skybridge 0.0.0-dev.f76ccdc → 0.0.0-dev.f792261

package/dist/cli/tunnel-control-server.js

@@ -0,0 +1,31 @@
+import http from "node:http";
+import { TunnelManager } from "./tunnel.js";
+import { createTunnelHandler } from "./tunnel-handler.js";
+export async function startTunnelControlServer(getPort, options) {
+    const manager = new TunnelManager({ getPort, spawn: options?.spawn });
+    const server = http.createServer(createTunnelHandler(manager));
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", () => {
+            server.off("error", reject);
+            resolve();
+        });
+    });
+    const address = server.address();
+    if (typeof address === "string" || address === null) {
+        server.close();
+        throw new Error("tunnel control server has no address");
+    }
+    return {
+        port: address.port,
+        manager,
+        close: () => new Promise((resolve, reject) => {
+            manager.stop();
+            // Force any in-flight SSE connections to drop so server.close()
+            // doesn't hang indefinitely on subscribers that never end on their own.
+            server.closeAllConnections();
+            server.close((err) => (err ? reject(err) : resolve()));
+        }),
+    };
+}
+//# sourceMappingURL=tunnel-control-server.js.map

package/dist/cli/tunnel-control-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-control-server.js","sourceRoot":"","sources":["../../src/cli/tunnel-control-server.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAgB,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAQ1D,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAqB,EACrB,OAA6B;IAE7B,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO;QACP,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,gEAAgE;YAChE,wEAAwE;YACxE,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC;KACL,CAAC;AACJ,CAAC","sourcesContent":["import http from \"node:http\";\nimport { type SpawnFn, TunnelManager } from \"./tunnel.js\";\nimport { createTunnelHandler } from \"./tunnel-handler.js\";\n\nexport type TunnelControlServer = {\n  port: number;\n  manager: TunnelManager;\n  close: () => Promise<void>;\n};\n\nexport async function startTunnelControlServer(\n  getPort: () => number,\n  options?: { spawn?: SpawnFn },\n): Promise<TunnelControlServer> {\n  const manager = new TunnelManager({ getPort, spawn: options?.spawn });\n  const server = http.createServer(createTunnelHandler(manager));\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(0, \"127.0.0.1\", () => {\n      server.off(\"error\", reject);\n      resolve();\n    });\n  });\n  const address = server.address();\n  if (typeof address === \"string\" || address === null) {\n    server.close();\n    throw new Error(\"tunnel control server has no address\");\n  }\n  return {\n    port: address.port,\n    manager,\n    close: () =>\n      new Promise<void>((resolve, reject) => {\n        manager.stop();\n        // Force any in-flight SSE connections to drop so server.close()\n        // doesn't hang indefinitely on subscribers that never end on their own.\n        server.closeAllConnections();\n        server.close((err) => (err ? reject(err) : resolve()));\n      }),\n  };\n}\n"]}

package/dist/cli/tunnel-control-server.test.js

@@ -0,0 +1,39 @@
+import { afterEach, describe, expect, it } from "vitest";
+import { startTunnelControlServer } from "./tunnel-control-server.js";
+let openControl;
+afterEach(async () => {
+    await openControl?.close();
+    openControl = undefined;
+});
+describe("startTunnelControlServer", () => {
+    it("listens on a random loopback port and serves /__skybridge/tunnel/events", async () => {
+        const control = await startTunnelControlServer(() => 3000);
+        openControl = control;
+        expect(control.port).toBeGreaterThan(0);
+        const res = await fetch(`http://127.0.0.1:${control.port}/__skybridge/tunnel/events`);
+        expect(res.headers.get("content-type")).toMatch(/text\/event-stream/);
+        const reader = res.body.getReader();
+        const { value } = await reader.read();
+        const chunk = new TextDecoder().decode(value);
+        expect(chunk).toContain("event: state");
+        expect(chunk).toContain('"status":"idle"');
+        await reader.cancel();
+    });
+    it("two concurrent control servers get different ports", async () => {
+        const a = await startTunnelControlServer(() => 3000);
+        const b = await startTunnelControlServer(() => 4000);
+        try {
+            expect(a.port).not.toBe(b.port);
+        }
+        finally {
+            await a.close();
+            await b.close();
+        }
+    });
+    it("close() shuts the listener", async () => {
+        const control = await startTunnelControlServer(() => 3000);
+        await control.close();
+        await expect(fetch(`http://127.0.0.1:${control.port}/__skybridge/tunnel/events`)).rejects.toThrow();
+    });
+});
+//# sourceMappingURL=tunnel-control-server.test.js.map

package/dist/cli/tunnel-control-server.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-control-server.test.js","sourceRoot":"","sources":["../../src/cli/tunnel-control-server.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,IAAI,WAAuD,CAAC;AAC5D,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,WAAW,EAAE,KAAK,EAAE,CAAC;IAC3B,WAAW,GAAG,SAAS,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,WAAW,GAAG,OAAO,CAAC;QAEtB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,oBAAoB,OAAO,CAAC,IAAI,4BAA4B,CAC7D,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAI,GAAG,CAAC,IAAmC,CAAC,SAAS,EAAE,CAAC;QACpE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,CAAC,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,CACV,KAAK,CAAC,oBAAoB,OAAO,CAAC,IAAI,4BAA4B,CAAC,CACpE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { afterEach, describe, expect, it } from \"vitest\";\nimport { startTunnelControlServer } from \"./tunnel-control-server.js\";\n\nlet openControl: { close: () => Promise<void> } | undefined;\nafterEach(async () => {\n  await openControl?.close();\n  openControl = undefined;\n});\n\ndescribe(\"startTunnelControlServer\", () => {\n  it(\"listens on a random loopback port and serves /__skybridge/tunnel/events\", async () => {\n    const control = await startTunnelControlServer(() => 3000);\n    openControl = control;\n\n    expect(control.port).toBeGreaterThan(0);\n\n    const res = await fetch(\n      `http://127.0.0.1:${control.port}/__skybridge/tunnel/events`,\n    );\n    expect(res.headers.get(\"content-type\")).toMatch(/text\\/event-stream/);\n\n    const reader = (res.body as ReadableStream<Uint8Array>).getReader();\n    const { value } = await reader.read();\n    const chunk = new TextDecoder().decode(value);\n    expect(chunk).toContain(\"event: state\");\n    expect(chunk).toContain('\"status\":\"idle\"');\n    await reader.cancel();\n  });\n\n  it(\"two concurrent control servers get different ports\", async () => {\n    const a = await startTunnelControlServer(() => 3000);\n    const b = await startTunnelControlServer(() => 4000);\n    try {\n      expect(a.port).not.toBe(b.port);\n    } finally {\n      await a.close();\n      await b.close();\n    }\n  });\n\n  it(\"close() shuts the listener\", async () => {\n    const control = await startTunnelControlServer(() => 3000);\n    await control.close();\n    await expect(\n      fetch(`http://127.0.0.1:${control.port}/__skybridge/tunnel/events`),\n    ).rejects.toThrow();\n  });\n});\n"]}

package/dist/cli/tunnel-handler.d.ts

@@ -0,0 +1,3 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { TunnelManager } from "./tunnel.js";
+export declare function createTunnelHandler(manager: TunnelManager): (req: IncomingMessage, res: ServerResponse) => void;

package/dist/cli/tunnel-handler.js

@@ -0,0 +1,48 @@
+export function createTunnelHandler(manager) {
+    return (req, res) => {
+        if (req.url === "/__skybridge/tunnel" && req.method === "POST") {
+            manager.start();
+            sendJson(res, 200, manager.getState());
+            return;
+        }
+        if (req.url === "/__skybridge/tunnel" && req.method === "DELETE") {
+            manager.stop();
+            sendJson(res, 200, manager.getState());
+            return;
+        }
+        if (req.url === "/__skybridge/tunnel/events" && req.method === "GET") {
+            writeSseHead(res);
+            writeSse(res, "state", manager.getState());
+            const onState = (s) => {
+                writeSse(res, "state", s);
+            };
+            const onActivity = (a) => {
+                writeSse(res, "activity", a);
+            };
+            manager.on("state", onState);
+            manager.on("activity", onActivity);
+            req.on("close", () => {
+                manager.off("state", onState);
+                manager.off("activity", onActivity);
+            });
+            return;
+        }
+        res.writeHead(404).end();
+    };
+}
+function sendJson(res, status, data) {
+    res.writeHead(status, { "Content-Type": "application/json" });
+    res.end(JSON.stringify(data));
+}
+function writeSseHead(res) {
+    res.writeHead(200, {
+        "Content-Type": "text/event-stream",
+        "Cache-Control": "no-cache, no-transform",
+        Connection: "keep-alive",
+    });
+    res.flushHeaders?.();
+}
+function writeSse(res, event, data) {
+    res.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
+}
+//# sourceMappingURL=tunnel-handler.js.map

package/dist/cli/tunnel-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-handler.js","sourceRoot":"","sources":["../../src/cli/tunnel-handler.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACxD,OAAO,CAAC,GAAoB,EAAE,GAAmB,EAAQ,EAAE;QACzD,IAAI,GAAG,CAAC,GAAG,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/D,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjE,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,KAAK,4BAA4B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACrE,YAAY,CAAC,GAAG,CAAC,CAAC;YAClB,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,CAAC,CAAc,EAAE,EAAE;gBACjC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC,CAAC;YACF,MAAM,UAAU,GAAG,CAAC,CAAiB,EAAE,EAAE;gBACvC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;YAC/B,CAAC,CAAC;YACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACnC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,GAAmB;IACvC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,wBAAwB;QACzC,UAAU,EAAE,YAAY;KACzB,CAAC,CAAC;IACH,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,KAAa,EAAE,IAAa;IACjE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { TunnelActivity, TunnelManager, TunnelState } from \"./tunnel.js\";\n\nexport function createTunnelHandler(manager: TunnelManager) {\n  return (req: IncomingMessage, res: ServerResponse): void => {\n    if (req.url === \"/__skybridge/tunnel\" && req.method === \"POST\") {\n      manager.start();\n      sendJson(res, 200, manager.getState());\n      return;\n    }\n    if (req.url === \"/__skybridge/tunnel\" && req.method === \"DELETE\") {\n      manager.stop();\n      sendJson(res, 200, manager.getState());\n      return;\n    }\n    if (req.url === \"/__skybridge/tunnel/events\" && req.method === \"GET\") {\n      writeSseHead(res);\n      writeSse(res, \"state\", manager.getState());\n      const onState = (s: TunnelState) => {\n        writeSse(res, \"state\", s);\n      };\n      const onActivity = (a: TunnelActivity) => {\n        writeSse(res, \"activity\", a);\n      };\n      manager.on(\"state\", onState);\n      manager.on(\"activity\", onActivity);\n      req.on(\"close\", () => {\n        manager.off(\"state\", onState);\n        manager.off(\"activity\", onActivity);\n      });\n      return;\n    }\n    res.writeHead(404).end();\n  };\n}\n\nfunction sendJson(res: ServerResponse, status: number, data: unknown): void {\n  res.writeHead(status, { \"Content-Type\": \"application/json\" });\n  res.end(JSON.stringify(data));\n}\n\nfunction writeSseHead(res: ServerResponse): void {\n  res.writeHead(200, {\n    \"Content-Type\": \"text/event-stream\",\n    \"Cache-Control\": \"no-cache, no-transform\",\n    Connection: \"keep-alive\",\n  });\n  res.flushHeaders?.();\n}\n\nfunction writeSse(res: ServerResponse, event: string, data: unknown): void {\n  res.write(`event: ${event}\\ndata: ${JSON.stringify(data)}\\n\\n`);\n}\n"]}

package/dist/cli/tunnel-handler.test.js

@@ -0,0 +1,105 @@
+import { EventEmitter } from "node:events";
+import http from "node:http";
+import { Readable } from "node:stream";
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { TunnelManager } from "./tunnel.js";
+import { createTunnelHandler } from "./tunnel-handler.js";
+let openServer;
+afterEach(() => openServer?.close());
+function makeFakeChild() {
+    const child = new EventEmitter();
+    child.stdout = new Readable({ read() { } });
+    child.stderr = new Readable({ read() { } });
+    child.kill = vi.fn(() => true);
+    return child;
+}
+async function listen(handler) {
+    const server = http.createServer(handler);
+    await new Promise((resolve) => server.listen(0, resolve));
+    const port = server.address().port;
+    return { port, server };
+}
+async function listenWithHandler() {
+    const child = makeFakeChild();
+    const manager = new TunnelManager({
+        getPort: () => 3000,
+        spawn: () => child,
+    });
+    const { port, server } = await listen(createTunnelHandler(manager));
+    openServer = server;
+    return { port, child, manager };
+}
+describe("createTunnelHandler", () => {
+    it("POST /__skybridge/tunnel starts the tunnel and returns the current state", async () => {
+        const { port, child } = await listenWithHandler();
+        const res = await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        expect(res.status).toBe(200);
+        expect(await res.json()).toEqual({
+            status: "starting",
+            message: "Starting tunnel…",
+        });
+        expect(child.kill).not.toHaveBeenCalled();
+    });
+    it("POST /__skybridge/tunnel is idempotent — second call does not respawn", async () => {
+        const { port, manager } = await listenWithHandler();
+        const startSpy = vi.spyOn(manager, "start");
+        await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        expect(startSpy).toHaveBeenCalledTimes(2);
+        // Manager.start() is internally idempotent (verified in tunnel.test.ts).
+    });
+    it("DELETE /__skybridge/tunnel stops the tunnel", async () => {
+        const { port, child } = await listenWithHandler();
+        await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        const res = await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "DELETE",
+        });
+        expect(res.status).toBe(200);
+        expect(await res.json()).toEqual({ status: "idle" });
+        expect(child.kill).toHaveBeenCalled();
+    });
+    it("GET /__skybridge/tunnel/events streams the current state on connect", async () => {
+        const { port, child } = await listenWithHandler();
+        await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        child.stdout.emit("data", Buffer.from("Forwarding: https://abc.tunnel.example -> http://localhost:3000\n"));
+        const res = await fetch(`http://localhost:${port}/__skybridge/tunnel/events`);
+        expect(res.headers.get("content-type")).toMatch(/text\/event-stream/);
+        expect(res.body).toBeTruthy();
+        const reader = res.body.getReader();
+        const { value } = await reader.read();
+        const chunk = new TextDecoder().decode(value);
+        expect(chunk).toContain("event: state");
+        expect(chunk).toContain('"status":"connected"');
+        expect(chunk).toContain('"url":"https://abc.tunnel.example"');
+        await reader.cancel();
+    });
+    it("GET /__skybridge/tunnel/events sends the current error state on connect", async () => {
+        const { port, child } = await listenWithHandler();
+        await fetch(`http://localhost:${port}/__skybridge/tunnel`, {
+            method: "POST",
+        });
+        child.stderr.emit("data", Buffer.from("boom: tunnel auth failed\n"));
+        child.emit("close", 1);
+        const res = await fetch(`http://localhost:${port}/__skybridge/tunnel/events`);
+        expect(res.headers.get("content-type")).toMatch(/text\/event-stream/);
+        expect(res.body).toBeTruthy();
+        const reader = res.body.getReader();
+        const { value } = await reader.read();
+        const chunk = new TextDecoder().decode(value);
+        expect(chunk).toContain("event: state");
+        expect(chunk).toContain('"status":"error"');
+        expect(chunk).toContain("boom: tunnel auth failed");
+        await reader.cancel();
+    });
+});
+//# sourceMappingURL=tunnel-handler.test.js.map

package/dist/cli/tunnel-handler.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-handler.test.js","sourceRoot":"","sources":["../../src/cli/tunnel-handler.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,IAAI,UAAmC,CAAC;AACxC,SAAS,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AAQrC,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,IAAI,YAAY,EAAe,CAAC;IAC9C,KAAK,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,CAAC,CAAC;IAC3C,KAAK,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE,CAAgB,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAA6B;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;IACzD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;QACnB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,UAAU,GAAG,MAAM,CAAC;IACpB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAElD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACrE,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YAC/B,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,kBAAkB;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE5C,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,yEAAyE;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAClD,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACrE,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAClD,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,IAAI,CACf,MAAM,EACN,MAAM,CAAC,IAAI,CACT,mEAAmE,CACpE,CACF,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,oBAAoB,IAAI,4BAA4B,CACrD,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAE9B,MAAM,MAAM,GAAI,GAAG,CAAC,IAAmC,CAAC,SAAS,EAAE,CAAC;QACpE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAE9D,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAClD,MAAM,KAAK,CAAC,oBAAoB,IAAI,qBAAqB,EAAE;YACzD,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAEvB,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,oBAAoB,IAAI,4BAA4B,CACrD,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAE9B,MAAM,MAAM,GAAI,GAAG,CAAC,IAAmC,CAAC,SAAS,EAAE,CAAC;QACpE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAEpD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { EventEmitter } from \"node:events\";\nimport http from \"node:http\";\nimport { Readable } from \"node:stream\";\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { TunnelManager } from \"./tunnel.js\";\nimport { createTunnelHandler } from \"./tunnel-handler.js\";\n\nlet openServer: http.Server | undefined;\nafterEach(() => openServer?.close());\n\ntype FakeChild = EventEmitter & {\n  stdout: Readable;\n  stderr: Readable;\n  kill: ReturnType<typeof vi.fn<() => boolean>>;\n};\n\nfunction makeFakeChild(): FakeChild {\n  const child = new EventEmitter() as FakeChild;\n  child.stdout = new Readable({ read() {} });\n  child.stderr = new Readable({ read() {} });\n  child.kill = vi.fn<() => boolean>(() => true);\n  return child;\n}\n\nasync function listen(handler: http.RequestListener) {\n  const server = http.createServer(handler);\n  await new Promise<void>((resolve) => server.listen(0, resolve));\n  const port = (server.address() as { port: number }).port;\n  return { port, server };\n}\n\nasync function listenWithHandler() {\n  const child = makeFakeChild();\n  const manager = new TunnelManager({\n    getPort: () => 3000,\n    spawn: () => child,\n  });\n  const { port, server } = await listen(createTunnelHandler(manager));\n  openServer = server;\n  return { port, child, manager };\n}\n\ndescribe(\"createTunnelHandler\", () => {\n  it(\"POST /__skybridge/tunnel starts the tunnel and returns the current state\", async () => {\n    const { port, child } = await listenWithHandler();\n\n    const res = await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n    expect(res.status).toBe(200);\n    expect(await res.json()).toEqual({\n      status: \"starting\",\n      message: \"Starting tunnel…\",\n    });\n    expect(child.kill).not.toHaveBeenCalled();\n  });\n\n  it(\"POST /__skybridge/tunnel is idempotent — second call does not respawn\", async () => {\n    const { port, manager } = await listenWithHandler();\n    const startSpy = vi.spyOn(manager, \"start\");\n\n    await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n    await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n\n    expect(startSpy).toHaveBeenCalledTimes(2);\n    // Manager.start() is internally idempotent (verified in tunnel.test.ts).\n  });\n\n  it(\"DELETE /__skybridge/tunnel stops the tunnel\", async () => {\n    const { port, child } = await listenWithHandler();\n    await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n\n    const res = await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"DELETE\",\n    });\n    expect(res.status).toBe(200);\n    expect(await res.json()).toEqual({ status: \"idle\" });\n    expect(child.kill).toHaveBeenCalled();\n  });\n\n  it(\"GET /__skybridge/tunnel/events streams the current state on connect\", async () => {\n    const { port, child } = await listenWithHandler();\n    await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n    child.stdout.emit(\n      \"data\",\n      Buffer.from(\n        \"Forwarding: https://abc.tunnel.example -> http://localhost:3000\\n\",\n      ),\n    );\n\n    const res = await fetch(\n      `http://localhost:${port}/__skybridge/tunnel/events`,\n    );\n    expect(res.headers.get(\"content-type\")).toMatch(/text\\/event-stream/);\n    expect(res.body).toBeTruthy();\n\n    const reader = (res.body as ReadableStream<Uint8Array>).getReader();\n    const { value } = await reader.read();\n    const chunk = new TextDecoder().decode(value);\n\n    expect(chunk).toContain(\"event: state\");\n    expect(chunk).toContain('\"status\":\"connected\"');\n    expect(chunk).toContain('\"url\":\"https://abc.tunnel.example\"');\n\n    await reader.cancel();\n  });\n\n  it(\"GET /__skybridge/tunnel/events sends the current error state on connect\", async () => {\n    const { port, child } = await listenWithHandler();\n    await fetch(`http://localhost:${port}/__skybridge/tunnel`, {\n      method: \"POST\",\n    });\n    child.stderr.emit(\"data\", Buffer.from(\"boom: tunnel auth failed\\n\"));\n    child.emit(\"close\", 1);\n\n    const res = await fetch(\n      `http://localhost:${port}/__skybridge/tunnel/events`,\n    );\n    expect(res.headers.get(\"content-type\")).toMatch(/text\\/event-stream/);\n    expect(res.body).toBeTruthy();\n\n    const reader = (res.body as ReadableStream<Uint8Array>).getReader();\n    const { value } = await reader.read();\n    const chunk = new TextDecoder().decode(value);\n\n    expect(chunk).toContain(\"event: state\");\n    expect(chunk).toContain('\"status\":\"error\"');\n    expect(chunk).toContain(\"boom: tunnel auth failed\");\n\n    await reader.cancel();\n  });\n});\n"]}

package/dist/cli/tunnel.d.ts

@@ -0,0 +1,57 @@
+import { EventEmitter } from "node:events";
+import type { Readable } from "node:stream";
+export type TunnelState = {
+    status: "idle";
+} | {
+    status: "starting";
+    message: string;
+} | {
+    status: "connected";
+    url: string;
+} | {
+    status: "error";
+    message: string;
+};
+export type ParsedStdoutEvent = {
+    kind: "connected";
+    url: string;
+} | {
+    kind: "starting";
+    message: string;
+};
+export declare function parseStdoutLine(line: string): ParsedStdoutEvent | null;
+export type TunnelActivity = {
+    time: string;
+    text: string;
+    level: "log" | "error";
+};
+export type TunnelChildProcess = {
+    stdout: Pick<Readable, "on"> | null;
+    stderr: Pick<Readable, "on"> | null;
+    kill: (signal?: NodeJS.Signals | number) => boolean;
+    on(event: "error", listener: (err: Error) => void): unknown;
+    on(event: "close", listener: (code: number | null) => void): unknown;
+};
+export type SpawnFn = (port: number) => TunnelChildProcess;
+export declare class TunnelManager extends EventEmitter {
+    private state;
+    private child;
+    private timeout;
+    private stderrBuffer;
+    private connected;
+    private readonly getPort;
+    private readonly spawnFn;
+    constructor(opts: {
+        getPort: () => number;
+        spawn?: SpawnFn;
+    });
+    getState(): TunnelState;
+    subscribe(listener: (state: TunnelState) => void): () => void;
+    start(): void;
+    stop(): void;
+    private handleStdout;
+    private handleStderr;
+    private setState;
+    private emitActivity;
+    private clearConnectTimeout;
+}

package/dist/cli/tunnel.js

@@ -0,0 +1,154 @@
+import { EventEmitter } from "node:events";
+import spawn from "cross-spawn";
+const FORWARDING_RE = /Forwarding:\s+(https?:\/\/\S+)\s*->\s*(\S+)/;
+export function parseStdoutLine(line) {
+    const trimmed = line.trim();
+    if (!trimmed) {
+        return null;
+    }
+    const match = trimmed.match(FORWARDING_RE);
+    if (match?.[1]) {
+        return { kind: "connected", url: match[1].replace(/\/$/, "") };
+    }
+    return { kind: "starting", message: trimmed };
+}
+const CONNECT_TIMEOUT_MS = 60_000;
+const STDERR_BUFFER_BYTES = 1024;
+const defaultSpawn = (port) => spawn("npx", ["--yes", "alpic", "tunnel", "--port", String(port), "--plain"], {
+    stdio: ["ignore", "pipe", "pipe"],
+});
+export class TunnelManager extends EventEmitter {
+    state = { status: "idle" };
+    child = null;
+    timeout = null;
+    stderrBuffer = "";
+    connected = false;
+    getPort;
+    spawnFn;
+    constructor(opts) {
+        super();
+        this.getPort = opts.getPort;
+        this.spawnFn = opts.spawn ?? defaultSpawn;
+        // Multiple SSE subscribers (CLI, devtools, ad-hoc curl) can each register
+        // state + activity listeners; the default cap of 10 is easy to hit.
+        this.setMaxListeners(0);
+    }
+    getState() {
+        return this.state;
+    }
+    subscribe(listener) {
+        listener(this.state);
+        this.on("state", listener);
+        return () => {
+            this.off("state", listener);
+        };
+    }
+    start() {
+        if (this.state.status === "starting" || this.state.status === "connected") {
+            return;
+        }
+        this.connected = false;
+        this.stderrBuffer = "";
+        this.setState({ status: "starting", message: "Starting tunnel…" });
+        const child = this.spawnFn(this.getPort());
+        this.child = child;
+        this.timeout = setTimeout(() => {
+            if (!this.connected) {
+                this.setState({
+                    status: "error",
+                    message: "Tunnel connection timed out after one minute",
+                });
+                // Detach before killing so the imminent `close` event is treated as
+                // stale and does not overwrite the timeout error message.
+                this.child = null;
+                child.kill();
+            }
+        }, CONNECT_TIMEOUT_MS);
+        child.stdout?.on("data", (data) => {
+            this.handleStdout(data);
+        });
+        child.stderr?.on("data", (data) => {
+            this.handleStderr(data);
+        });
+        child.on("error", (err) => {
+            // Stale event from a child we've already replaced via stop()+start().
+            if (child !== this.child) {
+                return;
+            }
+            this.clearConnectTimeout();
+            this.setState({ status: "error", message: err.message });
+        });
+        child.on("close", (code) => {
+            // Stale event from a child we've already replaced via stop()+start().
+            if (child !== this.child) {
+                return;
+            }
+            this.clearConnectTimeout();
+            if (code !== 0 && code !== null) {
+                const detail = this.stderrBuffer.trim() || `exited with code ${code}`;
+                this.setState({ status: "error", message: detail });
+            }
+            else {
+                this.setState({ status: "idle" });
+            }
+            this.child = null;
+        });
+    }
+    stop() {
+        this.clearConnectTimeout();
+        if (this.child) {
+            this.child.kill();
+            this.child = null;
+        }
+        this.setState({ status: "idle" });
+    }
+    handleStdout(data) {
+        const lines = data.toString().split("\n");
+        for (const raw of lines) {
+            const parsed = parseStdoutLine(raw);
+            if (!parsed) {
+                continue;
+            }
+            if (parsed.kind === "connected") {
+                this.connected = true;
+                this.clearConnectTimeout();
+                this.setState({ status: "connected", url: parsed.url });
+            }
+            else if (this.connected) {
+                this.emitActivity(parsed.message, "log");
+            }
+            else {
+                this.setState({ status: "starting", message: parsed.message });
+            }
+        }
+    }
+    handleStderr(data) {
+        const text = data.toString().trim();
+        if (!text) {
+            return;
+        }
+        this.stderrBuffer = (this.stderrBuffer + text).slice(-STDERR_BUFFER_BYTES);
+        for (const line of text.split("\n").filter(Boolean)) {
+            this.emitActivity(line, "error");
+        }
+    }
+    setState(next) {
+        this.state = next;
+        this.emit("state", next);
+    }
+    emitActivity(text, level) {
+        const activity = {
+            time: new Date().toISOString(),
+            text,
+            level,
+        };
+        this.emit("activity", activity);
+    }
+    clearConnectTimeout() {
+        if (this.timeout) {
+            clearTimeout(this.timeout);
+            this.timeout = null;
+        }
+    }
+}
+//# sourceMappingURL=tunnel.js.map

package/dist/cli/tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../../src/cli/tunnel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,MAAM,aAAa,CAAC;AAYhC,MAAM,aAAa,GAAG,6CAA6C,CAAC;AAEpE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC3C,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAkBjC,MAAM,YAAY,GAAY,CAAC,IAAI,EAAE,EAAE,CACrC,KAAK,CACH,KAAK,EACL,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,EAC/D;IACE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;CAClC,CACF,CAAC;AAEJ,MAAM,OAAO,aAAc,SAAQ,YAAY;IACrC,KAAK,GAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACxC,KAAK,GAA+B,IAAI,CAAC;IACzC,OAAO,GAA0B,IAAI,CAAC;IACtC,YAAY,GAAG,EAAE,CAAC;IAClB,SAAS,GAAG,KAAK,CAAC;IACT,OAAO,CAAe;IACtB,OAAO,CAAU;IAElC,YAAY,IAAgD;QAC1D,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;QAC1C,0EAA0E;QAC1E,oEAAoE;QACpE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,SAAS,CAAC,QAAsC;QAC9C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAEnE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAEnB,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,QAAQ,CAAC;oBACZ,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,8CAA8C;iBACxD,CAAC,CAAC;gBACH,oEAAoE;gBACpE,0DAA0D;gBAC1D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;gBAClB,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,CAAC;QACH,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEvB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC/B,sEAAsE;YACtE,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;YACxC,sEAAsE;YACtE,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,oBAAoB,IAAI,EAAE,CAAC;gBACtE,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI;QACF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1D,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAC3E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,IAAiB;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,KAAsB;QACvD,MAAM,QAAQ,GAAmB;YAC/B,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,IAAI;YACJ,KAAK;SACN,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAEO,mBAAmB;QACzB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;CACF","sourcesContent":["import { EventEmitter } from \"node:events\";\nimport type { Readable } from \"node:stream\";\nimport spawn from \"cross-spawn\";\n\nexport type TunnelState =\n  | { status: \"idle\" }\n  | { status: \"starting\"; message: string }\n  | { status: \"connected\"; url: string }\n  | { status: \"error\"; message: string };\n\nexport type ParsedStdoutEvent =\n  | { kind: \"connected\"; url: string }\n  | { kind: \"starting\"; message: string };\n\nconst FORWARDING_RE = /Forwarding:\\s+(https?:\\/\\/\\S+)\\s*->\\s*(\\S+)/;\n\nexport function parseStdoutLine(line: string): ParsedStdoutEvent | null {\n  const trimmed = line.trim();\n  if (!trimmed) {\n    return null;\n  }\n\n  const match = trimmed.match(FORWARDING_RE);\n  if (match?.[1]) {\n    return { kind: \"connected\", url: match[1].replace(/\\/$/, \"\") };\n  }\n  return { kind: \"starting\", message: trimmed };\n}\n\nconst CONNECT_TIMEOUT_MS = 60_000;\nconst STDERR_BUFFER_BYTES = 1024;\n\nexport type TunnelActivity = {\n  time: string;\n  text: string;\n  level: \"log\" | \"error\";\n};\n\nexport type TunnelChildProcess = {\n  stdout: Pick<Readable, \"on\"> | null;\n  stderr: Pick<Readable, \"on\"> | null;\n  kill: (signal?: NodeJS.Signals | number) => boolean;\n  on(event: \"error\", listener: (err: Error) => void): unknown;\n  on(event: \"close\", listener: (code: number | null) => void): unknown;\n};\n\nexport type SpawnFn = (port: number) => TunnelChildProcess;\n\nconst defaultSpawn: SpawnFn = (port) =>\n  spawn(\n    \"npx\",\n    [\"--yes\", \"alpic\", \"tunnel\", \"--port\", String(port), \"--plain\"],\n    {\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    },\n  );\n\nexport class TunnelManager extends EventEmitter {\n  private state: TunnelState = { status: \"idle\" };\n  private child: ReturnType<SpawnFn> | null = null;\n  private timeout: NodeJS.Timeout | null = null;\n  private stderrBuffer = \"\";\n  private connected = false;\n  private readonly getPort: () => number;\n  private readonly spawnFn: SpawnFn;\n\n  constructor(opts: { getPort: () => number; spawn?: SpawnFn }) {\n    super();\n    this.getPort = opts.getPort;\n    this.spawnFn = opts.spawn ?? defaultSpawn;\n    // Multiple SSE subscribers (CLI, devtools, ad-hoc curl) can each register\n    // state + activity listeners; the default cap of 10 is easy to hit.\n    this.setMaxListeners(0);\n  }\n\n  getState(): TunnelState {\n    return this.state;\n  }\n\n  subscribe(listener: (state: TunnelState) => void): () => void {\n    listener(this.state);\n    this.on(\"state\", listener);\n    return () => {\n      this.off(\"state\", listener);\n    };\n  }\n\n  start(): void {\n    if (this.state.status === \"starting\" || this.state.status === \"connected\") {\n      return;\n    }\n\n    this.connected = false;\n    this.stderrBuffer = \"\";\n    this.setState({ status: \"starting\", message: \"Starting tunnel…\" });\n\n    const child = this.spawnFn(this.getPort());\n    this.child = child;\n\n    this.timeout = setTimeout(() => {\n      if (!this.connected) {\n        this.setState({\n          status: \"error\",\n          message: \"Tunnel connection timed out after one minute\",\n        });\n        // Detach before killing so the imminent `close` event is treated as\n        // stale and does not overwrite the timeout error message.\n        this.child = null;\n        child.kill();\n      }\n    }, CONNECT_TIMEOUT_MS);\n\n    child.stdout?.on(\"data\", (data: Buffer) => {\n      this.handleStdout(data);\n    });\n    child.stderr?.on(\"data\", (data: Buffer) => {\n      this.handleStderr(data);\n    });\n\n    child.on(\"error\", (err: Error) => {\n      // Stale event from a child we've already replaced via stop()+start().\n      if (child !== this.child) {\n        return;\n      }\n      this.clearConnectTimeout();\n      this.setState({ status: \"error\", message: err.message });\n    });\n\n    child.on(\"close\", (code: number | null) => {\n      // Stale event from a child we've already replaced via stop()+start().\n      if (child !== this.child) {\n        return;\n      }\n      this.clearConnectTimeout();\n      if (code !== 0 && code !== null) {\n        const detail = this.stderrBuffer.trim() || `exited with code ${code}`;\n        this.setState({ status: \"error\", message: detail });\n      } else {\n        this.setState({ status: \"idle\" });\n      }\n      this.child = null;\n    });\n  }\n\n  stop(): void {\n    this.clearConnectTimeout();\n    if (this.child) {\n      this.child.kill();\n      this.child = null;\n    }\n    this.setState({ status: \"idle\" });\n  }\n\n  private handleStdout(data: Buffer): void {\n    const lines = data.toString().split(\"\\n\");\n    for (const raw of lines) {\n      const parsed = parseStdoutLine(raw);\n      if (!parsed) {\n        continue;\n      }\n      if (parsed.kind === \"connected\") {\n        this.connected = true;\n        this.clearConnectTimeout();\n        this.setState({ status: \"connected\", url: parsed.url });\n      } else if (this.connected) {\n        this.emitActivity(parsed.message, \"log\");\n      } else {\n        this.setState({ status: \"starting\", message: parsed.message });\n      }\n    }\n  }\n\n  private handleStderr(data: Buffer): void {\n    const text = data.toString().trim();\n    if (!text) {\n      return;\n    }\n    this.stderrBuffer = (this.stderrBuffer + text).slice(-STDERR_BUFFER_BYTES);\n    for (const line of text.split(\"\\n\").filter(Boolean)) {\n      this.emitActivity(line, \"error\");\n    }\n  }\n\n  private setState(next: TunnelState): void {\n    this.state = next;\n    this.emit(\"state\", next);\n  }\n\n  private emitActivity(text: string, level: \"log\" | \"error\"): void {\n    const activity: TunnelActivity = {\n      time: new Date().toISOString(),\n      text,\n      level,\n    };\n    this.emit(\"activity\", activity);\n  }\n\n  private clearConnectTimeout(): void {\n    if (this.timeout) {\n      clearTimeout(this.timeout);\n      this.timeout = null;\n    }\n  }\n}\n"]}