exposeme 0.1.0

package/README.md

@@ -0,0 +1,27 @@
+# exposeme
+
+Zero-config, P2P localhost tunnel with a 6-digit code UX.
+
+```bash
+npx exposeme 3000
+```
+
+You get a 6-digit code and a shareable link. The person you share it with opens
+the link (or enters the code at [expose.anishroy.com](https://expose.anishroy.com)),
+and your `localhost:3000` streams to their browser over a direct WebRTC data
+channel — no relay servers touching your traffic.
+
+## How it works
+
+- A Cloudflare Worker mints short-lived 6-digit session codes.
+- Firebase Realtime Database carries the WebRTC signaling handshake.
+- The page itself is fetched peer-to-peer: a Service Worker in the viewer's
+  browser forwards requests over the data channel to the CLI, which proxies
+  them to your local server.
+
+## Configuration
+
+None required. For self-hosted deployments, override via environment variables
+(or a `.env` file): `EXPOSEME_API_URL` and `FIREBASE_*` / `VITE_FIREBASE_*`
+web config. See the [repository](https://github.com/iamanishroy/exposeme) for
+details.

package/dist/chunk-VZEPY6PL.js

@@ -0,0 +1,683 @@
+#!/usr/bin/env node
+
+// src/index.ts
+import nodeDataChannel2 from "node-datachannel";
+import { config as loadDotenv } from "dotenv";
+import kleur from "kleur";
+
+// ../signaling/dist/index.js
+import { initializeApp, deleteApp } from "firebase/app";
+import {
+  getDatabase,
+  ref,
+  set,
+  get,
+  push,
+  onValue,
+  onChildAdded,
+  remove,
+  off
+} from "firebase/database";
+
+// ../shared/dist/index.js
+var CODE_LENGTH = 6;
+var CODE_REGEX = new RegExp(`^\\d{${CODE_LENGTH}}$`);
+var CODE_TTL_MS = 30 * 60 * 1e3;
+var CHUNK_SIZE = 12 * 1024;
+var STUN_SERVERS = [
+  "stun:stun.l.google.com:19302",
+  "stun:stun1.l.google.com:19302"
+];
+var DATA_CHANNEL_LABEL = "exposeme";
+var sessionPath = (code) => `sessions/${code}`;
+var hostOfferPath = (code) => `sessions/${code}/host/offer`;
+var hostCandidatesPath = (code) => `sessions/${code}/host/candidates`;
+var viewerAnswerPath = (code) => `sessions/${code}/viewer/answer`;
+var viewerCandidatesPath = (code) => `sessions/${code}/viewer/candidates`;
+var encode = (msg) => JSON.stringify(msg);
+var decode = (raw) => JSON.parse(raw);
+var toBase64 = (bytes) => {
+  if (typeof Buffer !== "undefined") {
+    return Buffer.from(bytes).toString("base64");
+  }
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) {
+    binary += String.fromCharCode(bytes[i]);
+  }
+  return btoa(binary);
+};
+var fromBase64 = (b64) => {
+  if (typeof Buffer !== "undefined") {
+    return new Uint8Array(Buffer.from(b64, "base64"));
+  }
+  const binary = atob(b64);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return bytes;
+};
+function chunkBody(id, kind, body) {
+  const t = kind === "req" ? "req_chunk" : "res_chunk";
+  const chunks = [];
+  let seq = 0;
+  for (let offset = 0; offset < body.length; offset += CHUNK_SIZE) {
+    const slice = body.subarray(offset, offset + CHUNK_SIZE);
+    chunks.push({ t, id, seq: seq++, dataB64: toBase64(slice) });
+  }
+  return chunks;
+}
+var ChunkAssembler = class {
+  parts = /* @__PURE__ */ new Map();
+  push(seq, dataB64) {
+    this.parts.set(seq, fromBase64(dataB64));
+  }
+  concat() {
+    const ordered = [...this.parts.entries()].sort((a, b) => a[0] - b[0]).map(([, v]) => v);
+    const total = ordered.reduce((n, p) => n + p.length, 0);
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const part of ordered) {
+      out.set(part, offset);
+      offset += part.length;
+    }
+    return out;
+  }
+};
+
+// ../signaling/dist/index.js
+var appCounter = 0;
+function createSignalingClient(config) {
+  const app = initializeApp(config, `exposeme-${appCounter++}`);
+  const db = getDatabase(app);
+  return {
+    db,
+    app,
+    session: (code) => new FirebaseSignalingSession(db, code),
+    destroy: () => deleteApp(app)
+  };
+}
+var FirebaseSignalingSession = class {
+  constructor(db, code) {
+    this.db = db;
+    this.code = code;
+  }
+  db;
+  code;
+  unsubs = [];
+  // ── Host role ────────────────────────────────────────────────────────────
+  async writeOffer(offer) {
+    await set(ref(this.db, hostOfferPath(this.code)), offer);
+  }
+  async pushHostCandidate(candidate) {
+    await push(ref(this.db, hostCandidatesPath(this.code)), candidate);
+  }
+  onAnswer(cb) {
+    const r = ref(this.db, viewerAnswerPath(this.code));
+    const handler = onValue(r, (snap) => {
+      const val = snap.val();
+      if (val) cb(val);
+    });
+    const unsub = () => off(r, "value", handler);
+    this.unsubs.push(unsub);
+    return unsub;
+  }
+  onViewerCandidate(cb) {
+    return this.subscribeCandidates(viewerCandidatesPath(this.code), cb);
+  }
+  // ── Viewer role ──────────────────────────────────────────────────────────
+  async readOffer() {
+    const snap = await get(ref(this.db, hostOfferPath(this.code)));
+    return snap.val() ?? null;
+  }
+  async writeAnswer(answer) {
+    await set(ref(this.db, viewerAnswerPath(this.code)), answer);
+  }
+  async pushViewerCandidate(candidate) {
+    await push(ref(this.db, viewerCandidatesPath(this.code)), candidate);
+  }
+  onHostCandidate(cb) {
+    return this.subscribeCandidates(hostCandidatesPath(this.code), cb);
+  }
+  // ── Shared ───────────────────────────────────────────────────────────────
+  subscribeCandidates(path, cb) {
+    const r = ref(this.db, path);
+    const handler = onChildAdded(r, (snap) => {
+      const val = snap.val();
+      if (val) cb(val);
+    });
+    const unsub = () => off(r, "child_added", handler);
+    this.unsubs.push(unsub);
+    return unsub;
+  }
+  async cleanup() {
+    for (const unsub of this.unsubs.splice(0)) unsub();
+    await remove(ref(this.db, sessionPath(this.code)));
+  }
+};
+function firebaseConfigFromEnv(env, prefix = "FIREBASE_") {
+  const get2 = (k) => {
+    const v = env[`${prefix}${k}`];
+    if (!v) {
+      throw new Error(
+        `Missing Firebase config env var ${prefix}${k}. See .env.example.`
+      );
+    }
+    return v;
+  };
+  return {
+    apiKey: get2("API_KEY"),
+    authDomain: get2("AUTH_DOMAIN"),
+    databaseURL: get2("DATABASE_URL"),
+    projectId: get2("PROJECT_ID"),
+    appId: get2("APP_ID")
+  };
+}
+
+// src/api.ts
+var WorkerApi = class {
+  constructor(baseUrl) {
+    this.baseUrl = baseUrl;
+    this.baseUrl = baseUrl.replace(/\/$/, "");
+  }
+  baseUrl;
+  /** POST /api/sessions — mint a code + session. */
+  async createSession() {
+    const res = await fetch(`${this.baseUrl}/api/sessions`, { method: "POST" });
+    if (!res.ok) {
+      throw new Error(
+        `Failed to create session (${res.status}): ${await res.text()}`
+      );
+    }
+    return await res.json();
+  }
+  /** DELETE /api/sessions/:code — release the code early. Best-effort. */
+  async releaseSession(code, sessionId) {
+    const url = `${this.baseUrl}/api/sessions/${code}?sessionId=${encodeURIComponent(
+      sessionId
+    )}`;
+    await fetch(url, { method: "DELETE" }).catch(() => {
+    });
+  }
+};
+
+// src/cookies.ts
+var CookieJar = class {
+  cookies = /* @__PURE__ */ new Map();
+  /** Record cookies from a response's `Set-Cookie` header values. */
+  store(setCookieValues, now = Date.now()) {
+    for (const raw of setCookieValues) {
+      const parsed = parseSetCookie(raw);
+      if (!parsed) continue;
+      if (parsed.expires !== void 0 && parsed.expires <= now) {
+        this.cookies.delete(parsed.name);
+        continue;
+      }
+      this.cookies.set(parsed.name, {
+        value: parsed.value,
+        path: parsed.path,
+        expires: parsed.expires
+      });
+    }
+  }
+  /** Build a `Cookie` header value for a request path, or null if none apply. */
+  header(requestPath, now = Date.now()) {
+    const pairs = [];
+    for (const [name, c] of this.cookies) {
+      if (c.expires !== void 0 && c.expires <= now) {
+        this.cookies.delete(name);
+        continue;
+      }
+      if (pathMatches(requestPath, c.path)) pairs.push(`${name}=${c.value}`);
+    }
+    return pairs.length ? pairs.join("; ") : null;
+  }
+  /** Number of live cookies (for tests/introspection). */
+  get size() {
+    return this.cookies.size;
+  }
+};
+function pathMatches(requestPath, cookiePath) {
+  if (cookiePath === "/" || cookiePath === "") return true;
+  const reqPath = requestPath.split("?")[0] ?? "/";
+  if (reqPath === cookiePath) return true;
+  return reqPath.startsWith(cookiePath) && (cookiePath.endsWith("/") || reqPath[cookiePath.length] === "/");
+}
+function parseSetCookie(raw) {
+  const parts = raw.split(";");
+  const first = parts[0]?.trim() ?? "";
+  const eq = first.indexOf("=");
+  if (eq <= 0) return null;
+  const name = first.slice(0, eq).trim();
+  const value = first.slice(eq + 1).trim();
+  let path = "/";
+  let expires;
+  let maxAge;
+  for (let i = 1; i < parts.length; i++) {
+    const attr = parts[i].trim();
+    const aEq = attr.indexOf("=");
+    const key = (aEq === -1 ? attr : attr.slice(0, aEq)).toLowerCase();
+    const val = aEq === -1 ? "" : attr.slice(aEq + 1).trim();
+    if (key === "path") path = val || "/";
+    else if (key === "expires") {
+      const t = Date.parse(val);
+      if (!Number.isNaN(t)) expires = t;
+    } else if (key === "max-age") {
+      const n = Number(val);
+      if (!Number.isNaN(n)) maxAge = n;
+    }
+  }
+  if (maxAge !== void 0) {
+    expires = Date.now() + maxAge * 1e3;
+  }
+  return { name, value, path, expires };
+}
+
+// src/peer.ts
+import nodeDataChannel from "node-datachannel";
+var { PeerConnection } = nodeDataChannel;
+var DEFAULT_TIMEOUT = 3e4;
+function connectHost(signaling, opts = {}) {
+  return new Promise((resolve, reject) => {
+    const pc = new PeerConnection("exposeme-host", {
+      iceServers: opts.iceServers ?? STUN_SERVERS
+    });
+    const pending = new PendingCandidates(pc);
+    pc.onLocalDescription((sdp, type) => {
+      void signaling.writeOffer({ type, sdp });
+    });
+    pc.onLocalCandidate((candidate, mid) => {
+      void signaling.pushHostCandidate({ candidate, sdpMid: mid });
+    });
+    let answerApplied = false;
+    signaling.onAnswer((answer) => {
+      if (answerApplied) return;
+      answerApplied = true;
+      try {
+        pc.setRemoteDescription(answer.sdp, answer.type);
+        pending.flush();
+      } catch (err) {
+        reject(err instanceof Error ? err : new Error(String(err)));
+      }
+    });
+    signaling.onViewerCandidate((c) => pending.add(c));
+    const dc = pc.createDataChannel(DATA_CHANNEL_LABEL);
+    finishOnOpen(pc, dc, opts, resolve, reject);
+  });
+}
+function connectViewer(signaling, opts = {}) {
+  return new Promise((resolve, reject) => {
+    const pc = new PeerConnection("exposeme-viewer", {
+      iceServers: opts.iceServers ?? STUN_SERVERS
+    });
+    const pending = new PendingCandidates(pc);
+    let dc;
+    pc.onLocalDescription((sdp, type) => {
+      void signaling.writeAnswer({ type, sdp });
+    });
+    pc.onLocalCandidate((candidate, mid) => {
+      void signaling.pushViewerCandidate({ candidate, sdpMid: mid });
+    });
+    pc.onDataChannel((incoming) => {
+      dc = incoming;
+      finishOnOpen(pc, incoming, opts, resolve, reject);
+    });
+    signaling.onHostCandidate((c) => pending.add(c));
+    void pollForOffer(signaling).then((offer) => {
+      pc.setRemoteDescription(offer.sdp, offer.type);
+      pending.flush();
+    }).catch(reject);
+    if (opts.timeoutMs !== 0) {
+      const t = setTimeout(() => {
+        if (!dc) reject(new Error("Timed out waiting for data channel"));
+      }, opts.timeoutMs ?? DEFAULT_TIMEOUT);
+      t.unref?.();
+    }
+  });
+}
+async function pollForOffer(signaling, attempts = 40, intervalMs = 250) {
+  for (let i = 0; i < attempts; i++) {
+    const offer = await signaling.readOffer();
+    if (offer) return offer;
+    await delay(intervalMs);
+  }
+  throw new Error("Host offer not found");
+}
+var delay = (ms) => new Promise((r) => setTimeout(r, ms));
+var PendingCandidates = class {
+  constructor(pc) {
+    this.pc = pc;
+  }
+  pc;
+  queue = [];
+  ready = false;
+  add(c) {
+    if (this.ready) this.apply(c);
+    else this.queue.push(c);
+  }
+  flush() {
+    this.ready = true;
+    for (const c of this.queue.splice(0)) this.apply(c);
+  }
+  apply(c) {
+    try {
+      this.pc.addRemoteCandidate(c.candidate, c.sdpMid ?? "0");
+    } catch {
+    }
+  }
+};
+function finishOnOpen(pc, dc, opts, resolve, reject) {
+  const handle = {
+    pc,
+    dc,
+    close() {
+      try {
+        dc.close();
+      } catch {
+      }
+      try {
+        pc.close();
+      } catch {
+      }
+    }
+  };
+  let settled = false;
+  const timer = opts.timeoutMs === 0 ? void 0 : setTimeout(() => {
+    if (!settled) {
+      settled = true;
+      reject(new Error("Timed out waiting for data channel to open"));
+    }
+  }, opts.timeoutMs ?? DEFAULT_TIMEOUT);
+  timer?.unref?.();
+  if (dc.isOpen()) {
+    settled = true;
+    if (timer) clearTimeout(timer);
+    resolve(handle);
+    return;
+  }
+  dc.onOpen(() => {
+    if (settled) return;
+    settled = true;
+    if (timer) clearTimeout(timer);
+    resolve(handle);
+  });
+}
+
+// src/proxy.ts
+import http from "http";
+var HOP_BY_HOP = /* @__PURE__ */ new Set([
+  "connection",
+  "keep-alive",
+  "proxy-authenticate",
+  "proxy-authorization",
+  "te",
+  "trailer",
+  "transfer-encoding",
+  "upgrade"
+]);
+function proxyRequest(port, req, cookieHeader) {
+  return new Promise((resolve, reject) => {
+    const outHeaders = {};
+    for (const [k, v] of req.headers) {
+      const lk = k.toLowerCase();
+      if (HOP_BY_HOP.has(lk)) continue;
+      if (lk === "host") continue;
+      if (lk === "accept-encoding") continue;
+      if (lk === "cookie") continue;
+      const existing = outHeaders[lk];
+      if (existing === void 0) outHeaders[lk] = v;
+      else if (Array.isArray(existing)) existing.push(v);
+      else outHeaders[lk] = [existing, v];
+    }
+    outHeaders["host"] = `localhost:${port}`;
+    if (cookieHeader) outHeaders["cookie"] = cookieHeader;
+    const attempt = (host, fallback) => {
+      const request = http.request(
+        {
+          host,
+          port,
+          method: req.method,
+          path: req.url,
+          headers: outHeaders
+        },
+        (res) => {
+          const chunks = [];
+          res.on("data", (c) => chunks.push(c));
+          res.on("end", () => {
+            const { headers, setCookies } = splitResponseHeaders(
+              res.rawHeaders
+            );
+            resolve({
+              status: res.statusCode ?? 502,
+              statusText: res.statusMessage ?? "",
+              headers,
+              body: new Uint8Array(Buffer.concat(chunks)),
+              setCookies
+            });
+          });
+        }
+      );
+      request.on("error", (err) => {
+        if (fallback && err.code === "ECONNREFUSED") attempt(fallback);
+        else reject(err);
+      });
+      if (req.body.length > 0) request.write(Buffer.from(req.body));
+      request.end();
+    };
+    attempt("127.0.0.1", "::1");
+  });
+}
+function splitResponseHeaders(rawHeaders) {
+  const headers = [];
+  const setCookies = [];
+  for (let i = 0; i < rawHeaders.length; i += 2) {
+    const name = rawHeaders[i];
+    const value = rawHeaders[i + 1] ?? "";
+    const lower = name.toLowerCase();
+    if (lower === "set-cookie") {
+      setCookies.push(value);
+      continue;
+    }
+    if (HOP_BY_HOP.has(lower)) continue;
+    if (lower === "content-length") continue;
+    headers.push([name, value]);
+  }
+  return { headers, setCookies };
+}
+
+// src/tunnel.ts
+var BUFFER_HIGH_WATER = 1024 * 1024;
+function serveTunnel(dc, port, jar) {
+  const stats = { requestCount: 0 };
+  const inflight = /* @__PURE__ */ new Map();
+  const lowSignal = new BufferedAmountSignal(dc);
+  dc.onMessage((raw) => {
+    const text = typeof raw === "string" ? raw : bufferToString(raw);
+    let msg;
+    try {
+      msg = decode(text);
+    } catch {
+      return;
+    }
+    handleMessage(msg);
+  });
+  function handleMessage(msg) {
+    switch (msg.t) {
+      case "req_head":
+        inflight.set(msg.id, {
+          method: msg.method,
+          url: msg.url,
+          headers: msg.headers,
+          body: new ChunkAssembler()
+        });
+        break;
+      case "req_chunk": {
+        inflight.get(msg.id)?.body.push(msg.seq, msg.dataB64);
+        break;
+      }
+      case "req_end": {
+        const req = inflight.get(msg.id);
+        if (!req) return;
+        inflight.delete(msg.id);
+        void complete(msg.id, req);
+        break;
+      }
+      default:
+        break;
+    }
+  }
+  async function complete(id, req) {
+    try {
+      const cookieHeader = jar.header(req.url);
+      const res = await proxyRequest(
+        port,
+        {
+          method: req.method,
+          url: req.url,
+          headers: req.headers,
+          body: req.body.concat()
+        },
+        cookieHeader
+      );
+      jar.store(res.setCookies);
+      stats.requestCount++;
+      await send({
+        t: "res_head",
+        id,
+        status: res.status,
+        statusText: res.statusText,
+        headers: res.headers
+      });
+      for (const chunk of chunkBody(id, "res", res.body)) {
+        await send(chunk);
+      }
+      await send({ t: "res_end", id });
+    } catch (err) {
+      await send({
+        t: "res_err",
+        id,
+        message: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+  async function send(msg) {
+    await lowSignal.awaitDrain();
+    if (dc.isOpen()) dc.sendMessage(encode(msg));
+  }
+  return stats;
+}
+var BufferedAmountSignal = class {
+  constructor(dc) {
+    this.dc = dc;
+    if (dc.setBufferedAmountLowThreshold && dc.onBufferedAmountLow) {
+      dc.setBufferedAmountLowThreshold(BUFFER_HIGH_WATER / 2);
+      dc.onBufferedAmountLow(() => {
+        for (const w of this.waiters.splice(0)) w();
+      });
+    }
+  }
+  dc;
+  waiters = [];
+  awaitDrain() {
+    const buffered = this.dc.bufferedAmount?.() ?? 0;
+    if (buffered < BUFFER_HIGH_WATER) return Promise.resolve();
+    return new Promise((resolve) => this.waiters.push(resolve));
+  }
+};
+function bufferToString(buf) {
+  if (buf instanceof ArrayBuffer) return Buffer.from(buf).toString("utf-8");
+  return buf.toString("utf-8");
+}
+
+// src/index.ts
+var DEFAULT_API_URL = "https://expose-api.anishroy.com";
+var DEFAULT_FIREBASE_CONFIG = {
+  apiKey: "AIzaSyA2YgT7R1gNlJhtp3mW-Sx4BOMEJPDYJgA",
+  authDomain: "exposeme-230a6.firebaseapp.com",
+  databaseURL: "https://exposeme-230a6-default-rtdb.firebaseio.com",
+  projectId: "exposeme-230a6",
+  appId: "1:242575918594:web:8a62140d71bc63d49d891b"
+};
+function readCliConfig(env) {
+  return { apiUrl: env.EXPOSEME_API_URL ?? DEFAULT_API_URL };
+}
+function parseArgs(argv) {
+  const positional = argv.filter((a) => !a.startsWith("-"));
+  const portStr = positional[0];
+  if (!portStr) throw new Error("Usage: npx exposeme <port>");
+  const port = Number(portStr);
+  if (!Number.isInteger(port) || port < 1 || port > 65535) {
+    throw new Error(`Invalid port: ${portStr}`);
+  }
+  return { port };
+}
+var label = {
+  waiting: kleur.yellow("\u25CF waiting"),
+  connected: kleur.green("\u25CF connected"),
+  disconnected: kleur.red("\u25CF disconnected")
+};
+async function run(opts) {
+  const env = opts.env ?? process.env;
+  loadDotenv();
+  const { apiUrl } = readCliConfig(env);
+  const firebasePrefix = env.FIREBASE_API_KEY ? "FIREBASE_" : env.VITE_FIREBASE_API_KEY ? "VITE_FIREBASE_" : null;
+  const firebaseConfig = firebasePrefix ? firebaseConfigFromEnv(env, firebasePrefix) : DEFAULT_FIREBASE_CONFIG;
+  const api = new WorkerApi(apiUrl);
+  const jar = new CookieJar();
+  console.log(kleur.bold("\n  ExposeMe") + kleur.dim(`  \u2192  tunneling localhost:${opts.port}
+`));
+  const session = await api.createSession();
+  const client = createSignalingClient(firebaseConfig);
+  const signaling = client.session(session.code);
+  printCode(session.code, session.viewerUrl);
+  console.log(`  status   ${label.waiting}
+`);
+  let cleanedUp = false;
+  const cleanup = async () => {
+    if (cleanedUp) return;
+    cleanedUp = true;
+    try {
+      handle?.close();
+    } catch {
+    }
+    await signaling.cleanup().catch(() => {
+    });
+    await api.releaseSession(session.code, session.sessionId);
+    await client.destroy().catch(() => {
+    });
+    nodeDataChannel2.cleanup();
+  };
+  process.on("SIGINT", () => {
+    console.log(kleur.dim("\n  releasing code and cleaning up\u2026"));
+    void cleanup().then(() => process.exit(0));
+  });
+  let handle;
+  handle = await connectHost(signaling);
+  console.log(`  status   ${label.connected}
+`);
+  serveTunnel(handle.dc, opts.port, jar);
+  handle.dc.onClosed(() => {
+    console.log(`  status   ${label.disconnected}
+`);
+  });
+  await new Promise(() => {
+  });
+}
+function printCode(code, viewerUrl) {
+  console.log(`  code     ${kleur.bold().cyan(code)}`);
+  console.log(`  share    ${kleur.underline(viewerUrl)}
+`);
+}
+
+export {
+  WorkerApi,
+  CookieJar,
+  parseSetCookie,
+  connectHost,
+  connectViewer,
+  proxyRequest,
+  serveTunnel,
+  parseArgs,
+  run
+};
+//# sourceMappingURL=chunk-VZEPY6PL.js.map

package/dist/chunk-VZEPY6PL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../../signaling/src/firebase.ts","../../signaling/src/config.ts","../../shared/src/constants.ts","../../shared/src/paths.ts","../../shared/src/protocol.ts","../../shared/src/code.ts","../src/api.ts","../src/cookies.ts","../src/peer.ts","../src/proxy.ts","../src/tunnel.ts"],"sourcesContent":["import nodeDataChannel from \"node-datachannel\";\nimport { config as loadDotenv } from \"dotenv\";\nimport kleur from \"kleur\";\nimport {\n  createSignalingClient,\n  firebaseConfigFromEnv,\n  type FirebaseConfig,\n  type SignalingSession,\n} from \"@exposeme/signaling\";\nimport { WorkerApi } from \"./api.js\";\nimport { CookieJar } from \"./cookies.js\";\nimport { connectHost } from \"./peer.js\";\nimport { serveTunnel } from \"./tunnel.js\";\n\nexport { WorkerApi } from \"./api.js\";\nexport { CookieJar, parseSetCookie } from \"./cookies.js\";\nexport { connectHost, connectViewer } from \"./peer.js\";\nexport { serveTunnel, type DataChannelLike } from \"./tunnel.js\";\nexport { proxyRequest } from \"./proxy.js\";\n\nexport interface RunOptions {\n  port: number;\n  env?: NodeJS.ProcessEnv;\n}\n\ninterface CliConfig {\n  apiUrl: string;\n}\n\n// Production defaults so the published CLI is zero-config; env vars override.\n// The Firebase web config is not secret — RTDB access is gated by security\n// rules + the 6-digit code, not by hiding these values.\nconst DEFAULT_API_URL = \"https://expose-api.anishroy.com\";\nconst DEFAULT_FIREBASE_CONFIG: FirebaseConfig = {\n  apiKey: \"AIzaSyA2YgT7R1gNlJhtp3mW-Sx4BOMEJPDYJgA\",\n  authDomain: \"exposeme-230a6.firebaseapp.com\",\n  databaseURL: \"https://exposeme-230a6-default-rtdb.firebaseio.com\",\n  projectId: \"exposeme-230a6\",\n  appId: \"1:242575918594:web:8a62140d71bc63d49d891b\",\n};\n\nfunction readCliConfig(env: NodeJS.ProcessEnv): CliConfig {\n  return { apiUrl: env.EXPOSEME_API_URL ?? DEFAULT_API_URL };\n}\n\n/** Parse `exposeme <port>` argv into a port number. */\nexport function parseArgs(argv: string[]): { port: number } {\n  const positional = argv.filter((a) => !a.startsWith(\"-\"));\n  const portStr = positional[0];\n  if (!portStr) throw new Error(\"Usage: npx exposeme <port>\");\n  const port = Number(portStr);\n  if (!Number.isInteger(port) || port < 1 || port > 65535) {\n    throw new Error(`Invalid port: ${portStr}`);\n  }\n  return { port };\n}\n\nconst label = {\n  waiting: kleur.yellow(\"● waiting\"),\n  connected: kleur.green(\"● connected\"),\n  disconnected: kleur.red(\"● disconnected\"),\n};\n\n/**\n * Run the tunnel host: mint a code, publish signaling, accept a viewer, and\n * proxy its requests to localhost:<port>. Resolves when the process is asked to\n * stop; wires SIGINT for graceful cleanup.\n */\nexport async function run(opts: RunOptions): Promise<void> {\n  const env = opts.env ?? process.env;\n  loadDotenv();\n  const { apiUrl } = readCliConfig(env);\n  // .env is shared with the viewer, which needs VITE_-prefixed vars; accept\n  // either spelling so one file works for both, else fall back to prod config.\n  const firebasePrefix = env.FIREBASE_API_KEY\n    ? \"FIREBASE_\"\n    : env.VITE_FIREBASE_API_KEY\n      ? \"VITE_FIREBASE_\"\n      : null;\n  const firebaseConfig = firebasePrefix\n    ? firebaseConfigFromEnv(env, firebasePrefix)\n    : DEFAULT_FIREBASE_CONFIG;\n\n  const api = new WorkerApi(apiUrl);\n  const jar = new CookieJar();\n\n  console.log(kleur.bold(\"\\n  ExposeMe\") + kleur.dim(`  →  tunneling localhost:${opts.port}\\n`));\n\n  const session = await api.createSession();\n  const client = createSignalingClient(firebaseConfig);\n  const signaling: SignalingSession = client.session(session.code);\n\n  printCode(session.code, session.viewerUrl);\n  console.log(`  status   ${label.waiting}\\n`);\n\n  let cleanedUp = false;\n  const cleanup = async (): Promise<void> => {\n    if (cleanedUp) return;\n    cleanedUp = true;\n    try {\n      handle?.close();\n    } catch {\n      /* noop */\n    }\n    await signaling.cleanup().catch(() => {});\n    await api.releaseSession(session.code, session.sessionId);\n    await client.destroy().catch(() => {});\n    nodeDataChannel.cleanup();\n  };\n\n  process.on(\"SIGINT\", () => {\n    console.log(kleur.dim(\"\\n  releasing code and cleaning up…\"));\n    void cleanup().then(() => process.exit(0));\n  });\n\n  let handle: Awaited<ReturnType<typeof connectHost>> | undefined;\n  handle = await connectHost(signaling);\n\n  console.log(`  status   ${label.connected}\\n`);\n  serveTunnel(handle.dc, opts.port, jar);\n\n  handle.dc.onClosed(() => {\n    console.log(`  status   ${label.disconnected}\\n`);\n  });\n\n  // Keep the process alive until SIGINT.\n  await new Promise<void>(() => {});\n}\n\nfunction printCode(code: string, viewerUrl: string): void {\n  console.log(`  code     ${kleur.bold().cyan(code)}`);\n  console.log(`  share    ${kleur.underline(viewerUrl)}\\n`);\n}\n","import { initializeApp, deleteApp, type FirebaseApp } from \"firebase/app\";\nimport {\n  getDatabase,\n  ref,\n  set,\n  get,\n  push,\n  onValue,\n  onChildAdded,\n  remove,\n  off,\n  type Database,\n} from \"firebase/database\";\nimport {\n  hostCandidatesPath,\n  hostOfferPath,\n  sessionPath,\n  viewerAnswerPath,\n  viewerCandidatesPath,\n  type IceCandidateInit,\n  type SessionDescriptionInit,\n} from \"@exposeme/shared\";\nimport type { FirebaseConfig, SignalingSession, Unsubscribe } from \"./types.js\";\n\nlet appCounter = 0;\n\n/** Initialize a Firebase app + RTDB handle from config. */\nexport function createSignalingClient(config: FirebaseConfig): {\n  db: Database;\n  app: FirebaseApp;\n  /** Bind a signaling session to a code. */\n  session(code: string): SignalingSession;\n  /** Tear down the underlying Firebase app. */\n  destroy(): Promise<void>;\n} {\n  // Unique name lets a single process (e.g. the loopback harness) hold more\n  // than one app without collision.\n  const app = initializeApp(config, `exposeme-${appCounter++}`);\n  const db = getDatabase(app);\n\n  return {\n    db,\n    app,\n    session: (code) => new FirebaseSignalingSession(db, code),\n    destroy: () => deleteApp(app),\n  };\n}\n\nclass FirebaseSignalingSession implements SignalingSession {\n  private unsubs: Unsubscribe[] = [];\n\n  constructor(\n    private readonly db: Database,\n    public readonly code: string\n  ) {}\n\n  // ── Host role ────────────────────────────────────────────────────────────\n\n  async writeOffer(offer: SessionDescriptionInit): Promise<void> {\n    await set(ref(this.db, hostOfferPath(this.code)), offer);\n  }\n\n  async pushHostCandidate(candidate: IceCandidateInit): Promise<void> {\n    await push(ref(this.db, hostCandidatesPath(this.code)), candidate);\n  }\n\n  onAnswer(cb: (answer: SessionDescriptionInit) => void): Unsubscribe {\n    const r = ref(this.db, viewerAnswerPath(this.code));\n    const handler = onValue(r, (snap) => {\n      const val = snap.val() as SessionDescriptionInit | null;\n      if (val) cb(val);\n    });\n    const unsub = () => off(r, \"value\", handler);\n    this.unsubs.push(unsub);\n    return unsub;\n  }\n\n  onViewerCandidate(cb: (candidate: IceCandidateInit) => void): Unsubscribe {\n    return this.subscribeCandidates(viewerCandidatesPath(this.code), cb);\n  }\n\n  // ── Viewer role ──────────────────────────────────────────────────────────\n\n  async readOffer(): Promise<SessionDescriptionInit | null> {\n    const snap = await get(ref(this.db, hostOfferPath(this.code)));\n    return (snap.val() as SessionDescriptionInit | null) ?? null;\n  }\n\n  async writeAnswer(answer: SessionDescriptionInit): Promise<void> {\n    await set(ref(this.db, viewerAnswerPath(this.code)), answer);\n  }\n\n  async pushViewerCandidate(candidate: IceCandidateInit): Promise<void> {\n    await push(ref(this.db, viewerCandidatesPath(this.code)), candidate);\n  }\n\n  onHostCandidate(cb: (candidate: IceCandidateInit) => void): Unsubscribe {\n    return this.subscribeCandidates(hostCandidatesPath(this.code), cb);\n  }\n\n  // ── Shared ───────────────────────────────────────────────────────────────\n\n  private subscribeCandidates(\n    path: string,\n    cb: (candidate: IceCandidateInit) => void\n  ): Unsubscribe {\n    const r = ref(this.db, path);\n    const handler = onChildAdded(r, (snap) => {\n      const val = snap.val() as IceCandidateInit | null;\n      if (val) cb(val);\n    });\n    const unsub = () => off(r, \"child_added\", handler);\n    this.unsubs.push(unsub);\n    return unsub;\n  }\n\n  async cleanup(): Promise<void> {\n    for (const unsub of this.unsubs.splice(0)) unsub();\n    await remove(ref(this.db, sessionPath(this.code)));\n  }\n}\n","import type { FirebaseConfig } from \"./types.js\";\n\n/**\n * Build a FirebaseConfig from a record of env vars. Works for both the CLI\n * (process.env, FIREBASE_* keys) and the viewer (import.meta.env, VITE_FIREBASE_*\n * keys) — pass the appropriate source and prefix.\n */\nexport function firebaseConfigFromEnv(\n  env: Record<string, string | undefined>,\n  prefix = \"FIREBASE_\"\n): FirebaseConfig {\n  const get = (k: string): string => {\n    const v = env[`${prefix}${k}`];\n    if (!v) {\n      throw new Error(\n        `Missing Firebase config env var ${prefix}${k}. See .env.example.`\n      );\n    }\n    return v;\n  };\n  return {\n    apiKey: get(\"API_KEY\"),\n    authDomain: get(\"AUTH_DOMAIN\"),\n    databaseURL: get(\"DATABASE_URL\"),\n    projectId: get(\"PROJECT_ID\"),\n    appId: get(\"APP_ID\"),\n  };\n}\n","/** Number of digits in an ExposeMe session code. */\nexport const CODE_LENGTH = 6;\n\n/** Regex a valid code must match (exactly CODE_LENGTH digits). */\nexport const CODE_REGEX = new RegExp(`^\\\\d{${CODE_LENGTH}}$`);\n\n/** Default lifetime of a session code before it expires (ms). 30 minutes. */\nexport const CODE_TTL_MS = 30 * 60 * 1000;\n\n/**\n * Max size (bytes) of a single raw body chunk before base64 encoding.\n * Kept well under the ~16 KiB safe SCTP message size so the base64-expanded\n * envelope still fits comfortably inside one data-channel message.\n */\nexport const CHUNK_SIZE = 12 * 1024;\n\n/** Public STUN servers used for ICE. TURN is intentionally omitted for v1. */\nexport const STUN_SERVERS = [\n  \"stun:stun.l.google.com:19302\",\n  \"stun:stun1.l.google.com:19302\",\n];\n\n/** Label used for the single application data channel. */\nexport const DATA_CHANNEL_LABEL = \"exposeme\";\n","/**\n * RTDB path helpers. All signaling state for a session lives under\n * `/sessions/{code}`. The host writes under `host/`, the viewer under `viewer/`.\n */\n\nexport const sessionPath = (code: string) => `sessions/${code}`;\n\nexport const hostOfferPath = (code: string) => `sessions/${code}/host/offer`;\nexport const hostCandidatesPath = (code: string) =>\n  `sessions/${code}/host/candidates`;\n\nexport const viewerAnswerPath = (code: string) =>\n  `sessions/${code}/viewer/answer`;\nexport const viewerCandidatesPath = (code: string) =>\n  `sessions/${code}/viewer/candidates`;\n","import { CHUNK_SIZE } from \"./constants.js\";\nimport type { HeaderList } from \"./types.js\";\n\n/**\n * Data-channel wire protocol. Every message is a JSON envelope with a\n * discriminant `t`. A single HTTP exchange is a stream of messages sharing an\n * `id`: a HEAD, zero or more CHUNKs, then an END (or an ERR).\n *\n * Bodies are sent as base64 of the raw bytes so binary survives intact.\n */\n\nexport interface ReqHead {\n  t: \"req_head\";\n  id: string;\n  method: string;\n  /** Path + query relative to the tunneled origin, e.g. `/assets/logo.png`. */\n  url: string;\n  headers: HeaderList;\n}\n\nexport interface ReqChunk {\n  t: \"req_chunk\";\n  id: string;\n  seq: number;\n  dataB64: string;\n}\n\nexport interface ReqEnd {\n  t: \"req_end\";\n  id: string;\n}\n\nexport interface ResHead {\n  t: \"res_head\";\n  id: string;\n  status: number;\n  statusText: string;\n  headers: HeaderList;\n}\n\nexport interface ResChunk {\n  t: \"res_chunk\";\n  id: string;\n  seq: number;\n  dataB64: string;\n}\n\nexport interface ResEnd {\n  t: \"res_end\";\n  id: string;\n}\n\nexport interface ResErr {\n  t: \"res_err\";\n  id: string;\n  message: string;\n}\n\nexport type TunnelMessage =\n  | ReqHead\n  | ReqChunk\n  | ReqEnd\n  | ResHead\n  | ResChunk\n  | ResEnd\n  | ResErr;\n\nexport const encode = (msg: TunnelMessage): string => JSON.stringify(msg);\n\nexport const decode = (raw: string): TunnelMessage =>\n  JSON.parse(raw) as TunnelMessage;\n\n/** base64 helpers that work in both Node and the browser. */\nexport const toBase64 = (bytes: Uint8Array): string => {\n  if (typeof Buffer !== \"undefined\") {\n    return Buffer.from(bytes).toString(\"base64\");\n  }\n  let binary = \"\";\n  for (let i = 0; i < bytes.length; i++) {\n    binary += String.fromCharCode(bytes[i]!);\n  }\n  return btoa(binary);\n};\n\nexport const fromBase64 = (b64: string): Uint8Array => {\n  if (typeof Buffer !== \"undefined\") {\n    return new Uint8Array(Buffer.from(b64, \"base64\"));\n  }\n  const binary = atob(b64);\n  const bytes = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) {\n    bytes[i] = binary.charCodeAt(i);\n  }\n  return bytes;\n};\n\n/**\n * Split a body into ordered chunk messages of at most CHUNK_SIZE raw bytes each.\n * An empty body yields no chunk messages.\n */\nexport function chunkBody(\n  id: string,\n  kind: \"req\" | \"res\",\n  body: Uint8Array\n): Array<ReqChunk | ResChunk> {\n  const t = kind === \"req\" ? \"req_chunk\" : \"res_chunk\";\n  const chunks: Array<ReqChunk | ResChunk> = [];\n  let seq = 0;\n  for (let offset = 0; offset < body.length; offset += CHUNK_SIZE) {\n    const slice = body.subarray(offset, offset + CHUNK_SIZE);\n    chunks.push({ t, id, seq: seq++, dataB64: toBase64(slice) } as\n      | ReqChunk\n      | ResChunk);\n  }\n  return chunks;\n}\n\n/**\n * Accumulates ordered body chunks for a single id and concatenates them.\n * Reassembles by `seq` so out-of-order delivery is tolerated (data channels are\n * ordered by default, but this keeps the reassembler robust and testable).\n */\nexport class ChunkAssembler {\n  private parts = new Map<number, Uint8Array>();\n\n  push(seq: number, dataB64: string): void {\n    this.parts.set(seq, fromBase64(dataB64));\n  }\n\n  concat(): Uint8Array {\n    const ordered = [...this.parts.entries()]\n      .sort((a, b) => a[0] - b[0])\n      .map(([, v]) => v);\n    const total = ordered.reduce((n, p) => n + p.length, 0);\n    const out = new Uint8Array(total);\n    let offset = 0;\n    for (const part of ordered) {\n      out.set(part, offset);\n      offset += part.length;\n    }\n    return out;\n  }\n}\n","import { CODE_LENGTH, CODE_REGEX } from \"./constants.js\";\n\n/**\n * Generate a random N-digit code as a zero-padded string.\n * `rand` returns a float in [0, 1); defaults to Math.random. The Worker passes\n * a crypto-backed source.\n */\nexport function generateCode(rand: () => number = Math.random): string {\n  const max = 10 ** CODE_LENGTH;\n  const n = Math.floor(rand() * max);\n  return String(n).padStart(CODE_LENGTH, \"0\");\n}\n\nexport const isValidCode = (code: string): boolean => CODE_REGEX.test(code);\n","import type { CreateSessionResponse } from \"@exposeme/shared\";\n\n/** Thin client for the ExposeMe Worker API. */\nexport class WorkerApi {\n  constructor(private readonly baseUrl: string) {\n    this.baseUrl = baseUrl.replace(/\\/$/, \"\");\n  }\n\n  /** POST /api/sessions — mint a code + session. */\n  async createSession(): Promise<CreateSessionResponse> {\n    const res = await fetch(`${this.baseUrl}/api/sessions`, { method: \"POST\" });\n    if (!res.ok) {\n      throw new Error(\n        `Failed to create session (${res.status}): ${await res.text()}`\n      );\n    }\n    return (await res.json()) as CreateSessionResponse;\n  }\n\n  /** DELETE /api/sessions/:code — release the code early. Best-effort. */\n  async releaseSession(code: string, sessionId: string): Promise<void> {\n    const url = `${this.baseUrl}/api/sessions/${code}?sessionId=${encodeURIComponent(\n      sessionId\n    )}`;\n    await fetch(url, { method: \"DELETE\" }).catch(() => {\n      /* best-effort cleanup; TTL will expire it anyway */\n    });\n  }\n}\n","import type { HeaderList } from \"@exposeme/shared\";\n\ninterface StoredCookie {\n  value: string;\n  path: string;\n  expires?: number; // epoch ms\n}\n\n/**\n * A deliberately simple host-side cookie jar. Because the viewer's Service\n * Worker cannot participate in normal cross-origin cookie handling, the host\n * owns cookies for the tunneled origin: it captures `Set-Cookie` from responses\n * and replays a `Cookie` header on matching outbound requests.\n *\n * v1 scope: single tunneled origin, name-keyed, honoring `Path` and `Expires`/\n * `Max-Age`. Domain and `Secure`/`SameSite` are ignored (localhost, one origin).\n */\nexport class CookieJar {\n  private cookies = new Map<string, StoredCookie>();\n\n  /** Record cookies from a response's `Set-Cookie` header values. */\n  store(setCookieValues: string[], now = Date.now()): void {\n    for (const raw of setCookieValues) {\n      const parsed = parseSetCookie(raw);\n      if (!parsed) continue;\n      if (parsed.expires !== undefined && parsed.expires <= now) {\n        this.cookies.delete(parsed.name); // deletion cookie\n        continue;\n      }\n      this.cookies.set(parsed.name, {\n        value: parsed.value,\n        path: parsed.path,\n        expires: parsed.expires,\n      });\n    }\n  }\n\n  /** Build a `Cookie` header value for a request path, or null if none apply. */\n  header(requestPath: string, now = Date.now()): string | null {\n    const pairs: string[] = [];\n    for (const [name, c] of this.cookies) {\n      if (c.expires !== undefined && c.expires <= now) {\n        this.cookies.delete(name);\n        continue;\n      }\n      if (pathMatches(requestPath, c.path)) pairs.push(`${name}=${c.value}`);\n    }\n    return pairs.length ? pairs.join(\"; \") : null;\n  }\n\n  /** Number of live cookies (for tests/introspection). */\n  get size(): number {\n    return this.cookies.size;\n  }\n}\n\nfunction pathMatches(requestPath: string, cookiePath: string): boolean {\n  if (cookiePath === \"/\" || cookiePath === \"\") return true;\n  const reqPath = requestPath.split(\"?\")[0] ?? \"/\";\n  if (reqPath === cookiePath) return true;\n  return (\n    reqPath.startsWith(cookiePath) &&\n    (cookiePath.endsWith(\"/\") || reqPath[cookiePath.length] === \"/\")\n  );\n}\n\ninterface ParsedCookie {\n  name: string;\n  value: string;\n  path: string;\n  expires?: number;\n}\n\n/** Parse one Set-Cookie header value. Returns null if malformed. */\nexport function parseSetCookie(raw: string): ParsedCookie | null {\n  const parts = raw.split(\";\");\n  const first = parts[0]?.trim() ?? \"\";\n  const eq = first.indexOf(\"=\");\n  if (eq <= 0) return null;\n\n  const name = first.slice(0, eq).trim();\n  const value = first.slice(eq + 1).trim();\n  let path = \"/\";\n  let expires: number | undefined;\n  let maxAge: number | undefined;\n\n  for (let i = 1; i < parts.length; i++) {\n    const attr = parts[i]!.trim();\n    const aEq = attr.indexOf(\"=\");\n    const key = (aEq === -1 ? attr : attr.slice(0, aEq)).toLowerCase();\n    const val = aEq === -1 ? \"\" : attr.slice(aEq + 1).trim();\n    if (key === \"path\") path = val || \"/\";\n    else if (key === \"expires\") {\n      const t = Date.parse(val);\n      if (!Number.isNaN(t)) expires = t;\n    } else if (key === \"max-age\") {\n      const n = Number(val);\n      if (!Number.isNaN(n)) maxAge = n;\n    }\n  }\n\n  // Max-Age takes precedence over Expires per RFC 6265, but we can't call\n  // Date.now() deterministically here — encode as relative and resolve later.\n  if (maxAge !== undefined) {\n    expires = Date.now() + maxAge * 1000;\n  }\n\n  return { name, value, path, expires };\n}\n","import nodeDataChannel from \"node-datachannel\";\nimport {\n  DATA_CHANNEL_LABEL,\n  STUN_SERVERS,\n  type IceCandidateInit,\n  type SessionDescriptionInit,\n} from \"@exposeme/shared\";\nimport type { SignalingSession } from \"@exposeme/signaling\";\n\nconst { PeerConnection } = nodeDataChannel;\ntype PeerConnection = InstanceType<typeof PeerConnection>;\ntype DataChannel = ReturnType<PeerConnection[\"createDataChannel\"]>;\n\nexport interface PeerConnectionHandle {\n  pc: PeerConnection;\n  dc: DataChannel;\n  close(): void;\n}\n\nexport interface ConnectOptions {\n  iceServers?: string[];\n  /** Milliseconds to wait for the data channel to open before rejecting. */\n  timeoutMs?: number;\n}\n\nconst DEFAULT_TIMEOUT = 30_000;\n\n/**\n * Host role: create the peer + data channel, publish the offer/ICE via\n * signaling, apply the viewer's answer/ICE, resolve once the channel opens.\n */\nexport function connectHost(\n  signaling: SignalingSession,\n  opts: ConnectOptions = {}\n): Promise<PeerConnectionHandle> {\n  return new Promise((resolve, reject) => {\n    const pc = new PeerConnection(\"exposeme-host\", {\n      iceServers: opts.iceServers ?? STUN_SERVERS,\n    });\n    const pending = new PendingCandidates(pc);\n\n    pc.onLocalDescription((sdp, type) => {\n      void signaling.writeOffer({ type: type as \"offer\", sdp });\n    });\n    pc.onLocalCandidate((candidate, mid) => {\n      void signaling.pushHostCandidate({ candidate, sdpMid: mid });\n    });\n\n    // onValue re-delivers the answer on viewer reloads / Firebase re-syncs;\n    // applying it twice throws inside the Firebase callback and kills the\n    // process, so accept only the first answer and swallow later ones.\n    let answerApplied = false;\n    signaling.onAnswer((answer) => {\n      if (answerApplied) return;\n      answerApplied = true;\n      try {\n        pc.setRemoteDescription(answer.sdp, answer.type);\n        pending.flush();\n      } catch (err) {\n        reject(err instanceof Error ? err : new Error(String(err)));\n      }\n    });\n    signaling.onViewerCandidate((c) => pending.add(c));\n\n    const dc = pc.createDataChannel(DATA_CHANNEL_LABEL);\n    finishOnOpen(pc, dc, opts, resolve, reject);\n  });\n}\n\n/**\n * Viewer role (also used by the Node loopback test): wait for the host's\n * offer, answer it, exchange ICE, resolve with the inbound data channel.\n */\nexport function connectViewer(\n  signaling: SignalingSession,\n  opts: ConnectOptions = {}\n): Promise<PeerConnectionHandle> {\n  return new Promise((resolve, reject) => {\n    const pc = new PeerConnection(\"exposeme-viewer\", {\n      iceServers: opts.iceServers ?? STUN_SERVERS,\n    });\n    const pending = new PendingCandidates(pc);\n    let dc: DataChannel | undefined;\n\n    pc.onLocalDescription((sdp, type) => {\n      void signaling.writeAnswer({ type: type as \"answer\", sdp });\n    });\n    pc.onLocalCandidate((candidate, mid) => {\n      void signaling.pushViewerCandidate({ candidate, sdpMid: mid });\n    });\n\n    pc.onDataChannel((incoming) => {\n      dc = incoming;\n      finishOnOpen(pc, incoming, opts, resolve, reject);\n    });\n\n    signaling.onHostCandidate((c) => pending.add(c));\n\n    // Fetch the offer (may need a brief poll if the host writes it slightly\n    // after the viewer starts listening).\n    void pollForOffer(signaling)\n      .then((offer) => {\n        pc.setRemoteDescription(offer.sdp, offer.type); // triggers answer\n        pending.flush();\n      })\n      .catch(reject);\n\n    // Guard: if onDataChannel never fires we still time out via finishOnOpen\n    // only after dc exists, so add a fallback timer here too.\n    if (opts.timeoutMs !== 0) {\n      const t = setTimeout(() => {\n        if (!dc) reject(new Error(\"Timed out waiting for data channel\"));\n      }, opts.timeoutMs ?? DEFAULT_TIMEOUT);\n      t.unref?.();\n    }\n  });\n}\n\nasync function pollForOffer(\n  signaling: SignalingSession,\n  attempts = 40,\n  intervalMs = 250\n): Promise<SessionDescriptionInit> {\n  for (let i = 0; i < attempts; i++) {\n    const offer = await signaling.readOffer();\n    if (offer) return offer;\n    await delay(intervalMs);\n  }\n  throw new Error(\"Host offer not found\");\n}\n\nconst delay = (ms: number) => new Promise((r) => setTimeout(r, ms));\n\n/** Buffers remote ICE candidates until the remote description is set. */\nclass PendingCandidates {\n  private queue: IceCandidateInit[] = [];\n  private ready = false;\n\n  constructor(private readonly pc: PeerConnection) {}\n\n  add(c: IceCandidateInit): void {\n    if (this.ready) this.apply(c);\n    else this.queue.push(c);\n  }\n\n  flush(): void {\n    this.ready = true;\n    for (const c of this.queue.splice(0)) this.apply(c);\n  }\n\n  private apply(c: IceCandidateInit): void {\n    try {\n      this.pc.addRemoteCandidate(c.candidate, c.sdpMid ?? \"0\");\n    } catch {\n      /* ignore malformed/duplicate candidates */\n    }\n  }\n}\n\nfunction finishOnOpen(\n  pc: PeerConnection,\n  dc: DataChannel,\n  opts: ConnectOptions,\n  resolve: (h: PeerConnectionHandle) => void,\n  reject: (e: Error) => void\n): void {\n  const handle: PeerConnectionHandle = {\n    pc,\n    dc,\n    close() {\n      try {\n        dc.close();\n      } catch {\n        /* noop */\n      }\n      try {\n        pc.close();\n      } catch {\n        /* noop */\n      }\n    },\n  };\n\n  let settled = false;\n  const timer =\n    opts.timeoutMs === 0\n      ? undefined\n      : setTimeout(() => {\n          if (!settled) {\n            settled = true;\n            reject(new Error(\"Timed out waiting for data channel to open\"));\n          }\n        }, opts.timeoutMs ?? DEFAULT_TIMEOUT);\n  timer?.unref?.();\n\n  if (dc.isOpen()) {\n    settled = true;\n    if (timer) clearTimeout(timer);\n    resolve(handle);\n    return;\n  }\n  dc.onOpen(() => {\n    if (settled) return;\n    settled = true;\n    if (timer) clearTimeout(timer);\n    resolve(handle);\n  });\n}\n","import http from \"node:http\";\nimport type { HeaderList } from \"@exposeme/shared\";\n\nexport interface ProxyRequest {\n  method: string;\n  /** Path + query relative to the tunneled origin. */\n  url: string;\n  headers: HeaderList;\n  body: Uint8Array;\n}\n\nexport interface ProxyResponse {\n  status: number;\n  statusText: string;\n  headers: HeaderList;\n  body: Uint8Array;\n  /** Set-Cookie values pulled out for the host cookie jar. */\n  setCookies: string[];\n}\n\n/** Hop-by-hop headers that must not be forwarded in either direction. */\nconst HOP_BY_HOP = new Set([\n  \"connection\",\n  \"keep-alive\",\n  \"proxy-authenticate\",\n  \"proxy-authorization\",\n  \"te\",\n  \"trailer\",\n  \"transfer-encoding\",\n  \"upgrade\",\n]);\n\n/**\n * Forward one request to `localhost:<port>` and collect the full response.\n * `cookieHeader`, if provided, overrides the request's Cookie header (the host\n * owns cookies). `accept-encoding` is stripped so the local server returns an\n * identity body the browser can consume from a Service-Worker-built Response.\n */\nexport function proxyRequest(\n  port: number,\n  req: ProxyRequest,\n  cookieHeader: string | null\n): Promise<ProxyResponse> {\n  return new Promise((resolve, reject) => {\n    const outHeaders: Record<string, string | string[]> = {};\n    for (const [k, v] of req.headers) {\n      const lk = k.toLowerCase();\n      if (HOP_BY_HOP.has(lk)) continue;\n      if (lk === \"host\") continue; // rewritten below\n      if (lk === \"accept-encoding\") continue; // force identity\n      if (lk === \"cookie\") continue; // host jar owns cookies\n      // Merge duplicate headers into an array.\n      const existing = outHeaders[lk];\n      if (existing === undefined) outHeaders[lk] = v;\n      else if (Array.isArray(existing)) existing.push(v);\n      else outHeaders[lk] = [existing, v];\n    }\n    outHeaders[\"host\"] = `localhost:${port}`;\n    if (cookieHeader) outHeaders[\"cookie\"] = cookieHeader;\n\n    // Dev servers may bind only one of IPv4/IPv6 localhost (e.g. Vite on ::1),\n    // so try 127.0.0.1 first and fall back to ::1 on connection refusal.\n    const attempt = (host: string, fallback?: string): void => {\n      const request = http.request(\n        {\n          host,\n          port,\n          method: req.method,\n          path: req.url,\n          headers: outHeaders,\n        },\n        (res) => {\n          const chunks: Buffer[] = [];\n          res.on(\"data\", (c: Buffer) => chunks.push(c));\n          res.on(\"end\", () => {\n            const { headers, setCookies } = splitResponseHeaders(\n              res.rawHeaders\n            );\n            resolve({\n              status: res.statusCode ?? 502,\n              statusText: res.statusMessage ?? \"\",\n              headers,\n              body: new Uint8Array(Buffer.concat(chunks)),\n              setCookies,\n            });\n          });\n        }\n      );\n\n      request.on(\"error\", (err: NodeJS.ErrnoException) => {\n        if (fallback && err.code === \"ECONNREFUSED\") attempt(fallback);\n        else reject(err);\n      });\n      if (req.body.length > 0) request.write(Buffer.from(req.body));\n      request.end();\n    };\n\n    attempt(\"127.0.0.1\", \"::1\");\n  });\n}\n\n/**\n * Convert Node's flat rawHeaders array into a HeaderList, pulling out Set-Cookie\n * (host-managed) and dropping hop-by-hop headers the browser shouldn't see.\n */\nfunction splitResponseHeaders(rawHeaders: string[]): {\n  headers: HeaderList;\n  setCookies: string[];\n} {\n  const headers: HeaderList = [];\n  const setCookies: string[] = [];\n  for (let i = 0; i < rawHeaders.length; i += 2) {\n    const name = rawHeaders[i]!;\n    const value = rawHeaders[i + 1] ?? \"\";\n    const lower = name.toLowerCase();\n    if (lower === \"set-cookie\") {\n      setCookies.push(value);\n      continue; // not forwarded to the viewer\n    }\n    if (HOP_BY_HOP.has(lower)) continue;\n    if (lower === \"content-length\") continue; // body length may change; SW recomputes\n    headers.push([name, value]);\n  }\n  return { headers, setCookies };\n}\n","import {\n  ChunkAssembler,\n  chunkBody,\n  decode,\n  encode,\n  type HeaderList,\n  type TunnelMessage,\n} from \"@exposeme/shared\";\nimport { proxyRequest } from \"./proxy.js\";\nimport type { CookieJar } from \"./cookies.js\";\n\n/**\n * Minimal data-channel surface the tunnel needs. Matches node-datachannel's\n * DataChannel (and is trivially mockable in tests).\n */\nexport interface DataChannelLike {\n  sendMessage(msg: string): boolean;\n  onMessage(cb: (msg: string | Buffer | ArrayBuffer) => void): void;\n  isOpen(): boolean;\n  bufferedAmount?(): number;\n  maxMessageSize?(): number;\n  setBufferedAmountLowThreshold?(n: number): void;\n  onBufferedAmountLow?(cb: () => void): void;\n}\n\n/** Pause sending when the channel's buffer grows beyond this many bytes. */\nconst BUFFER_HIGH_WATER = 1024 * 1024; // 1 MiB\n\ninterface InFlight {\n  method: string;\n  url: string;\n  headers: HeaderList;\n  body: ChunkAssembler;\n}\n\n/**\n * Attach the host-side request handler to a data channel: reassemble incoming\n * requests, proxy them to `localhost:<port>`, and stream responses back.\n * Returns a stats object updated as requests complete.\n */\nexport function serveTunnel(\n  dc: DataChannelLike,\n  port: number,\n  jar: CookieJar\n): { requestCount: number } {\n  const stats = { requestCount: 0 };\n  const inflight = new Map<string, InFlight>();\n  const lowSignal = new BufferedAmountSignal(dc);\n\n  dc.onMessage((raw) => {\n    const text = typeof raw === \"string\" ? raw : bufferToString(raw);\n    let msg: TunnelMessage;\n    try {\n      msg = decode(text);\n    } catch {\n      return; // ignore non-protocol frames\n    }\n    handleMessage(msg);\n  });\n\n  function handleMessage(msg: TunnelMessage): void {\n    switch (msg.t) {\n      case \"req_head\":\n        inflight.set(msg.id, {\n          method: msg.method,\n          url: msg.url,\n          headers: msg.headers,\n          body: new ChunkAssembler(),\n        });\n        break;\n      case \"req_chunk\": {\n        inflight.get(msg.id)?.body.push(msg.seq, msg.dataB64);\n        break;\n      }\n      case \"req_end\": {\n        const req = inflight.get(msg.id);\n        if (!req) return;\n        inflight.delete(msg.id);\n        void complete(msg.id, req);\n        break;\n      }\n      default:\n        break; // responses flow the other direction; ignore\n    }\n  }\n\n  async function complete(id: string, req: InFlight): Promise<void> {\n    try {\n      const cookieHeader = jar.header(req.url);\n      const res = await proxyRequest(\n        port,\n        {\n          method: req.method,\n          url: req.url,\n          headers: req.headers,\n          body: req.body.concat(),\n        },\n        cookieHeader\n      );\n      jar.store(res.setCookies);\n      stats.requestCount++;\n\n      await send({\n        t: \"res_head\",\n        id,\n        status: res.status,\n        statusText: res.statusText,\n        headers: res.headers,\n      });\n      for (const chunk of chunkBody(id, \"res\", res.body)) {\n        await send(chunk);\n      }\n      await send({ t: \"res_end\", id });\n    } catch (err) {\n      await send({\n        t: \"res_err\",\n        id,\n        message: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  async function send(msg: TunnelMessage): Promise<void> {\n    await lowSignal.awaitDrain();\n    if (dc.isOpen()) dc.sendMessage(encode(msg));\n  }\n\n  return stats;\n}\n\n/** Simple backpressure helper around a channel's buffered-amount signal. */\nclass BufferedAmountSignal {\n  private waiters: Array<() => void> = [];\n\n  constructor(private readonly dc: DataChannelLike) {\n    if (dc.setBufferedAmountLowThreshold && dc.onBufferedAmountLow) {\n      dc.setBufferedAmountLowThreshold(BUFFER_HIGH_WATER / 2);\n      dc.onBufferedAmountLow(() => {\n        for (const w of this.waiters.splice(0)) w();\n      });\n    }\n  }\n\n  awaitDrain(): Promise<void> {\n    const buffered = this.dc.bufferedAmount?.() ?? 0;\n    if (buffered < BUFFER_HIGH_WATER) return Promise.resolve();\n    return new Promise((resolve) => this.waiters.push(resolve));\n  }\n}\n\nfunction bufferToString(buf: Buffer | ArrayBuffer): string {\n  if (buf instanceof ArrayBuffer) return Buffer.from(buf).toString(\"utf-8\");\n  return buf.toString(\"utf-8\");\n}\n"],"mappings":";;;AAAA,OAAOA,sBAAqB;AAC5B,SAAS,UAAU,kBAAkB;AACrC,OAAO,WAAW;;;ACFlB,SAAS,eAAe,iBAAmC;AAC3D;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;OAEK;;;AEXA,IAAM,cAAc;AAGpB,IAAM,aAAa,IAAI,OAAO,QAAQ,WAAW,IAAI;AAGrD,IAAM,cAAc,KAAK,KAAK;AAO9B,IAAM,aAAa,KAAK;AAGxB,IAAM,eAAe;EAC1B;EACA;AACF;AAGO,IAAM,qBAAqB;AClB3B,IAAM,cAAc,CAAC,SAAiB,YAAY,IAAI;AAEtD,IAAM,gBAAgB,CAAC,SAAiB,YAAY,IAAI;AACxD,IAAM,qBAAqB,CAAC,SACjC,YAAY,IAAI;AAEX,IAAM,mBAAmB,CAAC,SAC/B,YAAY,IAAI;AACX,IAAM,uBAAuB,CAAC,SACnC,YAAY,IAAI;ACqDX,IAAM,SAAS,CAAC,QAA+B,KAAK,UAAU,GAAG;AAEjE,IAAM,SAAS,CAAC,QACrB,KAAK,MAAM,GAAG;AAGT,IAAM,WAAW,CAAC,UAA8B;AACrD,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,OAAO,KAAK,KAAK,EAAE,SAAS,QAAQ;EAC7C;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,cAAU,OAAO,aAAa,MAAM,CAAC,CAAE;EACzC;AACA,SAAO,KAAK,MAAM;AACpB;AAEO,IAAM,aAAa,CAAC,QAA4B;AACrD,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,IAAI,WAAW,OAAO,KAAK,KAAK,QAAQ,CAAC;EAClD;AACA,QAAM,SAAS,KAAK,GAAG;AACvB,QAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,CAAC,IAAI,OAAO,WAAW,CAAC;EAChC;AACA,SAAO;AACT;AAMO,SAAS,UACd,IACA,MACA,MAC4B;AAC5B,QAAM,IAAI,SAAS,QAAQ,cAAc;AACzC,QAAM,SAAqC,CAAC;AAC5C,MAAI,MAAM;AACV,WAAS,SAAS,GAAG,SAAS,KAAK,QAAQ,UAAU,YAAY;AAC/D,UAAM,QAAQ,KAAK,SAAS,QAAQ,SAAS,UAAU;AACvD,WAAO,KAAK,EAAE,GAAG,IAAI,KAAK,OAAO,SAAS,SAAS,KAAK,EAAE,CAE9C;EACd;AACA,SAAO;AACT;AAOO,IAAM,iBAAN,MAAqB;EAClB,QAAQ,oBAAI,IAAwB;EAE5C,KAAK,KAAa,SAAuB;AACvC,SAAK,MAAM,IAAI,KAAK,WAAW,OAAO,CAAC;EACzC;EAEA,SAAqB;AACnB,UAAM,UAAU,CAAC,GAAG,KAAK,MAAM,QAAQ,CAAC,EACrC,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,EAC1B,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC;AACnB,UAAM,QAAQ,QAAQ,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC;AACtD,UAAM,MAAM,IAAI,WAAW,KAAK;AAChC,QAAI,SAAS;AACb,eAAW,QAAQ,SAAS;AAC1B,UAAI,IAAI,MAAM,MAAM;AACpB,gBAAU,KAAK;IACjB;AACA,WAAO;EACT;AACF;;;AJtHA,IAAI,aAAa;AAGV,SAAS,sBAAsB,QAOpC;AAGA,QAAM,MAAM,cAAc,QAAQ,YAAY,YAAY,EAAE;AAC5D,QAAM,KAAK,YAAY,GAAG;AAE1B,SAAO;IACL;IACA;IACA,SAAS,CAAC,SAAS,IAAI,yBAAyB,IAAI,IAAI;IACxD,SAAS,MAAM,UAAU,GAAG;EAC9B;AACF;AAEA,IAAM,2BAAN,MAA2D;EAGzD,YACmB,IACD,MAChB;AAFiB,SAAA,KAAA;AACD,SAAA,OAAA;EACf;EAFgB;EACD;EAJV,SAAwB,CAAC;;EASjC,MAAM,WAAW,OAA8C;AAC7D,UAAM,IAAI,IAAI,KAAK,IAAI,cAAc,KAAK,IAAI,CAAC,GAAG,KAAK;EACzD;EAEA,MAAM,kBAAkB,WAA4C;AAClE,UAAM,KAAK,IAAI,KAAK,IAAI,mBAAmB,KAAK,IAAI,CAAC,GAAG,SAAS;EACnE;EAEA,SAAS,IAA2D;AAClE,UAAM,IAAI,IAAI,KAAK,IAAI,iBAAiB,KAAK,IAAI,CAAC;AAClD,UAAM,UAAU,QAAQ,GAAG,CAAC,SAAS;AACnC,YAAM,MAAM,KAAK,IAAI;AACrB,UAAI,IAAK,IAAG,GAAG;IACjB,CAAC;AACD,UAAM,QAAQ,MAAM,IAAI,GAAG,SAAS,OAAO;AAC3C,SAAK,OAAO,KAAK,KAAK;AACtB,WAAO;EACT;EAEA,kBAAkB,IAAwD;AACxE,WAAO,KAAK,oBAAoB,qBAAqB,KAAK,IAAI,GAAG,EAAE;EACrE;;EAIA,MAAM,YAAoD;AACxD,UAAM,OAAO,MAAM,IAAI,IAAI,KAAK,IAAI,cAAc,KAAK,IAAI,CAAC,CAAC;AAC7D,WAAQ,KAAK,IAAI,KAAuC;EAC1D;EAEA,MAAM,YAAY,QAA+C;AAC/D,UAAM,IAAI,IAAI,KAAK,IAAI,iBAAiB,KAAK,IAAI,CAAC,GAAG,MAAM;EAC7D;EAEA,MAAM,oBAAoB,WAA4C;AACpE,UAAM,KAAK,IAAI,KAAK,IAAI,qBAAqB,KAAK,IAAI,CAAC,GAAG,SAAS;EACrE;EAEA,gBAAgB,IAAwD;AACtE,WAAO,KAAK,oBAAoB,mBAAmB,KAAK,IAAI,GAAG,EAAE;EACnE;;EAIQ,oBACN,MACA,IACa;AACb,UAAM,IAAI,IAAI,KAAK,IAAI,IAAI;AAC3B,UAAM,UAAU,aAAa,GAAG,CAAC,SAAS;AACxC,YAAM,MAAM,KAAK,IAAI;AACrB,UAAI,IAAK,IAAG,GAAG;IACjB,CAAC;AACD,UAAM,QAAQ,MAAM,IAAI,GAAG,eAAe,OAAO;AACjD,SAAK,OAAO,KAAK,KAAK;AACtB,WAAO;EACT;EAEA,MAAM,UAAyB;AAC7B,eAAW,SAAS,KAAK,OAAO,OAAO,CAAC,EAAG,OAAM;AACjD,UAAM,OAAO,IAAI,KAAK,IAAI,YAAY,KAAK,IAAI,CAAC,CAAC;EACnD;AACF;ACjHO,SAAS,sBACd,KACA,SAAS,aACO;AAChB,QAAMC,OAAM,CAAC,MAAsB;AACjC,UAAM,IAAI,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;AAC7B,QAAI,CAAC,GAAG;AACN,YAAM,IAAI;QACR,mCAAmC,MAAM,GAAG,CAAC;MAC/C;IACF;AACA,WAAO;EACT;AACA,SAAO;IACL,QAAQA,KAAI,SAAS;IACrB,YAAYA,KAAI,aAAa;IAC7B,aAAaA,KAAI,cAAc;IAC/B,WAAWA,KAAI,YAAY;IAC3B,OAAOA,KAAI,QAAQ;EACrB;AACF;;;AKxBO,IAAM,YAAN,MAAgB;AAAA,EACrB,YAA6B,SAAiB;AAAjB;AAC3B,SAAK,UAAU,QAAQ,QAAQ,OAAO,EAAE;AAAA,EAC1C;AAAA,EAF6B;AAAA;AAAA,EAK7B,MAAM,gBAAgD;AACpD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,iBAAiB,EAAE,QAAQ,OAAO,CAAC;AAC1E,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,IAAI;AAAA,QACR,6BAA6B,IAAI,MAAM,MAAM,MAAM,IAAI,KAAK,CAAC;AAAA,MAC/D;AAAA,IACF;AACA,WAAQ,MAAM,IAAI,KAAK;AAAA,EACzB;AAAA;AAAA,EAGA,MAAM,eAAe,MAAc,WAAkC;AACnE,UAAM,MAAM,GAAG,KAAK,OAAO,iBAAiB,IAAI,cAAc;AAAA,MAC5D;AAAA,IACF,CAAC;AACD,UAAM,MAAM,KAAK,EAAE,QAAQ,SAAS,CAAC,EAAE,MAAM,MAAM;AAAA,IAEnD,CAAC;AAAA,EACH;AACF;;;ACXO,IAAM,YAAN,MAAgB;AAAA,EACb,UAAU,oBAAI,IAA0B;AAAA;AAAA,EAGhD,MAAM,iBAA2B,MAAM,KAAK,IAAI,GAAS;AACvD,eAAW,OAAO,iBAAiB;AACjC,YAAM,SAAS,eAAe,GAAG;AACjC,UAAI,CAAC,OAAQ;AACb,UAAI,OAAO,YAAY,UAAa,OAAO,WAAW,KAAK;AACzD,aAAK,QAAQ,OAAO,OAAO,IAAI;AAC/B;AAAA,MACF;AACA,WAAK,QAAQ,IAAI,OAAO,MAAM;AAAA,QAC5B,OAAO,OAAO;AAAA,QACd,MAAM,OAAO;AAAA,QACb,SAAS,OAAO;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAAA,EAGA,OAAO,aAAqB,MAAM,KAAK,IAAI,GAAkB;AAC3D,UAAM,QAAkB,CAAC;AACzB,eAAW,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;AACpC,UAAI,EAAE,YAAY,UAAa,EAAE,WAAW,KAAK;AAC/C,aAAK,QAAQ,OAAO,IAAI;AACxB;AAAA,MACF;AACA,UAAI,YAAY,aAAa,EAAE,IAAI,EAAG,OAAM,KAAK,GAAG,IAAI,IAAI,EAAE,KAAK,EAAE;AAAA,IACvE;AACA,WAAO,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI;AAAA,EAC3C;AAAA;AAAA,EAGA,IAAI,OAAe;AACjB,WAAO,KAAK,QAAQ;AAAA,EACtB;AACF;AAEA,SAAS,YAAY,aAAqB,YAA6B;AACrE,MAAI,eAAe,OAAO,eAAe,GAAI,QAAO;AACpD,QAAM,UAAU,YAAY,MAAM,GAAG,EAAE,CAAC,KAAK;AAC7C,MAAI,YAAY,WAAY,QAAO;AACnC,SACE,QAAQ,WAAW,UAAU,MAC5B,WAAW,SAAS,GAAG,KAAK,QAAQ,WAAW,MAAM,MAAM;AAEhE;AAUO,SAAS,eAAe,KAAkC;AAC/D,QAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,QAAM,QAAQ,MAAM,CAAC,GAAG,KAAK,KAAK;AAClC,QAAM,KAAK,MAAM,QAAQ,GAAG;AAC5B,MAAI,MAAM,EAAG,QAAO;AAEpB,QAAM,OAAO,MAAM,MAAM,GAAG,EAAE,EAAE,KAAK;AACrC,QAAM,QAAQ,MAAM,MAAM,KAAK,CAAC,EAAE,KAAK;AACvC,MAAI,OAAO;AACX,MAAI;AACJ,MAAI;AAEJ,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,UAAM,OAAO,MAAM,CAAC,EAAG,KAAK;AAC5B,UAAM,MAAM,KAAK,QAAQ,GAAG;AAC5B,UAAM,OAAO,QAAQ,KAAK,OAAO,KAAK,MAAM,GAAG,GAAG,GAAG,YAAY;AACjE,UAAM,MAAM,QAAQ,KAAK,KAAK,KAAK,MAAM,MAAM,CAAC,EAAE,KAAK;AACvD,QAAI,QAAQ,OAAQ,QAAO,OAAO;AAAA,aACzB,QAAQ,WAAW;AAC1B,YAAM,IAAI,KAAK,MAAM,GAAG;AACxB,UAAI,CAAC,OAAO,MAAM,CAAC,EAAG,WAAU;AAAA,IAClC,WAAW,QAAQ,WAAW;AAC5B,YAAM,IAAI,OAAO,GAAG;AACpB,UAAI,CAAC,OAAO,MAAM,CAAC,EAAG,UAAS;AAAA,IACjC;AAAA,EACF;AAIA,MAAI,WAAW,QAAW;AACxB,cAAU,KAAK,IAAI,IAAI,SAAS;AAAA,EAClC;AAEA,SAAO,EAAE,MAAM,OAAO,MAAM,QAAQ;AACtC;;;AC5GA,OAAO,qBAAqB;AAS5B,IAAM,EAAE,eAAe,IAAI;AAgB3B,IAAM,kBAAkB;AAMjB,SAAS,YACd,WACA,OAAuB,CAAC,GACO;AAC/B,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,KAAK,IAAI,eAAe,iBAAiB;AAAA,MAC7C,YAAY,KAAK,cAAc;AAAA,IACjC,CAAC;AACD,UAAM,UAAU,IAAI,kBAAkB,EAAE;AAExC,OAAG,mBAAmB,CAAC,KAAK,SAAS;AACnC,WAAK,UAAU,WAAW,EAAE,MAAuB,IAAI,CAAC;AAAA,IAC1D,CAAC;AACD,OAAG,iBAAiB,CAAC,WAAW,QAAQ;AACtC,WAAK,UAAU,kBAAkB,EAAE,WAAW,QAAQ,IAAI,CAAC;AAAA,IAC7D,CAAC;AAKD,QAAI,gBAAgB;AACpB,cAAU,SAAS,CAAC,WAAW;AAC7B,UAAI,cAAe;AACnB,sBAAgB;AAChB,UAAI;AACF,WAAG,qBAAqB,OAAO,KAAK,OAAO,IAAI;AAC/C,gBAAQ,MAAM;AAAA,MAChB,SAAS,KAAK;AACZ,eAAO,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AAAA,MAC5D;AAAA,IACF,CAAC;AACD,cAAU,kBAAkB,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC;AAEjD,UAAM,KAAK,GAAG,kBAAkB,kBAAkB;AAClD,iBAAa,IAAI,IAAI,MAAM,SAAS,MAAM;AAAA,EAC5C,CAAC;AACH;AAMO,SAAS,cACd,WACA,OAAuB,CAAC,GACO;AAC/B,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,KAAK,IAAI,eAAe,mBAAmB;AAAA,MAC/C,YAAY,KAAK,cAAc;AAAA,IACjC,CAAC;AACD,UAAM,UAAU,IAAI,kBAAkB,EAAE;AACxC,QAAI;AAEJ,OAAG,mBAAmB,CAAC,KAAK,SAAS;AACnC,WAAK,UAAU,YAAY,EAAE,MAAwB,IAAI,CAAC;AAAA,IAC5D,CAAC;AACD,OAAG,iBAAiB,CAAC,WAAW,QAAQ;AACtC,WAAK,UAAU,oBAAoB,EAAE,WAAW,QAAQ,IAAI,CAAC;AAAA,IAC/D,CAAC;AAED,OAAG,cAAc,CAAC,aAAa;AAC7B,WAAK;AACL,mBAAa,IAAI,UAAU,MAAM,SAAS,MAAM;AAAA,IAClD,CAAC;AAED,cAAU,gBAAgB,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC;AAI/C,SAAK,aAAa,SAAS,EACxB,KAAK,CAAC,UAAU;AACf,SAAG,qBAAqB,MAAM,KAAK,MAAM,IAAI;AAC7C,cAAQ,MAAM;AAAA,IAChB,CAAC,EACA,MAAM,MAAM;AAIf,QAAI,KAAK,cAAc,GAAG;AACxB,YAAM,IAAI,WAAW,MAAM;AACzB,YAAI,CAAC,GAAI,QAAO,IAAI,MAAM,oCAAoC,CAAC;AAAA,MACjE,GAAG,KAAK,aAAa,eAAe;AACpC,QAAE,QAAQ;AAAA,IACZ;AAAA,EACF,CAAC;AACH;AAEA,eAAe,aACb,WACA,WAAW,IACX,aAAa,KACoB;AACjC,WAAS,IAAI,GAAG,IAAI,UAAU,KAAK;AACjC,UAAM,QAAQ,MAAM,UAAU,UAAU;AACxC,QAAI,MAAO,QAAO;AAClB,UAAM,MAAM,UAAU;AAAA,EACxB;AACA,QAAM,IAAI,MAAM,sBAAsB;AACxC;AAEA,IAAM,QAAQ,CAAC,OAAe,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAGlE,IAAM,oBAAN,MAAwB;AAAA,EAItB,YAA6B,IAAoB;AAApB;AAAA,EAAqB;AAAA,EAArB;AAAA,EAHrB,QAA4B,CAAC;AAAA,EAC7B,QAAQ;AAAA,EAIhB,IAAI,GAA2B;AAC7B,QAAI,KAAK,MAAO,MAAK,MAAM,CAAC;AAAA,QACvB,MAAK,MAAM,KAAK,CAAC;AAAA,EACxB;AAAA,EAEA,QAAc;AACZ,SAAK,QAAQ;AACb,eAAW,KAAK,KAAK,MAAM,OAAO,CAAC,EAAG,MAAK,MAAM,CAAC;AAAA,EACpD;AAAA,EAEQ,MAAM,GAA2B;AACvC,QAAI;AACF,WAAK,GAAG,mBAAmB,EAAE,WAAW,EAAE,UAAU,GAAG;AAAA,IACzD,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEA,SAAS,aACP,IACA,IACA,MACA,SACA,QACM;AACN,QAAM,SAA+B;AAAA,IACnC;AAAA,IACA;AAAA,IACA,QAAQ;AACN,UAAI;AACF,WAAG,MAAM;AAAA,MACX,QAAQ;AAAA,MAER;AACA,UAAI;AACF,WAAG,MAAM;AAAA,MACX,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,MAAI,UAAU;AACd,QAAM,QACJ,KAAK,cAAc,IACf,SACA,WAAW,MAAM;AACf,QAAI,CAAC,SAAS;AACZ,gBAAU;AACV,aAAO,IAAI,MAAM,4CAA4C,CAAC;AAAA,IAChE;AAAA,EACF,GAAG,KAAK,aAAa,eAAe;AAC1C,SAAO,QAAQ;AAEf,MAAI,GAAG,OAAO,GAAG;AACf,cAAU;AACV,QAAI,MAAO,cAAa,KAAK;AAC7B,YAAQ,MAAM;AACd;AAAA,EACF;AACA,KAAG,OAAO,MAAM;AACd,QAAI,QAAS;AACb,cAAU;AACV,QAAI,MAAO,cAAa,KAAK;AAC7B,YAAQ,MAAM;AAAA,EAChB,CAAC;AACH;;;AC/MA,OAAO,UAAU;AAqBjB,IAAM,aAAa,oBAAI,IAAI;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAQM,SAAS,aACd,MACA,KACA,cACwB;AACxB,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,aAAgD,CAAC;AACvD,eAAW,CAAC,GAAG,CAAC,KAAK,IAAI,SAAS;AAChC,YAAM,KAAK,EAAE,YAAY;AACzB,UAAI,WAAW,IAAI,EAAE,EAAG;AACxB,UAAI,OAAO,OAAQ;AACnB,UAAI,OAAO,kBAAmB;AAC9B,UAAI,OAAO,SAAU;AAErB,YAAM,WAAW,WAAW,EAAE;AAC9B,UAAI,aAAa,OAAW,YAAW,EAAE,IAAI;AAAA,eACpC,MAAM,QAAQ,QAAQ,EAAG,UAAS,KAAK,CAAC;AAAA,UAC5C,YAAW,EAAE,IAAI,CAAC,UAAU,CAAC;AAAA,IACpC;AACA,eAAW,MAAM,IAAI,aAAa,IAAI;AACtC,QAAI,aAAc,YAAW,QAAQ,IAAI;AAIzC,UAAM,UAAU,CAAC,MAAc,aAA4B;AACzD,YAAM,UAAU,KAAK;AAAA,QACnB;AAAA,UACE;AAAA,UACA;AAAA,UACA,QAAQ,IAAI;AAAA,UACZ,MAAM,IAAI;AAAA,UACV,SAAS;AAAA,QACX;AAAA,QACA,CAAC,QAAQ;AACP,gBAAM,SAAmB,CAAC;AAC1B,cAAI,GAAG,QAAQ,CAAC,MAAc,OAAO,KAAK,CAAC,CAAC;AAC5C,cAAI,GAAG,OAAO,MAAM;AAClB,kBAAM,EAAE,SAAS,WAAW,IAAI;AAAA,cAC9B,IAAI;AAAA,YACN;AACA,oBAAQ;AAAA,cACN,QAAQ,IAAI,cAAc;AAAA,cAC1B,YAAY,IAAI,iBAAiB;AAAA,cACjC;AAAA,cACA,MAAM,IAAI,WAAW,OAAO,OAAO,MAAM,CAAC;AAAA,cAC1C;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AAEA,cAAQ,GAAG,SAAS,CAAC,QAA+B;AAClD,YAAI,YAAY,IAAI,SAAS,eAAgB,SAAQ,QAAQ;AAAA,YACxD,QAAO,GAAG;AAAA,MACjB,CAAC;AACD,UAAI,IAAI,KAAK,SAAS,EAAG,SAAQ,MAAM,OAAO,KAAK,IAAI,IAAI,CAAC;AAC5D,cAAQ,IAAI;AAAA,IACd;AAEA,YAAQ,aAAa,KAAK;AAAA,EAC5B,CAAC;AACH;AAMA,SAAS,qBAAqB,YAG5B;AACA,QAAM,UAAsB,CAAC;AAC7B,QAAM,aAAuB,CAAC;AAC9B,WAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK,GAAG;AAC7C,UAAM,OAAO,WAAW,CAAC;AACzB,UAAM,QAAQ,WAAW,IAAI,CAAC,KAAK;AACnC,UAAM,QAAQ,KAAK,YAAY;AAC/B,QAAI,UAAU,cAAc;AAC1B,iBAAW,KAAK,KAAK;AACrB;AAAA,IACF;AACA,QAAI,WAAW,IAAI,KAAK,EAAG;AAC3B,QAAI,UAAU,iBAAkB;AAChC,YAAQ,KAAK,CAAC,MAAM,KAAK,CAAC;AAAA,EAC5B;AACA,SAAO,EAAE,SAAS,WAAW;AAC/B;;;AClGA,IAAM,oBAAoB,OAAO;AAc1B,SAAS,YACd,IACA,MACA,KAC0B;AAC1B,QAAM,QAAQ,EAAE,cAAc,EAAE;AAChC,QAAM,WAAW,oBAAI,IAAsB;AAC3C,QAAM,YAAY,IAAI,qBAAqB,EAAE;AAE7C,KAAG,UAAU,CAAC,QAAQ;AACpB,UAAM,OAAO,OAAO,QAAQ,WAAW,MAAM,eAAe,GAAG;AAC/D,QAAI;AACJ,QAAI;AACF,YAAM,OAAO,IAAI;AAAA,IACnB,QAAQ;AACN;AAAA,IACF;AACA,kBAAc,GAAG;AAAA,EACnB,CAAC;AAED,WAAS,cAAc,KAA0B;AAC/C,YAAQ,IAAI,GAAG;AAAA,MACb,KAAK;AACH,iBAAS,IAAI,IAAI,IAAI;AAAA,UACnB,QAAQ,IAAI;AAAA,UACZ,KAAK,IAAI;AAAA,UACT,SAAS,IAAI;AAAA,UACb,MAAM,IAAI,eAAe;AAAA,QAC3B,CAAC;AACD;AAAA,MACF,KAAK,aAAa;AAChB,iBAAS,IAAI,IAAI,EAAE,GAAG,KAAK,KAAK,IAAI,KAAK,IAAI,OAAO;AACpD;AAAA,MACF;AAAA,MACA,KAAK,WAAW;AACd,cAAM,MAAM,SAAS,IAAI,IAAI,EAAE;AAC/B,YAAI,CAAC,IAAK;AACV,iBAAS,OAAO,IAAI,EAAE;AACtB,aAAK,SAAS,IAAI,IAAI,GAAG;AACzB;AAAA,MACF;AAAA,MACA;AACE;AAAA,IACJ;AAAA,EACF;AAEA,iBAAe,SAAS,IAAY,KAA8B;AAChE,QAAI;AACF,YAAM,eAAe,IAAI,OAAO,IAAI,GAAG;AACvC,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,UACE,QAAQ,IAAI;AAAA,UACZ,KAAK,IAAI;AAAA,UACT,SAAS,IAAI;AAAA,UACb,MAAM,IAAI,KAAK,OAAO;AAAA,QACxB;AAAA,QACA;AAAA,MACF;AACA,UAAI,MAAM,IAAI,UAAU;AACxB,YAAM;AAEN,YAAM,KAAK;AAAA,QACT,GAAG;AAAA,QACH;AAAA,QACA,QAAQ,IAAI;AAAA,QACZ,YAAY,IAAI;AAAA,QAChB,SAAS,IAAI;AAAA,MACf,CAAC;AACD,iBAAW,SAAS,UAAU,IAAI,OAAO,IAAI,IAAI,GAAG;AAClD,cAAM,KAAK,KAAK;AAAA,MAClB;AACA,YAAM,KAAK,EAAE,GAAG,WAAW,GAAG,CAAC;AAAA,IACjC,SAAS,KAAK;AACZ,YAAM,KAAK;AAAA,QACT,GAAG;AAAA,QACH;AAAA,QACA,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MAC1D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,iBAAe,KAAK,KAAmC;AACrD,UAAM,UAAU,WAAW;AAC3B,QAAI,GAAG,OAAO,EAAG,IAAG,YAAY,OAAO,GAAG,CAAC;AAAA,EAC7C;AAEA,SAAO;AACT;AAGA,IAAM,uBAAN,MAA2B;AAAA,EAGzB,YAA6B,IAAqB;AAArB;AAC3B,QAAI,GAAG,iCAAiC,GAAG,qBAAqB;AAC9D,SAAG,8BAA8B,oBAAoB,CAAC;AACtD,SAAG,oBAAoB,MAAM;AAC3B,mBAAW,KAAK,KAAK,QAAQ,OAAO,CAAC,EAAG,GAAE;AAAA,MAC5C,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAP6B;AAAA,EAFrB,UAA6B,CAAC;AAAA,EAWtC,aAA4B;AAC1B,UAAM,WAAW,KAAK,GAAG,iBAAiB,KAAK;AAC/C,QAAI,WAAW,kBAAmB,QAAO,QAAQ,QAAQ;AACzD,WAAO,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,KAAK,OAAO,CAAC;AAAA,EAC5D;AACF;AAEA,SAAS,eAAe,KAAmC;AACzD,MAAI,eAAe,YAAa,QAAO,OAAO,KAAK,GAAG,EAAE,SAAS,OAAO;AACxE,SAAO,IAAI,SAAS,OAAO;AAC7B;;;AXzHA,IAAM,kBAAkB;AACxB,IAAM,0BAA0C;AAAA,EAC9C,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,WAAW;AAAA,EACX,OAAO;AACT;AAEA,SAAS,cAAc,KAAmC;AACxD,SAAO,EAAE,QAAQ,IAAI,oBAAoB,gBAAgB;AAC3D;AAGO,SAAS,UAAU,MAAkC;AAC1D,QAAM,aAAa,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,CAAC;AACxD,QAAM,UAAU,WAAW,CAAC;AAC5B,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,4BAA4B;AAC1D,QAAM,OAAO,OAAO,OAAO;AAC3B,MAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,OAAO;AACvD,UAAM,IAAI,MAAM,iBAAiB,OAAO,EAAE;AAAA,EAC5C;AACA,SAAO,EAAE,KAAK;AAChB;AAEA,IAAM,QAAQ;AAAA,EACZ,SAAS,MAAM,OAAO,gBAAW;AAAA,EACjC,WAAW,MAAM,MAAM,kBAAa;AAAA,EACpC,cAAc,MAAM,IAAI,qBAAgB;AAC1C;AAOA,eAAsB,IAAI,MAAiC;AACzD,QAAM,MAAM,KAAK,OAAO,QAAQ;AAChC,aAAW;AACX,QAAM,EAAE,OAAO,IAAI,cAAc,GAAG;AAGpC,QAAM,iBAAiB,IAAI,mBACvB,cACA,IAAI,wBACF,mBACA;AACN,QAAM,iBAAiB,iBACnB,sBAAsB,KAAK,cAAc,IACzC;AAEJ,QAAM,MAAM,IAAI,UAAU,MAAM;AAChC,QAAM,MAAM,IAAI,UAAU;AAE1B,UAAQ,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,IAAI,iCAA4B,KAAK,IAAI;AAAA,CAAI,CAAC;AAE7F,QAAM,UAAU,MAAM,IAAI,cAAc;AACxC,QAAM,SAAS,sBAAsB,cAAc;AACnD,QAAM,YAA8B,OAAO,QAAQ,QAAQ,IAAI;AAE/D,YAAU,QAAQ,MAAM,QAAQ,SAAS;AACzC,UAAQ,IAAI,cAAc,MAAM,OAAO;AAAA,CAAI;AAE3C,MAAI,YAAY;AAChB,QAAM,UAAU,YAA2B;AACzC,QAAI,UAAW;AACf,gBAAY;AACZ,QAAI;AACF,cAAQ,MAAM;AAAA,IAChB,QAAQ;AAAA,IAER;AACA,UAAM,UAAU,QAAQ,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AACxC,UAAM,IAAI,eAAe,QAAQ,MAAM,QAAQ,SAAS;AACxD,UAAM,OAAO,QAAQ,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AACrC,IAAAC,iBAAgB,QAAQ;AAAA,EAC1B;AAEA,UAAQ,GAAG,UAAU,MAAM;AACzB,YAAQ,IAAI,MAAM,IAAI,0CAAqC,CAAC;AAC5D,SAAK,QAAQ,EAAE,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC;AAAA,EAC3C,CAAC;AAED,MAAI;AACJ,WAAS,MAAM,YAAY,SAAS;AAEpC,UAAQ,IAAI,cAAc,MAAM,SAAS;AAAA,CAAI;AAC7C,cAAY,OAAO,IAAI,KAAK,MAAM,GAAG;AAErC,SAAO,GAAG,SAAS,MAAM;AACvB,YAAQ,IAAI,cAAc,MAAM,YAAY;AAAA,CAAI;AAAA,EAClD,CAAC;AAGD,QAAM,IAAI,QAAc,MAAM;AAAA,EAAC,CAAC;AAClC;AAEA,SAAS,UAAU,MAAc,WAAyB;AACxD,UAAQ,IAAI,cAAc,MAAM,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE;AACnD,UAAQ,IAAI,cAAc,MAAM,UAAU,SAAS,CAAC;AAAA,CAAI;AAC1D;","names":["nodeDataChannel","get","nodeDataChannel"]}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/cli.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import {
+  parseArgs,
+  run
+} from "./chunk-VZEPY6PL.js";
+
+// src/cli.ts
+async function main() {
+  let port;
+  try {
+    ({ port } = parseArgs(process.argv.slice(2)));
+  } catch (err) {
+    console.error(err.message);
+    process.exit(1);
+  }
+  try {
+    await run({ port });
+  } catch (err) {
+    console.error(`
+  \u2716 ${err.message}
+`);
+    process.exit(1);
+  }
+}
+void main();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["import { parseArgs, run } from \"./index.js\";\n\nasync function main(): Promise<void> {\n  let port: number;\n  try {\n    ({ port } = parseArgs(process.argv.slice(2)));\n  } catch (err) {\n    console.error((err as Error).message);\n    process.exit(1);\n  }\n\n  try {\n    await run({ port });\n  } catch (err) {\n    console.error(`\\n  ✖ ${(err as Error).message}\\n`);\n    process.exit(1);\n  }\n}\n\nvoid main();\n"],"mappings":";;;;;;;AAEA,eAAe,OAAsB;AACnC,MAAI;AACJ,MAAI;AACF,KAAC,EAAE,KAAK,IAAI,UAAU,QAAQ,KAAK,MAAM,CAAC,CAAC;AAAA,EAC7C,SAAS,KAAK;AACZ,YAAQ,MAAO,IAAc,OAAO;AACpC,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI;AACF,UAAM,IAAI,EAAE,KAAK,CAAC;AAAA,EACpB,SAAS,KAAK;AACZ,YAAQ,MAAM;AAAA,WAAU,IAAc,OAAO;AAAA,CAAI;AACjD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;AAEA,KAAK,KAAK;","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,126 @@
+import { CreateSessionResponse, HeaderList } from '@exposeme/shared';
+import * as node_datachannel from 'node-datachannel';
+import { SignalingSession } from '@exposeme/signaling';
+
+/** Thin client for the ExposeMe Worker API. */
+declare class WorkerApi {
+    private readonly baseUrl;
+    constructor(baseUrl: string);
+    /** POST /api/sessions — mint a code + session. */
+    createSession(): Promise<CreateSessionResponse>;
+    /** DELETE /api/sessions/:code — release the code early. Best-effort. */
+    releaseSession(code: string, sessionId: string): Promise<void>;
+}
+
+/**
+ * A deliberately simple host-side cookie jar. Because the viewer's Service
+ * Worker cannot participate in normal cross-origin cookie handling, the host
+ * owns cookies for the tunneled origin: it captures `Set-Cookie` from responses
+ * and replays a `Cookie` header on matching outbound requests.
+ *
+ * v1 scope: single tunneled origin, name-keyed, honoring `Path` and `Expires`/
+ * `Max-Age`. Domain and `Secure`/`SameSite` are ignored (localhost, one origin).
+ */
+declare class CookieJar {
+    private cookies;
+    /** Record cookies from a response's `Set-Cookie` header values. */
+    store(setCookieValues: string[], now?: number): void;
+    /** Build a `Cookie` header value for a request path, or null if none apply. */
+    header(requestPath: string, now?: number): string | null;
+    /** Number of live cookies (for tests/introspection). */
+    get size(): number;
+}
+interface ParsedCookie {
+    name: string;
+    value: string;
+    path: string;
+    expires?: number;
+}
+/** Parse one Set-Cookie header value. Returns null if malformed. */
+declare function parseSetCookie(raw: string): ParsedCookie | null;
+
+declare const PeerConnection: new (peerName: string, config: node_datachannel.RtcConfig) => node_datachannel.PeerConnection;
+type PeerConnection = InstanceType<typeof PeerConnection>;
+type DataChannel = ReturnType<PeerConnection["createDataChannel"]>;
+interface PeerConnectionHandle {
+    pc: PeerConnection;
+    dc: DataChannel;
+    close(): void;
+}
+interface ConnectOptions {
+    iceServers?: string[];
+    /** Milliseconds to wait for the data channel to open before rejecting. */
+    timeoutMs?: number;
+}
+/**
+ * Host role: create the peer + data channel, publish the offer/ICE via
+ * signaling, apply the viewer's answer/ICE, resolve once the channel opens.
+ */
+declare function connectHost(signaling: SignalingSession, opts?: ConnectOptions): Promise<PeerConnectionHandle>;
+/**
+ * Viewer role (also used by the Node loopback test): wait for the host's
+ * offer, answer it, exchange ICE, resolve with the inbound data channel.
+ */
+declare function connectViewer(signaling: SignalingSession, opts?: ConnectOptions): Promise<PeerConnectionHandle>;
+
+/**
+ * Minimal data-channel surface the tunnel needs. Matches node-datachannel's
+ * DataChannel (and is trivially mockable in tests).
+ */
+interface DataChannelLike {
+    sendMessage(msg: string): boolean;
+    onMessage(cb: (msg: string | Buffer | ArrayBuffer) => void): void;
+    isOpen(): boolean;
+    bufferedAmount?(): number;
+    maxMessageSize?(): number;
+    setBufferedAmountLowThreshold?(n: number): void;
+    onBufferedAmountLow?(cb: () => void): void;
+}
+/**
+ * Attach the host-side request handler to a data channel: reassemble incoming
+ * requests, proxy them to `localhost:<port>`, and stream responses back.
+ * Returns a stats object updated as requests complete.
+ */
+declare function serveTunnel(dc: DataChannelLike, port: number, jar: CookieJar): {
+    requestCount: number;
+};
+
+interface ProxyRequest {
+    method: string;
+    /** Path + query relative to the tunneled origin. */
+    url: string;
+    headers: HeaderList;
+    body: Uint8Array;
+}
+interface ProxyResponse {
+    status: number;
+    statusText: string;
+    headers: HeaderList;
+    body: Uint8Array;
+    /** Set-Cookie values pulled out for the host cookie jar. */
+    setCookies: string[];
+}
+/**
+ * Forward one request to `localhost:<port>` and collect the full response.
+ * `cookieHeader`, if provided, overrides the request's Cookie header (the host
+ * owns cookies). `accept-encoding` is stripped so the local server returns an
+ * identity body the browser can consume from a Service-Worker-built Response.
+ */
+declare function proxyRequest(port: number, req: ProxyRequest, cookieHeader: string | null): Promise<ProxyResponse>;
+
+interface RunOptions {
+    port: number;
+    env?: NodeJS.ProcessEnv;
+}
+/** Parse `exposeme <port>` argv into a port number. */
+declare function parseArgs(argv: string[]): {
+    port: number;
+};
+/**
+ * Run the tunnel host: mint a code, publish signaling, accept a viewer, and
+ * proxy its requests to localhost:<port>. Resolves when the process is asked to
+ * stop; wires SIGINT for graceful cleanup.
+ */
+declare function run(opts: RunOptions): Promise<void>;
+
+export { CookieJar, type DataChannelLike, type RunOptions, WorkerApi, connectHost, connectViewer, parseArgs, parseSetCookie, proxyRequest, run, serveTunnel };

package/dist/index.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+import {
+  CookieJar,
+  WorkerApi,
+  connectHost,
+  connectViewer,
+  parseArgs,
+  parseSetCookie,
+  proxyRequest,
+  run,
+  serveTunnel
+} from "./chunk-VZEPY6PL.js";
+export {
+  CookieJar,
+  WorkerApi,
+  connectHost,
+  connectViewer,
+  parseArgs,
+  parseSetCookie,
+  proxyRequest,
+  run,
+  serveTunnel
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "exposeme",
+  "version": "0.1.0",
+  "description": "Zero-config, P2P localhost tunnel with a 6-digit code UX.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/iamanishroy/exposeme.git",
+    "directory": "packages/cli"
+  },
+  "homepage": "https://github.com/iamanishroy/exposeme#readme",
+  "keywords": ["tunnel", "localhost", "webrtc", "p2p", "ngrok", "share"],
+  "type": "module",
+  "bin": {
+    "exposeme": "./dist/cli.js"
+  },
+  "files": ["dist"],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "clean": "rm -rf dist .turbo"
+  },
+  "dependencies": {
+    "dotenv": "^16.4.5",
+    "firebase": "^10.14.1",
+    "kleur": "^4.1.5",
+    "node-datachannel": "^0.32.3"
+  },
+  "devDependencies": {
+    "@exposeme/shared": "workspace:*",
+    "@exposeme/signaling": "workspace:*",
+    "@types/node": "^22.10.1",
+    "tsup": "^8.3.0",
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.8"
+  }
+}