@xopcai/xopc 0.0.83 → 0.0.85

package/dist/src/share/site-proxy.js

@@ -0,0 +1,234 @@
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
+import { request } from "undici";
+import { Readable } from "node:stream";
+import * as ws from "ws";
+//#region src/share/site-proxy.ts
+init_logger();
+const wsAny = ws;
+const WSClient = wsAny.WebSocket ?? wsAny.default;
+const WebSocketServer = wsAny.WebSocketServer ?? wsAny.default?.WebSocketServer;
+const log = createLogger("SiteProxy");
+const HOP_BY_HOP_HEADERS = new Set([
+	"connection",
+	"keep-alive",
+	"proxy-authenticate",
+	"proxy-authorization",
+	"te",
+	"trailer",
+	"transfer-encoding",
+	"upgrade",
+	"host",
+	"content-length"
+]);
+const FORWARDED_HEADERS_SKIP = new Set([
+	"host",
+	"x-forwarded-for",
+	"x-forwarded-host",
+	"x-forwarded-proto",
+	"x-real-ip",
+	"connection",
+	"keep-alive",
+	"upgrade",
+	"transfer-encoding"
+]);
+/** Build the upstream URL preserving search params from the incoming request. */
+function buildUpstreamUrl(source, innerPath, search) {
+	return `${source.upstreamUrl.replace(/\/+$/, "")}${innerPath.startsWith("/") ? innerPath : `/${innerPath}`}${search}`;
+}
+function filterRequestHeaders(headers) {
+	const out = {};
+	headers.forEach((value, key) => {
+		const lower = key.toLowerCase();
+		if (FORWARDED_HEADERS_SKIP.has(lower)) return;
+		out[lower] = value;
+	});
+	return out;
+}
+function rewriteSetCookie(value, basePrefix) {
+	if (!basePrefix) return value;
+	return value.replace(/(;\s*Path=)([^;]*)/gi, (_match, prefix, path) => {
+		if (path.startsWith(basePrefix)) return _match;
+		if (path.startsWith("/")) return `${prefix}${basePrefix}${path}`;
+		return `${prefix}${basePrefix}/${path}`;
+	});
+}
+function rewriteLocation(value, source, basePrefix) {
+	try {
+		const upstream = new URL(source.upstreamUrl);
+		const target = new URL(value, source.upstreamUrl);
+		if (target.host === upstream.host) return `${basePrefix}${target.pathname}${target.search}${target.hash}`;
+		return value;
+	} catch {
+		if (value.startsWith("/") && !value.startsWith("//")) return `${basePrefix}${value}`;
+		return value;
+	}
+}
+/**
+* Forward an HTTP request to the upstream and return a streaming Response.
+* Handles header filtering, forwarded headers, Set-Cookie / Location rewriting,
+* and a per-request timeout.
+*/
+async function forwardHttpRequest(record, store, req, ctx) {
+	if (record.source.kind !== "proxy") return { response: new Response("not_proxy", { status: 400 }) };
+	const source = record.source;
+	const cfg = store.getConfig().proxy;
+	const upstreamUrl = buildUpstreamUrl(source, ctx.innerPath, ctx.originalUrl.search);
+	const requestHeaders = filterRequestHeaders(req.headers);
+	const forwardedFor = req.headers.get("x-forwarded-for");
+	requestHeaders["x-forwarded-for"] = forwardedFor ? `${forwardedFor}, ${ctx.clientIp}` : ctx.clientIp;
+	requestHeaders["x-forwarded-host"] = req.headers.get("host") ?? "";
+	requestHeaders["x-forwarded-proto"] = ctx.forwardedProto;
+	requestHeaders["x-real-ip"] = ctx.clientIp;
+	requestHeaders.host = new URL(source.upstreamUrl).host;
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(), cfg.requestTimeoutMs);
+	timer.unref?.();
+	try {
+		const method = req.method.toUpperCase();
+		const upstream = await request(upstreamUrl, {
+			method,
+			headers: requestHeaders,
+			body: method !== "GET" && method !== "HEAD" && req.body != null ? Readable.fromWeb(req.body) : void 0,
+			signal: controller.signal,
+			bodyTimeout: cfg.requestTimeoutMs,
+			headersTimeout: cfg.requestTimeoutMs
+		});
+		const responseHeaders = new Headers();
+		for (const [rawKey, rawValue] of Object.entries(upstream.headers)) {
+			if (rawValue === void 0) continue;
+			const lower = rawKey.toLowerCase();
+			if (HOP_BY_HOP_HEADERS.has(lower)) continue;
+			const values = Array.isArray(rawValue) ? rawValue : [rawValue];
+			for (const value of values) {
+				if (typeof value !== "string") continue;
+				let outValue = value;
+				if (lower === "set-cookie" && source.rewriteSetCookiePath) outValue = rewriteSetCookie(value, ctx.basePrefix);
+				else if (lower === "location") outValue = rewriteLocation(value, source, ctx.basePrefix);
+				responseHeaders.append(rawKey, outValue);
+			}
+		}
+		const body = upstream.body ? Readable.toWeb(upstream.body) : null;
+		store.recordRequest(record.id, ctx.clientIp);
+		return { response: new Response(body, {
+			status: upstream.statusCode,
+			headers: responseHeaders
+		}) };
+	} catch (err) {
+		log.warn({
+			err,
+			shareId: record.id,
+			upstreamUrl
+		}, `Proxy request failed: ${err instanceof Error ? err.message : String(err)}`);
+		return { response: new Response("Bad gateway", { status: 502 }) };
+	} finally {
+		clearTimeout(timer);
+	}
+}
+const wsServer = new WebSocketServer({ noServer: true });
+function handleProxyWebSocketUpgrade(args) {
+	const { record, store, req, socket, head, innerPath, basePrefix, clientIp } = args;
+	if (record.source.kind !== "proxy") {
+		socket.destroy();
+		return;
+	}
+	const source = record.source;
+	const cfg = store.getConfig().proxy;
+	if (!cfg.forwardWebSocket || !source.forwardWebSocket) {
+		socket.destroy();
+		return;
+	}
+	const upstreamBase = new URL(source.upstreamUrl);
+	const wsProto = upstreamBase.protocol === "https:" ? "wss:" : "ws:";
+	const search = req.url ? new URL(req.url, "http://localhost").search : "";
+	const path = innerPath.startsWith("/") ? innerPath : `/${innerPath}`;
+	const upstreamWsUrl = `${wsProto}//${upstreamBase.host}${path}${search}`;
+	const forwardHeaders = {};
+	for (const [rawKey, rawValue] of Object.entries(req.headers)) {
+		if (rawValue === void 0) continue;
+		const lower = rawKey.toLowerCase();
+		if (FORWARDED_HEADERS_SKIP.has(lower)) continue;
+		if (lower.startsWith("sec-websocket-")) continue;
+		forwardHeaders[lower] = Array.isArray(rawValue) ? rawValue.join(", ") : String(rawValue);
+	}
+	const xff = req.headers["x-forwarded-for"];
+	forwardHeaders["x-forwarded-for"] = xff ? `${xff}, ${clientIp}` : clientIp;
+	forwardHeaders["x-forwarded-host"] = String(req.headers.host ?? "");
+	forwardHeaders["x-forwarded-proto"] = "http";
+	forwardHeaders["x-real-ip"] = clientIp;
+	forwardHeaders.host = upstreamBase.host;
+	let upstreamWs;
+	try {
+		upstreamWs = new WSClient(upstreamWsUrl, {
+			headers: forwardHeaders,
+			handshakeTimeout: cfg.requestTimeoutMs
+		});
+	} catch (err) {
+		log.warn({
+			err,
+			shareId: record.id
+		}, "WebSocket upstream connect threw");
+		socket.destroy();
+		return;
+	}
+	let idleTimer = null;
+	const resetIdleTimer = (kill) => {
+		if (idleTimer) clearTimeout(idleTimer);
+		idleTimer = setTimeout(kill, cfg.wsIdleTimeoutMs);
+		idleTimer.unref?.();
+	};
+	upstreamWs.once("open", () => {
+		wsServer.handleUpgrade(req, socket, head, (clientWs) => {
+			store.recordRequest(record.id, clientIp);
+			const killAll = () => {
+				if (idleTimer) clearTimeout(idleTimer);
+				try {
+					clientWs.close();
+				} catch {}
+				try {
+					upstreamWs.close();
+				} catch {}
+			};
+			resetIdleTimer(killAll);
+			const pump = (from, to) => {
+				from.on("message", (data, isBinary) => {
+					resetIdleTimer(killAll);
+					try {
+						to.send(data, { binary: isBinary });
+					} catch (err) {
+						log.warn({
+							err,
+							shareId: record.id
+						}, "WS forward failed");
+						killAll();
+					}
+				});
+				from.on("close", killAll);
+				from.on("error", (err) => {
+					log.warn({
+						err,
+						shareId: record.id
+					}, "WS error");
+					killAll();
+				});
+			};
+			pump(clientWs, upstreamWs);
+			pump(upstreamWs, clientWs);
+		});
+	});
+	upstreamWs.once("error", (err) => {
+		log.warn({
+			err,
+			shareId: record.id,
+			upstreamWsUrl
+		}, "WS upstream error");
+		try {
+			socket.write("HTTP/1.1 502 Bad Gateway\r\nConnection: close\r\n\r\n");
+		} catch {}
+		socket.destroy();
+	});
+}
+//#endregion
+export { forwardHttpRequest, handleProxyWebSocketUpgrade };
+
+//# sourceMappingURL=site-proxy.js.map

package/dist/src/share/site-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-proxy.js","names":["undiciRequest"],"sources":["../../../src/share/site-proxy.ts"],"sourcesContent":["import { request as undiciRequest } from 'undici';\nimport { Readable } from 'node:stream';\nimport * as ws from 'ws';\n\n// `ws` resolves differently under various loaders (tsx's CJS bridge vs Node's\n// native ESM wrapper). Reach into both shapes so the class refs stay stable.\nconst wsAny = ws as unknown as {\n  default?: typeof import('ws').WebSocket & { WebSocketServer?: typeof import('ws').WebSocketServer };\n  WebSocket?: typeof import('ws').WebSocket;\n  WebSocketServer?: typeof import('ws').WebSocketServer;\n};\nconst WSClient = (wsAny.WebSocket ?? wsAny.default) as typeof import('ws').WebSocket;\nconst WebSocketServer = (wsAny.WebSocketServer ?? wsAny.default?.WebSocketServer) as typeof import('ws').WebSocketServer;\ntype WSClient = import('ws').WebSocket;\nimport type { IncomingMessage } from 'node:http';\nimport type { Socket } from 'node:net';\n\nimport { createLogger } from '../utils/logger.js';\nimport type { SiteShareRecord, SiteProxySource } from './site-share-types.js';\nimport type { SiteShareStore } from './site-share-store.js';\n\nconst log = createLogger('SiteProxy');\n\nconst HOP_BY_HOP_HEADERS = new Set([\n  'connection',\n  'keep-alive',\n  'proxy-authenticate',\n  'proxy-authorization',\n  'te',\n  'trailer',\n  'transfer-encoding',\n  'upgrade',\n  'host',\n  'content-length',\n]);\n\nconst FORWARDED_HEADERS_SKIP = new Set([\n  'host',\n  'x-forwarded-for',\n  'x-forwarded-host',\n  'x-forwarded-proto',\n  'x-real-ip',\n  'connection',\n  'keep-alive',\n  'upgrade',\n  'transfer-encoding',\n]);\n\nexport interface ProxyRequestContext {\n  /** Path inside the share to forward (no leading basePrefix). */\n  innerPath: string;\n  /** Path prefix the share is mounted under (used for Set-Cookie/Location rewrite). For subdomain mode use ''. */\n  basePrefix: string;\n  /** Client IP for forwarded headers and audit. */\n  clientIp: string;\n  /** Full request URL (for forwarded proto). */\n  originalUrl: URL;\n  /** Whether the request reached us via HTTPS at the edge. */\n  forwardedProto: 'http' | 'https';\n}\n\nexport interface ProxyResult {\n  response: Response;\n}\n\n/** Build the upstream URL preserving search params from the incoming request. */\nfunction buildUpstreamUrl(source: SiteProxySource, innerPath: string, search: string): string {\n  const base = source.upstreamUrl.replace(/\\/+$/, '');\n  const path = innerPath.startsWith('/') ? innerPath : `/${innerPath}`;\n  return `${base}${path}${search}`;\n}\n\nfunction filterRequestHeaders(headers: Headers): Record<string, string> {\n  const out: Record<string, string> = {};\n  headers.forEach((value, key) => {\n    const lower = key.toLowerCase();\n    if (FORWARDED_HEADERS_SKIP.has(lower)) return;\n    out[lower] = value;\n  });\n  return out;\n}\n\nfunction rewriteSetCookie(value: string, basePrefix: string): string {\n  if (!basePrefix) return value;\n  return value.replace(/(;\\s*Path=)([^;]*)/gi, (_match, prefix, path) => {\n    if (path.startsWith(basePrefix)) return _match;\n    if (path.startsWith('/')) return `${prefix}${basePrefix}${path}`;\n    return `${prefix}${basePrefix}/${path}`;\n  });\n}\n\nfunction rewriteLocation(value: string, source: SiteProxySource, basePrefix: string): string {\n  try {\n    const upstream = new URL(source.upstreamUrl);\n    const target = new URL(value, source.upstreamUrl);\n    if (target.host === upstream.host) {\n      return `${basePrefix}${target.pathname}${target.search}${target.hash}`;\n    }\n    return value;\n  } catch {\n    // Relative path\n    if (value.startsWith('/') && !value.startsWith('//')) {\n      return `${basePrefix}${value}`;\n    }\n    return value;\n  }\n}\n\n/**\n * Forward an HTTP request to the upstream and return a streaming Response.\n * Handles header filtering, forwarded headers, Set-Cookie / Location rewriting,\n * and a per-request timeout.\n */\nexport async function forwardHttpRequest(\n  record: SiteShareRecord,\n  store: SiteShareStore,\n  req: Request,\n  ctx: ProxyRequestContext,\n): Promise<ProxyResult> {\n  if (record.source.kind !== 'proxy') {\n    return { response: new Response('not_proxy', { status: 400 }) };\n  }\n  const source = record.source;\n  const cfg = store.getConfig().proxy;\n\n  const upstreamUrl = buildUpstreamUrl(source, ctx.innerPath, ctx.originalUrl.search);\n  const requestHeaders = filterRequestHeaders(req.headers);\n\n  // Forwarded headers\n  const forwardedFor = req.headers.get('x-forwarded-for');\n  requestHeaders['x-forwarded-for'] = forwardedFor ? `${forwardedFor}, ${ctx.clientIp}` : ctx.clientIp;\n  requestHeaders['x-forwarded-host'] = req.headers.get('host') ?? '';\n  requestHeaders['x-forwarded-proto'] = ctx.forwardedProto;\n  requestHeaders['x-real-ip'] = ctx.clientIp;\n  // Override Host to match upstream so vhost-routed dev servers behave\n  const upstreamHost = new URL(source.upstreamUrl).host;\n  requestHeaders.host = upstreamHost;\n\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), cfg.requestTimeoutMs);\n  timer.unref?.();\n\n  try {\n    const method = req.method.toUpperCase();\n    const hasBody = method !== 'GET' && method !== 'HEAD' && req.body != null;\n    const upstream = await undiciRequest(upstreamUrl, {\n      method: method as Parameters<typeof undiciRequest>[1]['method'],\n      headers: requestHeaders,\n      body: hasBody ? (Readable.fromWeb(req.body as never) as never) : undefined,\n      signal: controller.signal,\n      bodyTimeout: cfg.requestTimeoutMs,\n      headersTimeout: cfg.requestTimeoutMs,\n    });\n\n    const responseHeaders = new Headers();\n    for (const [rawKey, rawValue] of Object.entries(upstream.headers)) {\n      if (rawValue === undefined) continue;\n      const lower = rawKey.toLowerCase();\n      if (HOP_BY_HOP_HEADERS.has(lower)) continue;\n      const values = Array.isArray(rawValue) ? rawValue : [rawValue];\n      for (const value of values) {\n        if (typeof value !== 'string') continue;\n        let outValue = value;\n        if (lower === 'set-cookie' && source.rewriteSetCookiePath) {\n          outValue = rewriteSetCookie(value, ctx.basePrefix);\n        } else if (lower === 'location') {\n          outValue = rewriteLocation(value, source, ctx.basePrefix);\n        }\n        responseHeaders.append(rawKey, outValue);\n      }\n    }\n\n    const body = upstream.body\n      ? (Readable.toWeb(upstream.body as unknown as Readable) as ReadableStream)\n      : null;\n\n    store.recordRequest(record.id, ctx.clientIp);\n\n    return {\n      response: new Response(body, {\n        status: upstream.statusCode,\n        headers: responseHeaders,\n      }),\n    };\n  } catch (err) {\n    log.warn(\n      { err, shareId: record.id, upstreamUrl },\n      `Proxy request failed: ${err instanceof Error ? err.message : String(err)}`,\n    );\n    return {\n      response: new Response('Bad gateway', { status: 502 }),\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\n// ── WebSocket bridge ──────────────────────────────────────────────────────────\n\nconst wsServer = new WebSocketServer({ noServer: true });\n\nexport function handleProxyWebSocketUpgrade(args: {\n  record: SiteShareRecord;\n  store: SiteShareStore;\n  req: IncomingMessage;\n  socket: Socket;\n  head: Buffer;\n  innerPath: string;\n  basePrefix: string;\n  clientIp: string;\n}): void {\n  const { record, store, req, socket, head, innerPath, basePrefix, clientIp } = args;\n  if (record.source.kind !== 'proxy') {\n    socket.destroy();\n    return;\n  }\n  const source = record.source;\n  const cfg = store.getConfig().proxy;\n  if (!cfg.forwardWebSocket || !source.forwardWebSocket) {\n    socket.destroy();\n    return;\n  }\n\n  const upstreamBase = new URL(source.upstreamUrl);\n  const wsProto = upstreamBase.protocol === 'https:' ? 'wss:' : 'ws:';\n  const search = req.url ? new URL(req.url, 'http://localhost').search : '';\n  const path = innerPath.startsWith('/') ? innerPath : `/${innerPath}`;\n  const upstreamWsUrl = `${wsProto}//${upstreamBase.host}${path}${search}`;\n\n  const forwardHeaders: Record<string, string> = {};\n  for (const [rawKey, rawValue] of Object.entries(req.headers)) {\n    if (rawValue === undefined) continue;\n    const lower = rawKey.toLowerCase();\n    if (FORWARDED_HEADERS_SKIP.has(lower)) continue;\n    if (lower.startsWith('sec-websocket-')) continue; // ws lib rebuilds these\n    forwardHeaders[lower] = Array.isArray(rawValue) ? rawValue.join(', ') : String(rawValue);\n  }\n  const xff = req.headers['x-forwarded-for'];\n  forwardHeaders['x-forwarded-for'] = xff ? `${xff}, ${clientIp}` : clientIp;\n  forwardHeaders['x-forwarded-host'] = String(req.headers.host ?? '');\n  forwardHeaders['x-forwarded-proto'] = 'http';\n  forwardHeaders['x-real-ip'] = clientIp;\n  forwardHeaders.host = upstreamBase.host;\n\n  let upstreamWs: WSClient;\n  try {\n    upstreamWs = new WSClient(upstreamWsUrl, {\n      headers: forwardHeaders,\n      handshakeTimeout: cfg.requestTimeoutMs,\n    });\n  } catch (err) {\n    log.warn({ err, shareId: record.id }, 'WebSocket upstream connect threw');\n    socket.destroy();\n    return;\n  }\n\n  let idleTimer: ReturnType<typeof setTimeout> | null = null;\n  const resetIdleTimer = (kill: () => void) => {\n    if (idleTimer) clearTimeout(idleTimer);\n    idleTimer = setTimeout(kill, cfg.wsIdleTimeoutMs);\n    idleTimer.unref?.();\n  };\n\n  upstreamWs.once('open', () => {\n    wsServer.handleUpgrade(req, socket, head, (clientWs) => {\n      void basePrefix;\n      store.recordRequest(record.id, clientIp);\n\n      const killAll = () => {\n        if (idleTimer) clearTimeout(idleTimer);\n        try {\n          clientWs.close();\n        } catch {\n          /* ignore */\n        }\n        try {\n          upstreamWs.close();\n        } catch {\n          /* ignore */\n        }\n      };\n\n      resetIdleTimer(killAll);\n\n      const pump = (from: WSClient, to: WSClient): void => {\n        from.on('message', (data: Buffer | ArrayBuffer | Buffer[], isBinary: boolean) => {\n          resetIdleTimer(killAll);\n          try {\n            to.send(data as unknown as Buffer, { binary: isBinary });\n          } catch (err) {\n            log.warn({ err, shareId: record.id }, 'WS forward failed');\n            killAll();\n          }\n        });\n        from.on('close', killAll);\n        from.on('error', (err) => {\n          log.warn({ err, shareId: record.id }, 'WS error');\n          killAll();\n        });\n      };\n\n      pump(clientWs as unknown as WSClient, upstreamWs);\n      pump(upstreamWs, clientWs as unknown as WSClient);\n    });\n  });\n\n  upstreamWs.once('error', (err) => {\n    log.warn({ err, shareId: record.id, upstreamWsUrl }, 'WS upstream error');\n    try {\n      socket.write('HTTP/1.1 502 Bad Gateway\\r\\nConnection: close\\r\\n\\r\\n');\n    } catch {\n      /* ignore */\n    }\n    socket.destroy();\n  });\n}\n"],"mappings":";;;;;;aAiBkD;AAXlD,MAAM,QAAQ;AAKd,MAAM,WAAY,MAAM,aAAa,MAAM;AAC3C,MAAM,kBAAmB,MAAM,mBAAmB,MAAM,SAAS;AASjE,MAAM,MAAM,aAAa,YAAY;AAErC,MAAM,qBAAqB,IAAI,IAAI;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,MAAM,yBAAyB,IAAI,IAAI;CACrC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;;AAoBF,SAAS,iBAAiB,QAAyB,WAAmB,QAAwB;AAG5F,QAAO,GAFM,OAAO,YAAY,QAAQ,QAAQ,GAElC,GADD,UAAU,WAAW,IAAI,GAAG,YAAY,IAAI,cACjC;;AAG1B,SAAS,qBAAqB,SAA0C;CACtE,MAAM,MAA8B,EAAE;AACtC,SAAQ,SAAS,OAAO,QAAQ;EAC9B,MAAM,QAAQ,IAAI,aAAa;AAC/B,MAAI,uBAAuB,IAAI,MAAM,CAAE;AACvC,MAAI,SAAS;GACb;AACF,QAAO;;AAGT,SAAS,iBAAiB,OAAe,YAA4B;AACnE,KAAI,CAAC,WAAY,QAAO;AACxB,QAAO,MAAM,QAAQ,yBAAyB,QAAQ,QAAQ,SAAS;AACrE,MAAI,KAAK,WAAW,WAAW,CAAE,QAAO;AACxC,MAAI,KAAK,WAAW,IAAI,CAAE,QAAO,GAAG,SAAS,aAAa;AAC1D,SAAO,GAAG,SAAS,WAAW,GAAG;GACjC;;AAGJ,SAAS,gBAAgB,OAAe,QAAyB,YAA4B;AAC3F,KAAI;EACF,MAAM,WAAW,IAAI,IAAI,OAAO,YAAY;EAC5C,MAAM,SAAS,IAAI,IAAI,OAAO,OAAO,YAAY;AACjD,MAAI,OAAO,SAAS,SAAS,KAC3B,QAAO,GAAG,aAAa,OAAO,WAAW,OAAO,SAAS,OAAO;AAElE,SAAO;SACD;AAEN,MAAI,MAAM,WAAW,IAAI,IAAI,CAAC,MAAM,WAAW,KAAK,CAClD,QAAO,GAAG,aAAa;AAEzB,SAAO;;;;;;;;AASX,eAAsB,mBACpB,QACA,OACA,KACA,KACsB;AACtB,KAAI,OAAO,OAAO,SAAS,QACzB,QAAO,EAAE,UAAU,IAAI,SAAS,aAAa,EAAE,QAAQ,KAAK,CAAC,EAAE;CAEjE,MAAM,SAAS,OAAO;CACtB,MAAM,MAAM,MAAM,WAAW,CAAC;CAE9B,MAAM,cAAc,iBAAiB,QAAQ,IAAI,WAAW,IAAI,YAAY,OAAO;CACnF,MAAM,iBAAiB,qBAAqB,IAAI,QAAQ;CAGxD,MAAM,eAAe,IAAI,QAAQ,IAAI,kBAAkB;AACvD,gBAAe,qBAAqB,eAAe,GAAG,aAAa,IAAI,IAAI,aAAa,IAAI;AAC5F,gBAAe,sBAAsB,IAAI,QAAQ,IAAI,OAAO,IAAI;AAChE,gBAAe,uBAAuB,IAAI;AAC1C,gBAAe,eAAe,IAAI;AAGlC,gBAAe,OADM,IAAI,IAAI,OAAO,YAAY,CAAC;CAGjD,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,IAAI,iBAAiB;AACxE,OAAM,SAAS;AAEf,KAAI;EACF,MAAM,SAAS,IAAI,OAAO,aAAa;EAEvC,MAAM,WAAW,MAAMA,QAAc,aAAa;GACxC;GACR,SAAS;GACT,MAJc,WAAW,SAAS,WAAW,UAAU,IAAI,QAAQ,OAIlD,SAAS,QAAQ,IAAI,KAAc,GAAa,KAAA;GACjE,QAAQ,WAAW;GACnB,aAAa,IAAI;GACjB,gBAAgB,IAAI;GACrB,CAAC;EAEF,MAAM,kBAAkB,IAAI,SAAS;AACrC,OAAK,MAAM,CAAC,QAAQ,aAAa,OAAO,QAAQ,SAAS,QAAQ,EAAE;AACjE,OAAI,aAAa,KAAA,EAAW;GAC5B,MAAM,QAAQ,OAAO,aAAa;AAClC,OAAI,mBAAmB,IAAI,MAAM,CAAE;GACnC,MAAM,SAAS,MAAM,QAAQ,SAAS,GAAG,WAAW,CAAC,SAAS;AAC9D,QAAK,MAAM,SAAS,QAAQ;AAC1B,QAAI,OAAO,UAAU,SAAU;IAC/B,IAAI,WAAW;AACf,QAAI,UAAU,gBAAgB,OAAO,qBACnC,YAAW,iBAAiB,OAAO,IAAI,WAAW;aACzC,UAAU,WACnB,YAAW,gBAAgB,OAAO,QAAQ,IAAI,WAAW;AAE3D,oBAAgB,OAAO,QAAQ,SAAS;;;EAI5C,MAAM,OAAO,SAAS,OACjB,SAAS,MAAM,SAAS,KAA4B,GACrD;AAEJ,QAAM,cAAc,OAAO,IAAI,IAAI,SAAS;AAE5C,SAAO,EACL,UAAU,IAAI,SAAS,MAAM;GAC3B,QAAQ,SAAS;GACjB,SAAS;GACV,CAAC,EACH;UACM,KAAK;AACZ,MAAI,KACF;GAAE;GAAK,SAAS,OAAO;GAAI;GAAa,EACxC,yBAAyB,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAC1E;AACD,SAAO,EACL,UAAU,IAAI,SAAS,eAAe,EAAE,QAAQ,KAAK,CAAC,EACvD;WACO;AACR,eAAa,MAAM;;;AAMvB,MAAM,WAAW,IAAI,gBAAgB,EAAE,UAAU,MAAM,CAAC;AAExD,SAAgB,4BAA4B,MASnC;CACP,MAAM,EAAE,QAAQ,OAAO,KAAK,QAAQ,MAAM,WAAW,YAAY,aAAa;AAC9E,KAAI,OAAO,OAAO,SAAS,SAAS;AAClC,SAAO,SAAS;AAChB;;CAEF,MAAM,SAAS,OAAO;CACtB,MAAM,MAAM,MAAM,WAAW,CAAC;AAC9B,KAAI,CAAC,IAAI,oBAAoB,CAAC,OAAO,kBAAkB;AACrD,SAAO,SAAS;AAChB;;CAGF,MAAM,eAAe,IAAI,IAAI,OAAO,YAAY;CAChD,MAAM,UAAU,aAAa,aAAa,WAAW,SAAS;CAC9D,MAAM,SAAS,IAAI,MAAM,IAAI,IAAI,IAAI,KAAK,mBAAmB,CAAC,SAAS;CACvE,MAAM,OAAO,UAAU,WAAW,IAAI,GAAG,YAAY,IAAI;CACzD,MAAM,gBAAgB,GAAG,QAAQ,IAAI,aAAa,OAAO,OAAO;CAEhE,MAAM,iBAAyC,EAAE;AACjD,MAAK,MAAM,CAAC,QAAQ,aAAa,OAAO,QAAQ,IAAI,QAAQ,EAAE;AAC5D,MAAI,aAAa,KAAA,EAAW;EAC5B,MAAM,QAAQ,OAAO,aAAa;AAClC,MAAI,uBAAuB,IAAI,MAAM,CAAE;AACvC,MAAI,MAAM,WAAW,iBAAiB,CAAE;AACxC,iBAAe,SAAS,MAAM,QAAQ,SAAS,GAAG,SAAS,KAAK,KAAK,GAAG,OAAO,SAAS;;CAE1F,MAAM,MAAM,IAAI,QAAQ;AACxB,gBAAe,qBAAqB,MAAM,GAAG,IAAI,IAAI,aAAa;AAClE,gBAAe,sBAAsB,OAAO,IAAI,QAAQ,QAAQ,GAAG;AACnE,gBAAe,uBAAuB;AACtC,gBAAe,eAAe;AAC9B,gBAAe,OAAO,aAAa;CAEnC,IAAI;AACJ,KAAI;AACF,eAAa,IAAI,SAAS,eAAe;GACvC,SAAS;GACT,kBAAkB,IAAI;GACvB,CAAC;UACK,KAAK;AACZ,MAAI,KAAK;GAAE;GAAK,SAAS,OAAO;GAAI,EAAE,mCAAmC;AACzE,SAAO,SAAS;AAChB;;CAGF,IAAI,YAAkD;CACtD,MAAM,kBAAkB,SAAqB;AAC3C,MAAI,UAAW,cAAa,UAAU;AACtC,cAAY,WAAW,MAAM,IAAI,gBAAgB;AACjD,YAAU,SAAS;;AAGrB,YAAW,KAAK,cAAc;AAC5B,WAAS,cAAc,KAAK,QAAQ,OAAO,aAAa;AAEtD,SAAM,cAAc,OAAO,IAAI,SAAS;GAExC,MAAM,gBAAgB;AACpB,QAAI,UAAW,cAAa,UAAU;AACtC,QAAI;AACF,cAAS,OAAO;YACV;AAGR,QAAI;AACF,gBAAW,OAAO;YACZ;;AAKV,kBAAe,QAAQ;GAEvB,MAAM,QAAQ,MAAgB,OAAuB;AACnD,SAAK,GAAG,YAAY,MAAuC,aAAsB;AAC/E,oBAAe,QAAQ;AACvB,SAAI;AACF,SAAG,KAAK,MAA2B,EAAE,QAAQ,UAAU,CAAC;cACjD,KAAK;AACZ,UAAI,KAAK;OAAE;OAAK,SAAS,OAAO;OAAI,EAAE,oBAAoB;AAC1D,eAAS;;MAEX;AACF,SAAK,GAAG,SAAS,QAAQ;AACzB,SAAK,GAAG,UAAU,QAAQ;AACxB,SAAI,KAAK;MAAE;MAAK,SAAS,OAAO;MAAI,EAAE,WAAW;AACjD,cAAS;MACT;;AAGJ,QAAK,UAAiC,WAAW;AACjD,QAAK,YAAY,SAAgC;IACjD;GACF;AAEF,YAAW,KAAK,UAAU,QAAQ;AAChC,MAAI,KAAK;GAAE;GAAK,SAAS,OAAO;GAAI;GAAe,EAAE,oBAAoB;AACzE,MAAI;AACF,UAAO,MAAM,wDAAwD;UAC/D;AAGR,SAAO,SAAS;GAChB"}

package/dist/src/share/site-share-config.d.ts

@@ -0,0 +1,11 @@
+import type { Config } from '../config/schema.js';
+import type { GatewayService } from '../gateway/service.js';
+import { type SiteShareConfig } from './site-share-types.js';
+export declare function resolveSiteShareConfig(service: GatewayService): SiteShareConfig;
+export declare function mergeWithDefaults(raw: unknown): SiteShareConfig;
+export declare function mergeSiteShareConfigPatch(config: Config, patch: Record<string, unknown>): {
+    ok: true;
+} | {
+    ok: false;
+    message: string;
+};

package/dist/src/share/site-share-config.js

@@ -0,0 +1,103 @@
+import { SITE_SHARE_CONFIG_DEFAULTS } from "./site-share-types.js";
+import { z } from "zod";
+//#region src/share/site-share-config.ts
+const SiteShareStaticPatchSchema = z.object({
+	enabled: z.boolean().optional(),
+	maxRootDirSize: z.number().int().min(1048576).max(10737418240).optional(),
+	maxFileCount: z.number().int().min(1).max(1e5).optional(),
+	rewriteEnabledByDefault: z.boolean().optional()
+});
+const SiteShareProxyPatchSchema = z.object({
+	enabled: z.boolean().optional(),
+	allowedUpstreamHosts: z.array(z.string().min(1)).optional(),
+	allowedUpstreamPorts: z.array(z.number().int().min(1).max(65535)).optional(),
+	forwardWebSocket: z.boolean().optional(),
+	bodySizeLimit: z.number().int().min(0).max(1073741824).optional(),
+	requestTimeoutMs: z.number().int().min(1e3).max(6e5).optional(),
+	wsIdleTimeoutMs: z.number().int().min(1e4).max(36e5).optional(),
+	rewriteSetCookiePath: z.boolean().optional()
+});
+const SiteSharePatchSchema = z.object({
+	enabled: z.boolean().optional(),
+	publicHostSuffix: z.string().min(1).optional(),
+	defaultTtlMs: z.number().int().min(6e4).max(6048e5).optional(),
+	maxTtlMs: z.number().int().min(6e4).max(2592e6).optional(),
+	maxActiveSites: z.number().int().min(1).max(1e3).optional(),
+	static: SiteShareStaticPatchSchema.optional(),
+	proxy: SiteShareProxyPatchSchema.optional()
+});
+function resolveSiteShareConfig(service) {
+	const raw = service.currentConfig.gateway?.siteShare;
+	return mergeWithDefaults(raw);
+}
+function mergeWithDefaults(raw) {
+	const base = SITE_SHARE_CONFIG_DEFAULTS;
+	if (!raw || typeof raw !== "object" || Array.isArray(raw)) return JSON.parse(JSON.stringify(base));
+	const r = raw;
+	return {
+		enabled: r.enabled ?? base.enabled,
+		publicHostSuffix: r.publicHostSuffix ?? base.publicHostSuffix,
+		defaultTtlMs: r.defaultTtlMs ?? base.defaultTtlMs,
+		maxTtlMs: r.maxTtlMs ?? base.maxTtlMs,
+		maxActiveSites: r.maxActiveSites ?? base.maxActiveSites,
+		static: {
+			enabled: r.static?.enabled ?? base.static.enabled,
+			maxRootDirSize: r.static?.maxRootDirSize ?? base.static.maxRootDirSize,
+			maxFileCount: r.static?.maxFileCount ?? base.static.maxFileCount,
+			rewriteEnabledByDefault: r.static?.rewriteEnabledByDefault ?? base.static.rewriteEnabledByDefault
+		},
+		proxy: {
+			enabled: r.proxy?.enabled ?? base.proxy.enabled,
+			allowedUpstreamHosts: r.proxy?.allowedUpstreamHosts ?? [...base.proxy.allowedUpstreamHosts],
+			allowedUpstreamPorts: r.proxy?.allowedUpstreamPorts ?? [...base.proxy.allowedUpstreamPorts],
+			forwardWebSocket: r.proxy?.forwardWebSocket ?? base.proxy.forwardWebSocket,
+			bodySizeLimit: r.proxy?.bodySizeLimit ?? base.proxy.bodySizeLimit,
+			requestTimeoutMs: r.proxy?.requestTimeoutMs ?? base.proxy.requestTimeoutMs,
+			wsIdleTimeoutMs: r.proxy?.wsIdleTimeoutMs ?? base.proxy.wsIdleTimeoutMs,
+			rewriteSetCookiePath: r.proxy?.rewriteSetCookiePath ?? base.proxy.rewriteSetCookiePath
+		}
+	};
+}
+function mergeSiteShareConfigPatch(config, patch) {
+	const parsed = SiteSharePatchSchema.safeParse(patch);
+	if (!parsed.success) return {
+		ok: false,
+		message: parsed.error.issues.map((i) => i.message).join("; ")
+	};
+	if (!config.gateway) config.gateway = {
+		bind: "loopback",
+		port: 18790,
+		auth: { mode: "token" },
+		heartbeat: {
+			enabled: true,
+			intervalMs: 18e5,
+			includeSystemPromptSection: false
+		},
+		maxSseConnections: 100,
+		corsOrigins: []
+	};
+	const cfg = config.gateway;
+	const current = mergeWithDefaults(cfg.siteShare);
+	const next = {
+		...current,
+		...parsed.data,
+		static: parsed.data.static ? {
+			...current.static,
+			...parsed.data.static
+		} : current.static,
+		proxy: parsed.data.proxy ? {
+			...current.proxy,
+			...parsed.data.proxy
+		} : current.proxy
+	};
+	if (next.defaultTtlMs > next.maxTtlMs) return {
+		ok: false,
+		message: "siteShare.defaultTtlMs must not exceed siteShare.maxTtlMs"
+	};
+	cfg.siteShare = next;
+	return { ok: true };
+}
+//#endregion
+export { mergeSiteShareConfigPatch, mergeWithDefaults, resolveSiteShareConfig };
+
+//# sourceMappingURL=site-share-config.js.map

package/dist/src/share/site-share-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-share-config.js","names":[],"sources":["../../../src/share/site-share-config.ts"],"sourcesContent":["import { z } from 'zod';\n\nimport type { Config } from '../config/schema.js';\nimport type { GatewayService } from '../gateway/service.js';\nimport {\n  SITE_SHARE_CONFIG_DEFAULTS,\n  type SiteShareConfig,\n} from './site-share-types.js';\n\nconst SiteShareStaticPatchSchema = z.object({\n  enabled: z.boolean().optional(),\n  maxRootDirSize: z.number().int().min(1_048_576).max(10_737_418_240).optional(),\n  maxFileCount: z.number().int().min(1).max(100_000).optional(),\n  rewriteEnabledByDefault: z.boolean().optional(),\n});\n\nconst SiteShareProxyPatchSchema = z.object({\n  enabled: z.boolean().optional(),\n  allowedUpstreamHosts: z.array(z.string().min(1)).optional(),\n  allowedUpstreamPorts: z.array(z.number().int().min(1).max(65535)).optional(),\n  forwardWebSocket: z.boolean().optional(),\n  bodySizeLimit: z.number().int().min(0).max(1_073_741_824).optional(),\n  requestTimeoutMs: z.number().int().min(1_000).max(600_000).optional(),\n  wsIdleTimeoutMs: z.number().int().min(10_000).max(3_600_000).optional(),\n  rewriteSetCookiePath: z.boolean().optional(),\n});\n\nconst SiteSharePatchSchema = z.object({\n  enabled: z.boolean().optional(),\n  publicHostSuffix: z.string().min(1).optional(),\n  defaultTtlMs: z.number().int().min(60_000).max(604_800_000).optional(),\n  maxTtlMs: z.number().int().min(60_000).max(2_592_000_000).optional(),\n  maxActiveSites: z.number().int().min(1).max(1_000).optional(),\n  static: SiteShareStaticPatchSchema.optional(),\n  proxy: SiteShareProxyPatchSchema.optional(),\n});\n\nexport function resolveSiteShareConfig(service: GatewayService): SiteShareConfig {\n  const raw = (service.currentConfig.gateway as Record<string, unknown> | undefined)?.siteShare;\n  return mergeWithDefaults(raw);\n}\n\nexport function mergeWithDefaults(raw: unknown): SiteShareConfig {\n  const base = SITE_SHARE_CONFIG_DEFAULTS;\n  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {\n    return JSON.parse(JSON.stringify(base)) as SiteShareConfig;\n  }\n  const r = raw as Partial<SiteShareConfig> & {\n    static?: Partial<SiteShareConfig['static']>;\n    proxy?: Partial<SiteShareConfig['proxy']>;\n  };\n  return {\n    enabled: r.enabled ?? base.enabled,\n    publicHostSuffix: r.publicHostSuffix ?? base.publicHostSuffix,\n    defaultTtlMs: r.defaultTtlMs ?? base.defaultTtlMs,\n    maxTtlMs: r.maxTtlMs ?? base.maxTtlMs,\n    maxActiveSites: r.maxActiveSites ?? base.maxActiveSites,\n    static: {\n      enabled: r.static?.enabled ?? base.static.enabled,\n      maxRootDirSize: r.static?.maxRootDirSize ?? base.static.maxRootDirSize,\n      maxFileCount: r.static?.maxFileCount ?? base.static.maxFileCount,\n      rewriteEnabledByDefault: r.static?.rewriteEnabledByDefault ?? base.static.rewriteEnabledByDefault,\n    },\n    proxy: {\n      enabled: r.proxy?.enabled ?? base.proxy.enabled,\n      allowedUpstreamHosts: r.proxy?.allowedUpstreamHosts ?? [...base.proxy.allowedUpstreamHosts],\n      allowedUpstreamPorts: r.proxy?.allowedUpstreamPorts ?? [...base.proxy.allowedUpstreamPorts],\n      forwardWebSocket: r.proxy?.forwardWebSocket ?? base.proxy.forwardWebSocket,\n      bodySizeLimit: r.proxy?.bodySizeLimit ?? base.proxy.bodySizeLimit,\n      requestTimeoutMs: r.proxy?.requestTimeoutMs ?? base.proxy.requestTimeoutMs,\n      wsIdleTimeoutMs: r.proxy?.wsIdleTimeoutMs ?? base.proxy.wsIdleTimeoutMs,\n      rewriteSetCookiePath: r.proxy?.rewriteSetCookiePath ?? base.proxy.rewriteSetCookiePath,\n    },\n  };\n}\n\nexport function mergeSiteShareConfigPatch(\n  config: Config,\n  patch: Record<string, unknown>,\n): { ok: true } | { ok: false; message: string } {\n  const parsed = SiteSharePatchSchema.safeParse(patch);\n  if (!parsed.success) {\n    return { ok: false, message: parsed.error.issues.map((i) => i.message).join('; ') };\n  }\n  if (!config.gateway) {\n    config.gateway = {\n      bind: 'loopback',\n      port: 18790,\n      auth: { mode: 'token' },\n      heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n      maxSseConnections: 100,\n      corsOrigins: [],\n    };\n  }\n\n  const cfg = config.gateway as Record<string, unknown>;\n  const current = mergeWithDefaults(cfg.siteShare);\n  const next: SiteShareConfig = {\n    ...current,\n    ...parsed.data,\n    static: parsed.data.static ? { ...current.static, ...parsed.data.static } : current.static,\n    proxy: parsed.data.proxy ? { ...current.proxy, ...parsed.data.proxy } : current.proxy,\n  };\n  if (next.defaultTtlMs > next.maxTtlMs) {\n    return { ok: false, message: 'siteShare.defaultTtlMs must not exceed siteShare.maxTtlMs' };\n  }\n  cfg.siteShare = next as unknown as Record<string, unknown>;\n  return { ok: true };\n}\n"],"mappings":";;;AASA,MAAM,6BAA6B,EAAE,OAAO;CAC1C,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAU,CAAC,IAAI,YAAe,CAAC,UAAU;CAC9E,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAQ,CAAC,UAAU;CAC7D,yBAAyB,EAAE,SAAS,CAAC,UAAU;CAChD,CAAC;AAEF,MAAM,4BAA4B,EAAE,OAAO;CACzC,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,sBAAsB,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU;CAC3D,sBAAsB,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,UAAU;CAC5E,kBAAkB,EAAE,SAAS,CAAC,UAAU;CACxC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,WAAc,CAAC,UAAU;CACpE,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAM,CAAC,IAAI,IAAQ,CAAC,UAAU;CACrE,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,KAAU,CAAC,UAAU;CACvE,sBAAsB,EAAE,SAAS,CAAC,UAAU;CAC7C,CAAC;AAEF,MAAM,uBAAuB,EAAE,OAAO;CACpC,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAC9C,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,OAAY,CAAC,UAAU;CACtE,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAO,CAAC,IAAI,OAAc,CAAC,UAAU;CACpE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAM,CAAC,UAAU;CAC7D,QAAQ,2BAA2B,UAAU;CAC7C,OAAO,0BAA0B,UAAU;CAC5C,CAAC;AAEF,SAAgB,uBAAuB,SAA0C;CAC/E,MAAM,MAAO,QAAQ,cAAc,SAAiD;AACpF,QAAO,kBAAkB,IAAI;;AAG/B,SAAgB,kBAAkB,KAA+B;CAC/D,MAAM,OAAO;AACb,KAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CACvD,QAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;CAEzC,MAAM,IAAI;AAIV,QAAO;EACL,SAAS,EAAE,WAAW,KAAK;EAC3B,kBAAkB,EAAE,oBAAoB,KAAK;EAC7C,cAAc,EAAE,gBAAgB,KAAK;EACrC,UAAU,EAAE,YAAY,KAAK;EAC7B,gBAAgB,EAAE,kBAAkB,KAAK;EACzC,QAAQ;GACN,SAAS,EAAE,QAAQ,WAAW,KAAK,OAAO;GAC1C,gBAAgB,EAAE,QAAQ,kBAAkB,KAAK,OAAO;GACxD,cAAc,EAAE,QAAQ,gBAAgB,KAAK,OAAO;GACpD,yBAAyB,EAAE,QAAQ,2BAA2B,KAAK,OAAO;GAC3E;EACD,OAAO;GACL,SAAS,EAAE,OAAO,WAAW,KAAK,MAAM;GACxC,sBAAsB,EAAE,OAAO,wBAAwB,CAAC,GAAG,KAAK,MAAM,qBAAqB;GAC3F,sBAAsB,EAAE,OAAO,wBAAwB,CAAC,GAAG,KAAK,MAAM,qBAAqB;GAC3F,kBAAkB,EAAE,OAAO,oBAAoB,KAAK,MAAM;GAC1D,eAAe,EAAE,OAAO,iBAAiB,KAAK,MAAM;GACpD,kBAAkB,EAAE,OAAO,oBAAoB,KAAK,MAAM;GAC1D,iBAAiB,EAAE,OAAO,mBAAmB,KAAK,MAAM;GACxD,sBAAsB,EAAE,OAAO,wBAAwB,KAAK,MAAM;GACnE;EACF;;AAGH,SAAgB,0BACd,QACA,OAC+C;CAC/C,MAAM,SAAS,qBAAqB,UAAU,MAAM;AACpD,KAAI,CAAC,OAAO,QACV,QAAO;EAAE,IAAI;EAAO,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK;EAAE;AAErF,KAAI,CAAC,OAAO,QACV,QAAO,UAAU;EACf,MAAM;EACN,MAAM;EACN,MAAM,EAAE,MAAM,SAAS;EACvB,WAAW;GAAE,SAAS;GAAM,YAAY;GAAW,4BAA4B;GAAO;EACtF,mBAAmB;EACnB,aAAa,EAAE;EAChB;CAGH,MAAM,MAAM,OAAO;CACnB,MAAM,UAAU,kBAAkB,IAAI,UAAU;CAChD,MAAM,OAAwB;EAC5B,GAAG;EACH,GAAG,OAAO;EACV,QAAQ,OAAO,KAAK,SAAS;GAAE,GAAG,QAAQ;GAAQ,GAAG,OAAO,KAAK;GAAQ,GAAG,QAAQ;EACpF,OAAO,OAAO,KAAK,QAAQ;GAAE,GAAG,QAAQ;GAAO,GAAG,OAAO,KAAK;GAAO,GAAG,QAAQ;EACjF;AACD,KAAI,KAAK,eAAe,KAAK,SAC3B,QAAO;EAAE,IAAI;EAAO,SAAS;EAA6D;AAE5F,KAAI,YAAY;AAChB,QAAO,EAAE,IAAI,MAAM"}

package/dist/src/share/site-share-router.d.ts

@@ -0,0 +1,23 @@
+import type { Context, Hono } from 'hono';
+import type { GatewayService } from '../gateway/service.js';
+import type { IncomingMessage } from 'node:http';
+import type { Socket } from 'node:net';
+/**
+ * Extract the share label from the request Host header when the public host
+ * suffix matches. Returns `null` if the request did not target a site-share
+ * subdomain.
+ */
+export declare function extractSiteShareLabel(host: string | null | undefined, suffix: string): string | null;
+/**
+ * Hono middleware. Intercepts requests whose Host header is `*.share.xopc.ai`
+ * (or matches the configured suffix), routes them to the matching site share.
+ * Falls through to next() when the host does not match.
+ *
+ * Also handles the subpath fallback `/site/:token/*` for environments without
+ * wildcard DNS — same handler logic, just different prefix extraction.
+ */
+export declare function createSiteShareMiddleware(service: GatewayService): (c: Context, next: () => Promise<void>) => Promise<void | Response>;
+/** Standalone HTTP upgrade handler that bridges WebSocket requests to the proxy share. */
+export declare function handleSiteShareUpgrade(service: GatewayService, req: IncomingMessage, socket: Socket, head: Buffer): boolean;
+/** Register the middleware on a Hono app — call from createHonoApp. */
+export declare function registerSiteShareMiddleware(app: Hono, service: GatewayService): void;

package/dist/src/share/site-share-router.js

@@ -0,0 +1,147 @@
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
+import { resolveSiteShareConfig } from "./site-share-config.js";
+import "./share-store.js";
+import { getSiteShareStore } from "./site-share-store.js";
+import { getClientIpFromHeaders } from "../gateway/security/loopback.js";
+import { serveStaticSiteRequest } from "./site-static-serve.js";
+import { forwardHttpRequest, handleProxyWebSocketUpgrade } from "./site-proxy.js";
+import { renderShareExpiredPage } from "./share-landing.js";
+//#region src/share/site-share-router.ts
+init_logger();
+const log = createLogger("SiteShareRouter");
+const SITE_SUBPATH_PREFIX = "/site/";
+/**
+* Extract the share label from the request Host header when the public host
+* suffix matches. Returns `null` if the request did not target a site-share
+* subdomain.
+*/
+function extractSiteShareLabel(host, suffix) {
+	if (!host) return null;
+	const lowered = host.toLowerCase().split(":")[0];
+	const normSuffix = suffix.toLowerCase();
+	if (lowered === normSuffix) return null;
+	if (!lowered.endsWith(`.${normSuffix}`)) return null;
+	const label = lowered.slice(0, -1 * (normSuffix.length + 1));
+	if (!label || label.includes(".")) return null;
+	return label;
+}
+/**
+* Hono middleware. Intercepts requests whose Host header is `*.share.xopc.ai`
+* (or matches the configured suffix), routes them to the matching site share.
+* Falls through to next() when the host does not match.
+*
+* Also handles the subpath fallback `/site/:token/*` for environments without
+* wildcard DNS — same handler logic, just different prefix extraction.
+*/
+function createSiteShareMiddleware(service) {
+	return async (c, next) => {
+		const config = resolveSiteShareConfig(service);
+		if (!config.enabled) return next();
+		const store = getSiteShareStore(config);
+		store.updateConfig(config);
+		const label = extractSiteShareLabel(c.req.header("host"), config.publicHostSuffix);
+		const url = new URL(c.req.url);
+		const clientIp = getClientIpFromHeaders({ get: (n) => c.req.header(n) ?? void 0 });
+		let record = null;
+		let innerPath = url.pathname;
+		let basePrefix = "";
+		if (label) {
+			record = store.resolveByHostLabel(label);
+			if (!record) return next();
+		} else if (url.pathname.startsWith(SITE_SUBPATH_PREFIX)) {
+			const rest = url.pathname.slice(6);
+			const slash = rest.indexOf("/");
+			const token = slash < 0 ? rest : rest.slice(0, slash);
+			const tail = slash < 0 ? "" : rest.slice(slash);
+			record = store.getByToken(token) ?? store.getBySubdomain(token);
+			if (!record) return next();
+			innerPath = tail || "/";
+			basePrefix = `${SITE_SUBPATH_PREFIX}${token}`;
+		} else return next();
+		const validation = store.validateAccess(record);
+		if (!validation.valid) return c.html(renderShareExpiredPage(validation.reason), 410);
+		if (record.source.kind === "static") try {
+			const result = await serveStaticSiteRequest(record, innerPath, basePrefix);
+			store.recordRequest(record.id, clientIp);
+			return result;
+		} catch (err) {
+			log.warn({
+				err,
+				shareId: record.id
+			}, "static serve failed");
+			return new Response("Internal error", { status: 500 });
+		}
+		if (record.source.kind === "proxy") {
+			const ctx = {
+				innerPath,
+				basePrefix,
+				clientIp,
+				originalUrl: url,
+				forwardedProto: url.protocol === "https:" ? "https" : "http"
+			};
+			const { response } = await forwardHttpRequest(record, store, c.req.raw, ctx);
+			return response;
+		}
+		return next();
+	};
+}
+/** Standalone HTTP upgrade handler that bridges WebSocket requests to the proxy share. */
+function handleSiteShareUpgrade(service, req, socket, head) {
+	const config = resolveSiteShareConfig(service);
+	if (!config.enabled) return false;
+	if (!config.proxy.enabled || !config.proxy.forwardWebSocket) return false;
+	const store = getSiteShareStore(config);
+	store.updateConfig(config);
+	const host = (req.headers.host ?? "").toString();
+	const label = extractSiteShareLabel(host, config.publicHostSuffix);
+	const url = new URL(req.url ?? "/", `http://${host || "localhost"}`);
+	let record = null;
+	let innerPath = url.pathname;
+	let basePrefix = "";
+	if (label) record = store.resolveByHostLabel(label);
+	else if (url.pathname.startsWith(SITE_SUBPATH_PREFIX)) {
+		const rest = url.pathname.slice(6);
+		const slash = rest.indexOf("/");
+		const token = slash < 0 ? rest : rest.slice(0, slash);
+		const tail = slash < 0 ? "" : rest.slice(slash);
+		record = store.getByToken(token) ?? store.getBySubdomain(token);
+		innerPath = tail || "/";
+		basePrefix = `${SITE_SUBPATH_PREFIX}${token}`;
+	}
+	if (!record) return false;
+	if (!store.validateAccess(record).valid) {
+		try {
+			socket.write("HTTP/1.1 410 Gone\r\nConnection: close\r\n\r\n");
+		} catch {}
+		socket.destroy();
+		return true;
+	}
+	if (record.source.kind !== "proxy") {
+		try {
+			socket.write("HTTP/1.1 400 Bad Request\r\nConnection: close\r\n\r\n");
+		} catch {}
+		socket.destroy();
+		return true;
+	}
+	const clientIp = (req.socket.remoteAddress ?? "").replace(/^::ffff:/, "") || "0.0.0.0";
+	handleProxyWebSocketUpgrade({
+		record,
+		store,
+		req,
+		socket,
+		head,
+		innerPath,
+		basePrefix,
+		clientIp
+	});
+	return true;
+}
+/** Register the middleware on a Hono app — call from createHonoApp. */
+function registerSiteShareMiddleware(app, service) {
+	app.use(createSiteShareMiddleware(service));
+}
+//#endregion
+export { createSiteShareMiddleware, extractSiteShareLabel, handleSiteShareUpgrade, registerSiteShareMiddleware };
+
+//# sourceMappingURL=site-share-router.js.map

package/dist/src/share/site-share-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-share-router.js","names":[],"sources":["../../../src/share/site-share-router.ts"],"sourcesContent":["import type { Context, Hono } from 'hono';\n\nimport { resolveMimeType } from './share-store.js';\nimport { getSiteShareStore } from './site-share-store.js';\nimport { resolveSiteShareConfig } from './site-share-config.js';\nimport { serveStaticSiteRequest } from './site-static-serve.js';\nimport { forwardHttpRequest, handleProxyWebSocketUpgrade } from './site-proxy.js';\nimport { renderShareExpiredPage } from './share-landing.js';\nimport { getClientIpFromHeaders } from '../gateway/security/loopback.js';\nimport { createLogger } from '../utils/logger.js';\nimport type { GatewayService } from '../gateway/service.js';\nimport type { IncomingMessage } from 'node:http';\nimport type { Socket } from 'node:net';\n\nconst log = createLogger('SiteShareRouter');\n\nconst SITE_SUBPATH_PREFIX = '/site/';\n\n/**\n * Extract the share label from the request Host header when the public host\n * suffix matches. Returns `null` if the request did not target a site-share\n * subdomain.\n */\nexport function extractSiteShareLabel(host: string | null | undefined, suffix: string): string | null {\n  if (!host) return null;\n  const lowered = host.toLowerCase().split(':')[0];\n  const normSuffix = suffix.toLowerCase();\n  if (lowered === normSuffix) return null;\n  if (!lowered.endsWith(`.${normSuffix}`)) return null;\n  const label = lowered.slice(0, -1 * (normSuffix.length + 1));\n  if (!label || label.includes('.')) return null;\n  return label;\n}\n\n/**\n * Hono middleware. Intercepts requests whose Host header is `*.share.xopc.ai`\n * (or matches the configured suffix), routes them to the matching site share.\n * Falls through to next() when the host does not match.\n *\n * Also handles the subpath fallback `/site/:token/*` for environments without\n * wildcard DNS — same handler logic, just different prefix extraction.\n */\nexport function createSiteShareMiddleware(service: GatewayService) {\n  return async (c: Context, next: () => Promise<void>) => {\n    const config = resolveSiteShareConfig(service);\n    if (!config.enabled) return next();\n    const store = getSiteShareStore(config);\n    store.updateConfig(config);\n\n    const host = c.req.header('host');\n    const label = extractSiteShareLabel(host, config.publicHostSuffix);\n    const url = new URL(c.req.url);\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n\n    let record = null as ReturnType<typeof store.getByToken>;\n    let innerPath = url.pathname;\n    let basePrefix = '';\n\n    if (label) {\n      record = store.resolveByHostLabel(label);\n      if (!record) return next();\n    } else if (url.pathname.startsWith(SITE_SUBPATH_PREFIX)) {\n      const rest = url.pathname.slice(SITE_SUBPATH_PREFIX.length);\n      const slash = rest.indexOf('/');\n      const token = slash < 0 ? rest : rest.slice(0, slash);\n      const tail = slash < 0 ? '' : rest.slice(slash);\n      record = store.getByToken(token) ?? store.getBySubdomain(token);\n      if (!record) return next();\n      innerPath = tail || '/';\n      basePrefix = `${SITE_SUBPATH_PREFIX}${token}`;\n    } else {\n      return next();\n    }\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      return c.html(renderShareExpiredPage(validation.reason as never), 410);\n    }\n\n    if (record.source.kind === 'static') {\n      try {\n        const result = await serveStaticSiteRequest(record, innerPath, basePrefix);\n        store.recordRequest(record.id, clientIp);\n        return result;\n      } catch (err) {\n        log.warn({ err, shareId: record.id }, 'static serve failed');\n        return new Response('Internal error', { status: 500 });\n      }\n    }\n\n    if (record.source.kind === 'proxy') {\n      const ctx = {\n        innerPath,\n        basePrefix,\n        clientIp,\n        originalUrl: url,\n        forwardedProto: url.protocol === 'https:' ? ('https' as const) : ('http' as const),\n      };\n      const { response } = await forwardHttpRequest(record, store, c.req.raw, ctx);\n      return response;\n    }\n\n    return next();\n  };\n}\n\n/** Standalone HTTP upgrade handler that bridges WebSocket requests to the proxy share. */\nexport function handleSiteShareUpgrade(\n  service: GatewayService,\n  req: IncomingMessage,\n  socket: Socket,\n  head: Buffer,\n): boolean {\n  const config = resolveSiteShareConfig(service);\n  if (!config.enabled) return false;\n  if (!config.proxy.enabled || !config.proxy.forwardWebSocket) return false;\n\n  const store = getSiteShareStore(config);\n  store.updateConfig(config);\n\n  const host = (req.headers.host ?? '').toString();\n  const label = extractSiteShareLabel(host, config.publicHostSuffix);\n  const url = new URL(req.url ?? '/', `http://${host || 'localhost'}`);\n\n  let record: ReturnType<typeof store.getByToken> = null;\n  let innerPath = url.pathname;\n  let basePrefix = '';\n  if (label) {\n    record = store.resolveByHostLabel(label);\n  } else if (url.pathname.startsWith(SITE_SUBPATH_PREFIX)) {\n    const rest = url.pathname.slice(SITE_SUBPATH_PREFIX.length);\n    const slash = rest.indexOf('/');\n    const token = slash < 0 ? rest : rest.slice(0, slash);\n    const tail = slash < 0 ? '' : rest.slice(slash);\n    record = store.getByToken(token) ?? store.getBySubdomain(token);\n    innerPath = tail || '/';\n    basePrefix = `${SITE_SUBPATH_PREFIX}${token}`;\n  }\n  if (!record) return false;\n  const validation = store.validateAccess(record);\n  if (!validation.valid) {\n    try {\n      socket.write('HTTP/1.1 410 Gone\\r\\nConnection: close\\r\\n\\r\\n');\n    } catch {\n      /* ignore */\n    }\n    socket.destroy();\n    return true;\n  }\n  if (record.source.kind !== 'proxy') {\n    try {\n      socket.write('HTTP/1.1 400 Bad Request\\r\\nConnection: close\\r\\n\\r\\n');\n    } catch {\n      /* ignore */\n    }\n    socket.destroy();\n    return true;\n  }\n\n  const clientIp = (req.socket.remoteAddress ?? '').replace(/^::ffff:/, '') || '0.0.0.0';\n  handleProxyWebSocketUpgrade({\n    record,\n    store,\n    req,\n    socket,\n    head,\n    innerPath,\n    basePrefix,\n    clientIp,\n  });\n  return true;\n}\n\n/** Register the middleware on a Hono app — call from createHonoApp. */\nexport function registerSiteShareMiddleware(app: Hono, service: GatewayService): void {\n  app.use(createSiteShareMiddleware(service));\n}\n\nvoid resolveMimeType;\n"],"mappings":";;;;;;;;;;aASkD;AAKlD,MAAM,MAAM,aAAa,kBAAkB;AAE3C,MAAM,sBAAsB;;;;;;AAO5B,SAAgB,sBAAsB,MAAiC,QAA+B;AACpG,KAAI,CAAC,KAAM,QAAO;CAClB,MAAM,UAAU,KAAK,aAAa,CAAC,MAAM,IAAI,CAAC;CAC9C,MAAM,aAAa,OAAO,aAAa;AACvC,KAAI,YAAY,WAAY,QAAO;AACnC,KAAI,CAAC,QAAQ,SAAS,IAAI,aAAa,CAAE,QAAO;CAChD,MAAM,QAAQ,QAAQ,MAAM,GAAG,MAAM,WAAW,SAAS,GAAG;AAC5D,KAAI,CAAC,SAAS,MAAM,SAAS,IAAI,CAAE,QAAO;AAC1C,QAAO;;;;;;;;;;AAWT,SAAgB,0BAA0B,SAAyB;AACjE,QAAO,OAAO,GAAY,SAA8B;EACtD,MAAM,SAAS,uBAAuB,QAAQ;AAC9C,MAAI,CAAC,OAAO,QAAS,QAAO,MAAM;EAClC,MAAM,QAAQ,kBAAkB,OAAO;AACvC,QAAM,aAAa,OAAO;EAG1B,MAAM,QAAQ,sBADD,EAAE,IAAI,OAAO,OACc,EAAE,OAAO,iBAAiB;EAClE,MAAM,MAAM,IAAI,IAAI,EAAE,IAAI,IAAI;EAC9B,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAE7F,IAAI,SAAS;EACb,IAAI,YAAY,IAAI;EACpB,IAAI,aAAa;AAEjB,MAAI,OAAO;AACT,YAAS,MAAM,mBAAmB,MAAM;AACxC,OAAI,CAAC,OAAQ,QAAO,MAAM;aACjB,IAAI,SAAS,WAAW,oBAAoB,EAAE;GACvD,MAAM,OAAO,IAAI,SAAS,MAAM,EAA2B;GAC3D,MAAM,QAAQ,KAAK,QAAQ,IAAI;GAC/B,MAAM,QAAQ,QAAQ,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM;GACrD,MAAM,OAAO,QAAQ,IAAI,KAAK,KAAK,MAAM,MAAM;AAC/C,YAAS,MAAM,WAAW,MAAM,IAAI,MAAM,eAAe,MAAM;AAC/D,OAAI,CAAC,OAAQ,QAAO,MAAM;AAC1B,eAAY,QAAQ;AACpB,gBAAa,GAAG,sBAAsB;QAEtC,QAAO,MAAM;EAGf,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,MACd,QAAO,EAAE,KAAK,uBAAuB,WAAW,OAAgB,EAAE,IAAI;AAGxE,MAAI,OAAO,OAAO,SAAS,SACzB,KAAI;GACF,MAAM,SAAS,MAAM,uBAAuB,QAAQ,WAAW,WAAW;AAC1E,SAAM,cAAc,OAAO,IAAI,SAAS;AACxC,UAAO;WACA,KAAK;AACZ,OAAI,KAAK;IAAE;IAAK,SAAS,OAAO;IAAI,EAAE,sBAAsB;AAC5D,UAAO,IAAI,SAAS,kBAAkB,EAAE,QAAQ,KAAK,CAAC;;AAI1D,MAAI,OAAO,OAAO,SAAS,SAAS;GAClC,MAAM,MAAM;IACV;IACA;IACA;IACA,aAAa;IACb,gBAAgB,IAAI,aAAa,WAAY,UAAqB;IACnE;GACD,MAAM,EAAE,aAAa,MAAM,mBAAmB,QAAQ,OAAO,EAAE,IAAI,KAAK,IAAI;AAC5E,UAAO;;AAGT,SAAO,MAAM;;;;AAKjB,SAAgB,uBACd,SACA,KACA,QACA,MACS;CACT,MAAM,SAAS,uBAAuB,QAAQ;AAC9C,KAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,KAAI,CAAC,OAAO,MAAM,WAAW,CAAC,OAAO,MAAM,iBAAkB,QAAO;CAEpE,MAAM,QAAQ,kBAAkB,OAAO;AACvC,OAAM,aAAa,OAAO;CAE1B,MAAM,QAAQ,IAAI,QAAQ,QAAQ,IAAI,UAAU;CAChD,MAAM,QAAQ,sBAAsB,MAAM,OAAO,iBAAiB;CAClE,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,UAAU,QAAQ,cAAc;CAEpE,IAAI,SAA8C;CAClD,IAAI,YAAY,IAAI;CACpB,IAAI,aAAa;AACjB,KAAI,MACF,UAAS,MAAM,mBAAmB,MAAM;UAC/B,IAAI,SAAS,WAAW,oBAAoB,EAAE;EACvD,MAAM,OAAO,IAAI,SAAS,MAAM,EAA2B;EAC3D,MAAM,QAAQ,KAAK,QAAQ,IAAI;EAC/B,MAAM,QAAQ,QAAQ,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM;EACrD,MAAM,OAAO,QAAQ,IAAI,KAAK,KAAK,MAAM,MAAM;AAC/C,WAAS,MAAM,WAAW,MAAM,IAAI,MAAM,eAAe,MAAM;AAC/D,cAAY,QAAQ;AACpB,eAAa,GAAG,sBAAsB;;AAExC,KAAI,CAAC,OAAQ,QAAO;AAEpB,KAAI,CADe,MAAM,eAAe,OACzB,CAAC,OAAO;AACrB,MAAI;AACF,UAAO,MAAM,iDAAiD;UACxD;AAGR,SAAO,SAAS;AAChB,SAAO;;AAET,KAAI,OAAO,OAAO,SAAS,SAAS;AAClC,MAAI;AACF,UAAO,MAAM,wDAAwD;UAC/D;AAGR,SAAO,SAAS;AAChB,SAAO;;CAGT,MAAM,YAAY,IAAI,OAAO,iBAAiB,IAAI,QAAQ,YAAY,GAAG,IAAI;AAC7E,6BAA4B;EAC1B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AACF,QAAO;;;AAIT,SAAgB,4BAA4B,KAAW,SAA+B;AACpF,KAAI,IAAI,0BAA0B,QAAQ,CAAC"}

package/dist/src/share/site-share-store.d.ts

@@ -0,0 +1,53 @@
+import { type CreateSiteShareParams, type SiteShareConfig, type SiteShareRecord } from './site-share-types.js';
+export declare class SiteShareStore {
+    private shares;
+    private byToken;
+    private bySubdomain;
+    private config;
+    private dirty;
+    private debounceTimer;
+    private cleanupTimer;
+    /** Optional cleanup hook invoked when a record is dropped (e.g. delete staging dir). */
+    private onCleanup;
+    constructor(config?: Partial<SiteShareConfig>);
+    updateConfig(config: Partial<SiteShareConfig>): void;
+    setCleanupHook(hook: (record: SiteShareRecord) => void): void;
+    getConfig(): SiteShareConfig;
+    create(params: CreateSiteShareParams & {
+        workspaceRoot: string | null;
+        gatewayTokenHash: string;
+    }): Promise<SiteShareRecord>;
+    private buildSource;
+    private resolveSubdomain;
+    getById(id: string): SiteShareRecord | null;
+    getByToken(token: string): SiteShareRecord | null;
+    getBySubdomain(subdomain: string): SiteShareRecord | null;
+    /**
+     * Look up a record by token first, then by subdomain. Subdomain label may
+     * itself be the share token (when user didn't pick a custom subdomain).
+     */
+    resolveByHostLabel(label: string): SiteShareRecord | null;
+    getActiveShares(): SiteShareRecord[];
+    getAllShares(): SiteShareRecord[];
+    validateAccess(record: SiteShareRecord): {
+        valid: boolean;
+        reason?: string;
+    };
+    /** Increment counters when a request lands. Debounced persist. */
+    recordRequest(id: string, clientIp: string): void;
+    setThumbnailStatus(id: string, status: 'pending' | 'ready' | 'failed'): void;
+    revoke(id: string): boolean;
+    revokeMany(ids: string[]): number;
+    revokeExpired(): number;
+    update(id: string, patch: {
+        extendTtlMs?: number;
+        maxRequests?: number | null;
+    }): SiteShareRecord | null;
+    private load;
+    private persistSync;
+    private scheduleDebouncedPersist;
+    private startCleanupTimer;
+    shutdown(): void;
+}
+export declare function getSiteShareStore(config?: Partial<SiteShareConfig>): SiteShareStore;
+export declare function resetSiteShareStoreForTests(): void;