enpilink 1.0.2

package/dist/cli/detect-port.js

@@ -0,0 +1,50 @@
+import net from "node:net";
+const DEFAULT_PORT = 3000;
+const MAX_PORT_INCREMENT = 100;
+export async function resolvePort(flagPort) {
+    if (flagPort && flagPort > 1) {
+        return { port: flagPort, fallback: false };
+    }
+    const rawEnv = process.env.PORT;
+    if (rawEnv) {
+        const parsed = Number(rawEnv);
+        if (Number.isInteger(parsed) && parsed > 0) {
+            return { port: parsed, fallback: false };
+        }
+        return {
+            port: await detectAvailablePort(DEFAULT_PORT),
+            fallback: false,
+            envWarning: `Invalid PORT="${rawEnv}", ignoring and using default`,
+        };
+    }
+    const port = await detectAvailablePort(DEFAULT_PORT);
+    return { port, fallback: port !== DEFAULT_PORT };
+}
+/**
+ * Returns the first available port at or after `startPort`, incrementing
+ * by one until a free port is found or `MAX_PORT_INCREMENT` is reached.
+ *
+ * @param host - Bind address for the check. Pass `"localhost"` for
+ *   services that bind to 127.0.0.1 (e.g. Vite HMR). Omit for
+ *   services that bind to all interfaces (e.g. the HTTP server).
+ */
+export async function detectAvailablePort(startPort, host) {
+    for (let port = startPort; port < startPort + MAX_PORT_INCREMENT; port++) {
+        if (await isPortAvailable(port, host)) {
+            return port;
+        }
+        console.log(`Port ${port} is in use, trying another one...`);
+    }
+    throw new Error(`No available port found between ${startPort} and ${startPort + MAX_PORT_INCREMENT - 1}`);
+}
+function isPortAvailable(port, host) {
+    return new Promise((resolve) => {
+        const server = net.createServer();
+        server.once("error", () => resolve(false));
+        server.once("listening", () => {
+            server.close(() => resolve(true));
+        });
+        server.listen(port, host);
+    });
+}
+//# sourceMappingURL=detect-port.js.map

package/dist/cli/detect-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-port.js","sourceRoot":"","sources":["../../src/cli/detect-port.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAiB;IACjD,IAAI,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAChC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM,mBAAmB,CAAC,YAAY,CAAC;YAC7C,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,iBAAiB,MAAM,+BAA+B;SACnE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,IAAa;IAEb,KAAK,IAAI,IAAI,GAAG,SAAS,EAAE,IAAI,GAAG,SAAS,GAAG,kBAAkB,EAAE,IAAI,EAAE,EAAE,CAAC;QACzE,IAAI,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,KAAK,CACb,mCAAmC,SAAS,QAAQ,SAAS,GAAG,kBAAkB,GAAG,CAAC,EAAE,CACzF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAa;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAElC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;YAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import net from \"node:net\";\n\nconst DEFAULT_PORT = 3000;\nconst MAX_PORT_INCREMENT = 100;\n\nexport async function resolvePort(flagPort?: number) {\n  if (flagPort && flagPort > 1) {\n    return { port: flagPort, fallback: false };\n  }\n\n  const rawEnv = process.env.PORT;\n  if (rawEnv) {\n    const parsed = Number(rawEnv);\n    if (Number.isInteger(parsed) && parsed > 0) {\n      return { port: parsed, fallback: false };\n    }\n    return {\n      port: await detectAvailablePort(DEFAULT_PORT),\n      fallback: false,\n      envWarning: `Invalid PORT=\"${rawEnv}\", ignoring and using default`,\n    };\n  }\n\n  const port = await detectAvailablePort(DEFAULT_PORT);\n  return { port, fallback: port !== DEFAULT_PORT };\n}\n\n/**\n * Returns the first available port at or after `startPort`, incrementing\n * by one until a free port is found or `MAX_PORT_INCREMENT` is reached.\n *\n * @param host - Bind address for the check. Pass `\"localhost\"` for\n *   services that bind to 127.0.0.1 (e.g. Vite HMR). Omit for\n *   services that bind to all interfaces (e.g. the HTTP server).\n */\nexport async function detectAvailablePort(\n  startPort: number,\n  host?: string,\n): Promise<number> {\n  for (let port = startPort; port < startPort + MAX_PORT_INCREMENT; port++) {\n    if (await isPortAvailable(port, host)) {\n      return port;\n    }\n    console.log(`Port ${port} is in use, trying another one...`);\n  }\n  throw new Error(\n    `No available port found between ${startPort} and ${startPort + MAX_PORT_INCREMENT - 1}`,\n  );\n}\n\nfunction isPortAvailable(port: number, host?: string): Promise<boolean> {\n  return new Promise((resolve) => {\n    const server = net.createServer();\n\n    server.once(\"error\", () => resolve(false));\n    server.once(\"listening\", () => {\n      server.close(() => resolve(true));\n    });\n\n    server.listen(port, host);\n  });\n}\n"]}

package/dist/cli/ensure-ssh-key.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Path to enpilink's SSH private key. srv.us derives a stable public URL from
+ * this key, so it lives in a fixed, per-user location.
+ */
+export declare function sshKeyPath(): string;
+/**
+ * Ensure an ed25519 SSH key exists at `~/.enpilink/id_ed25519`, generating one
+ * non-interactively if missing. Returns the key path.
+ *
+ * Idempotent: a no-op when the key already exists. Used (a) lazily inside the
+ * srv.us provider before connecting and (b) from the package postinstall script
+ * (best-effort — see scripts/postinstall.mjs).
+ *
+ * @throws if key generation fails (e.g. `ssh-keygen` unavailable). Callers that
+ *   must never fail (postinstall) should swallow the error.
+ */
+export declare function ensureSshKey(): string;

package/dist/cli/ensure-ssh-key.js

@@ -0,0 +1,45 @@
+import { spawnSync } from "node:child_process";
+import { chmodSync, existsSync, mkdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+/**
+ * Path to enpilink's SSH private key. srv.us derives a stable public URL from
+ * this key, so it lives in a fixed, per-user location.
+ */
+export function sshKeyPath() {
+    return join(homedir(), ".enpilink", "id_ed25519");
+}
+/**
+ * Ensure an ed25519 SSH key exists at `~/.enpilink/id_ed25519`, generating one
+ * non-interactively if missing. Returns the key path.
+ *
+ * Idempotent: a no-op when the key already exists. Used (a) lazily inside the
+ * srv.us provider before connecting and (b) from the package postinstall script
+ * (best-effort — see scripts/postinstall.mjs).
+ *
+ * @throws if key generation fails (e.g. `ssh-keygen` unavailable). Callers that
+ *   must never fail (postinstall) should swallow the error.
+ */
+export function ensureSshKey() {
+    const keyPath = sshKeyPath();
+    if (existsSync(keyPath)) {
+        return keyPath;
+    }
+    mkdirSync(join(homedir(), ".enpilink"), { recursive: true, mode: 0o700 });
+    const result = spawnSync("ssh-keygen", ["-t", "ed25519", "-N", "", "-f", keyPath, "-C", "enpilink"], { stdio: "ignore" });
+    if (result.error) {
+        throw result.error;
+    }
+    if (result.status !== 0) {
+        throw new Error(`ssh-keygen exited with code ${result.status ?? "unknown"}`);
+    }
+    // ssh-keygen already creates 0600, but enforce it defensively (umask edge cases).
+    try {
+        chmodSync(keyPath, 0o600);
+    }
+    catch {
+        // best-effort; ssh will still refuse a too-open key and surface a clear error
+    }
+    return keyPath;
+}
+//# sourceMappingURL=ensure-ssh-key.js.map

package/dist/cli/ensure-ssh-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-ssh-key.js","sourceRoot":"","sources":["../../src/cli/ensure-ssh-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAG,SAAS,CACtB,YAAY,EACZ,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,EAC5D,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAC;IAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,MAAM,CAAC,KAAK,CAAC;IACrB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAC5D,CAAC;IACJ,CAAC;IAED,kFAAkF;IAClF,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import { spawnSync } from \"node:child_process\";\nimport { chmodSync, existsSync, mkdirSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\n/**\n * Path to enpilink's SSH private key. srv.us derives a stable public URL from\n * this key, so it lives in a fixed, per-user location.\n */\nexport function sshKeyPath(): string {\n  return join(homedir(), \".enpilink\", \"id_ed25519\");\n}\n\n/**\n * Ensure an ed25519 SSH key exists at `~/.enpilink/id_ed25519`, generating one\n * non-interactively if missing. Returns the key path.\n *\n * Idempotent: a no-op when the key already exists. Used (a) lazily inside the\n * srv.us provider before connecting and (b) from the package postinstall script\n * (best-effort — see scripts/postinstall.mjs).\n *\n * @throws if key generation fails (e.g. `ssh-keygen` unavailable). Callers that\n *   must never fail (postinstall) should swallow the error.\n */\nexport function ensureSshKey(): string {\n  const keyPath = sshKeyPath();\n  if (existsSync(keyPath)) {\n    return keyPath;\n  }\n\n  mkdirSync(join(homedir(), \".enpilink\"), { recursive: true, mode: 0o700 });\n\n  const result = spawnSync(\n    \"ssh-keygen\",\n    [\"-t\", \"ed25519\", \"-N\", \"\", \"-f\", keyPath, \"-C\", \"enpilink\"],\n    { stdio: \"ignore\" },\n  );\n\n  if (result.error) {\n    throw result.error;\n  }\n  if (result.status !== 0) {\n    throw new Error(\n      `ssh-keygen exited with code ${result.status ?? \"unknown\"}`,\n    );\n  }\n\n  // ssh-keygen already creates 0600, but enforce it defensively (umask edge cases).\n  try {\n    chmodSync(keyPath, 0o600);\n  } catch {\n    // best-effort; ssh will still refuse a too-open key and surface a clear error\n  }\n\n  return keyPath;\n}\n"]}

package/dist/cli/ensure-ssh-key.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cli/ensure-ssh-key.test.js

@@ -0,0 +1,68 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+const mocks = vi.hoisted(() => ({
+    existsSync: vi.fn(),
+    mkdirSync: vi.fn(),
+    chmodSync: vi.fn(),
+    spawnSync: vi.fn(),
+    homedir: vi.fn(() => "/home/tester"),
+}));
+vi.mock("node:fs", () => {
+    const fs = {
+        existsSync: mocks.existsSync,
+        mkdirSync: mocks.mkdirSync,
+        chmodSync: mocks.chmodSync,
+    };
+    return { ...fs, default: fs };
+});
+vi.mock("node:os", () => {
+    const os = { homedir: mocks.homedir };
+    return { ...os, default: os };
+});
+vi.mock("node:child_process", () => {
+    const cp = { spawnSync: mocks.spawnSync };
+    return { ...cp, default: cp };
+});
+import { ensureSshKey, sshKeyPath } from "./ensure-ssh-key.js";
+const KEY = "/home/tester/.enpilink/id_ed25519";
+beforeEach(() => {
+    vi.clearAllMocks();
+});
+afterEach(() => {
+    vi.restoreAllMocks();
+});
+describe("sshKeyPath", () => {
+    it("points at ~/.enpilink/id_ed25519", () => {
+        expect(sshKeyPath()).toBe(KEY);
+    });
+});
+describe("ensureSshKey", () => {
+    it("is a no-op when the key already exists", () => {
+        mocks.existsSync.mockReturnValue(true);
+        expect(ensureSshKey()).toBe(KEY);
+        expect(mocks.spawnSync).not.toHaveBeenCalled();
+        expect(mocks.mkdirSync).not.toHaveBeenCalled();
+    });
+    it("generates an ed25519 key non-interactively when missing", () => {
+        mocks.existsSync.mockReturnValue(false);
+        mocks.spawnSync.mockReturnValue({ status: 0, error: undefined });
+        expect(ensureSshKey()).toBe(KEY);
+        expect(mocks.mkdirSync).toHaveBeenCalledWith("/home/tester/.enpilink", {
+            recursive: true,
+            mode: 0o700,
+        });
+        expect(mocks.spawnSync).toHaveBeenCalledWith("ssh-keygen", ["-t", "ed25519", "-N", "", "-f", KEY, "-C", "enpilink"], { stdio: "ignore" });
+        expect(mocks.chmodSync).toHaveBeenCalledWith(KEY, 0o600);
+    });
+    it("throws when ssh-keygen is unavailable (spawn error)", () => {
+        mocks.existsSync.mockReturnValue(false);
+        const err = new Error("spawn ssh-keygen ENOENT");
+        mocks.spawnSync.mockReturnValue({ status: null, error: err });
+        expect(() => ensureSshKey()).toThrow("ENOENT");
+    });
+    it("throws when ssh-keygen exits non-zero", () => {
+        mocks.existsSync.mockReturnValue(false);
+        mocks.spawnSync.mockReturnValue({ status: 1, error: undefined });
+        expect(() => ensureSshKey()).toThrow(/code 1/);
+    });
+});
+//# sourceMappingURL=ensure-ssh-key.test.js.map

package/dist/cli/ensure-ssh-key.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-ssh-key.test.js","sourceRoot":"","sources":["../../src/cli/ensure-ssh-key.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9B,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC;CACrC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;IACtB,MAAM,EAAE,GAAG;QACT,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAChC,CAAC,CAAC,CAAC;AACH,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;IACtB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACtC,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAChC,CAAC,CAAC,CAAC;AACH,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACjC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IAC1C,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAChC,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,GAAG,GAAG,mCAAmC,CAAC;AAEhD,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,eAAe,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEjE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEjC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,EAAE;YACrE,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAC1C,YAAY,EACZ,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,EACxD,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACjD,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { afterEach, beforeEach, describe, expect, it, vi } from \"vitest\";\n\nconst mocks = vi.hoisted(() => ({\n  existsSync: vi.fn(),\n  mkdirSync: vi.fn(),\n  chmodSync: vi.fn(),\n  spawnSync: vi.fn(),\n  homedir: vi.fn(() => \"/home/tester\"),\n}));\n\nvi.mock(\"node:fs\", () => {\n  const fs = {\n    existsSync: mocks.existsSync,\n    mkdirSync: mocks.mkdirSync,\n    chmodSync: mocks.chmodSync,\n  };\n  return { ...fs, default: fs };\n});\nvi.mock(\"node:os\", () => {\n  const os = { homedir: mocks.homedir };\n  return { ...os, default: os };\n});\nvi.mock(\"node:child_process\", () => {\n  const cp = { spawnSync: mocks.spawnSync };\n  return { ...cp, default: cp };\n});\n\nimport { ensureSshKey, sshKeyPath } from \"./ensure-ssh-key.js\";\n\nconst KEY = \"/home/tester/.enpilink/id_ed25519\";\n\nbeforeEach(() => {\n  vi.clearAllMocks();\n});\nafterEach(() => {\n  vi.restoreAllMocks();\n});\n\ndescribe(\"sshKeyPath\", () => {\n  it(\"points at ~/.enpilink/id_ed25519\", () => {\n    expect(sshKeyPath()).toBe(KEY);\n  });\n});\n\ndescribe(\"ensureSshKey\", () => {\n  it(\"is a no-op when the key already exists\", () => {\n    mocks.existsSync.mockReturnValue(true);\n    expect(ensureSshKey()).toBe(KEY);\n    expect(mocks.spawnSync).not.toHaveBeenCalled();\n    expect(mocks.mkdirSync).not.toHaveBeenCalled();\n  });\n\n  it(\"generates an ed25519 key non-interactively when missing\", () => {\n    mocks.existsSync.mockReturnValue(false);\n    mocks.spawnSync.mockReturnValue({ status: 0, error: undefined });\n\n    expect(ensureSshKey()).toBe(KEY);\n\n    expect(mocks.mkdirSync).toHaveBeenCalledWith(\"/home/tester/.enpilink\", {\n      recursive: true,\n      mode: 0o700,\n    });\n    expect(mocks.spawnSync).toHaveBeenCalledWith(\n      \"ssh-keygen\",\n      [\"-t\", \"ed25519\", \"-N\", \"\", \"-f\", KEY, \"-C\", \"enpilink\"],\n      { stdio: \"ignore\" },\n    );\n    expect(mocks.chmodSync).toHaveBeenCalledWith(KEY, 0o600);\n  });\n\n  it(\"throws when ssh-keygen is unavailable (spawn error)\", () => {\n    mocks.existsSync.mockReturnValue(false);\n    const err = new Error(\"spawn ssh-keygen ENOENT\");\n    mocks.spawnSync.mockReturnValue({ status: null, error: err });\n    expect(() => ensureSshKey()).toThrow(\"ENOENT\");\n  });\n\n  it(\"throws when ssh-keygen exits non-zero\", () => {\n    mocks.existsSync.mockReturnValue(false);\n    mocks.spawnSync.mockReturnValue({ status: 1, error: undefined });\n    expect(() => ensureSshKey()).toThrow(/code 1/);\n  });\n});\n"]}

package/dist/cli/header.d.ts

@@ -0,0 +1,4 @@
+export declare const Header: ({ version, children, }: {
+    version: string;
+    children?: React.ReactNode;
+}) => import("react/jsx-runtime").JSX.Element;

package/dist/cli/header.js

@@ -0,0 +1,6 @@
+import { jsxs as _jsxs } from "react/jsx-runtime";
+import { Box, Text } from "ink";
+export const Header = ({ version, children, }) => {
+    return (_jsxs(Box, { marginBottom: 1, children: [_jsxs(Text, { color: "cyan", bold: true, children: ["\u26F0", "  ", "enpilink"] }), _jsxs(Text, { color: "cyan", children: [" v", version] }), children] }));
+};
+//# sourceMappingURL=header.js.map

package/dist/cli/header.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"header.js","sourceRoot":"","sources":["../../src/cli/header.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAEhC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,EACrB,OAAO,EACP,QAAQ,GAIT,EAAE,EAAE;IACH,OAAO,CACL,MAAC,GAAG,IAAC,YAAY,EAAE,CAAC,aAClB,MAAC,IAAI,IAAC,KAAK,EAAC,MAAM,EAAC,IAAI,6BACnB,IAAI,gBACD,EACP,MAAC,IAAI,IAAC,KAAK,EAAC,MAAM,mBAAI,OAAO,IAAQ,EACpC,QAAQ,IACL,CACP,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { Box, Text } from \"ink\";\n\nexport const Header = ({\n  version,\n  children,\n}: {\n  version: string;\n  children?: React.ReactNode;\n}) => {\n  return (\n    <Box marginBottom={1}>\n      <Text color=\"cyan\" bold>\n        ⛰{\"  \"}enpilink\n      </Text>\n      <Text color=\"cyan\"> v{version}</Text>\n      {children}\n    </Box>\n  );\n};\n"]}

package/dist/cli/resolve-views-dir.d.ts

@@ -0,0 +1 @@
+export declare function resolveViewsDir(root: string): Promise<string | undefined>;

package/dist/cli/resolve-views-dir.js

@@ -0,0 +1,17 @@
+export async function resolveViewsDir(root) {
+    const { loadConfigFromFile } = await import("vite");
+    const loaded = await loadConfigFromFile({ command: "build", mode: "production" }, undefined, root);
+    const isPluginCandidate = (value) => typeof value === "object" && value !== null;
+    const plugins = [];
+    const walk = (value) => {
+        if (Array.isArray(value)) {
+            value.forEach(walk);
+        }
+        else if (isPluginCandidate(value)) {
+            plugins.push(value);
+        }
+    };
+    walk(loaded?.config.plugins ?? []);
+    return plugins.find((p) => p.name === "enpilink")?.api?.viewsDir;
+}
+//# sourceMappingURL=resolve-views-dir.js.map

package/dist/cli/resolve-views-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-views-dir.js","sourceRoot":"","sources":["../../src/cli/resolve-views-dir.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY;IAEZ,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EACxC,SAAS,EACT,IAAI,CACL,CAAC;IAEF,MAAM,iBAAiB,GAAG,CACxB,KAAc,EAC2C,EAAE,CAC3D,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;IAE9C,MAAM,OAAO,GAA0D,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE;QAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC;AACnE,CAAC","sourcesContent":["export async function resolveViewsDir(\n  root: string,\n): Promise<string | undefined> {\n  const { loadConfigFromFile } = await import(\"vite\");\n  const loaded = await loadConfigFromFile(\n    { command: \"build\", mode: \"production\" },\n    undefined,\n    root,\n  );\n\n  const isPluginCandidate = (\n    value: unknown,\n  ): value is { name?: string; api?: { viewsDir?: string } } =>\n    typeof value === \"object\" && value !== null;\n\n  const plugins: Array<{ name?: string; api?: { viewsDir?: string } }> = [];\n  const walk = (value: unknown) => {\n    if (Array.isArray(value)) {\n      value.forEach(walk);\n    } else if (isPluginCandidate(value)) {\n      plugins.push(value);\n    }\n  };\n  walk(loaded?.config.plugins ?? []);\n  return plugins.find((p) => p.name === \"enpilink\")?.api?.viewsDir;\n}\n"]}

package/dist/cli/run-command.d.ts

@@ -0,0 +1,2 @@
+import { type SpawnOptions } from "node:child_process";
+export declare function runCommand(command: string, options?: SpawnOptions): Promise<void>;

package/dist/cli/run-command.js

@@ -0,0 +1,43 @@
+import { spawn } from "node:child_process";
+export function runCommand(command, options = {
+    stdio: ["ignore", "inherit", "inherit"],
+}) {
+    return new Promise((resolve, reject) => {
+        const stdoutChunks = [];
+        const stderrChunks = [];
+        const proc = spawn(command, {
+            ...options,
+            shell: true,
+        });
+        if (proc.stdout) {
+            proc.stdout.on("data", (chunk) => {
+                stdoutChunks.push(chunk);
+            });
+        }
+        if (proc.stderr) {
+            proc.stderr.on("data", (chunk) => {
+                stderrChunks.push(chunk);
+            });
+        }
+        proc.on("close", (code) => {
+            if (code === 0) {
+                resolve();
+            }
+            else {
+                const stdoutOutput = Buffer.concat(stdoutChunks).toString();
+                const stderrOutput = Buffer.concat(stderrChunks).toString();
+                const allOutput = [stdoutOutput, stderrOutput]
+                    .filter((output) => output.trim())
+                    .join("\n");
+                const errorMessage = allOutput
+                    ? `Command failed with exit code ${code}\n${allOutput}`
+                    : `Command failed with exit code ${code}`;
+                reject(new Error(errorMessage));
+            }
+        });
+        proc.on("error", (error) => {
+            reject(error);
+        });
+    });
+}
+//# sourceMappingURL=run-command.js.map

package/dist/cli/run-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-command.js","sourceRoot":"","sources":["../../src/cli/run-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,UAAwB;IACtB,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC;CACxC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE;YAC1B,GAAG,OAAO;YACV,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC/B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC/B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC5D,MAAM,SAAS,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;qBAC3C,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;qBACjC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,MAAM,YAAY,GAAG,SAAS;oBAC5B,CAAC,CAAC,iCAAiC,IAAI,KAAK,SAAS,EAAE;oBACvD,CAAC,CAAC,iCAAiC,IAAI,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { type SpawnOptions, spawn } from \"node:child_process\";\n\nexport function runCommand(\n  command: string,\n  options: SpawnOptions = {\n    stdio: [\"ignore\", \"inherit\", \"inherit\"],\n  },\n): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const stdoutChunks: Buffer[] = [];\n    const stderrChunks: Buffer[] = [];\n\n    const proc = spawn(command, {\n      ...options,\n      shell: true,\n    });\n\n    if (proc.stdout) {\n      proc.stdout.on(\"data\", (chunk) => {\n        stdoutChunks.push(chunk);\n      });\n    }\n\n    if (proc.stderr) {\n      proc.stderr.on(\"data\", (chunk) => {\n        stderrChunks.push(chunk);\n      });\n    }\n\n    proc.on(\"close\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        const stdoutOutput = Buffer.concat(stdoutChunks).toString();\n        const stderrOutput = Buffer.concat(stderrChunks).toString();\n        const allOutput = [stdoutOutput, stderrOutput]\n          .filter((output) => output.trim())\n          .join(\"\\n\");\n        const errorMessage = allOutput\n          ? `Command failed with exit code ${code}\\n${allOutput}`\n          : `Command failed with exit code ${code}`;\n        reject(new Error(errorMessage));\n      }\n    });\n\n    proc.on(\"error\", (error) => {\n      reject(error);\n    });\n  });\n}\n"]}

package/dist/cli/telemetry.d.ts

@@ -0,0 +1,14 @@
+import type { Hook } from "@oclif/core";
+/**
+ * Telemetry is removed in enpilink. This module is a no-op stub kept only so
+ * the public API surface (and the oclif `finally` hook) stays stable.
+ *
+ * There is NO network activity, NO hardcoded analytics key, and NO writes to
+ * any global config dir. enpilink never phones home.
+ */
+export declare function isEnabled(): boolean;
+export declare function isDebugMode(): boolean;
+export declare function setEnabled(_enabled: boolean): void;
+export declare function getMachineId(): string;
+declare const hook: Hook<"finally">;
+export default hook;

package/dist/cli/telemetry.js

@@ -0,0 +1,24 @@
+/**
+ * Telemetry is removed in enpilink. This module is a no-op stub kept only so
+ * the public API surface (and the oclif `finally` hook) stays stable.
+ *
+ * There is NO network activity, NO hardcoded analytics key, and NO writes to
+ * any global config dir. enpilink never phones home.
+ */
+export function isEnabled() {
+    return false;
+}
+export function isDebugMode() {
+    return false;
+}
+export function setEnabled(_enabled) {
+    // no-op: enpilink has no telemetry to enable/disable.
+}
+export function getMachineId() {
+    return "telemetry-disabled";
+}
+const hook = async () => {
+    // no-op: enpilink does not collect or send telemetry.
+};
+export default hook;
+//# sourceMappingURL=telemetry.js.map

package/dist/cli/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/cli/telemetry.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,MAAM,UAAU,SAAS;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAiB;IAC1C,sDAAsD;AACxD,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,MAAM,IAAI,GAAoB,KAAK,IAAI,EAAE;IACvC,sDAAsD;AACxD,CAAC,CAAC;AAEF,eAAe,IAAI,CAAC","sourcesContent":["import type { Hook } from \"@oclif/core\";\n\n/**\n * Telemetry is removed in enpilink. This module is a no-op stub kept only so\n * the public API surface (and the oclif `finally` hook) stays stable.\n *\n * There is NO network activity, NO hardcoded analytics key, and NO writes to\n * any global config dir. enpilink never phones home.\n */\n\nexport function isEnabled(): boolean {\n  return false;\n}\n\nexport function isDebugMode(): boolean {\n  return false;\n}\n\nexport function setEnabled(_enabled: boolean): void {\n  // no-op: enpilink has no telemetry to enable/disable.\n}\n\nexport function getMachineId(): string {\n  return \"telemetry-disabled\";\n}\n\nconst hook: Hook<\"finally\"> = async () => {\n  // no-op: enpilink does not collect or send telemetry.\n};\n\nexport default hook;\n"]}

package/dist/cli/tunnel-control-server.d.ts

@@ -0,0 +1,11 @@
+import { type SpawnFn, TunnelManager } from "./tunnel.js";
+import type { TunnelProvider } from "./tunnel-providers/index.js";
+export type TunnelControlServer = {
+    port: number;
+    manager: TunnelManager;
+    close: () => Promise<void>;
+};
+export declare function startTunnelControlServer(getPort: () => number, options?: {
+    spawn?: SpawnFn;
+    provider?: TunnelProvider;
+}): Promise<TunnelControlServer>;

package/dist/cli/tunnel-control-server.js

@@ -0,0 +1,35 @@
+import http from "node:http";
+import { TunnelManager } from "./tunnel.js";
+import { createTunnelHandler } from "./tunnel-handler.js";
+export async function startTunnelControlServer(getPort, options) {
+    const manager = new TunnelManager({
+        getPort,
+        spawn: options?.spawn,
+        provider: options?.provider,
+    });
+    const server = http.createServer(createTunnelHandler(manager));
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", () => {
+            server.off("error", reject);
+            resolve();
+        });
+    });
+    const address = server.address();
+    if (typeof address === "string" || address === null) {
+        server.close();
+        throw new Error("tunnel control server has no address");
+    }
+    return {
+        port: address.port,
+        manager,
+        close: () => new Promise((resolve, reject) => {
+            manager.stop();
+            // Force any in-flight SSE connections to drop so server.close()
+            // doesn't hang indefinitely on subscribers that never end on their own.
+            server.closeAllConnections();
+            server.close((err) => (err ? reject(err) : resolve()));
+        }),
+    };
+}
+//# sourceMappingURL=tunnel-control-server.js.map

package/dist/cli/tunnel-control-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-control-server.js","sourceRoot":"","sources":["../../src/cli/tunnel-control-server.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAgB,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAS1D,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAqB,EACrB,OAAwD;IAExD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,OAAO;QACP,KAAK,EAAE,OAAO,EAAE,KAAK;QACrB,QAAQ,EAAE,OAAO,EAAE,QAAQ;KAC5B,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO;QACP,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,gEAAgE;YAChE,wEAAwE;YACxE,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC;KACL,CAAC;AACJ,CAAC","sourcesContent":["import http from \"node:http\";\nimport { type SpawnFn, TunnelManager } from \"./tunnel.js\";\nimport { createTunnelHandler } from \"./tunnel-handler.js\";\nimport type { TunnelProvider } from \"./tunnel-providers/index.js\";\n\nexport type TunnelControlServer = {\n  port: number;\n  manager: TunnelManager;\n  close: () => Promise<void>;\n};\n\nexport async function startTunnelControlServer(\n  getPort: () => number,\n  options?: { spawn?: SpawnFn; provider?: TunnelProvider },\n): Promise<TunnelControlServer> {\n  const manager = new TunnelManager({\n    getPort,\n    spawn: options?.spawn,\n    provider: options?.provider,\n  });\n  const server = http.createServer(createTunnelHandler(manager));\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(0, \"127.0.0.1\", () => {\n      server.off(\"error\", reject);\n      resolve();\n    });\n  });\n  const address = server.address();\n  if (typeof address === \"string\" || address === null) {\n    server.close();\n    throw new Error(\"tunnel control server has no address\");\n  }\n  return {\n    port: address.port,\n    manager,\n    close: () =>\n      new Promise<void>((resolve, reject) => {\n        manager.stop();\n        // Force any in-flight SSE connections to drop so server.close()\n        // doesn't hang indefinitely on subscribers that never end on their own.\n        server.closeAllConnections();\n        server.close((err) => (err ? reject(err) : resolve()));\n      }),\n  };\n}\n"]}

package/dist/cli/tunnel-control-server.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cli/tunnel-control-server.test.js

@@ -0,0 +1,39 @@
+import { afterEach, describe, expect, it } from "vitest";
+import { startTunnelControlServer } from "./tunnel-control-server.js";
+let openControl;
+afterEach(async () => {
+    await openControl?.close();
+    openControl = undefined;
+});
+describe("startTunnelControlServer", () => {
+    it("listens on a random loopback port and serves /__enpilink/tunnel/events", async () => {
+        const control = await startTunnelControlServer(() => 3000);
+        openControl = control;
+        expect(control.port).toBeGreaterThan(0);
+        const res = await fetch(`http://127.0.0.1:${control.port}/__enpilink/tunnel/events`);
+        expect(res.headers.get("content-type")).toMatch(/text\/event-stream/);
+        const reader = res.body.getReader();
+        const { value } = await reader.read();
+        const chunk = new TextDecoder().decode(value);
+        expect(chunk).toContain("event: state");
+        expect(chunk).toContain('"status":"idle"');
+        await reader.cancel();
+    });
+    it("two concurrent control servers get different ports", async () => {
+        const a = await startTunnelControlServer(() => 3000);
+        const b = await startTunnelControlServer(() => 4000);
+        try {
+            expect(a.port).not.toBe(b.port);
+        }
+        finally {
+            await a.close();
+            await b.close();
+        }
+    });
+    it("close() shuts the listener", async () => {
+        const control = await startTunnelControlServer(() => 3000);
+        await control.close();
+        await expect(fetch(`http://127.0.0.1:${control.port}/__enpilink/tunnel/events`)).rejects.toThrow();
+    });
+});
+//# sourceMappingURL=tunnel-control-server.test.js.map

package/dist/cli/tunnel-control-server.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-control-server.test.js","sourceRoot":"","sources":["../../src/cli/tunnel-control-server.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,IAAI,WAAuD,CAAC;AAC5D,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,WAAW,EAAE,KAAK,EAAE,CAAC;IAC3B,WAAW,GAAG,SAAS,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,WAAW,GAAG,OAAO,CAAC;QAEtB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,oBAAoB,OAAO,CAAC,IAAI,2BAA2B,CAC5D,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAI,GAAG,CAAC,IAAmC,CAAC,SAAS,EAAE,CAAC;QACpE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,CAAC,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,CACV,KAAK,CAAC,oBAAoB,OAAO,CAAC,IAAI,2BAA2B,CAAC,CACnE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { afterEach, describe, expect, it } from \"vitest\";\nimport { startTunnelControlServer } from \"./tunnel-control-server.js\";\n\nlet openControl: { close: () => Promise<void> } | undefined;\nafterEach(async () => {\n  await openControl?.close();\n  openControl = undefined;\n});\n\ndescribe(\"startTunnelControlServer\", () => {\n  it(\"listens on a random loopback port and serves /__enpilink/tunnel/events\", async () => {\n    const control = await startTunnelControlServer(() => 3000);\n    openControl = control;\n\n    expect(control.port).toBeGreaterThan(0);\n\n    const res = await fetch(\n      `http://127.0.0.1:${control.port}/__enpilink/tunnel/events`,\n    );\n    expect(res.headers.get(\"content-type\")).toMatch(/text\\/event-stream/);\n\n    const reader = (res.body as ReadableStream<Uint8Array>).getReader();\n    const { value } = await reader.read();\n    const chunk = new TextDecoder().decode(value);\n    expect(chunk).toContain(\"event: state\");\n    expect(chunk).toContain('\"status\":\"idle\"');\n    await reader.cancel();\n  });\n\n  it(\"two concurrent control servers get different ports\", async () => {\n    const a = await startTunnelControlServer(() => 3000);\n    const b = await startTunnelControlServer(() => 4000);\n    try {\n      expect(a.port).not.toBe(b.port);\n    } finally {\n      await a.close();\n      await b.close();\n    }\n  });\n\n  it(\"close() shuts the listener\", async () => {\n    const control = await startTunnelControlServer(() => 3000);\n    await control.close();\n    await expect(\n      fetch(`http://127.0.0.1:${control.port}/__enpilink/tunnel/events`),\n    ).rejects.toThrow();\n  });\n});\n"]}

package/dist/cli/tunnel-handler.d.ts

@@ -0,0 +1,3 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { TunnelManager } from "./tunnel.js";
+export declare function createTunnelHandler(manager: TunnelManager): (req: IncomingMessage, res: ServerResponse) => void;

package/dist/cli/tunnel-handler.js

@@ -0,0 +1,48 @@
+export function createTunnelHandler(manager) {
+    return (req, res) => {
+        if (req.url === "/__enpilink/tunnel" && req.method === "POST") {
+            manager.start();
+            sendJson(res, 200, manager.getState());
+            return;
+        }
+        if (req.url === "/__enpilink/tunnel" && req.method === "DELETE") {
+            manager.stop();
+            sendJson(res, 200, manager.getState());
+            return;
+        }
+        if (req.url === "/__enpilink/tunnel/events" && req.method === "GET") {
+            writeSseHead(res);
+            writeSse(res, "state", manager.getState());
+            const onState = (s) => {
+                writeSse(res, "state", s);
+            };
+            const onActivity = (a) => {
+                writeSse(res, "activity", a);
+            };
+            manager.on("state", onState);
+            manager.on("activity", onActivity);
+            req.on("close", () => {
+                manager.off("state", onState);
+                manager.off("activity", onActivity);
+            });
+            return;
+        }
+        res.writeHead(404).end();
+    };
+}
+function sendJson(res, status, data) {
+    res.writeHead(status, { "Content-Type": "application/json" });
+    res.end(JSON.stringify(data));
+}
+function writeSseHead(res) {
+    res.writeHead(200, {
+        "Content-Type": "text/event-stream",
+        "Cache-Control": "no-cache, no-transform",
+        Connection: "keep-alive",
+    });
+    res.flushHeaders?.();
+}
+function writeSse(res, event, data) {
+    res.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
+}
+//# sourceMappingURL=tunnel-handler.js.map

package/dist/cli/tunnel-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-handler.js","sourceRoot":"","sources":["../../src/cli/tunnel-handler.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACxD,OAAO,CAAC,GAAoB,EAAE,GAAmB,EAAQ,EAAE;QACzD,IAAI,GAAG,CAAC,GAAG,KAAK,oBAAoB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9D,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,KAAK,oBAAoB,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAChE,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,KAAK,2BAA2B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACpE,YAAY,CAAC,GAAG,CAAC,CAAC;YAClB,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,CAAC,CAAc,EAAE,EAAE;gBACjC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC,CAAC;YACF,MAAM,UAAU,GAAG,CAAC,CAAiB,EAAE,EAAE;gBACvC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;YAC/B,CAAC,CAAC;YACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACnC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,GAAmB;IACvC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,wBAAwB;QACzC,UAAU,EAAE,YAAY;KACzB,CAAC,CAAC;IACH,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,KAAa,EAAE,IAAa;IACjE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { TunnelActivity, TunnelManager, TunnelState } from \"./tunnel.js\";\n\nexport function createTunnelHandler(manager: TunnelManager) {\n  return (req: IncomingMessage, res: ServerResponse): void => {\n    if (req.url === \"/__enpilink/tunnel\" && req.method === \"POST\") {\n      manager.start();\n      sendJson(res, 200, manager.getState());\n      return;\n    }\n    if (req.url === \"/__enpilink/tunnel\" && req.method === \"DELETE\") {\n      manager.stop();\n      sendJson(res, 200, manager.getState());\n      return;\n    }\n    if (req.url === \"/__enpilink/tunnel/events\" && req.method === \"GET\") {\n      writeSseHead(res);\n      writeSse(res, \"state\", manager.getState());\n      const onState = (s: TunnelState) => {\n        writeSse(res, \"state\", s);\n      };\n      const onActivity = (a: TunnelActivity) => {\n        writeSse(res, \"activity\", a);\n      };\n      manager.on(\"state\", onState);\n      manager.on(\"activity\", onActivity);\n      req.on(\"close\", () => {\n        manager.off(\"state\", onState);\n        manager.off(\"activity\", onActivity);\n      });\n      return;\n    }\n    res.writeHead(404).end();\n  };\n}\n\nfunction sendJson(res: ServerResponse, status: number, data: unknown): void {\n  res.writeHead(status, { \"Content-Type\": \"application/json\" });\n  res.end(JSON.stringify(data));\n}\n\nfunction writeSseHead(res: ServerResponse): void {\n  res.writeHead(200, {\n    \"Content-Type\": \"text/event-stream\",\n    \"Cache-Control\": \"no-cache, no-transform\",\n    Connection: \"keep-alive\",\n  });\n  res.flushHeaders?.();\n}\n\nfunction writeSse(res: ServerResponse, event: string, data: unknown): void {\n  res.write(`event: ${event}\\ndata: ${JSON.stringify(data)}\\n\\n`);\n}\n"]}

package/dist/cli/tunnel-handler.test.d.ts

@@ -0,0 +1 @@
+export {};