@xopcai/xopc 0.0.254 → 0.0.256

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -192,7 +192,7 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 	},
 	{
 		id: "notes",
-		match: (path) => startsWithAny(path, ["/api/notes"]),
+		match: (path) => startsWithAny(path, ["/api/notes"]) && !/^\/api\/notes\/[^/]+\/hosted-publications(?:\/.*)?$/.test(path),
 		load: async () => {
 			const { registerNotesRoutes } = await import("./notes.js");
 			return { register: registerNotesRoutes };
@@ -224,7 +224,7 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 	},
 	{
 		id: "shares",
-		match: (path) => startsWithAny(path, ["/api/shares"]) || /^\/api\/sessions\/[^/]+\/(?:share-preview|shares|hosted-shares)(?:\/.*)?$/.test(path),
+		match: (path) => startsWithAny(path, ["/api/shares", "/api/hosted-publications"]) || /^\/api\/notes\/[^/]+\/hosted-publications(?:\/.*)?$/.test(path) || /^\/api\/sessions\/[^/]+\/(?:share-preview|shares|hosted-shares)(?:\/.*)?$/.test(path),
 		load: async () => {
 			const { registerShareRoutes } = await import("./shares.js");
 			return { register: registerShareRoutes };

package/dist/src/gateway/hono/routes/sessions.js

@@ -1,9 +1,9 @@
 import { buildSessionKey, init_session_key } from "../../../routing/session-key.js";
 import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import "../../../projects/index.js";
+import { messagesToClientHistory } from "../../../session/client-history.js";
 import { evictEmbeddedSessionRunner } from "../../../agent/embedded/session-runner.js";
 import { SessionEnvironmentService } from "../../../execution-environments/session-environment-service.js";
-import { messagesToClientHistory } from "../../../session/client-history.js";
 import { deleteMediaUrisNoLongerReferenced } from "../../../media/session-references.js";
 import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createGatewayRouteLogger, logRouteError } from "../lib/route-logger.js";

package/dist/src/gateway/hono/routes/shares.js

@@ -8,6 +8,10 @@ import { logShareAudit } from "../../../share/share-audit.js";
 import { getShareStore, shareResponseContentType } from "../../../share/share-store.js";
 import { getSiteShareStore } from "../../../share/site-share-store.js";
 import { resolveShareUrl, resolveSiteShareUrl } from "../../../share/share-url.js";
+import { SessionShareService, SessionShareSnapshotConflictError } from "../../../share/session-share-service.js";
+import { HostedPublicationPublisher, HostedSessionShareBuilder, HostedShareAuthorizationError, HostedShareBindingStore, HostedShareRemoteError } from "../../../share/hosted-session-share.js";
+import { HostedStaticSitePublicationBuilder } from "../../../share/hosted-static-site-publication.js";
+import { publishHostedStaticSite } from "../../../share/hosted-static-site-publish.js";
 import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { audienceDefaults, cleanupStagedSite, decideShareKind, forgetStagedSite, makeDescription, makeTitle, probeShareTarget, rememberStagedSite, stageSingleHtmlAsSite } from "../../../share/share-auto.js";
 import { deleteThumbnail, placeholderSvg, readThumbnail, scheduleThumbnail, thumbnailContentType, thumbnailExists } from "../../../share/share-thumbnail.js";
@@ -17,9 +21,8 @@ import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { SHARED_HTML_CSP } from "../../security/csp.js";
 import { renderFolderLandingPage, renderShareExpiredPage, renderShareLandingPage, renderSnapshotShareLandingPage } from "../../../share/share-landing.js";
 import { resolveScopedMediaReference } from "../../media-access.js";
-import { SessionShareService, SessionShareSnapshotConflictError } from "../../../share/session-share-service.js";
-import { HostedSessionShareBuilder, HostedSessionSharePublisher, HostedShareAuthorizationError, HostedShareBindingStore } from "../../../share/hosted-session-share.js";
 import { NoteShareService } from "../../../share/note-share-service.js";
+import { HostedNotePublicationBuilder, HostedNoteVersionConflictError } from "../../../share/hosted-note-publication.js";
 import { consumeSharePublicLimit } from "../../../share/share-rate-limit.js";
 import { createZipStream, planDirectoryFiles } from "../../../share/share-zip.js";
 import { basename, dirname } from "node:path";
@@ -529,7 +532,9 @@ function registerShareRoutes(authenticated, deps) {
 	const noteShares = new NoteShareService(store, service.notesServiceInstance);
 	const sessionShares = createSessionShareService(service, store);
 	const hostedBuilder = new HostedSessionShareBuilder(createSessionShareSource(service));
-	const hostedPublisher = new HostedSessionSharePublisher();
+	const hostedNoteBuilder = new HostedNotePublicationBuilder(service.notesServiceInstance);
+	const hostedSiteBuilder = new HostedStaticSitePublicationBuilder();
+	const hostedPublisher = new HostedPublicationPublisher();
 	const hostedBindings = new HostedShareBindingStore();
 	getSiteShareStore(resolveSiteShareConfig(service)).setCleanupHook((rec) => {
 		const dir = forgetStagedSite(rec.id);
@@ -696,7 +701,7 @@ function registerShareRoutes(authenticated, deps) {
 			error: { message: "Session not found" }
 		}, 404);
 		try {
-			await hostedBindings.reconcile(await hostedPublisher.list());
+			await hostedBindings.reconcile(await hostedPublisher.listPublications());
 			return c.json({
 				ok: true,
 				payload: { shares: (await hostedBindings.list(metadata.sessionId)).map(hostedBindingResponse) }
@@ -720,6 +725,17 @@ function registerShareRoutes(authenticated, deps) {
 			const now = (/* @__PURE__ */ new Date()).toISOString();
 			const binding = {
 				...result,
+				kind: "session_document",
+				source: {
+					kind: "session",
+					id: snapshot.sessionId,
+					version: String(snapshot.cutoffSeq)
+				},
+				revisionSources: { [String(result.snapshotRevision)]: {
+					kind: "session",
+					id: snapshot.sessionId,
+					version: String(snapshot.cutoffSeq)
+				} },
 				sessionId: snapshot.sessionId,
 				cutoffSeq: snapshot.cutoffSeq,
 				title: snapshot.manifest.title,
@@ -763,6 +779,20 @@ function registerShareRoutes(authenticated, deps) {
 			const binding = {
 				...previous,
 				...result,
+				kind: "session_document",
+				source: {
+					kind: "session",
+					id: snapshot.sessionId,
+					version: String(snapshot.cutoffSeq)
+				},
+				revisionSources: {
+					...previous.revisionSources,
+					[String(result.snapshotRevision)]: {
+						kind: "session",
+						id: snapshot.sessionId,
+						version: String(snapshot.cutoffSeq)
+					}
+				},
 				cutoffSeq: snapshot.cutoffSeq,
 				title: snapshot.manifest.title,
 				messageCount: snapshot.manifest.messages.length,
@@ -806,6 +836,299 @@ function registerShareRoutes(authenticated, deps) {
 			return hostedShareErrorResponse(c, err);
 		}
 	});
+	authenticated.get("/api/hosted-publications/capabilities", async (c) => {
+		try {
+			return c.json({
+				ok: true,
+				payload: await hostedPublisher.capabilities()
+			});
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.get("/api/notes/:id/hosted-publications", async (c) => {
+		try {
+			return c.json({
+				ok: true,
+				payload: { publications: (await hostedBindings.listBySource("note", c.req.param("id"))).map(hostedPublicationBindingResponse) }
+			});
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.post("/api/notes/:id/hosted-publications", async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		try {
+			const snapshot = await hostedNoteBuilder.build(c.req.param("id"), {
+				expectedNoteVersion: typeof body.expectedNoteVersion === "number" ? body.expectedNoteVersion : void 0,
+				attachmentIds: Array.isArray(body.attachmentIds) ? body.attachmentIds.filter((id) => typeof id === "string") : void 0,
+				description: typeof body.description === "string" ? body.description : void 0
+			});
+			const result = await hostedPublisher.createPublication(snapshot, {
+				ttlMs: typeof body.ttlMs === "number" ? body.ttlMs : 864e5,
+				maxViews: body.maxViews === null ? null : typeof body.maxViews === "number" ? body.maxViews : null
+			});
+			const now = (/* @__PURE__ */ new Date()).toISOString();
+			const binding = {
+				...result,
+				kind: "note_document",
+				source: {
+					kind: "note",
+					id: snapshot.sourceNoteId,
+					version: String(snapshot.sourceVersion)
+				},
+				revisionSources: { [String(result.snapshotRevision)]: {
+					kind: "note",
+					id: snapshot.sourceNoteId,
+					version: String(snapshot.sourceVersion)
+				} },
+				title: snapshot.title,
+				description: typeof body.description === "string" ? body.description.trim() || null : null,
+				attachmentCount: snapshot.attachmentCount,
+				attachmentIds: snapshot.assets.map((asset) => asset.id),
+				createdAt: now,
+				updatedAt: now,
+				revoked: false
+			};
+			await hostedBindings.upsert(binding);
+			return c.json({
+				ok: true,
+				payload: hostedPublicationBindingResponse(binding)
+			}, 201);
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.post("/api/notes/:id/hosted-publications/:publicationId/refresh", async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		const previous = (await hostedBindings.listBySource("note", c.req.param("id"))).find((binding) => binding.id === c.req.param("publicationId") && !binding.revoked);
+		if (!previous) return c.json({
+			ok: false,
+			error: { message: "Hosted publication not found" }
+		}, 404);
+		try {
+			const snapshot = await hostedNoteBuilder.build(c.req.param("id"), {
+				expectedNoteVersion: typeof body.expectedNoteVersion === "number" ? body.expectedNoteVersion : void 0,
+				attachmentIds: Array.isArray(body.attachmentIds) ? body.attachmentIds.filter((id) => typeof id === "string") : previous.attachmentIds,
+				description: previous.description ?? void 0
+			});
+			const result = await hostedPublisher.refreshPublication(previous.id, previous.snapshotRevision, previous.shareUrl, snapshot);
+			const binding = {
+				...previous,
+				...result,
+				kind: "note_document",
+				source: {
+					kind: "note",
+					id: snapshot.sourceNoteId,
+					version: String(snapshot.sourceVersion)
+				},
+				revisionSources: {
+					...previous.revisionSources,
+					[String(result.snapshotRevision)]: {
+						kind: "note",
+						id: snapshot.sourceNoteId,
+						version: String(snapshot.sourceVersion)
+					}
+				},
+				title: snapshot.title,
+				attachmentCount: snapshot.attachmentCount,
+				attachmentIds: snapshot.assets.map((asset) => asset.id),
+				updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			await hostedBindings.upsert(binding);
+			return c.json({
+				ok: true,
+				payload: hostedPublicationBindingResponse(binding)
+			});
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.post("/api/hosted-publications/static-sites", async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		if (typeof body.path !== "string") return c.json({
+			ok: false,
+			error: { message: "Static site path is required" }
+		}, 400);
+		try {
+			const workspaceRoot = await resolveWorkspaceRootForShare(service, typeof body.sessionKey === "string" ? body.sessionKey : void 0, typeof body.agentId === "string" ? body.agentId : void 0);
+			if (!workspaceRoot) return c.json({
+				ok: false,
+				error: { message: "Workspace not configured" }
+			}, 400);
+			const { binding, snapshot } = await publishHostedStaticSite({
+				workspaceRoot,
+				path: body.path,
+				title: typeof body.title === "string" ? body.title : void 0,
+				description: typeof body.description === "string" ? body.description : void 0,
+				spaFallback: typeof body.spaFallback === "boolean" ? body.spaFallback : void 0,
+				ttlMs: typeof body.ttlMs === "number" ? body.ttlMs : 864e5,
+				maxViews: body.maxViews === null ? null : typeof body.maxViews === "number" ? body.maxViews : null,
+				sessionKey: typeof body.sessionKey === "string" ? body.sessionKey : void 0,
+				agentId: typeof body.agentId === "string" ? body.agentId : void 0
+			}, {
+				builder: hostedSiteBuilder,
+				publisher: hostedPublisher,
+				bindings: hostedBindings
+			});
+			return c.json({
+				ok: true,
+				payload: {
+					...hostedPublicationBindingResponse(binding),
+					fileCount: snapshot.fileCount,
+					totalBytes: snapshot.totalBytes
+				}
+			}, 201);
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.post("/api/hosted-publications/static-sites/:publicationId/refresh", async (c) => {
+		const previous = (await hostedBindings.listAll()).find((binding) => binding.id === c.req.param("publicationId") && binding.kind === "static_site" && !binding.revoked);
+		if (!previous || previous.source.kind !== "static_site") return c.json({
+			ok: false,
+			error: { message: "Hosted publication not found" }
+		}, 404);
+		try {
+			const workspaceRoot = previous.workspaceContext?.workspaceRoot ?? await resolveWorkspaceRootForShare(service, previous.workspaceContext?.sessionKey, previous.workspaceContext?.agentId);
+			if (!workspaceRoot) return c.json({
+				ok: false,
+				error: { message: "Workspace not configured" }
+			}, 400);
+			const snapshot = await hostedSiteBuilder.build(workspaceRoot, {
+				path: previous.source.id,
+				title: previous.title,
+				description: previous.description ?? void 0,
+				spaFallback: true
+			});
+			const result = await hostedPublisher.refreshPublication(previous.id, previous.snapshotRevision, previous.shareUrl, snapshot);
+			const now = (/* @__PURE__ */ new Date()).toISOString();
+			const binding = {
+				...previous,
+				...result,
+				source: {
+					kind: "static_site",
+					id: previous.source.id,
+					version: now
+				},
+				revisionSources: {
+					...previous.revisionSources,
+					[String(result.snapshotRevision)]: {
+						kind: "static_site",
+						id: previous.source.id,
+						version: now
+					}
+				},
+				attachmentCount: snapshot.fileCount,
+				attachmentIds: snapshot.assets.map((asset) => asset.id),
+				updatedAt: now
+			};
+			await hostedBindings.upsert(binding);
+			return c.json({
+				ok: true,
+				payload: {
+					...hostedPublicationBindingResponse(binding),
+					fileCount: snapshot.fileCount,
+					totalBytes: snapshot.totalBytes
+				}
+			});
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.get("/api/hosted-publications/:publicationId/revisions", async (c) => {
+		try {
+			return c.json({
+				ok: true,
+				payload: { revisions: await hostedPublisher.listRevisions(c.req.param("publicationId")) }
+			});
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.post("/api/hosted-publications/:publicationId/rollback", async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		if (typeof body.expectedRevision !== "number" || typeof body.targetRevision !== "number") return c.json({
+			ok: false,
+			error: { message: "Expected and target revisions are required" }
+		}, 400);
+		try {
+			const id = c.req.param("publicationId");
+			const binding = (await hostedBindings.listAll()).find((item) => item.id === id);
+			const targetSource = binding?.revisionSources[String(body.targetRevision)];
+			if (binding && !targetSource) return c.json({
+				ok: false,
+				error: { message: "Publication revision source not found" }
+			}, 409);
+			const item = await hostedPublisher.rollbackPublication(id, body.expectedRevision, body.targetRevision);
+			if (binding) await hostedBindings.upsert({
+				...binding,
+				source: targetSource,
+				snapshotRevision: item.revision,
+				title: item.title,
+				description: item.description,
+				expiresAt: item.expiresAt,
+				maxViews: item.maxViews,
+				viewCount: item.viewCount,
+				updatedAt: item.updatedAt
+			});
+			return c.json({
+				ok: true,
+				payload: {
+					publicationId: id,
+					revision: body.targetRevision
+				}
+			});
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.get("/api/hosted-publications", async (c) => {
+		try {
+			const [remote, localBindings] = await Promise.all([hostedPublisher.listPublications(), hostedBindings.listAll()]);
+			const bindingById = new Map(localBindings.map((binding) => [binding.id, binding]));
+			return c.json({
+				ok: true,
+				payload: { publications: remote.map((item) => {
+					const binding = bindingById.get(item.id);
+					return {
+						id: item.id,
+						kind: item.kind,
+						delivery: item.deliveryMode,
+						title: item.title,
+						description: item.description,
+						status: item.status,
+						revision: item.revision,
+						expiresAt: item.expiresAt,
+						maxViews: item.maxViews,
+						viewCount: item.viewCount,
+						createdAt: item.createdAt,
+						updatedAt: item.updatedAt,
+						owner: item.owner ?? null,
+						workspaceId: item.workspaceId ?? null,
+						createdByPrincipalId: item.createdByPrincipalId ?? null,
+						shareUrl: binding?.shareUrl ?? null,
+						managedFromThisDevice: Boolean(binding)
+					};
+				}) }
+			});
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.delete("/api/hosted-publications/:publicationId", async (c) => {
+		try {
+			const id = c.req.param("publicationId");
+			await hostedPublisher.revokePublication(id);
+			await hostedBindings.markRevoked(id);
+			return c.json({
+				ok: true,
+				payload: { revoked: id }
+			});
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
 	authenticated.post("/api/shares", async (c) => {
 		const gatewayToken = extractToken({ authorization: c.req.header("authorization") ?? void 0 });
 		if (!gatewayToken) return c.json({
@@ -993,6 +1316,61 @@ function registerShareRoutes(authenticated, deps) {
 				const siteStore = getSiteShareStore(resolveSiteShareConfig(service));
 				let sitePath = path;
 				let stagedDir = null;
+				const titleOut = makeTitle(probe.kind === "directory" ? path.split("/").pop() || path : path, title);
+				if (resolveSiteShareUrl({
+					...urlCtx,
+					token: "reachability-check",
+					subdomainLabel: "reachability-check",
+					publicHostSuffix: siteStore.getConfig().publicHostSuffix
+				}).reachability !== "public") {
+					const { binding } = await publishHostedStaticSite({
+						workspaceRoot,
+						path: sitePath,
+						title: titleOut,
+						description,
+						spaFallback: true,
+						ttlMs,
+						maxViews: maxViews ?? null,
+						sessionKey,
+						agentId
+					}, {
+						builder: hostedSiteBuilder,
+						publisher: hostedPublisher,
+						bindings: hostedBindings
+					});
+					return c.json({
+						ok: true,
+						payload: {
+							share: {
+								id: binding.id,
+								kind: "site",
+								delivery: "hosted",
+								title: binding.title,
+								description: makeDescription({
+									audience,
+									expiresAt: binding.expiresAt,
+									override: description
+								}),
+								shareUrl: binding.shareUrl,
+								lanUrl: null,
+								reachability: "public",
+								reachabilityHint: null,
+								expiresAt: binding.expiresAt,
+								maxViews: binding.maxViews
+							},
+							thumbnail: {
+								url: "",
+								status: "unavailable",
+								width: SHARE_CONFIG_DEFAULTS.thumbnail.viewportWidth,
+								height: SHARE_CONFIG_DEFAULTS.thumbnail.viewportHeight
+							},
+							routing: {
+								reason: decision.reason,
+								hint: decision.hint
+							}
+						}
+					}, 201);
+				}
 				if (probe.kind === "file") {
 					const staged = await stageSingleHtmlAsSite(workspaceRoot, probe.absolutePath);
 					sitePath = staged.relativePath;
@@ -1028,7 +1406,6 @@ function registerShareRoutes(authenticated, deps) {
 					}, thumbnailRenderContext(service));
 					siteStore.setThumbnailStatus(siteRec.id, "pending");
 				}
-				const titleOut = makeTitle(probe.kind === "directory" ? path.split("/").pop() || path : path, title);
 				return c.json({
 					ok: true,
 					payload: {
@@ -1267,14 +1644,34 @@ function hostedBindingResponse(binding) {
 		cutoffSeq: binding.cutoffSeq
 	};
 }
+function hostedPublicationBindingResponse(binding) {
+	return {
+		id: binding.id,
+		kind: binding.kind,
+		delivery: "hosted_snapshot",
+		shareUrl: binding.shareUrl,
+		expiresAt: binding.expiresAt,
+		maxViews: binding.maxViews,
+		viewCount: binding.viewCount,
+		revision: binding.snapshotRevision,
+		title: binding.title,
+		description: binding.description,
+		attachmentCount: binding.attachmentCount,
+		createdAt: binding.createdAt,
+		updatedAt: binding.updatedAt,
+		revoked: binding.revoked,
+		expired: Date.now() >= new Date(binding.expiresAt).getTime(),
+		source: binding.source
+	};
+}
 function hostedShareErrorResponse(c, err) {
 	const message = err instanceof Error ? err.message : String(err);
-	const status = err instanceof HostedShareAuthorizationError ? 401 : err instanceof SessionShareSnapshotConflictError ? 409 : message === "Session not found" || message === "Hosted share not found" ? 404 : 400;
+	const status = err instanceof HostedShareAuthorizationError ? 401 : err instanceof HostedShareRemoteError && err.status === 403 ? 403 : err instanceof SessionShareSnapshotConflictError || err instanceof HostedNoteVersionConflictError ? 409 : message === "Session not found" || message === "Hosted share not found" || message === "Hosted publication not found" || message === "Note not found" ? 404 : 400;
 	return c.json({
 		ok: false,
 		error: {
 			message,
-			code: err instanceof HostedShareAuthorizationError ? "hosted_share_auth_required" : status === 409 ? "session_snapshot_conflict" : void 0
+			code: err instanceof HostedShareAuthorizationError ? "hosted_share_auth_required" : err instanceof HostedShareRemoteError && err.status === 403 ? err.code ?? "hosted_share_forbidden" : status === 409 ? "session_snapshot_conflict" : void 0
 		}
 	}, status);
 }

package/dist/src/gateway/hono/routes/site-shares.js

@@ -1,16 +1,29 @@
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
 import { getSiteShareStore } from "../../../share/site-share-store.js";
+import { resolveSiteShareUrl } from "../../../share/share-url.js";
+import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { extractToken } from "../../auth.js";
 import { createHash } from "node:crypto";
 //#region src/gateway/hono/routes/site-shares.ts
 function hashGatewayToken(token) {
 	return createHash("sha256").update(token, "utf8").digest("hex").slice(0, 12);
 }
-function buildShareUrls(record, publicHostSuffix, gatewayHost, gatewayPort) {
+function buildShareUrls(record, publicHostSuffix, service) {
+	const label = record.subdomain ?? record.token;
+	const gatewayHost = resolveGatewayEffectiveHost(service.currentConfig);
+	const gatewayPort = service.currentConfig.gateway.port ?? 18790;
+	const subpathUrl = `http://${gatewayHost}:${gatewayPort}/site/${record.token}/`;
 	return {
-		publicUrl: `https://${record.subdomain ?? record.token}.${publicHostSuffix}/`,
-		subpathUrl: `http://${gatewayHost}:${gatewayPort}/site/${record.token}/`
+		publicUrl: resolveSiteShareUrl({
+			gatewayHost,
+			gatewayPort,
+			reverseProxyPublicUrl: resolveReverseProxyPublicUrl(service.currentConfig),
+			token: record.token,
+			subdomainLabel: label,
+			publicHostSuffix
+		}).shareUrl,
+		subpathUrl
 	};
 }
 function registerSiteShareRoutes(authenticated, deps) {
@@ -85,9 +98,7 @@ function registerSiteShareRoutes(authenticated, deps) {
 				workspaceRoot,
 				gatewayTokenHash: hashGatewayToken(gatewayToken)
 			});
-			const cfg = store.getConfig();
-			const gw = service.currentConfig.gateway;
-			const urls = buildShareUrls(record, cfg.publicHostSuffix, resolveGatewayEffectiveHost(service.currentConfig), gw.port ?? 18790);
+			const urls = buildShareUrls(record, store.getConfig().publicHostSuffix, service);
 			return c.json({
 				ok: true,
 				payload: {
@@ -114,11 +125,8 @@ function registerSiteShareRoutes(authenticated, deps) {
 	authenticated.get("/api/site-shares", (c) => {
 		store.updateConfig(resolveSiteShareConfig(service));
 		const cfg = store.getConfig();
-		const gw = service.currentConfig.gateway;
-		const gatewayHost = resolveGatewayEffectiveHost(service.currentConfig);
-		const gatewayPort = gw.port ?? 18790;
 		const items = store.getAllShares().map((r) => {
-			const urls = buildShareUrls(r, cfg.publicHostSuffix, gatewayHost, gatewayPort);
+			const urls = buildShareUrls(r, cfg.publicHostSuffix, service);
 			const expired = Date.now() >= new Date(r.expiresAt).getTime();
 			return {
 				id: r.id,
@@ -150,9 +158,7 @@ function registerSiteShareRoutes(authenticated, deps) {
 			ok: false,
 			error: { message: "Not found" }
 		}, 404);
-		const cfg = store.getConfig();
-		const gw = service.currentConfig.gateway;
-		const urls = buildShareUrls(record, cfg.publicHostSuffix, resolveGatewayEffectiveHost(service.currentConfig), gw.port ?? 18790);
+		const urls = buildShareUrls(record, store.getConfig().publicHostSuffix, service);
 		return c.json({
 			ok: true,
 			payload: {

package/dist/src/gateway/hono/routes/tunnel.js

@@ -1,8 +1,8 @@
 import { init_public_url, validatePublicUrl } from "../../../config/public-url.js";
-import { extractToken } from "../../auth.js";
 import { TUNNEL_REGISTRATION_SECRET_REQUIRED_CODE, TunnelRegistrationSecretError, getTunnelRegistrationSecretMeta, readTunnelRegistrationSecretFromConfigOnly, resolveTunnelBrokerUrl } from "../../../tunnel/env.js";
 import { logTunnelAudit } from "../../../tunnel/tunnel-audit.js";
 import { getTunnelService, hashGatewayToken } from "../../../tunnel/tunnel-service.js";
+import { extractToken } from "../../auth.js";
 import { TUNNEL_CONSENT_REQUIRED_CODE, TunnelConsentError, assertTunnelMayStart, getTunnelConsentState } from "../../../tunnel/consent.js";
 import { configureTunnelFromGatewayConfig } from "../../../tunnel/gateway-lifecycle.js";
 import { applyTunnelConsentToConfig, mergeTunnelConfigPatch, setTunnelEnabledInConfig } from "../../../tunnel/tunnel-config.js";