@xopcai/xopc 0.0.84 → 0.0.86

package/dist/src/share/site-share-store.js

@@ -0,0 +1,400 @@
+import { resolveStateDir } from "../config/paths-state.js";
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
+import { init_paths } from "../config/paths.js";
+import { SITE_SHARE_CONFIG_DEFAULTS } from "./site-share-types.js";
+import { isPathUnderWorkspace } from "../gateway/workspace-editor-path.js";
+import { join, relative, resolve } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { randomBytes, randomUUID } from "node:crypto";
+import { lstat, readdir, realpath, stat } from "node:fs/promises";
+//#region src/share/site-share-store.ts
+init_paths();
+init_logger();
+const log = createLogger("SiteShareStore");
+const SITE_SHARES_FILE = "site-shares.json";
+const CLEANUP_INTERVAL_MS = 10 * 6e4;
+const EXPIRED_RETENTION_MS = 1440 * 6e4;
+const MAX_STORED = 200;
+const REQUEST_COUNT_DEBOUNCE_MS = 5e3;
+const SUBDOMAIN_PATTERN = /^[a-z0-9]([a-z0-9-]{0,30}[a-z0-9])?$/;
+function resolveStorePath() {
+	return join(resolveStateDir(), SITE_SHARES_FILE);
+}
+var SiteShareStore = class {
+	shares = /* @__PURE__ */ new Map();
+	byToken = /* @__PURE__ */ new Map();
+	bySubdomain = /* @__PURE__ */ new Map();
+	config;
+	dirty = false;
+	debounceTimer = null;
+	cleanupTimer = null;
+	/** Optional cleanup hook invoked when a record is dropped (e.g. delete staging dir). */
+	onCleanup = null;
+	constructor(config) {
+		this.config = {
+			...SITE_SHARE_CONFIG_DEFAULTS,
+			...config
+		};
+		this.load();
+		this.startCleanupTimer();
+	}
+	updateConfig(config) {
+		this.config = {
+			...this.config,
+			...config
+		};
+	}
+	setCleanupHook(hook) {
+		this.onCleanup = hook;
+	}
+	getConfig() {
+		return JSON.parse(JSON.stringify(this.config));
+	}
+	async create(params) {
+		if (!this.config.enabled) throw new Error("Site sharing is disabled");
+		if (this.getActiveShares().length >= this.config.maxActiveSites) throw new Error(`Maximum active site shares reached (${this.config.maxActiveSites})`);
+		const ttlMs = params.ttlMs ?? this.config.defaultTtlMs;
+		if (ttlMs < 6e4 || ttlMs > this.config.maxTtlMs) throw new Error(`TTL must be between 60s and ${this.config.maxTtlMs / 1e3}s`);
+		const source = await this.buildSource(params);
+		const subdomain = this.resolveSubdomain(params.subdomain);
+		const id = randomUUID();
+		const token = randomBytes(24).toString("base64url");
+		const now = /* @__PURE__ */ new Date();
+		const record = {
+			id,
+			token,
+			subdomain,
+			source,
+			createdAt: now.toISOString(),
+			expiresAt: new Date(now.getTime() + ttlMs).toISOString(),
+			revoked: false,
+			description: params.description,
+			createdByTokenHash: params.gatewayTokenHash,
+			requestCount: 0,
+			uniqueClientCount: 0,
+			maxRequests: params.maxRequests ?? null
+		};
+		this.shares.set(id, record);
+		this.byToken.set(token, id);
+		if (subdomain) this.bySubdomain.set(subdomain, id);
+		this.persistSync();
+		log.info({
+			id,
+			tokenPrefix: token.slice(0, 8),
+			subdomain,
+			kind: source.kind
+		}, `Site share created (${source.kind})`);
+		return record;
+	}
+	async buildSource(params) {
+		if (params.kind === "static") {
+			if (!this.config.static.enabled) throw new Error("Static site sharing is disabled");
+			if (!params.workspaceRoot) throw new Error("workspaceRoot required for static site shares");
+			if (!params.path) throw new Error("path required for static site shares");
+			const relPath = params.path.trim().replace(/\\/g, "/").replace(/^\/+/, "");
+			if (!relPath) throw new Error("Empty path");
+			if (relPath.includes("..") || relPath.includes("\0")) throw new Error("Invalid path");
+			const absRoot = resolve(params.workspaceRoot, relPath);
+			const relToRoot = relative(resolve(params.workspaceRoot), absRoot);
+			if (relToRoot.startsWith("..") || relToRoot.split(/[/\\]/).includes("..")) throw new Error("Path is outside workspace");
+			const real = await realpath(absRoot);
+			if (!isPathUnderWorkspace(params.workspaceRoot, real)) throw new Error("Path target is outside workspace");
+			if (!(await stat(absRoot)).isDirectory()) throw new Error("Static source must be a directory");
+			const summary = await scanStatic(absRoot, this.config.static.maxFileCount, this.config.static.maxRootDirSize);
+			log.debug({
+				...summary,
+				rootDir: absRoot
+			}, "Static site scanned");
+			return {
+				kind: "static",
+				rootDir: absRoot,
+				workspaceRoot: params.workspaceRoot,
+				workspaceRelativePath: relPath,
+				spaFallback: params.spaFallback ?? true,
+				rewriteMode: params.rewriteMode ?? (this.config.static.rewriteEnabledByDefault ? "html-css" : "none")
+			};
+		}
+		if (params.kind === "proxy") {
+			if (!this.config.proxy.enabled) throw new Error("Proxy site sharing is disabled");
+			if (!params.upstreamUrl) throw new Error("upstreamUrl required for proxy shares");
+			return {
+				kind: "proxy",
+				upstreamUrl: validateUpstreamUrl(params.upstreamUrl, this.config.proxy),
+				rewriteSetCookiePath: this.config.proxy.rewriteSetCookiePath,
+				forwardWebSocket: params.forwardWebSocket ?? this.config.proxy.forwardWebSocket,
+				forwardedHeaders: "minimal"
+			};
+		}
+		throw new Error(`Unsupported site share kind: ${params.kind}`);
+	}
+	resolveSubdomain(preferred) {
+		if (!preferred) return null;
+		const lower = preferred.trim().toLowerCase();
+		if (!SUBDOMAIN_PATTERN.test(lower)) throw new Error("Subdomain must match /^[a-z0-9]([a-z0-9-]{0,30}[a-z0-9])?$/");
+		if (this.bySubdomain.has(lower)) throw new Error(`Subdomain '${lower}' already in use`);
+		return lower;
+	}
+	getById(id) {
+		return this.shares.get(id) ?? null;
+	}
+	getByToken(token) {
+		const id = this.byToken.get(token);
+		return id ? this.shares.get(id) ?? null : null;
+	}
+	getBySubdomain(subdomain) {
+		const id = this.bySubdomain.get(subdomain.toLowerCase());
+		return id ? this.shares.get(id) ?? null : null;
+	}
+	/**
+	* Look up a record by token first, then by subdomain. Subdomain label may
+	* itself be the share token (when user didn't pick a custom subdomain).
+	*/
+	resolveByHostLabel(label) {
+		return this.getByToken(label) ?? this.getBySubdomain(label);
+	}
+	getActiveShares() {
+		const now = Date.now();
+		return [...this.shares.values()].filter((r) => !r.revoked && now < new Date(r.expiresAt).getTime());
+	}
+	getAllShares() {
+		return [...this.shares.values()].sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());
+	}
+	validateAccess(record) {
+		if (record.revoked) return {
+			valid: false,
+			reason: "revoked"
+		};
+		if (Date.now() >= new Date(record.expiresAt).getTime()) return {
+			valid: false,
+			reason: "expired"
+		};
+		if (record.maxRequests !== null && record.requestCount >= record.maxRequests) return {
+			valid: false,
+			reason: "max_requests"
+		};
+		return { valid: true };
+	}
+	/** Increment counters when a request lands. Debounced persist. */
+	recordRequest(id, clientIp) {
+		const record = this.shares.get(id);
+		if (!record) return;
+		record.requestCount++;
+		const recent = record.recentClientIps ??= [];
+		if (!recent.includes(clientIp)) {
+			recent.unshift(clientIp);
+			if (recent.length > 200) recent.length = 200;
+			record.uniqueClientCount = recent.length;
+		}
+		this.scheduleDebouncedPersist();
+	}
+	setThumbnailStatus(id, status) {
+		const record = this.shares.get(id);
+		if (!record) return;
+		record.thumbnailStatus = status;
+		if (status === "ready") record.thumbnailGeneratedAt = (/* @__PURE__ */ new Date()).toISOString();
+		if (status === "failed") record.thumbnailFailedAt = (/* @__PURE__ */ new Date()).toISOString();
+		this.persistSync();
+	}
+	revoke(id) {
+		const record = this.shares.get(id);
+		if (!record) return false;
+		record.revoked = true;
+		this.persistSync();
+		if (this.onCleanup) try {
+			this.onCleanup(record);
+		} catch (err) {
+			log.warn({
+				err,
+				id
+			}, "Site share cleanup hook threw on revoke");
+		}
+		log.info({
+			id,
+			tokenPrefix: record.token.slice(0, 8)
+		}, "Site share revoked");
+		return true;
+	}
+	revokeMany(ids) {
+		let count = 0;
+		for (const id of ids) {
+			const record = this.shares.get(id);
+			if (record && !record.revoked) {
+				record.revoked = true;
+				count++;
+			}
+		}
+		if (count > 0) this.persistSync();
+		return count;
+	}
+	revokeExpired() {
+		const now = Date.now();
+		let count = 0;
+		for (const record of this.shares.values()) if (!record.revoked && now >= new Date(record.expiresAt).getTime()) {
+			record.revoked = true;
+			count++;
+		}
+		if (count > 0) this.persistSync();
+		return count;
+	}
+	update(id, patch) {
+		const record = this.shares.get(id);
+		if (!record) return null;
+		if (patch.extendTtlMs !== void 0) record.expiresAt = new Date(Date.now() + patch.extendTtlMs).toISOString();
+		if (patch.maxRequests !== void 0) record.maxRequests = patch.maxRequests;
+		this.persistSync();
+		return record;
+	}
+	load() {
+		const path = resolveStorePath();
+		if (!existsSync(path)) return;
+		try {
+			const raw = readFileSync(path, "utf8");
+			const data = JSON.parse(raw);
+			if (data.version !== 1 || !Array.isArray(data.shares)) return;
+			const now = Date.now();
+			let cleaned = 0;
+			for (const record of data.shares) {
+				if (now - new Date(record.expiresAt).getTime() > EXPIRED_RETENTION_MS) {
+					cleaned++;
+					continue;
+				}
+				this.shares.set(record.id, record);
+				this.byToken.set(record.token, record.id);
+				if (record.subdomain) this.bySubdomain.set(record.subdomain, record.id);
+			}
+			if (cleaned > 0) {
+				log.info({ cleaned }, `Cleaned ${cleaned} expired site-share records on load`);
+				this.persistSync();
+			}
+		} catch (err) {
+			log.warn({ err }, "Failed to load site-shares.json");
+		}
+	}
+	persistSync() {
+		const path = resolveStorePath();
+		mkdirSync(resolveStateDir(), { recursive: true });
+		let records = [...this.shares.values()];
+		if (records.length > MAX_STORED) {
+			records.sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());
+			records = records.slice(0, MAX_STORED);
+			this.shares.clear();
+			this.byToken.clear();
+			this.bySubdomain.clear();
+			for (const r of records) {
+				this.shares.set(r.id, r);
+				this.byToken.set(r.token, r.id);
+				if (r.subdomain) this.bySubdomain.set(r.subdomain, r.id);
+			}
+		}
+		writeFileSync(path, `${JSON.stringify({
+			version: 1,
+			shares: records
+		}, null, 2)}\n`, "utf8");
+	}
+	scheduleDebouncedPersist() {
+		this.dirty = true;
+		if (this.debounceTimer) return;
+		this.debounceTimer = setTimeout(() => {
+			this.debounceTimer = null;
+			if (this.dirty) {
+				this.dirty = false;
+				this.persistSync();
+			}
+		}, REQUEST_COUNT_DEBOUNCE_MS);
+		this.debounceTimer.unref?.();
+	}
+	startCleanupTimer() {
+		this.cleanupTimer = setInterval(() => {
+			const now = Date.now();
+			let removed = 0;
+			for (const [id, record] of this.shares) if (now - new Date(record.expiresAt).getTime() > EXPIRED_RETENTION_MS) {
+				this.shares.delete(id);
+				this.byToken.delete(record.token);
+				if (record.subdomain) this.bySubdomain.delete(record.subdomain);
+				if (this.onCleanup) try {
+					this.onCleanup(record);
+				} catch (err) {
+					log.warn({
+						err,
+						id
+					}, "Site share cleanup hook threw");
+				}
+				removed++;
+			}
+			if (removed > 0) {
+				this.persistSync();
+				log.debug({ removed }, `Cleaned ${removed} expired site shares`);
+			}
+		}, CLEANUP_INTERVAL_MS);
+		this.cleanupTimer.unref?.();
+	}
+	shutdown() {
+		if (this.cleanupTimer) {
+			clearInterval(this.cleanupTimer);
+			this.cleanupTimer = null;
+		}
+		if (this.debounceTimer) {
+			clearTimeout(this.debounceTimer);
+			this.debounceTimer = null;
+		}
+		if (this.dirty) {
+			this.dirty = false;
+			this.persistSync();
+		}
+	}
+};
+async function scanStatic(root, maxFileCount, maxRootDirSize) {
+	let fileCount = 0;
+	let totalSize = 0;
+	async function walk(dir, depth) {
+		if (depth > 16) return;
+		const dirents = await readdir(dir, { withFileTypes: true });
+		for (const dirent of dirents) {
+			if (fileCount >= maxFileCount) throw new Error(`Static site exceeds maxFileCount (${maxFileCount})`);
+			const abs = resolve(dir, dirent.name);
+			const lst = await lstat(abs);
+			if (lst.isSymbolicLink()) continue;
+			if (lst.isFile()) {
+				fileCount++;
+				totalSize += lst.size;
+				if (totalSize > maxRootDirSize) {
+					const mb = (maxRootDirSize / 1048576).toFixed(0);
+					throw new Error(`Static site exceeds maxRootDirSize (${mb} MB)`);
+				}
+			} else if (lst.isDirectory()) await walk(abs, depth + 1);
+		}
+	}
+	await walk(root, 0);
+	return {
+		fileCount,
+		totalSize
+	};
+}
+function validateUpstreamUrl(raw, cfg) {
+	let parsed;
+	try {
+		parsed = new URL(raw);
+	} catch {
+		throw new Error("upstreamUrl must be a valid URL");
+	}
+	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new Error("upstreamUrl must use http or https");
+	const host = parsed.hostname.toLowerCase();
+	if (!cfg.allowedUpstreamHosts.map((h) => h.toLowerCase()).includes(host)) throw new Error(`upstream host '${host}' is not in allowedUpstreamHosts`);
+	const port = parsed.port ? Number(parsed.port) : parsed.protocol === "https:" ? 443 : 80;
+	if (!cfg.allowedUpstreamPorts.includes(port)) throw new Error(`upstream port ${port} is not in allowedUpstreamPorts`);
+	return `${parsed.protocol}//${parsed.host}`;
+}
+let singleton = null;
+function getSiteShareStore(config) {
+	if (!singleton) singleton = new SiteShareStore(config);
+	return singleton;
+}
+function resetSiteShareStoreForTests() {
+	singleton?.shutdown();
+	singleton = null;
+}
+//#endregion
+export { SiteShareStore, getSiteShareStore, resetSiteShareStoreForTests };
+
+//# sourceMappingURL=site-share-store.js.map

package/dist/src/share/site-share-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-share-store.js","names":["resolvePath","relPathPosix"],"sources":["../../../src/share/site-share-store.ts"],"sourcesContent":["import { randomBytes, randomUUID } from 'node:crypto';\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport { stat, readdir, lstat, realpath } from 'node:fs/promises';\nimport { join, relative as relPathPosix, resolve as resolvePath } from 'node:path';\n\nimport { resolveStateDir } from '../config/paths.js';\nimport { isPathUnderWorkspace } from '../gateway/workspace-editor-path.js';\nimport { createLogger } from '../utils/logger.js';\nimport {\n  SITE_SHARE_CONFIG_DEFAULTS,\n  type CreateSiteShareParams,\n  type SiteShareConfig,\n  type SiteShareRecord,\n  type SiteShareStoreData,\n  type SiteSource,\n} from './site-share-types.js';\n\nconst log = createLogger('SiteShareStore');\n\nconst SITE_SHARES_FILE = 'site-shares.json';\nconst CLEANUP_INTERVAL_MS = 10 * 60_000;\nconst EXPIRED_RETENTION_MS = 24 * 60 * 60_000;\nconst MAX_STORED = 200;\nconst REQUEST_COUNT_DEBOUNCE_MS = 5_000;\nconst SUBDOMAIN_PATTERN = /^[a-z0-9]([a-z0-9-]{0,30}[a-z0-9])?$/;\n\nfunction resolveStorePath(): string {\n  return join(resolveStateDir(), SITE_SHARES_FILE);\n}\n\nexport class SiteShareStore {\n  private shares = new Map<string, SiteShareRecord>();\n  private byToken = new Map<string, string>();\n  private bySubdomain = new Map<string, string>();\n  private config: SiteShareConfig;\n  private dirty = false;\n  private debounceTimer: ReturnType<typeof setTimeout> | null = null;\n  private cleanupTimer: ReturnType<typeof setInterval> | null = null;\n  /** Optional cleanup hook invoked when a record is dropped (e.g. delete staging dir). */\n  private onCleanup: ((record: SiteShareRecord) => void) | null = null;\n\n  constructor(config?: Partial<SiteShareConfig>) {\n    this.config = { ...SITE_SHARE_CONFIG_DEFAULTS, ...config };\n    this.load();\n    this.startCleanupTimer();\n  }\n\n  updateConfig(config: Partial<SiteShareConfig>): void {\n    this.config = { ...this.config, ...config };\n  }\n\n  setCleanupHook(hook: (record: SiteShareRecord) => void): void {\n    this.onCleanup = hook;\n  }\n\n  getConfig(): SiteShareConfig {\n    return JSON.parse(JSON.stringify(this.config)) as SiteShareConfig;\n  }\n\n  // ── CRUD ────────────────────────────────────────────────────────────────────\n\n  async create(\n    params: CreateSiteShareParams & {\n      workspaceRoot: string | null;\n      gatewayTokenHash: string;\n    },\n  ): Promise<SiteShareRecord> {\n    if (!this.config.enabled) throw new Error('Site sharing is disabled');\n\n    const active = this.getActiveShares();\n    if (active.length >= this.config.maxActiveSites) {\n      throw new Error(`Maximum active site shares reached (${this.config.maxActiveSites})`);\n    }\n\n    const ttlMs = params.ttlMs ?? this.config.defaultTtlMs;\n    if (ttlMs < 60_000 || ttlMs > this.config.maxTtlMs) {\n      throw new Error(`TTL must be between 60s and ${this.config.maxTtlMs / 1000}s`);\n    }\n\n    const source = await this.buildSource(params);\n\n    const subdomain = this.resolveSubdomain(params.subdomain);\n    const id = randomUUID();\n    const token = randomBytes(24).toString('base64url');\n    const now = new Date();\n    const record: SiteShareRecord = {\n      id,\n      token,\n      subdomain,\n      source,\n      createdAt: now.toISOString(),\n      expiresAt: new Date(now.getTime() + ttlMs).toISOString(),\n      revoked: false,\n      description: params.description,\n      createdByTokenHash: params.gatewayTokenHash,\n      requestCount: 0,\n      uniqueClientCount: 0,\n      maxRequests: params.maxRequests ?? null,\n    };\n\n    this.shares.set(id, record);\n    this.byToken.set(token, id);\n    if (subdomain) this.bySubdomain.set(subdomain, id);\n    this.persistSync();\n\n    log.info(\n      { id, tokenPrefix: token.slice(0, 8), subdomain, kind: source.kind },\n      `Site share created (${source.kind})`,\n    );\n\n    return record;\n  }\n\n  private async buildSource(params: CreateSiteShareParams & { workspaceRoot: string | null }): Promise<SiteSource> {\n    if (params.kind === 'static') {\n      if (!this.config.static.enabled) throw new Error('Static site sharing is disabled');\n      if (!params.workspaceRoot) throw new Error('workspaceRoot required for static site shares');\n      if (!params.path) throw new Error('path required for static site shares');\n      const relPath = params.path.trim().replace(/\\\\/g, '/').replace(/^\\/+/, '');\n      if (!relPath) throw new Error('Empty path');\n      if (relPath.includes('..') || relPath.includes('\\0')) throw new Error('Invalid path');\n      const absRoot = resolvePath(params.workspaceRoot, relPath);\n      const relToRoot = relPathPosix(resolvePath(params.workspaceRoot), absRoot);\n      if (relToRoot.startsWith('..') || relToRoot.split(/[/\\\\]/).includes('..')) {\n        throw new Error('Path is outside workspace');\n      }\n      const real = await realpath(absRoot);\n      if (!isPathUnderWorkspace(params.workspaceRoot, real)) {\n        throw new Error('Path target is outside workspace');\n      }\n      const stats = await stat(absRoot);\n      if (!stats.isDirectory()) throw new Error('Static source must be a directory');\n      const summary = await scanStatic(absRoot, this.config.static.maxFileCount, this.config.static.maxRootDirSize);\n      log.debug({ ...summary, rootDir: absRoot }, 'Static site scanned');\n      return {\n        kind: 'static',\n        rootDir: absRoot,\n        workspaceRoot: params.workspaceRoot,\n        workspaceRelativePath: relPath,\n        spaFallback: params.spaFallback ?? true,\n        rewriteMode: params.rewriteMode ?? (this.config.static.rewriteEnabledByDefault ? 'html-css' : 'none'),\n      };\n    }\n\n    if (params.kind === 'proxy') {\n      if (!this.config.proxy.enabled) throw new Error('Proxy site sharing is disabled');\n      if (!params.upstreamUrl) throw new Error('upstreamUrl required for proxy shares');\n      const validated = validateUpstreamUrl(params.upstreamUrl, this.config.proxy);\n      return {\n        kind: 'proxy',\n        upstreamUrl: validated,\n        rewriteSetCookiePath: this.config.proxy.rewriteSetCookiePath,\n        forwardWebSocket: params.forwardWebSocket ?? this.config.proxy.forwardWebSocket,\n        forwardedHeaders: 'minimal',\n      };\n    }\n\n    throw new Error(`Unsupported site share kind: ${params.kind}`);\n  }\n\n  private resolveSubdomain(preferred?: string): string | null {\n    if (!preferred) return null;\n    const lower = preferred.trim().toLowerCase();\n    if (!SUBDOMAIN_PATTERN.test(lower)) {\n      throw new Error('Subdomain must match /^[a-z0-9]([a-z0-9-]{0,30}[a-z0-9])?$/');\n    }\n    if (this.bySubdomain.has(lower)) {\n      throw new Error(`Subdomain '${lower}' already in use`);\n    }\n    return lower;\n  }\n\n  getById(id: string): SiteShareRecord | null {\n    return this.shares.get(id) ?? null;\n  }\n\n  getByToken(token: string): SiteShareRecord | null {\n    const id = this.byToken.get(token);\n    return id ? this.shares.get(id) ?? null : null;\n  }\n\n  getBySubdomain(subdomain: string): SiteShareRecord | null {\n    const id = this.bySubdomain.get(subdomain.toLowerCase());\n    return id ? this.shares.get(id) ?? null : null;\n  }\n\n  /**\n   * Look up a record by token first, then by subdomain. Subdomain label may\n   * itself be the share token (when user didn't pick a custom subdomain).\n   */\n  resolveByHostLabel(label: string): SiteShareRecord | null {\n    return this.getByToken(label) ?? this.getBySubdomain(label);\n  }\n\n  getActiveShares(): SiteShareRecord[] {\n    const now = Date.now();\n    return [...this.shares.values()].filter(\n      (r) => !r.revoked && now < new Date(r.expiresAt).getTime(),\n    );\n  }\n\n  getAllShares(): SiteShareRecord[] {\n    return [...this.shares.values()].sort(\n      (a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime(),\n    );\n  }\n\n  validateAccess(record: SiteShareRecord): { valid: boolean; reason?: string } {\n    if (record.revoked) return { valid: false, reason: 'revoked' };\n    if (Date.now() >= new Date(record.expiresAt).getTime()) return { valid: false, reason: 'expired' };\n    if (record.maxRequests !== null && record.requestCount >= record.maxRequests) {\n      return { valid: false, reason: 'max_requests' };\n    }\n    return { valid: true };\n  }\n\n  /** Increment counters when a request lands. Debounced persist. */\n  recordRequest(id: string, clientIp: string): void {\n    const record = this.shares.get(id);\n    if (!record) return;\n    record.requestCount++;\n    const recent = (record.recentClientIps ??= []);\n    if (!recent.includes(clientIp)) {\n      recent.unshift(clientIp);\n      if (recent.length > 200) recent.length = 200;\n      record.uniqueClientCount = recent.length;\n    }\n    this.scheduleDebouncedPersist();\n  }\n\n  setThumbnailStatus(id: string, status: 'pending' | 'ready' | 'failed'): void {\n    const record = this.shares.get(id);\n    if (!record) return;\n    record.thumbnailStatus = status;\n    if (status === 'ready') record.thumbnailGeneratedAt = new Date().toISOString();\n    if (status === 'failed') record.thumbnailFailedAt = new Date().toISOString();\n    this.persistSync();\n  }\n\n  revoke(id: string): boolean {\n    const record = this.shares.get(id);\n    if (!record) return false;\n    record.revoked = true;\n    this.persistSync();\n    if (this.onCleanup) {\n      try {\n        this.onCleanup(record);\n      } catch (err) {\n        log.warn({ err, id }, 'Site share cleanup hook threw on revoke');\n      }\n    }\n    log.info({ id, tokenPrefix: record.token.slice(0, 8) }, 'Site share revoked');\n    return true;\n  }\n\n  revokeMany(ids: string[]): number {\n    let count = 0;\n    for (const id of ids) {\n      const record = this.shares.get(id);\n      if (record && !record.revoked) {\n        record.revoked = true;\n        count++;\n      }\n    }\n    if (count > 0) this.persistSync();\n    return count;\n  }\n\n  revokeExpired(): number {\n    const now = Date.now();\n    let count = 0;\n    for (const record of this.shares.values()) {\n      if (!record.revoked && now >= new Date(record.expiresAt).getTime()) {\n        record.revoked = true;\n        count++;\n      }\n    }\n    if (count > 0) this.persistSync();\n    return count;\n  }\n\n  update(id: string, patch: { extendTtlMs?: number; maxRequests?: number | null }): SiteShareRecord | null {\n    const record = this.shares.get(id);\n    if (!record) return null;\n    if (patch.extendTtlMs !== undefined) {\n      record.expiresAt = new Date(Date.now() + patch.extendTtlMs).toISOString();\n    }\n    if (patch.maxRequests !== undefined) {\n      record.maxRequests = patch.maxRequests;\n    }\n    this.persistSync();\n    return record;\n  }\n\n  // ── Persistence ─────────────────────────────────────────────────────────────\n\n  private load(): void {\n    const path = resolveStorePath();\n    if (!existsSync(path)) return;\n    try {\n      const raw = readFileSync(path, 'utf8');\n      const data = JSON.parse(raw) as SiteShareStoreData;\n      if (data.version !== 1 || !Array.isArray(data.shares)) return;\n      const now = Date.now();\n      let cleaned = 0;\n      for (const record of data.shares) {\n        const expiredMs = now - new Date(record.expiresAt).getTime();\n        if (expiredMs > EXPIRED_RETENTION_MS) {\n          cleaned++;\n          continue;\n        }\n        this.shares.set(record.id, record);\n        this.byToken.set(record.token, record.id);\n        if (record.subdomain) this.bySubdomain.set(record.subdomain, record.id);\n      }\n      if (cleaned > 0) {\n        log.info({ cleaned }, `Cleaned ${cleaned} expired site-share records on load`);\n        this.persistSync();\n      }\n    } catch (err) {\n      log.warn({ err }, 'Failed to load site-shares.json');\n    }\n  }\n\n  private persistSync(): void {\n    const path = resolveStorePath();\n    mkdirSync(resolveStateDir(), { recursive: true });\n    let records = [...this.shares.values()];\n    if (records.length > MAX_STORED) {\n      records.sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());\n      records = records.slice(0, MAX_STORED);\n      this.shares.clear();\n      this.byToken.clear();\n      this.bySubdomain.clear();\n      for (const r of records) {\n        this.shares.set(r.id, r);\n        this.byToken.set(r.token, r.id);\n        if (r.subdomain) this.bySubdomain.set(r.subdomain, r.id);\n      }\n    }\n    const data: SiteShareStoreData = { version: 1, shares: records };\n    writeFileSync(path, `${JSON.stringify(data, null, 2)}\\n`, 'utf8');\n  }\n\n  private scheduleDebouncedPersist(): void {\n    this.dirty = true;\n    if (this.debounceTimer) return;\n    this.debounceTimer = setTimeout(() => {\n      this.debounceTimer = null;\n      if (this.dirty) {\n        this.dirty = false;\n        this.persistSync();\n      }\n    }, REQUEST_COUNT_DEBOUNCE_MS);\n    this.debounceTimer.unref?.();\n  }\n\n  private startCleanupTimer(): void {\n    this.cleanupTimer = setInterval(() => {\n      const now = Date.now();\n      let removed = 0;\n      for (const [id, record] of this.shares) {\n        const expiredMs = now - new Date(record.expiresAt).getTime();\n        if (expiredMs > EXPIRED_RETENTION_MS) {\n          this.shares.delete(id);\n          this.byToken.delete(record.token);\n          if (record.subdomain) this.bySubdomain.delete(record.subdomain);\n          if (this.onCleanup) {\n            try {\n              this.onCleanup(record);\n            } catch (err) {\n              log.warn({ err, id }, 'Site share cleanup hook threw');\n            }\n          }\n          removed++;\n        }\n      }\n      if (removed > 0) {\n        this.persistSync();\n        log.debug({ removed }, `Cleaned ${removed} expired site shares`);\n      }\n    }, CLEANUP_INTERVAL_MS);\n    this.cleanupTimer.unref?.();\n  }\n\n  shutdown(): void {\n    if (this.cleanupTimer) {\n      clearInterval(this.cleanupTimer);\n      this.cleanupTimer = null;\n    }\n    if (this.debounceTimer) {\n      clearTimeout(this.debounceTimer);\n      this.debounceTimer = null;\n    }\n    if (this.dirty) {\n      this.dirty = false;\n      this.persistSync();\n    }\n  }\n}\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\nasync function scanStatic(\n  root: string,\n  maxFileCount: number,\n  maxRootDirSize: number,\n): Promise<{ fileCount: number; totalSize: number }> {\n  let fileCount = 0;\n  let totalSize = 0;\n\n  async function walk(dir: string, depth: number): Promise<void> {\n    if (depth > 16) return;\n    const dirents = await readdir(dir, { withFileTypes: true });\n    for (const dirent of dirents) {\n      if (fileCount >= maxFileCount) throw new Error(`Static site exceeds maxFileCount (${maxFileCount})`);\n      const abs = resolvePath(dir, dirent.name);\n      const lst = await lstat(abs);\n      if (lst.isSymbolicLink()) continue; // never follow symlinks in a public static root\n      if (lst.isFile()) {\n        fileCount++;\n        totalSize += lst.size;\n        if (totalSize > maxRootDirSize) {\n          const mb = (maxRootDirSize / 1_048_576).toFixed(0);\n          throw new Error(`Static site exceeds maxRootDirSize (${mb} MB)`);\n        }\n      } else if (lst.isDirectory()) {\n        await walk(abs, depth + 1);\n      }\n    }\n  }\n\n  await walk(root, 0);\n  return { fileCount, totalSize };\n}\n\nfunction validateUpstreamUrl(raw: string, cfg: SiteShareConfig['proxy']): string {\n  let parsed: URL;\n  try {\n    parsed = new URL(raw);\n  } catch {\n    throw new Error('upstreamUrl must be a valid URL');\n  }\n  if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n    throw new Error('upstreamUrl must use http or https');\n  }\n  const host = parsed.hostname.toLowerCase();\n  if (!cfg.allowedUpstreamHosts.map((h) => h.toLowerCase()).includes(host)) {\n    throw new Error(`upstream host '${host}' is not in allowedUpstreamHosts`);\n  }\n  const port = parsed.port ? Number(parsed.port) : parsed.protocol === 'https:' ? 443 : 80;\n  if (!cfg.allowedUpstreamPorts.includes(port)) {\n    throw new Error(`upstream port ${port} is not in allowedUpstreamPorts`);\n  }\n  // Strip path / search / hash — proxy uses base only\n  return `${parsed.protocol}//${parsed.host}`;\n}\n\n// ── Singleton ─────────────────────────────────────────────────────────────────\n\nlet singleton: SiteShareStore | null = null;\n\nexport function getSiteShareStore(config?: Partial<SiteShareConfig>): SiteShareStore {\n  if (!singleton) singleton = new SiteShareStore(config);\n  return singleton;\n}\n\nexport function resetSiteShareStoreForTests(): void {\n  singleton?.shutdown();\n  singleton = null;\n}\n"],"mappings":";;;;;;;;;;;YAKqD;aAEH;AAUlD,MAAM,MAAM,aAAa,iBAAiB;AAE1C,MAAM,mBAAmB;AACzB,MAAM,sBAAsB,KAAK;AACjC,MAAM,uBAAuB,OAAU;AACvC,MAAM,aAAa;AACnB,MAAM,4BAA4B;AAClC,MAAM,oBAAoB;AAE1B,SAAS,mBAA2B;AAClC,QAAO,KAAK,iBAAiB,EAAE,iBAAiB;;AAGlD,IAAa,iBAAb,MAA4B;CAC1B,yBAAiB,IAAI,KAA8B;CACnD,0BAAkB,IAAI,KAAqB;CAC3C,8BAAsB,IAAI,KAAqB;CAC/C;CACA,QAAgB;CAChB,gBAA8D;CAC9D,eAA8D;;CAE9D,YAAgE;CAEhE,YAAY,QAAmC;AAC7C,OAAK,SAAS;GAAE,GAAG;GAA4B,GAAG;GAAQ;AAC1D,OAAK,MAAM;AACX,OAAK,mBAAmB;;CAG1B,aAAa,QAAwC;AACnD,OAAK,SAAS;GAAE,GAAG,KAAK;GAAQ,GAAG;GAAQ;;CAG7C,eAAe,MAA+C;AAC5D,OAAK,YAAY;;CAGnB,YAA6B;AAC3B,SAAO,KAAK,MAAM,KAAK,UAAU,KAAK,OAAO,CAAC;;CAKhD,MAAM,OACJ,QAI0B;AAC1B,MAAI,CAAC,KAAK,OAAO,QAAS,OAAM,IAAI,MAAM,2BAA2B;AAGrE,MADe,KAAK,iBACV,CAAC,UAAU,KAAK,OAAO,eAC/B,OAAM,IAAI,MAAM,uCAAuC,KAAK,OAAO,eAAe,GAAG;EAGvF,MAAM,QAAQ,OAAO,SAAS,KAAK,OAAO;AAC1C,MAAI,QAAQ,OAAU,QAAQ,KAAK,OAAO,SACxC,OAAM,IAAI,MAAM,+BAA+B,KAAK,OAAO,WAAW,IAAK,GAAG;EAGhF,MAAM,SAAS,MAAM,KAAK,YAAY,OAAO;EAE7C,MAAM,YAAY,KAAK,iBAAiB,OAAO,UAAU;EACzD,MAAM,KAAK,YAAY;EACvB,MAAM,QAAQ,YAAY,GAAG,CAAC,SAAS,YAAY;EACnD,MAAM,sBAAM,IAAI,MAAM;EACtB,MAAM,SAA0B;GAC9B;GACA;GACA;GACA;GACA,WAAW,IAAI,aAAa;GAC5B,WAAW,IAAI,KAAK,IAAI,SAAS,GAAG,MAAM,CAAC,aAAa;GACxD,SAAS;GACT,aAAa,OAAO;GACpB,oBAAoB,OAAO;GAC3B,cAAc;GACd,mBAAmB;GACnB,aAAa,OAAO,eAAe;GACpC;AAED,OAAK,OAAO,IAAI,IAAI,OAAO;AAC3B,OAAK,QAAQ,IAAI,OAAO,GAAG;AAC3B,MAAI,UAAW,MAAK,YAAY,IAAI,WAAW,GAAG;AAClD,OAAK,aAAa;AAElB,MAAI,KACF;GAAE;GAAI,aAAa,MAAM,MAAM,GAAG,EAAE;GAAE;GAAW,MAAM,OAAO;GAAM,EACpE,uBAAuB,OAAO,KAAK,GACpC;AAED,SAAO;;CAGT,MAAc,YAAY,QAAuF;AAC/G,MAAI,OAAO,SAAS,UAAU;AAC5B,OAAI,CAAC,KAAK,OAAO,OAAO,QAAS,OAAM,IAAI,MAAM,kCAAkC;AACnF,OAAI,CAAC,OAAO,cAAe,OAAM,IAAI,MAAM,gDAAgD;AAC3F,OAAI,CAAC,OAAO,KAAM,OAAM,IAAI,MAAM,uCAAuC;GACzE,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AAC1E,OAAI,CAAC,QAAS,OAAM,IAAI,MAAM,aAAa;AAC3C,OAAI,QAAQ,SAAS,KAAK,IAAI,QAAQ,SAAS,KAAK,CAAE,OAAM,IAAI,MAAM,eAAe;GACrF,MAAM,UAAUA,QAAY,OAAO,eAAe,QAAQ;GAC1D,MAAM,YAAYC,SAAaD,QAAY,OAAO,cAAc,EAAE,QAAQ;AAC1E,OAAI,UAAU,WAAW,KAAK,IAAI,UAAU,MAAM,QAAQ,CAAC,SAAS,KAAK,CACvE,OAAM,IAAI,MAAM,4BAA4B;GAE9C,MAAM,OAAO,MAAM,SAAS,QAAQ;AACpC,OAAI,CAAC,qBAAqB,OAAO,eAAe,KAAK,CACnD,OAAM,IAAI,MAAM,mCAAmC;AAGrD,OAAI,EAAC,MADe,KAAK,QAAQ,EACtB,aAAa,CAAE,OAAM,IAAI,MAAM,oCAAoC;GAC9E,MAAM,UAAU,MAAM,WAAW,SAAS,KAAK,OAAO,OAAO,cAAc,KAAK,OAAO,OAAO,eAAe;AAC7G,OAAI,MAAM;IAAE,GAAG;IAAS,SAAS;IAAS,EAAE,sBAAsB;AAClE,UAAO;IACL,MAAM;IACN,SAAS;IACT,eAAe,OAAO;IACtB,uBAAuB;IACvB,aAAa,OAAO,eAAe;IACnC,aAAa,OAAO,gBAAgB,KAAK,OAAO,OAAO,0BAA0B,aAAa;IAC/F;;AAGH,MAAI,OAAO,SAAS,SAAS;AAC3B,OAAI,CAAC,KAAK,OAAO,MAAM,QAAS,OAAM,IAAI,MAAM,iCAAiC;AACjF,OAAI,CAAC,OAAO,YAAa,OAAM,IAAI,MAAM,wCAAwC;AAEjF,UAAO;IACL,MAAM;IACN,aAHgB,oBAAoB,OAAO,aAAa,KAAK,OAAO,MAG9C;IACtB,sBAAsB,KAAK,OAAO,MAAM;IACxC,kBAAkB,OAAO,oBAAoB,KAAK,OAAO,MAAM;IAC/D,kBAAkB;IACnB;;AAGH,QAAM,IAAI,MAAM,gCAAgC,OAAO,OAAO;;CAGhE,iBAAyB,WAAmC;AAC1D,MAAI,CAAC,UAAW,QAAO;EACvB,MAAM,QAAQ,UAAU,MAAM,CAAC,aAAa;AAC5C,MAAI,CAAC,kBAAkB,KAAK,MAAM,CAChC,OAAM,IAAI,MAAM,8DAA8D;AAEhF,MAAI,KAAK,YAAY,IAAI,MAAM,CAC7B,OAAM,IAAI,MAAM,cAAc,MAAM,kBAAkB;AAExD,SAAO;;CAGT,QAAQ,IAAoC;AAC1C,SAAO,KAAK,OAAO,IAAI,GAAG,IAAI;;CAGhC,WAAW,OAAuC;EAChD,MAAM,KAAK,KAAK,QAAQ,IAAI,MAAM;AAClC,SAAO,KAAK,KAAK,OAAO,IAAI,GAAG,IAAI,OAAO;;CAG5C,eAAe,WAA2C;EACxD,MAAM,KAAK,KAAK,YAAY,IAAI,UAAU,aAAa,CAAC;AACxD,SAAO,KAAK,KAAK,OAAO,IAAI,GAAG,IAAI,OAAO;;;;;;CAO5C,mBAAmB,OAAuC;AACxD,SAAO,KAAK,WAAW,MAAM,IAAI,KAAK,eAAe,MAAM;;CAG7D,kBAAqC;EACnC,MAAM,MAAM,KAAK,KAAK;AACtB,SAAO,CAAC,GAAG,KAAK,OAAO,QAAQ,CAAC,CAAC,QAC9B,MAAM,CAAC,EAAE,WAAW,MAAM,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS,CAC3D;;CAGH,eAAkC;AAChC,SAAO,CAAC,GAAG,KAAK,OAAO,QAAQ,CAAC,CAAC,MAC9B,GAAG,MAAM,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS,GAAG,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS,CAC5E;;CAGH,eAAe,QAA8D;AAC3E,MAAI,OAAO,QAAS,QAAO;GAAE,OAAO;GAAO,QAAQ;GAAW;AAC9D,MAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,UAAU,CAAC,SAAS,CAAE,QAAO;GAAE,OAAO;GAAO,QAAQ;GAAW;AAClG,MAAI,OAAO,gBAAgB,QAAQ,OAAO,gBAAgB,OAAO,YAC/D,QAAO;GAAE,OAAO;GAAO,QAAQ;GAAgB;AAEjD,SAAO,EAAE,OAAO,MAAM;;;CAIxB,cAAc,IAAY,UAAwB;EAChD,MAAM,SAAS,KAAK,OAAO,IAAI,GAAG;AAClC,MAAI,CAAC,OAAQ;AACb,SAAO;EACP,MAAM,SAAU,OAAO,oBAAoB,EAAE;AAC7C,MAAI,CAAC,OAAO,SAAS,SAAS,EAAE;AAC9B,UAAO,QAAQ,SAAS;AACxB,OAAI,OAAO,SAAS,IAAK,QAAO,SAAS;AACzC,UAAO,oBAAoB,OAAO;;AAEpC,OAAK,0BAA0B;;CAGjC,mBAAmB,IAAY,QAA8C;EAC3E,MAAM,SAAS,KAAK,OAAO,IAAI,GAAG;AAClC,MAAI,CAAC,OAAQ;AACb,SAAO,kBAAkB;AACzB,MAAI,WAAW,QAAS,QAAO,wCAAuB,IAAI,MAAM,EAAC,aAAa;AAC9E,MAAI,WAAW,SAAU,QAAO,qCAAoB,IAAI,MAAM,EAAC,aAAa;AAC5E,OAAK,aAAa;;CAGpB,OAAO,IAAqB;EAC1B,MAAM,SAAS,KAAK,OAAO,IAAI,GAAG;AAClC,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,UAAU;AACjB,OAAK,aAAa;AAClB,MAAI,KAAK,UACP,KAAI;AACF,QAAK,UAAU,OAAO;WACf,KAAK;AACZ,OAAI,KAAK;IAAE;IAAK;IAAI,EAAE,0CAA0C;;AAGpE,MAAI,KAAK;GAAE;GAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;GAAE,EAAE,qBAAqB;AAC7E,SAAO;;CAGT,WAAW,KAAuB;EAChC,IAAI,QAAQ;AACZ,OAAK,MAAM,MAAM,KAAK;GACpB,MAAM,SAAS,KAAK,OAAO,IAAI,GAAG;AAClC,OAAI,UAAU,CAAC,OAAO,SAAS;AAC7B,WAAO,UAAU;AACjB;;;AAGJ,MAAI,QAAQ,EAAG,MAAK,aAAa;AACjC,SAAO;;CAGT,gBAAwB;EACtB,MAAM,MAAM,KAAK,KAAK;EACtB,IAAI,QAAQ;AACZ,OAAK,MAAM,UAAU,KAAK,OAAO,QAAQ,CACvC,KAAI,CAAC,OAAO,WAAW,OAAO,IAAI,KAAK,OAAO,UAAU,CAAC,SAAS,EAAE;AAClE,UAAO,UAAU;AACjB;;AAGJ,MAAI,QAAQ,EAAG,MAAK,aAAa;AACjC,SAAO;;CAGT,OAAO,IAAY,OAAsF;EACvG,MAAM,SAAS,KAAK,OAAO,IAAI,GAAG;AAClC,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,MAAM,gBAAgB,KAAA,EACxB,QAAO,YAAY,IAAI,KAAK,KAAK,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa;AAE3E,MAAI,MAAM,gBAAgB,KAAA,EACxB,QAAO,cAAc,MAAM;AAE7B,OAAK,aAAa;AAClB,SAAO;;CAKT,OAAqB;EACnB,MAAM,OAAO,kBAAkB;AAC/B,MAAI,CAAC,WAAW,KAAK,CAAE;AACvB,MAAI;GACF,MAAM,MAAM,aAAa,MAAM,OAAO;GACtC,MAAM,OAAO,KAAK,MAAM,IAAI;AAC5B,OAAI,KAAK,YAAY,KAAK,CAAC,MAAM,QAAQ,KAAK,OAAO,CAAE;GACvD,MAAM,MAAM,KAAK,KAAK;GACtB,IAAI,UAAU;AACd,QAAK,MAAM,UAAU,KAAK,QAAQ;AAEhC,QADkB,MAAM,IAAI,KAAK,OAAO,UAAU,CAAC,SAAS,GAC5C,sBAAsB;AACpC;AACA;;AAEF,SAAK,OAAO,IAAI,OAAO,IAAI,OAAO;AAClC,SAAK,QAAQ,IAAI,OAAO,OAAO,OAAO,GAAG;AACzC,QAAI,OAAO,UAAW,MAAK,YAAY,IAAI,OAAO,WAAW,OAAO,GAAG;;AAEzE,OAAI,UAAU,GAAG;AACf,QAAI,KAAK,EAAE,SAAS,EAAE,WAAW,QAAQ,qCAAqC;AAC9E,SAAK,aAAa;;WAEb,KAAK;AACZ,OAAI,KAAK,EAAE,KAAK,EAAE,kCAAkC;;;CAIxD,cAA4B;EAC1B,MAAM,OAAO,kBAAkB;AAC/B,YAAU,iBAAiB,EAAE,EAAE,WAAW,MAAM,CAAC;EACjD,IAAI,UAAU,CAAC,GAAG,KAAK,OAAO,QAAQ,CAAC;AACvC,MAAI,QAAQ,SAAS,YAAY;AAC/B,WAAQ,MAAM,GAAG,MAAM,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS,GAAG,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC;AACzF,aAAU,QAAQ,MAAM,GAAG,WAAW;AACtC,QAAK,OAAO,OAAO;AACnB,QAAK,QAAQ,OAAO;AACpB,QAAK,YAAY,OAAO;AACxB,QAAK,MAAM,KAAK,SAAS;AACvB,SAAK,OAAO,IAAI,EAAE,IAAI,EAAE;AACxB,SAAK,QAAQ,IAAI,EAAE,OAAO,EAAE,GAAG;AAC/B,QAAI,EAAE,UAAW,MAAK,YAAY,IAAI,EAAE,WAAW,EAAE,GAAG;;;AAI5D,gBAAc,MAAM,GAAG,KAAK,UAAU;GADH,SAAS;GAAG,QAAQ;GACb,EAAE,MAAM,EAAE,CAAC,KAAK,OAAO;;CAGnE,2BAAyC;AACvC,OAAK,QAAQ;AACb,MAAI,KAAK,cAAe;AACxB,OAAK,gBAAgB,iBAAiB;AACpC,QAAK,gBAAgB;AACrB,OAAI,KAAK,OAAO;AACd,SAAK,QAAQ;AACb,SAAK,aAAa;;KAEnB,0BAA0B;AAC7B,OAAK,cAAc,SAAS;;CAG9B,oBAAkC;AAChC,OAAK,eAAe,kBAAkB;GACpC,MAAM,MAAM,KAAK,KAAK;GACtB,IAAI,UAAU;AACd,QAAK,MAAM,CAAC,IAAI,WAAW,KAAK,OAE9B,KADkB,MAAM,IAAI,KAAK,OAAO,UAAU,CAAC,SAAS,GAC5C,sBAAsB;AACpC,SAAK,OAAO,OAAO,GAAG;AACtB,SAAK,QAAQ,OAAO,OAAO,MAAM;AACjC,QAAI,OAAO,UAAW,MAAK,YAAY,OAAO,OAAO,UAAU;AAC/D,QAAI,KAAK,UACP,KAAI;AACF,UAAK,UAAU,OAAO;aACf,KAAK;AACZ,SAAI,KAAK;MAAE;MAAK;MAAI,EAAE,gCAAgC;;AAG1D;;AAGJ,OAAI,UAAU,GAAG;AACf,SAAK,aAAa;AAClB,QAAI,MAAM,EAAE,SAAS,EAAE,WAAW,QAAQ,sBAAsB;;KAEjE,oBAAoB;AACvB,OAAK,aAAa,SAAS;;CAG7B,WAAiB;AACf,MAAI,KAAK,cAAc;AACrB,iBAAc,KAAK,aAAa;AAChC,QAAK,eAAe;;AAEtB,MAAI,KAAK,eAAe;AACtB,gBAAa,KAAK,cAAc;AAChC,QAAK,gBAAgB;;AAEvB,MAAI,KAAK,OAAO;AACd,QAAK,QAAQ;AACb,QAAK,aAAa;;;;AAOxB,eAAe,WACb,MACA,cACA,gBACmD;CACnD,IAAI,YAAY;CAChB,IAAI,YAAY;CAEhB,eAAe,KAAK,KAAa,OAA8B;AAC7D,MAAI,QAAQ,GAAI;EAChB,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,MAAM,CAAC;AAC3D,OAAK,MAAM,UAAU,SAAS;AAC5B,OAAI,aAAa,aAAc,OAAM,IAAI,MAAM,qCAAqC,aAAa,GAAG;GACpG,MAAM,MAAMA,QAAY,KAAK,OAAO,KAAK;GACzC,MAAM,MAAM,MAAM,MAAM,IAAI;AAC5B,OAAI,IAAI,gBAAgB,CAAE;AAC1B,OAAI,IAAI,QAAQ,EAAE;AAChB;AACA,iBAAa,IAAI;AACjB,QAAI,YAAY,gBAAgB;KAC9B,MAAM,MAAM,iBAAiB,SAAW,QAAQ,EAAE;AAClD,WAAM,IAAI,MAAM,uCAAuC,GAAG,MAAM;;cAEzD,IAAI,aAAa,CAC1B,OAAM,KAAK,KAAK,QAAQ,EAAE;;;AAKhC,OAAM,KAAK,MAAM,EAAE;AACnB,QAAO;EAAE;EAAW;EAAW;;AAGjC,SAAS,oBAAoB,KAAa,KAAuC;CAC/E,IAAI;AACJ,KAAI;AACF,WAAS,IAAI,IAAI,IAAI;SACf;AACN,QAAM,IAAI,MAAM,kCAAkC;;AAEpD,KAAI,OAAO,aAAa,WAAW,OAAO,aAAa,SACrD,OAAM,IAAI,MAAM,qCAAqC;CAEvD,MAAM,OAAO,OAAO,SAAS,aAAa;AAC1C,KAAI,CAAC,IAAI,qBAAqB,KAAK,MAAM,EAAE,aAAa,CAAC,CAAC,SAAS,KAAK,CACtE,OAAM,IAAI,MAAM,kBAAkB,KAAK,kCAAkC;CAE3E,MAAM,OAAO,OAAO,OAAO,OAAO,OAAO,KAAK,GAAG,OAAO,aAAa,WAAW,MAAM;AACtF,KAAI,CAAC,IAAI,qBAAqB,SAAS,KAAK,CAC1C,OAAM,IAAI,MAAM,iBAAiB,KAAK,iCAAiC;AAGzE,QAAO,GAAG,OAAO,SAAS,IAAI,OAAO;;AAKvC,IAAI,YAAmC;AAEvC,SAAgB,kBAAkB,QAAmD;AACnF,KAAI,CAAC,UAAW,aAAY,IAAI,eAAe,OAAO;AACtD,QAAO;;AAGT,SAAgB,8BAAoC;AAClD,YAAW,UAAU;AACrB,aAAY"}

package/dist/src/share/site-share-types.d.ts

@@ -0,0 +1,103 @@
+export type SiteSourceKind = 'static' | 'proxy';
+export interface SiteStaticSource {
+    kind: 'static';
+    /** Absolute filesystem root of the static site directory. */
+    rootDir: string;
+    /** Workspace root captured at creation for re-validation. */
+    workspaceRoot: string;
+    /** Workspace-relative POSIX path for display. */
+    workspaceRelativePath: string;
+    /** Send index.html (status 200) for unmatched paths under root (SPA). */
+    spaFallback: boolean;
+    /** Whether HTML/CSS absolute-path rewriting is applied. */
+    rewriteMode: 'none' | 'html-only' | 'html-css';
+    /** Regex string matched against URL path; matches get an immutable cache. */
+    immutableAssetsRegex?: string;
+}
+export interface SiteProxySource {
+    kind: 'proxy';
+    /** Upstream base URL (e.g. http://127.0.0.1:3000). */
+    upstreamUrl: string;
+    /** Forward Set-Cookie path attribute (subpath mode only). */
+    rewriteSetCookiePath: boolean;
+    /** Whether to handle WebSocket upgrades. */
+    forwardWebSocket: boolean;
+    /** Per-request forwarded headers strategy. */
+    forwardedHeaders: 'minimal' | 'full';
+}
+export type SiteSource = SiteStaticSource | SiteProxySource;
+export interface SiteShareRecord {
+    id: string;
+    /** Token used both as the URL subdomain label (subdomain mode) and as `/site/:token/` subpath fallback. */
+    token: string;
+    /** Optional creator-chosen subdomain (must be unique, only [a-z0-9-]). */
+    subdomain: string | null;
+    source: SiteSource;
+    createdAt: string;
+    expiresAt: string;
+    revoked: boolean;
+    description?: string;
+    createdByTokenHash: string;
+    requestCount: number;
+    uniqueClientCount: number;
+    /** Hard cap on total requests served (null = unlimited). */
+    maxRequests: number | null;
+    /** Cached client IPs that have counted toward uniqueClientCount (last 200). */
+    recentClientIps?: string[];
+    /** Thumbnail generation status (parallels ShareRecord). */
+    thumbnailStatus?: 'pending' | 'ready' | 'failed';
+    thumbnailGeneratedAt?: string;
+    thumbnailFailedAt?: string;
+}
+export interface SiteShareStoreData {
+    version: 1;
+    shares: SiteShareRecord[];
+}
+export interface CreateSiteShareParams {
+    /** 'static' uses workspace path; 'proxy' uses upstreamUrl. */
+    kind: SiteSourceKind;
+    /** Static: workspace-relative path of build output. */
+    path?: string;
+    /** Proxy: full upstream URL (must be loopback or whitelisted). */
+    upstreamUrl?: string;
+    /** Default 6h. */
+    ttlMs?: number;
+    /** Optional friendly description. */
+    description?: string;
+    /** Optional preferred subdomain (will fall back to token if taken). */
+    subdomain?: string;
+    /** Optional max request count. */
+    maxRequests?: number | null;
+    /** Static: SPA fallback (default true for static). */
+    spaFallback?: boolean;
+    /** Static: rewrite mode (default 'none'). */
+    rewriteMode?: 'none' | 'html-only' | 'html-css';
+    /** Proxy: forward WS (default true if enabled in config). */
+    forwardWebSocket?: boolean;
+    sessionKey?: string;
+    agentId?: string;
+}
+export interface SiteShareConfig {
+    enabled: boolean;
+    publicHostSuffix: string;
+    defaultTtlMs: number;
+    maxTtlMs: number;
+    maxActiveSites: number;
+    static: {
+        enabled: boolean;
+        maxRootDirSize: number;
+        maxFileCount: number;
+        rewriteEnabledByDefault: boolean;
+    };
+    proxy: {
+        enabled: boolean;
+        allowedUpstreamHosts: string[];
+        allowedUpstreamPorts: number[];
+        forwardWebSocket: boolean;
+        bodySizeLimit: number;
+        requestTimeoutMs: number;
+        wsIdleTimeoutMs: number;
+        rewriteSetCookiePath: boolean;
+    };
+}
+export declare const SITE_SHARE_CONFIG_DEFAULTS: SiteShareConfig;

package/dist/src/share/site-share-types.js

@@ -0,0 +1,41 @@
+//#region src/share/site-share-types.ts
+const SITE_SHARE_CONFIG_DEFAULTS = {
+	enabled: true,
+	publicHostSuffix: "share.xopc.ai",
+	defaultTtlMs: 216e5,
+	maxTtlMs: 6048e5,
+	maxActiveSites: 5,
+	static: {
+		enabled: true,
+		maxRootDirSize: 524288e3,
+		maxFileCount: 1e4,
+		rewriteEnabledByDefault: false
+	},
+	proxy: {
+		enabled: true,
+		allowedUpstreamHosts: [
+			"127.0.0.1",
+			"localhost",
+			"::1"
+		],
+		allowedUpstreamPorts: [
+			3e3,
+			3001,
+			4321,
+			5173,
+			8e3,
+			8080,
+			8888,
+			9e3
+		],
+		forwardWebSocket: true,
+		bodySizeLimit: 52428800,
+		requestTimeoutMs: 3e4,
+		wsIdleTimeoutMs: 3e5,
+		rewriteSetCookiePath: true
+	}
+};
+//#endregion
+export { SITE_SHARE_CONFIG_DEFAULTS };
+
+//# sourceMappingURL=site-share-types.js.map

package/dist/src/share/site-share-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-share-types.js","names":[],"sources":["../../../src/share/site-share-types.ts"],"sourcesContent":["export type SiteSourceKind = 'static' | 'proxy';\n\nexport interface SiteStaticSource {\n  kind: 'static';\n  /** Absolute filesystem root of the static site directory. */\n  rootDir: string;\n  /** Workspace root captured at creation for re-validation. */\n  workspaceRoot: string;\n  /** Workspace-relative POSIX path for display. */\n  workspaceRelativePath: string;\n  /** Send index.html (status 200) for unmatched paths under root (SPA). */\n  spaFallback: boolean;\n  /** Whether HTML/CSS absolute-path rewriting is applied. */\n  rewriteMode: 'none' | 'html-only' | 'html-css';\n  /** Regex string matched against URL path; matches get an immutable cache. */\n  immutableAssetsRegex?: string;\n}\n\nexport interface SiteProxySource {\n  kind: 'proxy';\n  /** Upstream base URL (e.g. http://127.0.0.1:3000). */\n  upstreamUrl: string;\n  /** Forward Set-Cookie path attribute (subpath mode only). */\n  rewriteSetCookiePath: boolean;\n  /** Whether to handle WebSocket upgrades. */\n  forwardWebSocket: boolean;\n  /** Per-request forwarded headers strategy. */\n  forwardedHeaders: 'minimal' | 'full';\n}\n\nexport type SiteSource = SiteStaticSource | SiteProxySource;\n\nexport interface SiteShareRecord {\n  id: string;\n  /** Token used both as the URL subdomain label (subdomain mode) and as `/site/:token/` subpath fallback. */\n  token: string;\n  /** Optional creator-chosen subdomain (must be unique, only [a-z0-9-]). */\n  subdomain: string | null;\n  source: SiteSource;\n  createdAt: string;\n  expiresAt: string;\n  revoked: boolean;\n  description?: string;\n  createdByTokenHash: string;\n  requestCount: number;\n  uniqueClientCount: number;\n  /** Hard cap on total requests served (null = unlimited). */\n  maxRequests: number | null;\n  /** Cached client IPs that have counted toward uniqueClientCount (last 200). */\n  recentClientIps?: string[];\n  /** Thumbnail generation status (parallels ShareRecord). */\n  thumbnailStatus?: 'pending' | 'ready' | 'failed';\n  thumbnailGeneratedAt?: string;\n  thumbnailFailedAt?: string;\n}\n\nexport interface SiteShareStoreData {\n  version: 1;\n  shares: SiteShareRecord[];\n}\n\nexport interface CreateSiteShareParams {\n  /** 'static' uses workspace path; 'proxy' uses upstreamUrl. */\n  kind: SiteSourceKind;\n  /** Static: workspace-relative path of build output. */\n  path?: string;\n  /** Proxy: full upstream URL (must be loopback or whitelisted). */\n  upstreamUrl?: string;\n  /** Default 6h. */\n  ttlMs?: number;\n  /** Optional friendly description. */\n  description?: string;\n  /** Optional preferred subdomain (will fall back to token if taken). */\n  subdomain?: string;\n  /** Optional max request count. */\n  maxRequests?: number | null;\n  /** Static: SPA fallback (default true for static). */\n  spaFallback?: boolean;\n  /** Static: rewrite mode (default 'none'). */\n  rewriteMode?: 'none' | 'html-only' | 'html-css';\n  /** Proxy: forward WS (default true if enabled in config). */\n  forwardWebSocket?: boolean;\n  sessionKey?: string;\n  agentId?: string;\n}\n\nexport interface SiteShareConfig {\n  enabled: boolean;\n  publicHostSuffix: string;\n  defaultTtlMs: number;\n  maxTtlMs: number;\n  maxActiveSites: number;\n  static: {\n    enabled: boolean;\n    maxRootDirSize: number;\n    maxFileCount: number;\n    rewriteEnabledByDefault: boolean;\n  };\n  proxy: {\n    enabled: boolean;\n    allowedUpstreamHosts: string[];\n    allowedUpstreamPorts: number[];\n    forwardWebSocket: boolean;\n    bodySizeLimit: number;\n    requestTimeoutMs: number;\n    wsIdleTimeoutMs: number;\n    rewriteSetCookiePath: boolean;\n  };\n}\n\nexport const SITE_SHARE_CONFIG_DEFAULTS: SiteShareConfig = {\n  enabled: true,\n  publicHostSuffix: 'share.xopc.ai',\n  defaultTtlMs: 21_600_000,\n  maxTtlMs: 604_800_000,\n  maxActiveSites: 5,\n  static: {\n    enabled: true,\n    maxRootDirSize: 524_288_000,\n    maxFileCount: 10_000,\n    rewriteEnabledByDefault: false,\n  },\n  proxy: {\n    enabled: true,\n    allowedUpstreamHosts: ['127.0.0.1', 'localhost', '::1'],\n    allowedUpstreamPorts: [3000, 3001, 4321, 5173, 8000, 8080, 8888, 9000],\n    forwardWebSocket: true,\n    bodySizeLimit: 52_428_800,\n    requestTimeoutMs: 30_000,\n    wsIdleTimeoutMs: 300_000,\n    rewriteSetCookiePath: true,\n  },\n};\n"],"mappings":";AA8GA,MAAa,6BAA8C;CACzD,SAAS;CACT,kBAAkB;CAClB,cAAc;CACd,UAAU;CACV,gBAAgB;CAChB,QAAQ;EACN,SAAS;EACT,gBAAgB;EAChB,cAAc;EACd,yBAAyB;EAC1B;CACD,OAAO;EACL,SAAS;EACT,sBAAsB;GAAC;GAAa;GAAa;GAAM;EACvD,sBAAsB;GAAC;GAAM;GAAM;GAAM;GAAM;GAAM;GAAM;GAAM;GAAK;EACtE,kBAAkB;EAClB,eAAe;EACf,kBAAkB;EAClB,iBAAiB;EACjB,sBAAsB;EACvB;CACF"}

package/dist/src/share/site-static-serve.d.ts

@@ -0,0 +1,10 @@
+import type { SiteShareRecord } from './site-share-types.js';
+/**
+ * Serve a request for a static site share.
+ *
+ * `urlPath` is the in-site path (already stripped of any subdomain/subpath base).
+ * `basePrefix` is the path prefix that the share is mounted under, used by the
+ * HTML rewriter to make root-relative URLs (`/assets/x`) point back into the
+ * share. Pass '' when serving on a subdomain (root mode).
+ */
+export declare function serveStaticSiteRequest(record: SiteShareRecord, urlPath: string, basePrefix: string): Promise<Response>;