arena-bridge 0.6.1 → 0.6.2

package/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project are documented here.
 The format follows [Keep a Changelog](https://keepachangelog.com/) and the project uses
 [Semantic Versioning](https://semver.org/).
 
+## 0.6.2
+
+### Added
+- `arena-bridge tunnel --bin ngrok` runs an ngrok tunnel instead of cloudflared; with an
+  authtoken and a reserved domain (`--authtoken`, `--domain`) the public URL stays the same
+  across restarts, so the agent prompt does not have to be copied again.
+
 ## 0.6.1
 
 ### Fixed

package/README.md

@@ -54,7 +54,9 @@ arena-bridge setup --root ~/projects --root ~/Documents
 `setup` печатает готовый промпт и публичный URL. Дальше — просто говорите агенту задачу.
 
 Нужен туннель? Поставьте `cloudflared` (`brew install cloudflared` или бинарник в `/usr/local/bin`).
-Подойдёт и любой другой: `ngrok http 8787`, `tailscale funnel --bg 8787`.
+Можно и через ngrok — `arena-bridge tunnel --bin ngrok`; с сохранённым токеном и зарезервированным
+доменом публичный адрес остаётся постоянным, и промпт агенту не нужно копировать заново:
+`arena-bridge tunnel --bin ngrok --authtoken <token> --domain <name>.ngrok-free.dev`.
 
 ### В фоне, чтобы не открывать терминал
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arena-bridge",
-  "version": "0.6.1",
+  "version": "0.6.2",
   "description": "Give a cloud AI agent (Arena.ai Agent Mode, Claude, Cursor, ...) controlled access to your own machine over HTTP/MCP: files, shell, Chrome and the macOS desktop, with an approval gate, trust windows and an audit log.",
   "type": "module",
   "bin": {

package/src/cli.mjs

@@ -92,7 +92,9 @@ Common options:
   --hub URL            hub base URL (for "connect" / init --mode hub)
   --public-url URL     public base URL the agent should use
   --protocol P         tunnel transport: http2 (default, works on locked-down networks) or quic
-  --bin PATH           tunnel binary to run (default: cloudflared)
+  --bin PATH           tunnel binary to run (default: cloudflared; "ngrok" is supported too)
+  --authtoken TOKEN    ngrok authtoken (keeps the same URL on every restart)
+  --domain NAME        ngrok reserved domain, e.g. my-machine.ngrok-free.app
   --no-approval        disable the human approval gate (dangerous)
   --no-shell           disable shell execution entirely
 
@@ -197,7 +199,13 @@ async function cmdTunnel(args) {
   }
 
   console.log(`starting ${bin} (protocol=${protocol})…`);
-  const { child, urlPromise } = startTunnel(cfg, { port, protocol, bin });
+  const { child, urlPromise } = startTunnel(cfg, {
+    port,
+    protocol,
+    bin,
+    authtoken: args.flags.authtoken,
+    domain: args.flags.domain,
+  });
 
   let publicUrl;
   try {

package/src/direct.mjs

@@ -29,7 +29,7 @@ export function createDirectServer(cfg, engine) {
           ok: true,
           mode: 'direct',
           device: cfg.device,
-          version: '0.6.1',
+          version: '0.6.2',
           uptime_sec: Math.round(process.uptime()),
         });
       }

package/src/hub.mjs

@@ -90,7 +90,7 @@ export function createHubServer(cfg) {
         return sendJson(res, 200, {
           ok: true,
           mode: 'hub',
-          version: '0.6.1',
+          version: '0.6.2',
           devices: [...devices.keys()],
         });
       }

package/src/mcp.mjs

@@ -48,7 +48,7 @@ export async function handleMcp(req, res, ctx) {
           mcpResponse(id, {
             protocolVersion: PROTOCOL_VERSION,
             capabilities: { tools: { listChanged: false } },
-            serverInfo: { name: 'arena-bridge', version: '0.6.1' },
+            serverInfo: { name: 'arena-bridge', version: '0.6.2' },
             instructions:
               'Tools operate the user\'s own machine. Dangerous operations may return ' +
               'PROTECTED and require a local human approval.',

package/src/tunnel.mjs

@@ -2,15 +2,27 @@ import { spawn } from 'node:child_process';
 import net from 'node:net';
 
 const URL_RE = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/i;
+const NGROK_URL_RE = /https:\/\/[a-z0-9-]+\.ngrok(?:-free)?\.(?:app|io|dev)/i;
 
 /**
- * Starts a cloudflared quick tunnel and resolves with the public URL it prints.
- * QUIC (UDP/7844) is blocked on many corporate/ISP networks, so we default to
- * http2 transport, which works over plain TCP/443.
+ * Starts a tunnel and resolves with the public URL it prints.
+ * cloudflared: QUIC (UDP/7844) is blocked on many networks, so we default to http2 over TCP/443.
+ * ngrok: an authtoken and an optional reserved domain give the same URL on every restart.
  */
-export function startTunnel(cfg, { port, protocol = 'http2', bin = 'cloudflared' } = {}) {
+export function startTunnel(cfg, { port, protocol = 'http2', bin = 'cloudflared', authtoken, domain } = {}) {
   const target = `http://127.0.0.1:${port}`;
-  const args = ['tunnel', '--url', target, '--protocol', protocol];
+  const isNgrok = /ngrok/i.test(bin);
+  const args = isNgrok
+    ? [
+        'http',
+        target,
+        ...(authtoken ? ['--authtoken', String(authtoken)] : []),
+        ...(domain ? ['--domain', String(domain)] : []),
+        '--log',
+        'stdout',
+      ]
+    : ['tunnel', '--url', target, '--protocol', protocol];
+  const urlPattern = isNgrok ? NGROK_URL_RE : URL_RE;
 
   const child = spawn(bin, args, { stdio: ['ignore', 'pipe', 'pipe'] });
 
@@ -27,7 +39,7 @@ export function startTunnel(cfg, { port, protocol = 'http2', bin = 'cloudflared'
   const onChunk = (chunk) => {
     const text = chunk.toString();
     buffer += text;
-    const match = URL_RE.exec(buffer);
+    const match = urlPattern.exec(buffer);
     if (match && !settled) {
       settled = true;
       resolveUrl(match[0]);