frely-cli 0.23.8 → 0.23.10

package/dist/share/gateway.d.ts

@@ -0,0 +1,26 @@
+import { type IncomingHttpHeaders, type IncomingMessage, type Server } from "node:http";
+/**
+ * The local gate of a share: frpc points only at this loopback server, never at the user's service. It serves a request only when the Host
+ * is the share's own name, refuses `CONNECT` and absolute-form targets (so the share cannot be used as a proxy), drops Frely's and frp's
+ * internal headers, and forwards to the one registered loopback port without following redirects. WebSocket upgrades are passed through
+ * as bytes. The link token is checked at the edge (the share Caddy), this is the second layer.
+ */
+export interface GatewayOptions {
+    /** The share's public host name, e.g. `s0123456789abcd.share.example`. */
+    readonly host: string;
+    /** The user's service on 127.0.0.1. */
+    readonly targetPort: number;
+    /** Send `Host: localhost:<port>` upstream; dev servers such as Vite refuse unknown host names. */
+    readonly rewriteHost?: boolean;
+    readonly maxConnections?: number;
+}
+export declare function hostOnly(value: string | undefined): string;
+/** The headers forwarded upstream: no hop-by-hop or internal headers, and the forwarding facts set here. */
+export declare function upstreamHeaders(headers: IncomingHttpHeaders, options: GatewayOptions, keepUpgrade?: boolean): Record<string, string | string[]>;
+/** A request for another host, an absolute-form target or a path that is not a path is not served. */
+export declare function admissible(request: Pick<IncomingMessage, "headers" | "url" | "method">, host: string): string | null;
+export declare function startGateway(options: GatewayOptions): Promise<{
+    server: Server;
+    port: number;
+    close(): Promise<void>;
+}>;

package/dist/share/gateway.js

@@ -0,0 +1,100 @@
+import { createServer, request as httpRequest } from "node:http";
+import { connect as netConnect } from "node:net";
+const HOP_BY_HOP = new Set(["connection", "keep-alive", "proxy-authenticate", "proxy-authorization", "proxy-connection", "te", "trailer", "transfer-encoding", "upgrade"]);
+const INTERNAL = /^(x-frely-|x-frp-|x-forwarded-(host|proto|port|server))/u;
+export function hostOnly(value) {
+    return (value ?? "").toLowerCase().replace(/:\d+$/u, "");
+}
+/** The headers forwarded upstream: no hop-by-hop or internal headers, and the forwarding facts set here. */
+export function upstreamHeaders(headers, options, keepUpgrade = false) {
+    const out = {};
+    for (const [name, value] of Object.entries(headers)) {
+        if (value === undefined || INTERNAL.test(name))
+            continue;
+        if (HOP_BY_HOP.has(name) && !(keepUpgrade && (name === "upgrade" || name === "connection")))
+            continue;
+        out[name] = value;
+    }
+    out["x-forwarded-host"] = options.host;
+    out["x-forwarded-proto"] = "https";
+    if (options.rewriteHost)
+        out.host = `localhost:${options.targetPort}`;
+    return out;
+}
+function refuse(response, status, message) {
+    if (response.headersSent) {
+        response.destroy();
+        return;
+    }
+    response.writeHead(status, { "content-type": "text/plain; charset=utf-8", "cache-control": "no-store" });
+    response.end(`${message}\n`);
+}
+/** A request for another host, an absolute-form target or a path that is not a path is not served. */
+export function admissible(request, host) {
+    if (hostOnly(request.headers.host) !== host)
+        return "wrong host";
+    if (!request.url || !request.url.startsWith("/") || request.url.startsWith("//"))
+        return "bad target";
+    if (request.method === "CONNECT")
+        return "method not allowed";
+    return null;
+}
+export function startGateway(options) {
+    const host = options.host.toLowerCase();
+    const server = createServer((request, response) => {
+        const problem = admissible(request, host);
+        if (problem)
+            return refuse(response, problem === "method not allowed" ? 405 : 404, "Not found");
+        const upstream = httpRequest({ host: "127.0.0.1", port: options.targetPort, method: request.method, path: request.url, headers: upstreamHeaders(request.headers, options) }, (reply) => {
+            const headers = {};
+            for (const [name, value] of Object.entries(reply.headers))
+                if (value !== undefined && !HOP_BY_HOP.has(name))
+                    headers[name] = value;
+            response.writeHead(reply.statusCode ?? 502, reply.statusMessage, headers);
+            reply.pipe(response);
+        });
+        upstream.once("error", () => refuse(response, 502, "The shared service is not reachable on this computer."));
+        response.once("close", () => upstream.destroy());
+        request.pipe(upstream);
+    });
+    server.on("connect", (_request, socket) => { socket.end("HTTP/1.1 405 Method Not Allowed\r\nconnection: close\r\n\r\n"); });
+    server.on("upgrade", (request, socket, head) => {
+        if (admissible(request, host)) {
+            socket.end("HTTP/1.1 404 Not Found\r\nconnection: close\r\n\r\n");
+            return;
+        }
+        const upstream = netConnect({ host: "127.0.0.1", port: options.targetPort });
+        const close = () => { socket.destroy(); upstream.destroy(); };
+        upstream.once("error", () => { if (!socket.destroyed)
+            socket.end("HTTP/1.1 502 Bad Gateway\r\nconnection: close\r\n\r\n"); upstream.destroy(); });
+        socket.once("error", close);
+        upstream.once("connect", () => {
+            const headers = upstreamHeaders(request.headers, options, true);
+            const lines = [`${request.method} ${request.url} HTTP/1.1`];
+            for (const [name, value] of Object.entries(headers))
+                for (const item of Array.isArray(value) ? value : [value])
+                    if (!/[\r\n]/u.test(item))
+                        lines.push(`${name}: ${item}`);
+            upstream.write(`${lines.join("\r\n")}\r\n\r\n`);
+            if (head.length > 0)
+                upstream.write(head);
+            upstream.pipe(socket);
+            socket.pipe(upstream);
+        });
+        upstream.once("close", close);
+        socket.once("close", close);
+    });
+    server.maxConnections = options.maxConnections ?? 256;
+    server.requestTimeout = 0;
+    server.headersTimeout = 30_000;
+    return new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", () => {
+            const address = server.address();
+            if (!address || typeof address === "string")
+                return reject(new Error("The share gateway has no port."));
+            resolve({ server, port: address.port, close: () => new Promise((done) => { server.close(() => done()); server.closeAllConnections(); }) });
+        });
+    });
+}
+//# sourceMappingURL=gateway.js.map

package/dist/share/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../src/share/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,IAAI,WAAW,EAAoF,MAAM,WAAW,CAAC;AACnJ,OAAO,EAAE,OAAO,IAAI,UAAU,EAAe,MAAM,UAAU,CAAC;AAkB9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC,CAAC;AAC3K,MAAM,QAAQ,GAAG,0DAA0D,CAAC;AAE5E,MAAM,UAAU,QAAQ,CAAC,KAAyB;IAChD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,eAAe,CAAC,OAA4B,EAAE,OAAuB,EAAE,WAAW,GAAG,KAAK;IACxG,MAAM,GAAG,GAAsC,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACzD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,YAAY,CAAC,CAAC;YAAE,SAAS;QACtG,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC;IACD,GAAG,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IACvC,GAAG,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC;IACnC,IAAI,OAAO,CAAC,WAAW;QAAE,GAAG,CAAC,IAAI,GAAG,aAAa,OAAO,CAAC,UAAU,EAAE,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,QAAwB,EAAE,MAAc,EAAE,OAAe;IACvE,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IACzD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IACzG,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,OAA4D,EAAE,IAAY;IACnG,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IACjE,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IACtG,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAuB;IAClD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO;YAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,OAAO,KAAK,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAChG,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;YACrL,MAAM,OAAO,GAAsC,EAAE,CAAC;YACtD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBAAE,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YACnI,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,uDAAuD,CAAC,CAAC,CAAC;QAC7G,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5H,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAc,EAAE,IAAI,EAAE,EAAE;QACrD,IAAI,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC7G,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9D,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClJ,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC5B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC;YAC5D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;YAC1K,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC;IACtD,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;IAC1B,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACxG,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/share/run.d.ts

@@ -0,0 +1,43 @@
+import { startGateway } from "./gateway.js";
+import { type ShareControl } from "./control.js";
+export interface ShareOptions {
+    readonly port: number;
+    /** Lifetime of the link in hours; the relay caps it at 24. */
+    readonly ttlHours?: number;
+    readonly rewriteHost?: boolean;
+    /** Skip the confirmation question. */
+    readonly yes?: boolean;
+    readonly json?: boolean;
+}
+export interface FrpcProcess {
+    readonly done: Promise<{
+        code: number | null;
+        stderr: string;
+    }>;
+    kill(): void;
+}
+export interface ShareDeps {
+    readonly control: () => Promise<ShareControl>;
+    readonly ensureFrpc: () => Promise<string>;
+    readonly startGateway: typeof startGateway;
+    readonly spawnFrpc: (binary: string, configPath: string) => FrpcProcess;
+    readonly probe: (port: number) => Promise<boolean>;
+    /** Asks the human; null when there is no terminal to ask on. */
+    readonly confirm: ((question: string) => Promise<boolean>) | null;
+    readonly write: (text: string) => void;
+    readonly signal: AbortSignal;
+    readonly heartbeatMs?: number;
+    /** How long the config file (it holds the session token) stays on disk after frpc started. */
+    readonly configLifetimeMs?: number;
+}
+export declare function parseShareArguments(args: readonly string[]): ShareOptions;
+export declare function shareUsage(): string;
+/** Shares http://127.0.0.1:<port> through Frely's relay until Ctrl+C, the link expires, the allowance is used up or Frely revokes it. Returns the exit code. */
+export declare function runShare(options: ShareOptions, deps: ShareDeps): Promise<number>;
+export declare function probeLoopback(port: number): Promise<boolean>;
+export declare function spawnFrpcProcess(binary: string, configPath: string): FrpcProcess;
+export declare function runShareCommand(args: readonly string[], io: {
+    write: (text: string) => void;
+    interactive: boolean;
+    prompt?: (question: string) => Promise<string>;
+}): Promise<number>;

package/dist/share/run.js

@@ -0,0 +1,163 @@
+import { spawn } from "node:child_process";
+import { connect } from "node:net";
+import { chmod, mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { frpcConfigToml } from "./frpc-config.js";
+import { ensureFrpc } from "./frpc.js";
+import { startGateway } from "./gateway.js";
+import { accountShareControl } from "./control.js";
+const HEARTBEAT_MS = 30_000;
+const HEARTBEAT_FAILURES = 3;
+const MIB = 1024 * 1024;
+export function parseShareArguments(args) {
+    let port, ttlHours;
+    let rewriteHost = false, yes = false, json = false;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === "--ttl" || arg.startsWith("--ttl=")) {
+            const value = arg === "--ttl" ? args[++i] : arg.slice("--ttl=".length);
+            ttlHours = Number(value);
+            if (!value || !Number.isFinite(ttlHours) || ttlHours <= 0 || ttlHours > 24)
+                throw new Error("--ttl must be a number of hours from 0.02 to 24.");
+        }
+        else if (arg === "--rewrite-host")
+            rewriteHost = true;
+        else if (arg === "--yes" || arg === "-y")
+            yes = true;
+        else if (arg === "--json")
+            json = true;
+        else if (arg.startsWith("-"))
+            throw new Error(`Unknown option ${arg}.\n${shareUsage()}`);
+        else if (port === undefined) {
+            port = Number(arg);
+            if (!/^\d+$/u.test(arg) || port < 1 || port > 65535)
+                throw new Error(`Usage: ${shareUsage()}`);
+        }
+        else
+            throw new Error(`Usage: ${shareUsage()}`);
+    }
+    if (port === undefined)
+        throw new Error(`Usage: ${shareUsage()}`);
+    return { port, ...(ttlHours !== undefined ? { ttlHours } : {}), rewriteHost, yes, json };
+}
+export function shareUsage() {
+    return "frely share <port> [--ttl <hours>] [--rewrite-host] [--yes] [--json]";
+}
+/** Shares http://127.0.0.1:<port> through Frely's relay until Ctrl+C, the link expires, the allowance is used up or Frely revokes it. Returns the exit code. */
+export async function runShare(options, deps) {
+    const say = (text) => { if (!options.json)
+        deps.write(text); };
+    if (!(await deps.probe(options.port)))
+        throw new Error(`Nothing is listening on 127.0.0.1:${options.port}. Start your service first.`);
+    if (!options.yes) {
+        if (!deps.confirm)
+            throw new Error("frely share makes a local service public, so it asks you first. Run it in a terminal, or pass --yes if you intend this.");
+        if (!(await deps.confirm(`Make http://127.0.0.1:${options.port} reachable from the Internet by link through Frely? [y/N] `))) {
+            say("Cancelled.\n");
+            return 1;
+        }
+    }
+    const binary = await deps.ensureFrpc();
+    const control = await deps.control();
+    const grant = await control.create({ ...(options.ttlHours !== undefined ? { ttlSeconds: Math.round(options.ttlHours * 3600) } : {}) });
+    let gateway, frpc, directory;
+    let heartbeat, expiry, configTimer;
+    try {
+        gateway = await deps.startGateway({ host: new URL(grant.url).hostname, targetPort: options.port, ...(options.rewriteHost ? { rewriteHost: true } : {}) });
+        directory = await mkdtemp(join(tmpdir(), "frely-share-"));
+        await chmod(directory, 0o700).catch(() => undefined);
+        const configPath = join(directory, "frpc.toml");
+        await writeFile(configPath, frpcConfigToml(grant, gateway.port), { mode: 0o600 });
+        frpc = deps.spawnFrpc(binary, configPath);
+        configTimer = setTimeout(() => { void rm(configPath, { force: true }).catch(() => undefined); }, deps.configLifetimeMs ?? 3000);
+        announce(grant, options, deps.write);
+        const stopped = new Promise((resolve) => {
+            let failures = 0;
+            const stop = (reason) => resolve(reason);
+            deps.signal.addEventListener("abort", () => stop("Stopped."), { once: true });
+            void frpc.done.then(({ code, stderr }) => stop(`frpc exited${code === null ? "" : ` with code ${code}`}${stderr.trim() ? `: ${stderr.trim().split("\n").slice(-3).join(" | ")}` : "."}`));
+            expiry = setTimeout(() => stop("The link expired."), Math.max(0, Date.parse(grant.expiresAt) - Date.now()));
+            heartbeat = setInterval(() => {
+                void control.heartbeat(grant.id).then((status) => {
+                    failures = 0;
+                    if (!status.active)
+                        stop(describe(status.reason));
+                }, () => { failures += 1; if (failures >= HEARTBEAT_FAILURES)
+                    stop("Frely could not be reached."); });
+            }, deps.heartbeatMs ?? HEARTBEAT_MS);
+        });
+        const reason = await stopped;
+        say(`\n${reason}\n`);
+        return reason === "Stopped." ? 0 : 1;
+    }
+    finally {
+        if (heartbeat)
+            clearInterval(heartbeat);
+        if (expiry)
+            clearTimeout(expiry);
+        if (configTimer)
+            clearTimeout(configTimer);
+        frpc?.kill();
+        await gateway?.close().catch(() => undefined);
+        if (directory)
+            await rm(directory, { recursive: true, force: true }).catch(() => undefined);
+        await control.revoke(grant.id).catch(() => undefined);
+    }
+}
+function describe(reason) {
+    if (reason === "quota_exhausted")
+        return "This week's relay allowance is used up; it renews on Monday (UTC).";
+    if (reason === "expired")
+        return "The link expired.";
+    return `Frely ended this share (${reason ?? "revoked"}).`;
+}
+function announce(grant, options, write) {
+    if (options.json) {
+        write(`${JSON.stringify({ id: grant.id, url: grant.url, expiresAt: grant.expiresAt, bandwidthBytesPerSecond: grant.bandwidthBytesPerSecond, remainingBytes: grant.remainingBytes })}\n`);
+        return;
+    }
+    write(`Sharing http://127.0.0.1:${options.port}\n  ${grant.url}\n`);
+    write(`Up to ${(grant.bandwidthBytesPerSecond / MIB).toFixed(1)} MiB/s; ${Math.floor(grant.remainingBytes / MIB)} MiB of relay left this week (UTC). Expires ${grant.expiresAt}.\n`);
+    write("Anyone with the link can open it. Press Ctrl+C to stop.\n");
+}
+export function probeLoopback(port) {
+    return new Promise((resolve) => {
+        const socket = connect({ host: "127.0.0.1", port });
+        const done = (ok) => { socket.destroy(); resolve(ok); };
+        socket.setTimeout(2000, () => done(false));
+        socket.once("connect", () => done(true));
+        socket.once("error", () => done(false));
+    });
+}
+export function spawnFrpcProcess(binary, configPath) {
+    const child = spawn(binary, ["-c", configPath], { stdio: ["ignore", "ignore", "pipe"], windowsHide: true });
+    let stderr = "";
+    child.stderr.on("data", (chunk) => { stderr = (stderr + chunk.toString("utf8")).slice(-4000); });
+    const done = new Promise((resolve) => {
+        child.once("error", (error) => resolve({ code: null, stderr: error.message }));
+        child.once("exit", (code) => resolve({ code, stderr }));
+    });
+    return { done, kill: () => { child.kill(); } };
+}
+export async function runShareCommand(args, io) {
+    const options = parseShareArguments(args);
+    const controller = new AbortController();
+    const onSignal = () => controller.abort();
+    process.once("SIGINT", onSignal);
+    process.once("SIGTERM", onSignal);
+    try {
+        return await runShare(options, {
+            control: accountShareControl,
+            ensureFrpc: () => ensureFrpc({ log: io.write }),
+            startGateway, spawnFrpc: spawnFrpcProcess, probe: probeLoopback,
+            confirm: io.interactive && io.prompt ? async (question) => /^y(es)?$/iu.test((await io.prompt(question)).trim()) : null,
+            write: io.write, signal: controller.signal,
+        });
+    }
+    finally {
+        process.off("SIGINT", onSignal);
+        process.off("SIGTERM", onSignal);
+    }
+}
+//# sourceMappingURL=run.js.map

package/dist/share/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/share/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAmB,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAqB,MAAM,cAAc,CAAC;AA6BtE,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAExB,MAAM,UAAU,mBAAmB,CAAC,IAAuB;IACzD,IAAI,IAAwB,EAAE,QAA4B,CAAC;IAC3D,IAAI,WAAW,GAAG,KAAK,EAAE,GAAG,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,CAAC;IACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvE,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,GAAG,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClJ,CAAC;aAAM,IAAI,GAAG,KAAK,gBAAgB;YAAE,WAAW,GAAG,IAAI,CAAC;aACnD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,IAAI;YAAE,GAAG,GAAG,IAAI,CAAC;aAChD,IAAI,GAAG,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC;aAClC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,MAAM,UAAU,EAAE,EAAE,CAAC,CAAC;aACpF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,EAAE,EAAE,CAAC,CAAC;QACjG,CAAC;;YAAM,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,EAAE,EAAE,CAAC,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,sEAAsE,CAAC;AAChF,CAAC;AAED,gKAAgK;AAChK,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAqB,EAAE,IAAe;IACnE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,CAAC,IAAI,6BAA6B,CAAC,CAAC;IACvI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yHAAyH,CAAC,CAAC;QAC9J,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,yBAAyB,OAAO,CAAC,IAAI,4DAA4D,CAAC,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC;QAAC,CAAC;IAClK,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvI,IAAI,OAA6D,EAAE,IAA6B,EAAE,SAA6B,CAAC;IAChI,IAAI,SAAqD,EAAE,MAAiD,EAAE,WAAsD,CAAC;IACrK,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1J,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC1C,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC;QAChI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAErC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YAC9C,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9E,KAAK,IAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3L,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC5G,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC3B,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBAC/C,QAAQ,GAAG,CAAC,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,MAAM;wBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBACpD,CAAC,EAAE,GAAG,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,IAAI,kBAAkB;oBAAE,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxG,CAAC,EAAE,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;QAC7B,GAAG,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC;QACrB,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,IAAI,SAAS;YAAE,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,WAAW;YAAE,YAAY,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,EAAE,IAAI,EAAE,CAAC;QACb,MAAM,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,SAAS;YAAE,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAA0B;IAC1C,IAAI,MAAM,KAAK,iBAAiB;QAAE,OAAO,oEAAoE,CAAC;IAC9G,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,mBAAmB,CAAC;IACrD,OAAO,2BAA2B,MAAM,IAAI,SAAS,IAAI,CAAC;AAC5D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB,EAAE,OAAqB,EAAE,KAA6B;IACvF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACvN,KAAK,CAAC,4BAA4B,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IACpE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,uBAAuB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC,+CAA+C,KAAK,CAAC,SAAS,KAAK,CAAC,CAAC;IACrL,KAAK,CAAC,2DAA2D,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,CAAC,EAAW,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,UAAkB;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5G,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,IAAI,OAAO,CAA0C,CAAC,OAAO,EAAE,EAAE;QAC5E,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB,EAAE,EAA2G;IACxK,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,OAAO,EAAE;YAC7B,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC;YAC/C,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa;YAC/D,OAAO,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;YACxH,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM;SAC3C,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;AACH,CAAC"}

package/dist/share/service-config.d.ts

@@ -0,0 +1,39 @@
+/** What the relay returns for a service session (`POST /api/user/device-relay/services`, action session). */
+export interface ServiceGrant {
+    readonly id: string;
+    readonly serviceShareId: string;
+    readonly expiresAt: string;
+    readonly node: string;
+    readonly bandwidthBytesPerSecond: number;
+    readonly remainingBytes: number;
+    readonly frpc: {
+        readonly serverAddr: string;
+        readonly serverPort: number;
+        readonly user: string;
+        readonly token: string;
+        readonly proxyName: "svc";
+        readonly proxyType: "stcp";
+        readonly secretKey: string;
+        readonly allowUsers: readonly string[];
+    };
+}
+export type ServiceType = "mcp" | "a2a";
+/** A registered service as `register` and `list` return it. The local port is never part of it. */
+export interface ServiceShareRecord {
+    readonly id: string;
+    readonly deviceId: string;
+    readonly type: ServiceType;
+    readonly label: string;
+    readonly createdAt: string;
+}
+export declare const SERVICE_SHARE_ID: RegExp;
+/** Checks the grant's shape before anything of it reaches a process or a file; throws on anything unexpected. */
+export declare function parseServiceGrant(value: unknown): ServiceGrant;
+/** Checks a `register` / `list` row. */
+export declare function parseServiceRecord(value: unknown): ServiceShareRecord;
+/**
+ * The frpc config for a service: exactly one stcp proxy that points at a port on loopback. `localIP` is fixed here and the port comes
+ * from the author's own command line; the relay never supplies a target. No client plugin, no admin port and no other proxy type are written.
+ * The stcp key and `allowUsers` (Frely's visitor) come from the grant.
+ */
+export declare function serviceFrpcConfigToml(grant: ServiceGrant, localPort: number): string;

package/dist/share/service-config.js

@@ -0,0 +1,85 @@
+const HOST = /^(?:[A-Za-z0-9](?:[A-Za-z0-9.-]{0,251}[A-Za-z0-9])?|\[[0-9A-Fa-f:]{2,45}\])$/u;
+const SECRET = /^[A-Za-z0-9_-]{20,128}$/u;
+const VISITOR = /^[A-Za-z0-9_.-]{1,80}$/u;
+export const SERVICE_SHARE_ID = /^svcs_[0-9a-f]{24}$/u;
+/** Checks the grant's shape before anything of it reaches a process or a file; throws on anything unexpected. */
+export function parseServiceGrant(value) {
+    const fail = () => { throw new Error("Frely returned an invalid service session."); };
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return fail();
+    const grant = value, frpc = grant.frpc;
+    if (typeof grant.id !== "string" || !/^frps_[0-9a-f]{24}$/u.test(grant.id))
+        return fail();
+    if (typeof grant.serviceShareId !== "string" || !SERVICE_SHARE_ID.test(grant.serviceShareId))
+        return fail();
+    if (typeof grant.expiresAt !== "string" || !Number.isFinite(Date.parse(grant.expiresAt)) || typeof grant.node !== "string" || grant.node.length < 1 || grant.node.length > 64)
+        return fail();
+    if (typeof grant.bandwidthBytesPerSecond !== "number" || !Number.isFinite(grant.bandwidthBytesPerSecond) || grant.bandwidthBytesPerSecond < 0)
+        return fail();
+    if (typeof grant.remainingBytes !== "number" || !Number.isFinite(grant.remainingBytes) || grant.remainingBytes < 0)
+        return fail();
+    if (!frpc || typeof frpc !== "object" || Array.isArray(frpc))
+        return fail();
+    const { serverAddr, serverPort, user, token, proxyName, proxyType, secretKey, allowUsers } = frpc;
+    if (typeof serverAddr !== "string" || !HOST.test(serverAddr))
+        return fail();
+    if (typeof serverPort !== "number" || !Number.isInteger(serverPort) || serverPort < 1 || serverPort > 65535)
+        return fail();
+    if (user !== grant.id || typeof token !== "string" || !/^frs_[A-Za-z0-9_-]{20,64}$/u.test(token))
+        return fail();
+    if (proxyName !== "svc" || proxyType !== "stcp")
+        return fail();
+    if (typeof secretKey !== "string" || !SECRET.test(secretKey))
+        return fail();
+    if (!Array.isArray(allowUsers) || allowUsers.length < 1 || allowUsers.length > 4 || allowUsers.some((entry) => typeof entry !== "string" || !VISITOR.test(entry) || entry === "*"))
+        return fail();
+    return {
+        id: grant.id, serviceShareId: grant.serviceShareId, expiresAt: grant.expiresAt, node: grant.node,
+        bandwidthBytesPerSecond: grant.bandwidthBytesPerSecond, remainingBytes: grant.remainingBytes,
+        frpc: { serverAddr, serverPort, user, token, proxyName, proxyType, secretKey, allowUsers: [...allowUsers] },
+    };
+}
+/** Checks a `register` / `list` row. */
+export function parseServiceRecord(value) {
+    const fail = () => { throw new Error("Frely returned an invalid service."); };
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return fail();
+    const row = value;
+    if (typeof row.id !== "string" || !SERVICE_SHARE_ID.test(row.id) || typeof row.deviceId !== "string" || row.deviceId.length > 64)
+        return fail();
+    if (row.type !== "mcp" && row.type !== "a2a")
+        return fail();
+    if (typeof row.label !== "string" || row.label.length < 1 || row.label.length > 60)
+        return fail();
+    return { id: row.id, deviceId: row.deviceId, type: row.type, label: row.label, createdAt: typeof row.createdAt === "string" ? row.createdAt : "" };
+}
+/**
+ * The frpc config for a service: exactly one stcp proxy that points at a port on loopback. `localIP` is fixed here and the port comes
+ * from the author's own command line; the relay never supplies a target. No client plugin, no admin port and no other proxy type are written.
+ * The stcp key and `allowUsers` (Frely's visitor) come from the grant.
+ */
+export function serviceFrpcConfigToml(grant, localPort) {
+    if (!Number.isInteger(localPort) || localPort < 1 || localPort > 65535)
+        throw new Error("Invalid local port.");
+    const q = (text) => JSON.stringify(text);
+    return [
+        `serverAddr = ${q(grant.frpc.serverAddr.replace(/^\[|\]$/gu, ""))}`,
+        `serverPort = ${grant.frpc.serverPort}`,
+        `user = ${q(grant.frpc.user)}`,
+        `loginFailExit = true`,
+        `metadatas.token = ${q(grant.frpc.token)}`,
+        `transport.tls.enable = true`,
+        `log.to = "console"`,
+        `log.level = "warn"`,
+        ``,
+        `[[proxies]]`,
+        `name = "svc"`,
+        `type = "stcp"`,
+        `secretKey = ${q(grant.frpc.secretKey)}`,
+        `allowUsers = [${grant.frpc.allowUsers.map(q).join(", ")}]`,
+        `localIP = "127.0.0.1"`,
+        `localPort = ${localPort}`,
+        ``,
+    ].join("\n");
+}
+//# sourceMappingURL=service-config.js.map

package/dist/share/service-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-config.js","sourceRoot":"","sources":["../../src/share/service-config.ts"],"names":[],"mappings":"AAyBA,MAAM,IAAI,GAAG,+EAA+E,CAAC;AAC7F,MAAM,MAAM,GAAG,0BAA0B,CAAC;AAC1C,MAAM,OAAO,GAAG,yBAAyB,CAAC;AAC1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAEvD,iHAAiH;AACjH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,IAAI,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC/E,MAAM,KAAK,GAAG,KAAgC,EAAE,IAAI,GAAG,KAAK,CAAC,IAA2C,CAAC;IACzG,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC1F,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC5G,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,EAAE,CAAC;IAC7L,IAAI,OAAO,KAAK,CAAC,uBAAuB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC7J,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAClI,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC5E,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAClG,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC5E,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,KAAK;QAAE,OAAO,IAAI,EAAE,CAAC;IAC3H,IAAI,IAAI,KAAK,KAAK,CAAC,EAAE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAChH,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,IAAI,EAAE,CAAC;IAC/D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAClM,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChG,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc;QAC5F,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,CAAa,EAAE;KACxH,CAAC;AACJ,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,IAAI,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC/E,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,EAAE,CAAC;IAChJ,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,EAAE,CAAC;IAC5D,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,EAAE,CAAC;IAClG,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACrJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAmB,EAAE,SAAiB;IAC1E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/G,MAAM,CAAC,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO;QACL,gBAAgB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE;QACnE,gBAAgB,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE;QACvC,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC9B,sBAAsB;QACtB,qBAAqB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QAC1C,6BAA6B;QAC7B,oBAAoB;QACpB,oBAAoB;QACpB,EAAE;QACF,aAAa;QACb,cAAc;QACd,eAAe;QACf,eAAe,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;QACxC,iBAAiB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC3D,uBAAuB;QACvB,eAAe,SAAS,EAAE;QAC1B,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/share/service-control.d.ts

@@ -0,0 +1,15 @@
+import { type ShareHeartbeat } from "./control.js";
+import { type ServiceGrant, type ServiceShareRecord, type ServiceType } from "./service-config.js";
+export interface ServiceControl {
+    register(input: {
+        type: ServiceType;
+        label: string;
+    }): Promise<ServiceShareRecord>;
+    list(): Promise<ServiceShareRecord[]>;
+    remove(serviceShareId: string): Promise<void>;
+    session(serviceShareId: string): Promise<ServiceGrant>;
+    heartbeat(sessionId: string): Promise<ShareHeartbeat>;
+    revoke(sessionId: string): Promise<void>;
+}
+/** Calls Frely's service route as the signed-in user. Only the type and label are registered; the local port never leaves this computer. */
+export declare function accountServiceControl(): Promise<ServiceControl>;

package/dist/share/service-control.js

@@ -0,0 +1,31 @@
+import { ensureDevice } from "../device/control.js";
+import { accountRelayCaller } from "./control.js";
+import { parseServiceGrant, parseServiceRecord } from "./service-config.js";
+const SERVICES_PATH = "/api/user/device-relay/services";
+/** Calls Frely's service route as the signed-in user. Only the type and label are registered; the local port never leaves this computer. */
+export async function accountServiceControl() {
+    const call = await accountRelayCaller(SERVICES_PATH);
+    return {
+        async register(input) {
+            const device = await ensureDevice();
+            return parseServiceRecord(await call({ action: "register", deviceId: device.deviceId, type: input.type, label: input.label }));
+        },
+        async list() {
+            const value = await call({ action: "list" });
+            const items = value && typeof value === "object" ? value.items : undefined;
+            if (!Array.isArray(items))
+                throw new Error("Frely returned an invalid service list.");
+            return items.map(parseServiceRecord);
+        },
+        async remove(serviceShareId) { await call({ action: "remove", serviceShareId }); },
+        async session(serviceShareId) { return parseServiceGrant(await call({ action: "session", serviceShareId })); },
+        async heartbeat(sessionId) {
+            const value = await call({ action: "heartbeat", sessionId });
+            if (!value || typeof value !== "object" || typeof value.active !== "boolean")
+                throw new Error("Frely returned an invalid service status.");
+            return value;
+        },
+        async revoke(sessionId) { await call({ action: "revoke", sessionId }); },
+    };
+}
+//# sourceMappingURL=service-control.js.map

package/dist/share/service-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-control.js","sourceRoot":"","sources":["../../src/share/service-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAuB,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAgE,MAAM,qBAAqB,CAAC;AAE1I,MAAM,aAAa,GAAG,iCAAiC,CAAC;AAWxD,4IAA4I;AAC5I,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACrD,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,KAAK;YAClB,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;YACpC,OAAO,kBAAkB,CAAC,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjI,CAAC;QACD,KAAK,CAAC,IAAI;YACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAA6B,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACtF,OAAO,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,cAAc,IAAI,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,KAAK,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,iBAAiB,CAAC,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9G,KAAK,CAAC,SAAS,CAAC,SAAS;YACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA8B,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACrK,OAAO,KAAuB,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;KACzE,CAAC;AACJ,CAAC"}

package/dist/share/service-run.d.ts

@@ -0,0 +1,55 @@
+import { type ServiceGrant, type ServiceType } from "./service-config.js";
+import { type ServiceControl } from "./service-control.js";
+import { type LocalService } from "./service-state.js";
+import { ALLOWANCE_NOTE } from "./allowance.js";
+import { type FrpcProcess } from "./run.js";
+export { ALLOWANCE_NOTE };
+export interface ServiceShareOptions {
+    readonly type: ServiceType;
+    readonly port: number;
+    readonly label: string;
+    readonly background: boolean;
+    readonly json: boolean;
+}
+export declare function serviceUsage(): string;
+export declare function parseServiceShareArguments(args: readonly string[]): ServiceShareOptions;
+export interface ServiceSessionDeps {
+    readonly control: ServiceControl;
+    readonly ensureFrpc: () => Promise<string>;
+    readonly spawnFrpc: (binary: string, configPath: string) => FrpcProcess;
+    readonly write: (text: string) => void;
+    readonly signal: AbortSignal;
+    readonly heartbeatMs?: number;
+    readonly configLifetimeMs?: number;
+    /** Called once the session is up, with the grant (for the allowance line). */
+    readonly onGrant?: (grant: ServiceGrant) => void;
+}
+/** One session of one service: ask Frely for it, run frpc on it, heartbeat, and revoke when it ends. Returns why it ended. */
+export declare function runServiceSession(service: Pick<LocalService, "serviceShareId" | "port">, deps: ServiceSessionDeps): Promise<{
+    reason: string;
+    stopped: boolean;
+}>;
+export declare function allowanceLines(grant: ServiceGrant): string[];
+/** Keeps one service connected until aborted: when a session ends for any reason but a stop, ask for a new one after a growing pause. */
+export declare function keepServiceConnected(service: Pick<LocalService, "serviceShareId" | "port" | "label">, deps: ServiceSessionDeps, sleep?: (ms: number, signal: AbortSignal) => Promise<void>): Promise<void>;
+/** Runs inside the device daemon: every service saved with `background` stays connected; a stop or removal in the state file ends it within seconds. */
+export declare function superviseServices(options: {
+    signal: AbortSignal;
+    log: (text: string) => void;
+    pollMs?: number;
+    control?: () => Promise<ServiceControl>;
+    session?: Partial<ServiceSessionDeps>;
+}): Promise<void>;
+export interface ServiceCommandIo {
+    readonly write: (text: string) => void;
+}
+export interface ServiceCommandDeps {
+    readonly control: () => Promise<ServiceControl>;
+    readonly probe: (port: number) => Promise<boolean>;
+    readonly ensureFrpc: () => Promise<string>;
+    readonly spawnFrpc: (binary: string, configPath: string) => FrpcProcess;
+    readonly signal: AbortSignal;
+    /** Installs / restarts the background service so it picks the service up. */
+    readonly installDaemon: () => Promise<void>;
+}
+export declare function runServiceCommand(args: readonly string[], io: ServiceCommandIo, deps: ServiceCommandDeps): Promise<number>;