portprism 2.0.4 → 2.0.6

package/dist/index.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-#!/usr/bin/env node
 import { createRequire as _createRequire } from 'module';
 import { fileURLToPath as _fileURLToPath } from 'url';
 const require = _createRequire(import.meta.url);
@@ -6191,7 +6190,7 @@ var require_websocket = __commonJS({
     "use strict";
     var EventEmitter5 = __require("events");
     var https2 = __require("https");
-    var http3 = __require("http");
+    var http4 = __require("http");
     var net = __require("net");
     var tls = __require("tls");
     var { randomBytes: randomBytes2, createHash: createHash3 } = __require("crypto");
@@ -6655,7 +6654,7 @@ var require_websocket = __commonJS({
       const isSecure = parsedUrl.protocol === "wss:" || parsedUrl.protocol === "https:";
       const defaultPort = isSecure ? 443 : 80;
       const key = randomBytes2(16).toString("base64");
-      const get = isSecure ? https2.get : http3.get;
+      const get = isSecure ? https2.get : http4.get;
       let perMessageDeflate;
       opts.createConnection = isSecure ? tlsConnect : netConnect;
       opts.defaultPort = opts.defaultPort || defaultPort;
@@ -7072,7 +7071,7 @@ var require_websocket_server = __commonJS({
   "../../node_modules/ws/lib/websocket-server.js"(exports, module) {
     "use strict";
     var EventEmitter5 = __require("events");
-    var http3 = __require("http");
+    var http4 = __require("http");
     var https2 = __require("https");
     var net = __require("net");
     var tls = __require("tls");
@@ -7131,8 +7130,8 @@ var require_websocket_server = __commonJS({
           );
         }
         if (options.port != null) {
-          this._server = http3.createServer((req, res) => {
-            const body = http3.STATUS_CODES[426];
+          this._server = http4.createServer((req, res) => {
+            const body = http4.STATUS_CODES[426];
             res.writeHead(426, {
               "Content-Length": body.length,
               "Content-Type": "text/plain"
@@ -7355,7 +7354,7 @@ var require_websocket_server = __commonJS({
     }
     function abortHandshake(socket, code, message, headers) {
       if (socket.writable) {
-        message = message || http3.STATUS_CODES[code];
+        message = message || http4.STATUS_CODES[code];
         headers = {
           Connection: "close",
           "Content-Type": "text/html",
@@ -7363,7 +7362,7 @@ var require_websocket_server = __commonJS({
           ...headers
         };
         socket.write(
-          `HTTP/1.1 ${code} ${http3.STATUS_CODES[code]}\r
+          `HTTP/1.1 ${code} ${http4.STATUS_CODES[code]}\r
 ` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message
         );
       }
@@ -51550,7 +51549,7 @@ var require_websocket2 = __commonJS({
     "use strict";
     var EventEmitter5 = __require("events");
     var https2 = __require("https");
-    var http3 = __require("http");
+    var http4 = __require("http");
     var net = __require("net");
     var tls = __require("tls");
     var { randomBytes: randomBytes2, createHash: createHash3 } = __require("crypto");
@@ -52084,7 +52083,7 @@ var require_websocket2 = __commonJS({
       }
       const defaultPort = isSecure ? 443 : 80;
       const key = randomBytes2(16).toString("base64");
-      const request3 = isSecure ? https2.request : http3.request;
+      const request3 = isSecure ? https2.request : http4.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
       opts.createConnection = opts.createConnection || (isSecure ? tlsConnect : netConnect);
@@ -52578,7 +52577,7 @@ var require_websocket_server2 = __commonJS({
   "../../node_modules/puppeteer-core/node_modules/ws/lib/websocket-server.js"(exports, module) {
     "use strict";
     var EventEmitter5 = __require("events");
-    var http3 = __require("http");
+    var http4 = __require("http");
     var { Duplex } = __require("stream");
     var { createHash: createHash3 } = __require("crypto");
     var extension2 = require_extension2();
@@ -52653,8 +52652,8 @@ var require_websocket_server2 = __commonJS({
           );
         }
         if (options.port != null) {
-          this._server = http3.createServer((req, res) => {
-            const body = http3.STATUS_CODES[426];
+          this._server = http4.createServer((req, res) => {
+            const body = http4.STATUS_CODES[426];
             res.writeHead(426, {
               "Content-Length": body.length,
               "Content-Type": "text/plain"
@@ -52941,7 +52940,7 @@ var require_websocket_server2 = __commonJS({
       this.destroy();
     }
     function abortHandshake(socket, code, message, headers) {
-      message = message || http3.STATUS_CODES[code];
+      message = message || http4.STATUS_CODES[code];
       headers = {
         Connection: "close",
         "Content-Type": "text/html",
@@ -52950,7 +52949,7 @@ var require_websocket_server2 = __commonJS({
       };
       socket.once("finish", socket.destroy);
       socket.end(
-        `HTTP/1.1 ${code} ${http3.STATUS_CODES[code]}\r
+        `HTTP/1.1 ${code} ${http4.STATUS_CODES[code]}\r
 ` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message
       );
     }
@@ -72212,7 +72211,13 @@ var import_commander = __toESM(require_commander(), 1);
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createInterface as createInterface2 } from "node:readline/promises";
 import { stdin as input2, stdout as output2 } from "node:process";
-import { readFileSync as readFileSync6, writeFileSync as writeFileSync2, existsSync as existsSync4, mkdirSync as mkdirSync2, renameSync } from "node:fs";
+import {
+  readFileSync as readFileSync6,
+  writeFileSync as writeFileSync2,
+  existsSync as existsSync4,
+  mkdirSync as mkdirSync2,
+  renameSync
+} from "node:fs";
 import { join as join4 } from "node:path";
 import { homedir as homedir2 } from "node:os";
 
@@ -75984,8 +75989,10 @@ var Agent = class extends EventEmitter4 {
           console.error(import_chalk2.default.red(`
   \u2716  ${msg.message}`) + "\n");
         } else {
-          console.error(import_chalk2.default.red(`
-  Relay error [${msg.code}]: ${msg.message}`));
+          console.error(
+            import_chalk2.default.red(`
+  Relay error [${msg.code}]: ${msg.message}`)
+          );
         }
       }
       if (terminal2) {
@@ -75998,6 +76005,16 @@ var Agent = class extends EventEmitter4 {
   _forwardRequest(msg) {
     const { requestId, method, path: path15, headers, body } = msg;
     const reqBody = body ? Buffer.from(body, "base64") : void 0;
+    const startedAt = Date.now();
+    this.emit("traffic", {
+      phase: "request",
+      id: requestId,
+      ts: startedAt,
+      method,
+      path: path15,
+      headers,
+      body
+    });
     const options = {
       hostname: this.options.host,
       port: this.port,
@@ -76020,6 +76037,14 @@ var Agent = class extends EventEmitter4 {
       if (this.ws?.readyState === import_ws2.default.OPEN) {
         this.ws.send(JSON.stringify(outMsg));
       }
+      this.emit("traffic", {
+        phase: "response",
+        id: requestId,
+        status: statusCode,
+        headers: respHeaders,
+        body: respBody.toString("base64"),
+        durationMs: Date.now() - startedAt
+      });
     };
     const req = http2.request(options, (res) => {
       const chunks = [];
@@ -76039,7 +76064,10 @@ var Agent = class extends EventEmitter4 {
         502,
         { "content-type": "application/json" },
         Buffer.from(
-          JSON.stringify({ error: "Local server unreachable", detail: err.message })
+          JSON.stringify({
+            error: "Local server unreachable",
+            detail: err.message
+          })
         )
       );
     });
@@ -76053,11 +76081,13 @@ var Agent = class extends EventEmitter4 {
     try {
       localWs = new import_ws2.default(url);
     } catch (err) {
-      this.ws?.send(JSON.stringify({
-        type: "ws-error",
-        wsId,
-        message: err instanceof Error ? err.message : String(err)
-      }));
+      this.ws?.send(
+        JSON.stringify({
+          type: "ws-error",
+          wsId,
+          message: err instanceof Error ? err.message : String(err)
+        })
+      );
       return;
     }
     localWs.on("open", () => {
@@ -76066,32 +76096,38 @@ var Agent = class extends EventEmitter4 {
     localWs.on("message", (data, isBinary) => {
       if (this.ws?.readyState !== import_ws2.default.OPEN) return;
       const binary = typeof isBinary === "boolean" ? isBinary : Buffer.isBuffer(data);
-      this.ws.send(JSON.stringify({
-        type: "ws-message",
-        wsId,
-        data: binary ? Buffer.from(data).toString("base64") : data.toString(),
-        binary
-      }));
+      this.ws.send(
+        JSON.stringify({
+          type: "ws-message",
+          wsId,
+          data: binary ? Buffer.from(data).toString("base64") : data.toString(),
+          binary
+        })
+      );
     });
     localWs.on("close", (code, reason) => {
       this.wsConnections.delete(wsId);
       if (this.ws?.readyState === import_ws2.default.OPEN) {
-        this.ws.send(JSON.stringify({
-          type: "ws-close",
-          wsId,
-          code,
-          reason: reason.toString()
-        }));
+        this.ws.send(
+          JSON.stringify({
+            type: "ws-close",
+            wsId,
+            code,
+            reason: reason.toString()
+          })
+        );
       }
     });
     localWs.on("error", (err) => {
       this.wsConnections.delete(wsId);
       if (this.ws?.readyState === import_ws2.default.OPEN) {
-        this.ws.send(JSON.stringify({
-          type: "ws-error",
-          wsId,
-          message: err.message
-        }));
+        this.ws.send(
+          JSON.stringify({
+            type: "ws-error",
+            wsId,
+            message: err.message
+          })
+        );
       }
     });
   }
@@ -76154,7 +76190,9 @@ var Agent = class extends EventEmitter4 {
     try {
       puppeteer2 = await Promise.resolve().then(() => (init_puppeteer_core(), puppeteer_core_exports));
     } catch {
-      this._statusLog(import_chalk2.default.dim("  Screenshot skipped \u2014 puppeteer-core not available."));
+      this._statusLog(
+        import_chalk2.default.dim("  Screenshot skipped \u2014 puppeteer-core not available.")
+      );
       return;
     }
     let browser = null;
@@ -76187,7 +76225,9 @@ var Agent = class extends EventEmitter4 {
       if (res.ok) {
         this._statusLog(import_chalk2.default.dim("  Screenshot captured."));
       } else {
-        this._statusLog(import_chalk2.default.dim(`  Screenshot upload failed (HTTP ${res.status}).`));
+        this._statusLog(
+          import_chalk2.default.dim(`  Screenshot upload failed (HTTP ${res.status}).`)
+        );
       }
     } catch (err) {
       this._statusLog(
@@ -76405,6 +76445,305 @@ function printQr(text, opts = {}) {
   process.stdout.write("\n" + lines.join("\n") + "\n");
 }
 
+// src/inspector.ts
+import http3 from "node:http";
+var MAX_RECORDS = 200;
+var MAX_BODY_BYTES = 256 * 1024;
+var TEXT_CONTENT_RE = /(json|text\/|xml|x-www-form-urlencoded|javascript|html|csv|graphql)/i;
+function splitPath(rawPath) {
+  const qIdx = rawPath.indexOf("?");
+  if (qIdx === -1) return { path: rawPath, query: null };
+  const path15 = rawPath.slice(0, qIdx);
+  const query = {};
+  const params = new URLSearchParams(rawPath.slice(qIdx + 1));
+  for (const [k, v2] of params) query[k] = v2;
+  return { path: path15, query: Object.keys(query).length ? query : null };
+}
+function decodeBody(base64, headers) {
+  if (!base64) return { text: null, binary: false, size: 0, truncated: false };
+  const buf = Buffer.from(base64, "base64");
+  const size = buf.length;
+  const truncated = size > MAX_BODY_BYTES;
+  const slice = truncated ? buf.subarray(0, MAX_BODY_BYTES) : buf;
+  const contentType = (headers?.["content-type"] ?? "").toLowerCase();
+  const looksText = contentType ? TEXT_CONTENT_RE.test(contentType) : !slice.includes(0);
+  if (looksText) {
+    return { text: slice.toString("utf8"), binary: false, size, truncated };
+  }
+  return { text: slice.toString("base64"), binary: true, size, truncated };
+}
+var Inspector = class {
+  records = [];
+  byId = /* @__PURE__ */ new Map();
+  sseClients = /* @__PURE__ */ new Set();
+  server = null;
+  boundPort = null;
+  /** Ingest one traffic event from the agent, merging by request id. */
+  record(evt) {
+    if (evt.phase === "request") {
+      const { path: path15, query } = splitPath(evt.path ?? "");
+      const rec2 = {
+        id: evt.id,
+        ts: evt.ts ?? Date.now(),
+        method: evt.method ?? "GET",
+        path: path15,
+        query,
+        reqHeaders: evt.headers ?? {},
+        reqBody: decodeBody(evt.body, evt.headers),
+        pending: true
+      };
+      this.byId.set(rec2.id, rec2);
+      this.records.push(rec2);
+      while (this.records.length > MAX_RECORDS) {
+        const dropped = this.records.shift();
+        if (dropped) this.byId.delete(dropped.id);
+      }
+      this.broadcast(rec2);
+      return;
+    }
+    const rec = this.byId.get(evt.id);
+    if (!rec) return;
+    rec.status = evt.status;
+    rec.resHeaders = evt.headers ?? {};
+    rec.resBody = decodeBody(evt.body, evt.headers);
+    rec.durationMs = evt.durationMs;
+    rec.pending = false;
+    this.broadcast(rec);
+  }
+  /** Compact summary used by the list view. */
+  summary(r) {
+    return {
+      id: r.id,
+      ts: r.ts,
+      method: r.method,
+      path: r.path,
+      status: r.status ?? null,
+      durationMs: r.durationMs ?? null,
+      pending: r.pending,
+      reqSize: r.reqBody.size,
+      resSize: r.resBody?.size ?? 0,
+      resContentType: r.resHeaders?.["content-type"] ?? null
+    };
+  }
+  broadcast(rec) {
+    if (this.sseClients.size === 0) return;
+    const line = `data: ${JSON.stringify(this.summary(rec))}
+
+`;
+    for (const res of this.sseClients) {
+      try {
+        res.write(line);
+      } catch {
+      }
+    }
+  }
+  /**
+   * Start the inspector HTTP server. Resolves with the bound URL, or `null` if the
+   * port is already taken (the tunnel must never fail because :4040 is busy).
+   */
+  start(port) {
+    return new Promise((resolve6) => {
+      const server = http3.createServer((req, res) => this.handle(req, res));
+      server.once("error", (err) => {
+        if (err.code === "EADDRINUSE") {
+          resolve6(null);
+        } else {
+          resolve6(null);
+        }
+      });
+      server.listen(port, "127.0.0.1", () => {
+        this.server = server;
+        this.boundPort = server.address().port;
+        resolve6(`http://localhost:${this.boundPort}`);
+      });
+    });
+  }
+  stop() {
+    for (const res of this.sseClients) {
+      try {
+        res.end();
+      } catch {
+      }
+    }
+    this.sseClients.clear();
+    this.server?.close();
+    this.server = null;
+  }
+  handle(req, res) {
+    const url = req.url ?? "/";
+    if (url === "/" || url === "/index.html") {
+      res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+      res.end(INDEX_HTML);
+      return;
+    }
+    if (url === "/__pp/requests") {
+      const body = JSON.stringify(
+        this.records.map((r) => this.summary(r)).reverse()
+      );
+      res.writeHead(200, { "content-type": "application/json" });
+      res.end(body);
+      return;
+    }
+    if (url.startsWith("/__pp/requests/")) {
+      const id = decodeURIComponent(url.slice("/__pp/requests/".length));
+      const rec = this.byId.get(id);
+      if (!rec) {
+        res.writeHead(404, { "content-type": "application/json" });
+        res.end(JSON.stringify({ error: "not found" }));
+        return;
+      }
+      res.writeHead(200, { "content-type": "application/json" });
+      res.end(JSON.stringify(rec));
+      return;
+    }
+    if (url === "/__pp/stream") {
+      res.writeHead(200, {
+        "content-type": "text/event-stream",
+        "cache-control": "no-cache",
+        connection: "keep-alive"
+      });
+      res.write("retry: 3000\n\n");
+      this.sseClients.add(res);
+      req.on("close", () => this.sseClients.delete(res));
+      return;
+    }
+    res.writeHead(404, { "content-type": "text/plain" });
+    res.end("Not found");
+  }
+};
+var INDEX_HTML = `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>PortPrism Inspector</title>
+<style>
+  :root { color-scheme: dark; }
+  * { box-sizing: border-box; }
+  body { margin:0; font:13px/1.5 ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;
+         background:#0b0d12; color:#e6e8ee; }
+  header { display:flex; align-items:center; gap:10px; padding:12px 16px;
+           border-bottom:1px solid #1c2030; background:#0e1017; position:sticky; top:0; }
+  header .logo { font-weight:700; background:linear-gradient(90deg,#6366f1,#8b5cf6,#34d399);
+                 -webkit-background-clip:text; background-clip:text; color:transparent; }
+  header .dim { color:#7b8194; font-size:12px; }
+  header .live { margin-left:auto; display:flex; align-items:center; gap:6px; color:#7b8194; }
+  header .dot { width:8px; height:8px; border-radius:50%; background:#34d399; box-shadow:0 0 8px #34d399; }
+  .layout { display:grid; grid-template-columns: 1fr; }
+  table { width:100%; border-collapse:collapse; }
+  th,td { text-align:left; padding:7px 12px; border-bottom:1px solid #151824; white-space:nowrap; }
+  th { color:#7b8194; font-weight:600; font-size:11px; text-transform:uppercase; letter-spacing:.05em; }
+  tr.row { cursor:pointer; }
+  tr.row:hover { background:#12151f; }
+  .method { font-weight:700; }
+  .m-GET{color:#34d399} .m-POST{color:#60a5fa} .m-PUT{color:#fbbf24}
+  .m-DELETE{color:#f87171} .m-PATCH{color:#c084fc}
+  .st-2{color:#34d399} .st-3{color:#60a5fa} .st-4{color:#fbbf24} .st-5{color:#f87171}
+  .pending{color:#7b8194}
+  .path { color:#e6e8ee; max-width:48vw; overflow:hidden; text-overflow:ellipsis; }
+  .empty { padding:48px 16px; text-align:center; color:#7b8194; }
+  dialog { width:min(860px,92vw); max-height:86vh; overflow:auto; background:#0e1017;
+           color:#e6e8ee; border:1px solid #262b3d; border-radius:12px; padding:0; }
+  dialog::backdrop { background:rgba(0,0,0,.6); }
+  .d-head { display:flex; align-items:center; gap:10px; padding:14px 18px; border-bottom:1px solid #1c2030;
+            position:sticky; top:0; background:#0e1017; }
+  .d-head .x { margin-left:auto; cursor:pointer; color:#7b8194; background:none; border:none; font-size:18px; }
+  .d-body { padding:14px 18px; }
+  h4 { margin:18px 0 6px; color:#7b8194; font-size:11px; text-transform:uppercase; letter-spacing:.05em; }
+  h4:first-child { margin-top:0; }
+  pre { margin:0; padding:10px 12px; background:#0b0d12; border:1px solid #151824; border-radius:8px;
+        overflow:auto; white-space:pre-wrap; word-break:break-word; }
+  .kv { display:grid; grid-template-columns:200px 1fr; gap:2px 12px; }
+  .kv .k { color:#7b8194; } .kv .v { word-break:break-word; }
+  .tag { font-size:11px; color:#7b8194; }
+</style>
+</head>
+<body>
+<header>
+  <span class="logo">PortPrism</span><span class="dim">Request Inspector</span>
+  <span class="live"><span class="dot"></span> live</span>
+</header>
+<div class="layout">
+  <table>
+    <thead><tr><th>Time</th><th>Method</th><th>Status</th><th>Path</th><th>Dur</th><th>Size</th></tr></thead>
+    <tbody id="rows"></tbody>
+  </table>
+  <div class="empty" id="empty">Waiting for requests\u2026 send traffic through your tunnel.</div>
+</div>
+<dialog id="dlg"><div class="d-head"><b id="d-title"></b><button class="x" id="d-close">\u2715</button></div><div class="d-body" id="d-body"></div></dialog>
+<script>
+(function(){
+  var rows = document.getElementById("rows");
+  var empty = document.getElementById("empty");
+  var dlg = document.getElementById("dlg");
+  var seen = {};
+
+  function esc(s){ return String(s).replace(/[&<>"]/g, function(c){
+    return {"&":"&amp;","<":"&lt;",">":"&gt;","\\"":"&quot;"}[c]; }); }
+  function mclass(m){ return "method m-" + esc(m); }
+  function sclass(s){ return s ? "st-" + String(s)[0] : "pending"; }
+  function fmtTime(ts){ var d = new Date(ts); return d.toLocaleTimeString(); }
+  function fmtSize(n){ if(!n) return "\u2014"; if(n<1024) return n+" B"; return (n/1024).toFixed(1)+" KB"; }
+  function fmtDur(d){ return d==null ? "\u2026" : d+" ms"; }
+
+  function upsert(s){
+    empty.style.display = "none";
+    var id = s.id;
+    var tr = document.getElementById("r-"+id);
+    var html = "<td>"+fmtTime(s.ts)+"</td>"
+      + "<td class='"+mclass(s.method)+"'>"+esc(s.method)+"</td>"
+      + "<td class='"+sclass(s.status)+"'>"+(s.status||"\u2026")+"</td>"
+      + "<td class='path'>"+esc(s.path)+"</td>"
+      + "<td class='tag'>"+fmtDur(s.durationMs)+"</td>"
+      + "<td class='tag'>"+fmtSize(s.resSize||s.reqSize)+"</td>";
+    if(tr){ tr.innerHTML = html; }
+    else {
+      tr = document.createElement("tr");
+      tr.className = "row"; tr.id = "r-"+id; tr.innerHTML = html;
+      tr.onclick = function(){ openDetail(id); };
+      rows.insertBefore(tr, rows.firstChild);
+    }
+  }
+
+  function section(title, obj){
+    if(!obj || !Object.keys(obj).length) return "";
+    var out = "<h4>"+esc(title)+"</h4><div class='kv'>";
+    Object.keys(obj).forEach(function(k){
+      out += "<div class='k'>"+esc(k)+"</div><div class='v'>"+esc(obj[k])+"</div>";
+    });
+    return out + "</div>";
+  }
+  function bodySection(title, b){
+    if(!b || !b.text) return "";
+    var note = (b.binary ? " (binary, base64)" : "") + (b.truncated ? " (truncated)" : "");
+    return "<h4>"+esc(title)+note+"</h4><pre>"+esc(b.text)+"</pre>";
+  }
+
+  function openDetail(id){
+    fetch("/__pp/requests/"+encodeURIComponent(id)).then(function(r){return r.json();}).then(function(d){
+      document.getElementById("d-title").textContent = d.method+" "+d.path
+        + (d.status ? "  \u2192  "+d.status : "");
+      var html = section("Query", d.query)
+        + section("Request headers", d.reqHeaders)
+        + bodySection("Request body", d.reqBody)
+        + section("Response headers", d.resHeaders)
+        + bodySection("Response body", d.resBody);
+      document.getElementById("d-body").innerHTML = html || "<p class='tag'>No details.</p>";
+      dlg.showModal();
+    });
+  }
+  document.getElementById("d-close").onclick = function(){ dlg.close(); };
+
+  fetch("/__pp/requests").then(function(r){return r.json();}).then(function(list){
+    list.reverse().forEach(upsert);
+  });
+  var es = new EventSource("/__pp/stream");
+  es.onmessage = function(e){ try { upsert(JSON.parse(e.data)); } catch(_){} };
+})();
+</script>
+</body>
+</html>`;
+
 // src/index.ts
 function emitJson(event, data = {}) {
   process.stdout.write(
@@ -76459,20 +76798,28 @@ async function ensurePrivacyConsent(nonInteractive = false) {
   console.log();
   if (isUpdate) {
     console.log(
-      import_chalk4.default.yellow("  \u2139  The PortPrism Privacy Policy has been updated (v" + POLICY_VERSION + ").")
+      import_chalk4.default.yellow(
+        "  \u2139  The PortPrism Privacy Policy has been updated (v" + POLICY_VERSION + ")."
+      )
     );
   } else {
-    console.log(
-      import_chalk4.default.bold("  PortPrism Privacy Policy")
-    );
+    console.log(import_chalk4.default.bold("  PortPrism Privacy Policy"));
   }
   console.log(
-    import_chalk4.default.dim(`  Before creating a tunnel, please review the Privacy Policy:
-`) + import_chalk4.default.cyan(`  ${POLICY_URL}
+    import_chalk4.default.dim(
+      `  Before creating a tunnel, please review the Privacy Policy:
+`
+    ) + import_chalk4.default.cyan(`  ${POLICY_URL}
 `)
   );
   console.log(
-    import_chalk4.default.dim("  By continuing you agree that PortPrism may process your data as described,\n") + import_chalk4.default.dim("  including the use of a device fingerprint for free-plan quota management.\n") + import_chalk4.default.dim("  We comply with GDPR, ISO 27001 guidelines, and PCI DSS (via Stripe).\n")
+    import_chalk4.default.dim(
+      "  By continuing you agree that PortPrism may process your data as described,\n"
+    ) + import_chalk4.default.dim(
+      "  including the use of a device fingerprint for free-plan quota management.\n"
+    ) + import_chalk4.default.dim(
+      "  We comply with GDPR, ISO 27001 guidelines, and PCI DSS (via Stripe).\n"
+    )
   );
   const rl = createInterface2({ input: input2, output: output2 });
   let answer = "";
@@ -76525,7 +76872,9 @@ function parseTarget(raw) {
     host = value.slice(0, idx).trim();
     portStr = value.slice(idx + 1).trim();
     if (!host) {
-      console.error(import_chalk4.default.red(`  Invalid target: "${raw}" \u2014 missing host before ":"`));
+      console.error(
+        import_chalk4.default.red(`  Invalid target: "${raw}" \u2014 missing host before ":"`)
+      );
       process.exit(1);
     }
   }
@@ -76580,7 +76929,9 @@ program.command("login").description("Log in to PortPrism with a magic link").ac
     verifySpinner.stop();
     if (!res.ok) {
       const body = await res.json().catch(() => ({}));
-      console.error(import_chalk4.default.red(`  ${body.error ?? "Invalid or expired code."}`));
+      console.error(
+        import_chalk4.default.red(`  ${body.error ?? "Invalid or expired code."}`)
+      );
       process.exit(1);
     }
     const data = await res.json();
@@ -76630,25 +76981,33 @@ program.command("referral").description("Show your referral link and bonus-time
   let data;
   try {
     const res = await fetch(`${base}/auth/me`, {
-      headers: { "Authorization": `Bearer ${auth.token}` }
+      headers: { Authorization: `Bearer ${auth.token}` }
     });
     spinner.stop();
     if (!res.ok) {
       const body = await res.json().catch(() => ({}));
-      console.error(import_chalk4.default.red(`  ${body.error ?? "Failed to load referral info."}`));
+      console.error(
+        import_chalk4.default.red(`  ${body.error ?? "Failed to load referral info."}`)
+      );
       process.exit(1);
     }
     data = await res.json();
   } catch (err) {
     spinner.stop();
     console.error(
-      import_chalk4.default.red(`  Network error: ${err instanceof Error ? err.message : String(err)}`)
+      import_chalk4.default.red(
+        `  Network error: ${err instanceof Error ? err.message : String(err)}`
+      )
     );
     process.exit(1);
   }
   const { referralCode, referralBonusMinutes, referralCount } = data.user;
   if (!referralCode) {
-    console.log(import_chalk4.default.yellow("  Referral code not yet generated \u2014 try again after your next login."));
+    console.log(
+      import_chalk4.default.yellow(
+        "  Referral code not yet generated \u2014 try again after your next login."
+      )
+    );
     return;
   }
   const link = `https://portprism.io/?ref=${referralCode}`;
@@ -76660,11 +77019,17 @@ program.command("referral").description("Show your referral link and bonus-time
   console.log(import_chalk4.default.white.bold("  Your referral link:"));
   console.log(import_chalk4.default.cyan(`  ${link}`));
   console.log();
-  console.log(import_chalk4.default.dim(`  You've referred ${import_chalk4.default.white(String(referralCount))} ${people}.`));
+  console.log(
+    import_chalk4.default.dim(
+      `  You've referred ${import_chalk4.default.white(String(referralCount))} ${people}.`
+    )
+  );
   console.log(import_chalk4.default.dim(`  Bonus time remaining: ${import_chalk4.default.white(bonus)}.`));
   console.log();
   console.log(
-    import_chalk4.default.dim("  Each person who signs up via your link earns you both 30 extra minutes per tunnel.")
+    import_chalk4.default.dim(
+      "  Each person who signs up via your link earns you both 30 extra minutes per tunnel."
+    )
   );
 });
 program.command("upgrade").description("Upgrade to PortPrism Pro").action(async () => {
@@ -76681,21 +77046,27 @@ program.command("upgrade").description("Upgrade to PortPrism Pro").action(async
     const res = await fetch(`${base}/billing/checkout`, {
       method: "POST",
       headers: {
-        "Authorization": `Bearer ${auth.token}`,
+        Authorization: `Bearer ${auth.token}`,
         "Content-Type": "application/json"
       }
     });
     if (!res.ok) {
       spinner.stop();
       const body = await res.json().catch(() => ({}));
-      console.error(import_chalk4.default.red(`  ${body.error ?? "Could not start checkout."}`));
+      console.error(
+        import_chalk4.default.red(`  ${body.error ?? "Could not start checkout."}`)
+      );
       process.exit(1);
     }
     const data = await res.json();
     checkoutUrl = data.url;
   } catch (err) {
     spinner.stop();
-    console.error(import_chalk4.default.red(`  Network error: ${err instanceof Error ? err.message : String(err)}`));
+    console.error(
+      import_chalk4.default.red(
+        `  Network error: ${err instanceof Error ? err.message : String(err)}`
+      )
+    );
     process.exit(1);
   }
   spinner.stop();
@@ -76708,7 +77079,9 @@ program.command("config").description("Open ~/.portprism/config.json in your $ED
   console.log(import_chalk4.default.dim(`  Opening ${file} in ${editor}\u2026`));
   const result = spawnSync4(editor, [file], { stdio: "inherit" });
   if (result.error) {
-    console.error(import_chalk4.default.red(`  Could not open editor: ${result.error.message}`));
+    console.error(
+      import_chalk4.default.red(`  Could not open editor: ${result.error.message}`)
+    );
     process.exit(1);
   }
 });
@@ -76716,18 +77089,32 @@ program.argument(
   "<target>",
   "Local port or host:port to tunnel (e.g. 3000 or my-app.local:8080)",
   parseTarget
-).option("--name <string>", "App name shown in the viewer").option("--desc <string>", "One-line description").option("--password <string>", "Protect the share link with a password").option("--relay <url>", "Override relay WebSocket URL").option("--no-open", "Don't auto-open the viewer URL in the browser").option("--no-screenshot", "Skip automatic screenshot capture").option("--qr", "Print the share URL as a QR code").option("--qr-invert", "Force-invert the QR colours (use on light terminals)").option("--json", "Emit machine-readable NDJSON events instead of the formatted box").action(async (target, opts) => {
+).option("--name <string>", "App name shown in the viewer").option("--desc <string>", "One-line description").option("--password <string>", "Protect the share link with a password").option("--relay <url>", "Override relay WebSocket URL").option("--no-open", "Don't auto-open the viewer URL in the browser").option("--no-screenshot", "Skip automatic screenshot capture").option("--qr", "Print the share URL as a QR code").option("--qr-invert", "Force-invert the QR colours (use on light terminals)").option(
+  "--json",
+  "Emit machine-readable NDJSON events instead of the formatted box"
+).option(
+  "--inspect",
+  "Serve a local request inspector (headers/params/bodies) for debugging"
+).option(
+  "--inspect-port <port>",
+  "Port for the request inspector (default 4040)",
+  "4040"
+).action(async (target, opts) => {
   const json = Boolean(opts.json);
   const { host, port } = target;
   await ensurePrivacyConsent(json);
   const cfg = readConfig();
   const auth = readAuth();
-  const relay = normaliseRelay(opts.relay ?? cfg.relay);
+  const relay = normaliseRelay(
+    opts.relay ?? cfg.relay
+  );
   const name = opts.name ?? cfg.defaultName;
   const desc = opts.desc ?? cfg.defaultDesc;
   const jwtToken = auth?.token;
   if (auth && !json) {
-    console.log(import_chalk4.default.dim(`  Tunneling as ${auth.user.email} (${auth.user.plan} plan)`));
+    console.log(
+      import_chalk4.default.dim(`  Tunneling as ${auth.user.email} (${auth.user.plan} plan)`)
+    );
   }
   const agent = new Agent(port, {
     name,
@@ -76741,8 +77128,38 @@ program.argument(
     json
   });
   const shareUrl = `${VIEWER_BASE}/v/${agent.token}`;
+  let inspector = null;
+  let inspectorUrl = null;
+  if (opts.inspect) {
+    const inspectPort = Number.parseInt(String(opts.inspectPort ?? "4040"), 10) || 4040;
+    inspector = new Inspector();
+    inspectorUrl = await inspector.start(inspectPort);
+    if (inspectorUrl) {
+      agent.on("traffic", (evt) => inspector.record(evt));
+      if (json) emitJson("inspector", { url: inspectorUrl });
+    } else {
+      inspector = null;
+      if (json)
+        emitJson("inspector-error", {
+          code: "PORT_IN_USE",
+          port: inspectPort
+        });
+      else
+        console.error(
+          import_chalk4.default.yellow(
+            `  \u26A0  Inspector port ${inspectPort} is in use \u2014 continuing without --inspect.`
+          )
+        );
+    }
+  }
   if (json) {
-    emitJson("connecting", { token: agent.token, localHost: host, localPort: port, relay, shareUrl });
+    emitJson("connecting", {
+      token: agent.token,
+      localHost: host,
+      localPort: port,
+      relay,
+      shareUrl
+    });
   }
   const spinner = json ? null : ora(`Connecting to relay (${host}:${port})\u2026`).start();
   let currentStatus = "connecting";
@@ -76752,7 +77169,16 @@ program.argument(
   let boxVisible = false;
   let refreshTimer = null;
   function boxOpts() {
-    return { shareUrl, appName: name, localHost: host, localPort: port, expiresAt, status: currentStatus, rtt: currentRtt, reconnectInfo };
+    return {
+      shareUrl,
+      appName: name,
+      localHost: host,
+      localPort: port,
+      expiresAt,
+      status: currentStatus,
+      rtt: currentRtt,
+      reconnectInfo
+    };
   }
   function startRefresh() {
     if (refreshTimer) return;
@@ -76764,7 +77190,12 @@ program.argument(
     currentStatus = "connected";
     reconnectInfo = void 0;
     if (json) {
-      emitJson("connected", { token: agent.token, localHost: host, localPort: port, shareUrl });
+      emitJson("connected", {
+        token: agent.token,
+        localHost: host,
+        localPort: port,
+        shareUrl
+      });
       return;
     }
     spinner?.stop();
@@ -76772,6 +77203,9 @@ program.argument(
     if (opts.qr) {
       printQr(shareUrl, { invert: Boolean(opts.qrInvert) });
     }
+    if (inspectorUrl) {
+      console.log(import_chalk4.default.dim("  \u{1F50E} Inspector  ") + import_chalk4.default.cyan(inspectorUrl));
+    }
     printBox(boxOpts());
     startRefresh();
     if (opts.open !== false) {
@@ -76779,31 +77213,37 @@ program.argument(
       });
     }
   });
-  agent.on("ready", (info2) => {
-    expiresAt = info2.expiresAt;
-    if (json) {
-      emitJson("ready", {
-        token: agent.token,
-        localHost: host,
-        localPort: port,
-        shareUrl,
-        expiresAt: info2.expiresAt,
-        plan: info2.plan
-      });
-      return;
+  agent.on(
+    "ready",
+    (info2) => {
+      expiresAt = info2.expiresAt;
+      if (json) {
+        emitJson("ready", {
+          token: agent.token,
+          localHost: host,
+          localPort: port,
+          shareUrl,
+          expiresAt: info2.expiresAt,
+          plan: info2.plan
+        });
+        return;
+      }
+      if (boxVisible) updateBox(boxOpts());
     }
-    if (boxVisible) updateBox(boxOpts());
-  });
-  agent.on("reconnecting", (delayMs, attempt, maxAttempts) => {
-    currentStatus = "reconnecting";
-    currentRtt = void 0;
-    reconnectInfo = { delayMs, attempt, maxAttempts };
-    if (json) {
-      emitJson("reconnecting", { delayMs, attempt, maxAttempts });
-      return;
+  );
+  agent.on(
+    "reconnecting",
+    (delayMs, attempt, maxAttempts) => {
+      currentStatus = "reconnecting";
+      currentRtt = void 0;
+      reconnectInfo = { delayMs, attempt, maxAttempts };
+      if (json) {
+        emitJson("reconnecting", { delayMs, attempt, maxAttempts });
+        return;
+      }
+      if (boxVisible) updateBox(boxOpts());
     }
-    if (boxVisible) updateBox(boxOpts());
-  });
+  );
   let sawFirstConnected = false;
   agent.on("connected", () => {
     if (!sawFirstConnected) {
@@ -76829,29 +77269,39 @@ program.argument(
   agent.on("relay-error", (err) => {
     if (json) emitJson("error", { code: err.code, message: err.message });
   });
-  agent.on("feedback", (fb) => {
-    const comment = sanitizeUntrusted(fb.comment);
-    const path15 = fb.path ? sanitizeUntrusted(fb.path, 120) : "";
-    if (json) {
-      emitJson("feedback", { rating: fb.rating, comment, path: path15 || void 0 });
-      return;
+  agent.on(
+    "feedback",
+    (fb) => {
+      const comment = sanitizeUntrusted(fb.comment);
+      const path15 = fb.path ? sanitizeUntrusted(fb.path, 120) : "";
+      if (json) {
+        emitJson("feedback", {
+          rating: fb.rating,
+          comment,
+          path: path15 || void 0
+        });
+        return;
+      }
+      const ratingMark = fb.rating === "up" ? import_chalk4.default.green(" \u{1F44D}") : fb.rating === "down" ? import_chalk4.default.red(" \u{1F44E}") : "";
+      const header = import_chalk4.default.magenta.bold("  \u{1F4AC} Viewer feedback") + ratingMark + (path15 ? import_chalk4.default.dim(`  \xB7  ${path15}`) : "");
+      const body = comment ? "\n" + import_chalk4.default.white("     " + comment) : "";
+      const block = header + body;
+      if (boxVisible) printAboveBox(block, boxOpts());
+      else console.log(block);
     }
-    const ratingMark = fb.rating === "up" ? import_chalk4.default.green(" \u{1F44D}") : fb.rating === "down" ? import_chalk4.default.red(" \u{1F44E}") : "";
-    const header = import_chalk4.default.magenta.bold("  \u{1F4AC} Viewer feedback") + ratingMark + (path15 ? import_chalk4.default.dim(`  \xB7  ${path15}`) : "");
-    const body = comment ? "\n" + import_chalk4.default.white("     " + comment) : "";
-    const block = header + body;
-    if (boxVisible) printAboveBox(block, boxOpts());
-    else console.log(block);
-  });
+  );
   agent.on("terminated", (code) => {
     spinner?.stop();
     if (refreshTimer) clearInterval(refreshTimer);
+    inspector?.stop();
     if (json) {
       emitJson("closed", { token: agent.token, code });
     } else {
       console.error(
-        import_chalk4.default.red(`
-  Connection closed by relay (code ${code}); not reconnecting.`)
+        import_chalk4.default.red(
+          `
+  Connection closed by relay (code ${code}); not reconnecting.`
+        )
       );
     }
     process.exit(1);
@@ -76859,6 +77309,7 @@ program.argument(
   process.on("SIGINT", () => {
     spinner?.stop();
     if (refreshTimer) clearInterval(refreshTimer);
+    inspector?.stop();
     agent.close();
     if (json) {
       emitJson("closed", { token: agent.token });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "portprism",
-  "version": "2.0.4",
+  "version": "2.0.6",
   "license": "MIT",
   "description": "Share your local server with anyone, instantly.",
   "keywords": [
@@ -36,7 +36,8 @@
     "build": "esbuild src/index.ts --bundle --platform=node --format=esm --outfile=dist/index.js --banner:js=\"#!/usr/bin/env node\nimport { createRequire as _createRequire } from 'module';\nimport { fileURLToPath as _fileURLToPath } from 'url';\nconst require = _createRequire(import.meta.url);\nconst __filename = _fileURLToPath(import.meta.url);\nconst __dirname = _fileURLToPath(new URL('.', import.meta.url));\"",
     "dev": "tsc --watch",
     "lint": "eslint src/",
-    "test": "tsc -p tsconfig.test.json && node --test dist/__tests__/inspector.test.js"
+    "test": "tsc -p tsconfig.test.json && node --test dist/__tests__/inspector.test.js",
+    "prepublishOnly": "npm run build"
   },
   "dependencies": {
     "chalk": "^4.1.2",