@xopcai/xopc 0.0.84 → 0.0.85

package/dist/src/tunnel/pair-url.d.ts

@@ -21,10 +21,23 @@ export type ParsedMobileConnectDeepLink = {
 };
 /** Parse `xopc://gateway/mobile-connect?...` payloads from QR codes. */
 export declare function parseMobileConnectDeepLink(raw: string): ParsedMobileConnectDeepLink | null;
-/** Ordered URLs for mobile clients: prefer LAN on the same network, then tunnel/base. */
+/**
+ * Ordered URLs for mobile clients. Priority:
+ *   1. reverse-proxy public URL (user-deployed HTTPS, typically fastest + works on cellular)
+ *   2. LAN URL (zero-RTT on same network)
+ *   3. baseUrl (legacy: usually the FRP tunnel public URL, kept for callers that
+ *      do not yet split reverseProxyUrl from tunnelUrl)
+ *   4. tunnelUrl (explicit FRP tunnel URL, kept as a fallback even when a
+ *      reverse-proxy URL is also configured)
+ *
+ * Loopback URLs are dropped (they only work on the gateway host) and
+ * duplicates are de-duped while preserving first occurrence order.
+ */
 export declare function buildMobileConnectUrlOrder(params: {
     baseUrl: string | null | undefined;
     lanUrl: string | null | undefined;
+    reverseProxyUrl?: string | null | undefined;
+    tunnelUrl?: string | null | undefined;
 }): string[];
 /** First LAN URL when the gateway listens on a network-accessible bind host. */
 export declare function resolveMobilePairLanUrl(config: Config): string | null;

package/dist/src/tunnel/pair-url.js

@@ -81,7 +81,18 @@ function parseMobileConnectDeepLink(raw) {
 		return null;
 	}
 }
-/** Ordered URLs for mobile clients: prefer LAN on the same network, then tunnel/base. */
+/**
+* Ordered URLs for mobile clients. Priority:
+*   1. reverse-proxy public URL (user-deployed HTTPS, typically fastest + works on cellular)
+*   2. LAN URL (zero-RTT on same network)
+*   3. baseUrl (legacy: usually the FRP tunnel public URL, kept for callers that
+*      do not yet split reverseProxyUrl from tunnelUrl)
+*   4. tunnelUrl (explicit FRP tunnel URL, kept as a fallback even when a
+*      reverse-proxy URL is also configured)
+*
+* Loopback URLs are dropped (they only work on the gateway host) and
+* duplicates are de-duped while preserving first occurrence order.
+*/
 function buildMobileConnectUrlOrder(params) {
 	const ordered = [];
 	const seen = /* @__PURE__ */ new Set();
@@ -91,8 +102,10 @@ function buildMobileConnectUrlOrder(params) {
 		seen.add(url);
 		ordered.push(url);
 	};
+	push(params.reverseProxyUrl);
 	push(params.lanUrl);
 	push(params.baseUrl);
+	push(params.tunnelUrl);
 	return ordered;
 }
 /** First LAN URL when the gateway listens on a network-accessible bind host. */

package/dist/src/tunnel/pair-url.js.map

@@ -1 +1 @@
-{"version":3,"file":"pair-url.js","names":[],"sources":["../../../src/tunnel/pair-url.ts"],"sourcesContent":["import net from 'node:net';\n\nimport { isNetworkAccessibleBindHost, resolveGatewayEffectiveHost } from '../config/gateway-bind.js';\nimport type { Config } from '../config/schema.js';\nimport { enumerateLanGatewayCandidates } from './tunnel-qr.js';\n\nexport type MobilePairUrlValidationCode = 'INVALID_URL' | 'LOOPBACK_NOT_REACHABLE';\n\nexport type MobilePairUrlValidationResult =\n  | { ok: true; url: string; loopback: false }\n  | { ok: false; code: MobilePairUrlValidationCode; message: string };\n\n/** Normalize a gateway root URL (no trailing slash, no path). */\nexport function normalizeGatewayBaseUrl(raw: string): string | null {\n  const trimmed = raw.trim();\n  if (!trimmed) return null;\n  try {\n    const u = new URL(trimmed);\n    if (u.protocol !== 'http:' && u.protocol !== 'https:') {\n      return null;\n    }\n    if (u.username || u.password) return null;\n    if (u.pathname && u.pathname !== '/') return null;\n    if (u.search || u.hash) return null;\n    const portSuffix = u.port ? `:${u.port}` : '';\n    return `${u.protocol}//${u.hostname}${portSuffix}`;\n  } catch {\n    return null;\n  }\n}\n\n/** True when a phone on the network cannot reach this gateway root URL. */\nexport function isLoopbackGatewayBaseUrl(raw: string): boolean {\n  const normalized = normalizeGatewayBaseUrl(raw);\n  if (!normalized) return false;\n  try {\n    const u = new URL(normalized);\n    const host = u.hostname.trim().toLowerCase();\n    if (host === 'localhost' || host === '127.0.0.1' || host === '::1' || host === '[::1]') {\n      return true;\n    }\n    const ipVersion = net.isIP(host);\n    if (ipVersion === 4) {\n      const parts = host.split('.').map((p) => Number(p));\n      if (parts.length === 4 && parts.every((n) => Number.isInteger(n)) && parts[0] === 127) {\n        return true;\n      }\n    }\n    return false;\n  } catch {\n    return false;\n  }\n}\n\nexport function validateMobilePairBaseUrl(raw: string): MobilePairUrlValidationResult {\n  const url = normalizeGatewayBaseUrl(raw);\n  if (!url) {\n    return {\n      ok: false,\n      code: 'INVALID_URL',\n      message: 'Enter an absolute gateway URL starting with http:// or https:// (no path).',\n    };\n  }\n  if (isLoopbackGatewayBaseUrl(url)) {\n    return {\n      ok: false,\n      code: 'LOOPBACK_NOT_REACHABLE',\n      message:\n        '127.0.0.1 and localhost only work on the gateway machine. Use a LAN IP or tunnel URL instead.',\n    };\n  }\n  return { ok: true, url, loopback: false };\n}\n\nexport type ParsedMobileConnectDeepLink = {\n  baseUrl: string;\n  lanUrl: string | null;\n  pairingSecret: string;\n};\n\n/** Parse `xopc://gateway/mobile-connect?...` payloads from QR codes. */\nexport function parseMobileConnectDeepLink(raw: string): ParsedMobileConnectDeepLink | null {\n  const trimmed = raw.trim();\n  if (!trimmed) return null;\n  try {\n    const u = new URL(trimmed);\n    if (u.protocol !== 'xopc:' || u.hostname !== 'gateway' || u.pathname !== '/mobile-connect') {\n      return null;\n    }\n    const baseUrl = u.searchParams.get('baseUrl')?.trim() ?? '';\n    const psRaw = u.searchParams.get('ps')?.trim() ?? '';\n    let pairingSecret = psRaw;\n    if (psRaw) {\n      try {\n        pairingSecret = decodeURIComponent(psRaw);\n      } catch {\n        pairingSecret = psRaw;\n      }\n    }\n    if (!baseUrl || !pairingSecret) return null;\n    const lanRaw = u.searchParams.get('lanUrl')?.trim() ?? '';\n    const lanUrl = lanRaw ? normalizeGatewayBaseUrl(lanRaw) : null;\n    const normalizedBase = normalizeGatewayBaseUrl(baseUrl);\n    if (!normalizedBase) return null;\n    return {\n      baseUrl: normalizedBase,\n      lanUrl,\n      pairingSecret,\n    };\n  } catch {\n    return null;\n  }\n}\n\n/** Ordered URLs for mobile clients: prefer LAN on the same network, then tunnel/base. */\nexport function buildMobileConnectUrlOrder(params: {\n  baseUrl: string | null | undefined;\n  lanUrl: string | null | undefined;\n}): string[] {\n  const ordered: string[] = [];\n  const seen = new Set<string>();\n\n  const push = (raw: string | null | undefined) => {\n    const url = raw ? normalizeGatewayBaseUrl(raw) : null;\n    if (!url || isLoopbackGatewayBaseUrl(url) || seen.has(url)) return;\n    seen.add(url);\n    ordered.push(url);\n  };\n\n  push(params.lanUrl);\n  push(params.baseUrl);\n  return ordered;\n}\n\n/** First LAN URL when the gateway listens on a network-accessible bind host. */\nexport function resolveMobilePairLanUrl(config: Config): string | null {\n  const listenHost = resolveGatewayEffectiveHost(config);\n  if (!isNetworkAccessibleBindHost(listenHost)) return null;\n  const port = config.gateway?.port ?? 18790;\n  return enumerateLanGatewayCandidates(port)[0]?.url ?? null;\n}\n"],"mappings":";;;;;AAaA,SAAgB,wBAAwB,KAA4B;CAClE,MAAM,UAAU,IAAI,MAAM;AAC1B,KAAI,CAAC,QAAS,QAAO;AACrB,KAAI;EACF,MAAM,IAAI,IAAI,IAAI,QAAQ;AAC1B,MAAI,EAAE,aAAa,WAAW,EAAE,aAAa,SAC3C,QAAO;AAET,MAAI,EAAE,YAAY,EAAE,SAAU,QAAO;AACrC,MAAI,EAAE,YAAY,EAAE,aAAa,IAAK,QAAO;AAC7C,MAAI,EAAE,UAAU,EAAE,KAAM,QAAO;EAC/B,MAAM,aAAa,EAAE,OAAO,IAAI,EAAE,SAAS;AAC3C,SAAO,GAAG,EAAE,SAAS,IAAI,EAAE,WAAW;SAChC;AACN,SAAO;;;;AAKX,SAAgB,yBAAyB,KAAsB;CAC7D,MAAM,aAAa,wBAAwB,IAAI;AAC/C,KAAI,CAAC,WAAY,QAAO;AACxB,KAAI;EAEF,MAAM,OAAO,IADC,IAAI,WACJ,CAAC,SAAS,MAAM,CAAC,aAAa;AAC5C,MAAI,SAAS,eAAe,SAAS,eAAe,SAAS,SAAS,SAAS,QAC7E,QAAO;AAGT,MADkB,IAAI,KAAK,KACd,KAAK,GAAG;GACnB,MAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,OAAO,EAAE,CAAC;AACnD,OAAI,MAAM,WAAW,KAAK,MAAM,OAAO,MAAM,OAAO,UAAU,EAAE,CAAC,IAAI,MAAM,OAAO,IAChF,QAAO;;AAGX,SAAO;SACD;AACN,SAAO;;;AAIX,SAAgB,0BAA0B,KAA4C;CACpF,MAAM,MAAM,wBAAwB,IAAI;AACxC,KAAI,CAAC,IACH,QAAO;EACL,IAAI;EACJ,MAAM;EACN,SAAS;EACV;AAEH,KAAI,yBAAyB,IAAI,CAC/B,QAAO;EACL,IAAI;EACJ,MAAM;EACN,SACE;EACH;AAEH,QAAO;EAAE,IAAI;EAAM;EAAK,UAAU;EAAO;;;AAU3C,SAAgB,2BAA2B,KAAiD;CAC1F,MAAM,UAAU,IAAI,MAAM;AAC1B,KAAI,CAAC,QAAS,QAAO;AACrB,KAAI;EACF,MAAM,IAAI,IAAI,IAAI,QAAQ;AAC1B,MAAI,EAAE,aAAa,WAAW,EAAE,aAAa,aAAa,EAAE,aAAa,kBACvE,QAAO;EAET,MAAM,UAAU,EAAE,aAAa,IAAI,UAAU,EAAE,MAAM,IAAI;EACzD,MAAM,QAAQ,EAAE,aAAa,IAAI,KAAK,EAAE,MAAM,IAAI;EAClD,IAAI,gBAAgB;AACpB,MAAI,MACF,KAAI;AACF,mBAAgB,mBAAmB,MAAM;UACnC;AACN,mBAAgB;;AAGpB,MAAI,CAAC,WAAW,CAAC,cAAe,QAAO;EACvC,MAAM,SAAS,EAAE,aAAa,IAAI,SAAS,EAAE,MAAM,IAAI;EACvD,MAAM,SAAS,SAAS,wBAAwB,OAAO,GAAG;EAC1D,MAAM,iBAAiB,wBAAwB,QAAQ;AACvD,MAAI,CAAC,eAAgB,QAAO;AAC5B,SAAO;GACL,SAAS;GACT;GACA;GACD;SACK;AACN,SAAO;;;;AAKX,SAAgB,2BAA2B,QAG9B;CACX,MAAM,UAAoB,EAAE;CAC5B,MAAM,uBAAO,IAAI,KAAa;CAE9B,MAAM,QAAQ,QAAmC;EAC/C,MAAM,MAAM,MAAM,wBAAwB,IAAI,GAAG;AACjD,MAAI,CAAC,OAAO,yBAAyB,IAAI,IAAI,KAAK,IAAI,IAAI,CAAE;AAC5D,OAAK,IAAI,IAAI;AACb,UAAQ,KAAK,IAAI;;AAGnB,MAAK,OAAO,OAAO;AACnB,MAAK,OAAO,QAAQ;AACpB,QAAO;;;AAIT,SAAgB,wBAAwB,QAA+B;AAErE,KAAI,CAAC,4BADc,4BAA4B,OACJ,CAAC,CAAE,QAAO;AAErD,QAAO,8BADM,OAAO,SAAS,QAAQ,MACK,CAAC,IAAI,OAAO"}
+{"version":3,"file":"pair-url.js","names":[],"sources":["../../../src/tunnel/pair-url.ts"],"sourcesContent":["import net from 'node:net';\n\nimport { isNetworkAccessibleBindHost, resolveGatewayEffectiveHost } from '../config/gateway-bind.js';\nimport type { Config } from '../config/schema.js';\nimport { enumerateLanGatewayCandidates } from './tunnel-qr.js';\n\nexport type MobilePairUrlValidationCode = 'INVALID_URL' | 'LOOPBACK_NOT_REACHABLE';\n\nexport type MobilePairUrlValidationResult =\n  | { ok: true; url: string; loopback: false }\n  | { ok: false; code: MobilePairUrlValidationCode; message: string };\n\n/** Normalize a gateway root URL (no trailing slash, no path). */\nexport function normalizeGatewayBaseUrl(raw: string): string | null {\n  const trimmed = raw.trim();\n  if (!trimmed) return null;\n  try {\n    const u = new URL(trimmed);\n    if (u.protocol !== 'http:' && u.protocol !== 'https:') {\n      return null;\n    }\n    if (u.username || u.password) return null;\n    if (u.pathname && u.pathname !== '/') return null;\n    if (u.search || u.hash) return null;\n    const portSuffix = u.port ? `:${u.port}` : '';\n    return `${u.protocol}//${u.hostname}${portSuffix}`;\n  } catch {\n    return null;\n  }\n}\n\n/** True when a phone on the network cannot reach this gateway root URL. */\nexport function isLoopbackGatewayBaseUrl(raw: string): boolean {\n  const normalized = normalizeGatewayBaseUrl(raw);\n  if (!normalized) return false;\n  try {\n    const u = new URL(normalized);\n    const host = u.hostname.trim().toLowerCase();\n    if (host === 'localhost' || host === '127.0.0.1' || host === '::1' || host === '[::1]') {\n      return true;\n    }\n    const ipVersion = net.isIP(host);\n    if (ipVersion === 4) {\n      const parts = host.split('.').map((p) => Number(p));\n      if (parts.length === 4 && parts.every((n) => Number.isInteger(n)) && parts[0] === 127) {\n        return true;\n      }\n    }\n    return false;\n  } catch {\n    return false;\n  }\n}\n\nexport function validateMobilePairBaseUrl(raw: string): MobilePairUrlValidationResult {\n  const url = normalizeGatewayBaseUrl(raw);\n  if (!url) {\n    return {\n      ok: false,\n      code: 'INVALID_URL',\n      message: 'Enter an absolute gateway URL starting with http:// or https:// (no path).',\n    };\n  }\n  if (isLoopbackGatewayBaseUrl(url)) {\n    return {\n      ok: false,\n      code: 'LOOPBACK_NOT_REACHABLE',\n      message:\n        '127.0.0.1 and localhost only work on the gateway machine. Use a LAN IP or tunnel URL instead.',\n    };\n  }\n  return { ok: true, url, loopback: false };\n}\n\nexport type ParsedMobileConnectDeepLink = {\n  baseUrl: string;\n  lanUrl: string | null;\n  pairingSecret: string;\n};\n\n/** Parse `xopc://gateway/mobile-connect?...` payloads from QR codes. */\nexport function parseMobileConnectDeepLink(raw: string): ParsedMobileConnectDeepLink | null {\n  const trimmed = raw.trim();\n  if (!trimmed) return null;\n  try {\n    const u = new URL(trimmed);\n    if (u.protocol !== 'xopc:' || u.hostname !== 'gateway' || u.pathname !== '/mobile-connect') {\n      return null;\n    }\n    const baseUrl = u.searchParams.get('baseUrl')?.trim() ?? '';\n    const psRaw = u.searchParams.get('ps')?.trim() ?? '';\n    let pairingSecret = psRaw;\n    if (psRaw) {\n      try {\n        pairingSecret = decodeURIComponent(psRaw);\n      } catch {\n        pairingSecret = psRaw;\n      }\n    }\n    if (!baseUrl || !pairingSecret) return null;\n    const lanRaw = u.searchParams.get('lanUrl')?.trim() ?? '';\n    const lanUrl = lanRaw ? normalizeGatewayBaseUrl(lanRaw) : null;\n    const normalizedBase = normalizeGatewayBaseUrl(baseUrl);\n    if (!normalizedBase) return null;\n    return {\n      baseUrl: normalizedBase,\n      lanUrl,\n      pairingSecret,\n    };\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Ordered URLs for mobile clients. Priority:\n *   1. reverse-proxy public URL (user-deployed HTTPS, typically fastest + works on cellular)\n *   2. LAN URL (zero-RTT on same network)\n *   3. baseUrl (legacy: usually the FRP tunnel public URL, kept for callers that\n *      do not yet split reverseProxyUrl from tunnelUrl)\n *   4. tunnelUrl (explicit FRP tunnel URL, kept as a fallback even when a\n *      reverse-proxy URL is also configured)\n *\n * Loopback URLs are dropped (they only work on the gateway host) and\n * duplicates are de-duped while preserving first occurrence order.\n */\nexport function buildMobileConnectUrlOrder(params: {\n  baseUrl: string | null | undefined;\n  lanUrl: string | null | undefined;\n  reverseProxyUrl?: string | null | undefined;\n  tunnelUrl?: string | null | undefined;\n}): string[] {\n  const ordered: string[] = [];\n  const seen = new Set<string>();\n\n  const push = (raw: string | null | undefined) => {\n    const url = raw ? normalizeGatewayBaseUrl(raw) : null;\n    if (!url || isLoopbackGatewayBaseUrl(url) || seen.has(url)) return;\n    seen.add(url);\n    ordered.push(url);\n  };\n\n  push(params.reverseProxyUrl);\n  push(params.lanUrl);\n  push(params.baseUrl);\n  push(params.tunnelUrl);\n  return ordered;\n}\n\n/** First LAN URL when the gateway listens on a network-accessible bind host. */\nexport function resolveMobilePairLanUrl(config: Config): string | null {\n  const listenHost = resolveGatewayEffectiveHost(config);\n  if (!isNetworkAccessibleBindHost(listenHost)) return null;\n  const port = config.gateway?.port ?? 18790;\n  return enumerateLanGatewayCandidates(port)[0]?.url ?? null;\n}\n"],"mappings":";;;;;AAaA,SAAgB,wBAAwB,KAA4B;CAClE,MAAM,UAAU,IAAI,MAAM;AAC1B,KAAI,CAAC,QAAS,QAAO;AACrB,KAAI;EACF,MAAM,IAAI,IAAI,IAAI,QAAQ;AAC1B,MAAI,EAAE,aAAa,WAAW,EAAE,aAAa,SAC3C,QAAO;AAET,MAAI,EAAE,YAAY,EAAE,SAAU,QAAO;AACrC,MAAI,EAAE,YAAY,EAAE,aAAa,IAAK,QAAO;AAC7C,MAAI,EAAE,UAAU,EAAE,KAAM,QAAO;EAC/B,MAAM,aAAa,EAAE,OAAO,IAAI,EAAE,SAAS;AAC3C,SAAO,GAAG,EAAE,SAAS,IAAI,EAAE,WAAW;SAChC;AACN,SAAO;;;;AAKX,SAAgB,yBAAyB,KAAsB;CAC7D,MAAM,aAAa,wBAAwB,IAAI;AAC/C,KAAI,CAAC,WAAY,QAAO;AACxB,KAAI;EAEF,MAAM,OAAO,IADC,IAAI,WACJ,CAAC,SAAS,MAAM,CAAC,aAAa;AAC5C,MAAI,SAAS,eAAe,SAAS,eAAe,SAAS,SAAS,SAAS,QAC7E,QAAO;AAGT,MADkB,IAAI,KAAK,KACd,KAAK,GAAG;GACnB,MAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,OAAO,EAAE,CAAC;AACnD,OAAI,MAAM,WAAW,KAAK,MAAM,OAAO,MAAM,OAAO,UAAU,EAAE,CAAC,IAAI,MAAM,OAAO,IAChF,QAAO;;AAGX,SAAO;SACD;AACN,SAAO;;;AAIX,SAAgB,0BAA0B,KAA4C;CACpF,MAAM,MAAM,wBAAwB,IAAI;AACxC,KAAI,CAAC,IACH,QAAO;EACL,IAAI;EACJ,MAAM;EACN,SAAS;EACV;AAEH,KAAI,yBAAyB,IAAI,CAC/B,QAAO;EACL,IAAI;EACJ,MAAM;EACN,SACE;EACH;AAEH,QAAO;EAAE,IAAI;EAAM;EAAK,UAAU;EAAO;;;AAU3C,SAAgB,2BAA2B,KAAiD;CAC1F,MAAM,UAAU,IAAI,MAAM;AAC1B,KAAI,CAAC,QAAS,QAAO;AACrB,KAAI;EACF,MAAM,IAAI,IAAI,IAAI,QAAQ;AAC1B,MAAI,EAAE,aAAa,WAAW,EAAE,aAAa,aAAa,EAAE,aAAa,kBACvE,QAAO;EAET,MAAM,UAAU,EAAE,aAAa,IAAI,UAAU,EAAE,MAAM,IAAI;EACzD,MAAM,QAAQ,EAAE,aAAa,IAAI,KAAK,EAAE,MAAM,IAAI;EAClD,IAAI,gBAAgB;AACpB,MAAI,MACF,KAAI;AACF,mBAAgB,mBAAmB,MAAM;UACnC;AACN,mBAAgB;;AAGpB,MAAI,CAAC,WAAW,CAAC,cAAe,QAAO;EACvC,MAAM,SAAS,EAAE,aAAa,IAAI,SAAS,EAAE,MAAM,IAAI;EACvD,MAAM,SAAS,SAAS,wBAAwB,OAAO,GAAG;EAC1D,MAAM,iBAAiB,wBAAwB,QAAQ;AACvD,MAAI,CAAC,eAAgB,QAAO;AAC5B,SAAO;GACL,SAAS;GACT;GACA;GACD;SACK;AACN,SAAO;;;;;;;;;;;;;;;AAgBX,SAAgB,2BAA2B,QAK9B;CACX,MAAM,UAAoB,EAAE;CAC5B,MAAM,uBAAO,IAAI,KAAa;CAE9B,MAAM,QAAQ,QAAmC;EAC/C,MAAM,MAAM,MAAM,wBAAwB,IAAI,GAAG;AACjD,MAAI,CAAC,OAAO,yBAAyB,IAAI,IAAI,KAAK,IAAI,IAAI,CAAE;AAC5D,OAAK,IAAI,IAAI;AACb,UAAQ,KAAK,IAAI;;AAGnB,MAAK,OAAO,gBAAgB;AAC5B,MAAK,OAAO,OAAO;AACnB,MAAK,OAAO,QAAQ;AACpB,MAAK,OAAO,UAAU;AACtB,QAAO;;;AAIT,SAAgB,wBAAwB,QAA+B;AAErE,KAAI,CAAC,4BADc,4BAA4B,OACJ,CAAC,CAAE,QAAO;AAErD,QAAO,8BADM,OAAO,SAAS,QAAQ,MACK,CAAC,IAAI,OAAO"}

package/dist/src/tunnel/tunnel-service.js

@@ -1,14 +1,14 @@
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { clearTunnelState, loadTunnelState, saveTunnelState, updateTunnelState } from "./tunnel-state.js";
+import { buildMobileConnectQrPayload, resolveLanGatewayUrl } from "./tunnel-qr.js";
 import { TunnelBrokerClient, resolveBrokerApiBase } from "./broker-client.js";
 import { clearFrpcPathForProcess, ensureFrpcBinary, publishFrpcPathForProcess } from "./frpc-binary.js";
 import { writeFrpcConfig } from "./frpc-config.js";
 import { spawnFrpcProcess } from "./frpc-process.js";
-import { buildMobileConnectQrPayload, resolveLanGatewayUrl } from "./tunnel-qr.js";
 import { createPairingSecret } from "./pairing.js";
 import { canResumePersistedTunnel, persistedFromRegistration, registrationFromPersisted } from "./tunnel-persist.js";
-import { clearTunnelState, loadTunnelState, saveTunnelState, updateTunnelState } from "./tunnel-state.js";
 import { logTunnelAudit } from "./tunnel-audit.js";
 import { createHash } from "node:crypto";
 import { EventEmitter } from "node:events";

package/dist/src/tunnel/tunnel-state.js

@@ -1,7 +1,7 @@
 import { resolveStateDir } from "../config/paths-state.js";
 import { init_paths } from "../config/paths.js";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 //#region src/tunnel/tunnel-state.ts
 init_paths();
 const TUNNEL_STATE_FILE = "tunnel.json";

package/dist/src/utils/logger/audit.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { getLogDir, init_config } from "./config.js";
-import { appendFile } from "fs/promises";
 import path from "path";
 import { existsSync, mkdirSync } from "fs";
+import { appendFile } from "fs/promises";
 //#region src/utils/logger/audit.ts
 /**
 * Audit Log

package/dist/src/utils/logger/log-store.js

@@ -1,6 +1,6 @@
-import { readFile } from "fs/promises";
 import { basename, join } from "path";
 import { createReadStream, existsSync, mkdirSync, readdirSync, statSync, unlinkSync } from "fs";
+import { readFile } from "fs/promises";
 import { gunzip } from "zlib";
 import { promisify } from "util";
 import { createInterface } from "readline";

package/dist/src/utils/logger/rotation.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { config, getLogDir, init_config } from "./config.js";
-import { writeFile } from "fs/promises";
 import { join } from "path";
 import { readFileSync, readdirSync, statSync, unlinkSync } from "fs";
+import { writeFile } from "fs/promises";
 import { gzip } from "zlib";
 import { promisify } from "util";
 //#region src/utils/logger/rotation.ts

package/dist/src/voice/tts/audio.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { unlink, writeFile } from "fs/promises";
 import { join } from "path";
+import { unlink, writeFile } from "fs/promises";
 import { spawn } from "child_process";
 import { tmpdir } from "os";
 //#region src/voice/tts/audio.ts

package/dist/src/voice/tts/providers/edge-speech.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
 import { registerSpeechProvider } from "../speech-registry.js";
-import { mkdtempSync, readFileSync, rmSync } from "node:fs";
-import path from "node:path";
 import { tmpdir } from "node:os";
+import path from "node:path";
+import { mkdtempSync, readFileSync, rmSync } from "node:fs";
 //#region src/voice/tts/providers/edge-speech.ts
 /**
 * Edge TTS provider — wraps the `node-edge-tts` package. Requires no API key

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.84",
+  "version": "0.0.85",
   "description": "The OPC workstation that grows with you: AI assistant for One Person Companies — CLI, gateway, multi-channel (Telegram/WeChat), 20+ LLM providers via pi-ai, extensions and skills.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -67,6 +67,7 @@
     "@sinclair/typebox": "^0.34.49",
     "@vscode/ripgrep": "^1.18.0",
     "abort-controller": "^3.0.0",
+    "acorn": "^8.16.0",
     "adm-zip": "^0.5.17",
     "ajv": "^8.20.0",
     "chalk": "^5.6.2",
@@ -140,7 +141,7 @@
     "dev:web": "pnpm -C web run dev",
     "dev": "tsx src/cli/bin.ts",
     "start": "node dist/src/cli/bin.js",
-    "test": "vitest run src extensions/telegram/src extensions/feishu/src extensions/openai/src extensions/dashscope/src extensions/minimax/src extensions/google/src extensions/fal/src",
+    "test": "vitest run src extensions/telegram/src extensions/feishu/src extensions/weixin/src extensions/openai/src extensions/dashscope/src extensions/minimax/src extensions/google/src extensions/fal/src",
     "test:skills": "vitest run src/agent/skills/__tests__",
     "test:skills:regression": "./scripts/test-skills.sh",
     "test:skills:all": "npm run test:skills && npm run test:skills:regression",