devtunnel-cli 3.0.44 → 3.1.0

package/src/core/start.js

@@ -17,10 +17,10 @@ function getPackageVersion() {
     const pkgPath = join(PROJECT_ROOT, "package.json");
     if (existsSync(pkgPath)) {
       const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
-      return pkg.version || "3.0.44";
+      return pkg.version || "3.1.0";
     }
   } catch (err) { }
-  return "3.0.44";
+  return "3.1.0";
 }
 
 // Helper to run command

package/src/core/static-server.js

@@ -1,109 +1,109 @@
-/**
- * Minimal static file server for HTML projects.
- * Used only when devtunnel detects an HTML project and no server is running.
- * Usage: node static-server.js <directory> <port>
- */
-import http from "http";
-import fs from "fs";
-import path from "path";
-const ROOT = path.resolve(process.argv[2] || ".");
-const PORT = parseInt(process.argv[3] || "5500", 10);
-
-const MIME = {
-  ".html": "text/html",
-  ".htm": "text/html",
-  ".css": "text/css",
-  ".js": "application/javascript",
-  ".json": "application/json",
-  ".png": "image/png",
-  ".jpg": "image/jpeg",
-  ".jpeg": "image/jpeg",
-  ".gif": "image/gif",
-  ".ico": "image/x-icon",
-  ".svg": "image/svg+xml",
-  ".webp": "image/webp",
-  ".woff": "font/woff",
-  ".woff2": "font/woff2",
-  ".ttf": "font/ttf",
-  ".txt": "text/plain",
-};
-
-const server = http.createServer((req, res) => {
-  if (req.method !== "GET" && req.method !== "HEAD") {
-    res.writeHead(405, { "Content-Type": "text/plain" });
-    res.end("Method Not Allowed");
-    return;
-  }
-  // Use only pathname (strip query string and hash) so /style.css?v=1 resolves to style.css
-  const pathname = (req.url || "/").split("?")[0].split("#")[0];
-  // Forward slashes only so /css/style.css works on Windows (path.normalize can break with \)
-  const relative = (pathname || "/").replace(/^\/+/, "").replace(/\\/g, "/") || ".";
-  let p = path.join(ROOT, relative);
-  if (!path.isAbsolute(p)) p = path.join(ROOT, p);
-  if (!p.startsWith(ROOT)) {
-    res.writeHead(403, { "Content-Type": "text/plain" });
-    res.end("Forbidden");
-    return;
-  }
-  fs.stat(p, (err, stat) => {
-    if (err) {
-      res.writeHead(404, { "Content-Type": "text/plain" });
-      res.end("Not Found");
-      return;
-    }
-    if (stat.isDirectory()) {
-      p = path.join(p, "index.html");
-      return fs.stat(p, (e2, s2) => {
-        if (e2 || !s2.isFile()) {
-          res.writeHead(404, { "Content-Type": "text/plain" });
-          res.end("Not Found");
-          return;
-        }
-        serveFile(p, s2, req, res);
-      });
-    }
-    serveFile(p, stat, req, res);
-  });
-});
-
-function serveFile(filePath, stat, req, res) {
-  const ext = path.extname(filePath);
-  const contentType = MIME[ext] || "application/octet-stream";
-  res.setHeader("Content-Type", contentType);
-  if (req.method === "HEAD") {
-    res.setHeader("Content-Length", stat.size);
-    res.end();
-    return;
-  }
-  // For HTML: rewrite absolute localhost URLs so CSS/JS work when viewed through tunnel
-  if (ext === ".html" || ext === ".htm") {
-    try {
-      let body = fs.readFileSync(filePath, "utf8");
-      body = body.replace(/https?:\/\/127\.0\.0\.1:\d+\//g, "/");
-      body = body.replace(/https?:\/\/localhost:\d+\//g, "/");
-      res.setHeader("Content-Length", Buffer.byteLength(body, "utf8"));
-      res.end(body);
-      return;
-    } catch (err) {
-      res.writeHead(500, { "Content-Type": "text/plain" });
-      res.end("Internal Server Error");
-      return;
-    }
-  }
-  res.setHeader("Content-Length", stat.size);
-  const stream = fs.createReadStream(filePath);
-  stream.on("error", () => {
-    if (!res.headersSent) {
-      res.writeHead(500, { "Content-Type": "text/plain" });
-      res.end("Internal Server Error");
-    }
-  });
-  stream.pipe(res);
-}
-
-server.listen(PORT, "127.0.0.1", () => {
-  // Server ready; no console output to avoid cluttering devtunnel output
-});
-server.on("error", (err) => {
-  process.exit(1);
-});
+/**
+ * Minimal static file server for HTML projects.
+ * Used only when devtunnel detects an HTML project and no server is running.
+ * Usage: node static-server.js <directory> <port>
+ */
+import http from "http";
+import fs from "fs";
+import path from "path";
+const ROOT = path.resolve(process.argv[2] || ".");
+const PORT = parseInt(process.argv[3] || "5500", 10);
+
+const MIME = {
+  ".html": "text/html",
+  ".htm": "text/html",
+  ".css": "text/css",
+  ".js": "application/javascript",
+  ".json": "application/json",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".ico": "image/x-icon",
+  ".svg": "image/svg+xml",
+  ".webp": "image/webp",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".ttf": "font/ttf",
+  ".txt": "text/plain",
+};
+
+const server = http.createServer((req, res) => {
+  if (req.method !== "GET" && req.method !== "HEAD") {
+    res.writeHead(405, { "Content-Type": "text/plain" });
+    res.end("Method Not Allowed");
+    return;
+  }
+  // Use only pathname (strip query string and hash) so /style.css?v=1 resolves to style.css
+  const pathname = (req.url || "/").split("?")[0].split("#")[0];
+  // Forward slashes only so /css/style.css works on Windows (path.normalize can break with \)
+  const relative = (pathname || "/").replace(/^\/+/, "").replace(/\\/g, "/") || ".";
+  let p = path.join(ROOT, relative);
+  if (!path.isAbsolute(p)) p = path.join(ROOT, p);
+  if (!p.startsWith(ROOT)) {
+    res.writeHead(403, { "Content-Type": "text/plain" });
+    res.end("Forbidden");
+    return;
+  }
+  fs.stat(p, (err, stat) => {
+    if (err) {
+      res.writeHead(404, { "Content-Type": "text/plain" });
+      res.end("Not Found");
+      return;
+    }
+    if (stat.isDirectory()) {
+      p = path.join(p, "index.html");
+      return fs.stat(p, (e2, s2) => {
+        if (e2 || !s2.isFile()) {
+          res.writeHead(404, { "Content-Type": "text/plain" });
+          res.end("Not Found");
+          return;
+        }
+        serveFile(p, s2, req, res);
+      });
+    }
+    serveFile(p, stat, req, res);
+  });
+});
+
+function serveFile(filePath, stat, req, res) {
+  const ext = path.extname(filePath);
+  const contentType = MIME[ext] || "application/octet-stream";
+  res.setHeader("Content-Type", contentType);
+  if (req.method === "HEAD") {
+    res.setHeader("Content-Length", stat.size);
+    res.end();
+    return;
+  }
+  // For HTML: rewrite absolute localhost URLs so CSS/JS work when viewed through tunnel
+  if (ext === ".html" || ext === ".htm") {
+    try {
+      let body = fs.readFileSync(filePath, "utf8");
+      body = body.replace(/https?:\/\/127\.0\.0\.1:\d+\//g, "/");
+      body = body.replace(/https?:\/\/localhost:\d+\//g, "/");
+      res.setHeader("Content-Length", Buffer.byteLength(body, "utf8"));
+      res.end(body);
+      return;
+    } catch (err) {
+      res.writeHead(500, { "Content-Type": "text/plain" });
+      res.end("Internal Server Error");
+      return;
+    }
+  }
+  res.setHeader("Content-Length", stat.size);
+  const stream = fs.createReadStream(filePath);
+  stream.on("error", () => {
+    if (!res.headersSent) {
+      res.writeHead(500, { "Content-Type": "text/plain" });
+      res.end("Internal Server Error");
+    }
+  });
+  stream.pipe(res);
+}
+
+server.listen(PORT, "127.0.0.1", () => {
+  // Server ready; no console output to avoid cluttering devtunnel output
+});
+server.on("error", (err) => {
+  process.exit(1);
+});

package/src/utils/folder-picker.js

@@ -1,140 +1,140 @@
-import { spawn } from "child_process";
-import { platform } from "os";
-import { writeFileSync, readFileSync, unlinkSync, existsSync } from "fs";
-import { join } from "path";
-import { tmpdir } from "os";
-
-// Cross-platform native folder picker
-export async function selectFolder() {
-  const os = platform();
-  const tempFile = join(tmpdir(), `folder-picker-${Date.now()}.txt`);
-  
-  try {
-    if (os === "win32") {
-      // Windows - Use MODERN OpenFileDialog (like website file uploads)
-      const script = `
-        Add-Type -AssemblyName System.Windows.Forms
-        [System.Windows.Forms.Application]::EnableVisualStyles()
-        
-        $dialog = New-Object System.Windows.Forms.OpenFileDialog
-        $dialog.Title = "Select your project folder"
-        $dialog.Filter = "All files (*.*)|*.*"
-        $dialog.CheckFileExists = $false
-        $dialog.CheckPathExists = $true
-        $dialog.ValidateNames = $false
-        $dialog.FileName = "Folder Selection"
-        $dialog.Multiselect = $false
-        $dialog.InitialDirectory = [Environment]::GetFolderPath("UserProfile")
-        
-        $result = $dialog.ShowDialog()
-        if ($result -eq [System.Windows.Forms.DialogResult]::OK) {
-          $folderPath = Split-Path -Parent $dialog.FileName
-          if (-not $folderPath) {
-            $folderPath = $dialog.FileName
-          }
-          $folderPath | Out-File -FilePath "${tempFile.replace(/\\/g, '\\\\')}" -Encoding UTF8 -NoNewline
-        }
-      `;
-      
-      await runPowerShell(script);
-      
-    } else if (os === "darwin") {
-      // macOS - Use osascript
-      const script = `
-        set folderPath to choose folder with prompt "Select your project folder"
-        set posixPath to POSIX path of folderPath
-        do shell script "echo " & quoted form of posixPath & " > '${tempFile}'"
-      `;
-      
-      await runCommand("osascript", ["-e", script]);
-      
-    } else {
-      // Linux - Try zenity first, then kdialog
-      try {
-        await runCommand("zenity", [
-          "--file-selection",
-          "--directory",
-          "--title=Select your project folder"
-        ], tempFile);
-      } catch {
-        await runCommand("kdialog", [
-          "--getexistingdirectory",
-          process.env.HOME || "/",
-          "--title", "Select your project folder"
-        ], tempFile);
-      }
-    }
-    
-    // Read the selected folder
-    if (existsSync(tempFile)) {
-      const folderPath = readFileSync(tempFile, "utf8").trim();
-      unlinkSync(tempFile);
-      return folderPath;
-    }
-    
-    return null;
-    
-  } catch (error) {
-    console.error("Folder picker error:", error.message);
-    return null;
-  }
-}
-
-// Run PowerShell command
-function runPowerShell(script) {
-  return new Promise((resolve, reject) => {
-    const proc = spawn("powershell", [
-      "-NoProfile",
-      "-NonInteractive",
-      "-ExecutionPolicy", "Bypass",
-      "-Command", script
-    ], { 
-      stdio: ["ignore", "pipe", "pipe"],
-      shell: false
-    });
-    
-    let stderr = "";
-    proc.stderr?.on("data", (data) => stderr += data.toString());
-    
-    proc.on("close", (code) => {
-      if (code === 0) {
-        resolve();
-      } else {
-        reject(new Error(stderr || `PowerShell exited with code ${code}`));
-      }
-    });
-    
-    proc.on("error", reject);
-  });
-}
-
-// Run generic command
-function runCommand(command, args, outputFile) {
-  return new Promise((resolve, reject) => {
-    const proc = spawn(command, args, { 
-      stdio: outputFile ? ["ignore", "pipe", "pipe"] : "pipe",
-      shell: true
-    });
-    
-    let stdout = "";
-    
-    if (outputFile) {
-      proc.stdout?.on("data", (data) => {
-        stdout += data.toString();
-      });
-    }
-    
-    proc.on("close", (code) => {
-      if (code === 0) {
-        if (outputFile && stdout) {
-          writeFileSync(outputFile, stdout.trim());
-        }
-        resolve();
-      } else {
-        reject(new Error(`Command failed with code ${code}`));
-      }
-    });
-    
-    proc.on("error", reject);
-  });
-}
+import { spawn } from "child_process";
+import { platform } from "os";
+import { writeFileSync, readFileSync, unlinkSync, existsSync } from "fs";
+import { join } from "path";
+import { tmpdir } from "os";
+
+// Cross-platform native folder picker
+export async function selectFolder() {
+  const os = platform();
+  const tempFile = join(tmpdir(), `folder-picker-${Date.now()}.txt`);
+  
+  try {
+    if (os === "win32") {
+      // Windows - Use MODERN OpenFileDialog (like website file uploads)
+      const script = `
+        Add-Type -AssemblyName System.Windows.Forms
+        [System.Windows.Forms.Application]::EnableVisualStyles()
+        
+        $dialog = New-Object System.Windows.Forms.OpenFileDialog
+        $dialog.Title = "Select your project folder"
+        $dialog.Filter = "All files (*.*)|*.*"
+        $dialog.CheckFileExists = $false
+        $dialog.CheckPathExists = $true
+        $dialog.ValidateNames = $false
+        $dialog.FileName = "Folder Selection"
+        $dialog.Multiselect = $false
+        $dialog.InitialDirectory = [Environment]::GetFolderPath("UserProfile")
+        
+        $result = $dialog.ShowDialog()
+        if ($result -eq [System.Windows.Forms.DialogResult]::OK) {
+          $folderPath = Split-Path -Parent $dialog.FileName
+          if (-not $folderPath) {
+            $folderPath = $dialog.FileName
+          }
+          $folderPath | Out-File -FilePath "${tempFile.replace(/\\/g, '\\\\')}" -Encoding UTF8 -NoNewline
+        }
+      `;
+      
+      await runPowerShell(script);
+      
+    } else if (os === "darwin") {
+      // macOS - Use osascript
+      const script = `
+        set folderPath to choose folder with prompt "Select your project folder"
+        set posixPath to POSIX path of folderPath
+        do shell script "echo " & quoted form of posixPath & " > '${tempFile}'"
+      `;
+      
+      await runCommand("osascript", ["-e", script]);
+      
+    } else {
+      // Linux - Try zenity first, then kdialog
+      try {
+        await runCommand("zenity", [
+          "--file-selection",
+          "--directory",
+          "--title=Select your project folder"
+        ], tempFile);
+      } catch {
+        await runCommand("kdialog", [
+          "--getexistingdirectory",
+          process.env.HOME || "/",
+          "--title", "Select your project folder"
+        ], tempFile);
+      }
+    }
+    
+    // Read the selected folder
+    if (existsSync(tempFile)) {
+      const folderPath = readFileSync(tempFile, "utf8").trim();
+      unlinkSync(tempFile);
+      return folderPath;
+    }
+    
+    return null;
+    
+  } catch (error) {
+    console.error("Folder picker error:", error.message);
+    return null;
+  }
+}
+
+// Run PowerShell command
+function runPowerShell(script) {
+  return new Promise((resolve, reject) => {
+    const proc = spawn("powershell", [
+      "-NoProfile",
+      "-NonInteractive",
+      "-ExecutionPolicy", "Bypass",
+      "-Command", script
+    ], { 
+      stdio: ["ignore", "pipe", "pipe"],
+      shell: false
+    });
+    
+    let stderr = "";
+    proc.stderr?.on("data", (data) => stderr += data.toString());
+    
+    proc.on("close", (code) => {
+      if (code === 0) {
+        resolve();
+      } else {
+        reject(new Error(stderr || `PowerShell exited with code ${code}`));
+      }
+    });
+    
+    proc.on("error", reject);
+  });
+}
+
+// Run generic command
+function runCommand(command, args, outputFile) {
+  return new Promise((resolve, reject) => {
+    const proc = spawn(command, args, { 
+      stdio: outputFile ? ["ignore", "pipe", "pipe"] : "pipe",
+      shell: true
+    });
+    
+    let stdout = "";
+    
+    if (outputFile) {
+      proc.stdout?.on("data", (data) => {
+        stdout += data.toString();
+      });
+    }
+    
+    proc.on("close", (code) => {
+      if (code === 0) {
+        if (outputFile && stdout) {
+          writeFileSync(outputFile, stdout.trim());
+        }
+        resolve();
+      } else {
+        reject(new Error(`Command failed with code ${code}`));
+      }
+    });
+    
+    proc.on("error", reject);
+  });
+}

package/src/utils/pages/index.html

@@ -112,7 +112,7 @@ devtunnel-cli</code></pre>
   </ul>
 
   <hr>
-  <p><small>Version <span id="pkg-version">3.0.44</span> | Made with ❤︎ for developers worldwide</small></p>
+  <p><small>Version <span id="pkg-version">3.1.0</span> | Made with ❤︎ for developers worldwide</small></p>
 
   <script>
     (async function () {

package/src/utils/postinstall-global-check.cjs

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+'use strict';
+// Warn if installed locally (without -g). For security, devtunnel-cli should be installed globally.
+const path = require('path');
+try {
+  const dir = __dirname; // e.g. .../node_modules/devtunnel-cli/src/utils
+  const inNodeModules = dir.includes('node_modules');
+  const npmPrefix = process.env.npm_config_prefix || (process.platform === 'win32' ? (process.env.APPDATA || '') + '\\npm' : '/usr/local');
+  const globalNodeModules = path.join(npmPrefix, 'node_modules');
+  const isGlobal = inNodeModules && (dir.startsWith(globalNodeModules) || path.resolve(dir).startsWith(path.resolve(globalNodeModules)));
+  if (inNodeModules && !isGlobal) {
+    console.error('\n  \x1b[33mWARN: devtunnel-cli should be installed globally to avoid vulnerabilities.\x1b[0m');
+    console.error('  Run: \x1b[1mnpm i -g devtunnel-cli\x1b[0m\n');
+  }
+} catch (e) { /* ignore */ }

package/src/utils/tunnel-helpers.js

@@ -1,35 +1,35 @@
-// Helper functions for different tunnel services
-
-export async function startLocalTunnel(port) {
-  try {
-    const localtunnel = await import("localtunnel");
-    const tunnel = await localtunnel.default({ port });
-    
-    console.log("\n" + "=".repeat(50));
-    console.log("✅ PUBLIC URL:");
-    console.log(`   ${tunnel.url}`);
-    console.log("=".repeat(50) + "\n");
-    
-    tunnel.on("close", () => {
-      console.log("\n🛑 Tunnel closed");
-      process.exit(0);
-    });
-    
-    // Keep the process running
-    process.on("SIGINT", () => {
-      tunnel.close();
-    });
-    
-  } catch (error) {
-    console.error("❌ LocalTunnel error:", error.message);
-    process.exit(1);
-  }
-}
-
-// If called directly from command line
-if (process.argv[2] === "localtunnel") {
-  const port = parseInt(process.argv[3]);
-  if (port) {
-    startLocalTunnel(port);
-  }
-}
+// Helper functions for different tunnel services
+
+export async function startLocalTunnel(port) {
+  try {
+    const localtunnel = await import("localtunnel");
+    const tunnel = await localtunnel.default({ port });
+    
+    console.log("\n" + "=".repeat(50));
+    console.log("✅ PUBLIC URL:");
+    console.log(`   ${tunnel.url}`);
+    console.log("=".repeat(50) + "\n");
+    
+    tunnel.on("close", () => {
+      console.log("\n🛑 Tunnel closed");
+      process.exit(0);
+    });
+    
+    // Keep the process running
+    process.on("SIGINT", () => {
+      tunnel.close();
+    });
+    
+  } catch (error) {
+    console.error("❌ LocalTunnel error:", error.message);
+    process.exit(1);
+  }
+}
+
+// If called directly from command line
+if (process.argv[2] === "localtunnel") {
+  const port = parseInt(process.argv[3]);
+  if (port) {
+    startLocalTunnel(port);
+  }
+}