kumo-cli 1.0.3 → 1.0.5

package/dist/services/tunnelHelpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnelHelpers.js","sourceRoot":"","sources":["../../src/services/tunnelHelpers.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAE/C,0DAA0D;AAC1D,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,aAAsB;IAC1E,MAAM,WAAW,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,OAAO,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AACrH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,OAAyB;IACxD,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,0BAA0B,CACxC,OAA+B,EAC/B,UAAkB,EAClB,IAAY,EACZ,UAAmB;IAEnB,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CACxC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE;QAChB,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,2BAA2B,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpI,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACpB,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,0CAA0C,EAAE,UAAU,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC,CACL,CAAC;IAEF,IAAI,UAAU;QAAE,eAAe,CAAC,IAAI,GAAG,UAAU,CAAC;IAClD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,4BAA4B,CAC1C,OAA+B,EAC/B,UAAkB,EAClB,IAAY,EACZ,UAAmB;IAEnB,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CACxC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CACpI,CAAC;IAEF,MAAM,YAAY,GAAG,UAAU,UAAU,IAAI,IAAI,EAAE,CAAC;IACpD,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpH,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAClF,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACpD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS;gBACrC,UAAU,UAAU,IAAI,IAAI,EAAE;gBAC9B,oBAAoB,IAAI,EAAE;gBAC1B,UAAU,CAAC,CAAC,CAAC,UAAU,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;gBACxC,UAAU,CAAC,CAAC,CAAC,WAAW,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;aAC1C,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACnB,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,eAAe,CAAC,QAAQ,GAAG,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAChF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,IAAI,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,eAAe,CAAC,YAAY,CAAC,GAAG,eAAe,CAAC,YAAY,CAAC;aAC1D,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;aACjC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/services/tunnelHelpers.test.js

@@ -0,0 +1,42 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { decodeTunnelBody, filterTunnelRequestHeaders, normalizeTunnelPath, resolveTunnelHostHeader, rewriteTunnelResponseHeaders, } from './tunnelHelpers.js';
+test('normalizeTunnelPath falls back to root for malformed paths', () => {
+    assert.equal(normalizeTunnelPath('/api/health'), '/api/health');
+    assert.equal(normalizeTunnelPath('//evil'), '/');
+});
+test('resolveTunnelHostHeader appends port when missing', () => {
+    assert.equal(resolveTunnelHostHeader(3000, 'localhost'), 'localhost:3000');
+    assert.equal(resolveTunnelHostHeader(3000, 'localhost:4000'), 'localhost:4000');
+});
+test('decodeTunnelBody skips get requests and decodes post payloads', () => {
+    assert.equal(decodeTunnelBody({ requestId: '1', method: 'GET', path: '/', headers: {}, port: 3000, body: 'aGk=' }), undefined);
+    assert.equal(decodeTunnelBody({ requestId: '1', method: 'POST', path: '/', headers: {}, port: 3000, body: Buffer.from('hi').toString('base64') })?.toString('utf-8'), 'hi');
+});
+test('filterTunnelRequestHeaders strips hop-by-hop headers and rewrites local origins', () => {
+    const headers = filterTunnelRequestHeaders({
+        Host: 'example.com',
+        Connection: 'keep-alive',
+        Origin: 'http://localhost:8080',
+        Referer: 'http://127.0.0.1:8080/app',
+        Accept: 'application/json',
+    }, '127.0.0.1', 3000, 'localhost:3000');
+    assert.deepEqual(headers, {
+        Origin: 'http://127.0.0.1:3000',
+        Referer: 'http://127.0.0.1:3000/app',
+        Accept: 'application/json',
+        host: 'localhost:3000',
+    });
+});
+test('rewriteTunnelResponseHeaders strips local redirect origins and cookie domain', () => {
+    const headers = rewriteTunnelResponseHeaders({
+        location: 'http://127.0.0.1:3000/login?next=%2F',
+        'set-cookie': 'sid=abc; Domain=localhost; Path=/; Secure',
+        'content-length': '10',
+    }, '127.0.0.1', 3000, 'localhost:3000');
+    assert.deepEqual(headers, {
+        location: '/login?next=%2F',
+        'set-cookie': 'sid=abc; Path=/',
+    });
+});
+//# sourceMappingURL=tunnelHelpers.test.js.map

package/dist/services/tunnelHelpers.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnelHelpers.test.js","sourceRoot":"","sources":["../../src/services/tunnelHelpers.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAE5B,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAClF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/H,MAAM,CAAC,KAAK,CACV,gBAAgB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,EACvJ,IAAI,CACL,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iFAAiF,EAAE,GAAG,EAAE;IAC3F,MAAM,OAAO,GAAG,0BAA0B,CACxC;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,YAAY;QACxB,MAAM,EAAE,uBAAuB;QAC/B,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,kBAAkB;KAC3B,EACD,WAAW,EACX,IAAI,EACJ,gBAAgB,CACjB,CAAC;IAEF,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE;QACxB,MAAM,EAAE,uBAAuB;QAC/B,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,gBAAgB;KACvB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,MAAM,OAAO,GAAG,4BAA4B,CAC1C;QACE,QAAQ,EAAE,sCAAsC;QAChD,YAAY,EAAE,2CAA2C;QACzD,gBAAgB,EAAE,IAAI;KACvB,EACD,WAAW,EACX,IAAI,EACJ,gBAAgB,CACjB,CAAC;IAEF,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE;QACxB,QAAQ,EAAE,iBAAiB;QAC3B,YAAY,EAAE,iBAAiB;KAChC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/tunnelService.js

@@ -1,37 +1,81 @@
+import http from 'node:http';
 import { log } from '../core/logger.js';
+import { decodeTunnelBody, DEFAULT_TUNNEL_HOST, filterTunnelRequestHeaders, normalizeTunnelPath, resolveTunnelHostHeader, rewriteTunnelResponseHeaders, } from './tunnelHelpers.js';
+const MAX_TUNNEL_BODY_BYTES = Number(process.env.KUMO_TUNNEL_BODY_BYTES ?? 10 * 1024 * 1024);
+const MAX_TUNNEL_RESPONSE_BYTES = Number(process.env.KUMO_TUNNEL_RESPONSE_BYTES ?? 10 * 1024 * 1024);
+const TUNNEL_TIMEOUT_MS = Number(process.env.KUMO_TUNNEL_TIMEOUT_MS ?? 30000);
+const allowedPorts = new Set((process.env.KUMO_ALLOWED_TUNNEL_PORTS ?? '')
+    .split(',')
+    .map((port) => Number(port.trim()))
+    .filter((port) => Number.isInteger(port) && port > 0 && port <= 65535));
+function tunnelError(requestId, status, message) {
+    return { type: 'tunnel_response', requestId, status, headers: {}, body: Buffer.from(message).toString('base64') };
+}
+async function proxyHttpRequest(input) {
+    return await new Promise((resolve, reject) => {
+        const req = http.request({
+            protocol: 'http:',
+            hostname: input.hostname,
+            port: input.port,
+            method: input.method,
+            path: input.path,
+            headers: input.headers,
+        }, (res) => {
+            const status = res.statusCode ?? 502;
+            const headers = {};
+            for (const [k, v] of Object.entries(res.headers)) {
+                if (v == null)
+                    continue;
+                headers[k] = Array.isArray(v) ? v.join(',') : String(v);
+            }
+            const chunks = [];
+            let total = 0;
+            res.on('data', (chunk) => {
+                total += chunk.length;
+                if (total > MAX_TUNNEL_RESPONSE_BYTES) {
+                    req.destroy(new Error('response body too large'));
+                    return;
+                }
+                chunks.push(chunk);
+            });
+            res.on('end', () => resolve({ status, headers, body: Buffer.concat(chunks) }));
+            res.on('error', reject);
+        });
+        req.setTimeout(TUNNEL_TIMEOUT_MS, () => req.destroy(new Error('timeout')));
+        req.on('error', reject);
+        if (input.body)
+            req.write(input.body);
+        req.end();
+    });
+}
 // proxy a http request from the server through this cli to a local service
 export async function handleTunnelRequest(req) {
-    const targetHost = req.host || 'localhost';
-    const url = `http://${targetHost}:${req.port}${req.path}`;
-    const filteredHeaders = Object.fromEntries(Object.entries(req.headers)
-        .filter(([k]) => {
-        const lower = k.toLowerCase();
-        return !lower.startsWith('sec-') && !['host', 'connection', 'accept-encoding', 'upgrade-insecure-requests'].includes(lower);
-    })
-        .map(([k, v]) => {
-        const lower = k.toLowerCase();
-        if (lower === 'origin' || lower === 'referer') {
-            return [k, v.replace(/http:\/\/localhost:\d+/g, `http://${targetHost}:${req.port}`)];
-        }
-        return [k, v];
-    }));
+    const port = Number(req.port);
+    if (!Number.isInteger(port) || port < 1 || port > 65535)
+        return tunnelError(req.requestId, 400, 'invalid port');
+    if (allowedPorts.size > 0 && !allowedPorts.has(port))
+        return tunnelError(req.requestId, 403, 'port not allowed');
+    const safePath = normalizeTunnelPath(req.path);
+    const targetHost = DEFAULT_TUNNEL_HOST;
+    const url = `http://${targetHost}:${port}${safePath}`;
+    const hostHeader = resolveTunnelHostHeader(port, req.host);
+    const body = decodeTunnelBody(req);
+    if (body && body.length > MAX_TUNNEL_BODY_BYTES)
+        return tunnelError(req.requestId, 413, 'request body too large');
+    const filteredHeaders = filterTunnelRequestHeaders(req.headers, targetHost, port, hostHeader);
     log(`[tunnel] ${req.method} ${url}`);
     try {
-        const res = await fetch(url, {
+        const res = await proxyHttpRequest({
+            hostname: targetHost,
+            port,
+            path: safePath,
             method: req.method,
             headers: filteredHeaders,
-            body: req.body && req.method !== 'GET' && req.method !== 'HEAD' ? Buffer.from(req.body, 'base64') : undefined,
-            redirect: 'manual',
+            body,
         });
-        const buf = Buffer.from(await res.arrayBuffer());
+        const buf = res.body;
         log(`[tunnel] response ${res.status} ${url} (${buf.length} bytes)`);
-        const respHeaders = Object.fromEntries([...res.headers.entries()].filter(([k]) => !['content-encoding', 'transfer-encoding', 'content-length'].includes(k.toLowerCase())));
-        const remoteOrigin = `http://${targetHost}:${req.port}`;
-        if (respHeaders['location'])
-            respHeaders['location'] = respHeaders['location'].replace(remoteOrigin, '');
-        if (respHeaders['set-cookie']) {
-            respHeaders['set-cookie'] = respHeaders['set-cookie'].replace(/;\s*domain=[^;]*/gi, '').replace(/;\s*secure/gi, '');
-        }
+        const respHeaders = rewriteTunnelResponseHeaders(res.headers, targetHost, port, hostHeader);
         return { type: 'tunnel_response', requestId: req.requestId, status: res.status, headers: respHeaders, body: buf.toString('base64') };
     }
     catch (err) {

package/dist/services/tunnelService.js.map

@@ -1 +1 @@
-{"version":3,"file":"tunnelService.js","sourceRoot":"","sources":["../../src/services/tunnelService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAoBxC,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAqB;IAC7D,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC;IAC3C,MAAM,GAAG,GAAG,UAAU,UAAU,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CACxC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;SACxB,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;QACd,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,2BAA2B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9H,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,EAAE,UAAU,UAAU,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChB,CAAC,CAAC,CACL,CAAC;IACF,GAAG,CAAC,YAAY,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7G,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,GAAG,CAAC,qBAAqB,GAAG,CAAC,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,MAAM,SAAS,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CACpC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CACnI,CAAC;QACF,MAAM,YAAY,GAAG,UAAU,UAAU,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,WAAW,CAAC,UAAU,CAAC;YAAE,WAAW,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACzG,IAAI,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,WAAW,CAAC,YAAY,CAAC,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACtH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACvI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,GAAI,GAAa,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC/E,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"tunnelService.js","sourceRoot":"","sources":["../../src/services/tunnelService.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAoB5B,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;AAC7F,MAAM,yBAAyB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;AACrG,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,KAAK,CAAC,CAAC;AAC9E,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC;KAC1C,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;KAClC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CACzE,CAAC;AAEF,SAAS,WAAW,CAAC,SAAiB,EAAE,MAAc,EAAE,OAAe;IACrE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACpH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAO/B;IACC,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACtB;YACE,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC;YACrC,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,IAAI,IAAI;oBAAE,SAAS;gBACxB,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBACtB,IAAI,KAAK,GAAG,yBAAyB,EAAE,CAAC;oBACtC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;oBAClD,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,UAAU,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,IAAI;YAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAqB;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;IAChH,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACjH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,mBAAmB,CAAC;IACvC,MAAM,GAAG,GAAG,UAAU,UAAU,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;IACtD,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAqB;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;IAClH,MAAM,eAAe,GAAG,0BAA0B,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9F,GAAG,CAAC,YAAY,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC;YACjC,QAAQ,EAAE,UAAU;YACpB,IAAI;YACJ,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,eAAe;YACxB,IAAI;SACL,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;QACrB,GAAG,CAAC,qBAAqB,GAAG,CAAC,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,MAAM,SAAS,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,4BAA4B,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACvI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,GAAI,GAAa,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC/E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/services/tunnelService.test.js

@@ -0,0 +1,91 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import http from 'node:http';
+import { handleTunnelRequest } from './tunnelService.js';
+test('preserves browser client hint headers through tunnel proxy', async () => {
+    const seenHeaders = await new Promise((resolve, reject) => {
+        const server = http.createServer((req, res) => {
+            resolve(req.headers);
+            res.end('ok');
+            server.close();
+        });
+        server.on('error', reject);
+        server.listen(0, '127.0.0.1', async () => {
+            const address = server.address();
+            if (!address || typeof address === 'string')
+                return reject(new Error('server address unavailable'));
+            const response = await handleTunnelRequest({
+                requestId: 'req-1',
+                method: 'GET',
+                path: '/',
+                port: address.port,
+                headers: {
+                    'user-agent': 'Mozilla/5.0 Chrome/120.0.0.0',
+                    'sec-ch-ua': '"Chromium";v="120"',
+                    'sec-ch-ua-mobile': '?0',
+                    'sec-ch-ua-platform': '"Windows"',
+                    'upgrade-insecure-requests': '1',
+                    connection: 'keep-alive',
+                    host: 'provider.ecologynet.local:3000',
+                },
+            });
+            assert.equal(response.status, 200);
+        });
+    });
+    assert.equal(seenHeaders['user-agent'], 'Mozilla/5.0 Chrome/120.0.0.0');
+    assert.equal(seenHeaders['sec-ch-ua'], '"Chromium";v="120"');
+    assert.equal(seenHeaders['sec-ch-ua-mobile'], '?0');
+    assert.equal(seenHeaders['sec-ch-ua-platform'], '"Windows"');
+    assert.equal(seenHeaders['upgrade-insecure-requests'], '1');
+    assert.equal(seenHeaders.connection, 'keep-alive');
+    assert.notEqual(seenHeaders.host, 'provider.ecologynet.local:3000');
+});
+test('replaces non-browser user agents for browser-gated local apps', async () => {
+    const seenHeaders = await new Promise((resolve, reject) => {
+        const server = http.createServer((req, res) => {
+            resolve(req.headers);
+            res.end('ok');
+            server.close();
+        });
+        server.on('error', reject);
+        server.listen(0, '127.0.0.1', async () => {
+            const address = server.address();
+            if (!address || typeof address === 'string')
+                return reject(new Error('server address unavailable'));
+            const response = await handleTunnelRequest({
+                requestId: 'req-2',
+                method: 'GET',
+                path: '/',
+                port: address.port,
+                headers: { 'user-agent': 'Dart/3.0 (dart:io)' },
+            });
+            assert.equal(response.status, 200);
+        });
+    });
+    assert.match(seenHeaders['user-agent'] ?? '', /Chrome\/120/);
+});
+test('modernizes old browser user agents for Rails allow_browser modern gate', async () => {
+    const seenHeaders = await new Promise((resolve, reject) => {
+        const server = http.createServer((req, res) => {
+            resolve(req.headers);
+            res.end('ok');
+            server.close();
+        });
+        server.on('error', reject);
+        server.listen(0, '127.0.0.1', async () => {
+            const address = server.address();
+            if (!address || typeof address === 'string')
+                return reject(new Error('server address unavailable'));
+            const response = await handleTunnelRequest({
+                requestId: 'req-3',
+                method: 'GET',
+                path: '/',
+                port: address.port,
+                headers: { 'user-agent': 'Mozilla/5.0 AppleWebKit/537.36 Chrome/119.0.0.0 Safari/537.36' },
+            });
+            assert.equal(response.status, 200);
+        });
+    });
+    assert.equal(seenHeaders['user-agent'], 'Mozilla/5.0 AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36');
+});
+//# sourceMappingURL=tunnelService.test.js.map

package/dist/services/tunnelService.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnelService.test.js","sourceRoot":"","sources":["../../src/services/tunnelService.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;IAC5E,MAAM,WAAW,GAAG,MAAM,IAAI,OAAO,CAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YACpG,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;gBACzC,SAAS,EAAE,OAAO;gBAClB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE;oBACP,YAAY,EAAE,8BAA8B;oBAC5C,WAAW,EAAE,oBAAoB;oBACjC,kBAAkB,EAAE,IAAI;oBACxB,oBAAoB,EAAE,WAAW;oBACjC,2BAA2B,EAAE,GAAG;oBAChC,UAAU,EAAE,YAAY;oBACxB,IAAI,EAAE,gCAAgC;iBACvC;aACF,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE,WAAW,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,2BAA2B,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;IAC/E,MAAM,WAAW,GAAG,MAAM,IAAI,OAAO,CAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YACpG,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;gBACzC,SAAS,EAAE,OAAO;gBAClB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,EAAE,YAAY,EAAE,oBAAoB,EAAE;aAChD,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,aAAa,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,MAAM,WAAW,GAAG,MAAM,IAAI,OAAO,CAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;YACpG,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;gBACzC,SAAS,EAAE,OAAO;gBAClB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,EAAE,YAAY,EAAE,+DAA+D,EAAE;aAC3F,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,+DAA+D,CAAC,CAAC;AAC3G,CAAC,CAAC,CAAC"}

package/dist/transport/webrtcTransport.js

@@ -0,0 +1,145 @@
+import { log } from '../core/logger.js';
+import { domainForType, unwrapDomainEnvelope, wrapDomainEnvelope } from './webrtcTypes.js';
+const routedDomains = new Set(['prompt', 'session', 'transcript', 'file']);
+export class CliWebRtcTransport {
+    terminals;
+    send;
+    createPeerConnection;
+    hasPermission;
+    routeMessage;
+    peers = new Map();
+    channels = new Map();
+    terminalToSession = new Map();
+    constructor(terminals, send, createPeerConnection, hasPermission = () => true, routeMessage) {
+        this.terminals = terminals;
+        this.send = send;
+        this.createPeerConnection = createPeerConnection;
+        this.hasPermission = hasPermission;
+        this.routeMessage = routeMessage;
+    }
+    setMessageRouter(routeMessage) { this.routeMessage = routeMessage; }
+    async handleSignal(msg) {
+        if (!msg.sessionId)
+            return;
+        if (msg.signalType === 'offer') {
+            await this.acceptOffer(msg.sessionId, msg.payload);
+            return;
+        }
+        if (msg.signalType === 'ice') {
+            const peer = this.peers.get(msg.sessionId);
+            if (peer && msg.payload)
+                await peer.addIceCandidate(msg.payload);
+        }
+    }
+    attachTerminal(terminalId, sessionId) {
+        this.terminalToSession.set(terminalId, sessionId);
+    }
+    sendTerminalOutput(terminalId, data) {
+        const sessionId = this.terminalToSession.get(terminalId);
+        if (!sessionId)
+            return false;
+        return this.sendEnvelope(sessionId, { type: 'terminal_output', terminalId, data });
+    }
+    sendTerminalClosed(terminalId, exitCode) {
+        const sessionId = this.terminalToSession.get(terminalId);
+        this.terminalToSession.delete(terminalId);
+        if (!sessionId)
+            return false;
+        return this.sendEnvelope(sessionId, { type: 'terminal_closed', terminalId, exitCode });
+    }
+    sendMessage(sessionId, payload) {
+        return this.sendEnvelope(sessionId, payload);
+    }
+    close(sessionId) {
+        const ids = sessionId ? [sessionId] : Array.from(this.peers.keys());
+        for (const id of ids) {
+            try {
+                this.channels.get(id)?.close();
+            }
+            catch { }
+            try {
+                this.peers.get(id)?.close();
+            }
+            catch { }
+            this.channels.delete(id);
+            this.peers.delete(id);
+        }
+    }
+    async acceptOffer(sessionId, offer) {
+        if (!this.hasPermission(sessionId)) {
+            this.sendState(sessionId, 'permission_denied');
+            return;
+        }
+        this.close(sessionId);
+        const peer = this.createPeerConnection();
+        this.peers.set(sessionId, peer);
+        peer.onicecandidate = (event) => {
+            if (event.candidate)
+                this.send({ type: 'transport_signal', sessionId, signalType: 'ice', payload: event.candidate });
+        };
+        peer.ondatachannel = (event) => this.attachChannel(sessionId, event.channel);
+        peer.onconnectionstatechange = () => this.sendState(sessionId, peer.connectionState ?? 'unknown');
+        peer.oniceconnectionstatechange = () => this.sendState(sessionId, peer.iceConnectionState ?? 'unknown');
+        await peer.setRemoteDescription(offer);
+        const answer = await peer.createAnswer();
+        await peer.setLocalDescription(answer);
+        this.send({ type: 'transport_signal', sessionId, signalType: 'answer', payload: peer.localDescription ?? answer });
+    }
+    attachChannel(sessionId, channel) {
+        this.channels.set(sessionId, channel);
+        channel.onopen = () => this.sendState(sessionId, 'datachannel_open');
+        channel.onclose = () => this.sendState(sessionId, 'datachannel_closed');
+        channel.onerror = (event) => log(`[webrtc] datachannel error session=${sessionId}: ${String(event)}`);
+        channel.onmessage = (event) => this.handleChannelMessage(sessionId, event.data);
+    }
+    handleChannelMessage(sessionId, raw) {
+        let msg;
+        try {
+            msg = JSON.parse(String(raw));
+        }
+        catch {
+            return;
+        }
+        const payload = unwrapDomainEnvelope(msg);
+        if (!payload)
+            return;
+        if (!this.hasPermission(sessionId)) {
+            this.sendState(sessionId, 'permission_denied');
+            return;
+        }
+        if (routedDomains.has(domainForType(payload.type))) {
+            this.routeMessage?.(sessionId, { ...payload, transportSessionId: sessionId });
+            return;
+        }
+        if (payload.type === 'terminal_create') {
+            const terminalId = this.terminals.create(payload.cols ?? 120, payload.rows ?? 30, payload.cwd);
+            this.attachTerminal(terminalId, sessionId);
+            this.sendEnvelope(sessionId, { type: 'terminal_created', terminalId });
+            return;
+        }
+        if (payload.type === 'heartbeat' || payload.type === 'terminal_created' || payload.type === 'terminal_output' || payload.type === 'terminal_closed')
+            return;
+        if (!this.isSessionTerminal(sessionId, payload.terminalId))
+            return;
+        if (payload.type === 'terminal_input')
+            this.terminals.write(payload.terminalId, payload.data);
+        if (payload.type === 'terminal_resize')
+            this.terminals.resize(payload.terminalId, payload.cols, payload.rows);
+        if (payload.type === 'terminal_close')
+            this.terminals.close(payload.terminalId);
+    }
+    isSessionTerminal(sessionId, terminalId) {
+        return typeof terminalId === 'string' && this.terminalToSession.get(terminalId) === sessionId;
+    }
+    sendEnvelope(sessionId, payload) {
+        const channel = this.channels.get(sessionId);
+        if (!channel || channel.readyState !== 'open')
+            return false;
+        channel.send(JSON.stringify(wrapDomainEnvelope(payload)));
+        return true;
+    }
+    sendState(sessionId, state) {
+        this.send({ type: 'transport_signal', sessionId, signalType: 'state', payload: { state, at: Date.now() } });
+    }
+}
+//# sourceMappingURL=webrtcTransport.js.map

package/dist/transport/webrtcTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webrtcTransport.js","sourceRoot":"","sources":["../../src/transport/webrtcTransport.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,kBAAkB,EAA2H,MAAM,kBAAkB,CAAC;AAMpN,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;AAE3E,MAAM,OAAO,kBAAkB;IAMV;IACA;IACA;IACA;IACT;IATF,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC9C,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC9C,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEtD,YACmB,SAA0B,EAC1B,IAAY,EACZ,oBAA2C,EAC3C,gBAA8B,GAAG,EAAE,CAAC,IAAI,EACjD,YAAwB;QAJf,cAAS,GAAT,SAAS,CAAiB;QAC1B,SAAI,GAAJ,IAAI,CAAQ;QACZ,yBAAoB,GAApB,oBAAoB,CAAuB;QAC3C,kBAAa,GAAb,aAAa,CAA2B;QACjD,iBAAY,GAAZ,YAAY,CAAY;IAC/B,CAAC;IAEJ,gBAAgB,CAAC,YAAuB,IAAU,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC;IAErF,KAAK,CAAC,YAAY,CAAC,GAAqB;QACtC,IAAI,CAAC,GAAG,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,GAAG,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,IAAI,IAAI,GAAG,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,cAAc,CAAC,UAAkB,EAAE,SAAiB;QAClD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACpD,CAAC;IAED,kBAAkB,CAAC,UAAkB,EAAE,IAAY;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,kBAAkB,CAAC,UAAkB,EAAE,QAAgB;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,OAAmD;QAChF,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,SAAkB;QACtB,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAChD,IAAI,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAC7C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,KAAc;QACzD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAI,KAAK,CAAC,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACvH,CAAC,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7E,IAAI,CAAC,uBAAuB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,IAAI,SAAS,CAAC,CAAC;QAClG,IAAI,CAAC,0BAA0B,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,kBAAkB,IAAI,SAAS,CAAC,CAAC;QACxG,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,gBAAgB,IAAI,MAAM,EAAE,CAAC,CAAC;IACrH,CAAC;IAEO,aAAa,CAAC,SAAiB,EAAE,OAAwB;QAC/D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACrE,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACxE,OAAO,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,sCAAsC,SAAS,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtG,OAAO,CAAC,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC;IAEO,oBAAoB,CAAC,SAAiB,EAAE,GAAY;QAC1D,IAAI,GAAqB,CAAC;QAC1B,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAqB,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,IAAI,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,YAAY,EAAE,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAE,OAAO,CAAC,IAAe,IAAI,GAAG,EAAG,OAAO,CAAC,IAAe,IAAI,EAAE,EAAE,OAAO,CAAC,GAAyB,CAAC,CAAC;YAC7I,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC3C,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO;QAC5J,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,UAAgC,CAAC;YAAE,OAAO;QACzF,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB;YAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,UAAoB,EAAE,OAAO,CAAC,IAAc,CAAC,CAAC;QAClH,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,UAAoB,EAAE,OAAO,CAAC,IAAc,EAAE,OAAO,CAAC,IAAc,CAAC,CAAC;QAC5I,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB;YAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,UAAoB,CAAC,CAAC;IAC5F,CAAC;IAEO,iBAAiB,CAAC,SAAiB,EAAE,UAAmB;QAC9D,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC;IAChG,CAAC;IAEO,YAAY,CAAC,SAAiB,EAAE,OAAmD;QACzF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,SAAS,CAAC,SAAiB,EAAE,KAAa;QAChD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9G,CAAC;CACF"}

package/dist/transport/webrtcTransport.test.js

@@ -0,0 +1,104 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { CliWebRtcTransport } from './webrtcTransport.js';
+class FakeChannel {
+    readyState = 'open';
+    sent = [];
+    onopen = null;
+    onmessage = null;
+    onclose = null;
+    onerror = null;
+    send(data) { this.sent.push(data); }
+    close() { this.readyState = 'closed'; }
+}
+class FakePeer {
+    localDescription = null;
+    connectionState = 'new';
+    iceConnectionState = 'new';
+    channel = new FakeChannel();
+    remoteDescription = null;
+    candidates = [];
+    onicecandidate = null;
+    ondatachannel = null;
+    onconnectionstatechange = null;
+    oniceconnectionstatechange = null;
+    async setRemoteDescription(description) { this.remoteDescription = description; }
+    async createAnswer() { return { type: 'answer', sdp: 'answer-sdp' }; }
+    async setLocalDescription(description) { this.localDescription = description; }
+    async addIceCandidate(candidate) { this.candidates.push(candidate); }
+    close() { }
+}
+function makeTerminals() {
+    const writes = [];
+    const resizes = [];
+    const closes = [];
+    return {
+        writes,
+        resizes,
+        closes,
+        create: () => 'term-1',
+        write: (id, data) => { writes.push([id, data]); return true; },
+        resize: (id, cols, rows) => { resizes.push([id, cols, rows]); return true; },
+        close: (id) => { closes.push(id); return true; },
+    };
+}
+test('accepts offer, answers, attaches datachannel and maps terminal io', async () => {
+    const sent = [];
+    const peer = new FakePeer();
+    const terminals = makeTerminals();
+    const transport = new CliWebRtcTransport(terminals, (data) => sent.push(data), () => peer);
+    await transport.handleSignal({ type: 'webrtc_signal', sessionId: 's1', signalType: 'offer', payload: { type: 'offer' } });
+    peer.ondatachannel?.({ channel: peer.channel });
+    peer.channel.onmessage?.({ data: JSON.stringify({ v: 1, type: 'terminal_create', cols: 80, rows: 24 }) });
+    peer.channel.onmessage?.({ data: JSON.stringify({ v: 1, type: 'terminal_input', terminalId: 'term-1', data: 'pwd\r' }) });
+    peer.channel.onmessage?.({ data: JSON.stringify({ v: 1, type: 'terminal_resize', terminalId: 'term-1', cols: 100, rows: 30 }) });
+    assert.deepEqual(peer.remoteDescription, { type: 'offer' });
+    assert.deepEqual(sent.at(0), { type: 'transport_signal', sessionId: 's1', signalType: 'answer', payload: { type: 'answer', sdp: 'answer-sdp' } });
+    assert.deepEqual(JSON.parse(peer.channel.sent[0]), { v: 1, domain: 'terminal', payload: { type: 'terminal_created', terminalId: 'term-1' } });
+    assert.deepEqual(terminals.writes, [['term-1', 'pwd\r']]);
+    assert.deepEqual(terminals.resizes, [['term-1', 100, 30]]);
+});
+test('denies offer and channel messages without local permission', async () => {
+    const sent = [];
+    const peer = new FakePeer();
+    const terminals = makeTerminals();
+    const transport = new CliWebRtcTransport(terminals, (data) => sent.push(data), () => peer, () => false);
+    await transport.handleSignal({ type: 'webrtc_signal', sessionId: 's1', signalType: 'offer', payload: { type: 'offer' } });
+    transport.attachTerminal('term-1', 's1');
+    peer.ondatachannel?.({ channel: peer.channel });
+    peer.channel.onmessage?.({ data: JSON.stringify({ v: 1, type: 'terminal_input', terminalId: 'term-1', data: 'blocked' }) });
+    assert.equal(peer.remoteDescription, null);
+    assert.deepEqual(terminals.writes, []);
+    assert.equal(sent.filter((msg) => JSON.stringify(msg).includes('permission_denied')).length, 1);
+});
+test('ignores terminal messages for another session', async () => {
+    const peer = new FakePeer();
+    const terminals = makeTerminals();
+    const transport = new CliWebRtcTransport(terminals, () => { }, () => peer);
+    await transport.handleSignal({ type: 'webrtc_signal', sessionId: 's2', signalType: 'offer', payload: { type: 'offer' } });
+    transport.attachTerminal('term-1', 's1');
+    peer.ondatachannel?.({ channel: peer.channel });
+    peer.channel.onmessage?.({ data: JSON.stringify({ v: 1, type: 'terminal_input', terminalId: 'term-1', data: 'bad' }) });
+    assert.deepEqual(terminals.writes, []);
+});
+test('routes safe domain datachannel messages through router', async () => {
+    const peer = new FakePeer();
+    const routed = [];
+    const terminals = makeTerminals();
+    const transport = new CliWebRtcTransport(terminals, () => { }, () => peer);
+    transport.setMessageRouter((_sessionId, msg) => routed.push(msg));
+    await transport.handleSignal({ type: 'webrtc_signal', sessionId: 's3', signalType: 'offer', payload: { type: 'offer' } });
+    peer.ondatachannel?.({ channel: peer.channel });
+    peer.channel.onmessage?.({ data: JSON.stringify({ v: 1, domain: 'prompt', payload: { type: 'send_prompt', text: 'hello' } }) });
+    assert.deepEqual(routed, [{ type: 'send_prompt', text: 'hello', transportSessionId: 's3' }]);
+});
+test('sends safe domain response through open datachannel envelope', async () => {
+    const peer = new FakePeer();
+    const terminals = makeTerminals();
+    const transport = new CliWebRtcTransport(terminals, () => { }, () => peer);
+    await transport.handleSignal({ type: 'webrtc_signal', sessionId: 's4', signalType: 'offer', payload: { type: 'offer' } });
+    peer.ondatachannel?.({ channel: peer.channel });
+    assert.equal(transport.sendMessage('s4', { type: 'file_read_result', path: 'a.ts', content: 'ok' }), true);
+    assert.deepEqual(JSON.parse(peer.channel.sent[0]), { v: 1, domain: 'file', payload: { type: 'file_read_result', path: 'a.ts', content: 'ok' } });
+});
+//# sourceMappingURL=webrtcTransport.test.js.map

package/dist/transport/webrtcTransport.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webrtcTransport.test.js","sourceRoot":"","sources":["../../src/transport/webrtcTransport.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,MAAM,WAAW;IACf,UAAU,GAAG,MAAM,CAAC;IACpB,IAAI,GAAa,EAAE,CAAC;IACpB,MAAM,GAAwB,IAAI,CAAC;IACnC,SAAS,GAAgD,IAAI,CAAC;IAC9D,OAAO,GAAwB,IAAI,CAAC;IACpC,OAAO,GAAsC,IAAI,CAAC;IAElD,IAAI,CAAC,IAAY,IAAU,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClD,KAAK,KAAW,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC;CAC9C;AAED,MAAM,QAAQ;IACZ,gBAAgB,GAAY,IAAI,CAAC;IACjC,eAAe,GAAG,KAAK,CAAC;IACxB,kBAAkB,GAAG,KAAK,CAAC;IAC3B,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAC5B,iBAAiB,GAAY,IAAI,CAAC;IAClC,UAAU,GAAc,EAAE,CAAC;IAC3B,cAAc,GAAqD,IAAI,CAAC;IACxE,aAAa,GAA2D,IAAI,CAAC;IAC7E,uBAAuB,GAAwB,IAAI,CAAC;IACpD,0BAA0B,GAAwB,IAAI,CAAC;IAEvD,KAAK,CAAC,oBAAoB,CAAC,WAAoB,IAAmB,IAAI,CAAC,iBAAiB,GAAG,WAAW,CAAC,CAAC,CAAC;IACzG,KAAK,CAAC,YAAY,KAAuB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IACxF,KAAK,CAAC,mBAAmB,CAAC,WAAoB,IAAmB,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,CAAC,CAAC;IACvG,KAAK,CAAC,eAAe,CAAC,SAAkB,IAAmB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC7F,KAAK,KAAU,CAAC;CACjB;AAED,SAAS,aAAa;IACpB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAoC,EAAE,CAAC;IACpD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,OAAO;QACL,MAAM;QACN,OAAO;QACP,MAAM;QACN,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ;QACtB,KAAK,EAAE,CAAC,EAAU,EAAE,IAAY,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;QAC9E,MAAM,EAAE,CAAC,EAAU,EAAE,IAAY,EAAE,IAAY,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;QACpG,KAAK,EAAE,CAAC,EAAU,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,SAAkB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAEpG,MAAM,SAAS,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1H,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1G,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1H,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAEjI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IAClJ,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9I,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;IAC5E,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,SAAkB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAEjH,MAAM,SAAS,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1H,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAE5H,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;IAC/D,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,SAAkB,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAEnF,MAAM,SAAS,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1H,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAExH,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACxE,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,SAAkB,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnF,SAAS,CAAC,gBAAgB,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAElE,MAAM,SAAS,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1H,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAEhI,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;IAC9E,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,SAAkB,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAEnF,MAAM,SAAS,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1H,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAEhD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3G,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACnJ,CAAC,CAAC,CAAC"}

package/dist/transport/webrtcTypes.js

@@ -0,0 +1,29 @@
+export function domainForType(type) {
+    if (!type)
+        return 'unknown';
+    if (type.startsWith('file_'))
+        return 'file';
+    if (['send_prompt', 'send_key', 'select_option', 'submit_input', 'prompt_options', 'text_input'].includes(type))
+        return 'prompt';
+    if (type.startsWith('session_') || type.startsWith('request_session_') || type === 'request_new_session' || type === 'delete_session')
+        return 'session';
+    if (['transcript', 'jsonl_message', 'assistant_done', 'thinking'].includes(type))
+        return 'transcript';
+    if (type.startsWith('terminal_'))
+        return 'terminal';
+    return 'unknown';
+}
+export function wrapDomainEnvelope(msg) {
+    return { v: 1, domain: domainForType(msg.type), payload: msg };
+}
+export function unwrapDomainEnvelope(msg) {
+    if ('domain' in msg) {
+        const payload = msg.payload;
+        if (typeof payload?.type === 'string')
+            return payload;
+    }
+    if ('type' in msg && typeof msg.type === 'string')
+        return msg;
+    return null;
+}
+//# sourceMappingURL=webrtcTypes.js.map

package/dist/transport/webrtcTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webrtcTypes.js","sourceRoot":"","sources":["../../src/transport/webrtcTypes.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,aAAa,CAAC,IAAwB;IACpD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5C,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjI,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,IAAI,KAAK,qBAAqB,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,SAAS,CAAC;IACxJ,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IACtG,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,UAAU,CAAC;IACpD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAA+C;IAChF,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAqB;IACxD,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,OAAO,GAAI,GAAsB,CAAC,OAAO,CAAC;QAChD,IAAI,OAAO,OAAO,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;IACxD,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/transport/webrtcTypes.test.js

@@ -0,0 +1,20 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { domainForType, unwrapDomainEnvelope, wrapDomainEnvelope } from './webrtcTypes.js';
+test('domain envelope classifies low-risk domains', () => {
+    assert.equal(domainForType('send_prompt'), 'prompt');
+    assert.equal(domainForType('request_session_history'), 'session');
+    assert.equal(domainForType('jsonl_message'), 'transcript');
+    assert.equal(domainForType('file_read'), 'file');
+});
+test('domain envelope wraps and unwraps payloads', () => {
+    const msg = { type: 'file_read', path: 'src/index.ts' };
+    const envelope = wrapDomainEnvelope(msg);
+    assert.equal(envelope.domain, 'file');
+    assert.deepEqual(unwrapDomainEnvelope(envelope), msg);
+});
+test('domain envelope accepts legacy terminal payloads', () => {
+    const msg = { v: 1, type: 'terminal_input', terminalId: 't1', data: 'ls' };
+    assert.deepEqual(unwrapDomainEnvelope(msg), msg);
+});
+//# sourceMappingURL=webrtcTypes.test.js.map