rerender-lens 0.5.0 → 0.7.0

package/dist/{notifiers-DwKlvv4H.d.cts → notifiers-B5poAEvE.d.cts}

@@ -1,5 +1,5 @@
-import { R as RenderReport, a as ReportLike, N as Notifier } from './types-DW5-N2XH.cjs';
-import { R as RankedFix, B as Budget, a as BudgetResult } from './budget-CRswn-nC.cjs';
+import { R as RenderReport, b as ReportLike, N as Notifier } from './types-DwNN5cWe.cjs';
+import { R as RankedFix, B as Budget, a as BudgetResult } from './budget-CA1MS7lB.cjs';
 
 /**
  * Session summaries and before/after comparison, the same shape the extension records and exports,

package/dist/{notifiers-FNzKHs0a.d.ts → notifiers-CqQW0Eum.d.ts}

@@ -1,5 +1,5 @@
-import { R as RenderReport, a as ReportLike, N as Notifier } from './types-DW5-N2XH.js';
-import { R as RankedFix, B as Budget, a as BudgetResult } from './budget-BnJlYwrV.js';
+import { R as RenderReport, b as ReportLike, N as Notifier } from './types-DwNN5cWe.js';
+import { R as RankedFix, B as Budget, a as BudgetResult } from './budget-ok1VDJ4t.js';
 
 /**
  * Session summaries and before/after comparison, the same shape the extension records and exports,

package/dist/playwright.d.cts

@@ -1,7 +1,7 @@
-import { R as RenderReport } from './types-DW5-N2XH.cjs';
-import { S as SerializableOptions } from './devtools-DJi_6AfJ.cjs';
-import { B as Budget, a as BudgetResult } from './budget-CRswn-nC.cjs';
-export { R as RankedFix, c as checkBudget, f as formatFixes, r as rankFixes } from './budget-CRswn-nC.cjs';
+import { R as RenderReport } from './types-DwNN5cWe.cjs';
+import { S as SerializableOptions } from './devtools-UwQx2VYS.cjs';
+import { B as Budget, a as BudgetResult } from './budget-CA1MS7lB.cjs';
+export { R as RankedFix, c as checkBudget, f as formatFixes, r as rankFixes } from './budget-CA1MS7lB.cjs';
 
 /** The subset of Playwright's `Page` used here (keeps `@playwright/test` an optional peer). */
 interface PageLike {

package/dist/playwright.d.ts

@@ -1,7 +1,7 @@
-import { R as RenderReport } from './types-DW5-N2XH.js';
-import { S as SerializableOptions } from './devtools-BYWat7nQ.js';
-import { B as Budget, a as BudgetResult } from './budget-BnJlYwrV.js';
-export { R as RankedFix, c as checkBudget, f as formatFixes, r as rankFixes } from './budget-BnJlYwrV.js';
+import { R as RenderReport } from './types-DwNN5cWe.js';
+import { S as SerializableOptions } from './devtools-Cl5n_52v.js';
+import { B as Budget, a as BudgetResult } from './budget-ok1VDJ4t.js';
+export { R as RankedFix, c as checkBudget, f as formatFixes, r as rankFixes } from './budget-ok1VDJ4t.js';
 
 /** The subset of Playwright's `Page` used here (keeps `@playwright/test` an optional peer). */
 interface PageLike {

package/dist/relay.cjs

@@ -8,6 +8,8 @@ var url = require('url');
 // node_modules/tsup/assets/cjs_shims.js
 var getImportMetaUrl = () => typeof document === "undefined" ? new URL(`file:${__filename}`).href : document.currentScript && document.currentScript.tagName.toUpperCase() === "SCRIPT" ? document.currentScript.src : new URL("main.js", document.baseURI).href;
 var importMetaUrl = /* @__PURE__ */ getImportMetaUrl();
+var MARKER = "__rerenderLens";
+var PROTOCOL = 2;
 var MIME = { ".html": "text/html; charset=utf-8", ".js": "text/javascript; charset=utf-8", ".css": "text/css; charset=utf-8" };
 function findPanelDir() {
   const here = path.dirname(url.fileURLToPath(importMetaUrl));
@@ -42,26 +44,55 @@ function createRelayServer(options = {}) {
   const host = options.host ?? "127.0.0.1";
   const panelDir = options.panelDir === void 0 ? findPanelDir() : options.panelDir;
   const keepAliveMs = options.keepAliveMs ?? 15e3;
-  const apps = /* @__PURE__ */ new Set();
+  const token = options.token || null;
+  const apps = /* @__PURE__ */ new Map();
   const panels = /* @__PURE__ */ new Set();
   let url = "";
-  const send = (targets, message) => {
-    const line = `data: ${JSON.stringify(message)}
+  let nextAppId = 1;
+  const connectUrl = () => token ? `${url}?token=${encodeURIComponent(token)}` : url;
+  const line = (message) => `data: ${JSON.stringify(message)}
 
 `;
-    for (const res of targets) {
+  const sendTo = (res, message) => {
+    try {
+      res.write(line(message));
+    } catch {
+      apps.delete(res);
+      panels.delete(res);
+    }
+  };
+  const send = (targets, message) => {
+    const text = line(message);
+    for (const res of [...targets]) {
       try {
-        res.write(line);
+        res.write(text);
       } catch {
-        targets.delete(res);
+        apps.delete(res);
+        panels.delete(res);
       }
     }
   };
-  const route = (message) => {
+  const appList = () => [...apps.values()];
+  const roster = () => ({ [MARKER]: true, version: PROTOCOL, type: "relay", payload: { apps: apps.size, list: appList() } });
+  const streamOf = (id) => {
+    for (const [res, app] of apps) if (app.id === id) return res;
+    return null;
+  };
+  const route = (message, from) => {
     if (!message || typeof message !== "object") return;
     const m = message;
-    if (m.__rerenderLensCmd === true) send(apps, m);
-    else if (m.__rerenderLens === true || m.__rerenderLensReply === true) send(panels, m);
+    if (m.__rerenderLensCmd === true) {
+      const target = typeof m.app === "string" ? streamOf(m.app) : null;
+      if (target) sendTo(target, m);
+      else send(apps.keys(), m);
+    } else if (m.__rerenderLens === true || m.__rerenderLensReply === true) {
+      send(panels, from ? { ...m, app: from.id } : m);
+    }
+  };
+  const authorized = (req, u) => {
+    if (!token) return true;
+    const given = u.searchParams.get("token") || (typeof req.headers["x-rerender-lens-token"] === "string" ? req.headers["x-rerender-lens-token"] : "");
+    return given === token;
   };
   const server = http.createServer(async (req, res) => {
     cors(res);
@@ -73,18 +104,26 @@ function createRelayServer(options = {}) {
     }
     if (u.pathname === "/" && req.method === "GET") {
       res.statusCode = 302;
-      res.setHeader("Location", `/panel.html?relay=${encodeURIComponent(url)}`);
+      res.setHeader("Location", `/panel.html?relay=${encodeURIComponent(connectUrl())}`);
       res.end();
       return;
     }
+    if (/^\/(events|message|status)$/.test(u.pathname) && !authorized(req, u)) {
+      res.statusCode = 401;
+      res.setHeader("Content-Type", "text/plain");
+      res.end("rerender-lens relay: this relay needs the token from the URL it printed (?token=...)");
+      return;
+    }
     if (u.pathname === "/events" && req.method === "GET") {
-      const role = u.searchParams.get("role") === "app" ? apps : panels;
+      const isApp = u.searchParams.get("role") === "app";
       res.statusCode = 200;
       res.setHeader("Content-Type", "text/event-stream");
       res.setHeader("Cache-Control", "no-store");
       res.setHeader("Connection", "keep-alive");
       res.write(": connected\n\n");
-      role.add(res);
+      const app = isApp ? { id: `a${nextAppId++}`, label: (u.searchParams.get("label") || req.headers.origin || "").slice(0, 120) || `app ${nextAppId - 1}` } : null;
+      if (app) apps.set(res, app);
+      else panels.add(res);
       const ping = setInterval(() => {
         try {
           res.write(": ping\n\n");
@@ -93,14 +132,15 @@ function createRelayServer(options = {}) {
       }, keepAliveMs);
       req.on("close", () => {
         clearInterval(ping);
-        role.delete(res);
+        apps.delete(res);
+        panels.delete(res);
       });
-      const count = () => ({ __rerenderLens: true, version: 2, type: "relay", payload: { apps: apps.size } });
-      if (role === apps) {
-        send(panels, count());
-        req.on("close", () => send(panels, count()));
+      if (app) {
+        sendTo(res, { __rerenderLensRelay: true, version: PROTOCOL, app: app.id });
+        send(panels, roster());
+        req.on("close", () => send(panels, roster()));
       } else {
-        send(/* @__PURE__ */ new Set([res]), count());
+        sendTo(res, roster());
       }
       return;
     }
@@ -112,7 +152,9 @@ function createRelayServer(options = {}) {
     if (u.pathname === "/message" && req.method === "POST") {
       try {
         const parsed = JSON.parse(await readBody(req) || "null");
-        for (const m of Array.isArray(parsed) ? parsed : [parsed]) route(m);
+        const sender = u.searchParams.get("app");
+        const from = sender ? appList().find((a) => a.id === sender) ?? void 0 : void 0;
+        for (const m of Array.isArray(parsed) ? parsed : [parsed]) route(m, from);
         res.statusCode = 204;
         res.end();
       } catch (e) {
@@ -125,7 +167,7 @@ function createRelayServer(options = {}) {
     if (u.pathname === "/status" && req.method === "GET") {
       res.statusCode = 200;
       res.setHeader("Content-Type", "application/json");
-      res.end(JSON.stringify({ ok: true, apps: apps.size, panels: panels.size }));
+      res.end(JSON.stringify({ ok: true, apps: apps.size, panels: panels.size, list: appList() }));
       return;
     }
     const file = u.pathname.replace(/^\//, "");
@@ -155,10 +197,12 @@ function createRelayServer(options = {}) {
       resolve({
         server,
         url,
+        connectUrl: connectUrl(),
         port,
         counts: () => ({ apps: apps.size, panels: panels.size }),
+        appList,
         close: () => new Promise((done) => {
-          for (const res of [...apps, ...panels]) res.end();
+          for (const res of [...apps.keys(), ...panels]) res.end();
           apps.clear();
           panels.clear();
           server.close(() => done());

package/dist/relay.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../node_modules/tsup/assets/cjs_shims.js","../src/relay.ts"],"names":["dirname","fileURLToPath","join","existsSync","createServer","readFileSync"],"mappings":";;;;;;;;AAKA,IAAM,gBAAA,GAAmB,MACvB,OAAO,QAAA,KAAa,WAAA,GAChB,IAAI,GAAA,CAAI,CAAA,KAAA,EAAQ,UAAU,CAAA,CAAE,CAAA,CAAE,IAAA,GAC7B,QAAA,CAAS,aAAA,IAAiB,QAAA,CAAS,aAAA,CAAc,OAAA,CAAQ,WAAA,EAAY,KAAM,QAAA,GAC1E,QAAA,CAAS,aAAA,CAAc,GAAA,GACvB,IAAI,GAAA,CAAI,SAAA,EAAW,QAAA,CAAS,OAAO,CAAA,CAAE,IAAA;AAEtC,IAAM,gCAAgC,gBAAA,EAAiB;AC0B9D,IAAM,OAA+B,EAAE,OAAA,EAAS,4BAA4B,KAAA,EAAO,gCAAA,EAAkC,QAAQ,yBAAA,EAA0B;AAEhJ,SAAS,YAAA,GAA8B;AAC5C,EAAA,MAAM,IAAA,GAAOA,YAAA,CAAQC,iBAAA,CAAc,aAAe,CAAC,CAAA;AACnD,EAAA,KAAA,MAAW,OAAO,CAACC,SAAA,CAAK,MAAM,IAAA,EAAM,OAAO,GAAGA,SAAA,CAAK,IAAA,EAAM,IAAA,EAAM,WAAW,GAAGA,SAAA,CAAK,IAAA,EAAM,MAAM,IAAA,EAAM,WAAW,CAAC,CAAA,EAAG;AACjH,IAAA,IAAIC,aAAA,CAAWD,SAAA,CAAK,GAAA,EAAK,YAAY,CAAC,CAAA,IAAKC,aAAA,CAAWD,SAAA,CAAK,GAAA,EAAK,UAAU,CAAC,CAAA,EAAG,OAAO,GAAA;AAAA,EACvF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,IAAM,IAAA,GAAO,CAAC,GAAA,KAA8B;AAC1C,EAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,GAAG,CAAA;AAChD,EAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,oBAAoB,CAAA;AAClE,EAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,cAAc,CAAA;AAC9D,CAAA;AAEA,SAAS,QAAA,CAAS,GAAA,EAAsB,KAAA,GAAQ,CAAA,GAAI,OAAO,IAAA,EAAuB;AAChF,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,SAAmB,EAAC;AAC1B,IAAA,IAAI,IAAA,GAAO,CAAA;AACX,IAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAC5B,MAAA,IAAA,IAAQ,CAAA,CAAE,MAAA;AACV,MAAA,IAAI,OAAO,KAAA,EAAO;AAChB,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,gBAAgB,CAAC,CAAA;AAClC,QAAA,GAAA,CAAI,OAAA,EAAQ;AACZ,QAAA;AAAA,MACF;AACA,MAAA,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,IACf,CAAC,CAAA;AACD,IAAA,GAAA,CAAI,EAAA,CAAG,KAAA,EAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAC,CAAA;AACnE,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM,CAAA;AAAA,EACxB,CAAC,CAAA;AACH;AAEO,SAAS,iBAAA,CAAkB,OAAA,GAAwB,EAAC,EAAyB;AAClF,EAAA,MAAM,IAAA,GAAO,QAAQ,IAAA,IAAQ,WAAA;AAC7B,EAAA,MAAM,WAAW,OAAA,CAAQ,QAAA,KAAa,MAAA,GAAY,YAAA,KAAiB,OAAA,CAAQ,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,QAAQ,WAAA,IAAe,IAAA;AAC3C,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAoB;AACrC,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAoB;AACvC,EAAA,IAAI,GAAA,GAAM,EAAA;AAEV,EAAA,MAAM,IAAA,GAAO,CAAC,OAAA,EAA8B,OAAA,KAA2B;AACrE,IAAA,MAAM,IAAA,GAAO,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC;;AAAA,CAAA;AAC7C,IAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,MAAA,IAAI;AACF,QAAA,GAAA,CAAI,MAAM,IAAI,CAAA;AAAA,MAChB,CAAA,CAAA,MAAQ;AACN,QAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAAA,MACpB;AAAA,IACF;AAAA,EACF,CAAA;AAEA,EAAA,MAAM,KAAA,GAAQ,CAAC,OAAA,KAA2B;AACxC,IAAA,IAAI,CAAC,OAAA,IAAW,OAAO,OAAA,KAAY,QAAA,EAAU;AAC7C,IAAA,MAAM,CAAA,GAAI,OAAA;AACV,IAAA,IAAI,CAAA,CAAE,iBAAA,KAAsB,IAAA,EAAM,IAAA,CAAK,MAAM,CAAC,CAAA;AAAA,SAAA,IACrC,CAAA,CAAE,mBAAmB,IAAA,IAAQ,CAAA,CAAE,wBAAwB,IAAA,EAAM,IAAA,CAAK,QAAQ,CAAC,CAAA;AAAA,EACtF,CAAA;AAEA,EAAA,MAAM,MAAA,GAASE,iBAAA,CAAa,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC9C,IAAA,IAAA,CAAK,GAAG,CAAA;AACR,IAAA,MAAM,IAAI,IAAI,GAAA,CAAI,GAAA,CAAI,GAAA,IAAO,KAAK,cAAc,CAAA;AAChD,IAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAC5B,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,GAAA,EAAI;AACR,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAA,CAAE,QAAA,KAAa,GAAA,IAAO,GAAA,CAAI,WAAW,KAAA,EAAO;AAC9C,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,UAAU,UAAA,EAAY,CAAA,kBAAA,EAAqB,kBAAA,CAAmB,GAAG,CAAC,CAAA,CAAE,CAAA;AACxE,MAAA,GAAA,CAAI,GAAA,EAAI;AACR,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAA,CAAE,QAAA,KAAa,SAAA,IAAa,GAAA,CAAI,WAAW,KAAA,EAAO;AACpD,MAAA,MAAM,OAAO,CAAA,CAAE,YAAA,CAAa,IAAI,MAAM,CAAA,KAAM,QAAQ,IAAA,GAAO,MAAA;AAC3D,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,MAAA,GAAA,CAAI,SAAA,CAAU,iBAAiB,UAAU,CAAA;AACzC,MAAA,GAAA,CAAI,SAAA,CAAU,cAAc,YAAY,CAAA;AACxC,MAAA,GAAA,CAAI,MAAM,iBAAiB,CAAA;AAC3B,MAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,MAAA,MAAM,IAAA,GAAO,YAAY,MAAM;AAC7B,QAAA,IAAI;AACF,UAAA,GAAA,CAAI,MAAM,YAAY,CAAA;AAAA,QACxB,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF,GAAG,WAAW,CAAA;AACd,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,QAAA,aAAA,CAAc,IAAI,CAAA;AAClB,QAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AAAA,MACjB,CAAC,CAAA;AAID,MAAA,MAAM,KAAA,GAAQ,OAAgB,EAAE,cAAA,EAAgB,MAAM,OAAA,EAAS,CAAA,EAAG,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,EAAE,IAAA,EAAM,IAAA,CAAK,MAAK,EAAE,CAAA;AAC9G,MAAA,IAAI,SAAS,IAAA,EAAM;AACjB,QAAA,IAAA,CAAK,MAAA,EAAQ,OAAO,CAAA;AACpB,QAAA,GAAA,CAAI,GAAG,OAAA,EAAS,MAAM,KAAK,MAAA,EAAQ,KAAA,EAAO,CAAC,CAAA;AAAA,MAC7C,CAAA,MAAO;AACL,QAAA,IAAA,qBAAS,GAAA,CAAI,CAAC,GAAG,CAAC,CAAA,EAAG,OAAO,CAAA;AAAA,MAC9B;AACA,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAA,CAAE,aAAa,cAAA,EAAgB;AACjC,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,GAAA,EAAI;AACR,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAA,CAAE,QAAA,KAAa,UAAA,IAAc,GAAA,CAAI,WAAW,MAAA,EAAQ;AACtD,MAAA,IAAI;AACF,QAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAO,MAAM,QAAA,CAAS,GAAG,KAAM,MAAM,CAAA;AACzD,QAAA,KAAA,MAAW,CAAA,IAAK,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GAAI,SAAS,CAAC,MAAM,CAAA,EAAG,KAAA,CAAM,CAAC,CAAA;AAClE,QAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,QAAA,GAAA,CAAI,GAAA,EAAI;AAAA,MACV,SAAS,CAAA,EAAG;AACV,QAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,QAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,YAAY,CAAA;AAC1C,QAAA,GAAA,CAAI,GAAA,CAAI,MAAA,CAAQ,CAAA,CAAY,OAAA,IAAW,CAAC,CAAC,CAAA;AAAA,MAC3C;AACA,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAA,CAAE,QAAA,KAAa,SAAA,IAAa,GAAA,CAAI,WAAW,KAAA,EAAO;AACpD,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,kBAAkB,CAAA;AAChD,MAAA,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,IAAA,EAAM,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,CAAC,CAAA;AAC1E,MAAA;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,CAAA,CAAE,QAAA,CAAS,OAAA,CAAQ,OAAO,EAAE,CAAA;AACzC,IAAA,IAAI,yBAAyB,IAAA,CAAK,IAAI,CAAA,IAAK,GAAA,CAAI,WAAW,KAAA,EAAO;AAC/D,MAAA,IAAI,CAAC,QAAA,EAAU;AACb,QAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,QAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,YAAY,CAAA;AAC1C,QAAA,GAAA,CAAI,IAAI,8DAA8D,CAAA;AACtE,QAAA;AAAA,MACF;AACA,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,cAAA,EAAgB,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,WAAA,CAAY,GAAG,CAAC,CAAC,CAAA,IAAK,0BAA0B,CAAA;AACnG,MAAA,GAAA,CAAI,SAAA,CAAU,iBAAiB,UAAU,CAAA;AACzC,MAAA,GAAA,CAAI,IAAIC,eAAA,CAAaH,SAAA,CAAK,QAAA,EAAU,IAAI,CAAC,CAAC,CAAA;AAC1C,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,YAAY,CAAA;AAC1C,IAAA,GAAA,CAAI,IAAI,WAAW,CAAA;AAAA,EACrB,CAAC,CAAA;AAED,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAA,CAAO,IAAA,CAAK,SAAS,MAAM,CAAA;AAC3B,IAAA,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,IAAA,IAAQ,IAAA,EAAM,MAAM,MAAM;AAC9C,MAAA,MAAM,IAAA,GAAO,OAAO,OAAA,EAAQ;AAC5B,MAAA,MAAM,IAAA,GAAO,OAAO,IAAA,KAAS,QAAA,IAAY,OAAO,IAAA,CAAK,IAAA,GAAO,QAAQ,IAAA,IAAQ,IAAA;AAC5E,MAAA,GAAA,GAAM,CAAA,OAAA,EAAU,SAAS,SAAA,IAAa,IAAA,KAAS,OAAO,WAAA,GAAc,IAAI,IAAI,IAAI,CAAA,CAAA;AAChF,MAAA,OAAA,CAAQ;AAAA,QACN,MAAA;AAAA,QACA,GAAA;AAAA,QACA,IAAA;AAAA,QACA,MAAA,EAAQ,OAAO,EAAE,IAAA,EAAM,KAAK,IAAA,EAAM,MAAA,EAAQ,OAAO,IAAA,EAAK,CAAA;AAAA,QACtD,KAAA,EAAO,MACL,IAAI,OAAA,CAAc,CAAC,IAAA,KAAS;AAC1B,UAAA,KAAA,MAAW,GAAA,IAAO,CAAC,GAAG,IAAA,EAAM,GAAG,MAAM,CAAA,MAAO,GAAA,EAAI;AAChD,UAAA,IAAA,CAAK,KAAA,EAAM;AACX,UAAA,MAAA,CAAO,KAAA,EAAM;AACb,UAAA,MAAA,CAAO,KAAA,CAAM,MAAM,IAAA,EAAM,CAAA;AAAA,QAC3B,CAAC;AAAA,OACJ,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AACH","file":"relay.cjs","sourcesContent":["// Shim globals in cjs bundle\n// There's a weird bug that esbuild will always inject importMetaUrl\n// if we export it as `const importMetaUrl = ... __filename ...`\n// But using a function will not cause this issue\n\nconst getImportMetaUrl = () => \n  typeof document === \"undefined\" \n    ? new URL(`file:${__filename}`).href \n    : (document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT') \n      ? document.currentScript.src \n      : new URL(\"main.js\", document.baseURI).href;\n\nexport const importMetaUrl = /* @__PURE__ */ getImportMetaUrl()\n","/**\n * A tiny local relay (`npx rerender-lens panel`): serves the panel and forwards messages between\n * app pages and panel pages over Server-Sent Events + POST, so any app (Next.js, Webpack, a\n * production-like build) gets the panel without the extension and without a same-origin channel.\n *\n *   GET  /                      redirect to /panel.html?relay=<this server>\n *   GET  /panel.(html|js|css)   the panel page\n *   GET  /events?role=app       SSE: commands from panels\n *   GET  /events?role=panel     SSE: hello / report / clear from apps, replies to commands\n *   POST /message               one message or an array; `{ __rerenderLens }` and replies go to\n *                               panels, `{ __rerenderLensCmd }` goes to apps\n *\n * Dependency-free (node:http). CORS is open: the relay is a local dev tool, bind it to 127.0.0.1.\n */\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nexport interface RelayOptions {\n  port?: number;\n  host?: string;\n  /** Directory with panel.html/js/css; found automatically in the package. */\n  panelDir?: string | null;\n  /** Milliseconds between SSE keep-alive comments. Default 15000. */\n  keepAliveMs?: number;\n}\n\nexport interface RelayServer {\n  server: Server;\n  /** `http://127.0.0.1:4141` once listening. */\n  url: string;\n  port: number;\n  close(): Promise<void>;\n  /** Connected app and panel streams. */\n  counts(): { apps: number; panels: number };\n}\n\nconst MIME: Record<string, string> = { '.html': 'text/html; charset=utf-8', '.js': 'text/javascript; charset=utf-8', '.css': 'text/css; charset=utf-8' };\n\nexport function findPanelDir(): string | null {\n  const here = dirname(fileURLToPath(import.meta.url));\n  for (const dir of [join(here, '..', 'panel'), join(here, '..', 'extension'), join(here, '..', '..', 'extension')]) {\n    if (existsSync(join(dir, 'panel.html')) && existsSync(join(dir, 'panel.js'))) return dir;\n  }\n  return null;\n}\n\nconst cors = (res: ServerResponse): void => {\n  res.setHeader('Access-Control-Allow-Origin', '*');\n  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');\n  res.setHeader('Access-Control-Allow-Headers', 'Content-Type');\n};\n\nfunction readBody(req: IncomingMessage, limit = 8 * 1024 * 1024): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let size = 0;\n    req.on('data', (c: Buffer) => {\n      size += c.length;\n      if (size > limit) {\n        reject(new Error('body too large'));\n        req.destroy();\n        return;\n      }\n      chunks.push(c);\n    });\n    req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));\n    req.on('error', reject);\n  });\n}\n\nexport function createRelayServer(options: RelayOptions = {}): Promise<RelayServer> {\n  const host = options.host ?? '127.0.0.1';\n  const panelDir = options.panelDir === undefined ? findPanelDir() : options.panelDir;\n  const keepAliveMs = options.keepAliveMs ?? 15_000;\n  const apps = new Set<ServerResponse>();\n  const panels = new Set<ServerResponse>();\n  let url = '';\n\n  const send = (targets: Set<ServerResponse>, message: unknown): void => {\n    const line = `data: ${JSON.stringify(message)}\\n\\n`;\n    for (const res of targets) {\n      try {\n        res.write(line);\n      } catch {\n        targets.delete(res);\n      }\n    }\n  };\n\n  const route = (message: unknown): void => {\n    if (!message || typeof message !== 'object') return;\n    const m = message as Record<string, unknown>;\n    if (m.__rerenderLensCmd === true) send(apps, m);\n    else if (m.__rerenderLens === true || m.__rerenderLensReply === true) send(panels, m);\n  };\n\n  const server = createServer(async (req, res) => {\n    cors(res);\n    const u = new URL(req.url || '/', 'http://relay');\n    if (req.method === 'OPTIONS') {\n      res.statusCode = 204;\n      res.end();\n      return;\n    }\n    if (u.pathname === '/' && req.method === 'GET') {\n      res.statusCode = 302;\n      res.setHeader('Location', `/panel.html?relay=${encodeURIComponent(url)}`);\n      res.end();\n      return;\n    }\n    if (u.pathname === '/events' && req.method === 'GET') {\n      const role = u.searchParams.get('role') === 'app' ? apps : panels;\n      res.statusCode = 200;\n      res.setHeader('Content-Type', 'text/event-stream');\n      res.setHeader('Cache-Control', 'no-store');\n      res.setHeader('Connection', 'keep-alive');\n      res.write(': connected\\n\\n');\n      role.add(res);\n      const ping = setInterval(() => {\n        try {\n          res.write(': ping\\n\\n');\n        } catch {\n          /* closed */\n        }\n      }, keepAliveMs);\n      req.on('close', () => {\n        clearInterval(ping);\n        role.delete(res);\n      });\n      // Panels learn the app count as soon as their stream is open (that first message is also how a\n      // panel knows it is safe to send commands: replies only reach panels that are already connected),\n      // and again whenever an app comes or goes, so they show \"disconnected\" instead of waiting.\n      const count = (): unknown => ({ __rerenderLens: true, version: 2, type: 'relay', payload: { apps: apps.size } });\n      if (role === apps) {\n        send(panels, count());\n        req.on('close', () => send(panels, count()));\n      } else {\n        send(new Set([res]), count());\n      }\n      return;\n    }\n    if (u.pathname === '/favicon.ico') {\n      res.statusCode = 204;\n      res.end();\n      return;\n    }\n    if (u.pathname === '/message' && req.method === 'POST') {\n      try {\n        const parsed = JSON.parse((await readBody(req)) || 'null') as unknown;\n        for (const m of Array.isArray(parsed) ? parsed : [parsed]) route(m);\n        res.statusCode = 204;\n        res.end();\n      } catch (e) {\n        res.statusCode = 400;\n        res.setHeader('Content-Type', 'text/plain');\n        res.end(String((e as Error).message || e));\n      }\n      return;\n    }\n    if (u.pathname === '/status' && req.method === 'GET') {\n      res.statusCode = 200;\n      res.setHeader('Content-Type', 'application/json');\n      res.end(JSON.stringify({ ok: true, apps: apps.size, panels: panels.size }));\n      return;\n    }\n    const file = u.pathname.replace(/^\\//, '');\n    if (/^panel\\.(html|js|css)$/.test(file) && req.method === 'GET') {\n      if (!panelDir) {\n        res.statusCode = 500;\n        res.setHeader('Content-Type', 'text/plain');\n        res.end('rerender-lens: panel files not found (is the package built?)');\n        return;\n      }\n      res.statusCode = 200;\n      res.setHeader('Content-Type', MIME[file.slice(file.lastIndexOf('.'))] || 'application/octet-stream');\n      res.setHeader('Cache-Control', 'no-store');\n      res.end(readFileSync(join(panelDir, file)));\n      return;\n    }\n    res.statusCode = 404;\n    res.setHeader('Content-Type', 'text/plain');\n    res.end('not found');\n  });\n\n  return new Promise((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(options.port ?? 4141, host, () => {\n      const addr = server.address();\n      const port = typeof addr === 'object' && addr ? addr.port : options.port ?? 4141;\n      url = `http://${host === '0.0.0.0' || host === '::' ? 'localhost' : host}:${port}`;\n      resolve({\n        server,\n        url,\n        port,\n        counts: () => ({ apps: apps.size, panels: panels.size }),\n        close: () =>\n          new Promise<void>((done) => {\n            for (const res of [...apps, ...panels]) res.end();\n            apps.clear();\n            panels.clear();\n            server.close(() => done());\n          }),\n      });\n    });\n  });\n}\n"]}
+{"version":3,"sources":["../node_modules/tsup/assets/cjs_shims.js","../src/relay.ts"],"names":["dirname","fileURLToPath","join","existsSync","createServer","readFileSync"],"mappings":";;;;;;;;AAKA,IAAM,gBAAA,GAAmB,MACvB,OAAO,QAAA,KAAa,WAAA,GAChB,IAAI,GAAA,CAAI,CAAA,KAAA,EAAQ,UAAU,CAAA,CAAE,CAAA,CAAE,IAAA,GAC7B,QAAA,CAAS,aAAA,IAAiB,QAAA,CAAS,aAAA,CAAc,OAAA,CAAQ,WAAA,EAAY,KAAM,QAAA,GAC1E,QAAA,CAAS,aAAA,CAAc,GAAA,GACvB,IAAI,GAAA,CAAI,SAAA,EAAW,QAAA,CAAS,OAAO,CAAA,CAAE,IAAA;AAEtC,IAAM,gCAAgC,gBAAA,EAAiB;ACkD9D,IAAM,MAAA,GAAS,gBAAA;AACf,IAAM,QAAA,GAAW,CAAA;AAEjB,IAAM,OAA+B,EAAE,OAAA,EAAS,4BAA4B,KAAA,EAAO,gCAAA,EAAkC,QAAQ,yBAAA,EAA0B;AAEhJ,SAAS,YAAA,GAA8B;AAC5C,EAAA,MAAM,IAAA,GAAOA,YAAA,CAAQC,iBAAA,CAAc,aAAe,CAAC,CAAA;AACnD,EAAA,KAAA,MAAW,OAAO,CAACC,SAAA,CAAK,MAAM,IAAA,EAAM,OAAO,GAAGA,SAAA,CAAK,IAAA,EAAM,IAAA,EAAM,WAAW,GAAGA,SAAA,CAAK,IAAA,EAAM,MAAM,IAAA,EAAM,WAAW,CAAC,CAAA,EAAG;AACjH,IAAA,IAAIC,aAAA,CAAWD,SAAA,CAAK,GAAA,EAAK,YAAY,CAAC,CAAA,IAAKC,aAAA,CAAWD,SAAA,CAAK,GAAA,EAAK,UAAU,CAAC,CAAA,EAAG,OAAO,GAAA;AAAA,EACvF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,IAAM,IAAA,GAAO,CAAC,GAAA,KAA8B;AAC1C,EAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,GAAG,CAAA;AAChD,EAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,oBAAoB,CAAA;AAClE,EAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,cAAc,CAAA;AAC9D,CAAA;AAEA,SAAS,QAAA,CAAS,GAAA,EAAsB,KAAA,GAAQ,CAAA,GAAI,OAAO,IAAA,EAAuB;AAChF,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,SAAmB,EAAC;AAC1B,IAAA,IAAI,IAAA,GAAO,CAAA;AACX,IAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAC5B,MAAA,IAAA,IAAQ,CAAA,CAAE,MAAA;AACV,MAAA,IAAI,OAAO,KAAA,EAAO;AAChB,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,gBAAgB,CAAC,CAAA;AAClC,QAAA,GAAA,CAAI,OAAA,EAAQ;AACZ,QAAA;AAAA,MACF;AACA,MAAA,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,IACf,CAAC,CAAA;AACD,IAAA,GAAA,CAAI,EAAA,CAAG,KAAA,EAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAC,CAAA;AACnE,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM,CAAA;AAAA,EACxB,CAAC,CAAA;AACH;AAEO,SAAS,iBAAA,CAAkB,OAAA,GAAwB,EAAC,EAAyB;AAClF,EAAA,MAAM,IAAA,GAAO,QAAQ,IAAA,IAAQ,WAAA;AAC7B,EAAA,MAAM,WAAW,OAAA,CAAQ,QAAA,KAAa,MAAA,GAAY,YAAA,KAAiB,OAAA,CAAQ,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,QAAQ,WAAA,IAAe,IAAA;AAC3C,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,IAAA;AAC/B,EAAA,MAAM,IAAA,uBAAW,GAAA,EAA8B;AAC/C,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAoB;AACvC,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,IAAI,SAAA,GAAY,CAAA;AAChB,EAAA,MAAM,UAAA,GAAa,MAAe,KAAA,GAAQ,CAAA,EAAG,GAAG,CAAA,OAAA,EAAU,kBAAA,CAAmB,KAAK,CAAC,CAAA,CAAA,GAAK,GAAA;AAExF,EAAA,MAAM,OAAO,CAAC,OAAA,KAA6B,SAAS,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC;;AAAA,CAAA;AAC3E,EAAA,MAAM,MAAA,GAAS,CAAC,GAAA,EAAqB,OAAA,KAA2B;AAC9D,IAAA,IAAI;AACF,MAAA,GAAA,CAAI,KAAA,CAAM,IAAA,CAAK,OAAO,CAAC,CAAA;AAAA,IACzB,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,MAAA,MAAA,CAAO,OAAO,GAAG,CAAA;AAAA,IACnB;AAAA,EACF,CAAA;AACA,EAAA,MAAM,IAAA,GAAO,CAAC,OAAA,EAAmC,OAAA,KAA2B;AAC1E,IAAA,MAAM,IAAA,GAAO,KAAK,OAAO,CAAA;AACzB,IAAA,KAAA,MAAW,GAAA,IAAO,CAAC,GAAG,OAAO,CAAA,EAAG;AAC9B,MAAA,IAAI;AACF,QAAA,GAAA,CAAI,MAAM,IAAI,CAAA;AAAA,MAChB,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,QAAA,MAAA,CAAO,OAAO,GAAG,CAAA;AAAA,MACnB;AAAA,IACF;AAAA,EACF,CAAA;AAEA,EAAA,MAAM,UAAU,MAAkB,CAAC,GAAG,IAAA,CAAK,QAAQ,CAAA;AACnD,EAAA,MAAM,SAAS,OAAgB,EAAE,CAAC,MAAM,GAAG,MAAM,OAAA,EAAS,QAAA,EAAU,MAAM,OAAA,EAAS,OAAA,EAAS,EAAE,IAAA,EAAM,IAAA,CAAK,MAAM,IAAA,EAAM,OAAA,IAAU,EAAE,CAAA;AACjI,EAAA,MAAM,QAAA,GAAW,CAAC,EAAA,KAAsC;AACtD,IAAA,KAAA,MAAW,CAAC,KAAK,GAAG,CAAA,IAAK,MAAM,IAAI,GAAA,CAAI,EAAA,KAAO,EAAA,EAAI,OAAO,GAAA;AACzD,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,KAAA,GAAQ,CAAC,OAAA,EAAkB,IAAA,KAA0B;AACzD,IAAA,IAAI,CAAC,OAAA,IAAW,OAAO,OAAA,KAAY,QAAA,EAAU;AAC7C,IAAA,MAAM,CAAA,GAAI,OAAA;AACV,IAAA,IAAI,CAAA,CAAE,sBAAsB,IAAA,EAAM;AAEhC,MAAA,MAAM,MAAA,GAAS,OAAO,CAAA,CAAE,GAAA,KAAQ,WAAW,QAAA,CAAS,CAAA,CAAE,GAAG,CAAA,GAAI,IAAA;AAC7D,MAAA,IAAI,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,CAAC,CAAA;AAAA,WACvB,IAAA,CAAK,IAAA,CAAK,IAAA,EAAK,EAAG,CAAC,CAAA;AAAA,IAC1B,WAAW,CAAA,CAAE,cAAA,KAAmB,IAAA,IAAQ,CAAA,CAAE,wBAAwB,IAAA,EAAM;AACtE,MAAA,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAE,GAAG,GAAG,GAAA,EAAK,IAAA,CAAK,EAAA,EAAG,GAAI,CAAC,CAAA;AAAA,IAChD;AAAA,EACF,CAAA;AAGA,EAAA,MAAM,UAAA,GAAa,CAAC,GAAA,EAAsB,CAAA,KAAoB;AAC5D,IAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,IAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,YAAA,CAAa,GAAA,CAAI,OAAO,CAAA,KAAM,OAAO,GAAA,CAAI,OAAA,CAAQ,uBAAuB,CAAA,KAAM,QAAA,GAAW,GAAA,CAAI,OAAA,CAAQ,uBAAuB,CAAA,GAAI,EAAA,CAAA;AAChJ,IAAA,OAAO,KAAA,KAAU,KAAA;AAAA,EACnB,CAAA;AAEA,EAAA,MAAM,MAAA,GAASE,iBAAA,CAAa,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC9C,IAAA,IAAA,CAAK,GAAG,CAAA;AACR,IAAA,MAAM,IAAI,IAAI,GAAA,CAAI,GAAA,CAAI,GAAA,IAAO,KAAK,cAAc,CAAA;AAChD,IAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAC5B,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,GAAA,EAAI;AACR,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAA,CAAE,QAAA,KAAa,GAAA,IAAO,GAAA,CAAI,WAAW,KAAA,EAAO;AAC9C,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,UAAU,UAAA,EAAY,CAAA,kBAAA,EAAqB,mBAAmB,UAAA,EAAY,CAAC,CAAA,CAAE,CAAA;AACjF,MAAA,GAAA,CAAI,GAAA,EAAI;AACR,MAAA;AAAA,IACF;AACA,IAAA,IAAI,6BAAA,CAA8B,KAAK,CAAA,CAAE,QAAQ,KAAK,CAAC,UAAA,CAAW,GAAA,EAAK,CAAC,CAAA,EAAG;AACzE,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,YAAY,CAAA;AAC1C,MAAA,GAAA,CAAI,IAAI,sFAAsF,CAAA;AAC9F,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAA,CAAE,QAAA,KAAa,SAAA,IAAa,GAAA,CAAI,WAAW,KAAA,EAAO;AACpD,MAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA,KAAM,KAAA;AAC7C,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,MAAA,GAAA,CAAI,SAAA,CAAU,iBAAiB,UAAU,CAAA;AACzC,MAAA,GAAA,CAAI,SAAA,CAAU,cAAc,YAAY,CAAA;AACxC,MAAA,GAAA,CAAI,MAAM,iBAAiB,CAAA;AAC3B,MAAA,MAAM,GAAA,GAAuB,KAAA,GAAQ,EAAE,EAAA,EAAI,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,EAAI,KAAA,EAAA,CAAQ,CAAA,CAAE,YAAA,CAAa,GAAA,CAAI,OAAO,KAAK,GAAA,CAAI,OAAA,CAAQ,MAAA,IAAU,EAAA,EAAI,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,IAAK,CAAA,IAAA,EAAO,SAAA,GAAY,CAAC,CAAA,CAAA,EAAG,GAAI,IAAA;AAC3K,MAAA,IAAI,GAAA,EAAK,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,GAAG,CAAA;AAAA,WACrB,MAAA,CAAO,IAAI,GAAG,CAAA;AACnB,MAAA,MAAM,IAAA,GAAO,YAAY,MAAM;AAC7B,QAAA,IAAI;AACF,UAAA,GAAA,CAAI,MAAM,YAAY,CAAA;AAAA,QACxB,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF,GAAG,WAAW,CAAA;AACd,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,QAAA,aAAA,CAAc,IAAI,CAAA;AAClB,QAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,QAAA,MAAA,CAAO,OAAO,GAAG,CAAA;AAAA,MACnB,CAAC,CAAA;AAID,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,MAAA,CAAO,GAAA,EAAK,EAAE,mBAAA,EAAqB,IAAA,EAAM,SAAS,QAAA,EAAU,GAAA,EAAK,GAAA,CAAI,EAAA,EAAI,CAAA;AACzE,QAAA,IAAA,CAAK,MAAA,EAAQ,QAAQ,CAAA;AACrB,QAAA,GAAA,CAAI,GAAG,OAAA,EAAS,MAAM,KAAK,MAAA,EAAQ,MAAA,EAAQ,CAAC,CAAA;AAAA,MAC9C,CAAA,MAAO;AACL,QAAA,MAAA,CAAO,GAAA,EAAK,QAAQ,CAAA;AAAA,MACtB;AACA,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAA,CAAE,aAAa,cAAA,EAAgB;AACjC,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,GAAA,EAAI;AACR,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAA,CAAE,QAAA,KAAa,UAAA,IAAc,GAAA,CAAI,WAAW,MAAA,EAAQ;AACtD,MAAA,IAAI;AACF,QAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAO,MAAM,QAAA,CAAS,GAAG,KAAM,MAAM,CAAA;AACzD,QAAA,MAAM,MAAA,GAAS,CAAA,CAAE,YAAA,CAAa,GAAA,CAAI,KAAK,CAAA;AACvC,QAAA,MAAM,IAAA,GAAO,MAAA,GAAU,OAAA,EAAQ,CAAE,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,MAAM,CAAA,IAAK,KAAA,CAAA,GAAa,KAAA,CAAA;AAC9E,QAAA,KAAA,MAAW,CAAA,IAAK,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GAAI,MAAA,GAAS,CAAC,MAAM,CAAA,EAAG,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA;AACxE,QAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,QAAA,GAAA,CAAI,GAAA,EAAI;AAAA,MACV,SAAS,CAAA,EAAG;AACV,QAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,QAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,YAAY,CAAA;AAC1C,QAAA,GAAA,CAAI,GAAA,CAAI,MAAA,CAAQ,CAAA,CAAY,OAAA,IAAW,CAAC,CAAC,CAAA;AAAA,MAC3C;AACA,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAA,CAAE,QAAA,KAAa,SAAA,IAAa,GAAA,CAAI,WAAW,KAAA,EAAO;AACpD,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,kBAAkB,CAAA;AAChD,MAAA,GAAA,CAAI,IAAI,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,MAAM,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,MAAA,EAAQ,OAAO,IAAA,EAAM,IAAA,EAAM,OAAA,EAAQ,EAAG,CAAC,CAAA;AAC3F,MAAA;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,CAAA,CAAE,QAAA,CAAS,OAAA,CAAQ,OAAO,EAAE,CAAA;AACzC,IAAA,IAAI,yBAAyB,IAAA,CAAK,IAAI,CAAA,IAAK,GAAA,CAAI,WAAW,KAAA,EAAO;AAC/D,MAAA,IAAI,CAAC,QAAA,EAAU;AACb,QAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,QAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,YAAY,CAAA;AAC1C,QAAA,GAAA,CAAI,IAAI,8DAA8D,CAAA;AACtE,QAAA;AAAA,MACF;AACA,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,cAAA,EAAgB,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,WAAA,CAAY,GAAG,CAAC,CAAC,CAAA,IAAK,0BAA0B,CAAA;AACnG,MAAA,GAAA,CAAI,SAAA,CAAU,iBAAiB,UAAU,CAAA;AACzC,MAAA,GAAA,CAAI,IAAIC,eAAA,CAAaH,SAAA,CAAK,QAAA,EAAU,IAAI,CAAC,CAAC,CAAA;AAC1C,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,YAAY,CAAA;AAC1C,IAAA,GAAA,CAAI,IAAI,WAAW,CAAA;AAAA,EACrB,CAAC,CAAA;AAED,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAA,CAAO,IAAA,CAAK,SAAS,MAAM,CAAA;AAC3B,IAAA,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,IAAA,IAAQ,IAAA,EAAM,MAAM,MAAM;AAC9C,MAAA,MAAM,IAAA,GAAO,OAAO,OAAA,EAAQ;AAC5B,MAAA,MAAM,IAAA,GAAO,OAAO,IAAA,KAAS,QAAA,IAAY,OAAO,IAAA,CAAK,IAAA,GAAO,QAAQ,IAAA,IAAQ,IAAA;AAC5E,MAAA,GAAA,GAAM,CAAA,OAAA,EAAU,SAAS,SAAA,IAAa,IAAA,KAAS,OAAO,WAAA,GAAc,IAAI,IAAI,IAAI,CAAA,CAAA;AAChF,MAAA,OAAA,CAAQ;AAAA,QACN,MAAA;AAAA,QACA,GAAA;AAAA,QACA,YAAY,UAAA,EAAW;AAAA,QACvB,IAAA;AAAA,QACA,MAAA,EAAQ,OAAO,EAAE,IAAA,EAAM,KAAK,IAAA,EAAM,MAAA,EAAQ,OAAO,IAAA,EAAK,CAAA;AAAA,QACtD,OAAA;AAAA,QACA,KAAA,EAAO,MACL,IAAI,OAAA,CAAc,CAAC,IAAA,KAAS;AAC1B,UAAA,KAAA,MAAW,GAAA,IAAO,CAAC,GAAG,IAAA,CAAK,IAAA,IAAQ,GAAG,MAAM,CAAA,EAAG,GAAA,CAAI,GAAA,EAAI;AACvD,UAAA,IAAA,CAAK,KAAA,EAAM;AACX,UAAA,MAAA,CAAO,KAAA,EAAM;AACb,UAAA,MAAA,CAAO,KAAA,CAAM,MAAM,IAAA,EAAM,CAAA;AAAA,QAC3B,CAAC;AAAA,OACJ,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AACH","file":"relay.cjs","sourcesContent":["// Shim globals in cjs bundle\n// There's a weird bug that esbuild will always inject importMetaUrl\n// if we export it as `const importMetaUrl = ... __filename ...`\n// But using a function will not cause this issue\n\nconst getImportMetaUrl = () => \n  typeof document === \"undefined\" \n    ? new URL(`file:${__filename}`).href \n    : (document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT') \n      ? document.currentScript.src \n      : new URL(\"main.js\", document.baseURI).href;\n\nexport const importMetaUrl = /* @__PURE__ */ getImportMetaUrl()\n","/**\n * A tiny local relay (`npx rerender-lens panel`): serves the panel and forwards messages between\n * app pages and panel pages over Server-Sent Events + POST, so any app (Next.js, Webpack, a\n * production-like build) gets the panel without the extension and without a same-origin channel.\n *\n *   GET  /                      redirect to /panel.html?relay=<this server>\n *   GET  /panel.(html|js|css)   the panel page\n *   GET  /events?role=app       SSE: commands from panels (first message: this app's id)\n *   GET  /events?role=panel     SSE: hello / report / clear from apps, replies to commands\n *   POST /message               one message or an array; `{ __rerenderLens }` and replies go to\n *                               panels, `{ __rerenderLensCmd }` goes to apps\n *\n * Several apps can share one relay. Each app connection gets an id; the relay tells the app its id,\n * stamps `app` on everything that app sends, and sends panels the roster whenever it changes. A\n * command carrying `app` goes to that one app, a command without it goes to all of them, so a panel\n * or a library that knows nothing about ids behaves exactly as before.\n *\n * Dependency-free (node:http). Bound to 127.0.0.1 by default, where CORS is open and no token is\n * needed. On any other host `rerender-lens panel` generates a token: `/events`, `/message` and\n * `/status` then require it (`?token=` or the `x-rerender-lens-token` header) and the URL it prints\n * carries it, because reports contain the app's prop, state and context values.\n */\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nexport interface RelayOptions {\n  port?: number;\n  host?: string;\n  /** Directory with panel.html/js/css; found automatically in the package. */\n  panelDir?: string | null;\n  /** Milliseconds between SSE keep-alive comments. Default 15000. */\n  keepAliveMs?: number;\n  /**\n   * Require this token on `/events`, `/message` and `/status`. `rerender-lens panel` generates one\n   * whenever it binds to anything but loopback; the URL it prints carries it as `?token=`.\n   */\n  token?: string;\n}\n\n/** One connected app page. `label` is what the panel's app chooser shows. */\nexport interface RelayApp {\n  id: string;\n  label: string;\n}\n\nexport interface RelayServer {\n  server: Server;\n  /** `http://127.0.0.1:4141` once listening. */\n  url: string;\n  /** The URL to hand to a panel or an app: `url`, plus `?token=` when one is required. */\n  connectUrl: string;\n  port: number;\n  close(): Promise<void>;\n  /** Connected app and panel streams. */\n  counts(): { apps: number; panels: number };\n  /** The connected apps, in connection order. */\n  appList(): RelayApp[];\n}\n\n/** Same marker and protocol the library and the panel use (`src/devtools.ts`); kept literal so the relay stays dependency-free. */\nconst MARKER = '__rerenderLens';\nconst PROTOCOL = 2;\n\nconst MIME: Record<string, string> = { '.html': 'text/html; charset=utf-8', '.js': 'text/javascript; charset=utf-8', '.css': 'text/css; charset=utf-8' };\n\nexport function findPanelDir(): string | null {\n  const here = dirname(fileURLToPath(import.meta.url));\n  for (const dir of [join(here, '..', 'panel'), join(here, '..', 'extension'), join(here, '..', '..', 'extension')]) {\n    if (existsSync(join(dir, 'panel.html')) && existsSync(join(dir, 'panel.js'))) return dir;\n  }\n  return null;\n}\n\nconst cors = (res: ServerResponse): void => {\n  res.setHeader('Access-Control-Allow-Origin', '*');\n  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');\n  res.setHeader('Access-Control-Allow-Headers', 'Content-Type');\n};\n\nfunction readBody(req: IncomingMessage, limit = 8 * 1024 * 1024): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let size = 0;\n    req.on('data', (c: Buffer) => {\n      size += c.length;\n      if (size > limit) {\n        reject(new Error('body too large'));\n        req.destroy();\n        return;\n      }\n      chunks.push(c);\n    });\n    req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));\n    req.on('error', reject);\n  });\n}\n\nexport function createRelayServer(options: RelayOptions = {}): Promise<RelayServer> {\n  const host = options.host ?? '127.0.0.1';\n  const panelDir = options.panelDir === undefined ? findPanelDir() : options.panelDir;\n  const keepAliveMs = options.keepAliveMs ?? 15_000;\n  const token = options.token || null;\n  const apps = new Map<ServerResponse, RelayApp>();\n  const panels = new Set<ServerResponse>();\n  let url = '';\n  let nextAppId = 1;\n  const connectUrl = (): string => (token ? `${url}?token=${encodeURIComponent(token)}` : url);\n\n  const line = (message: unknown): string => `data: ${JSON.stringify(message)}\\n\\n`;\n  const sendTo = (res: ServerResponse, message: unknown): void => {\n    try {\n      res.write(line(message));\n    } catch {\n      apps.delete(res);\n      panels.delete(res);\n    }\n  };\n  const send = (targets: Iterable<ServerResponse>, message: unknown): void => {\n    const text = line(message);\n    for (const res of [...targets]) {\n      try {\n        res.write(text);\n      } catch {\n        apps.delete(res);\n        panels.delete(res);\n      }\n    }\n  };\n\n  const appList = (): RelayApp[] => [...apps.values()];\n  const roster = (): unknown => ({ [MARKER]: true, version: PROTOCOL, type: 'relay', payload: { apps: apps.size, list: appList() } });\n  const streamOf = (id: string): ServerResponse | null => {\n    for (const [res, app] of apps) if (app.id === id) return res;\n    return null;\n  };\n\n  const route = (message: unknown, from?: RelayApp): void => {\n    if (!message || typeof message !== 'object') return;\n    const m = message as Record<string, unknown>;\n    if (m.__rerenderLensCmd === true) {\n      // A command names its app when the panel is watching one of several; otherwise every app answers.\n      const target = typeof m.app === 'string' ? streamOf(m.app) : null;\n      if (target) sendTo(target, m);\n      else send(apps.keys(), m);\n    } else if (m.__rerenderLens === true || m.__rerenderLensReply === true) {\n      send(panels, from ? { ...m, app: from.id } : m);\n    }\n  };\n\n  /** With a token set, everything that carries data needs it; the static panel files do not. */\n  const authorized = (req: IncomingMessage, u: URL): boolean => {\n    if (!token) return true;\n    const given = u.searchParams.get('token') || (typeof req.headers['x-rerender-lens-token'] === 'string' ? req.headers['x-rerender-lens-token'] : '');\n    return given === token;\n  };\n\n  const server = createServer(async (req, res) => {\n    cors(res);\n    const u = new URL(req.url || '/', 'http://relay');\n    if (req.method === 'OPTIONS') {\n      res.statusCode = 204;\n      res.end();\n      return;\n    }\n    if (u.pathname === '/' && req.method === 'GET') {\n      res.statusCode = 302;\n      res.setHeader('Location', `/panel.html?relay=${encodeURIComponent(connectUrl())}`);\n      res.end();\n      return;\n    }\n    if (/^\\/(events|message|status)$/.test(u.pathname) && !authorized(req, u)) {\n      res.statusCode = 401;\n      res.setHeader('Content-Type', 'text/plain');\n      res.end('rerender-lens relay: this relay needs the token from the URL it printed (?token=...)');\n      return;\n    }\n    if (u.pathname === '/events' && req.method === 'GET') {\n      const isApp = u.searchParams.get('role') === 'app';\n      res.statusCode = 200;\n      res.setHeader('Content-Type', 'text/event-stream');\n      res.setHeader('Cache-Control', 'no-store');\n      res.setHeader('Connection', 'keep-alive');\n      res.write(': connected\\n\\n');\n      const app: RelayApp | null = isApp ? { id: `a${nextAppId++}`, label: (u.searchParams.get('label') || req.headers.origin || '').slice(0, 120) || `app ${nextAppId - 1}` } : null;\n      if (app) apps.set(res, app);\n      else panels.add(res);\n      const ping = setInterval(() => {\n        try {\n          res.write(': ping\\n\\n');\n        } catch {\n          /* closed */\n        }\n      }, keepAliveMs);\n      req.on('close', () => {\n        clearInterval(ping);\n        apps.delete(res);\n        panels.delete(res);\n      });\n      // Panels learn the roster as soon as their stream is open (that first message is also how a\n      // panel knows it is safe to send commands: replies only reach panels that are already connected),\n      // and again whenever an app comes or goes, so they show \"disconnected\" instead of waiting.\n      if (app) {\n        sendTo(res, { __rerenderLensRelay: true, version: PROTOCOL, app: app.id }); // the app stamps this on what it sends\n        send(panels, roster());\n        req.on('close', () => send(panels, roster()));\n      } else {\n        sendTo(res, roster());\n      }\n      return;\n    }\n    if (u.pathname === '/favicon.ico') {\n      res.statusCode = 204;\n      res.end();\n      return;\n    }\n    if (u.pathname === '/message' && req.method === 'POST') {\n      try {\n        const parsed = JSON.parse((await readBody(req)) || 'null') as unknown;\n        const sender = u.searchParams.get('app');\n        const from = sender ? (appList().find((a) => a.id === sender) ?? undefined) : undefined;\n        for (const m of Array.isArray(parsed) ? parsed : [parsed]) route(m, from);\n        res.statusCode = 204;\n        res.end();\n      } catch (e) {\n        res.statusCode = 400;\n        res.setHeader('Content-Type', 'text/plain');\n        res.end(String((e as Error).message || e));\n      }\n      return;\n    }\n    if (u.pathname === '/status' && req.method === 'GET') {\n      res.statusCode = 200;\n      res.setHeader('Content-Type', 'application/json');\n      res.end(JSON.stringify({ ok: true, apps: apps.size, panels: panels.size, list: appList() }));\n      return;\n    }\n    const file = u.pathname.replace(/^\\//, '');\n    if (/^panel\\.(html|js|css)$/.test(file) && req.method === 'GET') {\n      if (!panelDir) {\n        res.statusCode = 500;\n        res.setHeader('Content-Type', 'text/plain');\n        res.end('rerender-lens: panel files not found (is the package built?)');\n        return;\n      }\n      res.statusCode = 200;\n      res.setHeader('Content-Type', MIME[file.slice(file.lastIndexOf('.'))] || 'application/octet-stream');\n      res.setHeader('Cache-Control', 'no-store');\n      res.end(readFileSync(join(panelDir, file)));\n      return;\n    }\n    res.statusCode = 404;\n    res.setHeader('Content-Type', 'text/plain');\n    res.end('not found');\n  });\n\n  return new Promise((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(options.port ?? 4141, host, () => {\n      const addr = server.address();\n      const port = typeof addr === 'object' && addr ? addr.port : options.port ?? 4141;\n      url = `http://${host === '0.0.0.0' || host === '::' ? 'localhost' : host}:${port}`;\n      resolve({\n        server,\n        url,\n        connectUrl: connectUrl(),\n        port,\n        counts: () => ({ apps: apps.size, panels: panels.size }),\n        appList,\n        close: () =>\n          new Promise<void>((done) => {\n            for (const res of [...apps.keys(), ...panels]) res.end();\n            apps.clear();\n            panels.clear();\n            server.close(() => done());\n          }),\n      });\n    });\n  });\n}\n"]}

package/dist/relay.d.cts

@@ -7,12 +7,20 @@ import { Server } from 'node:http';
  *
  *   GET  /                      redirect to /panel.html?relay=<this server>
  *   GET  /panel.(html|js|css)   the panel page
- *   GET  /events?role=app       SSE: commands from panels
+ *   GET  /events?role=app       SSE: commands from panels (first message: this app's id)
  *   GET  /events?role=panel     SSE: hello / report / clear from apps, replies to commands
  *   POST /message               one message or an array; `{ __rerenderLens }` and replies go to
  *                               panels, `{ __rerenderLensCmd }` goes to apps
  *
- * Dependency-free (node:http). CORS is open: the relay is a local dev tool, bind it to 127.0.0.1.
+ * Several apps can share one relay. Each app connection gets an id; the relay tells the app its id,
+ * stamps `app` on everything that app sends, and sends panels the roster whenever it changes. A
+ * command carrying `app` goes to that one app, a command without it goes to all of them, so a panel
+ * or a library that knows nothing about ids behaves exactly as before.
+ *
+ * Dependency-free (node:http). Bound to 127.0.0.1 by default, where CORS is open and no token is
+ * needed. On any other host `rerender-lens panel` generates a token: `/events`, `/message` and
+ * `/status` then require it (`?token=` or the `x-rerender-lens-token` header) and the URL it prints
+ * carries it, because reports contain the app's prop, state and context values.
  */
 
 interface RelayOptions {
@@ -22,11 +30,23 @@ interface RelayOptions {
     panelDir?: string | null;
     /** Milliseconds between SSE keep-alive comments. Default 15000. */
     keepAliveMs?: number;
+    /**
+     * Require this token on `/events`, `/message` and `/status`. `rerender-lens panel` generates one
+     * whenever it binds to anything but loopback; the URL it prints carries it as `?token=`.
+     */
+    token?: string;
+}
+/** One connected app page. `label` is what the panel's app chooser shows. */
+interface RelayApp {
+    id: string;
+    label: string;
 }
 interface RelayServer {
     server: Server;
     /** `http://127.0.0.1:4141` once listening. */
     url: string;
+    /** The URL to hand to a panel or an app: `url`, plus `?token=` when one is required. */
+    connectUrl: string;
     port: number;
     close(): Promise<void>;
     /** Connected app and panel streams. */
@@ -34,8 +54,10 @@ interface RelayServer {
         apps: number;
         panels: number;
     };
+    /** The connected apps, in connection order. */
+    appList(): RelayApp[];
 }
 declare function findPanelDir(): string | null;
 declare function createRelayServer(options?: RelayOptions): Promise<RelayServer>;
 
-export { type RelayOptions, type RelayServer, createRelayServer, findPanelDir };
+export { type RelayApp, type RelayOptions, type RelayServer, createRelayServer, findPanelDir };

package/dist/relay.d.ts

@@ -7,12 +7,20 @@ import { Server } from 'node:http';
  *
  *   GET  /                      redirect to /panel.html?relay=<this server>
  *   GET  /panel.(html|js|css)   the panel page
- *   GET  /events?role=app       SSE: commands from panels
+ *   GET  /events?role=app       SSE: commands from panels (first message: this app's id)
  *   GET  /events?role=panel     SSE: hello / report / clear from apps, replies to commands
  *   POST /message               one message or an array; `{ __rerenderLens }` and replies go to
  *                               panels, `{ __rerenderLensCmd }` goes to apps
  *
- * Dependency-free (node:http). CORS is open: the relay is a local dev tool, bind it to 127.0.0.1.
+ * Several apps can share one relay. Each app connection gets an id; the relay tells the app its id,
+ * stamps `app` on everything that app sends, and sends panels the roster whenever it changes. A
+ * command carrying `app` goes to that one app, a command without it goes to all of them, so a panel
+ * or a library that knows nothing about ids behaves exactly as before.
+ *
+ * Dependency-free (node:http). Bound to 127.0.0.1 by default, where CORS is open and no token is
+ * needed. On any other host `rerender-lens panel` generates a token: `/events`, `/message` and
+ * `/status` then require it (`?token=` or the `x-rerender-lens-token` header) and the URL it prints
+ * carries it, because reports contain the app's prop, state and context values.
  */
 
 interface RelayOptions {
@@ -22,11 +30,23 @@ interface RelayOptions {
     panelDir?: string | null;
     /** Milliseconds between SSE keep-alive comments. Default 15000. */
     keepAliveMs?: number;
+    /**
+     * Require this token on `/events`, `/message` and `/status`. `rerender-lens panel` generates one
+     * whenever it binds to anything but loopback; the URL it prints carries it as `?token=`.
+     */
+    token?: string;
+}
+/** One connected app page. `label` is what the panel's app chooser shows. */
+interface RelayApp {
+    id: string;
+    label: string;
 }
 interface RelayServer {
     server: Server;
     /** `http://127.0.0.1:4141` once listening. */
     url: string;
+    /** The URL to hand to a panel or an app: `url`, plus `?token=` when one is required. */
+    connectUrl: string;
     port: number;
     close(): Promise<void>;
     /** Connected app and panel streams. */
@@ -34,8 +54,10 @@ interface RelayServer {
         apps: number;
         panels: number;
     };
+    /** The connected apps, in connection order. */
+    appList(): RelayApp[];
 }
 declare function findPanelDir(): string | null;
 declare function createRelayServer(options?: RelayOptions): Promise<RelayServer>;
 
-export { type RelayOptions, type RelayServer, createRelayServer, findPanelDir };
+export { type RelayApp, type RelayOptions, type RelayServer, createRelayServer, findPanelDir };

package/dist/relay.js

@@ -4,6 +4,8 @@ import { dirname, join } from 'path';
 import { fileURLToPath } from 'url';
 
 // src/relay.ts
+var MARKER = "__rerenderLens";
+var PROTOCOL = 2;
 var MIME = { ".html": "text/html; charset=utf-8", ".js": "text/javascript; charset=utf-8", ".css": "text/css; charset=utf-8" };
 function findPanelDir() {
   const here = dirname(fileURLToPath(import.meta.url));
@@ -38,26 +40,55 @@ function createRelayServer(options = {}) {
   const host = options.host ?? "127.0.0.1";
   const panelDir = options.panelDir === void 0 ? findPanelDir() : options.panelDir;
   const keepAliveMs = options.keepAliveMs ?? 15e3;
-  const apps = /* @__PURE__ */ new Set();
+  const token = options.token || null;
+  const apps = /* @__PURE__ */ new Map();
   const panels = /* @__PURE__ */ new Set();
   let url = "";
-  const send = (targets, message) => {
-    const line = `data: ${JSON.stringify(message)}
+  let nextAppId = 1;
+  const connectUrl = () => token ? `${url}?token=${encodeURIComponent(token)}` : url;
+  const line = (message) => `data: ${JSON.stringify(message)}
 
 `;
-    for (const res of targets) {
+  const sendTo = (res, message) => {
+    try {
+      res.write(line(message));
+    } catch {
+      apps.delete(res);
+      panels.delete(res);
+    }
+  };
+  const send = (targets, message) => {
+    const text = line(message);
+    for (const res of [...targets]) {
       try {
-        res.write(line);
+        res.write(text);
       } catch {
-        targets.delete(res);
+        apps.delete(res);
+        panels.delete(res);
       }
     }
   };
-  const route = (message) => {
+  const appList = () => [...apps.values()];
+  const roster = () => ({ [MARKER]: true, version: PROTOCOL, type: "relay", payload: { apps: apps.size, list: appList() } });
+  const streamOf = (id) => {
+    for (const [res, app] of apps) if (app.id === id) return res;
+    return null;
+  };
+  const route = (message, from) => {
     if (!message || typeof message !== "object") return;
     const m = message;
-    if (m.__rerenderLensCmd === true) send(apps, m);
-    else if (m.__rerenderLens === true || m.__rerenderLensReply === true) send(panels, m);
+    if (m.__rerenderLensCmd === true) {
+      const target = typeof m.app === "string" ? streamOf(m.app) : null;
+      if (target) sendTo(target, m);
+      else send(apps.keys(), m);
+    } else if (m.__rerenderLens === true || m.__rerenderLensReply === true) {
+      send(panels, from ? { ...m, app: from.id } : m);
+    }
+  };
+  const authorized = (req, u) => {
+    if (!token) return true;
+    const given = u.searchParams.get("token") || (typeof req.headers["x-rerender-lens-token"] === "string" ? req.headers["x-rerender-lens-token"] : "");
+    return given === token;
   };
   const server = createServer(async (req, res) => {
     cors(res);
@@ -69,18 +100,26 @@ function createRelayServer(options = {}) {
     }
     if (u.pathname === "/" && req.method === "GET") {
       res.statusCode = 302;
-      res.setHeader("Location", `/panel.html?relay=${encodeURIComponent(url)}`);
+      res.setHeader("Location", `/panel.html?relay=${encodeURIComponent(connectUrl())}`);
       res.end();
       return;
     }
+    if (/^\/(events|message|status)$/.test(u.pathname) && !authorized(req, u)) {
+      res.statusCode = 401;
+      res.setHeader("Content-Type", "text/plain");
+      res.end("rerender-lens relay: this relay needs the token from the URL it printed (?token=...)");
+      return;
+    }
     if (u.pathname === "/events" && req.method === "GET") {
-      const role = u.searchParams.get("role") === "app" ? apps : panels;
+      const isApp = u.searchParams.get("role") === "app";
       res.statusCode = 200;
       res.setHeader("Content-Type", "text/event-stream");
       res.setHeader("Cache-Control", "no-store");
       res.setHeader("Connection", "keep-alive");
       res.write(": connected\n\n");
-      role.add(res);
+      const app = isApp ? { id: `a${nextAppId++}`, label: (u.searchParams.get("label") || req.headers.origin || "").slice(0, 120) || `app ${nextAppId - 1}` } : null;
+      if (app) apps.set(res, app);
+      else panels.add(res);
       const ping = setInterval(() => {
         try {
           res.write(": ping\n\n");
@@ -89,14 +128,15 @@ function createRelayServer(options = {}) {
       }, keepAliveMs);
       req.on("close", () => {
         clearInterval(ping);
-        role.delete(res);
+        apps.delete(res);
+        panels.delete(res);
       });
-      const count = () => ({ __rerenderLens: true, version: 2, type: "relay", payload: { apps: apps.size } });
-      if (role === apps) {
-        send(panels, count());
-        req.on("close", () => send(panels, count()));
+      if (app) {
+        sendTo(res, { __rerenderLensRelay: true, version: PROTOCOL, app: app.id });
+        send(panels, roster());
+        req.on("close", () => send(panels, roster()));
       } else {
-        send(/* @__PURE__ */ new Set([res]), count());
+        sendTo(res, roster());
       }
       return;
     }
@@ -108,7 +148,9 @@ function createRelayServer(options = {}) {
     if (u.pathname === "/message" && req.method === "POST") {
       try {
         const parsed = JSON.parse(await readBody(req) || "null");
-        for (const m of Array.isArray(parsed) ? parsed : [parsed]) route(m);
+        const sender = u.searchParams.get("app");
+        const from = sender ? appList().find((a) => a.id === sender) ?? void 0 : void 0;
+        for (const m of Array.isArray(parsed) ? parsed : [parsed]) route(m, from);
         res.statusCode = 204;
         res.end();
       } catch (e) {
@@ -121,7 +163,7 @@ function createRelayServer(options = {}) {
     if (u.pathname === "/status" && req.method === "GET") {
       res.statusCode = 200;
       res.setHeader("Content-Type", "application/json");
-      res.end(JSON.stringify({ ok: true, apps: apps.size, panels: panels.size }));
+      res.end(JSON.stringify({ ok: true, apps: apps.size, panels: panels.size, list: appList() }));
       return;
     }
     const file = u.pathname.replace(/^\//, "");
@@ -151,10 +193,12 @@ function createRelayServer(options = {}) {
       resolve({
         server,
         url,
+        connectUrl: connectUrl(),
         port,
         counts: () => ({ apps: apps.size, panels: panels.size }),
+        appList,
         close: () => new Promise((done) => {
-          for (const res of [...apps, ...panels]) res.end();
+          for (const res of [...apps.keys(), ...panels]) res.end();
           apps.clear();
           panels.clear();
           server.close(() => done());