emulate 0.4.0 → 0.5.0

package/README.md

@@ -50,9 +50,50 @@ emulate list
 | `-p, --port` | `4000` | Base port (auto-increments per service) |
 | `-s, --service` | all | Comma-separated services to enable |
 | `--seed` | auto-detect | Path to seed config (YAML or JSON) |
+| `--base-url` | none | Override advertised base URL (supports `{service}` template) |
+| `--portless` | off | Serve over HTTPS via portless (auto-registers aliases) |
 
 The port can also be set via `EMULATE_PORT` or `PORT` environment variables.
 
+## HTTPS with portless
+
+[portless](https://github.com/vercel-labs/portless) gives emulators trusted HTTPS URLs with auto-generated certs and no browser warnings.
+
+```bash
+# Start the portless proxy (first time only)
+portless proxy start
+
+# Start emulate with portless integration
+emulate start --portless
+```
+
+Each service registers as a portless alias and gets a named HTTPS URL:
+
+```
+github  https://github.emulate.localhost
+google  https://google.emulate.localhost
+slack   https://slack.emulate.localhost
+```
+
+If portless is not installed, emulate will prompt to install it (`npm i -g portless`).
+
+The `--portless` flag overwrites any existing portless aliases matching `*.emulate`. Aliases are removed automatically when emulate shuts down.
+
+For a custom base URL without portless (any reverse proxy), use `--base-url` or the `EMULATE_BASE_URL` env var:
+
+```bash
+emulate start --base-url "https://{service}.myproxy.test"
+```
+
+The `PORTLESS_URL` env var is automatically set by the `portless` CLI wrapper when running a command through it (e.g. `portless github.emulate emulate start`), typically to a value like `https://{service}.emulate.localhost`. It supports `{service}` interpolation, just like `--base-url` and `EMULATE_BASE_URL`. When no explicit `baseUrl` is provided, it is used as a fallback.
+
+Per-service overrides are also supported in the seed config (these take highest priority over all other base URL sources):
+
+```yaml
+github:
+  baseUrl: https://github.emulate.localhost
+```
+
 ## Programmatic API
 
 ```bash
@@ -103,6 +144,7 @@ afterAll(() => Promise.all([github.close(), vercel.close()]))
 | `service` | *(required)* | Service name: `'vercel'`, `'github'`, `'google'`, `'slack'`, `'apple'`, `'microsoft'`, or `'aws'` |
 | `port` | `4000` | Port for the HTTP server |
 | `seed` | none | Inline seed data (same shape as YAML config) |
+| `baseUrl` | none | Override advertised base URL. Per-service `baseUrl` in seed config takes highest priority, then this option, then `EMULATE_BASE_URL` env var (supports `{service}`), then `PORTLESS_URL` (supports `{service}`, automatically set by the `portless` CLI wrapper), then `http://localhost:<port>`. |
 
 ### Instance methods
 
@@ -153,6 +195,9 @@ google:
   users:
     - email: testuser@example.com
       name: Test User
+    - email: admin@acme.com
+      name: Admin
+      hd: acme.com
   oauth_clients:
     - client_id: my-client-id.apps.googleusercontent.com
       client_secret: GOCSPX-secret
@@ -612,18 +657,22 @@ Microsoft Entra ID (Azure AD) v2.0 OAuth 2.0 and OpenID Connect emulation with a
 
 ## AWS
 
-S3, SQS, IAM, and STS emulation with REST-style S3 paths and query-style SQS/IAM/STS endpoints. All responses use AWS-compatible XML.
+S3, SQS, IAM, and STS emulation with AWS SDK-compatible S3 paths and query-style SQS/IAM/STS endpoints. All responses use AWS-compatible XML.
 
 ### S3
-- `GET /s3/` - list all buckets
-- `PUT /s3/:bucket` - create bucket
-- `DELETE /s3/:bucket` - delete bucket
-- `HEAD /s3/:bucket` - check existence
-- `GET /s3/:bucket` - list objects (prefix, delimiter, max-keys)
-- `PUT /s3/:bucket/:key` - put object (supports copy via `x-amz-copy-source`)
-- `GET /s3/:bucket/:key` - get object
-- `HEAD /s3/:bucket/:key` - head object
-- `DELETE /s3/:bucket/:key` - delete object
+
+S3 routes use root paths matching the real AWS S3 wire format, so the official AWS SDK works out of the box with `forcePathStyle: true`. Legacy `/s3/` prefixed paths are also supported for backward compatibility.
+
+- `GET /` - list all buckets
+- `PUT /:bucket` - create bucket
+- `DELETE /:bucket` - delete bucket
+- `HEAD /:bucket` - check existence
+- `GET /:bucket` - list objects (prefix, delimiter, max-keys, continuation-token, start-after)
+- `POST /:bucket` - presigned POST upload (browser-style multipart form with policy validation)
+- `PUT /:bucket/:key` - put object (supports copy via `x-amz-copy-source`)
+- `GET /:bucket/:key` - get object
+- `HEAD /:bucket/:key` - head object
+- `DELETE /:bucket/:key` - delete object
 
 ### SQS
 All operations via `POST /sqs/` with `Action` parameter:

package/dist/api.d.ts

@@ -1,4 +1,4 @@
-declare const SERVICE_NAME_LIST: readonly ["vercel", "github", "google", "slack", "apple", "microsoft", "okta", "aws", "resend", "stripe", "mongoatlas"];
+declare const SERVICE_NAME_LIST: readonly ["vercel", "github", "google", "slack", "apple", "microsoft", "okta", "aws", "resend", "stripe", "mongoatlas", "clerk"];
 type ServiceName = (typeof SERVICE_NAME_LIST)[number];
 
 interface SeedConfig {
@@ -12,6 +12,7 @@ interface EmulatorOptions {
     service: ServiceName;
     port?: number;
     seed?: SeedConfig;
+    baseUrl?: string;
 }
 interface Emulator {
     url: string;

package/dist/api.js

@@ -5,7 +5,7 @@ import {
 import {
   Hono,
   cors
-} from "./chunk-TEPNEZ63.js";
+} from "./chunk-AQ2CLRU3.js";
 
 // ../@emulators/core/dist/index.js
 import { createHmac } from "crypto";
@@ -387,9 +387,7 @@ function authMiddleware(tokens, appKeyResolver, fallbackUser) {
       if (token.startsWith("eyJ") && appKeyResolver) {
         try {
           const [, payloadB64] = token.split(".");
-          const payload = JSON.parse(
-            Buffer.from(payloadB64, "base64url").toString()
-          );
+          const payload = JSON.parse(Buffer.from(payloadB64, "base64url").toString());
           const appId = typeof payload.iss === "string" ? parseInt(payload.iss, 10) : payload.iss;
           if (typeof appId === "number" && !isNaN(appId)) {
             const appInfo = appKeyResolver(appId);
@@ -426,6 +424,7 @@ var FONTS = {
   "geist-sans.woff2": readFileSync(join(__dirname, "fonts", "geist-sans.woff2")),
   "GeistPixel-Square.woff2": readFileSync(join(__dirname, "fonts", "GeistPixel-Square.woff2"))
 };
+var FAVICON = readFileSync(join(__dirname, "fonts", "favicon.ico"));
 function registerFontRoutes(app) {
   app.get("/_emulate/fonts/:name", (c) => {
     const name = c.req.param("name");
@@ -439,6 +438,14 @@ function registerFontRoutes(app) {
       }
     });
   });
+  app.get("/_emulate/favicon.ico", (c) => {
+    return new Response(FAVICON, {
+      headers: {
+        "Content-Type": "image/x-icon",
+        "Cache-Control": "public, max-age=31536000, immutable"
+      }
+    });
+  });
 }
 function createServer(plugin, options = {}) {
   const port = options.port ?? 4e3;
@@ -513,7 +520,7 @@ var SERVICE_REGISTRY = {
     label: "Vercel REST API emulator",
     endpoints: "projects, deployments, domains, env vars, users, teams, file uploads, protection bypass",
     async load() {
-      const mod = await import("./dist-RDFBZ5O6.js");
+      const mod = await import("./dist-4X2KPMAJ.js");
       return { plugin: mod.vercelPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback(cfg) {
@@ -525,12 +532,14 @@ var SERVICE_REGISTRY = {
         users: [{ username: "developer", name: "Developer", email: "dev@example.com" }],
         teams: [{ slug: "my-team", name: "My Team" }],
         projects: [{ name: "my-app", team: "my-team", framework: "nextjs" }],
-        integrations: [{
-          client_id: "oac_example_client_id",
-          client_secret: "example_client_secret",
-          name: "My Vercel App",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/vercel"]
-        }]
+        integrations: [
+          {
+            client_id: "oac_example_client_id",
+            client_secret: "example_client_secret",
+            name: "My Vercel App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/vercel"]
+          }
+        ]
       }
     }
   },
@@ -538,7 +547,7 @@ var SERVICE_REGISTRY = {
     label: "GitHub REST API emulator",
     endpoints: "users, repos, issues, PRs, comments, reviews, labels, milestones, branches, git data, orgs, teams, releases, webhooks, search, actions, checks, rate limit",
     async load() {
-      const mod = await import("./dist-H6JYGQM4.js");
+      const mod = await import("./dist-REDHDZ3V.js");
       return {
         plugin: mod.githubPlugin,
         seedFromConfig: mod.seedFromConfig,
@@ -562,25 +571,42 @@ var SERVICE_REGISTRY = {
     },
     initConfig: {
       github: {
-        users: [{
-          login: "octocat",
-          name: "The Octocat",
-          email: "octocat@github.com",
-          bio: "I am the Octocat",
-          company: "GitHub",
-          location: "San Francisco"
-        }],
+        users: [
+          {
+            login: "octocat",
+            name: "The Octocat",
+            email: "octocat@github.com",
+            bio: "I am the Octocat",
+            company: "GitHub",
+            location: "San Francisco"
+          }
+        ],
         orgs: [{ login: "my-org", name: "My Organization", description: "A test organization" }],
         repos: [
-          { owner: "octocat", name: "hello-world", description: "My first repository", language: "JavaScript", topics: ["hello", "world"], auto_init: true },
-          { owner: "my-org", name: "org-repo", description: "An organization repository", language: "TypeScript", auto_init: true }
+          {
+            owner: "octocat",
+            name: "hello-world",
+            description: "My first repository",
+            language: "JavaScript",
+            topics: ["hello", "world"],
+            auto_init: true
+          },
+          {
+            owner: "my-org",
+            name: "org-repo",
+            description: "An organization repository",
+            language: "TypeScript",
+            auto_init: true
+          }
         ],
-        oauth_apps: [{
-          client_id: "Iv1.example_client_id",
-          client_secret: "example_client_secret",
-          name: "My App",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/github"]
-        }]
+        oauth_apps: [
+          {
+            client_id: "Iv1.example_client_id",
+            client_secret: "example_client_secret",
+            name: "My App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/github"]
+          }
+        ]
       }
     }
   },
@@ -588,7 +614,7 @@ var SERVICE_REGISTRY = {
     label: "Google OAuth 2.0 / OpenID Connect + Gmail, Calendar, and Drive emulator",
     endpoints: "OAuth authorize, token exchange, userinfo, OIDC discovery, token revocation, Gmail messages/drafts/threads/labels/history/settings, Calendar lists/events/freebusy, Drive files/uploads",
     async load() {
-      const mod = await import("./dist-6EW7SSOZ.js");
+      const mod = await import("./dist-KKTYBE5S.js");
       return { plugin: mod.googlePlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback(cfg) {
@@ -597,34 +623,72 @@ var SERVICE_REGISTRY = {
     },
     initConfig: {
       google: {
-        users: [{ email: "testuser@example.com", name: "Test User", picture: "https://lh3.googleusercontent.com/a/default-user", email_verified: true }],
-        oauth_clients: [{
-          client_id: "example-client-id.apps.googleusercontent.com",
-          client_secret: "GOCSPX-example_secret",
-          name: "Code App (Google)",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/google"]
-        }],
-        labels: [{ id: "Label_ops", user_email: "testuser@example.com", name: "Ops/Review", color_background: "#DDEEFF", color_text: "#111111" }],
-        messages: [{
-          id: "msg_welcome",
-          user_email: "testuser@example.com",
-          from: "welcome@example.com",
-          to: "testuser@example.com",
-          subject: "Welcome to the Gmail emulator",
-          body_text: "You can now test Gmail, Calendar, and Drive flows locally.",
-          label_ids: ["INBOX", "UNREAD", "CATEGORY_UPDATES"],
-          date: "2025-01-04T10:00:00.000Z"
-        }],
-        calendars: [{ id: "primary", user_email: "testuser@example.com", summary: "testuser@example.com", primary: true, selected: true, time_zone: "UTC" }],
-        calendar_events: [{
-          id: "evt_kickoff",
-          user_email: "testuser@example.com",
-          calendar_id: "primary",
-          summary: "Project Kickoff",
-          start_date_time: "2025-01-10T09:00:00.000Z",
-          end_date_time: "2025-01-10T09:30:00.000Z"
-        }],
-        drive_items: [{ id: "drv_docs", user_email: "testuser@example.com", name: "Docs", mime_type: "application/vnd.google-apps.folder", parent_ids: ["root"] }]
+        users: [
+          {
+            email: "testuser@example.com",
+            name: "Test User",
+            picture: "https://lh3.googleusercontent.com/a/default-user",
+            email_verified: true
+          }
+        ],
+        oauth_clients: [
+          {
+            client_id: "example-client-id.apps.googleusercontent.com",
+            client_secret: "GOCSPX-example_secret",
+            name: "Code App (Google)",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/google"]
+          }
+        ],
+        labels: [
+          {
+            id: "Label_ops",
+            user_email: "testuser@example.com",
+            name: "Ops/Review",
+            color_background: "#DDEEFF",
+            color_text: "#111111"
+          }
+        ],
+        messages: [
+          {
+            id: "msg_welcome",
+            user_email: "testuser@example.com",
+            from: "welcome@example.com",
+            to: "testuser@example.com",
+            subject: "Welcome to the Gmail emulator",
+            body_text: "You can now test Gmail, Calendar, and Drive flows locally.",
+            label_ids: ["INBOX", "UNREAD", "CATEGORY_UPDATES"],
+            date: "2025-01-04T10:00:00.000Z"
+          }
+        ],
+        calendars: [
+          {
+            id: "primary",
+            user_email: "testuser@example.com",
+            summary: "testuser@example.com",
+            primary: true,
+            selected: true,
+            time_zone: "UTC"
+          }
+        ],
+        calendar_events: [
+          {
+            id: "evt_kickoff",
+            user_email: "testuser@example.com",
+            calendar_id: "primary",
+            summary: "Project Kickoff",
+            start_date_time: "2025-01-10T09:00:00.000Z",
+            end_date_time: "2025-01-10T09:30:00.000Z"
+          }
+        ],
+        drive_items: [
+          {
+            id: "drv_docs",
+            user_email: "testuser@example.com",
+            name: "Docs",
+            mime_type: "application/vnd.google-apps.folder",
+            parent_ids: ["root"]
+          }
+        ]
       }
     }
   },
@@ -632,7 +696,7 @@ var SERVICE_REGISTRY = {
     label: "Slack API emulator",
     endpoints: "auth, chat, conversations, users, reactions, team, OAuth, incoming webhooks",
     async load() {
-      const mod = await import("./dist-G7WQPZ3Y.js");
+      const mod = await import("./dist-CE6BUCWQ.js");
       return { plugin: mod.slackPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback() {
@@ -642,14 +706,19 @@ var SERVICE_REGISTRY = {
       slack: {
         team: { name: "My Workspace", domain: "my-workspace" },
         users: [{ name: "developer", real_name: "Developer", email: "dev@example.com" }],
-        channels: [{ name: "general", topic: "General discussion" }, { name: "random", topic: "Random stuff" }],
+        channels: [
+          { name: "general", topic: "General discussion" },
+          { name: "random", topic: "Random stuff" }
+        ],
         bots: [{ name: "my-bot" }],
-        oauth_apps: [{
-          client_id: "12345.67890",
-          client_secret: "example_client_secret",
-          name: "My Slack App",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/slack"]
-        }]
+        oauth_apps: [
+          {
+            client_id: "12345.67890",
+            client_secret: "example_client_secret",
+            name: "My Slack App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/slack"]
+          }
+        ]
       }
     }
   },
@@ -657,7 +726,7 @@ var SERVICE_REGISTRY = {
     label: "Apple Sign In / OAuth emulator",
     endpoints: "OAuth authorize, token exchange, JWKS",
     async load() {
-      const mod = await import("./dist-6JFNJPUU.js");
+      const mod = await import("./dist-CFST4X4K.js");
       return { plugin: mod.applePlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback(cfg) {
@@ -667,12 +736,14 @@ var SERVICE_REGISTRY = {
     initConfig: {
       apple: {
         users: [{ email: "testuser@icloud.com", name: "Test User" }],
-        oauth_clients: [{
-          client_id: "com.example.app",
-          team_id: "TEAM001",
-          name: "My Apple App",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/apple"]
-        }]
+        oauth_clients: [
+          {
+            client_id: "com.example.app",
+            team_id: "TEAM001",
+            name: "My Apple App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/apple"]
+          }
+        ]
       }
     }
   },
@@ -680,7 +751,7 @@ var SERVICE_REGISTRY = {
     label: "Microsoft Entra ID OAuth 2.0 / OpenID Connect emulator",
     endpoints: "OAuth authorize, token exchange, userinfo, OIDC discovery, Graph /me, logout, token revocation",
     async load() {
-      const mod = await import("./dist-RMK3BS5M.js");
+      const mod = await import("./dist-ETHHYBGF.js");
       return { plugin: mod.microsoftPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback(cfg) {
@@ -690,12 +761,14 @@ var SERVICE_REGISTRY = {
     initConfig: {
       microsoft: {
         users: [{ email: "testuser@outlook.com", name: "Test User" }],
-        oauth_clients: [{
-          client_id: "example-client-id",
-          client_secret: "example-client-secret",
-          name: "My Microsoft App",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/microsoft-entra-id"]
-        }]
+        oauth_clients: [
+          {
+            client_id: "example-client-id",
+            client_secret: "example-client-secret",
+            name: "My Microsoft App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/microsoft-entra-id"]
+          }
+        ]
       }
     }
   },
@@ -703,7 +776,7 @@ var SERVICE_REGISTRY = {
     label: "Okta OAuth 2.0 / OpenID Connect + management API emulator",
     endpoints: "OIDC discovery, JWKS, OAuth authorize/token/userinfo/introspect/revoke/logout, users, groups, apps, authorization servers",
     async load() {
-      const mod = await import("./dist-OTJZRQ3Q.js");
+      const mod = await import("./dist-5JVGPOL3.js");
       return { plugin: mod.oktaPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback(cfg) {
@@ -715,13 +788,15 @@ var SERVICE_REGISTRY = {
         users: [{ login: "testuser@okta.local", email: "testuser@okta.local", first_name: "Test", last_name: "User" }],
         groups: [{ name: "Everyone", description: "All users", type: "BUILT_IN", okta_id: "00g_everyone" }],
         authorization_servers: [{ id: "default", name: "default", audiences: ["api://default"] }],
-        oauth_clients: [{
-          client_id: "okta-test-client",
-          client_secret: "okta-test-secret",
-          name: "Sample OIDC Client",
-          redirect_uris: ["http://localhost:3000/callback"],
-          auth_server_id: "default"
-        }]
+        oauth_clients: [
+          {
+            client_id: "okta-test-client",
+            client_secret: "okta-test-secret",
+            name: "Sample OIDC Client",
+            redirect_uris: ["http://localhost:3000/callback"],
+            auth_server_id: "default"
+          }
+        ]
       }
     }
   },
@@ -729,7 +804,7 @@ var SERVICE_REGISTRY = {
     label: "AWS cloud service emulator",
     endpoints: "S3 (buckets, objects), SQS (queues, messages), IAM (users, roles, access keys), STS (assume role, caller identity)",
     async load() {
-      const mod = await import("./dist-VVXVP5EZ.js");
+      const mod = await import("./dist-LDUHEJAN.js");
       return { plugin: mod.awsPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback() {
@@ -751,7 +826,7 @@ var SERVICE_REGISTRY = {
     label: "Resend email API emulator",
     endpoints: "emails, domains, contacts, API keys, inbox UI",
     async load() {
-      const mod = await import("./dist-QMOJM6DV.js");
+      const mod = await import("./dist-IBXD3O6A.js");
       return { plugin: mod.resendPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback() {
@@ -766,9 +841,9 @@ var SERVICE_REGISTRY = {
   },
   stripe: {
     label: "Stripe payments emulator",
-    endpoints: "customers, payment intents, charges, products, prices, checkout sessions, webhooks",
+    endpoints: "customers, payment methods, customer sessions, payment intents, charges, products, prices, checkout sessions, webhooks",
     async load() {
-      const mod = await import("./dist-YOVM5HEY.js");
+      const mod = await import("./dist-ENKE2S7V.js");
       return { plugin: mod.stripePlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback() {
@@ -786,7 +861,7 @@ var SERVICE_REGISTRY = {
     label: "MongoDB Atlas service emulator",
     endpoints: "Atlas Admin API v2 (projects, clusters, database users, databases, collections), Atlas Data API v1 (findOne, find, insertOne, insertMany, updateOne, updateMany, deleteOne, deleteMany, aggregate)",
     async load() {
-      const mod = await import("./dist-B674PYKV.js");
+      const mod = await import("./dist-PWGOAQC6.js");
       return { plugin: mod.mongoatlasPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback() {
@@ -800,11 +875,71 @@ var SERVICE_REGISTRY = {
         databases: [{ cluster: "Cluster0", name: "test", collections: ["items"] }]
       }
     }
+  },
+  clerk: {
+    label: "Clerk authentication and user management emulator",
+    endpoints: "OIDC discovery, JWKS, OAuth authorize/token/userinfo, users, email addresses, organizations, memberships, invitations, sessions",
+    async load() {
+      const mod = await import("./dist-J6LHUR52.js");
+      return { plugin: mod.clerkPlugin, seedFromConfig: mod.seedFromConfig };
+    },
+    defaultFallback(cfg) {
+      const firstEmail = cfg?.users?.[0]?.email_addresses?.[0] ?? "test@example.com";
+      return { login: firstEmail, id: 1, scopes: [] };
+    },
+    initConfig: {
+      clerk: {
+        users: [
+          {
+            first_name: "Test",
+            last_name: "User",
+            email_addresses: ["test@example.com"],
+            password: "clerk_test_password"
+          }
+        ],
+        organizations: [
+          {
+            name: "My Company",
+            slug: "my-company",
+            members: [{ email: "test@example.com", role: "admin" }]
+          }
+        ],
+        oauth_applications: [
+          {
+            client_id: "clerk_emulate_client",
+            client_secret: "clerk_emulate_secret",
+            name: "Emulate App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/clerk"]
+          }
+        ]
+      }
+    }
   }
 };
 
 // src/api.ts
 import { serve } from "@hono/node-server";
+
+// src/base-url.ts
+function resolveBaseUrl(opts) {
+  if (opts.seedBaseUrl) {
+    return opts.seedBaseUrl.replace(/\{service\}/g, opts.service);
+  }
+  if (opts.baseUrl) {
+    return opts.baseUrl.replace(/\{service\}/g, opts.service);
+  }
+  const envBaseUrl = process.env.EMULATE_BASE_URL;
+  if (envBaseUrl) {
+    return envBaseUrl.replace(/\{service\}/g, opts.service);
+  }
+  const portlessUrl = process.env.PORTLESS_URL;
+  if (portlessUrl) {
+    return portlessUrl.replace(/\{service\}/g, opts.service);
+  }
+  return `http://localhost:${opts.port}`;
+}
+
+// src/api.ts
 async function createEmulator(options) {
   const { service, port = 4e3, seed: seedConfig } = options;
   const entry = SERVICE_REGISTRY[service];
@@ -821,17 +956,18 @@ async function createEmulator(options) {
   } else {
     tokens["test_token_admin"] = { login: "admin", id: 2, scopes: ["repo", "user", "admin:org", "admin:repo_hook"] };
   }
-  const baseUrl = `http://localhost:${port}`;
+  const svcSeedConfig = seedConfig?.[service];
+  const seedBaseUrl = typeof svcSeedConfig?.baseUrl === "string" && svcSeedConfig.baseUrl.length > 0 ? svcSeedConfig.baseUrl : void 0;
+  const baseUrl = resolveBaseUrl({ service, port, baseUrl: options.baseUrl, seedBaseUrl });
   let cachedResolver;
   const appKeyResolver = loaded.createAppKeyResolver ? (appId) => cachedResolver(appId) : void 0;
-  const svcSeedConfig = seedConfig?.[service];
   const fallbackUser = entry.defaultFallback(svcSeedConfig);
-  const { app, store } = createServer(loaded.plugin, { port, baseUrl, tokens, appKeyResolver, fallbackUser });
+  const { app, store, webhooks } = createServer(loaded.plugin, { port, baseUrl, tokens, appKeyResolver, fallbackUser });
   cachedResolver = loaded.createAppKeyResolver?.(store);
   const seed = () => {
     loaded.plugin.seed?.(store, baseUrl);
     if (svcSeedConfig && loaded.seedFromConfig) {
-      loaded.seedFromConfig(store, baseUrl, svcSeedConfig);
+      loaded.seedFromConfig(store, baseUrl, svcSeedConfig, webhooks);
     }
   };
   seed();