skybridge 0.0.0-dev.f1722d8 → 0.0.0-dev.f1a8f84

package/dist/cli/run-command.js

@@ -0,0 +1,43 @@
+import { spawn } from "node:child_process";
+export function runCommand(command, options = {
+    stdio: ["ignore", "inherit", "inherit"],
+}) {
+    return new Promise((resolve, reject) => {
+        const stdoutChunks = [];
+        const stderrChunks = [];
+        const proc = spawn(command, {
+            ...options,
+            shell: true,
+        });
+        if (proc.stdout) {
+            proc.stdout.on("data", (chunk) => {
+                stdoutChunks.push(chunk);
+            });
+        }
+        if (proc.stderr) {
+            proc.stderr.on("data", (chunk) => {
+                stderrChunks.push(chunk);
+            });
+        }
+        proc.on("close", (code) => {
+            if (code === 0) {
+                resolve();
+            }
+            else {
+                const stdoutOutput = Buffer.concat(stdoutChunks).toString();
+                const stderrOutput = Buffer.concat(stderrChunks).toString();
+                const allOutput = [stdoutOutput, stderrOutput]
+                    .filter((output) => output.trim())
+                    .join("\n");
+                const errorMessage = allOutput
+                    ? `Command failed with exit code ${code}\n${allOutput}`
+                    : `Command failed with exit code ${code}`;
+                reject(new Error(errorMessage));
+            }
+        });
+        proc.on("error", (error) => {
+            reject(error);
+        });
+    });
+}
+//# sourceMappingURL=run-command.js.map

package/dist/cli/run-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-command.js","sourceRoot":"","sources":["../../src/cli/run-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,UAAwB;IACtB,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC;CACxC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE;YAC1B,GAAG,OAAO;YACV,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC/B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC/B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC5D,MAAM,SAAS,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;qBAC3C,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;qBACjC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,MAAM,YAAY,GAAG,SAAS;oBAC5B,CAAC,CAAC,iCAAiC,IAAI,KAAK,SAAS,EAAE;oBACvD,CAAC,CAAC,iCAAiC,IAAI,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { type SpawnOptions, spawn } from \"node:child_process\";\n\nexport function runCommand(\n  command: string,\n  options: SpawnOptions = {\n    stdio: [\"ignore\", \"inherit\", \"inherit\"],\n  },\n): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const stdoutChunks: Buffer[] = [];\n    const stderrChunks: Buffer[] = [];\n\n    const proc = spawn(command, {\n      ...options,\n      shell: true,\n    });\n\n    if (proc.stdout) {\n      proc.stdout.on(\"data\", (chunk) => {\n        stdoutChunks.push(chunk);\n      });\n    }\n\n    if (proc.stderr) {\n      proc.stderr.on(\"data\", (chunk) => {\n        stderrChunks.push(chunk);\n      });\n    }\n\n    proc.on(\"close\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        const stdoutOutput = Buffer.concat(stdoutChunks).toString();\n        const stderrOutput = Buffer.concat(stderrChunks).toString();\n        const allOutput = [stdoutOutput, stderrOutput]\n          .filter((output) => output.trim())\n          .join(\"\\n\");\n        const errorMessage = allOutput\n          ? `Command failed with exit code ${code}\\n${allOutput}`\n          : `Command failed with exit code ${code}`;\n        reject(new Error(errorMessage));\n      }\n    });\n\n    proc.on(\"error\", (error) => {\n      reject(error);\n    });\n  });\n}\n"]}

package/dist/cli/telemetry.d.ts

@@ -0,0 +1,7 @@
+import type { Hook } from "@oclif/core";
+export declare function isEnabled(): boolean;
+export declare function isDebugMode(): boolean;
+export declare function setEnabled(enabled: boolean): void;
+export declare function getMachineId(): string;
+declare const hook: Hook<"finally">;
+export default hook;

package/dist/cli/telemetry.js

@@ -0,0 +1,123 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import ci from "ci-info";
+import { PostHog } from "posthog-node";
+const POSTHOG_API_KEY = "phc_rQdkCYr0DO4NcZBQXZnUwsHAbau9zuNwKIpil9FQP6v";
+const POSTHOG_HOST = "https://us.i.posthog.com";
+const ENV_TELEMETRY_DISABLED = "SKYBRIDGE_TELEMETRY_DISABLED";
+const ENV_TELEMETRY_DEBUG = "SKYBRIDGE_TELEMETRY_DEBUG";
+const ENV_DO_NOT_TRACK = "DO_NOT_TRACK";
+const GLOBAL_CONFIG_DIR = join(homedir(), ".skybridge");
+const GLOBAL_CONFIG_FILE = join(GLOBAL_CONFIG_DIR, "config.json");
+let posthogClient = null;
+function getPostHogClient() {
+    if (!posthogClient) {
+        posthogClient = new PostHog(POSTHOG_API_KEY, {
+            host: POSTHOG_HOST,
+            flushAt: 1,
+            flushInterval: 0,
+        });
+    }
+    return posthogClient;
+}
+function readJsonFile(filePath) {
+    try {
+        if (existsSync(filePath)) {
+            const content = readFileSync(filePath, "utf-8");
+            return JSON.parse(content);
+        }
+    }
+    catch {
+        // Ignore errors reading config
+    }
+    return null;
+}
+function writeJsonFile(filePath, data) {
+    try {
+        const dir = join(filePath, "..");
+        if (!existsSync(dir)) {
+            mkdirSync(dir, { recursive: true });
+        }
+        writeFileSync(filePath, JSON.stringify(data, null, 2), "utf-8");
+    }
+    catch {
+        // Ignore errors writing config
+    }
+}
+function getGlobalConfig() {
+    const existing = readJsonFile(GLOBAL_CONFIG_FILE);
+    if (existing?.machineId && existing?.telemetry !== undefined) {
+        return existing;
+    }
+    const config = {
+        machineId: existing?.machineId || crypto.randomUUID(),
+        telemetry: {
+            enabled: existing?.telemetry?.enabled ?? true,
+        },
+    };
+    writeJsonFile(GLOBAL_CONFIG_FILE, config);
+    return config;
+}
+export function isEnabled() {
+    if (process.env[ENV_TELEMETRY_DISABLED] === "1" ||
+        process.env[ENV_TELEMETRY_DISABLED]?.toLowerCase() === "true") {
+        return false;
+    }
+    if (process.env[ENV_DO_NOT_TRACK] === "1" ||
+        process.env[ENV_DO_NOT_TRACK]?.toLowerCase() === "true") {
+        return false;
+    }
+    if (ci.isCI) {
+        return true;
+    }
+    const config = getGlobalConfig();
+    return config.telemetry.enabled;
+}
+export function isDebugMode() {
+    return (process.env[ENV_TELEMETRY_DEBUG] === "1" ||
+        process.env[ENV_TELEMETRY_DEBUG]?.toLowerCase() === "true");
+}
+export function setEnabled(enabled) {
+    const config = getGlobalConfig();
+    config.telemetry.enabled = enabled;
+    writeJsonFile(GLOBAL_CONFIG_FILE, config);
+}
+export function getMachineId() {
+    if (ci.isCI) {
+        return ci.name ?? "unknown-ci";
+    }
+    return getGlobalConfig().machineId;
+}
+const hook = async ({ id: command, config: { version }, error, }) => {
+    if (!isEnabled()) {
+        return;
+    }
+    const event = {
+        version,
+        machineId: getMachineId(),
+        sessionId: crypto.randomUUID(),
+        isCI: ci.isCI,
+        nodeVersion: process.version,
+        platform: process.platform,
+        outcome: error ? "failure" : "success",
+        error: error?.message,
+    };
+    if (isDebugMode()) {
+        console.error("[Telemetry Debug] Would send event:", JSON.stringify(event, null, 2));
+        return;
+    }
+    try {
+        const client = getPostHogClient();
+        client.capture({
+            distinctId: event.machineId,
+            event: command,
+            properties: event,
+        });
+    }
+    catch {
+        // Silently ignore telemetry errors - never block CLI operation
+    }
+};
+export default hook;
+//# sourceMappingURL=telemetry.js.map

package/dist/cli/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/cli/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,eAAe,GAAG,iDAAiD,CAAC;AAC1E,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAEhD,MAAM,sBAAsB,GAAG,8BAA8B,CAAC;AAC9D,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AACxD,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAExC,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AACxD,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;AAoBlE,IAAI,aAAa,GAAmB,IAAI,CAAC;AAEzC,SAAS,gBAAgB;IACvB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,aAAa,GAAG,IAAI,OAAO,CAAC,eAAe,EAAE;YAC3C,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC;YACV,aAAa,EAAE,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,YAAY,CAAI,QAAgB;IACvC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAM,CAAC;QAClC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,IAAa;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;AACH,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,QAAQ,GAAG,YAAY,CAAe,kBAAkB,CAAC,CAAC;IAChE,IAAI,QAAQ,EAAE,SAAS,IAAI,QAAQ,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAiB;QAC3B,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE;QACrD,SAAS,EAAE;YACT,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,IAAI,IAAI;SAC9C;KACF,CAAC;IAEF,aAAa,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,IACE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,KAAK,GAAG;QAC3C,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,WAAW,EAAE,KAAK,MAAM,EAC7D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IACE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG;QACrC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,KAAK,MAAM,EACvD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,OAAO,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,GAAG;QACxC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,KAAK,MAAM,CAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAgB;IACzC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,CAAC,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;IACnC,aAAa,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC,IAAI,IAAI,YAAY,CAAC;IACjC,CAAC;IAED,OAAO,eAAe,EAAE,CAAC,SAAS,CAAC;AACrC,CAAC;AAED,MAAM,IAAI,GAAoB,KAAK,EAAE,EACnC,EAAE,EAAE,OAAO,EACX,MAAM,EAAE,EAAE,OAAO,EAAE,EACnB,KAAK,GACN,EAAE,EAAE;IACH,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAmB;QAC5B,OAAO;QACP,SAAS,EAAE,YAAY,EAAE;QACzB,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;QAC9B,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,WAAW,EAAE,OAAO,CAAC,OAAO;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACtC,KAAK,EAAE,KAAK,EAAE,OAAO;KACtB,CAAC;IAEF,IAAI,WAAW,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CACX,qCAAqC,EACrC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAC/B,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC;YACb,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;AACH,CAAC,CAAC;AAEF,eAAe,IAAI,CAAC","sourcesContent":["import { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { Hook } from \"@oclif/core\";\nimport ci from \"ci-info\";\nimport { PostHog } from \"posthog-node\";\n\nconst POSTHOG_API_KEY = \"phc_rQdkCYr0DO4NcZBQXZnUwsHAbau9zuNwKIpil9FQP6v\";\nconst POSTHOG_HOST = \"https://us.i.posthog.com\";\n\nconst ENV_TELEMETRY_DISABLED = \"SKYBRIDGE_TELEMETRY_DISABLED\";\nconst ENV_TELEMETRY_DEBUG = \"SKYBRIDGE_TELEMETRY_DEBUG\";\nconst ENV_DO_NOT_TRACK = \"DO_NOT_TRACK\";\n\nconst GLOBAL_CONFIG_DIR = join(homedir(), \".skybridge\");\nconst GLOBAL_CONFIG_FILE = join(GLOBAL_CONFIG_DIR, \"config.json\");\n\ninterface GlobalConfig {\n  machineId: string;\n  telemetry: {\n    enabled: boolean;\n  };\n}\n\ninterface TelemetryEvent {\n  version: string;\n  machineId: string;\n  sessionId: string;\n  isCI: boolean;\n  nodeVersion: string;\n  platform: NodeJS.Platform;\n  outcome: \"success\" | \"failure\";\n  error?: string;\n}\n\nlet posthogClient: PostHog | null = null;\n\nfunction getPostHogClient(): PostHog {\n  if (!posthogClient) {\n    posthogClient = new PostHog(POSTHOG_API_KEY, {\n      host: POSTHOG_HOST,\n      flushAt: 1,\n      flushInterval: 0,\n    });\n  }\n\n  return posthogClient;\n}\n\nfunction readJsonFile<T>(filePath: string): T | null {\n  try {\n    if (existsSync(filePath)) {\n      const content = readFileSync(filePath, \"utf-8\");\n      return JSON.parse(content) as T;\n    }\n  } catch {\n    // Ignore errors reading config\n  }\n  return null;\n}\n\nfunction writeJsonFile(filePath: string, data: unknown): void {\n  try {\n    const dir = join(filePath, \"..\");\n    if (!existsSync(dir)) {\n      mkdirSync(dir, { recursive: true });\n    }\n    writeFileSync(filePath, JSON.stringify(data, null, 2), \"utf-8\");\n  } catch {\n    // Ignore errors writing config\n  }\n}\n\nfunction getGlobalConfig(): GlobalConfig {\n  const existing = readJsonFile<GlobalConfig>(GLOBAL_CONFIG_FILE);\n  if (existing?.machineId && existing?.telemetry !== undefined) {\n    return existing;\n  }\n\n  const config: GlobalConfig = {\n    machineId: existing?.machineId || crypto.randomUUID(),\n    telemetry: {\n      enabled: existing?.telemetry?.enabled ?? true,\n    },\n  };\n\n  writeJsonFile(GLOBAL_CONFIG_FILE, config);\n  return config;\n}\n\nexport function isEnabled(): boolean {\n  if (\n    process.env[ENV_TELEMETRY_DISABLED] === \"1\" ||\n    process.env[ENV_TELEMETRY_DISABLED]?.toLowerCase() === \"true\"\n  ) {\n    return false;\n  }\n\n  if (\n    process.env[ENV_DO_NOT_TRACK] === \"1\" ||\n    process.env[ENV_DO_NOT_TRACK]?.toLowerCase() === \"true\"\n  ) {\n    return false;\n  }\n\n  if (ci.isCI) {\n    return true;\n  }\n\n  const config = getGlobalConfig();\n  return config.telemetry.enabled;\n}\n\nexport function isDebugMode(): boolean {\n  return (\n    process.env[ENV_TELEMETRY_DEBUG] === \"1\" ||\n    process.env[ENV_TELEMETRY_DEBUG]?.toLowerCase() === \"true\"\n  );\n}\n\nexport function setEnabled(enabled: boolean): void {\n  const config = getGlobalConfig();\n  config.telemetry.enabled = enabled;\n  writeJsonFile(GLOBAL_CONFIG_FILE, config);\n}\n\nexport function getMachineId(): string {\n  if (ci.isCI) {\n    return ci.name ?? \"unknown-ci\";\n  }\n\n  return getGlobalConfig().machineId;\n}\n\nconst hook: Hook<\"finally\"> = async ({\n  id: command,\n  config: { version },\n  error,\n}) => {\n  if (!isEnabled()) {\n    return;\n  }\n\n  const event: TelemetryEvent = {\n    version,\n    machineId: getMachineId(),\n    sessionId: crypto.randomUUID(),\n    isCI: ci.isCI,\n    nodeVersion: process.version,\n    platform: process.platform,\n    outcome: error ? \"failure\" : \"success\",\n    error: error?.message,\n  };\n\n  if (isDebugMode()) {\n    console.error(\n      \"[Telemetry Debug] Would send event:\",\n      JSON.stringify(event, null, 2),\n    );\n    return;\n  }\n\n  try {\n    const client = getPostHogClient();\n    client.capture({\n      distinctId: event.machineId,\n      event: command,\n      properties: event,\n    });\n  } catch {\n    // Silently ignore telemetry errors - never block CLI operation\n  }\n};\n\nexport default hook;\n"]}

package/dist/cli/tunnel-control-server.d.ts

@@ -0,0 +1,9 @@
+import { type SpawnFn, TunnelManager } from "./tunnel.js";
+export type TunnelControlServer = {
+    port: number;
+    manager: TunnelManager;
+    close: () => Promise<void>;
+};
+export declare function startTunnelControlServer(getPort: () => number, options?: {
+    spawn?: SpawnFn;
+}): Promise<TunnelControlServer>;

package/dist/cli/tunnel-control-server.js

@@ -0,0 +1,31 @@
+import http from "node:http";
+import { TunnelManager } from "./tunnel.js";
+import { createTunnelHandler } from "./tunnel-handler.js";
+export async function startTunnelControlServer(getPort, options) {
+    const manager = new TunnelManager({ getPort, spawn: options?.spawn });
+    const server = http.createServer(createTunnelHandler(manager));
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", () => {
+            server.off("error", reject);
+            resolve();
+        });
+    });
+    const address = server.address();
+    if (typeof address === "string" || address === null) {
+        server.close();
+        throw new Error("tunnel control server has no address");
+    }
+    return {
+        port: address.port,
+        manager,
+        close: () => new Promise((resolve, reject) => {
+            manager.stop();
+            // Force any in-flight SSE connections to drop so server.close()
+            // doesn't hang indefinitely on subscribers that never end on their own.
+            server.closeAllConnections();
+            server.close((err) => (err ? reject(err) : resolve()));
+        }),
+    };
+}
+//# sourceMappingURL=tunnel-control-server.js.map

package/dist/cli/tunnel-control-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-control-server.js","sourceRoot":"","sources":["../../src/cli/tunnel-control-server.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAgB,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAQ1D,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAqB,EACrB,OAA6B;IAE7B,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO;QACP,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,gEAAgE;YAChE,wEAAwE;YACxE,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC;KACL,CAAC;AACJ,CAAC","sourcesContent":["import http from \"node:http\";\nimport { type SpawnFn, TunnelManager } from \"./tunnel.js\";\nimport { createTunnelHandler } from \"./tunnel-handler.js\";\n\nexport type TunnelControlServer = {\n  port: number;\n  manager: TunnelManager;\n  close: () => Promise<void>;\n};\n\nexport async function startTunnelControlServer(\n  getPort: () => number,\n  options?: { spawn?: SpawnFn },\n): Promise<TunnelControlServer> {\n  const manager = new TunnelManager({ getPort, spawn: options?.spawn });\n  const server = http.createServer(createTunnelHandler(manager));\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(0, \"127.0.0.1\", () => {\n      server.off(\"error\", reject);\n      resolve();\n    });\n  });\n  const address = server.address();\n  if (typeof address === \"string\" || address === null) {\n    server.close();\n    throw new Error(\"tunnel control server has no address\");\n  }\n  return {\n    port: address.port,\n    manager,\n    close: () =>\n      new Promise<void>((resolve, reject) => {\n        manager.stop();\n        // Force any in-flight SSE connections to drop so server.close()\n        // doesn't hang indefinitely on subscribers that never end on their own.\n        server.closeAllConnections();\n        server.close((err) => (err ? reject(err) : resolve()));\n      }),\n  };\n}\n"]}

package/dist/cli/tunnel-control-server.test.js

@@ -0,0 +1,39 @@
+import { afterEach, describe, expect, it } from "vitest";
+import { startTunnelControlServer } from "./tunnel-control-server.js";
+let openControl;
+afterEach(async () => {
+    await openControl?.close();
+    openControl = undefined;
+});
+describe("startTunnelControlServer", () => {
+    it("listens on a random loopback port and serves /__skybridge/tunnel/events", async () => {
+        const control = await startTunnelControlServer(() => 3000);
+        openControl = control;
+        expect(control.port).toBeGreaterThan(0);
+        const res = await fetch(`http://127.0.0.1:${control.port}/__skybridge/tunnel/events`);
+        expect(res.headers.get("content-type")).toMatch(/text\/event-stream/);
+        const reader = res.body.getReader();
+        const { value } = await reader.read();
+        const chunk = new TextDecoder().decode(value);
+        expect(chunk).toContain("event: state");
+        expect(chunk).toContain('"status":"idle"');
+        await reader.cancel();
+    });
+    it("two concurrent control servers get different ports", async () => {
+        const a = await startTunnelControlServer(() => 3000);
+        const b = await startTunnelControlServer(() => 4000);
+        try {
+            expect(a.port).not.toBe(b.port);
+        }
+        finally {
+            await a.close();
+            await b.close();
+        }
+    });
+    it("close() shuts the listener", async () => {
+        const control = await startTunnelControlServer(() => 3000);
+        await control.close();
+        await expect(fetch(`http://127.0.0.1:${control.port}/__skybridge/tunnel/events`)).rejects.toThrow();
+    });
+});
+//# sourceMappingURL=tunnel-control-server.test.js.map

package/dist/cli/tunnel-control-server.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-control-server.test.js","sourceRoot":"","sources":["../../src/cli/tunnel-control-server.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,IAAI,WAAuD,CAAC;AAC5D,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,WAAW,EAAE,KAAK,EAAE,CAAC;IAC3B,WAAW,GAAG,SAAS,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,WAAW,GAAG,OAAO,CAAC;QAEtB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,oBAAoB,OAAO,CAAC,IAAI,4BAA4B,CAC7D,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAI,GAAG,CAAC,IAAmC,CAAC,SAAS,EAAE,CAAC;QACpE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,CAAC,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,CACV,KAAK,CAAC,oBAAoB,OAAO,CAAC,IAAI,4BAA4B,CAAC,CACpE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { afterEach, describe, expect, it } from \"vitest\";\nimport { startTunnelControlServer } from \"./tunnel-control-server.js\";\n\nlet openControl: { close: () => Promise<void> } | undefined;\nafterEach(async () => {\n  await openControl?.close();\n  openControl = undefined;\n});\n\ndescribe(\"startTunnelControlServer\", () => {\n  it(\"listens on a random loopback port and serves /__skybridge/tunnel/events\", async () => {\n    const control = await startTunnelControlServer(() => 3000);\n    openControl = control;\n\n    expect(control.port).toBeGreaterThan(0);\n\n    const res = await fetch(\n      `http://127.0.0.1:${control.port}/__skybridge/tunnel/events`,\n    );\n    expect(res.headers.get(\"content-type\")).toMatch(/text\\/event-stream/);\n\n    const reader = (res.body as ReadableStream<Uint8Array>).getReader();\n    const { value } = await reader.read();\n    const chunk = new TextDecoder().decode(value);\n    expect(chunk).toContain(\"event: state\");\n    expect(chunk).toContain('\"status\":\"idle\"');\n    await reader.cancel();\n  });\n\n  it(\"two concurrent control servers get different ports\", async () => {\n    const a = await startTunnelControlServer(() => 3000);\n    const b = await startTunnelControlServer(() => 4000);\n    try {\n      expect(a.port).not.toBe(b.port);\n    } finally {\n      await a.close();\n      await b.close();\n    }\n  });\n\n  it(\"close() shuts the listener\", async () => {\n    const control = await startTunnelControlServer(() => 3000);\n    await control.close();\n    await expect(\n      fetch(`http://127.0.0.1:${control.port}/__skybridge/tunnel/events`),\n    ).rejects.toThrow();\n  });\n});\n"]}

package/dist/cli/tunnel-handler.d.ts

@@ -0,0 +1,3 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { TunnelManager } from "./tunnel.js";
+export declare function createTunnelHandler(manager: TunnelManager): (req: IncomingMessage, res: ServerResponse) => void;

package/dist/cli/tunnel-handler.js

@@ -0,0 +1,48 @@
+export function createTunnelHandler(manager) {
+    return (req, res) => {
+        if (req.url === "/__skybridge/tunnel" && req.method === "POST") {
+            manager.start();
+            sendJson(res, 200, manager.getState());
+            return;
+        }
+        if (req.url === "/__skybridge/tunnel" && req.method === "DELETE") {
+            manager.stop();
+            sendJson(res, 200, manager.getState());
+            return;
+        }
+        if (req.url === "/__skybridge/tunnel/events" && req.method === "GET") {
+            writeSseHead(res);
+            writeSse(res, "state", manager.getState());
+            const onState = (s) => {
+                writeSse(res, "state", s);
+            };
+            const onActivity = (a) => {
+                writeSse(res, "activity", a);
+            };
+            manager.on("state", onState);
+            manager.on("activity", onActivity);
+            req.on("close", () => {
+                manager.off("state", onState);
+                manager.off("activity", onActivity);
+            });
+            return;
+        }
+        res.writeHead(404).end();
+    };
+}
+function sendJson(res, status, data) {
+    res.writeHead(status, { "Content-Type": "application/json" });
+    res.end(JSON.stringify(data));
+}
+function writeSseHead(res) {
+    res.writeHead(200, {
+        "Content-Type": "text/event-stream",
+        "Cache-Control": "no-cache, no-transform",
+        Connection: "keep-alive",
+    });
+    res.flushHeaders?.();
+}
+function writeSse(res, event, data) {
+    res.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
+}
+//# sourceMappingURL=tunnel-handler.js.map

package/dist/cli/tunnel-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-handler.js","sourceRoot":"","sources":["../../src/cli/tunnel-handler.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACxD,OAAO,CAAC,GAAoB,EAAE,GAAmB,EAAQ,EAAE;QACzD,IAAI,GAAG,CAAC,GAAG,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/D,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjE,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,KAAK,4BAA4B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACrE,YAAY,CAAC,GAAG,CAAC,CAAC;YAClB,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,CAAC,CAAc,EAAE,EAAE;gBACjC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC,CAAC;YACF,MAAM,UAAU,GAAG,CAAC,CAAiB,EAAE,EAAE;gBACvC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;YAC/B,CAAC,CAAC;YACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACnC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,GAAmB;IACvC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,wBAAwB;QACzC,UAAU,EAAE,YAAY;KACzB,CAAC,CAAC;IACH,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,KAAa,EAAE,IAAa;IACjE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { TunnelActivity, TunnelManager, TunnelState } from \"./tunnel.js\";\n\nexport function createTunnelHandler(manager: TunnelManager) {\n  return (req: IncomingMessage, res: ServerResponse): void => {\n    if (req.url === \"/__skybridge/tunnel\" && req.method === \"POST\") {\n      manager.start();\n      sendJson(res, 200, manager.getState());\n      return;\n    }\n    if (req.url === \"/__skybridge/tunnel\" && req.method === \"DELETE\") {\n      manager.stop();\n      sendJson(res, 200, manager.getState());\n      return;\n    }\n    if (req.url === \"/__skybridge/tunnel/events\" && req.method === \"GET\") {\n      writeSseHead(res);\n      writeSse(res, \"state\", manager.getState());\n      const onState = (s: TunnelState) => {\n        writeSse(res, \"state\", s);\n      };\n      const onActivity = (a: TunnelActivity) => {\n        writeSse(res, \"activity\", a);\n      };\n      manager.on(\"state\", onState);\n      manager.on(\"activity\", onActivity);\n      req.on(\"close\", () => {\n        manager.off(\"state\", onState);\n        manager.off(\"activity\", onActivity);\n      });\n      return;\n    }\n    res.writeHead(404).end();\n  };\n}\n\nfunction sendJson(res: ServerResponse, status: number, data: unknown): void {\n  res.writeHead(status, { \"Content-Type\": \"application/json\" });\n  res.end(JSON.stringify(data));\n}\n\nfunction writeSseHead(res: ServerResponse): void {\n  res.writeHead(200, {\n    \"Content-Type\": \"text/event-stream\",\n    \"Cache-Control\": \"no-cache, no-transform\",\n    Connection: \"keep-alive\",\n  });\n  res.flushHeaders?.();\n}\n\nfunction writeSse(res: ServerResponse, event: string, data: unknown): void {\n  res.write(`event: ${event}\\ndata: ${JSON.stringify(data)}\\n\\n`);\n}\n"]}

package/dist/cli/tunnel-handler.test.js

@@ -0,0 +1,105 @@
+import { EventEmitter } from "node:events";
+import http from "node:http";
+import { Readable } from "node:stream";
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { TunnelManager } from "./tunnel.js";
+import { createTunnelHandler } from "./tunnel-handler.js";
+let openServer;
+afterEach(() => openServer?.close());
+function makeFakeChild() {
+    const child = new EventEmitter();
+    child.stdout = new Readable({ read() { } });
+    child.stderr = new Readable({ read() { } });
+    child.kill = vi.fn(() => true);
+    return child;
+}
+async function listen(handler) {
+    const server = http.createServer(handler);
+    await new Promise((resolve) => server.listen(0, resolve));
+    const port = server.address().port;
+    return { port, server };
+}
+async function listenWithHandler() {
+    const child = makeFakeChild();
+    const manager = new TunnelManager({
+        getPort: () => 3000,
+        spawn: () => child,
+    });
+    const { port, server } = await listen(createTunnelHandler(manager));
+    openServer = server;
+    return { port, child, manager };
+}
+describe("createTunnelHandler", () => {
+    it("POST /__skybridge/tunnel starts the tunnel and returns the current state", async () => {
+        const { port, child } = await listenWithHandler();
+        const res = await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        expect(res.status).toBe(200);
+        expect(await res.json()).toEqual({
+            status: "starting",
+            message: "Starting tunnel…",
+        });
+        expect(child.kill).not.toHaveBeenCalled();
+    });
+    it("POST /__skybridge/tunnel is idempotent — second call does not respawn", async () => {
+        const { port, manager } = await listenWithHandler();
+        const startSpy = vi.spyOn(manager, "start");
+        await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        expect(startSpy).toHaveBeenCalledTimes(2);
+        // Manager.start() is internally idempotent (verified in tunnel.test.ts).
+    });
+    it("DELETE /__skybridge/tunnel stops the tunnel", async () => {
+        const { port, child } = await listenWithHandler();
+        await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        const res = await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "DELETE",
+        });
+        expect(res.status).toBe(200);
+        expect(await res.json()).toEqual({ status: "idle" });
+        expect(child.kill).toHaveBeenCalled();
+    });
+    it("GET /__skybridge/tunnel/events streams the current state on connect", async () => {
+        const { port, child } = await listenWithHandler();
+        await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        child.stdout.emit("data", Buffer.from("Forwarding: https://abc.tunnel.example -> http://localhost:3000\n"));
+        const res = await fetch(`http://localhost:${port}/__skybridge/tunnel/events`);
+        expect(res.headers.get("content-type")).toMatch(/text\/event-stream/);
+        expect(res.body).toBeTruthy();
+        const reader = res.body.getReader();
+        const { value } = await reader.read();
+        const chunk = new TextDecoder().decode(value);
+        expect(chunk).toContain("event: state");
+        expect(chunk).toContain('"status":"connected"');
+        expect(chunk).toContain('"url":"https://abc.tunnel.example"');
+        await reader.cancel();
+    });
+    it("GET /__skybridge/tunnel/events sends the current error state on connect", async () => {
+        const { port, child } = await listenWithHandler();
+        await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        child.stderr.emit("data", Buffer.from("boom: tunnel auth failed\n"));
+        child.emit("close", 1);
+        const res = await fetch(`http://localhost:${port}/__skybridge/tunnel/events`);
+        expect(res.headers.get("content-type")).toMatch(/text\/event-stream/);
+        expect(res.body).toBeTruthy();
+        const reader = res.body.getReader();
+        const { value } = await reader.read();
+        const chunk = new TextDecoder().decode(value);
+        expect(chunk).toContain("event: state");
+        expect(chunk).toContain('"status":"error"');
+        expect(chunk).toContain("boom: tunnel auth failed");
+        await reader.cancel();
+    });
+});
+//# sourceMappingURL=tunnel-handler.test.js.map

package/dist/cli/tunnel-handler.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-handler.test.js","sourceRoot":"","sources":["../../src/cli/tunnel-handler.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,IAAI,UAAmC,CAAC;AACxC,SAAS,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AAQrC,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,IAAI,YAAY,EAAe,CAAC;IAC9C,KAAK,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,CAAC,CAAC;IAC3C,KAAK,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE,CAAgB,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAA6B;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;IACzD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;QACnB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,UAAU,GAAG,MAAM,CAAC;IACpB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAElD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACrE,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YAC/B,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,kBAAkB;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE5C,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,yEAAyE;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAClD,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACrE,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAClD,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,IAAI,CACf,MAAM,EACN,MAAM,CAAC,IAAI,CACT,mEAAmE,CACpE,CACF,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,oBAAoB,IAAI,4BAA4B,CACrD,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAE9B,MAAM,MAAM,GAAI,GAAG,CAAC,IAAmC,CAAC,SAAS,EAAE,CAAC;QACpE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAE9D,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAClD,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAEvB,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,oBAAoB,IAAI,4BAA4B,CACrD,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAE9B,MAAM,MAAM,GAAI,GAAG,CAAC,IAAmC,CAAC,SAAS,EAAE,CAAC;QACpE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAEpD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { EventEmitter } from \"node:events\";\nimport http from \"node:http\";\nimport { Readable } from \"node:stream\";\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { TunnelManager } from \"./tunnel.js\";\nimport { createTunnelHandler } from \"./tunnel-handler.js\";\n\nlet openServer: http.Server | undefined;\nafterEach(() => openServer?.close());\n\ntype FakeChild = EventEmitter & {\n  stdout: Readable;\n  stderr: Readable;\n  kill: ReturnType<typeof vi.fn<() => boolean>>;\n};\n\nfunction makeFakeChild(): FakeChild {\n  const child = new EventEmitter() as FakeChild;\n  child.stdout = new Readable({ read() {} });\n  child.stderr = new Readable({ read() {} });\n  child.kill = vi.fn<() => boolean>(() => true);\n  return child;\n}\n\nasync function listen(handler: http.RequestListener) {\n  const server = http.createServer(handler);\n  await new Promise<void>((resolve) => server.listen(0, resolve));\n  const port = (server.address() as { port: number }).port;\n  return { port, server };\n}\n\nasync function listenWithHandler() {\n  const child = makeFakeChild();\n  const manager = new TunnelManager({\n    getPort: () => 3000,\n    spawn: () => child,\n  });\n  const { port, server } = await listen(createTunnelHandler(manager));\n  openServer = server;\n  return { port, child, manager };\n}\n\ndescribe(\"createTunnelHandler\", () => {\n  it(\"POST /__skybridge/tunnel starts the tunnel and returns the current state\", async () => {\n    const { port, child } = await listenWithHandler();\n\n    const res = await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n    expect(res.status).toBe(200);\n    expect(await res.json()).toEqual({\n      status: \"starting\",\n      message: \"Starting tunnel…\",\n    });\n    expect(child.kill).not.toHaveBeenCalled();\n  });\n\n  it(\"POST /__skybridge/tunnel is idempotent — second call does not respawn\", async () => {\n    const { port, manager } = await listenWithHandler();\n    const startSpy = vi.spyOn(manager, \"start\");\n\n    await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n    await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n\n    expect(startSpy).toHaveBeenCalledTimes(2);\n    // Manager.start() is internally idempotent (verified in tunnel.test.ts).\n  });\n\n  it(\"DELETE /__skybridge/tunnel stops the tunnel\", async () => {\n    const { port, child } = await listenWithHandler();\n    await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n\n    const res = await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"DELETE\",\n    });\n    expect(res.status).toBe(200);\n    expect(await res.json()).toEqual({ status: \"idle\" });\n    expect(child.kill).toHaveBeenCalled();\n  });\n\n  it(\"GET /__skybridge/tunnel/events streams the current state on connect\", async () => {\n    const { port, child } = await listenWithHandler();\n    await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n    child.stdout.emit(\n      \"data\",\n      Buffer.from(\n        \"Forwarding: https://abc.tunnel.example -> http://localhost:3000\\n\",\n      ),\n    );\n\n    const res = await fetch(\n      `http://localhost:${port}/__skybridge/tunnel/events`,\n    );\n    expect(res.headers.get(\"content-type\")).toMatch(/text\\/event-stream/);\n    expect(res.body).toBeTruthy();\n\n    const reader = (res.body as ReadableStream<Uint8Array>).getReader();\n    const { value } = await reader.read();\n    const chunk = new TextDecoder().decode(value);\n\n    expect(chunk).toContain(\"event: state\");\n    expect(chunk).toContain('\"status\":\"connected\"');\n    expect(chunk).toContain('\"url\":\"https://abc.tunnel.example\"');\n\n    await reader.cancel();\n  });\n\n  it(\"GET /__skybridge/tunnel/events sends the current error state on connect\", async () => {\n    const { port, child } = await listenWithHandler();\n    await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n    child.stderr.emit(\"data\", Buffer.from(\"boom: tunnel auth failed\\n\"));\n    child.emit(\"close\", 1);\n\n    const res = await fetch(\n      `http://localhost:${port}/__skybridge/tunnel/events`,\n    );\n    expect(res.headers.get(\"content-type\")).toMatch(/text\\/event-stream/);\n    expect(res.body).toBeTruthy();\n\n    const reader = (res.body as ReadableStream<Uint8Array>).getReader();\n    const { value } = await reader.read();\n    const chunk = new TextDecoder().decode(value);\n\n    expect(chunk).toContain(\"event: state\");\n    expect(chunk).toContain('\"status\":\"error\"');\n    expect(chunk).toContain(\"boom: tunnel auth failed\");\n\n    await reader.cancel();\n  });\n});\n"]}

package/dist/cli/tunnel.d.ts

@@ -0,0 +1,57 @@
+import { EventEmitter } from "node:events";
+import type { Readable } from "node:stream";
+export type TunnelState = {
+    status: "idle";
+} | {
+    status: "starting";
+    message: string;
+} | {
+    status: "connected";
+    url: string;
+} | {
+    status: "error";
+    message: string;
+};
+export type ParsedStdoutEvent = {
+    kind: "connected";
+    url: string;
+} | {
+    kind: "starting";
+    message: string;
+};
+export declare function parseStdoutLine(line: string): ParsedStdoutEvent | null;
+export type TunnelActivity = {
+    time: string;
+    text: string;
+    level: "log" | "error";
+};
+export type TunnelChildProcess = {
+    stdout: Pick<Readable, "on"> | null;
+    stderr: Pick<Readable, "on"> | null;
+    kill: (signal?: NodeJS.Signals | number) => boolean;
+    on(event: "error", listener: (err: Error) => void): unknown;
+    on(event: "close", listener: (code: number | null) => void): unknown;
+};
+export type SpawnFn = (port: number) => TunnelChildProcess;
+export declare class TunnelManager extends EventEmitter {
+    private state;
+    private child;
+    private timeout;
+    private stderrBuffer;
+    private connected;
+    private readonly getPort;
+    private readonly spawnFn;
+    constructor(opts: {
+        getPort: () => number;
+        spawn?: SpawnFn;
+    });
+    getState(): TunnelState;
+    subscribe(listener: (state: TunnelState) => void): () => void;
+    start(): void;
+    stop(): void;
+    private handleStdout;
+    private handleStderr;
+    private setState;
+    private emitActivity;
+    private clearConnectTimeout;
+}