codebase-onboarder 0.6.0 → 1.0.0

package/server/config.js

@@ -1,161 +1,151 @@
 // Durable, user-scoped settings for the CLI/server. This file deliberately does
 // not know about HTTP: the CLI and the settings API use the same validation and
 // write path so a browser can change a setting without inventing a second schema.
-
 import { promises as fs } from 'node:fs';
 import { randomBytes, timingSafeEqual } from 'node:crypto';
 import os from 'node:os';
 import path from 'node:path';
-
 export const CONFIG_VERSION = 2;
 export const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '::1', '[::1]']);
 export const DEFAULT_SETTINGS = Object.freeze({
-  version: CONFIG_VERSION,
-  mode: 'local',
-  host: '127.0.0.1',
-  port: 4310,
-  domain: '',
-  // When a domain is configured, ask Caddy to obtain and renew a trusted TLS
-  // certificate and reverse-proxy this app. The certificate itself belongs to
-  // Caddy; the server still speaks plain HTTP to its local upstream.
-  https: false,
-  accessKey: '',
-  // Whether `onboarder start` opens the app in a browser once it is listening.
-  // Off in the schema so `npm start` from a checkout stays quiet; the setup
-  // wizard offers to turn it on, which is where the people who want it are.
-  autoOpen: false,
-  account: Object.freeze({ name: '', email: '', provider: 'openai-compatible', baseUrl: '', model: '' }),
-  tunnel: Object.freeze({ cloudflare: false, tailscale: false }),
+    version: CONFIG_VERSION,
+    mode: 'local',
+    host: '127.0.0.1',
+    port: 4310,
+    domain: '',
+    // When a domain is configured, ask Caddy to obtain and renew a trusted TLS
+    // certificate and reverse-proxy this app. The certificate itself belongs to
+    // Caddy; the server still speaks plain HTTP to its local upstream.
+    https: false,
+    accessKey: '',
+    // Whether `onboarder start` opens the app in a browser once it is listening.
+    // Off in the schema so `npm start` from a checkout stays quiet; the setup
+    // wizard offers to turn it on, which is where the people who want it are.
+    autoOpen: false,
+    account: Object.freeze({ name: '', email: '', provider: 'openai-compatible', baseUrl: '', model: '' }),
+    tunnel: Object.freeze({ cloudflare: false, tailscale: false }),
 });
-
 export function configHome(env = process.env) {
-  if (env.XDG_CONFIG_HOME) return path.resolve(env.XDG_CONFIG_HOME, 'onboarder');
-  return path.join(os.homedir(), '.config', 'onboarder');
+    if (env.XDG_CONFIG_HOME)
+        return path.resolve(env.XDG_CONFIG_HOME, 'onboarder');
+    return path.join(os.homedir(), '.config', 'onboarder');
 }
-
 export function configPath(env = process.env) {
-  // An explicit override first: the CLI's --config flag and the test suite both
-  // need a config file that is not the one in the person's home directory.
-  if (env.ONBOARDER_CONFIG) return path.resolve(env.ONBOARDER_CONFIG);
-  return path.join(configHome(env), 'config.json');
+    // An explicit override first: the CLI's --config flag and the test suite both
+    // need a config file that is not the one in the person's home directory.
+    if (env.ONBOARDER_CONFIG)
+        return path.resolve(env.ONBOARDER_CONFIG);
+    return path.join(configHome(env), 'config.json');
 }
-
 export function isLoopbackHost(host) {
-  return LOOPBACK_HOSTS.has(String(host || '').trim().toLowerCase());
+    return LOOPBACK_HOSTS.has(String(host || '').trim().toLowerCase());
 }
-
 function cleanString(value, max = 240) {
-  return String(value ?? '').trim().slice(0, max);
+    return String(value ?? '').trim().slice(0, max);
 }
-
 function normalizePort(value) {
-  const port = Number(value);
-  if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error('Port must be a whole number from 1 to 65535.');
-  return port;
+    const port = Number(value);
+    if (!Number.isInteger(port) || port < 1 || port > 65535)
+        throw new Error('Port must be a whole number from 1 to 65535.');
+    return port;
 }
-
 function normalizeDomain(value) {
-  const domain = cleanString(value).toLowerCase();
-  if (!domain) return '';
-  if (domain.length > 253 || domain.includes('/') || domain.includes('\\') || domain.includes(' ') || domain.includes('@') || domain.startsWith('.')) {
-    throw new Error('Domain must be a hostname such as map.example.com.');
-  }
-  return domain;
+    const domain = cleanString(value).toLowerCase();
+    if (!domain)
+        return '';
+    if (domain.length > 253 || domain.includes('/') || domain.includes('\\') || domain.includes(' ') || domain.includes('@') || domain.startsWith('.')) {
+        throw new Error('Domain must be a hostname such as map.example.com.');
+    }
+    return domain;
 }
-
 function normalizeAccount(value = {}) {
-  return {
-    name: cleanString(value.name, 80),
-    email: cleanString(value.email, 160),
-    provider: cleanString(value.provider || 'openai-compatible', 80),
-    baseUrl: cleanString(value.baseUrl, 500),
-    model: cleanString(value.model, 160),
-  };
+    return {
+        name: cleanString(value.name, 80),
+        email: cleanString(value.email, 160),
+        provider: cleanString(value.provider || 'openai-compatible', 80),
+        baseUrl: cleanString(value.baseUrl, 500),
+        model: cleanString(value.model, 160),
+    };
 }
-
 function normalizeTunnel(value = {}) {
-  return { cloudflare: Boolean(value.cloudflare), tailscale: Boolean(value.tailscale) };
+    return { cloudflare: Boolean(value.cloudflare), tailscale: Boolean(value.tailscale) };
 }
-
 export function normalizeSettings(value = {}) {
-  const mode = value.mode === 'self-hosted' ? 'self-hosted' : 'local';
-  const host = cleanString(value.host || DEFAULT_SETTINGS.host, 120);
-  const settings = {
-    version: CONFIG_VERSION,
-    mode,
-    host,
-    port: normalizePort(value.port ?? DEFAULT_SETTINGS.port),
-    domain: normalizeDomain(value.domain),
-    https: Boolean(value.https),
-    accessKey: cleanString(value.accessKey, 256),
-    autoOpen: value.autoOpen === undefined ? DEFAULT_SETTINGS.autoOpen : Boolean(value.autoOpen),
-    account: normalizeAccount(value.account),
-    tunnel: normalizeTunnel(value.tunnel),
-  };
-  if (!host) throw new Error('Host cannot be empty.');
-  if (settings.mode === 'local' && !isLoopbackHost(settings.host)) {
-    throw new Error('Local mode only binds to 127.0.0.1, localhost, or ::1. Choose self-hosted mode for a network bind.');
-  }
-  if (settings.https && !settings.domain) {
-    throw new Error('HTTPS needs a domain such as map.example.com. A public IP alone cannot be used for a normal trusted certificate.');
-  }
-  // Self-hosted needs no domain: a bare-IP bind (a VPS with no DNS name) is a
-  // legitimate layout. Every API call needs the access key either way.
-  return settings;
+    const mode = value.mode === 'self-hosted' ? 'self-hosted' : 'local';
+    const host = cleanString(value.host || DEFAULT_SETTINGS.host, 120);
+    const settings = {
+        version: CONFIG_VERSION,
+        mode,
+        host,
+        port: normalizePort(value.port ?? DEFAULT_SETTINGS.port),
+        domain: normalizeDomain(value.domain),
+        https: Boolean(value.https),
+        accessKey: cleanString(value.accessKey, 256),
+        autoOpen: value.autoOpen === undefined ? DEFAULT_SETTINGS.autoOpen : Boolean(value.autoOpen),
+        account: normalizeAccount(value.account),
+        tunnel: normalizeTunnel(value.tunnel),
+    };
+    if (!host)
+        throw new Error('Host cannot be empty.');
+    if (settings.mode === 'local' && !isLoopbackHost(settings.host)) {
+        throw new Error('Local mode only binds to 127.0.0.1, localhost, or ::1. Choose self-hosted mode for a network bind.');
+    }
+    if (settings.https && !settings.domain) {
+        throw new Error('HTTPS needs a domain such as map.example.com. A public IP alone cannot be used for a normal trusted certificate.');
+    }
+    // Self-hosted needs no domain: a bare-IP bind (a VPS with no DNS name) is a
+    // legitimate layout. Every API call needs the access key either way.
+    return settings;
 }
-
 export function generateAccessKey() {
-  return `ob_${randomBytes(32).toString('base64url')}`;
+    return `ob_${randomBytes(32).toString('base64url')}`;
 }
-
 // Every URL a person might reach this server through, derived from the settings
 // so the CLI banner, the settings drawer, and `onboarder config` never disagree
 // about what to print.
 export function serverUrls(value = DEFAULT_SETTINGS) {
-  const settings = normalizeSettings(value);
-  const urls = { local: `http://localhost:${settings.port}` };
-  if (!isLoopbackHost(settings.host)) {
-    urls.network = settings.host === '0.0.0.0' || settings.host === '::'
-      ? `http://<this-machine>:${settings.port} (every interface)`
-      : `http://${settings.host}:${settings.port}`;
-  }
-  if (settings.domain) urls.domain = settings.https ? `https://${settings.domain}` : `http://${settings.domain}:${settings.port}`;
-  return urls;
+    const settings = normalizeSettings(value);
+    const urls = { local: `http://localhost:${settings.port}` };
+    if (!isLoopbackHost(settings.host)) {
+        urls.network = settings.host === '0.0.0.0' || settings.host === '::'
+            ? `http://<this-machine>:${settings.port} (every interface)`
+            : `http://${settings.host}:${settings.port}`;
+    }
+    if (settings.domain)
+        urls.domain = settings.https ? `https://${settings.domain}` : `http://${settings.domain}:${settings.port}`;
+    return urls;
 }
-
 // The key, safe to print in a list: enough to recognize it, not enough to use it.
 export function maskAccessKey(key) {
-  const value = String(key || '');
-  if (value.length <= 8) return value ? '…' : '';
-  return `${value.slice(0, 6)}…${value.slice(-4)}`;
+    const value = String(key || '');
+    if (value.length <= 8)
+        return value ? '…' : '';
+    return `${value.slice(0, 6)}…${value.slice(-4)}`;
 }
-
 export function browserUrl(settings) {
-  return new URL(serverUrls(settings).local).toString();
+    return new URL(serverUrls(settings).local).toString();
 }
-
 export function publicSettings(value = DEFAULT_SETTINGS) {
-  const settings = normalizeSettings(value);
-  return {
-    version: settings.version,
-    mode: settings.mode,
-    host: settings.host,
-    port: settings.port,
-    domain: settings.domain,
-    https: settings.https,
-    autoOpen: settings.autoOpen,
-    hasAccessKey: Boolean(settings.accessKey),
-    accessKeyMasked: maskAccessKey(settings.accessKey),
-    account: settings.account,
-    tunnel: settings.tunnel,
-    urls: serverUrls(settings),
-    security: {
-      remoteAuth: settings.mode === 'self-hosted',
-      loopback: isLoopbackHost(settings.host),
-    },
-  };
+    const settings = normalizeSettings(value);
+    return {
+        version: settings.version,
+        mode: settings.mode,
+        host: settings.host,
+        port: settings.port,
+        domain: settings.domain,
+        https: settings.https,
+        autoOpen: settings.autoOpen,
+        hasAccessKey: Boolean(settings.accessKey),
+        accessKeyMasked: maskAccessKey(settings.accessKey),
+        account: settings.account,
+        tunnel: settings.tunnel,
+        urls: serverUrls(settings),
+        security: {
+            remoteAuth: settings.mode === 'self-hosted',
+            loopback: isLoopbackHost(settings.host),
+        },
+    };
 }
-
 // Hostnames the rebinding guard should accept beyond loopback: the configured
 // domain, and a non-loopback bind address itself. A loopback-only local server
 // gets an empty list, which is exactly the old behavior.
@@ -172,104 +162,109 @@ export function publicSettings(value = DEFAULT_SETTINGS) {
 // call time (the router asks per request), so a DHCP lease change does not
 // strand the guard on a stale address.
 function ownInterfaceHosts() {
-  const hosts = [];
-  for (const list of Object.values(os.networkInterfaces())) {
-    for (const addr of list || []) {
-      if (addr.internal) continue; // loopback is always allowed anyway
-      hosts.push(addr.address);
+    const hosts = [];
+    for (const list of Object.values(os.networkInterfaces())) {
+        for (const addr of list || []) {
+            if (addr.internal)
+                continue; // loopback is always allowed anyway
+            hosts.push(addr.address);
+        }
     }
-  }
-  return hosts;
+    return hosts;
 }
-
 export function allowedHosts(value = DEFAULT_SETTINGS) {
-  const settings = normalizeSettings(value);
-  const hosts = new Set();
-  if (settings.domain) hosts.add(settings.domain);
-  if (!isLoopbackHost(settings.host)) {
-    // A wildcard bind is useful as a literal Host value to diagnostics, even
-    // though browsers normally address the machine by one of its real IPs.
-    hosts.add(settings.host.toLowerCase());
-    // Any network bind can sit behind NAT: a VPS may be configured as a private
-    // interface address while browsers address its public/NAT IP. Accept every IP
-    // literal, never arbitrary DNS names; the access key protects remote data.
-    hosts.add('ip:*');
-    for (const ip of ownInterfaceHosts()) if (!isLoopbackHost(ip)) hosts.add(ip);
-  }
-  if (settings.tunnel.cloudflare) hosts.add('*.trycloudflare.com');
-  if (settings.tunnel.tailscale) hosts.add('*.ts.net');
-  return [...hosts];
+    const settings = normalizeSettings(value);
+    const hosts = new Set();
+    if (settings.domain)
+        hosts.add(settings.domain);
+    if (!isLoopbackHost(settings.host)) {
+        // A wildcard bind is useful as a literal Host value to diagnostics, even
+        // though browsers normally address the machine by one of its real IPs.
+        hosts.add(settings.host.toLowerCase());
+        // Any network bind can sit behind NAT: a VPS may be configured as a private
+        // interface address while browsers address its public/NAT IP. Accept every IP
+        // literal, never arbitrary DNS names; the access key protects remote data.
+        hosts.add('ip:*');
+        for (const ip of ownInterfaceHosts())
+            if (!isLoopbackHost(ip))
+                hosts.add(ip);
+    }
+    if (settings.tunnel.cloudflare)
+        hosts.add('*.trycloudflare.com');
+    if (settings.tunnel.tailscale)
+        hosts.add('*.ts.net');
+    return [...hosts];
 }
-
 export function accessKeysMatch(expected, actual) {
-  const a = Buffer.from(String(expected || ''));
-  const b = Buffer.from(String(actual || ''));
-  return a.length > 0 && a.length === b.length && timingSafeEqual(a, b);
+    const a = Buffer.from(String(expected || ''));
+    const b = Buffer.from(String(actual || ''));
+    return a.length > 0 && a.length === b.length && timingSafeEqual(a, b);
 }
-
 export function bearerToken(req) {
-  const value = String(req.headers?.authorization || '');
-  const match = value.match(/^Bearer\s+(.+)$/i);
-  return match ? match[1].trim() : '';
+    const value = String(req.headers?.authorization || '');
+    const match = value.match(/^Bearer\s+(.+)$/i);
+    return match ? match[1].trim() : '';
 }
-
 export function requestIsLoopback(req) {
-  const remote = String(req.socket?.remoteAddress || '').replace(/^::ffff:/, '');
-  return remote === '127.0.0.1' || remote === '::1';
+    const remote = String(req.socket?.remoteAddress || '').replace(/^::ffff:/, '');
+    return remote === '127.0.0.1' || remote === '::1';
 }
-
 export function authReason(req, settings = DEFAULT_SETTINGS) {
-  const normalized = normalizeSettings(settings);
-  if (normalized.mode !== 'self-hosted') return null;
-  // A self-hosted server can still be opened on the same machine. Caddy and
-  // tunnels arrive from loopback but keep the public Host, so both signals must
-  // agree before a login page is skipped.
-  const host = String(req.headers?.host || '').toLowerCase();
-  const hostIsLoopback = isLoopbackHost(host.replace(/:\d+$/, '')) || /^localhost:\d+$/.test(host);
-  if (requestIsLoopback(req) && hostIsLoopback) return null;
-  if (!normalized.accessKey) return 'Self-hosted mode has no access key configured.';
-  const token = bearerToken(req);
-  if (!accessKeysMatch(normalized.accessKey, token)) return 'A valid access key is required.';
-  return null;
+    const normalized = normalizeSettings(settings);
+    if (normalized.mode !== 'self-hosted')
+        return null;
+    // A self-hosted server can still be opened on the same machine. Caddy and
+    // tunnels arrive from loopback but keep the public Host, so both signals must
+    // agree before a login page is skipped.
+    const host = String(req.headers?.host || '').toLowerCase();
+    const hostIsLoopback = isLoopbackHost(host.replace(/:\d+$/, '')) || /^localhost:\d+$/.test(host);
+    if (requestIsLoopback(req) && hostIsLoopback)
+        return null;
+    if (!normalized.accessKey)
+        return 'Self-hosted mode has no access key configured.';
+    const token = bearerToken(req);
+    if (!accessKeysMatch(normalized.accessKey, token))
+        return 'A valid access key is required.';
+    return null;
 }
-
 // Has a config ever been written? The wizard asks this to decide between
 // "start from the defaults" and "start from what you already have".
 export async function configExists(file = configPath()) {
-  try {
-    await fs.access(file);
-    return true;
-  } catch {
-    return false;
-  }
+    try {
+        await fs.access(file);
+        return true;
+    }
+    catch {
+        return false;
+    }
 }
-
-
 export async function readSettings(file = configPath()) {
-  try {
-    const raw = await fs.readFile(file, 'utf8');
-    return normalizeSettings(JSON.parse(raw));
-  } catch (err) {
-    if (err.code === 'ENOENT') return { ...DEFAULT_SETTINGS, account: { ...DEFAULT_SETTINGS.account }, tunnel: { ...DEFAULT_SETTINGS.tunnel } };
-    if (err instanceof SyntaxError) throw new Error(`Config is not valid JSON: ${file}`);
-    throw err;
-  }
+    try {
+        const raw = await fs.readFile(file, 'utf8');
+        return normalizeSettings(JSON.parse(raw));
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return { ...DEFAULT_SETTINGS, account: { ...DEFAULT_SETTINGS.account }, tunnel: { ...DEFAULT_SETTINGS.tunnel } };
+        if (err instanceof SyntaxError)
+            throw new Error(`Config is not valid JSON: ${file}`);
+        throw err;
+    }
 }
-
 export async function writeSettings(value, file = configPath()) {
-  const settings = normalizeSettings(value);
-  const dir = path.dirname(file);
-  await fs.mkdir(dir, { recursive: true, mode: 0o700 });
-  const temp = `${file}.${process.pid}.${Date.now()}.tmp`;
-  const body = JSON.stringify(settings, null, 2) + '\n';
-  await fs.writeFile(temp, body, { encoding: 'utf8', mode: 0o600 });
-  await fs.rename(temp, file);
-  await fs.chmod(file, 0o600);
-  return settings;
+    const settings = normalizeSettings(value);
+    const dir = path.dirname(file);
+    await fs.mkdir(dir, { recursive: true, mode: 0o700 });
+    const temp = `${file}.${process.pid}.${Date.now()}.tmp`;
+    const body = JSON.stringify(settings, null, 2) + '\n';
+    await fs.writeFile(temp, body, { encoding: 'utf8', mode: 0o600 });
+    await fs.rename(temp, file);
+    await fs.chmod(file, 0o600);
+    return settings;
 }
-
 export async function updateSettings(patch = {}, file = configPath()) {
-  const current = await readSettings(file);
-  const next = normalizeSettings({ ...current, ...patch, account: { ...current.account, ...(patch.account || {}) }, tunnel: { ...current.tunnel, ...(patch.tunnel || {}) } });
-  return writeSettings(next, file);
+    const current = await readSettings(file);
+    const next = normalizeSettings({ ...current, ...patch, account: { ...current.account, ...(patch.account || {}) }, tunnel: { ...current.tunnel, ...(patch.tunnel || {}) } });
+    return writeSettings(next, file);
 }
+//# sourceMappingURL=config.js.map

package/server/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/server/config.ts"],"names":[],"mappings":"AACA,gFAAgF;AAChF,gFAAgF;AAChF,kFAAkF;AAElF,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAChC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAClF,MAAM,CAAC,MAAM,gBAAgB,GAAuB,MAAM,CAAC,MAAM,CAAC;IAChE,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,EAAE;IACV,2EAA2E;IAC3E,4EAA4E;IAC5E,mEAAmE;IACnE,KAAK,EAAE,KAAK;IACZ,SAAS,EAAE,EAAE;IACb,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACtG,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,UAAU,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG;IAC1C,IAAI,GAAG,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG;IAC1C,8EAA8E;IAC9E,yEAAyE;IACzE,IAAI,GAAG,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAI;IACjC,OAAO,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG;IACnC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,KAAK;IAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACzH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAK;IAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnJ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAK,GAA6B,EAAE;IAC5D,OAAO;QACL,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACjC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC;QACpC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,IAAI,mBAAmB,EAAE,EAAE,CAAC;QAChE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC;QACxC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAK,GAA4B,EAAE;IAC1D,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAK,GAAkB,EAAE;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;IACpE,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAa;QACzB,OAAO,EAAE,cAAc;QACvB,IAAI;QACJ,IAAI;QACJ,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC;QACxD,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;QACrC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAC3B,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;QAC5C,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5F,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC;QACxC,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;KACtC,CAAC;IACF,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,kHAAkH,CAAC,CAAC;IACtI,CAAC;IACD,4EAA4E;IAC5E,qEAAqE;IACrE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,uBAAuB;AACvB,MAAM,UAAU,UAAU,CAAC,KAAK,GAAkB,gBAAgB;IAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAe,EAAE,KAAK,EAAE,oBAAoB,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;IACxE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;YAClE,CAAC,CAAC,yBAAyB,QAAQ,CAAC,IAAI,oBAAoB;YAC5D,CAAC,CAAC,UAAU,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChI,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,GAAG;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAQ;IACjC,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAK,GAAkB,gBAAgB;IACpE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QACzC,eAAe,EAAE,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC;QAClD,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC;QAC1B,QAAQ,EAAE;YACR,UAAU,EAAE,QAAQ,CAAC,IAAI,KAAK,aAAa;YAC3C,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;SACxC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,yDAAyD;AACzD,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,yEAAyE;AACzE,qEAAqE;AACrE,yEAAyE;AACzE,6EAA6E;AAC7E,2EAA2E;AAC3E,2EAA2E;AAC3E,uCAAuC;AACvC,SAAS,iBAAiB;IACxB,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;QACzD,KAAK,MAAM,IAAI,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,QAAQ;gBAAE,SAAS,CAAC,oCAAoC;YACjE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAK,GAAkB,gBAAgB;IAClE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;IACxB,IAAI,QAAQ,CAAC,MAAM;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,yEAAyE;QACzE,uEAAuE;QACvE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACvC,4EAA4E;QAC5E,8EAA8E;QAC9E,2EAA2E;QAC3E,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,iBAAiB,EAAE;YAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU;QAAE,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAQ,EAAE,MAAM;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAG;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAG;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC/E,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,KAAK,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAkB,gBAAgB;IACxE,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IACnD,0EAA0E;IAC1E,8EAA8E;IAC9E,wCAAwC;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,MAAM,cAAc,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjG,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,cAAc;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,SAAS;QAAE,OAAO,gDAAgD,CAAC;IACnF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC;QAAE,OAAO,iCAAiC,CAAC;IAC5F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yEAAyE;AACzE,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAI,GAAG,UAAU,EAAE;IACpD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAI,GAAG,UAAU,EAAE;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,GAAG,gBAAgB,EAAE,OAAO,EAAE,EAAE,GAAG,gBAAgB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5I,IAAI,GAAG,YAAY,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAK,EAAE,IAAI,GAAG,UAAU,EAAE;IAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACtD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAK,GAAkB,EAAE,EAAE,IAAI,GAAG,UAAU,EAAE;IACjF,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5K,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import type { Settings, SettingsInput, ServerUrls } from '../shared/contracts.js';\n// Durable, user-scoped settings for the CLI/server. This file deliberately does\n// not know about HTTP: the CLI and the settings API use the same validation and\n// write path so a browser can change a setting without inventing a second schema.\n\nimport { promises as fs } from 'node:fs';\nimport { randomBytes, timingSafeEqual } from 'node:crypto';\nimport os from 'node:os';\nimport path from 'node:path';\n\nexport const CONFIG_VERSION = 2;\nexport const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '::1', '[::1]']);\nexport const DEFAULT_SETTINGS: Readonly<Settings> = Object.freeze({\n  version: CONFIG_VERSION,\n  mode: 'local',\n  host: '127.0.0.1',\n  port: 4310,\n  domain: '',\n  // When a domain is configured, ask Caddy to obtain and renew a trusted TLS\n  // certificate and reverse-proxy this app. The certificate itself belongs to\n  // Caddy; the server still speaks plain HTTP to its local upstream.\n  https: false,\n  accessKey: '',\n  // Whether `onboarder start` opens the app in a browser once it is listening.\n  // Off in the schema so `npm start` from a checkout stays quiet; the setup\n  // wizard offers to turn it on, which is where the people who want it are.\n  autoOpen: false,\n  account: Object.freeze({ name: '', email: '', provider: 'openai-compatible', baseUrl: '', model: '' }),\n  tunnel: Object.freeze({ cloudflare: false, tailscale: false }),\n});\n\nexport function configHome(env = process.env) {\n  if (env.XDG_CONFIG_HOME) return path.resolve(env.XDG_CONFIG_HOME, 'onboarder');\n  return path.join(os.homedir(), '.config', 'onboarder');\n}\n\nexport function configPath(env = process.env) {\n  // An explicit override first: the CLI's --config flag and the test suite both\n  // need a config file that is not the one in the person's home directory.\n  if (env.ONBOARDER_CONFIG) return path.resolve(env.ONBOARDER_CONFIG);\n  return path.join(configHome(env), 'config.json');\n}\n\nexport function isLoopbackHost(host) {\n  return LOOPBACK_HOSTS.has(String(host || '').trim().toLowerCase());\n}\n\nfunction cleanString(value, max = 240) {\n  return String(value ?? '').trim().slice(0, max);\n}\n\nfunction normalizePort(value) {\n  const port = Number(value);\n  if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error('Port must be a whole number from 1 to 65535.');\n  return port;\n}\n\nfunction normalizeDomain(value) {\n  const domain = cleanString(value).toLowerCase();\n  if (!domain) return '';\n  if (domain.length > 253 || domain.includes('/') || domain.includes('\\\\') || domain.includes(' ') || domain.includes('@') || domain.startsWith('.')) {\n    throw new Error('Domain must be a hostname such as map.example.com.');\n  }\n  return domain;\n}\n\nfunction normalizeAccount(value: SettingsInput['account'] = {}) {\n  return {\n    name: cleanString(value.name, 80),\n    email: cleanString(value.email, 160),\n    provider: cleanString(value.provider || 'openai-compatible', 80),\n    baseUrl: cleanString(value.baseUrl, 500),\n    model: cleanString(value.model, 160),\n  };\n}\n\nfunction normalizeTunnel(value: SettingsInput['tunnel'] = {}) {\n  return { cloudflare: Boolean(value.cloudflare), tailscale: Boolean(value.tailscale) };\n}\n\nexport function normalizeSettings(value: SettingsInput = {}): Settings {\n  const mode = value.mode === 'self-hosted' ? 'self-hosted' : 'local';\n  const host = cleanString(value.host || DEFAULT_SETTINGS.host, 120);\n  const settings: Settings = {\n    version: CONFIG_VERSION,\n    mode,\n    host,\n    port: normalizePort(value.port ?? DEFAULT_SETTINGS.port),\n    domain: normalizeDomain(value.domain),\n    https: Boolean(value.https),\n    accessKey: cleanString(value.accessKey, 256),\n    autoOpen: value.autoOpen === undefined ? DEFAULT_SETTINGS.autoOpen : Boolean(value.autoOpen),\n    account: normalizeAccount(value.account),\n    tunnel: normalizeTunnel(value.tunnel),\n  };\n  if (!host) throw new Error('Host cannot be empty.');\n  if (settings.mode === 'local' && !isLoopbackHost(settings.host)) {\n    throw new Error('Local mode only binds to 127.0.0.1, localhost, or ::1. Choose self-hosted mode for a network bind.');\n  }\n  if (settings.https && !settings.domain) {\n    throw new Error('HTTPS needs a domain such as map.example.com. A public IP alone cannot be used for a normal trusted certificate.');\n  }\n  // Self-hosted needs no domain: a bare-IP bind (a VPS with no DNS name) is a\n  // legitimate layout. Every API call needs the access key either way.\n  return settings;\n}\n\nexport function generateAccessKey() {\n  return `ob_${randomBytes(32).toString('base64url')}`;\n}\n\n// Every URL a person might reach this server through, derived from the settings\n// so the CLI banner, the settings drawer, and `onboarder config` never disagree\n// about what to print.\nexport function serverUrls(value: SettingsInput = DEFAULT_SETTINGS) {\n  const settings = normalizeSettings(value);\n  const urls: ServerUrls = { local: `http://localhost:${settings.port}` };\n  if (!isLoopbackHost(settings.host)) {\n    urls.network = settings.host === '0.0.0.0' || settings.host === '::'\n      ? `http://<this-machine>:${settings.port} (every interface)`\n      : `http://${settings.host}:${settings.port}`;\n  }\n  if (settings.domain) urls.domain = settings.https ? `https://${settings.domain}` : `http://${settings.domain}:${settings.port}`;\n  return urls;\n}\n\n// The key, safe to print in a list: enough to recognize it, not enough to use it.\nexport function maskAccessKey(key) {\n  const value = String(key || '');\n  if (value.length <= 8) return value ? '…' : '';\n  return `${value.slice(0, 6)}…${value.slice(-4)}`;\n}\n\nexport function browserUrl(settings) {\n  return new URL(serverUrls(settings).local).toString();\n}\n\nexport function publicSettings(value: SettingsInput = DEFAULT_SETTINGS) {\n  const settings = normalizeSettings(value);\n  return {\n    version: settings.version,\n    mode: settings.mode,\n    host: settings.host,\n    port: settings.port,\n    domain: settings.domain,\n    https: settings.https,\n    autoOpen: settings.autoOpen,\n    hasAccessKey: Boolean(settings.accessKey),\n    accessKeyMasked: maskAccessKey(settings.accessKey),\n    account: settings.account,\n    tunnel: settings.tunnel,\n    urls: serverUrls(settings),\n    security: {\n      remoteAuth: settings.mode === 'self-hosted',\n      loopback: isLoopbackHost(settings.host),\n    },\n  };\n}\n\n// Hostnames the rebinding guard should accept beyond loopback: the configured\n// domain, and a non-loopback bind address itself. A loopback-only local server\n// gets an empty list, which is exactly the old behavior.\n//\n// Enabled tunnels add wildcard suffixes: a Cloudflare quick tunnel's name is\n// random (https://<something>.trycloudflare.com) and a Tailscale machine name\n// belongs to the tailnet, so neither can be configured ahead of time. This is\n// safe because it can only widen Host acceptance in self-hosted mode, where\n// every API call already needs the access key — the guard's job there is\n// keeping drive-by traffic off the static files, not authentication.\n// A wildcard bind (0.0.0.0 / ::) has no name of its own, so the names it\n// honestly answers to are this machine's own interface addresses — a request\n// addressed to 10.0.0.2 or a public VPS IP really did arrive here. Read at\n// call time (the router asks per request), so a DHCP lease change does not\n// strand the guard on a stale address.\nfunction ownInterfaceHosts() {\n  const hosts = [];\n  for (const list of Object.values(os.networkInterfaces())) {\n    for (const addr of list || []) {\n      if (addr.internal) continue; // loopback is always allowed anyway\n      hosts.push(addr.address);\n    }\n  }\n  return hosts;\n}\n\nexport function allowedHosts(value: SettingsInput = DEFAULT_SETTINGS) {\n  const settings = normalizeSettings(value);\n  const hosts = new Set();\n  if (settings.domain) hosts.add(settings.domain);\n  if (!isLoopbackHost(settings.host)) {\n    // A wildcard bind is useful as a literal Host value to diagnostics, even\n    // though browsers normally address the machine by one of its real IPs.\n    hosts.add(settings.host.toLowerCase());\n    // Any network bind can sit behind NAT: a VPS may be configured as a private\n    // interface address while browsers address its public/NAT IP. Accept every IP\n    // literal, never arbitrary DNS names; the access key protects remote data.\n    hosts.add('ip:*');\n    for (const ip of ownInterfaceHosts()) if (!isLoopbackHost(ip)) hosts.add(ip);\n  }\n  if (settings.tunnel.cloudflare) hosts.add('*.trycloudflare.com');\n  if (settings.tunnel.tailscale) hosts.add('*.ts.net');\n  return [...hosts];\n}\n\nexport function accessKeysMatch(expected, actual) {\n  const a = Buffer.from(String(expected || ''));\n  const b = Buffer.from(String(actual || ''));\n  return a.length > 0 && a.length === b.length && timingSafeEqual(a, b);\n}\n\nexport function bearerToken(req) {\n  const value = String(req.headers?.authorization || '');\n  const match = value.match(/^Bearer\\s+(.+)$/i);\n  return match ? match[1].trim() : '';\n}\n\nexport function requestIsLoopback(req) {\n  const remote = String(req.socket?.remoteAddress || '').replace(/^::ffff:/, '');\n  return remote === '127.0.0.1' || remote === '::1';\n}\n\nexport function authReason(req, settings: SettingsInput = DEFAULT_SETTINGS) {\n  const normalized = normalizeSettings(settings);\n  if (normalized.mode !== 'self-hosted') return null;\n  // A self-hosted server can still be opened on the same machine. Caddy and\n  // tunnels arrive from loopback but keep the public Host, so both signals must\n  // agree before a login page is skipped.\n  const host = String(req.headers?.host || '').toLowerCase();\n  const hostIsLoopback = isLoopbackHost(host.replace(/:\\d+$/, '')) || /^localhost:\\d+$/.test(host);\n  if (requestIsLoopback(req) && hostIsLoopback) return null;\n  if (!normalized.accessKey) return 'Self-hosted mode has no access key configured.';\n  const token = bearerToken(req);\n  if (!accessKeysMatch(normalized.accessKey, token)) return 'A valid access key is required.';\n  return null;\n}\n\n// Has a config ever been written? The wizard asks this to decide between\n// \"start from the defaults\" and \"start from what you already have\".\nexport async function configExists(file = configPath()) {\n  try {\n    await fs.access(file);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n\nexport async function readSettings(file = configPath()) {\n  try {\n    const raw = await fs.readFile(file, 'utf8');\n    return normalizeSettings(JSON.parse(raw));\n  } catch (err) {\n    if (err.code === 'ENOENT') return { ...DEFAULT_SETTINGS, account: { ...DEFAULT_SETTINGS.account }, tunnel: { ...DEFAULT_SETTINGS.tunnel } };\n    if (err instanceof SyntaxError) throw new Error(`Config is not valid JSON: ${file}`);\n    throw err;\n  }\n}\n\nexport async function writeSettings(value, file = configPath()) {\n  const settings = normalizeSettings(value);\n  const dir = path.dirname(file);\n  await fs.mkdir(dir, { recursive: true, mode: 0o700 });\n  const temp = `${file}.${process.pid}.${Date.now()}.tmp`;\n  const body = JSON.stringify(settings, null, 2) + '\\n';\n  await fs.writeFile(temp, body, { encoding: 'utf8', mode: 0o600 });\n  await fs.rename(temp, file);\n  await fs.chmod(file, 0o600);\n  return settings;\n}\n\nexport async function updateSettings(patch: SettingsInput = {}, file = configPath()) {\n  const current = await readSettings(file);\n  const next = normalizeSettings({ ...current, ...patch, account: { ...current.account, ...(patch.account || {}) }, tunnel: { ...current.tunnel, ...(patch.tunnel || {}) } });\n  return writeSettings(next, file);\n}\n"]}

package/server/daemon.d.ts

@@ -0,0 +1,12 @@
+export declare const CLI_ENTRY: string;
+export declare function logPath(configFile?: string): string;
+export declare const MAX_LOG_BYTES: number;
+export declare function rotateLogIfNeeded(file?: string, maxBytes?: number): Promise<boolean>;
+export declare function readLog(file?: string, bytes?: number): Promise<string>;
+export declare function tailLog(file?: string, count?: number): Promise<string[]>;
+export declare function logExists(file?: string): Promise<boolean>;
+export declare function probe(url: any, timeoutMs?: number): Promise<unknown>;
+export declare function waitForReady(url: any, { timeoutMs, intervalMs, check }?: Record<string, any>): Promise<boolean>;
+export declare function spawnDetached({ configFile, entry, env, log }?: Record<string, any>): number;
+export declare function waitForPidFile(configFile: any, { timeoutMs, intervalMs, readPid, isAlive }?: Record<string, any>): Promise<any>;
+export declare function followLog(file: any, onLine: any, { intervalMs, from }?: Record<string, any>): () => void;