cli-tunnel 1.3.1-beta.0 → 1.3.1-beta.2

package/dist/index.js

@@ -187,8 +187,8 @@ setInterval(() => {
 }, 30000);
 // ─── Security: Redact secrets from replay events ────────────
 // ─── Bridge server ──────────────────────────────────────────
-const acpEventLog = [];
 const connections = new Map();
+let localResizeAt = 0; // Timestamp of last local terminal resize
 // #10: Session TTL enforcement — periodically close expired connections
 setInterval(() => {
     if (Date.now() - sessionCreatedAt > SESSION_TTL) {
@@ -525,12 +525,10 @@ wss.on('connection', (ws, req) => {
     // F-10: WS ping/pong heartbeat
     ws._isAlive = true;
     ws.on('pong', () => { ws._isAlive = true; });
-    // Replay history with secrets redacted (only if replay is enabled)
-    if (hasReplay) {
-        for (const event of acpEventLog) {
-            ws.send(JSON.stringify({ type: '_replay', data: redactSecrets(event) }));
-        }
-        ws.send(JSON.stringify({ type: '_replay_done' }));
+    // Replay: send accumulated PTY output as one bulk write
+    // xterm.js processes the full ANSI stream so cursor codes work correctly
+    if (hasReplay && replayBuffer.length > 0) {
+        ws.send(JSON.stringify({ type: 'pty', data: replayBuffer }));
     }
     ws.on('message', (data) => {
         // F-13: Enforce WS message rate limit (100 msg/sec)
@@ -557,11 +555,12 @@ wss.on('connection', (ws, req) => {
                     ptyProcess.write(msg.data);
                 }
             }
-            // #7: NaN guard on pty_resize
+            // #7: NaN guard on pty_resize — remote resize only if local hasn't resized recently
             if (msg.type === 'pty_resize') {
                 const cols = Number(msg.cols);
                 const rows = Number(msg.rows);
-                if (Number.isFinite(cols) && Number.isFinite(rows) && ptyProcess) {
+                const localRecentlyResized = Date.now() - localResizeAt < 2000;
+                if (Number.isFinite(cols) && Number.isFinite(rows) && ptyProcess && !localRecentlyResized) {
                     ptyProcess.resize(Math.max(1, Math.min(500, cols)), Math.max(1, Math.min(200, rows)));
                 }
             }
@@ -585,19 +584,19 @@ setInterval(() => {
         ws.ping();
     }
 }, 30000);
-// F-12: Cap per-entry replay buffer size (64KB)
-const MAX_REPLAY_ENTRY_SIZE = 65536;
+// Replay buffer: store raw PTY bytes in a single rolling buffer
+// xterm.js processes the full stream on connect, so ANSI cursor codes work correctly
+const MAX_REPLAY_BYTES = 256 * 1024; // 256KB
+let replayBuffer = '';
 function broadcast(data) {
-    // F-01: Redact secrets from live broadcast (not just replay)
     const redacted = redactSecrets(data);
     const msg = JSON.stringify({ type: 'pty', data: redacted });
     if (hasReplay) {
-        // F-12: Cap per-entry size to prevent memory exhaustion
-        if (msg.length <= MAX_REPLAY_ENTRY_SIZE) {
-            acpEventLog.push(msg);
+        replayBuffer += redacted;
+        // Trim from the front if too large
+        if (replayBuffer.length > MAX_REPLAY_BYTES) {
+            replayBuffer = replayBuffer.slice(replayBuffer.length - MAX_REPLAY_BYTES);
         }
-        if (acpEventLog.length > 2000)
-            acpEventLog.splice(0, acpEventLog.length - 2000);
     }
     for (const [, ws] of connections) {
         if (ws.readyState === WebSocket.OPEN)
@@ -814,6 +813,8 @@ async function main() {
         });
     }
     console.log(`  ${DIM}Starting ${command}...${RESET}\n`);
+    // Clear screen before PTY takes over — prevents overlap with banner/QR output
+    process.stdout.write('\x1b[2J\x1b[H');
     // Spawn PTY
     const nodePty = await import('node-pty');
     const cols = process.stdout.columns || 120;
@@ -902,6 +903,6 @@ async function main() {
         process.stdin.setRawMode(true);
     process.stdin.resume();
     process.stdin.on('data', (data) => ptyProcess.write(data.toString()));
-    process.stdout.on('resize', () => ptyProcess.resize(process.stdout.columns || 120, process.stdout.rows || 30));
+    process.stdout.on('resize', () => { localResizeAt = Date.now(); ptyProcess.resize(process.stdout.columns || 120, process.stdout.rows || 30); });
 }
 main().catch((err) => { console.error(err); process.exit(1); });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cli-tunnel",
-  "version": "1.3.1-beta.0",
+  "version": "1.3.1-beta.2",
   "description": "Tunnel any CLI app to your phone — PTY + devtunnel + xterm.js",
   "type": "module",
   "main": "dist/index.js",