cruss-agent 1.0.7 → 1.0.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cruss-agent",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "Local API relay for Cruss — test localhost APIs from cruss-ten.vercel.app",
   "main": "server.js",
   "bin": {

package/server.js

@@ -6,17 +6,14 @@ const https = require('https')
 const url   = require('url')
 
 const PORT    = 9119
-const VERSION = '1.0.7'
+const VERSION = '1.0.8'
 
 // ── CORS ─────────────────────────────────────────────────────────────────
-// Access-Control-Allow-Private-Network is required by Chrome 104+ (PNA policy).
-// When an HTTPS page (e.g. cruss-ten.vercel.app) makes a non-simple request
-// (POST with Content-Type: application/json) to localhost, Chrome first sends
-// an OPTIONS preflight with "Access-Control-Request-Private-Network: true".
-// The agent MUST respond with "Access-Control-Allow-Private-Network: true"
-// or Chrome silently blocks the actual request. GET /health works without it
-// because simple GET requests bypass the PNA preflight — which is exactly
-// why health checks passed but POST /proxy was never received.
+// Access-Control-Allow-Private-Network: Chrome 104+ PNA policy requires this
+// on OPTIONS preflights from HTTPS pages to localhost. Without it Chrome
+// silently blocks the request before it even leaves the browser — which is
+// why health-check GETs work (simple requests bypass PNA) but POST /proxy
+// never arrives.
 function corsHeaders() {
   return {
     'Access-Control-Allow-Origin':          '*',
@@ -53,19 +50,15 @@ function proxyOnce(hostname, port, path, method, outHeaders, body, isHttps) {
     const lib = isHttps ? https : http
     const resolvedPort = port || (isHttps ? 443 : 80)
     const options = {
-      hostname,
-      port:    resolvedPort,
-      path:    path || '/',
-      method:  method || 'GET',
-      headers: outHeaders,
-      timeout: 30000,
+      hostname, port: resolvedPort, path: path || '/',
+      method: method || 'GET', headers: outHeaders, timeout: 30000,
     }
     console.log(`  → trying ${hostname}:${resolvedPort}${path || '/'}`)
     const t0  = Date.now()
     const req = lib.request(options, res => {
       const chunks = []
       res.on('data', c => chunks.push(c))
-      res.on('end',  () => {
+      res.on('end', () => {
         const elapsed = Date.now() - t0
         const rawBody = Buffer.concat(chunks)
         const bodyStr = rawBody.toString('utf8')
@@ -77,11 +70,8 @@ function proxyOnce(hostname, port, path, method, outHeaders, body, isHttps) {
           }
         }
         console.log(`  ✓ ${res.statusCode} ${res.statusMessage} (${elapsed}ms)`)
-        resolve({
-          status: res.statusCode, statusText: res.statusMessage,
-          headers: respHeaders, body: bodyStr,
-          responseTime: elapsed, size: rawBody.length,
-        })
+        resolve({ status: res.statusCode, statusText: res.statusMessage,
+                  headers: respHeaders, body: bodyStr, responseTime: elapsed, size: rawBody.length })
       })
       res.on('error', reject)
     })
@@ -121,15 +111,15 @@ async function proxyRequest(targetUrl, method, reqHeaders, body) {
   )
 }
 
-const server = http.createServer(async (req, res) => {
+// ── Request handler (shared by both IPv4 and IPv6 servers) ───────────────
+async function requestHandler(req, res) {
   const cors    = corsHeaders()
   const reqPath = url.parse(req.url).pathname
 
-  // Log ALL incoming requests so we can see preflights
   console.log(`  [${req.method}] ${reqPath} — origin: ${req.headers['origin'] || '(none)'} pna: ${req.headers['access-control-request-private-network'] || 'no'}`)
 
   if (req.method === 'OPTIONS') {
-    console.log(`  ← preflight OK`)
+    console.log(`  ← preflight responded with PNA header`)
     res.writeHead(204, cors)
     res.end()
     return
@@ -147,15 +137,13 @@ const server = http.createServer(async (req, res) => {
 
   if (req.method === 'POST' && reqPath === '/proxy') {
     let payload
-    try {
-      payload = JSON.parse(await readBody(req))
-    } catch {
-      send(400, { error: 'Request body must be valid JSON' })
-      return
-    }
+    try { payload = JSON.parse(await readBody(req)) }
+    catch { send(400, { error: 'Request body must be valid JSON' }); return }
+
     const { method, url: targetUrl, headers, body } = payload || {}
     if (!targetUrl || typeof targetUrl !== 'string') { send(400, { error: 'url is required' }); return }
     if (!method   || typeof method   !== 'string')   { send(400, { error: 'method is required' }); return }
+
     try {
       const result = await proxyRequest(targetUrl, method, headers || {}, body)
       send(200, { data: result })
@@ -168,9 +156,41 @@ const server = http.createServer(async (req, res) => {
   }
 
   send(404, { error: 'Not found' })
+}
+
+// ── Two servers: one IPv4, one IPv6 ─────────────────────────────────────
+// macOS resolves `localhost` to ::1 (IPv6) by default. Chrome's PNA
+// preflight for POST requests goes to whichever address localhost resolves
+// to. We must listen on BOTH stacks so the preflight always finds us,
+// regardless of OS resolver behaviour.
+const server4 = http.createServer(requestHandler)
+const server6 = http.createServer(requestHandler)
+
+function onError(label) {
+  return (err) => {
+    if (err.code === 'EADDRINUSE') {
+      console.error(`\n  ${label} port ${PORT} already in use. Run: kill $(lsof -ti:${PORT})`)
+    } else if (err.code === 'EADDRNOTAVAIL') {
+      console.log(`  ${label} not available on this system — skipping`)
+    } else {
+      console.error(`\n  ${label} error:`, err.message)
+    }
+  }
+}
+
+server4.on('error', onError('IPv4'))
+server6.on('error', onError('IPv6'))
+
+server4.listen(PORT, '127.0.0.1', () => {
+  console.log(`  IPv4 listening on 127.0.0.1:${PORT}`)
+})
+
+server6.listen(PORT, '::1', () => {
+  console.log(`  IPv6 listening on [::1]:${PORT}`)
 })
 
-server.listen(PORT, '0.0.0.0', () => {
+// Banner after brief delay to let both servers start
+setTimeout(() => {
   console.log('')
   console.log('  ╔═══════════════════════════════════════╗')
   console.log('  ║   Cruss Agent  v' + VERSION + '             ║')
@@ -185,16 +205,11 @@ server.listen(PORT, '0.0.0.0', () => {
   console.log('')
   console.log('  All requests logged below.')
   console.log('')
-})
+}, 200)
 
-server.on('error', err => {
-  if (err.code === 'EADDRINUSE') {
-    console.error(`\n  Port ${PORT} already in use. Run: kill $(lsof -ti:${PORT})`)
-  } else {
-    console.error('\n  Agent failed to start:', err.message)
-  }
-  process.exit(1)
+process.on('SIGINT',  () => {
+  server4.close(); server6.close()
+  console.log('\n  Agent stopped.')
+  process.exit(0)
 })
-
-process.on('SIGINT',  () => { console.log('\n  Agent stopped.'); process.exit(0) })
-process.on('SIGTERM', () => { process.exit(0) })
+process.on('SIGTERM', () => { server4.close(); server6.close(); process.exit(0) })