npm - ugly-app - Versions diffs - 0.1.518 → 0.1.521 - Mend

ugly-app 0.1.518 → 0.1.521

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (120) hide show

package/.pgdata/base/16384/pg_internal.init +0 -0
package/.pgdata/global/pg_control +0 -0
package/.pgdata/global/pg_internal.init +0 -0
package/.pgdata/pg_wal/000000010000000000000004 +0 -0
package/.pgdata/postmaster.pid +2 -2
package/dist/cli/dev.d.ts.map +1 -1
package/dist/cli/dev.js +0 -3
package/dist/cli/dev.js.map +1 -1
package/dist/cli/doctor.d.ts.map +1 -1
package/dist/cli/doctor.js +31 -66
package/dist/cli/doctor.js.map +1 -1
package/dist/cli/index.js +8 -66
package/dist/cli/index.js.map +1 -1
package/dist/cli/migrate.d.ts.map +1 -1
package/dist/cli/migrate.js +0 -4
package/dist/cli/migrate.js.map +1 -1
package/dist/cli/schemaGen.d.ts.map +1 -1
package/dist/cli/schemaGen.js +0 -4
package/dist/cli/schemaGen.js.map +1 -1
package/dist/cli/schemaStatus.d.ts.map +1 -1
package/dist/cli/schemaStatus.js +0 -4
package/dist/cli/schemaStatus.js.map +1 -1
package/dist/cli/serverLogQueryApi.d.ts +5 -4
package/dist/cli/serverLogQueryApi.d.ts.map +1 -1
package/dist/cli/serverLogQueryApi.js +55 -115
package/dist/cli/serverLogQueryApi.js.map +1 -1
package/dist/cli/version.d.ts +1 -1
package/dist/cli/version.js +1 -1
package/dist/client/auth/MagicLinkCallback.d.ts.map +1 -1
package/dist/client/auth/MagicLinkCallback.js +8 -2
package/dist/client/auth/MagicLinkCallback.js.map +1 -1
package/dist/client/auth/MagicLinkForm.d.ts.map +1 -1
package/dist/client/auth/MagicLinkForm.js +6 -1
package/dist/client/auth/MagicLinkForm.js.map +1 -1
package/dist/server/App.d.ts.map +1 -1
package/dist/server/App.js +1 -2
package/dist/server/App.js.map +1 -1
package/dist/server/Email.d.ts.map +1 -1
package/dist/server/Email.js +7 -1
package/dist/server/Email.js.map +1 -1
package/dist/server/Logging.d.ts +5 -8
package/dist/server/Logging.d.ts.map +1 -1
package/dist/server/Logging.js +21 -97
package/dist/server/Logging.js.map +1 -1
package/dist/server/adapter/workers/cf-types.d.ts +7 -0
package/dist/server/adapter/workers/cf-types.d.ts.map +1 -1
package/dist/server/adapter/workers/createWorkersApp.js +1 -0
package/dist/server/adapter/workers/createWorkersApp.js.map +1 -1
package/dist/server/auth/magicLinkProvider.d.ts.map +1 -1
package/dist/server/auth/magicLinkProvider.js +55 -6
package/dist/server/auth/magicLinkProvider.js.map +1 -1
package/dist/server/auth/workersMagicLink.d.ts.map +1 -1
package/dist/server/auth/workersMagicLink.js +117 -13
package/dist/server/auth/workersMagicLink.js.map +1 -1
package/dist/server/bootstrap.d.ts +5 -21
package/dist/server/bootstrap.d.ts.map +1 -1
package/dist/server/bootstrap.js +5 -27
package/dist/server/bootstrap.js.map +1 -1
package/dist/shared/DB.d.ts +0 -9
package/dist/shared/DB.d.ts.map +1 -1
package/dist/shared/DB.js +46 -10
package/dist/shared/DB.js.map +1 -1
package/dist/vite/index.d.ts +0 -1
package/dist/vite/index.d.ts.map +1 -1
package/dist/vite/index.js +0 -1
package/dist/vite/index.js.map +1 -1
package/package.json +1 -1
package/src/cli/dev.ts +0 -4
package/src/cli/doctor.ts +31 -63
package/src/cli/index.ts +9 -81
package/src/cli/migrate.ts +0 -4
package/src/cli/schemaGen.ts +0 -4
package/src/cli/schemaStatus.ts +0 -4
package/src/cli/serverLogQueryApi.ts +53 -136
package/src/cli/version.ts +1 -1
package/src/client/auth/MagicLinkCallback.tsx +10 -2
package/src/client/auth/MagicLinkForm.tsx +7 -1
package/src/server/App.ts +1 -2
package/src/server/Email.ts +7 -1
package/src/server/Logging.ts +21 -97
package/src/server/adapter/workers/cf-types.ts +8 -0
package/src/server/adapter/workers/createWorkersApp.ts +1 -0
package/src/server/auth/magicLinkProvider.ts +61 -6
package/src/server/auth/workersMagicLink.ts +117 -13
package/src/server/bootstrap.ts +5 -29
package/src/shared/DB.ts +46 -17
package/src/vite/index.ts +0 -1
package/.pgdata/base/1/pg_internal.init +0 -0
package/.pgdata/base/17702/pg_internal.init +0 -0
package/.pgdata/base/5/pg_internal.init +0 -0
package/dist/cli/devTunnel.d.ts +0 -37
package/dist/cli/devTunnel.d.ts.map +0 -1
package/dist/cli/devTunnel.js +0 -470
package/dist/cli/devTunnel.js.map +0 -1
package/dist/cli/ensureInfra.d.ts +0 -9
package/dist/cli/ensureInfra.d.ts.map +0 -1
package/dist/cli/ensureInfra.js +0 -86
package/dist/cli/ensureInfra.js.map +0 -1
package/dist/cli/sidecar.d.ts +0 -21
package/dist/cli/sidecar.d.ts.map +0 -1
package/dist/cli/sidecar.js +0 -294
package/dist/cli/sidecar.js.map +0 -1
package/dist/cli/sidecarHealth.d.ts +0 -13
package/dist/cli/sidecarHealth.d.ts.map +0 -1
package/dist/cli/sidecarHealth.js +0 -42
package/dist/cli/sidecarHealth.js.map +0 -1
package/dist/cli/sidecarProtocol.d.ts +0 -41
package/dist/cli/sidecarProtocol.d.ts.map +0 -1
package/dist/cli/sidecarProtocol.js +0 -61
package/dist/cli/sidecarProtocol.js.map +0 -1
package/dist/vite/tunnelPlugin.d.ts +0 -10
package/dist/vite/tunnelPlugin.d.ts.map +0 -1
package/dist/vite/tunnelPlugin.js +0 -30
package/dist/vite/tunnelPlugin.js.map +0 -1
package/src/cli/devTunnel.ts +0 -589
package/src/cli/ensureInfra.ts +0 -90
package/src/cli/sidecar.ts +0 -350
package/src/cli/sidecarHealth.ts +0 -58
package/src/cli/sidecarProtocol.ts +0 -68
package/src/vite/tunnelPlugin.ts +0 -32

package/src/server/auth/magicLinkProvider.ts CHANGED Viewed

@@ -102,13 +102,37 @@ const MAX_REQUESTS_PER_EMAIL_PER_HOUR = 5;
 const requestBodySchema = z.object({
   email: z.string().email().max(254),
+  returnTo: z.string().max(2000).optional(),
 });
 const verifyBodySchema = z.object({
   id: z.string().min(1).max(128),
   sig: z.string().min(1).max(128),
+  returnTo: z.string().max(2000).optional(),
 });
+/** Same-origin redirect guard. See `workersMagicLink.ts` for rationale. */
+function validateReturnTo(
+  returnTo: string | undefined,
+  requestHost: string,
+): string {
+  if (!returnTo || returnTo.length > 2000) return '/';
+  if (/^[a-z][a-z0-9+\-.]*:/i.test(returnTo)) {
+    try {
+      const u = new URL(returnTo);
+      if (u.protocol !== 'https:' && u.protocol !== 'http:') return '/';
+      if (u.host.toLowerCase() !== requestHost.toLowerCase()) return '/';
+      if (u.pathname.startsWith('/auth/magic-link/')) return '/';
+      return `${u.pathname}${u.search}${u.hash}`;
+    } catch {
+      return '/';
+    }
+  }
+  if (!returnTo.startsWith('/') || returnTo.startsWith('//')) return '/';
+  if (returnTo.startsWith('/auth/magic-link/')) return '/';
+  return returnTo;
+}
 /**
  * Magic-link provider (Mode B default). Issues a single-use signed token
  * over email; verification mints a local `auth_token` JWT cookie.
@@ -206,7 +230,21 @@ export function createMagicLinkProvider(
             });
             const base = getAppPublicUrl();
-            const url = `${base}/auth/magic-link/verify?id=${encodeURIComponent(tokenId)}&sig=${encodeURIComponent(sig)}`;
+            let baseHost = '';
+            try {
+              baseHost = new URL(base).host;
+            } catch {
+              baseHost = req.get('host') ?? '';
+            }
+            const safeReturnTo = validateReturnTo(
+              parsed.data.returnTo,
+              baseHost,
+            );
+            const returnToParam =
+              safeReturnTo === '/'
+                ? ''
+                : `&returnTo=${encodeURIComponent(safeReturnTo)}`;
+            const url = `${base}/auth/magic-link/verify?id=${encodeURIComponent(tokenId)}&sig=${encodeURIComponent(sig)}${returnToParam}`;
             const tpl = magicLinkEmail(url, appName, expiresMin);
             await emailSend({
@@ -234,22 +272,35 @@ export function createMagicLinkProvider(
         (req: Request, res: Response) => {
           const id = String(req.query['id'] ?? '');
           const sig = String(req.query['sig'] ?? '');
+          const safeReturnTo = validateReturnTo(
+            req.query['returnTo'] != null
+              ? String(req.query['returnTo'])
+              : undefined,
+            req.get('host') ?? '',
+          );
           // Inline JSON-encode to prevent <script>-context XSS; even though
           // these values are signed/short, defence-in-depth.
           const idJson = JSON.stringify(id);
           const sigJson = JSON.stringify(sig);
+          const returnToJson = JSON.stringify(safeReturnTo);
           res.setHeader('Content-Type', 'text/html; charset=utf-8');
           res.send(`<!doctype html><html><head><meta charset="utf-8"><title>Signing in…</title></head><body style="font-family:system-ui,sans-serif;padding:24px;text-align:center"><p>Signing you in…</p><script>
 (async function(){
+  var returnTo = ${returnToJson};
   try {
-    const r = await fetch('/auth/magic-link/verify', {
+    var r = await fetch('/auth/magic-link/verify', {
       method: 'POST',
       headers: {'Content-Type': 'application/json'},
       credentials: 'same-origin',
-      body: JSON.stringify({ id: ${idJson}, sig: ${sigJson} }),
+      body: JSON.stringify({ id: ${idJson}, sig: ${sigJson}, returnTo: returnTo }),
     });
-    if (r.ok) { window.location.replace('/'); }
-    else { document.body.innerText = 'This sign-in link is invalid or has expired.'; }
+    if (r.ok) {
+      var data = await r.json().catch(function(){ return {}; });
+      var dest = (data && data.returnTo) || returnTo || '/';
+      window.location.replace(dest);
+    } else {
+      document.body.innerText = 'This sign-in link is invalid or has expired.';
+    }
   } catch (e) { document.body.innerText = 'Sign-in failed. Please try again.'; }
 })();
 </script></body></html>`);
@@ -321,7 +372,11 @@ export function createMagicLinkProvider(
               maxAge: COOKIE_MAX_AGE_SECONDS * 1000,
               path: '/',
             });
-            res.json({ ok: true, token });
+            const safeReturnTo = validateReturnTo(
+              parsed.data.returnTo,
+              req.get('host') ?? '',
+            );
+            res.json({ ok: true, token, returnTo: safeReturnTo });
           } catch (err) {
             console.error('[Auth] magic-link verify failed', err);
             res.status(401).json({ error: 'Invalid link' });

package/src/server/auth/workersMagicLink.ts CHANGED Viewed

@@ -31,13 +31,53 @@ const MAX_REQUESTS_PER_EMAIL_PER_HOUR = 5;
 const requestBodySchema = z.object({
   email: z.string().email().max(254),
+  /**
+   * Optional URL the client wants to land on after sign-in. Must be
+   * same-origin — full URLs to other hosts are silently downgraded to
+   * `/` by `validateReturnTo`. Sent by `MagicLinkForm` as
+   * `window.location.href` so the user resumes wherever they were.
+   */
+  returnTo: z.string().max(2000).optional(),
 });
 const verifyBodySchema = z.object({
   id: z.string().min(1).max(128),
   sig: z.string().min(1).max(128),
+  returnTo: z.string().max(2000).optional(),
 });
+/**
+ * Same-origin redirect guard. Returns a safe path (always starts with
+ * `/`) — `/` when the input is missing, off-origin, or points back at
+ * `/auth/magic-link/*` (loop prevention). The verify URL inside the
+ * email is signed (HMAC binds id+email+expiresAt), so a tampered
+ * returnTo can't be used to bypass auth, but a same-origin guard still
+ * matters to prevent post-login open redirects.
+ */
+function validateReturnTo(
+  returnTo: string | undefined,
+  requestHost: string,
+): string {
+  if (!returnTo || returnTo.length > 2000) return '/';
+  // Absolute URL: must be http(s) AND same host.
+  if (/^[a-z][a-z0-9+\-.]*:/i.test(returnTo)) {
+    try {
+      const u = new URL(returnTo);
+      if (u.protocol !== 'https:' && u.protocol !== 'http:') return '/';
+      if (u.host.toLowerCase() !== requestHost.toLowerCase()) return '/';
+      if (u.pathname.startsWith('/auth/magic-link/')) return '/';
+      return `${u.pathname}${u.search}${u.hash}`;
+    } catch {
+      return '/';
+    }
+  }
+  // Relative — accept only paths that start with `/` (block protocol-
+  // relative `//evil.com` URLs and bare path-traversal).
+  if (!returnTo.startsWith('/') || returnTo.startsWith('//')) return '/';
+  if (returnTo.startsWith('/auth/magic-link/')) return '/';
+  return returnTo;
+}
 export interface WorkersMagicLinkConfig {
   /** Magic-link lifetime in minutes (1..1440). */
   expiresMin: number;
@@ -223,16 +263,66 @@ export function registerWorkersMagicLinkRoutes(
       });
       const base = getAppPublicUrl(c, config.publicAppUrl);
-      const url = `${base}/auth/magic-link/verify?id=${encodeURIComponent(tokenId)}&sig=${encodeURIComponent(sig)}`;
+      // Validate returnTo against the public origin so a malicious
+      // `returnTo` (sent in the request body) can't ride along through
+      // the email and steal the post-login navigation. The validation
+      // strips off-origin URLs to `/` silently.
+      let baseHost = '';
+      try {
+        baseHost = new URL(base).host;
+      } catch {
+        baseHost = c.req.header('host') ?? '';
+      }
+      const safeReturnTo = validateReturnTo(parsed.data.returnTo, baseHost);
+      const returnToParam =
+        safeReturnTo === '/'
+          ? ''
+          : `&returnTo=${encodeURIComponent(safeReturnTo)}`;
+      const url = `${base}/auth/magic-link/verify?id=${encodeURIComponent(tokenId)}&sig=${encodeURIComponent(sig)}${returnToParam}`;
+      const debugMode = process.env['UGLY_APP_MAGIC_LINK_DEBUG'] === '1';
+      // Debug mode: log the link to the worker console so it's grep-able
+      // from `wrangler tail`. Also returned in the response below.
+      // ALWAYS off in prod — gated on UGLY_APP_MAGIC_LINK_DEBUG and the
+      // self auth-mode binding, never on by default.
+      if (debugMode) {
+        // eslint-disable-next-line no-console
+        console.log(
+          `[Auth] DEBUG magic-link for ${email}: ${url}`,
+        );
+      }
       const tpl = magicLinkEmail(url, appName, expiresMin);
-      await emailSend({
-        to: email,
-        subject: tpl.subject,
-        html: tpl.html,
-        text: tpl.text,
-        id: 'magic-link',
-      });
+      let emailError: unknown = null;
+      try {
+        await emailSend({
+          to: email,
+          subject: tpl.subject,
+          html: tpl.html,
+          text: tpl.text,
+          id: 'magic-link',
+        });
+      } catch (err) {
+        emailError = err;
+        // eslint-disable-next-line no-console
+        console.error('[Auth] magic-link email send failed', err);
+      }
+      if (debugMode) {
+        // Debug-only response shape — magic link surfaced directly so
+        // you can drive the verify step from a test harness without a
+        // working email proxy or sending domain. Anti-enum still
+        // covers the prod path; this branch only runs when the
+        // operator opts in.
+        return c.json({
+          ok: true,
+          debug: {
+            link: url,
+            emailDelivered: !emailError,
+            emailError: emailError ? String(emailError) : null,
+          },
+        });
+      }
     } catch (err) {
       // eslint-disable-next-line no-console
       console.error('[Auth] magic-link request failed', err);
@@ -246,19 +336,31 @@ export function registerWorkersMagicLinkRoutes(
     }
     const id = c.req.query('id') ?? '';
     const sig = c.req.query('sig') ?? '';
+    // Re-validate the URL-borne returnTo at GET time too. The link can
+    // be tampered between email-render and click, so we don't trust
+    // whatever shows up here without re-checking origin.
+    const host = c.req.header('host') ?? '';
+    const safeReturnTo = validateReturnTo(c.req.query('returnTo'), host);
     const idJson = JSON.stringify(id);
     const sigJson = JSON.stringify(sig);
+    const returnToJson = JSON.stringify(safeReturnTo);
     const html = `<!doctype html><html><head><meta charset="utf-8"><title>Signing in…</title></head><body style="font-family:system-ui,sans-serif;padding:24px;text-align:center"><p>Signing you in…</p><script>
 (async function(){
+  var returnTo = ${returnToJson};
   try {
-    const r = await fetch('/auth/magic-link/verify', {
+    var r = await fetch('/auth/magic-link/verify', {
       method: 'POST',
       headers: {'Content-Type': 'application/json'},
       credentials: 'same-origin',
-      body: JSON.stringify({ id: ${idJson}, sig: ${sigJson} }),
+      body: JSON.stringify({ id: ${idJson}, sig: ${sigJson}, returnTo: returnTo }),
     });
-    if (r.ok) { window.location.replace('/'); }
-    else { document.body.innerText = 'This sign-in link is invalid or has expired.'; }
+    if (r.ok) {
+      var data = await r.json().catch(function(){ return {}; });
+      var dest = (data && data.returnTo) || returnTo || '/';
+      window.location.replace(dest);
+    } else {
+      document.body.innerText = 'This sign-in link is invalid or has expired.';
+    }
   } catch (e) { document.body.innerText = 'Sign-in failed. Please try again.'; }
 })();
 </script></body></html>`;
@@ -309,7 +411,9 @@ export function registerWorkersMagicLinkRoutes(
       const token = await mintSessionJwt(userId, secret);
       c.header('Set-Cookie', buildAuthCookie(token));
-      return c.json({ ok: true, token });
+      const host = c.req.header('host') ?? '';
+      const safeReturnTo = validateReturnTo(parsed.data.returnTo, host);
+      return c.json({ ok: true, token, returnTo: safeReturnTo });
     } catch (err) {
       // eslint-disable-next-line no-console
       console.error('[Auth] magic-link verify failed', err);

package/src/server/bootstrap.ts CHANGED Viewed

@@ -1,39 +1,15 @@
 /**
- * bootstrapInfra — the supported way to wire up the Postgres + Storage
- * connections from any script that imports `ugly-app/server`. Wraps
- * the two-step dance every seed / migration / import script needs:
+ * bootstrapInfra — supported entrypoint for wiring up the Postgres pool
+ * from any script that imports `ugly-app/server`. Touches the singleton
+ * pg.Pool to surface config errors early. The pool itself is lazily
+ * created on first query.
  *
- *   1. `ensureInfra()` — reads `.uglyapp`, logs in if needed, sets
- *      DATABASE_URL / R2_* env vars for this process only. No `.env`
- *      file is ever touched.
- *   2. `initPg()` — touches the singleton pg.Pool to surface config
- *      errors early. The pool itself is lazily created on first query.
- *
- * After this returns, `pgQuery`, `createTypedDB`, `storage`, etc. all
- * work as if the script were running inside `ugly-app dev`.
- *
- * Idempotent: if the pool is already open (e.g. when a test or another
- * script already bootstrapped the process), the call is a no-op. Safe
- * to call at the top of every script that touches data.
+ * Idempotent: a no-op if the pool is already open.
  */
 import { initPg, isPgConnected } from './NodePool.js';
-/**
- * Ensure Postgres infrastructure is initialised. Safe to call multiple
- * times. Throws on unrecoverable config errors (no DATABASE_URL,
- * login rejected, etc.). The thrown error comes straight from
- * `ensureInfra` so the caller sees the real reason.
- */
 export async function bootstrapInfra(): Promise<void> {
   if (isPgConnected()) return;
-  // ensureInfra lives under ../cli/ so we pull it in via dynamic
-  // import. That keeps the static import graph of `ugly-app/server`
-  // clean — nothing in the server runtime has to depend on the CLI
-  // layer unless user code asks for it via bootstrapInfra.
-  const { ensureInfra } = await import('../cli/ensureInfra.js');
-  await ensureInfra();
   await initPg();
 }

package/src/shared/DB.ts CHANGED Viewed

@@ -410,8 +410,6 @@ export const ErrorLogDocSchema = z.object({
     sessionId: z.string().optional(),
     buildId: z.string().optional(),
     projectId: z.string().optional(),
-    /** Set on rows captured via a dev-tunnel data-proxy connection. Null/missing for deployed-server rows. */
-    devTunnelId: z.string().nullable().optional(),
   }),
   message: z.string(),
   stack: z.string().nullable().optional(),
@@ -449,13 +447,6 @@ export interface ErrorLogListInput {
   type?: ErrorLogType;
   userId?: string;
   projectId?: string;
-  /**
-   * Filter by dev-tunnel ownership.
-   * - String → only rows from that dev's tunnel sessions.
-   * - 'none' → only rows from deployed servers (devTunnelId IS NULL).
-   * - Omitted → no filter applied.
-   */
-  devTunnelId?: string | 'none';
   startDate?: number;
   endDate?: number;
   cursor?: number;
@@ -501,8 +492,6 @@ export const PerfLogSchema = z.object({
   operation: z.string(),
   durationMs: z.number(),
   userId: z.string(),
-  /** Set on rows captured via a dev-tunnel data-proxy connection. Null/missing for deployed-server rows. */
-  devTunnelId: z.string().nullable().optional(),
 });
 export type PerfLog = InferDocType<typeof PerfLogSchema>;
@@ -627,13 +616,53 @@ export interface EventLog {
 // Builtin collection defs (no user — apps define their own)
 // ---------------------------------------------------------------------------
-// All logging collections (errorLog, perfLog, eventLog, eventCounter) are
-// proxied to ugly.bot — no local tables needed.
-//
-// Auth collections (authMagicLink, authIdentity) are local: they back the
-// app-issued session flow when .uglyapp `auth.mode === 'self'`. With
-// `auth.mode === 'uglybot'` (the default) these tables stay empty.
+// Built-in collections owned by every ugly-app project:
+// - errorLog / perfLog / feedbackReport: runtime diagnostics, written by
+//   Logging.ts and surfaced via the `ugly-app errors` / `perf` / `feedback`
+//   CLI commands and Studio panels.
+// - authMagicLink / authIdentity: local back-store for the app-issued
+//   session flow when .uglyapp `auth.mode === 'self'`. With
+//   `auth.mode === 'uglybot'` (the default) these tables stay empty.
 export const BUILTIN_DEFS = defineCollections({
+  errorLog: {
+    schema: ErrorLogDocSchema,
+    meta: {
+      cache: false,
+      trackable: false,
+      public: false,
+      cascadeFrom: null,
+    },
+    indexes: [
+      { fields: { 'meta.level': 1 } },
+      { fields: { 'meta.userId': 1 } },
+    ],
+  },
+  perfLog: {
+    schema: PerfLogSchema,
+    meta: {
+      cache: false,
+      trackable: false,
+      public: false,
+      cascadeFrom: null,
+    },
+    indexes: [
+      { fields: { operation: 1 } },
+      { fields: { userId: 1 } },
+    ],
+  },
+  feedbackReport: {
+    schema: FeedbackReportDocSchema,
+    meta: {
+      cache: false,
+      trackable: false,
+      public: false,
+      cascadeFrom: null,
+    },
+    indexes: [
+      { fields: { userId: 1 } },
+      { fields: { status: 1 } },
+    ],
+  },
   authMagicLink: {
     schema: z.object({
       email: z.string(),

package/src/vite/index.ts CHANGED Viewed

	@@ -1,2 +1 @@
1 1	export { dataSourcePlugin } from './dataSourcePlugin.js';
2	- export { tunnelPlugin } from './tunnelPlugin.js';

package/.pgdata/base/1/pg_internal.init DELETED Viewed

Binary file

package/.pgdata/base/17702/pg_internal.init DELETED Viewed

Binary file

package/.pgdata/base/5/pg_internal.init DELETED Viewed

Binary file

package/dist/cli/devTunnel.d.ts DELETED Viewed

@@ -1,37 +0,0 @@
-/**
- * devTunnel.ts
- *
- * Combined dev tunnel client: multiplexes infrastructure TCP ports (Postgres,
- * NATS, S3, Qdrant) over binary frames AND handles proxy tunnel HTTP/WS relay
- * for public dev URLs — all on a single WebSocket to /dev-tunnel.
- *
- * Binary frames = infra tunnel (5-byte header + TCP payload)
- * Text frames = proxy tunnel (JSON messages for HTTP/WS relay)
- */
-import type { SidecarPorts } from './sidecarHealth.js';
-export interface StartDevTunnelOpts {
-    projectId: string;
-    token: string;
-    /** Defaults to UGLY_BOT_WS_URL */
-    serverUrl?: string;
-    /** When set, enables proxy tunnel relay to this local port */
-    vitePort?: number;
-    /**
-     * Optional studio session id (`ws_x:sess_y`). When set, the server
-     * scopes the proxy subdomain to this session so two concurrent dev
-     * servers on the same project don't collide on the same registration.
-     */
-    sessionId?: string;
-}
-export interface DevTunnelResult extends SidecarPorts {
-    /** Public subdomain if proxy tunnel registered (e.g. 'proxy-user-myapp') */
-    subdomain?: string;
-}
-/**
- * Start the dev tunnel: opens WSS connection and binds ephemeral TCP ports.
- * If vitePort is provided, also registers a proxy tunnel for public URL access.
- */
-export declare function startDevTunnel(opts: StartDevTunnelOpts): Promise<DevTunnelResult>;
-/** Stop the dev tunnel: close WS, all TCP servers and sockets. */
-export declare function stopDevTunnel(): void;
-//# sourceMappingURL=devTunnel.d.ts.map

package/dist/cli/devTunnel.d.ts.map DELETED Viewed

@@ -1 +0,0 @@

- {"version":3,"file":"devTunnel.d.ts","sourceRoot":"","sources":["../../src/cli/devTunnel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAUvD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA8BD;;;GAGG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CA0DvF;AAwaD,kEAAkE;AAClE,wBAAgB,aAAa,IAAI,IAAI,CA6BpC"}