arena-bridge 0.6.5 → 0.6.7

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to this project are documented here.
 The format follows [Keep a Changelog](https://keepachangelog.com/) and the project uses
 [Semantic Versioning](https://semver.org/).
 
+## 0.6.7
+
+### Added
+- `arena-bridge service install --bin ngrok --domain <name>` installs the macOS background
+  service with a fixed public address; `arena-bridge service status` now shows the current URL.
+
+## 0.6.6
+
+### Fixed
+- The tunnel is now supervised: when the tunnel binary dies, it is started again automatically
+  and the new public URL is printed and saved to the config, instead of leaving a dead tunnel
+  behind (the bridge used to keep running while the public address had stopped working).
+
 ## 0.6.5
 
 ### Fixed

package/README.md

@@ -12,7 +12,7 @@
   <img src="https://img.shields.io/badge/license-MIT-blue.svg?style=flat-square" alt="license">
   <img src="https://img.shields.io/badge/node-%3E%3D18-green.svg?style=flat-square" alt="node">
   <img src="https://img.shields.io/badge/dependencies-0-brightgreen.svg?style=flat-square" alt="dependencies">
-  <img src="https://img.shields.io/badge/tests-112%20passed-brightgreen.svg?style=flat-square" alt="tests">
+  <img src="https://img.shields.io/badge/tests-115%20passed-brightgreen.svg?style=flat-square" alt="tests">
 </p>
 
 <p align="center">
@@ -53,6 +53,10 @@ arena-bridge setup --root ~/projects --root ~/Documents
 
 `setup` печатает готовый промпт и публичный URL. Дальше — просто говорите агенту задачу.
 
+Туннель под присмотром: если `cloudflared`/`ngrok` упадёт, мост поднимет его заново и сам
+напечатает новый публичный адрес. Постоянный адрес вместо случайного — `arena-bridge tunnel
+--bin ngrok --domain <зарезервированный домен>`.
+
 Нужен туннель? Поставьте `cloudflared` (`brew install cloudflared` или бинарник в `/usr/local/bin`).
 Можно и через ngrok — `arena-bridge tunnel --bin ngrok`; с сохранённым токеном и зарезервированным
 доменом публичный адрес остаётся постоянным, и промпт агенту не нужно копировать заново:
@@ -60,6 +64,18 @@ arena-bridge setup --root ~/projects --root ~/Documents
 
 ### В фоне, чтобы не открывать терминал
 
+Мост можно поднять как службу macOS — он стартует вместе с системой, переживает закрытие
+терминала и поднимается заново после сбоя:
+
+```bash
+arena-bridge service install                                   # облако, случайный адрес
+arena-bridge service install --bin ngrok --domain mymac.ngrok-free.app   # постоянный адрес
+arena-bridge service status                                    # состояние и текущий URL
+arena-bridge url                                              # текущий публичный адрес
+arena-bridge service uninstall
+```
+
+
 ```bash
 arena-bridge service install   # launchd: стартует вместе с системой, URL всегда живой
 arena-bridge url                # текущий публичный URL

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arena-bridge",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "description": "Give a cloud AI agent (Arena.ai Agent Mode, Claude, Cursor, ...) controlled access to your own machine over HTTP/MCP: files, shell, Chrome and the macOS desktop, with an approval gate, trust windows and an audit log.",
   "type": "module",
   "bin": {

package/src/cli.mjs

@@ -199,7 +199,7 @@ async function cmdTunnel(args) {
   }
 
   console.log(`starting ${bin} (protocol=${protocol})…`);
-  const { child, urlPromise } = startTunnel(cfg, {
+  const { child, urlPromise, onUrl } = startTunnel(cfg, {
     port,
     protocol,
     bin,
@@ -229,6 +229,15 @@ async function cmdTunnel(args) {
   cfg.port = port;
   saveConfig(cfg);
 
+  onUrl((url) => {
+    if (url === publicUrl) return;
+    publicUrl = url;
+    cfg.publicUrl = url;
+    saveConfig(cfg);
+    console.log(`\n⚠ tunnel reconnected — new public URL: ${url}`);
+    console.log('Update the base URL in the agent chat (arena-bridge prompt prints a fresh copy).');
+  });
+
   console.log(`\npublic URL: ${publicUrl}   (saved as config.publicUrl)\n`);
   console.log('Paste this into the agent chat:');
   console.log('-----8<-----');
@@ -431,7 +440,12 @@ async function cmdUpdate(args) {
 function cmdService(args) {
   const what = args._[1] || 'status';
   if (what === 'install') {
-    const res = serviceInstall();
+    const res = serviceInstall({
+      bin: args.flags.bin,
+      domain: args.flags.domain,
+      authtoken: args.flags.authtoken,
+      port: args.flags.port,
+    });
     console.log(`\u2713 service installed: ${res.plist}`);
     console.log('  the bridge now starts with the system and keeps a public URL alive');
     console.log('  current URL: arena-bridge url');
@@ -445,6 +459,8 @@ function cmdService(args) {
   const st = serviceStatus();
   console.log(`service: ${st.installed ? 'installed' : 'not installed'} (${st.running ? 'running' : 'not running'})`);
   console.log(`  plist: ${st.plist}`);
+  const current = loadConfig().publicUrl;
+  if (current) console.log(`  current URL: ${current}`);
   if (st.detail) console.log(`  ${st.detail.split('\n')[0]}`);
   if (!st.installed) console.log('  install it with: arena-bridge service install');
 }

package/src/direct.mjs

@@ -29,7 +29,7 @@ export function createDirectServer(cfg, engine) {
           ok: true,
           mode: 'direct',
           device: cfg.device,
-          version: '0.6.5',
+          version: '0.6.7',
           uptime_sec: Math.round(process.uptime()),
         });
       }

package/src/hub.mjs

@@ -90,7 +90,7 @@ export function createHubServer(cfg) {
         return sendJson(res, 200, {
           ok: true,
           mode: 'hub',
-          version: '0.6.5',
+          version: '0.6.7',
           devices: [...devices.keys()],
         });
       }

package/src/mcp.mjs

@@ -48,7 +48,7 @@ export async function handleMcp(req, res, ctx) {
           mcpResponse(id, {
             protocolVersion: PROTOCOL_VERSION,
             capabilities: { tools: { listChanged: false } },
-            serverInfo: { name: 'arena-bridge', version: '0.6.5' },
+            serverInfo: { name: 'arena-bridge', version: '0.6.7' },
             instructions:
               'Tools operate the user\'s own machine. Dangerous operations may return ' +
               'PROTECTED and require a local human approval.',

package/src/service.mjs

@@ -21,9 +21,14 @@ function cliEntry() {
   return path.join(here, '..', 'bin', 'arena-bridge.mjs');
 }
 
-function plistXml() {
+function plistXml({ bin, domain, authtoken, port } = {}) {
   const cli = cliEntry();
   const logs = logDir();
+  const extra = [];
+  if (bin) extra.push('--bin', String(bin));
+  if (domain) extra.push('--domain', String(domain));
+  if (authtoken) extra.push('--authtoken', String(authtoken));
+  if (port) extra.push('--port', String(port));
   return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -34,6 +39,7 @@ function plistXml() {
     <string>${process.execPath}</string>
     <string>${cli}</string>
     <string>tunnel</string>
+${extra.map((a) => `    <string>${a}</string>`).join('\n')}
   </array>
   <key>RunAtLoad</key><true/>
   <key>KeepAlive</key><true/>
@@ -63,12 +69,12 @@ export function serviceStatus() {
   return { installed, running, plist: plistPath(), detail: out.trim().slice(0, 600) };
 }
 
-export function serviceInstall() {
+export function serviceInstall(options = {}) {
   ensureDirs();
   fs.mkdirSync(logDir(), { recursive: true });
   const dir = path.dirname(plistPath());
   fs.mkdirSync(dir, { recursive: true });
-  fs.writeFileSync(plistPath(), plistXml());
+  fs.writeFileSync(plistPath(), plistXml(options));
   launchctl(['bootout', `gui/${process.getuid()}/${LABEL}`], { quiet: true });
   const out = launchctl(['bootstrap', `gui/${process.getuid()}`, plistPath()], { quiet: true });
   launchctl(['enable', `gui/${process.getuid()}/${LABEL}`], { quiet: true });

package/src/tunnel.mjs

@@ -9,7 +9,10 @@ const NGROK_URL_RE = /https:\/\/[a-z0-9-]+\.ngrok(?:-free)?\.(?:app|io|dev)/i;
  * cloudflared: QUIC (UDP/7844) is blocked on many networks, so we default to http2 over TCP/443.
  * ngrok: an authtoken and an optional reserved domain give the same URL on every restart.
  */
-export function startTunnel(cfg, { port, protocol = 'http2', bin = 'cloudflared', authtoken, domain } = {}) {
+export function startTunnel(
+  cfg,
+  { port, protocol = 'http2', bin = 'cloudflared', authtoken, domain, restarts = 20, delay = 2000 } = {},
+) {
   const target = `http://127.0.0.1:${port}`;
   const isNgrok = /ngrok/i.test(bin);
   const args = isNgrok
@@ -24,12 +27,13 @@ export function startTunnel(cfg, { port, protocol = 'http2', bin = 'cloudflared'
     : ['tunnel', '--url', target, '--protocol', protocol];
   const urlPattern = isNgrok ? NGROK_URL_RE : URL_RE;
 
-  const child = spawn(bin, args, { stdio: ['ignore', 'pipe', 'pipe'] });
-
+  let child = null;
   let buffer = '';
   let settled = false;
+  let attempt = 0;
   let resolveUrl;
   let rejectUrl;
+  const listeners = new Set();
 
   const urlPromise = new Promise((resolve, reject) => {
     resolveUrl = resolve;
@@ -37,33 +41,48 @@ export function startTunnel(cfg, { port, protocol = 'http2', bin = 'cloudflared'
   });
 
   const onChunk = (chunk) => {
-    const text = chunk.toString();
-    buffer += text;
+    buffer += chunk.toString();
     const match = urlPattern.exec(buffer);
-    if (match && !settled) {
+    if (!match) return;
+    if (!settled) {
       settled = true;
       resolveUrl(match[0]);
     }
+    for (const fn of listeners) fn(match[0]);
   };
 
-  child.stdout.on('data', onChunk);
-  child.stderr.on('data', onChunk);
-
-  child.on('error', (e) => {
-    if (!settled) {
-      settled = true;
-      rejectUrl(new Error(`cannot start ${bin}: ${e.message}`));
-    }
-  });
+  const spawnChild = () => {
+    child = spawn(bin, args, { stdio: ['ignore', 'pipe', 'pipe'] });
+    buffer = '';
+    child.stdout.on('data', onChunk);
+    child.stderr.on('data', onChunk);
+    child.on('error', (e) => {
+      if (!settled) {
+        settled = true;
+        rejectUrl(new Error(`cannot start ${bin}: ${e.message}`));
+      }
+    });
+    child.on('exit', (code) => {
+      if (!settled) {
+        settled = true;
+        rejectUrl(new Error(`${bin} exited with code ${code} before the tunnel URL appeared`));
+        return;
+      }
+      if (attempt++ < restarts) {
+        setTimeout(spawnChild, delay);
+      }
+    });
+  };
 
-  child.on('exit', (code) => {
-    if (!settled) {
-      settled = true;
-      rejectUrl(new Error(`${bin} exited with code ${code} before the tunnel URL appeared`));
-    }
-  });
+  spawnChild();
 
-  return { child, urlPromise, args, target };
+  return {
+    child,
+    urlPromise,
+    args,
+    target,
+    onUrl: (fn) => listeners.add(fn),
+  };
 }
 
 export function isPortOpen(port, host = '127.0.0.1', timeout = 700) {