localpreview 0.1.0 → 0.2.1

package/dist/capture-route.d.ts

@@ -0,0 +1,38 @@
+import { type CaptureTarget, type TunnelTarget } from "@localpreview/protocol";
+export declare const CAPTURE_PATH_PREFIX = "/__localpreview/capture";
+export type ParsedCapturePath = {
+    readonly hostname: string;
+    readonly path: string;
+    readonly port: number;
+    readonly protocol: TunnelTarget["protocol"];
+};
+type ParseCapturePathResult = {
+    readonly ok: true;
+    readonly parsed: ParsedCapturePath;
+} | {
+    readonly ok: false;
+};
+/**
+ * Parses an internal capture route:
+ * `/__localpreview/capture/<protocol>/<host>/<port>/<original-path>`.
+ */
+export declare const parseCapturePath: (requestPath: string) => ParseCapturePathResult;
+/** Builds the internal capture path prefix for cookie isolation. */
+export declare const buildCaptureCookiePathPrefix: (parsed: ParsedCapturePath) => string;
+/** Encodes a hostname for use in capture path segments. */
+export declare const encodeCaptureHostname: (hostname: string) => string;
+export type ResolvedRoute = {
+    readonly capturePath: ParsedCapturePath;
+    readonly kind: "capture";
+    readonly target: TunnelTarget;
+} | {
+    readonly kind: "invalid-capture";
+    readonly message: string;
+} | {
+    readonly kind: "primary";
+    readonly target: TunnelTarget;
+};
+/** Resolves a proxied request to either the primary target or a captured backend. */
+export declare const resolveRoute: (requestPath: string, primaryTarget: TunnelTarget, captures: ReadonlyArray<CaptureTarget>) => ResolvedRoute;
+export {};
+//# sourceMappingURL=capture-route.d.ts.map

package/dist/capture-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-route.d.ts","sourceRoot":"","sources":["../src/capture-route.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,YAAY,EAClB,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,mBAAmB,4BAA4B,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;CAC7C,CAAC;AAEF,KAAK,sBAAsB,GACvB;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;CACpC,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;CACpB,CAAC;AAEN;;;GAGG;AACH,eAAO,MAAM,gBAAgB,GAAI,aAAa,MAAM,KAAG,sBA+CtD,CAAC;AAEF,oEAAoE;AACpE,eAAO,MAAM,4BAA4B,GAAI,QAAQ,iBAAiB,KAAG,MAC6B,CAAC;AAEvG,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB,GAAI,UAAU,MAAM,KAAG,MACA,CAAC;AAE1D,MAAM,MAAM,aAAa,GACrB;IACE,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B,CAAC;AAEN,qFAAqF;AACrF,eAAO,MAAM,YAAY,GACvB,aAAa,MAAM,EACnB,eAAe,YAAY,EAC3B,UAAU,aAAa,CAAC,aAAa,CAAC,KACrC,aAyBF,CAAC"}

package/dist/capture-route.js

@@ -0,0 +1,91 @@
+import { captureToTunnelTarget, findCapture, normalizeLoopbackHostname, } from "@localpreview/protocol";
+export const CAPTURE_PATH_PREFIX = "/__localpreview/capture";
+/**
+ * Parses an internal capture route:
+ * `/__localpreview/capture/<protocol>/<host>/<port>/<original-path>`.
+ */
+export const parseCapturePath = (requestPath) => {
+    const pathname = splitPathname(requestPath);
+    if (!pathname.startsWith(`${CAPTURE_PATH_PREFIX}/`)) {
+        return { ok: false };
+    }
+    const suffix = pathname.slice(CAPTURE_PATH_PREFIX.length + 1);
+    const segments = suffix.split("/");
+    if (segments.length < 4) {
+        return { ok: false };
+    }
+    const [protocolText, encodedHost, portText, ...rest] = segments;
+    const protocol = parseProtocol(protocolText);
+    if (protocol === undefined) {
+        return { ok: false };
+    }
+    const port = Number(portText);
+    if (!Number.isInteger(port) || port < 1 || port > 65_535) {
+        return { ok: false };
+    }
+    let hostname;
+    try {
+        hostname = normalizeLoopbackHostname(decodeURIComponent(encodedHost ?? ""));
+    }
+    catch {
+        return { ok: false };
+    }
+    const pathSuffix = rest.length === 0 ? "/" : `/${rest.join("/")}`;
+    const query = splitQuery(requestPath);
+    return {
+        ok: true,
+        parsed: {
+            hostname,
+            path: query === undefined ? pathSuffix : `${pathSuffix}?${query}`,
+            port,
+            protocol,
+        },
+    };
+};
+/** Builds the internal capture path prefix for cookie isolation. */
+export const buildCaptureCookiePathPrefix = (parsed) => `${CAPTURE_PATH_PREFIX}/${parsed.protocol}/${encodeCaptureHostname(parsed.hostname)}/${parsed.port}`;
+/** Encodes a hostname for use in capture path segments. */
+export const encodeCaptureHostname = (hostname) => encodeURIComponent(normalizeLoopbackHostname(hostname));
+/** Resolves a proxied request to either the primary target or a captured backend. */
+export const resolveRoute = (requestPath, primaryTarget, captures) => {
+    const parsedCapture = parseCapturePath(requestPath);
+    if (!parsedCapture.ok) {
+        return {
+            kind: "primary",
+            target: primaryTarget,
+        };
+    }
+    const { parsed } = parsedCapture;
+    const capture = findCapture(captures, parsed.hostname, parsed.port);
+    if (capture === undefined) {
+        return {
+            kind: "invalid-capture",
+            message: `Capture route is not allowlisted: ${parsed.hostname}:${parsed.port}.`,
+        };
+    }
+    return {
+        capturePath: parsed,
+        kind: "capture",
+        target: captureToTunnelTarget(capture, parsed.protocol),
+    };
+};
+const parseProtocol = (value) => {
+    if (value === "http" || value === "https") {
+        return value;
+    }
+    return undefined;
+};
+const splitPathname = (requestPath) => {
+    const questionMark = requestPath.indexOf("?");
+    if (questionMark === -1) {
+        return requestPath;
+    }
+    return requestPath.slice(0, questionMark);
+};
+const splitQuery = (requestPath) => {
+    const questionMark = requestPath.indexOf("?");
+    if (questionMark === -1) {
+        return undefined;
+    }
+    return requestPath.slice(questionMark + 1);
+};

package/dist/capture-shim.d.ts

@@ -0,0 +1,18 @@
+import type { CaptureTarget } from "@localpreview/protocol";
+import { encodeCaptureHostname } from "./capture-route.js";
+export { encodeCaptureHostname };
+/** Generates the inline browser shim injected into proxied HTML responses. */
+export declare const buildCaptureShimScript: (captures: ReadonlyArray<CaptureTarget>) => string;
+/** Injects the capture shim into an HTML document string. */
+export declare const injectCaptureShim: (html: string, shimScript: string) => string;
+/** Returns true when the response looks like HTML suitable for shim injection. */
+export declare const isHtmlResponse: (contentType: string | null) => boolean;
+/** Strips CSP headers that would block the injected shim. */
+export declare const stripContentSecurityPolicy: (headers: ReadonlyArray<readonly [string, string]>) => Array<readonly [string, string]>;
+/** Builds the canonical local frontend origin used for Origin/Referer simulation. */
+export declare const buildFrontendOrigin: (target: {
+    readonly hostname: string;
+    readonly port: number;
+    readonly protocol: "http" | "https";
+}) => string;
+//# sourceMappingURL=capture-shim.d.ts.map

package/dist/capture-shim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-shim.d.ts","sourceRoot":"","sources":["../src/capture-shim.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAuB,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhF,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,GAAI,UAAU,aAAa,CAAC,aAAa,CAAC,KAAG,MAU/E,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,EAAE,YAAY,MAAM,KAAG,MAcpE,CAAC;AAEF,kFAAkF;AAClF,eAAO,MAAM,cAAc,GAAI,aAAa,MAAM,GAAG,IAAI,KAAG,OACa,CAAC;AAE1E,6DAA6D;AAC7D,eAAO,MAAM,0BAA0B,GACrC,SAAS,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAChD,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAI9B,CAAC;AAEL,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,GAAI,QAAQ;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CACrC,KAAG,MAAkE,CAAC"}

package/dist/capture-shim.js

@@ -0,0 +1,34 @@
+import { CAPTURE_PATH_PREFIX, encodeCaptureHostname } from "./capture-route.js";
+export { encodeCaptureHostname };
+/** Generates the inline browser shim injected into proxied HTML responses. */
+export const buildCaptureShimScript = (captures) => {
+    const config = JSON.stringify({
+        captures: captures.map((capture) => ({
+            hostname: capture.hostname,
+            port: capture.port,
+        })),
+        prefix: CAPTURE_PATH_PREFIX,
+    });
+    return `(function(){var cfg=${config};var caps=cfg.captures;var prefix=cfg.prefix;function normHost(h){return h==="::1"?"[::1]":h.toLowerCase();}function matchesCapture(url){var host=normHost(url.hostname);var port=url.port?Number(url.port):(url.protocol==="https:"?443:80);for(var i=0;i<caps.length;i++){var cap=caps[i];if(normHost(cap.hostname)===host&&cap.port===port){return true;}}return false;}function rewriteUrl(input){var url=new URL(input,window.location.href);if(!matchesCapture(url)){return input;}var proto=url.protocol.replace(":","");var host=encodeURIComponent(normHost(url.hostname));var path=url.pathname+url.search;return prefix+"/"+proto+"/"+host+"/"+url.port+path;}function warnUnsupported(api,url){console.error("[localpreview] "+api+" to captured local backend is not supported in v1: "+url+". Use fetch/XHR or run localpreview connect for that service directly.");}var origFetch=window.fetch;window.fetch=function(input,init){try{var url=typeof input==="string"?input:input instanceof URL?input.href:input.url;if(typeof url==="string"&&/^https?:\\/\\//.test(url)){var rewritten=rewriteUrl(url);if(rewritten!==url){return origFetch.call(this,rewritten,init);}}}catch(e){}return origFetch.call(this,input,init);};if(typeof XMLHttpRequest!=="undefined"){var origOpen=XMLHttpRequest.prototype.open;XMLHttpRequest.prototype.open=function(method,url){try{if(typeof url==="string"&&/^https?:\\/\\//.test(url)){var rewritten=rewriteUrl(url);if(rewritten!==url){return origOpen.call(this,method,rewritten);}}}catch(e){}return origOpen.apply(this,arguments);};}if(typeof window.WebSocket!=="undefined"){var OrigWebSocket=window.WebSocket;window.WebSocket=function(url,protocols){try{var parsed=new URL(url,window.location.href);if(matchesCapture(parsed)){warnUnsupported("WebSocket",url);throw new Error("LocalPreview does not proxy WebSocket connections to captured backends in v1.");}}catch(e){if(e instanceof Error&&e.message.indexOf("LocalPreview")!==-1){throw e;}}return protocols===undefined?new OrigWebSocket(url):new OrigWebSocket(url,protocols);};if(OrigWebSocket.prototype){window.WebSocket.prototype=OrigWebSocket.prototype;}}if(typeof window.EventSource!=="undefined"){var OrigEventSource=window.EventSource;window.EventSource=function(url,init){try{var parsed=new URL(url,window.location.href);if(matchesCapture(parsed)){warnUnsupported("EventSource",url);throw new Error("LocalPreview does not proxy EventSource connections to captured backends in v1.");}}catch(e){if(e instanceof Error&&e.message.indexOf("LocalPreview")!==-1){throw e;}}return init===undefined?new OrigEventSource(url):new OrigEventSource(url,init);};if(OrigEventSource.prototype){window.EventSource.prototype=OrigEventSource.prototype;}}})();`;
+};
+/** Injects the capture shim into an HTML document string. */
+export const injectCaptureShim = (html, shimScript) => {
+    const scriptTag = `<script>${shimScript}</script>`;
+    if (html.includes("</head>")) {
+        return html.replace("</head>", `${scriptTag}</head>`);
+    }
+    const bodyMatch = html.match(/<body[^>]*>/i);
+    if (bodyMatch !== null) {
+        return html.replace(bodyMatch[0], `${bodyMatch[0]}${scriptTag}`);
+    }
+    return `${scriptTag}${html}`;
+};
+/** Returns true when the response looks like HTML suitable for shim injection. */
+export const isHtmlResponse = (contentType) => contentType !== null && contentType.toLowerCase().includes("text/html");
+/** Strips CSP headers that would block the injected shim. */
+export const stripContentSecurityPolicy = (headers) => headers.filter(([name]) => {
+    const lower = name.toLowerCase();
+    return lower !== "content-security-policy" && lower !== "content-security-policy-report-only";
+});
+/** Builds the canonical local frontend origin used for Origin/Referer simulation. */
+export const buildFrontendOrigin = (target) => `${target.protocol}://${target.hostname}:${target.port}`;

package/dist/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAKA,OAAO,EAAW,MAAM,EAAiB,MAAM,QAAQ,CAAC;AAOxD,OAAO,EAAE,aAAa,EAAgB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AA6BhF,eAAO,MAAM,MAAM,GACjB,MAAM,aAAa,CAAC,MAAM,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,aAAa,CAkBrD,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,MAAM,aAAa,CAAC,MAAM,CAAC,KAAG,aAAa,CAAC,MAAM,CAC1C,CAAC"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAQA,OAAO,EAAW,MAAM,EAAiB,MAAM,QAAQ,CAAC;AAOxD,OAAO,EAAE,aAAa,EAAgB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AA8BhF,eAAO,MAAM,MAAM,GACjB,MAAM,aAAa,CAAC,MAAM,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,aAAa,CAkBrD,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,MAAM,aAAa,CAAC,MAAM,CAAC,KAAG,aAAa,CAAC,MAAM,CAC1C,CAAC"}

package/dist/command.js

@@ -1,6 +1,6 @@
-import { parseTarget, validateRequestedSubdomain, } from "@localpreview/protocol";
+import { formatCaptureOrigin, parseCaptureHostPort, parseTarget, validateRequestedSubdomain, } from "@localpreview/protocol";
 import { Console, Effect, Layer, Option } from "effect";
-import { CliConfig, CliConfigLive, LOCAL_CONTROL_PLANE_URL } from "./config.js";
+import { CliConfig, CliConfigLive, LOCAL_CONTROL_PLANE_URL, normalizeControlPlaneUrl } from "./config.js";
 import { ControlPlaneClient, ControlPlaneClientLive, } from "./control-plane.js";
 import { CliUsageError, errorMessage } from "./errors.js";
 import { LocalProxyLive } from "./local-proxy.js";
@@ -30,16 +30,19 @@ const isLegacyConnectInvocation = (argv) => {
     return first !== "connect" && !first.startsWith("-");
 };
 const printHelp = () => Console.log([
-    "Usage: localpreview connect <port|target-url> [--name subdomain] [-l|--local]",
-    "       localpreview clean <subdomain> [--force] [-l|--local] [--admin-token token]",
-    "       localpreview clean --all --force [-l|--local] [--admin-token token]",
+    "Usage: localpreview connect <port|target-url> [--name subdomain] [--capture host:port] [-l|--local] [--control-plane url]",
+    "       localpreview clean <subdomain> [--force] [-l|--local] [--control-plane url] [--admin-token token]",
+    "       localpreview clean --all --force [-l|--local] [--control-plane url] [--admin-token token]",
     "",
     "Examples:",
     "  localpreview connect 3000",
+    "  localpreview connect 5173 --capture localhost:4000",
     "  localpreview connect https://localhost:3000 --name proyecto",
     "  localpreview connect 3000 -l",
+    "  localpreview connect 3000 --control-plane https://staging.localpreview.dev",
     "  localpreview clean proyecto --force",
     "  localpreview clean --all --force",
+    "  localpreview clean demo --control-plane https://staging.localpreview.dev --admin-token ...",
 ].join("\n"));
 const parseCommand = (argv) => {
     if (argv[0] === "clean") {
@@ -75,14 +78,20 @@ const parseConnectArgs = (argv) => {
     const target = rest.shift();
     if (target === undefined || target.startsWith("-")) {
         return {
-            message: "Usage: localpreview connect <port|target-url> [--name subdomain] [-l|--local]",
+            message: "Usage: localpreview connect <port|target-url> [--name subdomain] [--capture host:port] [-l|--local] [--control-plane url]",
             ok: false,
         };
     }
     let controlPlane;
     let requestedName;
+    let usedLocalControlPlane = false;
+    let usedControlPlaneFlag = false;
+    const captures = [];
     for (let index = 0; index < rest.length; index += 1) {
         const arg = rest[index];
+        if (arg === undefined) {
+            continue;
+        }
         if (arg === "--name") {
             const value = readRequiredOptionValue(rest, index, "--name");
             if (!value.ok) {
@@ -92,8 +101,38 @@ const parseConnectArgs = (argv) => {
             index += 1;
             continue;
         }
-        if (arg === "-l" || arg === "--local") {
-            controlPlane = LOCAL_CONTROL_PLANE_URL;
+        if (arg === "--capture") {
+            const value = readRequiredOptionValue(rest, index, "--capture");
+            if (!value.ok) {
+                return value;
+            }
+            const parsedCapture = parseCaptureHostPort(value.value);
+            if (!parsedCapture.ok) {
+                return {
+                    message: parsedCapture.message,
+                    ok: false,
+                };
+            }
+            captures.push(parsedCapture.capture);
+            index += 1;
+            continue;
+        }
+        const controlPlaneFlag = readControlPlaneFlag(rest, index, arg, {
+            usedControlPlaneFlag,
+            usedLocalControlPlane,
+        });
+        if (!controlPlaneFlag.ok) {
+            return controlPlaneFlag;
+        }
+        if (controlPlaneFlag.handled) {
+            if (controlPlaneFlag.usedLocalControlPlane) {
+                usedLocalControlPlane = true;
+            }
+            if (controlPlaneFlag.usedControlPlaneFlag) {
+                usedControlPlaneFlag = true;
+            }
+            controlPlane = controlPlaneFlag.controlPlane ?? controlPlane;
+            index = controlPlaneFlag.nextIndex;
             continue;
         }
         return {
@@ -103,6 +142,7 @@ const parseConnectArgs = (argv) => {
     }
     return {
         config: {
+            captures,
             controlPlane: toOption(controlPlane),
             requestedName: toOption(requestedName),
             target,
@@ -117,8 +157,13 @@ const parseCleanArgs = (argv) => {
     let controlPlane;
     let force = false;
     let subdomain;
+    let usedLocalControlPlane = false;
+    let usedControlPlaneFlag = false;
     for (let index = 0; index < rest.length; index += 1) {
         const arg = rest[index];
+        if (arg === undefined) {
+            continue;
+        }
         if (arg === "--admin-token") {
             const value = readRequiredOptionValue(rest, index, "--admin-token");
             if (!value.ok) {
@@ -136,8 +181,22 @@ const parseCleanArgs = (argv) => {
             force = true;
             continue;
         }
-        if (arg === "-l" || arg === "--local") {
-            controlPlane = LOCAL_CONTROL_PLANE_URL;
+        const controlPlaneFlag = readControlPlaneFlag(rest, index, arg, {
+            usedControlPlaneFlag,
+            usedLocalControlPlane,
+        });
+        if (!controlPlaneFlag.ok) {
+            return controlPlaneFlag;
+        }
+        if (controlPlaneFlag.handled) {
+            if (controlPlaneFlag.usedLocalControlPlane) {
+                usedLocalControlPlane = true;
+            }
+            if (controlPlaneFlag.usedControlPlaneFlag) {
+                usedControlPlaneFlag = true;
+            }
+            controlPlane = controlPlaneFlag.controlPlane ?? controlPlane;
+            index = controlPlaneFlag.nextIndex;
             continue;
         }
         if (arg !== undefined && !arg.startsWith("-") && subdomain === undefined) {
@@ -163,7 +222,7 @@ const parseCleanArgs = (argv) => {
     }
     if (!all && subdomain === undefined) {
         return {
-            message: "Usage: localpreview clean <subdomain> [--force] [-l|--local] [--admin-token token]\n       localpreview clean --all --force [-l|--local] [--admin-token token]",
+            message: "Usage: localpreview clean <subdomain> [--force] [-l|--local] [--control-plane url] [--admin-token token]\n       localpreview clean --all --force [-l|--local] [--control-plane url] [--admin-token token]",
             ok: false,
         };
     }
@@ -178,6 +237,53 @@ const parseCleanArgs = (argv) => {
         ok: true,
     };
 };
+const readControlPlaneFlag = (argv, index, arg, state) => {
+    if (arg === "-l" || arg === "--local") {
+        if (state.usedControlPlaneFlag) {
+            return {
+                message: "Use either -l/--local or --control-plane, not both.",
+                ok: false,
+            };
+        }
+        return {
+            controlPlane: LOCAL_CONTROL_PLANE_URL,
+            handled: true,
+            nextIndex: index,
+            ok: true,
+            usedLocalControlPlane: true,
+        };
+    }
+    if (arg === "--control-plane") {
+        if (state.usedLocalControlPlane) {
+            return {
+                message: "Use either -l/--local or --control-plane, not both.",
+                ok: false,
+            };
+        }
+        const value = readRequiredOptionValue(argv, index, "--control-plane");
+        if (!value.ok) {
+            return value;
+        }
+        const normalized = normalizeControlPlaneUrl(value.value);
+        if (!normalized.ok) {
+            return {
+                message: normalized.message,
+                ok: false,
+            };
+        }
+        return {
+            controlPlane: normalized.url,
+            handled: true,
+            nextIndex: index + 1,
+            ok: true,
+            usedControlPlaneFlag: true,
+        };
+    }
+    return {
+        handled: false,
+        ok: true,
+    };
+};
 const readRequiredOptionValue = (argv, index, option) => {
     const value = argv[index + 1];
     if (value === undefined || value.startsWith("-")) {
@@ -221,7 +327,11 @@ const runConnect = (config, legacy) => Effect.scoped(Effect.gen(function* () {
     const tunnel = yield* Effect.acquireRelease(controlPlane.createTunnel(cliConfig.controlPlaneUrl, requestedSubdomain === undefined ? {} : { requestedSubdomain }), (tunnel) => closeTunnelBestEffort(controlPlane, cliConfig.controlPlaneUrl, tunnel));
     yield* Console.log(`Tunnel ready: ${tunnel.publicUrl}`);
     yield* Console.log(`Forwarding to ${target.target.protocol}://${target.target.hostname}:${target.target.port}`);
-    yield* relay.connectAndServe(tunnel, target.target);
+    if (config.captures.length > 0) {
+        const origins = config.captures.map((capture) => formatCaptureOrigin(capture)).join(", ");
+        yield* Console.error(`Warning: captured local backends (${origins}) are exposed through this preview URL. Anyone with the link can reach them.`);
+    }
+    yield* relay.connectAndServe(tunnel, target.target, config.captures);
 }));
 const validateRequestedName = (value) => Option.match(value, {
     onNone: () => Effect.succeed(undefined),
@@ -270,7 +380,7 @@ const runClean = (config) => Effect.gen(function* () {
     }
     if (subdomain === undefined) {
         return yield* Effect.fail(new CliUsageError({
-            message: "Usage: localpreview clean <subdomain> [--force] [-l|--local] [--admin-token token]",
+            message: "Usage: localpreview clean <subdomain> [--force] [-l|--local] [--control-plane url] [--admin-token token]",
         }));
     }
     const validation = validateRequestedSubdomain(subdomain);

package/dist/config.d.ts

@@ -14,6 +14,15 @@ export declare class CliConfig extends CliConfig_base {
 }
 export declare const PUBLIC_CONTROL_PLANE_URL = "https://localpreview.dev";
 export declare const LOCAL_CONTROL_PLANE_URL = "http://localhost:3000";
+export type NormalizeControlPlaneUrlResult = {
+    readonly ok: true;
+    readonly url: string;
+} | {
+    readonly message: string;
+    readonly ok: false;
+};
+/** Normalizes and validates a control-plane base URL from `--control-plane`. */
+export declare const normalizeControlPlaneUrl: (value: string) => NormalizeControlPlaneUrlResult;
 export declare const makeCliConfig: (input: {
     readonly controlPlaneUrl?: string;
     readonly env?: NodeJS.ProcessEnv;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEhD,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC,CAAC;;AAEF,qBAAa,SAAU,SAAQ,cAAyD;CAAG;AAE3F,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AACnE,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAE/D,eAAO,MAAM,aAAa,GAAI,OAAO;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC,KAAG,cAoBH,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,OAAO;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC,yCAAmD,CAAC;AAWrD,eAAO,MAAM,aAAa,GAAI,OAAO;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC,KAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAA4C,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEhD,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC,CAAC;;AAEF,qBAAa,SAAU,SAAQ,cAAyD;CAAG;AAE3F,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AACnE,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAE/D,MAAM,MAAM,8BAA8B,GACtC;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;CACpB,CAAC;AAEN,gFAAgF;AAChF,eAAO,MAAM,wBAAwB,GAAI,OAAO,MAAM,KAAG,8BA4DxD,CAAC;AA2BF,eAAO,MAAM,aAAa,GAAI,OAAO;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC,KAAG,cAoBH,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,OAAO;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC,yCAAmD,CAAC;AAWrD,eAAO,MAAM,aAAa,GAAI,OAAO;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC,KAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAA4C,CAAC"}

package/dist/config.js

@@ -4,6 +4,77 @@ export class CliConfig extends Context.Service()("CliConfig") {
 }
 export const PUBLIC_CONTROL_PLANE_URL = LOCALPREVIEW_PUBLIC_ORIGIN;
 export const LOCAL_CONTROL_PLANE_URL = "http://localhost:3000";
+/** Normalizes and validates a control-plane base URL from `--control-plane`. */
+export const normalizeControlPlaneUrl = (value) => {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return {
+            message: "Control plane URL must be a valid URL.",
+            ok: false,
+        };
+    }
+    if (parsed.username.length > 0 || parsed.password.length > 0) {
+        return {
+            message: "Control plane URL must not include credentials.",
+            ok: false,
+        };
+    }
+    if (parsed.search.length > 0 || parsed.hash.length > 0) {
+        return {
+            message: "Control plane URL must not include query parameters or fragments.",
+            ok: false,
+        };
+    }
+    if (parsed.pathname !== "/" && parsed.pathname.length > 0) {
+        return {
+            message: "Control plane URL must not include a path.",
+            ok: false,
+        };
+    }
+    const hostname = parsed.hostname.toLowerCase();
+    if (parsed.protocol === "https:") {
+        return {
+            ok: true,
+            url: `${parsed.protocol}//${parsed.host}`,
+        };
+    }
+    if (parsed.protocol === "http:" && isLocalControlPlaneHostname(hostname)) {
+        return {
+            ok: true,
+            url: `${parsed.protocol}//${parsed.host}`,
+        };
+    }
+    if (parsed.protocol === "http:") {
+        return {
+            message: "Remote control plane URLs must use HTTPS.",
+            ok: false,
+        };
+    }
+    return {
+        message: "Control plane URL must use HTTP or HTTPS.",
+        ok: false,
+    };
+};
+const isLocalControlPlaneHostname = (hostname) => hostname === "localhost" || hostname.endsWith(".localhost") || isIpv4LoopbackAddress(hostname);
+const isIpv4LoopbackAddress = (hostname) => {
+    const parts = hostname.split(".");
+    if (parts.length !== 4) {
+        return false;
+    }
+    for (const part of parts) {
+        if (!/^\d{1,3}$/.test(part)) {
+            return false;
+        }
+        const octet = Number(part);
+        if (!Number.isInteger(octet) || octet < 0 || octet > 255) {
+            return false;
+        }
+    }
+    return Number(parts[0]) === 127;
+};
 export const makeCliConfig = (input) => {
     const env = input.env ?? process.env;
     const controlPlaneUrl = input.controlPlaneUrl ?? PUBLIC_CONTROL_PLANE_URL;

package/dist/control-plane.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../src/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAY,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,kBAAkB,EAAE,CAC3B,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE;QACL,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;KACzB,KACE,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,iBAAiB,CAAC,CAAC;IAClE,QAAQ,CAAC,cAAc,EAAE,CACvB,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE;QACL,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,KACE,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;IAC9D,QAAQ,CAAC,WAAW,EAAE,CACpB,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,aAAa,GAAG,UAAU,CAAC,KAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,CACrB,eAAe,EAAE,MAAM,EACvB,IAAI,EAAE;QACJ,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;KACtC,KACE,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;CAC7D,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;YAC9B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;YAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;SAC5B,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC;CACH,CAAC;;AAEF,qBAAa,kBAAmB,SAAQ,uBAGf;CAAG;AAE5B,eAAO,MAAM,sBAAsB,+CAWjC,CAAC;AAEH,eAAO,MAAM,YAAY,GACvB,iBAAiB,MAAM,EACvB,MAAM;IACJ,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC,KACA,OAAO,CAAC,oBAAoB,CAAiE,CAAC;AAEjG,eAAO,MAAM,WAAW,GACtB,iBAAiB,MAAM,EACvB,QAAQ,IAAI,CAAC,oBAAoB,EAAE,aAAa,GAAG,UAAU,CAAC,KAC7D,OAAO,CAAC,IAAI,CAAkE,CAAC;AAElF,eAAO,MAAM,cAAc,GACzB,iBAAiB,MAAM,EACvB,OAAO;IACL,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,KACA,OAAO,CAAC,sBAAsB,CACgC,CAAC;AAElE,eAAO,MAAM,kBAAkB,GAC7B,iBAAiB,MAAM,EACvB,OAAO;IACL,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB,KACA,OAAO,CAAC,0BAA0B,CACgC,CAAC"}
+{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../src/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,oBAAoB,EAE1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAY,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,kBAAkB,EAAE,CAC3B,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE;QACL,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;KACzB,KACE,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,iBAAiB,CAAC,CAAC;IAClE,QAAQ,CAAC,cAAc,EAAE,CACvB,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE;QACL,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,KACE,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;IAC9D,QAAQ,CAAC,WAAW,EAAE,CACpB,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,aAAa,GAAG,UAAU,CAAC,KAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,CACrB,eAAe,EAAE,MAAM,EACvB,IAAI,EAAE;QACJ,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;KACtC,KACE,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;CAC7D,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;YAC9B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;YAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;SAC5B,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC;CACH,CAAC;;AAEF,qBAAa,kBAAmB,SAAQ,uBAGf;CAAG;AAE5B,eAAO,MAAM,sBAAsB,+CAWjC,CAAC;AAEH,eAAO,MAAM,YAAY,GACvB,iBAAiB,MAAM,EACvB,MAAM;IACJ,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC,KACA,OAAO,CAAC,oBAAoB,CAAiE,CAAC;AAEjG,eAAO,MAAM,WAAW,GACtB,iBAAiB,MAAM,EACvB,QAAQ,IAAI,CAAC,oBAAoB,EAAE,aAAa,GAAG,UAAU,CAAC,KAC7D,OAAO,CAAC,IAAI,CAAkE,CAAC;AAElF,eAAO,MAAM,cAAc,GACzB,iBAAiB,MAAM,EACvB,OAAO;IACL,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,KACA,OAAO,CAAC,sBAAsB,CACgC,CAAC;AAElE,eAAO,MAAM,kBAAkB,GAC7B,iBAAiB,MAAM,EACvB,OAAO;IACL,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB,KACA,OAAO,CAAC,0BAA0B,CACgC,CAAC"}

package/dist/control-plane.js

@@ -1,4 +1,4 @@
-import { LOCALPREVIEW_PROTOCOL_VERSION, LOCALPREVIEW_RELAY_SNAPSHOT_VERSION, } from "@localpreview/protocol";
+import { LOCALPREVIEW_ADMIN_TOKEN_HEADER, LOCALPREVIEW_ERROR_CODES, LOCALPREVIEW_PROTOCOL_VERSION, LOCALPREVIEW_RELAY_SNAPSHOT_VERSION, } from "@localpreview/protocol";
 import { Context, Effect, Layer, Schedule } from "effect";
 import { ControlPlaneError } from "./errors.js";
 export class ControlPlaneClient extends Context.Service()("ControlPlaneClient") {
@@ -38,7 +38,7 @@ const createTunnelEffect = (controlPlaneUrl, body) => Effect.promise(async () =>
     }
     const json = await readJson(response, "Tunnel creation");
     if (!response.ok) {
-        if (json.error?.code === "SUBDOMAIN_TAKEN") {
+        if (json.error?.code === LOCALPREVIEW_ERROR_CODES.SUBDOMAIN_TAKEN) {
             throw new ControlPlaneError({
                 message: `Subdomain "${json.error.subdomain ?? "requested"}" is already in use.`,
             });
@@ -81,7 +81,7 @@ const cleanSubdomainEffect = (controlPlaneUrl, input) => Effect.promise(async ()
     try {
         response = await fetch(url, {
             headers: {
-                "x-localpreview-admin-token": input.adminToken,
+                [LOCALPREVIEW_ADMIN_TOKEN_HEADER]: input.adminToken,
             },
             method: "DELETE",
         });
@@ -109,7 +109,7 @@ const cleanAllSubdomainsEffect = (controlPlaneUrl, input) => Effect.promise(asyn
     try {
         response = await fetch(url, {
             headers: {
-                "x-localpreview-admin-token": input.adminToken,
+                [LOCALPREVIEW_ADMIN_TOKEN_HEADER]: input.adminToken,
             },
             method: "DELETE",
         });

package/dist/local-proxy.d.ts

@@ -1,15 +1,20 @@
-import { type HeaderPairs, type TunnelTarget } from "@localpreview/protocol";
+import { type CaptureTarget, type HeaderPairs, type TunnelTarget } from "@localpreview/protocol";
 import { Context, Effect, Layer } from "effect";
 import type WebSocket from "ws";
 import { CliConfig } from "./config.js";
 import { RelayProtocolError } from "./errors.js";
+export type ProxySession = {
+    readonly captures: ReadonlyArray<CaptureTarget>;
+    readonly target: TunnelTarget;
+};
 export type LocalProxyShape = {
-    readonly handleMessage: (socket: WebSocket, target: TunnelTarget, input: string) => Effect.Effect<void, RelayProtocolError>;
+    readonly handleMessage: (socket: WebSocket, session: ProxySession, input: string) => Effect.Effect<void, RelayProtocolError>;
 };
 declare const LocalProxy_base: Context.ServiceClass<LocalProxy, "LocalProxy", LocalProxyShape>;
 export declare class LocalProxy extends LocalProxy_base {
 }
 export declare const LocalProxyLive: Layer.Layer<LocalProxy, never, CliConfig>;
+export declare const rewriteCaptureSetCookie: (cookie: string, pathPrefix: string) => string;
 export declare const filterLocalResponseHeaders: (headers: Headers) => HeaderPairs;
 export {};
 //# sourceMappingURL=local-proxy.d.ts.map

package/dist/local-proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-proxy.d.ts","sourceRoot":"","sources":["../src/local-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,WAAW,EAEhB,KAAK,YAAY,EAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAW,OAAO,EAAE,MAAM,EAAS,KAAK,EAAO,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,SAAS,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAEL,kBAAkB,EAGnB,MAAM,aAAa,CAAC;AAWrB,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,aAAa,EAAE,CACtB,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,MAAM,KACV,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;CAC9C,CAAC;;AAEF,qBAAa,UAAW,SAAQ,eAA4D;CAAG;AAE/F,eAAO,MAAM,cAAc,2CAU1B,CAAC;AAySF,eAAO,MAAM,0BAA0B,GAAI,SAAS,OAAO,KAAG,WAqB7D,CAAC"}
+{"version":3,"file":"local-proxy.d.ts","sourceRoot":"","sources":["../src/local-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,aAAa,EAClB,KAAK,WAAW,EAEhB,KAAK,YAAY,EAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAW,OAAO,EAAE,MAAM,EAAS,KAAK,EAAO,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,SAAS,MAAM,IAAI,CAAC;AAahC,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAEL,kBAAkB,EAGnB,MAAM,aAAa,CAAC;AAWrB,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,aAAa,EAAE,CACtB,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,MAAM,KACV,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;CAC9C,CAAC;;AAEF,qBAAa,UAAW,SAAQ,eAA4D;CAAG;AAE/F,eAAO,MAAM,cAAc,2CAU1B,CAAC;AA4UF,eAAO,MAAM,uBAAuB,GAAI,QAAQ,MAAM,EAAE,YAAY,MAAM,KAAG,MAqC5E,CAAC;AA0BF,eAAO,MAAM,0BAA0B,GAAI,SAAS,OAAO,KAAG,WAqB7D,CAAC"}

package/dist/local-proxy.js

@@ -1,5 +1,7 @@
-import { decodeServerRelayMessage, encodeRelayMessage, filterEndToEndHeaderPairs, } from "@localpreview/protocol";
+import { decodeServerRelayMessage, encodeRelayMessage, filterEndToEndHeaderPairs, isLoopbackHost, } from "@localpreview/protocol";
 import { Console, Context, Effect, Fiber, Layer, Ref } from "effect";
+import { buildCaptureCookiePathPrefix, resolveRoute, } from "./capture-route.js";
+import { buildCaptureShimScript, buildFrontendOrigin, injectCaptureShim, isHtmlResponse, stripContentSecurityPolicy, } from "./capture-shim.js";
 import { CliConfig } from "./config.js";
 import { LocalRequestError, RelayProtocolError, RequestLimitError, errorMessage, } from "./errors.js";
 export class LocalProxy extends Context.Service()("LocalProxy") {
@@ -8,10 +10,10 @@ export const LocalProxyLive = Layer.effect(LocalProxy)(Effect.gen(function* () {
     const config = yield* CliConfig;
     const requests = yield* Ref.make(new Map());
     return {
-        handleMessage: (socket, target, input) => handleMessage(config, requests, socket, target, input),
+        handleMessage: (socket, session, input) => handleMessage(config, requests, socket, session, input),
     };
 }));
-const handleMessage = (config, requests, socket, target, input) => Effect.gen(function* () {
+const handleMessage = (config, requests, socket, session, input) => Effect.gen(function* () {
     const decoded = decodeServerRelayMessage(input);
     if (!decoded.ok) {
         return yield* Effect.fail(new RelayProtocolError({
@@ -25,7 +27,7 @@ const handleMessage = (config, requests, socket, target, input) => Effect.gen(fu
         case "request-chunk":
             return yield* handleRequestChunk(config, requests, socket, message);
         case "request-end":
-            return yield* handleRequestEnd(config, requests, socket, target, message);
+            return yield* handleRequestEnd(config, requests, socket, session, message);
         case "cancel":
             return yield* handleCancel(requests, message.requestId);
     }
@@ -77,7 +79,7 @@ const handleRequestChunk = (config, requests, socket, message) => Effect.gen(fun
     });
     yield* Ref.set(requests, next);
 });
-const handleRequestEnd = (config, requests, socket, target, message) => Effect.gen(function* () {
+const handleRequestEnd = (config, requests, socket, session, message) => Effect.gen(function* () {
     const current = yield* Ref.get(requests);
     const request = current.get(message.requestId);
     if (request === undefined) {
@@ -88,7 +90,7 @@ const handleRequestEnd = (config, requests, socket, target, message) => Effect.g
         });
         return;
     }
-    const fiber = yield* proxyToLocalTarget(config, socket, target, message.requestId, request).pipe(Effect.catch((error) => send(socket, {
+    const fiber = yield* proxyRequest(config, socket, session, message.requestId, request).pipe(Effect.catch((error) => send(socket, {
         message: error.message,
         requestId: message.requestId,
         type: "response-error",
@@ -111,15 +113,28 @@ const handleCancel = (requests, requestId) => Effect.gen(function* () {
     next.delete(requestId);
     yield* Ref.set(requests, next);
 });
-const proxyToLocalTarget = (config, socket, target, requestId, request) => Effect.gen(function* () {
+const proxyRequest = (config, socket, session, requestId, request) => Effect.gen(function* () {
+    const route = resolveRoute(request.path, session.target, session.captures);
+    if (route.kind === "invalid-capture") {
+        return yield* Effect.fail(new LocalRequestError({
+            message: route.message,
+            requestId,
+        }));
+    }
     const startedAt = Date.now();
-    const targetUrl = new URL(request.path, `${target.protocol}://${target.hostname}:${target.port}`);
+    const upstreamPath = route.kind === "capture" ? route.capturePath.path : request.path;
+    const targetUrl = new URL(upstreamPath, `${route.target.protocol}://${route.target.hostname}:${route.target.port}`);
     const headers = new Headers(filterEndToEndHeaderPairs(request.headers).map(([name, value]) => [
         name,
         value,
     ]));
     headers.set("accept-encoding", "identity");
-    headers.set("host", `${target.hostname}:${target.port}`);
+    headers.set("host", `${route.target.hostname}:${route.target.port}`);
+    if (route.kind === "capture") {
+        const frontendOrigin = buildFrontendOrigin(session.target);
+        headers.set("origin", frontendOrigin);
+        headers.set("referer", `${frontendOrigin}/`);
+    }
     const body = Buffer.concat(request.chunks);
     const init = {
         headers,
@@ -137,7 +152,7 @@ const proxyToLocalTarget = (config, socket, target, requestId, request) => Effec
             message: errorMessage(error),
             requestId,
         })));
-    const responseBody = yield* Effect.promise(() => response.arrayBuffer()).pipe(timeoutFail(config.requestTimeoutMs, new LocalRequestError({
+    let responseBody = yield* Effect.promise(() => response.arrayBuffer()).pipe(timeoutFail(config.requestTimeoutMs, new LocalRequestError({
         message: "Local request timed out.",
         requestId,
     })), Effect.map((arrayBuffer) => Buffer.from(arrayBuffer)), Effect.mapError((error) => error instanceof LocalRequestError
@@ -153,8 +168,24 @@ const proxyToLocalTarget = (config, socket, target, requestId, request) => Effec
             requestId,
         }));
     }
+    const contentType = response.headers.get("content-type");
+    const shouldInjectShim = route.kind === "primary" &&
+        session.captures.length > 0 &&
+        isHtmlResponse(contentType);
+    if (shouldInjectShim) {
+        const html = responseBody.toString("utf8");
+        const shimScript = buildCaptureShimScript(session.captures);
+        responseBody = Buffer.from(injectCaptureShim(html, shimScript), "utf8");
+    }
+    let responseHeaders = filterLocalResponseHeaders(response.headers);
+    if (route.kind === "capture") {
+        responseHeaders = rewriteCaptureResponseHeaders(responseHeaders, route.capturePath);
+    }
+    if (shouldInjectShim) {
+        responseHeaders = stripContentSecurityPolicy(responseHeaders);
+    }
     yield* send(socket, {
-        headers: filterLocalResponseHeaders(response.headers),
+        headers: responseHeaders,
         requestId,
         status: response.status,
         type: "response-start",
@@ -173,6 +204,46 @@ const proxyToLocalTarget = (config, socket, target, requestId, request) => Effec
     });
     yield* Console.log(`<- ${response.status} ${logPath(request.path)} ${Date.now() - startedAt}ms`);
 });
+const rewriteCaptureResponseHeaders = (headers, capturePath) => {
+    const pathPrefix = buildCaptureCookiePathPrefix(capturePath);
+    const next = [];
+    for (const [name, value] of headers) {
+        if (name.toLowerCase() === "set-cookie") {
+            next.push(["set-cookie", rewriteCaptureSetCookie(value, pathPrefix)]);
+            continue;
+        }
+        next.push([name, value]);
+    }
+    return next;
+};
+export const rewriteCaptureSetCookie = (cookie, pathPrefix) => {
+    const parts = cookie.split(";").map((part) => part.trim());
+    const nameValue = parts[0];
+    if (nameValue === undefined) {
+        return cookie;
+    }
+    const preserved = [];
+    let pathValue;
+    for (const attribute of parts.slice(1)) {
+        const lower = attribute.toLowerCase();
+        if (lower.startsWith("domain=")) {
+            const domain = attribute.slice("domain=".length).trim().replace(/^\./, "");
+            if (isLoopbackHost(domain) || domain === "localhost") {
+                continue;
+            }
+        }
+        if (lower.startsWith("path=")) {
+            pathValue = attribute.slice("path=".length).trim();
+            continue;
+        }
+        preserved.push(attribute);
+    }
+    const originalPath = pathValue ?? "/";
+    const isolatedPath = originalPath === "/"
+        ? `${pathPrefix}/`
+        : `${pathPrefix}${originalPath.startsWith("/") ? originalPath : `/${originalPath}`}`;
+    return [nameValue, `Path=${isolatedPath}`, ...preserved].join("; ");
+};
 const sendRequestError = (socket, requestId, error) => send(socket, {
     message: `${error.message} Limit is ${error.limitBytes} bytes.`,
     requestId,

package/dist/relay-client.d.ts

@@ -1,10 +1,10 @@
-import type { CreateTunnelResponse, TunnelTarget } from "@localpreview/protocol";
+import type { CaptureTarget, CreateTunnelResponse, TunnelTarget } from "@localpreview/protocol";
 import { Context, Effect, Layer } from "effect";
 import { CliConfig } from "./config.js";
 import { RelayConnectionError, RelayProtocolError } from "./errors.js";
 import { LocalProxy } from "./local-proxy.js";
 export type RelayClientShape = {
-    readonly connectAndServe: (tunnel: CreateTunnelResponse, target: TunnelTarget) => Effect.Effect<void, RelayConnectionError | RelayProtocolError>;
+    readonly connectAndServe: (tunnel: CreateTunnelResponse, target: TunnelTarget, captures: ReadonlyArray<CaptureTarget>) => Effect.Effect<void, RelayConnectionError | RelayProtocolError>;
 };
 declare const RelayClient_base: Context.ServiceClass<RelayClient, "RelayClient", RelayClientShape>;
 export declare class RelayClient extends RelayClient_base {

package/dist/relay-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relay-client.d.ts","sourceRoot":"","sources":["../src/relay-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAW,OAAO,EAAY,MAAM,EAAE,KAAK,EAAY,MAAM,QAAQ,CAAC;AAE7E,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAgB,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,UAAU,EAAwB,MAAM,kBAAkB,CAAC;AAEpE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,eAAe,EAAE,CACxB,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,YAAY,KACjB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,GAAG,kBAAkB,CAAC,CAAC;CACrE,CAAC;;AAEF,qBAAa,WAAY,SAAQ,gBAA+D;CAAG;AAEnG,eAAO,MAAM,eAAe,yDAS3B,CAAC;AAyLF,eAAO,MAAM,oBAAoB,GAAI,MAAM,MAAM,KAAG,OAAwB,CAAC"}
+{"version":3,"file":"relay-client.d.ts","sourceRoot":"","sources":["../src/relay-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAW,OAAO,EAAY,MAAM,EAAE,KAAK,EAAY,MAAM,QAAQ,CAAC;AAE7E,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAgB,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,UAAU,EAAwB,MAAM,kBAAkB,CAAC;AAEpE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,eAAe,EAAE,CACxB,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,KACnC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,GAAG,kBAAkB,CAAC,CAAC;CACrE,CAAC;;AAEF,qBAAa,WAAY,SAAQ,gBAA+D;CAAG;AAEnG,eAAO,MAAM,eAAe,yDAU3B,CAAC;AA6LF,eAAO,MAAM,oBAAoB,GAAI,MAAM,MAAM,KAAG,OAAwB,CAAC"}

package/dist/relay-client.js

@@ -9,21 +9,22 @@ export const RelayClientLive = Layer.effect(RelayClient)(Effect.gen(function* ()
     const config = yield* CliConfig;
     const localProxy = yield* LocalProxy;
     return {
-        connectAndServe: (tunnel, target) => connectAndServe(config, localProxy, tunnel, target),
+        connectAndServe: (tunnel, target, captures) => connectAndServe(config, localProxy, tunnel, target, captures),
     };
 }));
-const connectAndServe = (config, localProxy, tunnel, target) => serveWithReconnect(config, localProxy, tunnel, target);
-const serveWithReconnect = (config, localProxy, tunnel, target) => serveOnce(config, localProxy, tunnel, target).pipe(Effect.catch((error) => {
+const connectAndServe = (config, localProxy, tunnel, target, captures) => serveWithReconnect(config, localProxy, tunnel, target, captures);
+const serveWithReconnect = (config, localProxy, tunnel, target, captures) => serveOnce(config, localProxy, tunnel, target, captures).pipe(Effect.catch((error) => {
     if (error instanceof RelayConnectionError && error.retryable === true) {
-        return Console.error(`${error.message}; reconnecting...`).pipe(Effect.andThen(Effect.sleep("1 second")), Effect.andThen(serveWithReconnect(config, localProxy, tunnel, target)));
+        return Console.error(`${error.message}; reconnecting...`).pipe(Effect.andThen(Effect.sleep("1 second")), Effect.andThen(serveWithReconnect(config, localProxy, tunnel, target, captures)));
     }
     return Effect.fail(error);
 }));
-const serveOnce = (config, localProxy, tunnel, target) => Effect.gen(function* () {
+const serveOnce = (config, localProxy, tunnel, target, captures) => Effect.gen(function* () {
     const socket = yield* openSocket(tunnel).pipe(Effect.retry({
         schedule: Schedule.recurs(Math.ceil(config.relayConnectTimeoutMs / 250)),
     }));
     yield* Console.log("Connected to relay.");
+    const session = { captures, target };
     const done = yield* Deferred.make();
     const handleSignal = () => {
         socket.close(1000, "Interrupted");
@@ -34,7 +35,7 @@ const serveOnce = (config, localProxy, tunnel, target) => Effect.gen(function* (
             process.once("SIGINT", handleSignal);
             process.once("SIGTERM", handleSignal);
             socket.on("message", (data) => {
-                const effect = localProxy.handleMessage(socket, target, data.toString()).pipe(Effect.catch((error) => Effect.gen(function* () {
+                const effect = localProxy.handleMessage(socket, session, data.toString()).pipe(Effect.catch((error) => Effect.gen(function* () {
                     socket.close(1002, error.message);
                     yield* Deferred.fail(done, error);
                 })));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "localpreview",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "bin": {
     "localpreview": "./dist/index.js"
   },
@@ -10,25 +10,27 @@
     "README.md"
   ],
   "types": "./dist/index.d.ts",
-  "dependencies": {
-    "@effect/platform-node": "beta",
-    "effect": "beta",
-    "ws": "latest",
-    "@localpreview/protocol": "0.1.0"
-  },
-  "devDependencies": {
-    "@effect/vitest": "beta",
-    "@types/node": "latest",
-    "@types/ws": "latest",
-    "tsx": "latest",
-    "typescript": "latest",
-    "vitest": "latest"
-  },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
     "dev": "tsx src/index.ts",
     "lint": "oxlint .",
+    "prepack": "pnpm build",
+    "prepublishOnly": "pnpm test && pnpm typecheck && pnpm build",
     "test": "vitest run --passWithNoTests",
     "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@effect/platform-node": "beta",
+    "@localpreview/protocol": "^0.2.0",
+    "effect": "beta",
+    "ws": "latest"
+  },
+  "devDependencies": {
+    "@effect/vitest": "catalog:",
+    "@types/node": "catalog:",
+    "@types/ws": "catalog:",
+    "tsx": "catalog:",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
   }
-}
+}