),{success:!0}}catch(err){return set.status=500,{error:"Failed to delete tunnel",details:String(err)}}}).post("/:id/domains",async({params,body,set})=>{try{return await manager.attachDomain(params.id,body.domain,{provider:body.provider}),{success:!0}}catch(err){return set.status=500,{error:"Failed to attach domain",details:String(err)}}},{body:t.Object({domain:t.String(),provider:t.Optional(t.String())})}).delete("/:id/domains/:domain",async({params,query,set})=>{try{return await manager.detachDomain(params.id,params.domain,{provider:readProvider(query)}),{success:!0}}catch(err){return set.status=500,{error:"Failed to detach domain",details:String(err)}}})}var manager=new TunnelManager,vibePlugin={name:"tunnel",version:"0.1.0",description:"VibeTunnels manager \u2014 dispatches to registered tunnel providers",tags:["backend","cli","integration"],cliCommand:"tunnel",apiPrefix:"/api/tunnels",createRoutes:()=>createTunnelManagerRoutes(manager),onServerStart:(_app,hostServices)=>{manager.init(hostServices)},onCliSetup:(program,hostServices)=>{registerTunnelCommands(program,hostServices)}},src_default=vibePlugin;export{vibePlugin,src_default as default,TunnelManager};

package/dist/utils/interactive.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Reusable opentui primitives for read-style commands.
+ *
+ *   • interactiveTable — a focusable single-column list with a detail pane
+ *     on the right. The user picks rows with ↑/↓; we render the detail of
+ *     the focused row in a fixed-width panel. Enter exits and runs an
+ *     optional callback (e.g. print full detail to stdout). q/Esc cancels.
+ *
+ *   • interactiveDetail — a static key/value panel (great for `vibe profile
+ *     show`, `vibe info`, etc.). Mostly identical to plain output but inside
+ *     the alternate screen so it's pretty.
+ *
+ * Both helpers throw if @opentui/core fails to import — callers should pair
+ * them with a plain fallback through `runMultimode`.
+ */
+export interface TableRow {
+    /** Stable identifier — exposed to onSelect. */
+    id: string;
+    /** Short label rendered in the left pane. */
+    label: string;
+    /** Optional one-line muted hint shown below the label. */
+    hint?: string;
+    /** Detail rendered in the right pane (multiline, ANSI ok). */
+    detail: string;
+}
+export interface InteractiveTableOptions {
+    title: string;
+    rows: TableRow[];
+    /** Footer hint — overrides the default `↑/↓ navigate · Enter select · q quit`. */
+    footer?: string;
+    /** Width of the left list pane in columns. Default: 28. */
+    listWidth?: number;
+    /**
+     * Called when the user hits Enter on a row. If omitted, Enter quits.
+     * The handler runs AFTER the renderer is destroyed, so it's free to
+     * write to stdout.
+     */
+    onSelect?: (row: TableRow) => void | Promise<void>;
+}
+/**
+ * Render a focusable list with a live detail pane. Resolves once the user
+ * hits Enter or quits.
+ */
+export declare function interactiveTable(opts: InteractiveTableOptions): Promise<TableRow | null>;
+export interface InteractiveDetailOptions {
+    title: string;
+    /** Pre-rendered ANSI body (may be multiline). */
+    body: string;
+    /** Footer hint. Default: `q to quit`. */
+    footer?: string;
+}
+/**
+ * Static key-value detail screen. Mostly used for `show` style commands
+ * when the user wants the alt-screen polish; equivalent content is
+ * available via the plain renderer.
+ */
+export declare function interactiveDetail(opts: InteractiveDetailOptions): Promise<void>;

package/dist/utils/multimode.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Multi-mode output dispatcher.
+ *
+ * Every read-style command (list/show/status/dashboard) should funnel its
+ * output through `runMultimode`. The data is fetched ONCE by `fetchData`,
+ * then handed to one of three renderers:
+ *
+ *   • interactive — opentui UI (default in TTY when an interactive renderer
+ *     is provided AND @opentui/core imports cleanly)
+ *   • plain       — ANSI text written to stdout (the legacy / pipe-friendly
+ *     output)
+ *   • json        — `JSON.stringify(data, null, 2)` to stdout (or a
+ *     custom shaper) — friendly for jq/scripting
+ *
+ * Mutating commands (start/stop/install/...) typically don't need this —
+ * they print progress and exit. They MAY still call `runMultimode` to emit
+ * a result object in JSON when `--json` is set; see `pickOutputMode`.
+ *
+ * The selection rules:
+ *
+ *   ┌─────────────────────┬──────────────────────────────────────────────┐
+ *   │ explicit --json     │ json renderer (or default JSON.stringify)    │
+ *   │ explicit --plain    │ plain renderer                               │
+ *   │ stdout is not a TTY │ plain renderer                               │
+ *   │ NO_COLOR, CI=true   │ plain renderer                               │
+ *   │ no interactive fn   │ plain renderer                               │
+ *   │ otherwise           │ interactive renderer (falls back to plain    │
+ *   │                     │ if @opentui/core fails to import)            │
+ *   └─────────────────────┴──────────────────────────────────────────────┘
+ */
+export type OutputMode = "auto" | "interactive" | "plain" | "json";
+export interface OutputFlags {
+    json?: boolean;
+    plain?: boolean;
+    interactive?: boolean;
+}
+export interface MultimodeOptions<T> {
+    /** Pure data fetcher. Called once. */
+    fetchData: () => Promise<T> | T;
+    /** Plain-text renderer. Required — every command needs a pipe-friendly fallback. */
+    plain: (data: T) => void | Promise<void>;
+    /**
+     * Optional opentui renderer. Only used when stdout is a TTY and opentui
+     * imports cleanly. If omitted or it fails, we fall back to `plain`.
+     */
+    interactive?: (data: T) => Promise<void>;
+    /**
+     * Optional JSON shaper. Defaults to `JSON.stringify(data, null, 2)`.
+     * Override when you need to redact secrets or reshape for scripting.
+     */
+    json?: (data: T) => unknown;
+    /** Output mode (resolved from CLI flags by `pickOutputMode`). */
+    mode?: OutputMode;
+}
+/**
+ * Resolve the desired output mode from CLI flags. The caller should pass the
+ * merged opts of the local command + the global program (since `--json`
+ * lives on the program level too).
+ */
+export declare function pickOutputMode(flags: OutputFlags): OutputMode;
+export declare function runMultimode<T>(opts: MultimodeOptions<T>): Promise<void>;
+/**
+ * Convenience: emit the data shape as JSON (used by mutating commands that
+ * still want a `--json` opt-in for scripting). Returns true if it printed.
+ */
+export declare function maybePrintJson(flags: OutputFlags, data: unknown): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibecontrols/vibe-plugin-tunnel",
-  "version": "2026.429.2",
+  "version": "2026.507.2",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -15,7 +15,7 @@
   },
   "license": "SEE LICENSE IN LICENSE",
   "scripts": {
-    "build": "bun build ./src/index.ts --outdir ./dist --target bun --minify-syntax --minify-whitespace --external elysia && tsc --emitDeclarationOnly --declaration --outDir ./dist",
+    "build": "bun build ./src/index.ts --outdir ./dist --target bun --minify-syntax --minify-whitespace --external elysia --external @opentui/core && tsc --emitDeclarationOnly --declaration --outDir ./dist",
     "dev": "tsc --watch",
     "lint": "eslint ./src",
     "format": "bunx prettier . --write",