pinggy 0.6.0 → 0.6.3

package/dist/index.d.cts

@@ -56,7 +56,7 @@ type FinalConfig = (TunnelConfigurationV1) & {
     conf?: string;
     saveconf?: string;
 };
-type ErrorCodeType = "INVALID_REQUEST_METHOD" | "COULD_NOT_READ_BODY" | "INTERNAL_SERVER_ERROR" | "INVALID_DATA_FORMAT" | "ERROR_STARTING_TUNNEL" | "TUNNEL_WITH_ID_OR_CONFIG_ID_NOT_FOUND" | "TUNNEL_WITH_ID_OR_CONFIG_ID_ALREADY_RUNNING" | "WEBSOCKET_UPGRADE_FAILED" | "REMOTE_MANAGEMENT_ALREADY_RUNNING" | "REMOTE_MANAGEMENT_NOT_RUNNING" | "REMOTE_MANAGEMENT_DESERIALIZATION_FAILED";
+type ErrorCodeType = "INVALID_REQUEST_METHOD" | "COULD_NOT_READ_BODY" | "INTERNAL_SERVER_ERROR" | "INVALID_DATA_FORMAT" | "ERROR_STARTING_TUNNEL" | "TUNNEL_WITH_ID_OR_CONFIG_ID_NOT_FOUND" | "TUNNEL_WITH_ID_OR_CONFIG_ID_ALREADY_RUNNING" | "WEBSOCKET_UPGRADE_FAILED" | "REMOTE_MANAGEMENT_ALREADY_RUNNING" | "REMOTE_MANAGEMENT_NOT_RUNNING" | "REMOTE_MANAGEMENT_DESERIALIZATION_FAILED" | "DEVICE_NOT_ENROLLED";
 interface ErrorResponse {
     code: ErrorCodeType;
     message: string;
@@ -83,7 +83,8 @@ interface RemoteManagementState {
  * @singleton
  */
 
-type TunnelOrigin = "app" | "cli" | "remote";
+/** Who asked the daemon for a tunnel. `device` is the device agent, acting for the dashboard's device page. */
+type TunnelOrigin = "app" | "cli" | "remote" | "device";
 interface ManagedTunnel {
     tunnelid: string;
     configId: string;
@@ -96,6 +97,14 @@ interface ManagedTunnel {
     serve?: string;
     isStopped?: boolean;
     isStopping?: boolean;
+    /**
+     * Set on the entry a restart or config update replaces, until the new entry takes its place in the
+     * maps. The entry stays listed, so `GET /tunnels` never drops the tunnel. It reports `starting` when
+     * the new entry starts, and stays `exited` when a stopped tunnel only gets a new config.
+     */
+    rebuild?: {
+        startsAfter: boolean;
+    };
     createdAt?: string;
     startedAt?: string | null;
     stoppedAt?: string | null;
@@ -297,12 +306,30 @@ declare class TunnelManager implements ITunnelManager {
      * @throws Error if neither configId nor tunnelId is provided, or if tunnel is not found
      */
     getTunnelConfig(configId?: string, tunnelId?: string): Promise<TunnelConfigurationV1>;
+    /**
+     * The instance's config, asked of its worker. A stopped instance has let its worker go, so a stopped
+     * tunnel, including one a restart is replacing, answers with the config it was built from.
+     */
+    private currentConfig;
     /**
      * Stop a tunnel instance and wait for the stop to settle, capped by a
      * timeout. Failure is logged, not thrown: the caller replaces the
      * instance either way and a hung stop must not block that forever.
      */
     private stopInstanceGuarded;
+    /**
+     * Marks the entry a restart or config update replaces. It stays in both maps until
+     * `_createTunnelWithProcessedConfig` sets the new entry under the same ids. When the new entry
+     * starts, the entry reports `starting`, and an error from an earlier run no longer describes it.
+     */
+    private beginRebuild;
+    /** Stops the instance being replaced, and marks it stopped so no reader calls it again. */
+    private stopForRebuild;
+    /**
+     * Ends a failed rebuild. When the old entry is still in the maps, it stays listed as stopped with
+     * the reason. A new entry that failed to start already holds its own error.
+     */
+    private failRebuild;
     /**
      * Restarts a tunnel with its current configuration.
      * This function will stop the tunnel if it's running and start it again.
@@ -648,6 +675,9 @@ declare const Route: {
     readonly GetTunnelLogging: "GET /config/tunnel-logging";
     readonly SetTunnelLogging: "POST /config/tunnel-logging";
     readonly GetLogPaths: "GET /logs/paths";
+    readonly GetDeviceAgent: "GET /device";
+    readonly StartDeviceAgent: "POST /device/start";
+    readonly StopDeviceAgent: "POST /device/stop";
 };
 declare const ParamRoute: {
     readonly GetTunnel: "GET /tunnels/:id";
@@ -704,6 +734,35 @@ interface ShutdownResponse {
     errors: string[];
 }
 type LogLevel = "debug" | "info" | "error";
+declare const DeviceAgentState: {
+    readonly Stopped: "stopped";
+    readonly Connecting: "connecting";
+    readonly Connected: "connected";
+    readonly Reconnecting: "reconnecting";
+};
+type DeviceAgentState = typeof DeviceAgentState[keyof typeof DeviceAgentState];
+/** Why a device agent run ended for good. `code` names 1 of the agent's terminal outcomes. */
+interface DeviceAgentError {
+    code: string;
+    message: string;
+}
+/**
+ * The device agent the daemon runs for `pinggy device connect -b`. It never carries the token: any
+ * local user can reach the IPC port.
+ */
+interface DeviceAgentStatus {
+    state: DeviceAgentState;
+    deviceAgentId: string | null;
+    server: string | null;
+    /** The owner's email, from `welcome`. */
+    email: string | null;
+    /** The device's page in the dashboard, from `welcome`. */
+    deviceUrl: string | null;
+    startedAt: string | null;
+    connectedAt: string | null;
+    startedBy: TunnelOrigin | null;
+    lastError: DeviceAgentError | null;
+}
 declare const SessionMode: {
     readonly Foreground: "foreground";
     readonly Detached: "detached";
@@ -818,6 +877,18 @@ type IPCRoutes = {
         req: void;
         res: LogPathsResponse;
     };
+    [Route.GetDeviceAgent]: {
+        req: void;
+        res: DeviceAgentStatus;
+    };
+    [Route.StartDeviceAgent]: {
+        req: Record<string, never>;
+        res: DeviceAgentStatus | ErrorResponse;
+    };
+    [Route.StopDeviceAgent]: {
+        req: Record<string, never>;
+        res: DeviceAgentStatus;
+    };
 };
 type RouteKey = keyof IPCRoutes;
 type RouteRes<K extends RouteKey> = IPCRoutes[K]["res"];
@@ -888,6 +959,11 @@ declare class TunnelOperations implements TunnelHandler {
     private buildTunnelResponse;
     private buildTunnelResponseV2;
     private error;
+    /**
+     * A restart or update of a tunnel another one is still rebuilding. A no-wait call checks this before
+     * it answers, because a throw from the call it does not await is only logged.
+     */
+    private rebuildInProgress;
     handleStart(config: TunnelConfig, noWait?: boolean, origin?: TunnelOrigin): Promise<TunnelResponse | ErrorResponse>;
     handleStartV2(config: TunnelConfigV1, noWait?: boolean, origin?: TunnelOrigin): Promise<TunnelResponseV2 | ErrorResponse>;
     handleUpdateConfig(config: TunnelConfig, noWait?: boolean): Promise<TunnelResponse | ErrorResponse>;
@@ -905,7 +981,7 @@ declare class TunnelOperations implements TunnelHandler {
     handleRemoveStoppedTunnelByTunnelId(tunnelId: string): boolean | ErrorResponse;
 }
 
-type ClientOrigin = "app" | "cli" | "remote";
+type ClientOrigin = "app" | "cli" | "remote" | "device";
 declare class IPCClient {
     private port;
     private origin;
@@ -944,6 +1020,9 @@ declare class IPCClient {
     }>;
     getLogPaths(): Promise<LogPathsResponse>;
     resolveLogPath(q: string): Promise<ResolveLogPathResponse>;
+    getDeviceAgentStatus(timeoutMs?: number): Promise<DeviceAgentStatus>;
+    startDeviceAgent(): Promise<RouteRes<typeof Route.StartDeviceAgent>>;
+    stopDeviceAgent(): Promise<DeviceAgentStatus>;
     /**
      * Get the WebSocket URL for event streaming.
      */
@@ -1119,6 +1198,9 @@ declare class TunnelClient {
     getLogPaths(): Promise<LogPathsResponse>;
     resolveLogPath(q: string): Promise<ResolveLogPathResponse>;
     restart(tunnelId: string): Promise<void>;
+    getDeviceAgentStatus(): Promise<DeviceAgentStatus>;
+    startDeviceAgent(): Promise<DeviceAgentStatus | ErrorResponse>;
+    stopDeviceAgent(): Promise<DeviceAgentStatus>;
     attach(tunnelId: string, mode?: SubscriptionMode): Promise<void>;
     detach(tunnelId: string): void;
     onStats(cb: StatsCallback): void;
@@ -1148,55 +1230,6 @@ declare class TunnelClient {
     private assertClient;
 }
 
-interface DaemonInfo {
-    pid: number;
-    port: number;
-    startedAt: string;
-    host?: DaemonHost;
-    /** IPC protocol version the daemon speaks. Absent in daemon.json written by older builds. */
-    ipcVersion?: number;
-}
-
-/**
- * Read and validate daemon.json.
- * Returns null if file doesn't exist, is malformed, or PID is stale.
- * Automatically cleans up stale daemon.json.
- */
-declare function getDaemonInfo(): DaemonInfo | null;
-/**
- * Check if the daemon is currently running.
- */
-declare function isDaemonRunning(): boolean;
-
-interface BaseLogConfig {
-    level?: string;
-    filePath?: string;
-    stdout?: boolean;
-    source?: boolean;
-    silent?: boolean;
-    enableSdkLog?: boolean;
-}
-type BaseLogConfigType = BaseLogConfig;
-declare function enablePackageLogging(opts?: BaseLogConfigType): winston.Logger;
-
-declare class RemoteManagementUnauthorizedError extends Error {
-    constructor();
-}
-/**
- * Initiate remote management mode with a WebSocket connection.
- * - Connect with Authorization: Bearer <token>
- * - On HTTP 401: print Unauthorized and exit
- * - On other failures: retry every 15 seconds
- * - Keep running until closed or SIGINT
- */
-declare function initiateRemoteManagement(remoteManagementConfig: RemoteManagementConfig, tunnelHandler?: TunnelHandler): Promise<RemoteManagementState>;
-declare function closeRemoteManagement(timeoutMs?: number): Promise<RemoteManagementState>;
-/**
- * Start remote management loop in background; returns after first connection attempt.
- */
-declare function startRemoteManagement(remoteManagementConfig: RemoteManagementConfig, tunnelHandler?: TunnelHandler): Promise<RemoteManagementState>;
-declare function getRemoteManagementState(): RemoteManagementState;
-
 interface SavedTunnelConfig {
     name: string;
     configId: string;
@@ -1316,6 +1349,55 @@ declare function updateTunnelConfig(nameOrId: string, tunnelConfig: TunnelConfig
  */
 declare function getAutoStartConfigs(): SavedTunnelConfig[];
 
+interface DaemonInfo {
+    pid: number;
+    port: number;
+    startedAt: string;
+    host?: DaemonHost;
+    /** IPC protocol version the daemon speaks. Absent in daemon.json written by older builds. */
+    ipcVersion?: number;
+}
+
+/**
+ * Read and validate daemon.json.
+ * Returns null if file doesn't exist, is malformed, or PID is stale.
+ * Automatically cleans up stale daemon.json.
+ */
+declare function getDaemonInfo(): DaemonInfo | null;
+/**
+ * Check if the daemon is currently running.
+ */
+declare function isDaemonRunning(): boolean;
+
+interface BaseLogConfig {
+    level?: string;
+    filePath?: string;
+    stdout?: boolean;
+    source?: boolean;
+    silent?: boolean;
+    enableSdkLog?: boolean;
+}
+type BaseLogConfigType = BaseLogConfig;
+declare function enablePackageLogging(opts?: BaseLogConfigType): winston.Logger;
+
+declare class RemoteManagementUnauthorizedError extends Error {
+    constructor();
+}
+/**
+ * Initiate remote management mode with a WebSocket connection.
+ * - Connect with Authorization: Bearer <token>
+ * - On HTTP 401: print Unauthorized and exit
+ * - On other failures: retry every 15 seconds
+ * - Keep running until closed or SIGINT
+ */
+declare function initiateRemoteManagement(remoteManagementConfig: RemoteManagementConfig, tunnelHandler?: TunnelHandler): Promise<RemoteManagementState>;
+declare function closeRemoteManagement(timeoutMs?: number): Promise<RemoteManagementState>;
+/**
+ * Start remote management loop in background; returns after first connection attempt.
+ */
+declare function startRemoteManagement(remoteManagementConfig: RemoteManagementConfig, tunnelHandler?: TunnelHandler): Promise<RemoteManagementState>;
+declare function getRemoteManagementState(): RemoteManagementState;
+
 /**
  * Returns the base Pinggy config directory for the current platform.
  * - Linux/macOS: $XDG_CONFIG_HOME/pinggy or ~/.config/pinggy
@@ -1336,4 +1418,4 @@ declare function ensureTunnelConfigDir(): string;
  */
 declare function getDaemonInfoPath(): string;
 
-export { type AdditionalForwarding, type DaemonInfo, type DisconnectListener, type ErrorListener, type FinalConfig, type ITunnelManager, type ManagedTunnel, type ReconnectingListener, type ReconnectionCompletedListener, type ReconnectionFailedListener, RemoteManagementUnauthorizedError, type SavedTunnelConfig, type StartListener, type StatsListener, type Status, type StorageLogger, TUNNEL_CONFIG_V1_KEYS, TunnelClient, type TunnelConfigV1, TunnelConfigV1Schema, TunnelErrorCodeType, type TunnelList, TunnelManager, TunnelOperations, type TunnelResponse, TunnelStateType, type TunnelStatus, TunnelWarningCode, type TunnelWorkerErrorListner, type Warning, type WillReconnectListener, bulkReplace, closeRemoteManagement, configureStorageLogger, deleteConfig, enablePackageLogging, ensureTunnelConfigDir, findConfig, findConfigByName, getAutoStartConfigs, getDaemonInfo, getDaemonInfoPath, getPinggyConfigDir, getRemoteManagementState, getTunnelConfigDir, initiateRemoteManagement, isDaemonRunning, listSavedConfigs, loadConfigByName, sanitizeName, saveConfig, startRemoteManagement, updateConfigAutoStart, updateTunnelConfig, upsertConfig, validateName, validateNameForStorage, validateNameStrict };
+export { type AdditionalForwarding, type DaemonInfo, type DeviceAgentError, DeviceAgentState, type DeviceAgentStatus, type DisconnectListener, type ErrorListener, type FinalConfig, type ITunnelManager, type ManagedTunnel, type ReconnectingListener, type ReconnectionCompletedListener, type ReconnectionFailedListener, RemoteManagementUnauthorizedError, type SavedTunnelConfig, type StartListener, type StatsListener, type Status, type StorageLogger, TUNNEL_CONFIG_V1_KEYS, TunnelClient, type TunnelConfigV1, TunnelConfigV1Schema, TunnelErrorCodeType, type TunnelList, TunnelManager, TunnelOperations, type TunnelResponse, TunnelStateType, type TunnelStatus, TunnelWarningCode, type TunnelWorkerErrorListner, type Warning, type WillReconnectListener, bulkReplace, closeRemoteManagement, configureStorageLogger, deleteConfig, enablePackageLogging, ensureTunnelConfigDir, findConfig, findConfigByName, getAutoStartConfigs, getDaemonInfo, getDaemonInfoPath, getPinggyConfigDir, getRemoteManagementState, getTunnelConfigDir, initiateRemoteManagement, isDaemonRunning, listSavedConfigs, loadConfigByName, sanitizeName, saveConfig, startRemoteManagement, updateConfigAutoStart, updateTunnelConfig, upsertConfig, validateName, validateNameForStorage, validateNameStrict };

package/dist/index.d.ts

@@ -56,7 +56,7 @@ type FinalConfig = (TunnelConfigurationV1) & {
     conf?: string;
     saveconf?: string;
 };
-type ErrorCodeType = "INVALID_REQUEST_METHOD" | "COULD_NOT_READ_BODY" | "INTERNAL_SERVER_ERROR" | "INVALID_DATA_FORMAT" | "ERROR_STARTING_TUNNEL" | "TUNNEL_WITH_ID_OR_CONFIG_ID_NOT_FOUND" | "TUNNEL_WITH_ID_OR_CONFIG_ID_ALREADY_RUNNING" | "WEBSOCKET_UPGRADE_FAILED" | "REMOTE_MANAGEMENT_ALREADY_RUNNING" | "REMOTE_MANAGEMENT_NOT_RUNNING" | "REMOTE_MANAGEMENT_DESERIALIZATION_FAILED";
+type ErrorCodeType = "INVALID_REQUEST_METHOD" | "COULD_NOT_READ_BODY" | "INTERNAL_SERVER_ERROR" | "INVALID_DATA_FORMAT" | "ERROR_STARTING_TUNNEL" | "TUNNEL_WITH_ID_OR_CONFIG_ID_NOT_FOUND" | "TUNNEL_WITH_ID_OR_CONFIG_ID_ALREADY_RUNNING" | "WEBSOCKET_UPGRADE_FAILED" | "REMOTE_MANAGEMENT_ALREADY_RUNNING" | "REMOTE_MANAGEMENT_NOT_RUNNING" | "REMOTE_MANAGEMENT_DESERIALIZATION_FAILED" | "DEVICE_NOT_ENROLLED";
 interface ErrorResponse {
     code: ErrorCodeType;
     message: string;
@@ -83,7 +83,8 @@ interface RemoteManagementState {
  * @singleton
  */
 
-type TunnelOrigin = "app" | "cli" | "remote";
+/** Who asked the daemon for a tunnel. `device` is the device agent, acting for the dashboard's device page. */
+type TunnelOrigin = "app" | "cli" | "remote" | "device";
 interface ManagedTunnel {
     tunnelid: string;
     configId: string;
@@ -96,6 +97,14 @@ interface ManagedTunnel {
     serve?: string;
     isStopped?: boolean;
     isStopping?: boolean;
+    /**
+     * Set on the entry a restart or config update replaces, until the new entry takes its place in the
+     * maps. The entry stays listed, so `GET /tunnels` never drops the tunnel. It reports `starting` when
+     * the new entry starts, and stays `exited` when a stopped tunnel only gets a new config.
+     */
+    rebuild?: {
+        startsAfter: boolean;
+    };
     createdAt?: string;
     startedAt?: string | null;
     stoppedAt?: string | null;
@@ -297,12 +306,30 @@ declare class TunnelManager implements ITunnelManager {
      * @throws Error if neither configId nor tunnelId is provided, or if tunnel is not found
      */
     getTunnelConfig(configId?: string, tunnelId?: string): Promise<TunnelConfigurationV1>;
+    /**
+     * The instance's config, asked of its worker. A stopped instance has let its worker go, so a stopped
+     * tunnel, including one a restart is replacing, answers with the config it was built from.
+     */
+    private currentConfig;
     /**
      * Stop a tunnel instance and wait for the stop to settle, capped by a
      * timeout. Failure is logged, not thrown: the caller replaces the
      * instance either way and a hung stop must not block that forever.
      */
     private stopInstanceGuarded;
+    /**
+     * Marks the entry a restart or config update replaces. It stays in both maps until
+     * `_createTunnelWithProcessedConfig` sets the new entry under the same ids. When the new entry
+     * starts, the entry reports `starting`, and an error from an earlier run no longer describes it.
+     */
+    private beginRebuild;
+    /** Stops the instance being replaced, and marks it stopped so no reader calls it again. */
+    private stopForRebuild;
+    /**
+     * Ends a failed rebuild. When the old entry is still in the maps, it stays listed as stopped with
+     * the reason. A new entry that failed to start already holds its own error.
+     */
+    private failRebuild;
     /**
      * Restarts a tunnel with its current configuration.
      * This function will stop the tunnel if it's running and start it again.
@@ -648,6 +675,9 @@ declare const Route: {
     readonly GetTunnelLogging: "GET /config/tunnel-logging";
     readonly SetTunnelLogging: "POST /config/tunnel-logging";
     readonly GetLogPaths: "GET /logs/paths";
+    readonly GetDeviceAgent: "GET /device";
+    readonly StartDeviceAgent: "POST /device/start";
+    readonly StopDeviceAgent: "POST /device/stop";
 };
 declare const ParamRoute: {
     readonly GetTunnel: "GET /tunnels/:id";
@@ -704,6 +734,35 @@ interface ShutdownResponse {
     errors: string[];
 }
 type LogLevel = "debug" | "info" | "error";
+declare const DeviceAgentState: {
+    readonly Stopped: "stopped";
+    readonly Connecting: "connecting";
+    readonly Connected: "connected";
+    readonly Reconnecting: "reconnecting";
+};
+type DeviceAgentState = typeof DeviceAgentState[keyof typeof DeviceAgentState];
+/** Why a device agent run ended for good. `code` names 1 of the agent's terminal outcomes. */
+interface DeviceAgentError {
+    code: string;
+    message: string;
+}
+/**
+ * The device agent the daemon runs for `pinggy device connect -b`. It never carries the token: any
+ * local user can reach the IPC port.
+ */
+interface DeviceAgentStatus {
+    state: DeviceAgentState;
+    deviceAgentId: string | null;
+    server: string | null;
+    /** The owner's email, from `welcome`. */
+    email: string | null;
+    /** The device's page in the dashboard, from `welcome`. */
+    deviceUrl: string | null;
+    startedAt: string | null;
+    connectedAt: string | null;
+    startedBy: TunnelOrigin | null;
+    lastError: DeviceAgentError | null;
+}
 declare const SessionMode: {
     readonly Foreground: "foreground";
     readonly Detached: "detached";
@@ -818,6 +877,18 @@ type IPCRoutes = {
         req: void;
         res: LogPathsResponse;
     };
+    [Route.GetDeviceAgent]: {
+        req: void;
+        res: DeviceAgentStatus;
+    };
+    [Route.StartDeviceAgent]: {
+        req: Record<string, never>;
+        res: DeviceAgentStatus | ErrorResponse;
+    };
+    [Route.StopDeviceAgent]: {
+        req: Record<string, never>;
+        res: DeviceAgentStatus;
+    };
 };
 type RouteKey = keyof IPCRoutes;
 type RouteRes<K extends RouteKey> = IPCRoutes[K]["res"];
@@ -888,6 +959,11 @@ declare class TunnelOperations implements TunnelHandler {
     private buildTunnelResponse;
     private buildTunnelResponseV2;
     private error;
+    /**
+     * A restart or update of a tunnel another one is still rebuilding. A no-wait call checks this before
+     * it answers, because a throw from the call it does not await is only logged.
+     */
+    private rebuildInProgress;
     handleStart(config: TunnelConfig, noWait?: boolean, origin?: TunnelOrigin): Promise<TunnelResponse | ErrorResponse>;
     handleStartV2(config: TunnelConfigV1, noWait?: boolean, origin?: TunnelOrigin): Promise<TunnelResponseV2 | ErrorResponse>;
     handleUpdateConfig(config: TunnelConfig, noWait?: boolean): Promise<TunnelResponse | ErrorResponse>;
@@ -905,7 +981,7 @@ declare class TunnelOperations implements TunnelHandler {
     handleRemoveStoppedTunnelByTunnelId(tunnelId: string): boolean | ErrorResponse;
 }
 
-type ClientOrigin = "app" | "cli" | "remote";
+type ClientOrigin = "app" | "cli" | "remote" | "device";
 declare class IPCClient {
     private port;
     private origin;
@@ -944,6 +1020,9 @@ declare class IPCClient {
     }>;
     getLogPaths(): Promise<LogPathsResponse>;
     resolveLogPath(q: string): Promise<ResolveLogPathResponse>;
+    getDeviceAgentStatus(timeoutMs?: number): Promise<DeviceAgentStatus>;
+    startDeviceAgent(): Promise<RouteRes<typeof Route.StartDeviceAgent>>;
+    stopDeviceAgent(): Promise<DeviceAgentStatus>;
     /**
      * Get the WebSocket URL for event streaming.
      */
@@ -1119,6 +1198,9 @@ declare class TunnelClient {
     getLogPaths(): Promise<LogPathsResponse>;
     resolveLogPath(q: string): Promise<ResolveLogPathResponse>;
     restart(tunnelId: string): Promise<void>;
+    getDeviceAgentStatus(): Promise<DeviceAgentStatus>;
+    startDeviceAgent(): Promise<DeviceAgentStatus | ErrorResponse>;
+    stopDeviceAgent(): Promise<DeviceAgentStatus>;
     attach(tunnelId: string, mode?: SubscriptionMode): Promise<void>;
     detach(tunnelId: string): void;
     onStats(cb: StatsCallback): void;
@@ -1148,55 +1230,6 @@ declare class TunnelClient {
     private assertClient;
 }
 
-interface DaemonInfo {
-    pid: number;
-    port: number;
-    startedAt: string;
-    host?: DaemonHost;
-    /** IPC protocol version the daemon speaks. Absent in daemon.json written by older builds. */
-    ipcVersion?: number;
-}
-
-/**
- * Read and validate daemon.json.
- * Returns null if file doesn't exist, is malformed, or PID is stale.
- * Automatically cleans up stale daemon.json.
- */
-declare function getDaemonInfo(): DaemonInfo | null;
-/**
- * Check if the daemon is currently running.
- */
-declare function isDaemonRunning(): boolean;
-
-interface BaseLogConfig {
-    level?: string;
-    filePath?: string;
-    stdout?: boolean;
-    source?: boolean;
-    silent?: boolean;
-    enableSdkLog?: boolean;
-}
-type BaseLogConfigType = BaseLogConfig;
-declare function enablePackageLogging(opts?: BaseLogConfigType): winston.Logger;
-
-declare class RemoteManagementUnauthorizedError extends Error {
-    constructor();
-}
-/**
- * Initiate remote management mode with a WebSocket connection.
- * - Connect with Authorization: Bearer <token>
- * - On HTTP 401: print Unauthorized and exit
- * - On other failures: retry every 15 seconds
- * - Keep running until closed or SIGINT
- */
-declare function initiateRemoteManagement(remoteManagementConfig: RemoteManagementConfig, tunnelHandler?: TunnelHandler): Promise<RemoteManagementState>;
-declare function closeRemoteManagement(timeoutMs?: number): Promise<RemoteManagementState>;
-/**
- * Start remote management loop in background; returns after first connection attempt.
- */
-declare function startRemoteManagement(remoteManagementConfig: RemoteManagementConfig, tunnelHandler?: TunnelHandler): Promise<RemoteManagementState>;
-declare function getRemoteManagementState(): RemoteManagementState;
-
 interface SavedTunnelConfig {
     name: string;
     configId: string;
@@ -1316,6 +1349,55 @@ declare function updateTunnelConfig(nameOrId: string, tunnelConfig: TunnelConfig
  */
 declare function getAutoStartConfigs(): SavedTunnelConfig[];
 
+interface DaemonInfo {
+    pid: number;
+    port: number;
+    startedAt: string;
+    host?: DaemonHost;
+    /** IPC protocol version the daemon speaks. Absent in daemon.json written by older builds. */
+    ipcVersion?: number;
+}
+
+/**
+ * Read and validate daemon.json.
+ * Returns null if file doesn't exist, is malformed, or PID is stale.
+ * Automatically cleans up stale daemon.json.
+ */
+declare function getDaemonInfo(): DaemonInfo | null;
+/**
+ * Check if the daemon is currently running.
+ */
+declare function isDaemonRunning(): boolean;
+
+interface BaseLogConfig {
+    level?: string;
+    filePath?: string;
+    stdout?: boolean;
+    source?: boolean;
+    silent?: boolean;
+    enableSdkLog?: boolean;
+}
+type BaseLogConfigType = BaseLogConfig;
+declare function enablePackageLogging(opts?: BaseLogConfigType): winston.Logger;
+
+declare class RemoteManagementUnauthorizedError extends Error {
+    constructor();
+}
+/**
+ * Initiate remote management mode with a WebSocket connection.
+ * - Connect with Authorization: Bearer <token>
+ * - On HTTP 401: print Unauthorized and exit
+ * - On other failures: retry every 15 seconds
+ * - Keep running until closed or SIGINT
+ */
+declare function initiateRemoteManagement(remoteManagementConfig: RemoteManagementConfig, tunnelHandler?: TunnelHandler): Promise<RemoteManagementState>;
+declare function closeRemoteManagement(timeoutMs?: number): Promise<RemoteManagementState>;
+/**
+ * Start remote management loop in background; returns after first connection attempt.
+ */
+declare function startRemoteManagement(remoteManagementConfig: RemoteManagementConfig, tunnelHandler?: TunnelHandler): Promise<RemoteManagementState>;
+declare function getRemoteManagementState(): RemoteManagementState;
+
 /**
  * Returns the base Pinggy config directory for the current platform.
  * - Linux/macOS: $XDG_CONFIG_HOME/pinggy or ~/.config/pinggy
@@ -1336,4 +1418,4 @@ declare function ensureTunnelConfigDir(): string;
  */
 declare function getDaemonInfoPath(): string;
 
-export { type AdditionalForwarding, type DaemonInfo, type DisconnectListener, type ErrorListener, type FinalConfig, type ITunnelManager, type ManagedTunnel, type ReconnectingListener, type ReconnectionCompletedListener, type ReconnectionFailedListener, RemoteManagementUnauthorizedError, type SavedTunnelConfig, type StartListener, type StatsListener, type Status, type StorageLogger, TUNNEL_CONFIG_V1_KEYS, TunnelClient, type TunnelConfigV1, TunnelConfigV1Schema, TunnelErrorCodeType, type TunnelList, TunnelManager, TunnelOperations, type TunnelResponse, TunnelStateType, type TunnelStatus, TunnelWarningCode, type TunnelWorkerErrorListner, type Warning, type WillReconnectListener, bulkReplace, closeRemoteManagement, configureStorageLogger, deleteConfig, enablePackageLogging, ensureTunnelConfigDir, findConfig, findConfigByName, getAutoStartConfigs, getDaemonInfo, getDaemonInfoPath, getPinggyConfigDir, getRemoteManagementState, getTunnelConfigDir, initiateRemoteManagement, isDaemonRunning, listSavedConfigs, loadConfigByName, sanitizeName, saveConfig, startRemoteManagement, updateConfigAutoStart, updateTunnelConfig, upsertConfig, validateName, validateNameForStorage, validateNameStrict };
+export { type AdditionalForwarding, type DaemonInfo, type DeviceAgentError, DeviceAgentState, type DeviceAgentStatus, type DisconnectListener, type ErrorListener, type FinalConfig, type ITunnelManager, type ManagedTunnel, type ReconnectingListener, type ReconnectionCompletedListener, type ReconnectionFailedListener, RemoteManagementUnauthorizedError, type SavedTunnelConfig, type StartListener, type StatsListener, type Status, type StorageLogger, TUNNEL_CONFIG_V1_KEYS, TunnelClient, type TunnelConfigV1, TunnelConfigV1Schema, TunnelErrorCodeType, type TunnelList, TunnelManager, TunnelOperations, type TunnelResponse, TunnelStateType, type TunnelStatus, TunnelWarningCode, type TunnelWorkerErrorListner, type Warning, type WillReconnectListener, bulkReplace, closeRemoteManagement, configureStorageLogger, deleteConfig, enablePackageLogging, ensureTunnelConfigDir, findConfig, findConfigByName, getAutoStartConfigs, getDaemonInfo, getDaemonInfoPath, getPinggyConfigDir, getRemoteManagementState, getTunnelConfigDir, initiateRemoteManagement, isDaemonRunning, listSavedConfigs, loadConfigByName, sanitizeName, saveConfig, startRemoteManagement, updateConfigAutoStart, updateTunnelConfig, upsertConfig, validateName, validateNameForStorage, validateNameStrict };

package/dist/index.js

@@ -4,18 +4,17 @@ import {
   TUNNEL_CONFIG_V1_KEYS,
   TunnelClient,
   TunnelConfigV1Schema,
-  TunnelErrorCodeType,
   TunnelOperations,
-  TunnelStateType,
-  TunnelWarningCode,
   closeRemoteManagement,
   getDaemonInfo,
   getRemoteManagementState,
   initiateRemoteManagement,
   isDaemonRunning,
   startRemoteManagement
-} from "./chunk-2HGC37SK.js";
-import "./chunk-I4HXBP5G.js";
+} from "./chunk-GESMZQHI.js";
+import {
+  DeviceAgentState
+} from "./chunk-7EQKHVQX.js";
 import {
   bulkReplace,
   configureStorageLogger,
@@ -33,21 +32,24 @@ import {
   validateName,
   validateNameForStorage,
   validateNameStrict
-} from "./chunk-H5XJMFNT.js";
+} from "./chunk-Y435RMHQ.js";
 import {
+  TunnelErrorCodeType,
   TunnelManager,
+  TunnelStateType,
+  TunnelWarningCode,
   printer_default
-} from "./chunk-J2U6P376.js";
+} from "./chunk-QNUVQ6KD.js";
 import "./chunk-UB26QJ4T.js";
 import {
   enablePackageLogging
-} from "./chunk-76SOSXXR.js";
+} from "./chunk-MV56U3E6.js";
 import {
   ensureTunnelConfigDir,
   getDaemonInfoPath,
   getPinggyConfigDir,
   getTunnelConfigDir
-} from "./chunk-GBYF2H4H.js";
+} from "./chunk-AFMTIELL.js";
 
 // src/utils/detect_vc_redist_on_windows.ts
 import fs from "fs";
@@ -139,12 +141,13 @@ async function verifyAndLoad() {
       process.exit(1);
     }
   }
-  await import("./main-WQ7NUQL4.js");
+  await import("./main-M6MACH7D.js");
 }
 verifyAndLoad().catch((err) => {
   printer_default.fatal(`Failed to start CLI:, ${err}`);
 });
 export {
+  DeviceAgentState,
   RemoteManagementUnauthorizedError,
   TUNNEL_CONFIG_V1_KEYS,
   TunnelClient,

package/dist/ipcClient-XGF2KCQO.js

@@ -0,0 +1,10 @@
+import {
+  HTTP_NOT_FOUND,
+  IPCClient,
+  IPCHttpError
+} from "./chunk-7EQKHVQX.js";
+export {
+  HTTP_NOT_FOUND,
+  IPCClient,
+  IPCHttpError
+};