emulate 0.4.0 → 0.5.0

package/dist/index.js

@@ -6,7 +6,7 @@ import {
 import {
   Hono,
   cors
-} from "./chunk-TEPNEZ63.js";
+} from "./chunk-AQ2CLRU3.js";
 
 // src/index.ts
 import { Command } from "commander";
@@ -391,9 +391,7 @@ function authMiddleware(tokens, appKeyResolver, fallbackUser) {
       if (token.startsWith("eyJ") && appKeyResolver) {
         try {
           const [, payloadB64] = token.split(".");
-          const payload = JSON.parse(
-            Buffer.from(payloadB64, "base64url").toString()
-          );
+          const payload = JSON.parse(Buffer.from(payloadB64, "base64url").toString());
           const appId = typeof payload.iss === "string" ? parseInt(payload.iss, 10) : payload.iss;
           if (typeof appId === "number" && !isNaN(appId)) {
             const appInfo = appKeyResolver(appId);
@@ -430,6 +428,7 @@ var FONTS = {
   "geist-sans.woff2": readFileSync(join(__dirname, "fonts", "geist-sans.woff2")),
   "GeistPixel-Square.woff2": readFileSync(join(__dirname, "fonts", "GeistPixel-Square.woff2"))
 };
+var FAVICON = readFileSync(join(__dirname, "fonts", "favicon.ico"));
 function registerFontRoutes(app) {
   app.get("/_emulate/fonts/:name", (c) => {
     const name = c.req.param("name");
@@ -443,6 +442,14 @@ function registerFontRoutes(app) {
       }
     });
   });
+  app.get("/_emulate/favicon.ico", (c) => {
+    return new Response(FAVICON, {
+      headers: {
+        "Content-Type": "image/x-icon",
+        "Cache-Control": "public, max-age=31536000, immutable"
+      }
+    });
+  });
 }
 function createServer(plugin, options = {}) {
   const port = options.port ?? 4e3;
@@ -512,14 +519,27 @@ function createServer(plugin, options = {}) {
 }
 
 // src/registry.ts
-var SERVICE_NAME_LIST = ["vercel", "github", "google", "slack", "apple", "microsoft", "okta", "aws", "resend", "stripe", "mongoatlas"];
+var SERVICE_NAME_LIST = [
+  "vercel",
+  "github",
+  "google",
+  "slack",
+  "apple",
+  "microsoft",
+  "okta",
+  "aws",
+  "resend",
+  "stripe",
+  "mongoatlas",
+  "clerk"
+];
 var SERVICE_NAMES = SERVICE_NAME_LIST;
 var SERVICE_REGISTRY = {
   vercel: {
     label: "Vercel REST API emulator",
     endpoints: "projects, deployments, domains, env vars, users, teams, file uploads, protection bypass",
     async load() {
-      const mod = await import("./dist-RDFBZ5O6.js");
+      const mod = await import("./dist-4X2KPMAJ.js");
       return { plugin: mod.vercelPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback(cfg) {
@@ -531,12 +551,14 @@ var SERVICE_REGISTRY = {
         users: [{ username: "developer", name: "Developer", email: "dev@example.com" }],
         teams: [{ slug: "my-team", name: "My Team" }],
         projects: [{ name: "my-app", team: "my-team", framework: "nextjs" }],
-        integrations: [{
-          client_id: "oac_example_client_id",
-          client_secret: "example_client_secret",
-          name: "My Vercel App",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/vercel"]
-        }]
+        integrations: [
+          {
+            client_id: "oac_example_client_id",
+            client_secret: "example_client_secret",
+            name: "My Vercel App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/vercel"]
+          }
+        ]
       }
     }
   },
@@ -544,7 +566,7 @@ var SERVICE_REGISTRY = {
     label: "GitHub REST API emulator",
     endpoints: "users, repos, issues, PRs, comments, reviews, labels, milestones, branches, git data, orgs, teams, releases, webhooks, search, actions, checks, rate limit",
     async load() {
-      const mod = await import("./dist-H6JYGQM4.js");
+      const mod = await import("./dist-REDHDZ3V.js");
       return {
         plugin: mod.githubPlugin,
         seedFromConfig: mod.seedFromConfig,
@@ -568,25 +590,42 @@ var SERVICE_REGISTRY = {
     },
     initConfig: {
       github: {
-        users: [{
-          login: "octocat",
-          name: "The Octocat",
-          email: "octocat@github.com",
-          bio: "I am the Octocat",
-          company: "GitHub",
-          location: "San Francisco"
-        }],
+        users: [
+          {
+            login: "octocat",
+            name: "The Octocat",
+            email: "octocat@github.com",
+            bio: "I am the Octocat",
+            company: "GitHub",
+            location: "San Francisco"
+          }
+        ],
         orgs: [{ login: "my-org", name: "My Organization", description: "A test organization" }],
         repos: [
-          { owner: "octocat", name: "hello-world", description: "My first repository", language: "JavaScript", topics: ["hello", "world"], auto_init: true },
-          { owner: "my-org", name: "org-repo", description: "An organization repository", language: "TypeScript", auto_init: true }
+          {
+            owner: "octocat",
+            name: "hello-world",
+            description: "My first repository",
+            language: "JavaScript",
+            topics: ["hello", "world"],
+            auto_init: true
+          },
+          {
+            owner: "my-org",
+            name: "org-repo",
+            description: "An organization repository",
+            language: "TypeScript",
+            auto_init: true
+          }
         ],
-        oauth_apps: [{
-          client_id: "Iv1.example_client_id",
-          client_secret: "example_client_secret",
-          name: "My App",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/github"]
-        }]
+        oauth_apps: [
+          {
+            client_id: "Iv1.example_client_id",
+            client_secret: "example_client_secret",
+            name: "My App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/github"]
+          }
+        ]
       }
     }
   },
@@ -594,7 +633,7 @@ var SERVICE_REGISTRY = {
     label: "Google OAuth 2.0 / OpenID Connect + Gmail, Calendar, and Drive emulator",
     endpoints: "OAuth authorize, token exchange, userinfo, OIDC discovery, token revocation, Gmail messages/drafts/threads/labels/history/settings, Calendar lists/events/freebusy, Drive files/uploads",
     async load() {
-      const mod = await import("./dist-6EW7SSOZ.js");
+      const mod = await import("./dist-KKTYBE5S.js");
       return { plugin: mod.googlePlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback(cfg) {
@@ -603,34 +642,72 @@ var SERVICE_REGISTRY = {
     },
     initConfig: {
       google: {
-        users: [{ email: "testuser@example.com", name: "Test User", picture: "https://lh3.googleusercontent.com/a/default-user", email_verified: true }],
-        oauth_clients: [{
-          client_id: "example-client-id.apps.googleusercontent.com",
-          client_secret: "GOCSPX-example_secret",
-          name: "Code App (Google)",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/google"]
-        }],
-        labels: [{ id: "Label_ops", user_email: "testuser@example.com", name: "Ops/Review", color_background: "#DDEEFF", color_text: "#111111" }],
-        messages: [{
-          id: "msg_welcome",
-          user_email: "testuser@example.com",
-          from: "welcome@example.com",
-          to: "testuser@example.com",
-          subject: "Welcome to the Gmail emulator",
-          body_text: "You can now test Gmail, Calendar, and Drive flows locally.",
-          label_ids: ["INBOX", "UNREAD", "CATEGORY_UPDATES"],
-          date: "2025-01-04T10:00:00.000Z"
-        }],
-        calendars: [{ id: "primary", user_email: "testuser@example.com", summary: "testuser@example.com", primary: true, selected: true, time_zone: "UTC" }],
-        calendar_events: [{
-          id: "evt_kickoff",
-          user_email: "testuser@example.com",
-          calendar_id: "primary",
-          summary: "Project Kickoff",
-          start_date_time: "2025-01-10T09:00:00.000Z",
-          end_date_time: "2025-01-10T09:30:00.000Z"
-        }],
-        drive_items: [{ id: "drv_docs", user_email: "testuser@example.com", name: "Docs", mime_type: "application/vnd.google-apps.folder", parent_ids: ["root"] }]
+        users: [
+          {
+            email: "testuser@example.com",
+            name: "Test User",
+            picture: "https://lh3.googleusercontent.com/a/default-user",
+            email_verified: true
+          }
+        ],
+        oauth_clients: [
+          {
+            client_id: "example-client-id.apps.googleusercontent.com",
+            client_secret: "GOCSPX-example_secret",
+            name: "Code App (Google)",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/google"]
+          }
+        ],
+        labels: [
+          {
+            id: "Label_ops",
+            user_email: "testuser@example.com",
+            name: "Ops/Review",
+            color_background: "#DDEEFF",
+            color_text: "#111111"
+          }
+        ],
+        messages: [
+          {
+            id: "msg_welcome",
+            user_email: "testuser@example.com",
+            from: "welcome@example.com",
+            to: "testuser@example.com",
+            subject: "Welcome to the Gmail emulator",
+            body_text: "You can now test Gmail, Calendar, and Drive flows locally.",
+            label_ids: ["INBOX", "UNREAD", "CATEGORY_UPDATES"],
+            date: "2025-01-04T10:00:00.000Z"
+          }
+        ],
+        calendars: [
+          {
+            id: "primary",
+            user_email: "testuser@example.com",
+            summary: "testuser@example.com",
+            primary: true,
+            selected: true,
+            time_zone: "UTC"
+          }
+        ],
+        calendar_events: [
+          {
+            id: "evt_kickoff",
+            user_email: "testuser@example.com",
+            calendar_id: "primary",
+            summary: "Project Kickoff",
+            start_date_time: "2025-01-10T09:00:00.000Z",
+            end_date_time: "2025-01-10T09:30:00.000Z"
+          }
+        ],
+        drive_items: [
+          {
+            id: "drv_docs",
+            user_email: "testuser@example.com",
+            name: "Docs",
+            mime_type: "application/vnd.google-apps.folder",
+            parent_ids: ["root"]
+          }
+        ]
       }
     }
   },
@@ -638,7 +715,7 @@ var SERVICE_REGISTRY = {
     label: "Slack API emulator",
     endpoints: "auth, chat, conversations, users, reactions, team, OAuth, incoming webhooks",
     async load() {
-      const mod = await import("./dist-G7WQPZ3Y.js");
+      const mod = await import("./dist-CE6BUCWQ.js");
       return { plugin: mod.slackPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback() {
@@ -648,14 +725,19 @@ var SERVICE_REGISTRY = {
       slack: {
         team: { name: "My Workspace", domain: "my-workspace" },
         users: [{ name: "developer", real_name: "Developer", email: "dev@example.com" }],
-        channels: [{ name: "general", topic: "General discussion" }, { name: "random", topic: "Random stuff" }],
+        channels: [
+          { name: "general", topic: "General discussion" },
+          { name: "random", topic: "Random stuff" }
+        ],
         bots: [{ name: "my-bot" }],
-        oauth_apps: [{
-          client_id: "12345.67890",
-          client_secret: "example_client_secret",
-          name: "My Slack App",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/slack"]
-        }]
+        oauth_apps: [
+          {
+            client_id: "12345.67890",
+            client_secret: "example_client_secret",
+            name: "My Slack App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/slack"]
+          }
+        ]
       }
     }
   },
@@ -663,7 +745,7 @@ var SERVICE_REGISTRY = {
     label: "Apple Sign In / OAuth emulator",
     endpoints: "OAuth authorize, token exchange, JWKS",
     async load() {
-      const mod = await import("./dist-6JFNJPUU.js");
+      const mod = await import("./dist-CFST4X4K.js");
       return { plugin: mod.applePlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback(cfg) {
@@ -673,12 +755,14 @@ var SERVICE_REGISTRY = {
     initConfig: {
       apple: {
         users: [{ email: "testuser@icloud.com", name: "Test User" }],
-        oauth_clients: [{
-          client_id: "com.example.app",
-          team_id: "TEAM001",
-          name: "My Apple App",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/apple"]
-        }]
+        oauth_clients: [
+          {
+            client_id: "com.example.app",
+            team_id: "TEAM001",
+            name: "My Apple App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/apple"]
+          }
+        ]
       }
     }
   },
@@ -686,7 +770,7 @@ var SERVICE_REGISTRY = {
     label: "Microsoft Entra ID OAuth 2.0 / OpenID Connect emulator",
     endpoints: "OAuth authorize, token exchange, userinfo, OIDC discovery, Graph /me, logout, token revocation",
     async load() {
-      const mod = await import("./dist-RMK3BS5M.js");
+      const mod = await import("./dist-ETHHYBGF.js");
       return { plugin: mod.microsoftPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback(cfg) {
@@ -696,12 +780,14 @@ var SERVICE_REGISTRY = {
     initConfig: {
       microsoft: {
         users: [{ email: "testuser@outlook.com", name: "Test User" }],
-        oauth_clients: [{
-          client_id: "example-client-id",
-          client_secret: "example-client-secret",
-          name: "My Microsoft App",
-          redirect_uris: ["http://localhost:3000/api/auth/callback/microsoft-entra-id"]
-        }]
+        oauth_clients: [
+          {
+            client_id: "example-client-id",
+            client_secret: "example-client-secret",
+            name: "My Microsoft App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/microsoft-entra-id"]
+          }
+        ]
       }
     }
   },
@@ -709,7 +795,7 @@ var SERVICE_REGISTRY = {
     label: "Okta OAuth 2.0 / OpenID Connect + management API emulator",
     endpoints: "OIDC discovery, JWKS, OAuth authorize/token/userinfo/introspect/revoke/logout, users, groups, apps, authorization servers",
     async load() {
-      const mod = await import("./dist-OTJZRQ3Q.js");
+      const mod = await import("./dist-5JVGPOL3.js");
       return { plugin: mod.oktaPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback(cfg) {
@@ -721,13 +807,15 @@ var SERVICE_REGISTRY = {
         users: [{ login: "testuser@okta.local", email: "testuser@okta.local", first_name: "Test", last_name: "User" }],
         groups: [{ name: "Everyone", description: "All users", type: "BUILT_IN", okta_id: "00g_everyone" }],
         authorization_servers: [{ id: "default", name: "default", audiences: ["api://default"] }],
-        oauth_clients: [{
-          client_id: "okta-test-client",
-          client_secret: "okta-test-secret",
-          name: "Sample OIDC Client",
-          redirect_uris: ["http://localhost:3000/callback"],
-          auth_server_id: "default"
-        }]
+        oauth_clients: [
+          {
+            client_id: "okta-test-client",
+            client_secret: "okta-test-secret",
+            name: "Sample OIDC Client",
+            redirect_uris: ["http://localhost:3000/callback"],
+            auth_server_id: "default"
+          }
+        ]
       }
     }
   },
@@ -735,7 +823,7 @@ var SERVICE_REGISTRY = {
     label: "AWS cloud service emulator",
     endpoints: "S3 (buckets, objects), SQS (queues, messages), IAM (users, roles, access keys), STS (assume role, caller identity)",
     async load() {
-      const mod = await import("./dist-VVXVP5EZ.js");
+      const mod = await import("./dist-LDUHEJAN.js");
       return { plugin: mod.awsPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback() {
@@ -757,7 +845,7 @@ var SERVICE_REGISTRY = {
     label: "Resend email API emulator",
     endpoints: "emails, domains, contacts, API keys, inbox UI",
     async load() {
-      const mod = await import("./dist-QMOJM6DV.js");
+      const mod = await import("./dist-IBXD3O6A.js");
       return { plugin: mod.resendPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback() {
@@ -772,9 +860,9 @@ var SERVICE_REGISTRY = {
   },
   stripe: {
     label: "Stripe payments emulator",
-    endpoints: "customers, payment intents, charges, products, prices, checkout sessions, webhooks",
+    endpoints: "customers, payment methods, customer sessions, payment intents, charges, products, prices, checkout sessions, webhooks",
     async load() {
-      const mod = await import("./dist-YOVM5HEY.js");
+      const mod = await import("./dist-ENKE2S7V.js");
       return { plugin: mod.stripePlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback() {
@@ -792,7 +880,7 @@ var SERVICE_REGISTRY = {
     label: "MongoDB Atlas service emulator",
     endpoints: "Atlas Admin API v2 (projects, clusters, database users, databases, collections), Atlas Data API v1 (findOne, find, insertOne, insertMany, updateOne, updateMany, deleteOne, deleteMany, aggregate)",
     async load() {
-      const mod = await import("./dist-B674PYKV.js");
+      const mod = await import("./dist-PWGOAQC6.js");
       return { plugin: mod.mongoatlasPlugin, seedFromConfig: mod.seedFromConfig };
     },
     defaultFallback() {
@@ -806,15 +894,54 @@ var SERVICE_REGISTRY = {
         databases: [{ cluster: "Cluster0", name: "test", collections: ["items"] }]
       }
     }
+  },
+  clerk: {
+    label: "Clerk authentication and user management emulator",
+    endpoints: "OIDC discovery, JWKS, OAuth authorize/token/userinfo, users, email addresses, organizations, memberships, invitations, sessions",
+    async load() {
+      const mod = await import("./dist-J6LHUR52.js");
+      return { plugin: mod.clerkPlugin, seedFromConfig: mod.seedFromConfig };
+    },
+    defaultFallback(cfg) {
+      const firstEmail = cfg?.users?.[0]?.email_addresses?.[0] ?? "test@example.com";
+      return { login: firstEmail, id: 1, scopes: [] };
+    },
+    initConfig: {
+      clerk: {
+        users: [
+          {
+            first_name: "Test",
+            last_name: "User",
+            email_addresses: ["test@example.com"],
+            password: "clerk_test_password"
+          }
+        ],
+        organizations: [
+          {
+            name: "My Company",
+            slug: "my-company",
+            members: [{ email: "test@example.com", role: "admin" }]
+          }
+        ],
+        oauth_applications: [
+          {
+            client_id: "clerk_emulate_client",
+            client_secret: "clerk_emulate_secret",
+            name: "Emulate App",
+            redirect_uris: ["http://localhost:3000/api/auth/callback/clerk"]
+          }
+        ]
+      }
+    }
   }
 };
 var DEFAULT_TOKENS = {
   tokens: {
-    "test_token_admin": {
+    test_token_admin: {
       login: "admin",
       scopes: ["repo", "user", "admin:org", "admin:repo_hook"]
     },
-    "test_token_user1": {
+    test_token_user1: {
       login: "octocat",
       scopes: ["repo", "user"]
     }
@@ -827,7 +954,106 @@ import { readFileSync as readFileSync2, existsSync } from "fs";
 import { resolve } from "path";
 import { parse as parseYaml } from "yaml";
 import pc from "picocolors";
-var pkg = { version: "0.4.0" };
+
+// src/portless.ts
+import { execSync, spawnSync } from "child_process";
+import { createInterface } from "readline";
+function isInteractive() {
+  return Boolean(process.stdin.isTTY) && !process.env.CI;
+}
+function hasPortless() {
+  const result = spawnSync("portless", ["--version"], { stdio: "ignore" });
+  return result.status === 0;
+}
+function promptYesNo(question) {
+  return new Promise((resolve3) => {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    rl.question(question, (answer) => {
+      rl.close();
+      const normalized = answer.trim().toLowerCase();
+      resolve3(normalized === "" || normalized === "y" || normalized === "yes");
+    });
+  });
+}
+function isProxyRunning() {
+  const result = spawnSync("portless", ["list"], { stdio: "ignore" });
+  return result.status === 0;
+}
+async function ensurePortless() {
+  if (!hasPortless()) {
+    if (!isInteractive()) {
+      console.error("portless is required but not installed. Run: npm i -g portless");
+      process.exit(1);
+    }
+    const yes = await promptYesNo("portless is not installed. Install it now? (npm i -g portless) [Y/n] ");
+    if (!yes) {
+      console.error("Cannot continue without portless.");
+      process.exit(1);
+    }
+    try {
+      execSync("npm i -g portless", { stdio: "inherit" });
+    } catch {
+      console.error("Failed to install portless.");
+      process.exit(1);
+    }
+    if (!hasPortless()) {
+      console.error("portless was installed but could not be found on PATH.");
+      process.exit(1);
+    }
+  }
+  if (!isProxyRunning()) {
+    console.error("portless proxy is not running. Start it with: portless proxy start");
+    process.exit(1);
+  }
+}
+function registerAliases(aliases) {
+  const registered = [];
+  for (const { name, port } of aliases) {
+    const result = spawnSync("portless", ["alias", name, String(port), "--force"], {
+      stdio: "inherit"
+    });
+    if (result.status !== 0) {
+      if (registered.length > 0) {
+        removeAliases(registered);
+      }
+      throw new Error(`Failed to register portless alias: ${name} -> ${port}`);
+    }
+    registered.push({ name, port });
+  }
+}
+function removeAliases(aliases) {
+  for (const { name } of aliases) {
+    const result = spawnSync("portless", ["alias", "--remove", name], { stdio: "ignore" });
+    if (result.status !== 0) {
+      console.error(`Warning: failed to remove portless alias: ${name}`);
+    }
+  }
+}
+function portlessBaseUrl(serviceName) {
+  return `https://${serviceName}.emulate.localhost`;
+}
+
+// src/base-url.ts
+function resolveBaseUrl(opts) {
+  if (opts.seedBaseUrl) {
+    return opts.seedBaseUrl.replace(/\{service\}/g, opts.service);
+  }
+  if (opts.baseUrl) {
+    return opts.baseUrl.replace(/\{service\}/g, opts.service);
+  }
+  const envBaseUrl = process.env.EMULATE_BASE_URL;
+  if (envBaseUrl) {
+    return envBaseUrl.replace(/\{service\}/g, opts.service);
+  }
+  const portlessUrl = process.env.PORTLESS_URL;
+  if (portlessUrl) {
+    return portlessUrl.replace(/\{service\}/g, opts.service);
+  }
+  return `http://localhost:${opts.port}`;
+}
+
+// src/commands/start.ts
+var pkg = { version: "0.5.0" };
 function loadSeedConfig(seedPath) {
   if (seedPath) {
     const fullPath = resolve(seedPath);
@@ -869,10 +1095,14 @@ function loadSeedConfig(seedPath) {
 }
 function inferServicesFromConfig(config) {
   const found = SERVICE_NAMES.filter((k) => k in config);
-  return found.length > 0 ? found : null;
+  return found.length > 0 ? [...found] : null;
 }
 async function startCommand(options) {
   const { port: basePort } = options;
+  if (options.portless && options.baseUrl) {
+    console.error("--portless and --base-url are mutually exclusive.");
+    process.exit(1);
+  }
   const loaded = loadSeedConfig(options.seed);
   const seedConfig = loaded?.config ?? null;
   const configSource = loaded?.source ?? null;
@@ -880,9 +1110,9 @@ async function startCommand(options) {
   if (options.service) {
     services = options.service.split(",").map((s) => s.trim());
   } else if (seedConfig) {
-    services = inferServicesFromConfig(seedConfig) ?? SERVICE_NAMES;
+    services = inferServicesFromConfig(seedConfig) ?? [...SERVICE_NAMES];
   } else {
-    services = SERVICE_NAMES;
+    services = [...SERVICE_NAMES];
   }
   for (const svc of services) {
     if (!SERVICE_REGISTRY[svc]) {
@@ -899,26 +1129,48 @@ async function startCommand(options) {
   } else {
     tokens["test_token_admin"] = { login: "admin", id: 2, scopes: ["repo", "user", "admin:org", "admin:repo_hook"] };
   }
-  const serviceUrls = [];
-  const stores = [];
-  const httpServers = [];
+  if (options.portless) {
+    await ensurePortless();
+  }
+  const portlessAliases = [];
+  const prepared = [];
   for (let i = 0; i < services.length; i++) {
     const svc = services[i];
     const entry = SERVICE_REGISTRY[svc];
     const loadedSvc = await entry.load();
     const svcSeedConfig = seedConfig?.[svc];
     const port = svcSeedConfig?.port ?? basePort + i;
-    const baseUrl = `http://localhost:${port}`;
+    if (options.portless) {
+      portlessAliases.push({ name: `${svc}.emulate`, port });
+    }
+    const seedBaseUrl = typeof svcSeedConfig?.baseUrl === "string" && svcSeedConfig.baseUrl.length > 0 ? svcSeedConfig.baseUrl : void 0;
+    const effectiveBaseUrl = options.portless ? portlessBaseUrl(svc) : options.baseUrl;
+    const baseUrl = resolveBaseUrl({ service: svc, port, baseUrl: effectiveBaseUrl, seedBaseUrl });
+    prepared.push({ svc, entry, loadedSvc, svcSeedConfig, port, baseUrl });
+  }
+  if (portlessAliases.length > 0) {
+    registerAliases(portlessAliases);
+  }
+  const serviceUrls = [];
+  const stores = [];
+  const httpServers = [];
+  for (const { svc, entry, loadedSvc, svcSeedConfig, port, baseUrl } of prepared) {
     serviceUrls.push({ name: svc, url: baseUrl });
     let cachedResolver;
     const appKeyResolver = loadedSvc.createAppKeyResolver ? (appId) => cachedResolver(appId) : void 0;
     const fallbackUser = entry.defaultFallback(svcSeedConfig);
-    const { app, store } = createServer(loadedSvc.plugin, { port, baseUrl, tokens, appKeyResolver, fallbackUser });
+    const { app, store, webhooks } = createServer(loadedSvc.plugin, {
+      port,
+      baseUrl,
+      tokens,
+      appKeyResolver,
+      fallbackUser
+    });
     cachedResolver = loadedSvc.createAppKeyResolver?.(store);
     stores.push(store);
     loadedSvc.plugin.seed?.(store, baseUrl);
     if (svcSeedConfig && loadedSvc.seedFromConfig) {
-      loadedSvc.seedFromConfig(store, baseUrl, svcSeedConfig);
+      loadedSvc.seedFromConfig(store, baseUrl, svcSeedConfig, webhooks);
     }
     const httpServer = serve({ fetch: app.fetch, port });
     httpServers.push(httpServer);
@@ -927,6 +1179,9 @@ async function startCommand(options) {
   const shutdown = () => {
     console.log(`
 ${pc.dim("Shutting down...")}`);
+    if (portlessAliases.length > 0) {
+      removeAliases(portlessAliases);
+    }
     for (const store of stores) {
       store.reset();
     }
@@ -1008,11 +1263,11 @@ function listCommand() {
 }
 
 // src/index.ts
-var pkg2 = { version: "0.4.0" };
+var pkg2 = { version: "0.5.0" };
 var defaultPort = process.env.EMULATE_PORT ?? process.env.PORT ?? "4000";
 var program = new Command();
 program.name("emulate").description("Local drop-in replacement services for CI and no-network sandboxes").version(pkg2.version);
-program.command("start", { isDefault: true }).description("Start the emulator server").option("-p, --port <port>", "Base port", defaultPort).option("-s, --service <services>", "Comma-separated services to enable").option("--seed <file>", "Path to seed config file").action(async (opts) => {
+program.command("start", { isDefault: true }).description("Start the emulator server").option("-p, --port <port>", "Base port", defaultPort).option("-s, --service <services>", "Comma-separated services to enable").option("--seed <file>", "Path to seed config file").option("--base-url <url>", "Override advertised base URL (supports {service} template)").option("--portless", "Serve over HTTPS via portless (auto-registers aliases)").action(async (opts) => {
   const port = parseInt(opts.port, 10);
   if (Number.isNaN(port) || port < 1 || port > 65535) {
     console.error(`Invalid port: ${opts.port}`);
@@ -1021,7 +1276,9 @@ program.command("start", { isDefault: true }).description("Start the emulator se
   await startCommand({
     port,
     service: opts.service,
-    seed: opts.seed
+    seed: opts.seed,
+    baseUrl: opts.baseUrl,
+    portless: opts.portless
   });
 });
 program.command("init").description("Generate a starter config file").option("-s, --service <service>", "Service to generate config for", "all").action((opts) => {