unplugin-cloudflare-tunnel 0.0.5 → 0.1.0

package/.github/README.md

@@ -29,16 +29,80 @@ npm add unplugin-cloudflare-tunnel
 
 ## Usage
 
+### Modes
+
+The plugin supports two modes:
+
+- **Quick mode**: temporary `trycloudflare.com` URL, no Cloudflare credentials required
+- **Named mode**: persistent tunnel on your own hostname
+
+Mode selection rules:
+
+- `mode: 'quick'` → always quick mode
+- `mode: 'named'` → always named mode, requires `hostname`
+- if `mode` is omitted:
+  - `hostname` provided → named mode
+  - otherwise → quick mode
+
+### Common options
+
+- `mode?: 'quick' | 'named'`
+- `protocol?: 'http2' | 'quic'` — defaults to `http2` for better local dev reliability
+- `logLevel?: 'debug' | 'info' | 'warn' | 'error' | 'fatal'`
+- `port?: number`
+- `logFile?: string`
+- `debug?: boolean`
+- `enabled?: boolean`
+
+### Quick mode example
+
+```ts
+// vite.config.ts
+import { defineConfig } from 'vite'
+import CloudflareTunnel from 'unplugin-cloudflare-tunnel/vite'
+
+export default defineConfig({
+  plugins: [
+    CloudflareTunnel({
+      mode: 'quick',
+      protocol: 'http2',
+    }),
+  ],
+})
+```
+
+### Named mode example
+
+```ts
+// vite.config.ts
+import { defineConfig } from 'vite'
+import CloudflareTunnel from 'unplugin-cloudflare-tunnel/vite'
+
+export default defineConfig({
+  plugins: [
+    CloudflareTunnel({
+      mode: 'named',
+      hostname: 'dev.example.com',
+      apiToken: process.env.CLOUDFLARE_API_TOKEN,
+      protocol: 'http2',
+    }),
+  ],
+})
+```
+
 <details>
 <summary>Vite</summary><br>
 
 ```ts
 // vite.config.ts
+import { defineConfig } from 'vite'
 import CloudflareTunnel from 'unplugin-cloudflare-tunnel/vite'
 
 export default defineConfig({
   plugins: [
-    CloudflareTunnel(),
+    CloudflareTunnel({
+      mode: 'quick',
+    }),
   ],
 })
 ```
@@ -134,6 +198,12 @@ Or create a `virtual.d.ts` file in your project:
 - **Named tunnel mode**: Returns your custom domain URL like `https://dev.example.com`
 - **Plugin disabled**: Returns an empty string `""`
 
+### Notes on modes
+
+- Named-only options such as `hostname`, `apiToken`, `accountId`, `zoneId`, `tunnelName`, `dns`, `ssl`, and `cleanup` are only valid in named mode.
+- Quick mode ignores Cloudflare account setup entirely and creates an ephemeral tunnel.
+- `protocol` applies to both quick and named modes.
+
 ### Notes
 
 - The virtual module is only available during development mode

package/dist/api.d.mts

@@ -21,6 +21,9 @@ declare const AccountSchema: ZodMiniObject<{
 declare const ZoneSchema: ZodMiniObject<{
   id: ZodMiniString<string>;
   name: ZodMiniString<string>;
+  account: ZodMiniOptional<ZodMiniObject<{
+    id: ZodMiniString<string>;
+  }, $strip>>;
 }, $strip>;
 declare const TunnelSchema: ZodMiniObject<{
   id: ZodMiniString<string>;

package/dist/api.mjs

@@ -18,7 +18,8 @@ const AccountSchema = object({
 });
 const ZoneSchema = object({
 	id: string(),
-	name: string()
+	name: string(),
+	account: optional(object({ id: string() }))
 });
 const TunnelSchema = object({
 	id: string(),

package/dist/index.d.mts

@@ -29,6 +29,9 @@ declare const AccountSchema: ZodMiniObject<{
 declare const ZoneSchema: ZodMiniObject<{
   id: ZodMiniString<string>;
   name: ZodMiniString<string>;
+  account: ZodMiniOptional<ZodMiniObject<{
+    id: ZodMiniString<string>;
+  }, $strip>>;
 }, $strip>;
 declare const TunnelSchema: ZodMiniObject<{
   id: ZodMiniString<string>;
@@ -56,6 +59,15 @@ type DNSRecord = output<typeof DNSRecordSchema>;
  * Base configuration options shared between named and quick tunnel modes
  */
 interface BaseTunnelOptions {
+  /**
+   * Tunnel mode.
+   * - `quick`: temporary `trycloudflare.com` URL, no hostname required
+   * - `named`: persistent tunnel using your configured hostname
+   *
+   * When omitted, the plugin uses named mode if `hostname` is provided,
+   * otherwise it uses quick mode.
+   */
+  mode?: 'quick' | 'named';
   /**
    * Local port your dev server listens on
    * If not specified, will automatically use the bundler's configured port
@@ -68,10 +80,19 @@ interface BaseTunnelOptions {
    */
   logFile?: string;
   /**
-   * Log level for cloudflared process
-   * @default undefined (uses cloudflared default)
+   * Log level for cloudflared output shown by the plugin.
+   * The plugin still runs cloudflared with at least `info` internally so it can
+   * detect tunnel readiness and print the tunnel URL.
+   * @default undefined
    */
   logLevel?: 'debug' | 'info' | 'warn' | 'error' | 'fatal';
+  /**
+   * Transport protocol used by cloudflared.
+   * `http2` is the default because it is more reliable for local development
+   * networks than QUIC.
+   * @default 'http2'
+   */
+  protocol?: 'http2' | 'quic';
   /**
    * Enable additional verbose logging for easier debugging.
    * When true, the plugin will output extra information prefixed with
@@ -158,8 +179,8 @@ interface QuickTunnelOptions extends BaseTunnelOptions {}
  * Configuration options for the Cloudflare Tunnel plugin
  *
  * Two modes are supported:
- * - Named tunnel mode: Provide `hostname` for a persistent tunnel with custom domain
- * - Quick tunnel mode: Omit `hostname` for a temporary tunnel with random trycloudflare.com URL
+ * - Named tunnel mode: set `mode: 'named'` or provide `hostname`
+ * - Quick tunnel mode: set `mode: 'quick'` or omit `hostname`
  */
 type CloudflareTunnelOptions = NamedTunnelOptions | QuickTunnelOptions;
 declare const CloudflareTunnel: UnpluginInstance<CloudflareTunnelOptions | undefined, false>;

package/dist/index.mjs

@@ -3,6 +3,7 @@ import { createUnplugin } from "unplugin";
 import NodeFS from "node:fs/promises";
 import { bin, install } from "cloudflared";
 import * as NodeChildProcess from "node:child_process";
+import * as NodeUtil from "node:util";
 //#region src/index.ts
 /**
 * @fileoverview Cloudflare Tunnel Unplugin
@@ -65,7 +66,8 @@ const AccountSchema = object({
 });
 const ZoneSchema = object({
 	id: string(),
-	name: string()
+	name: string(),
+	account: optional(object({ id: string() }))
 });
 const TunnelSchema = object({
 	id: string(),
@@ -105,7 +107,11 @@ const unpluginFactory = (options = {}) => {
 	globalThis[GLOBAL_STATE] = globalState;
 	let child = globalState.child;
 	const VIRTUAL_MODULE_ID = "virtual:unplugin-cloudflare-tunnel";
-	const isQuickMode = !("hostname" in options);
+	const requestedMode = options.mode;
+	if (requestedMode && !["quick", "named"].includes(requestedMode)) throw new Error("[unplugin-cloudflare-tunnel] mode must be one of: 'quick', 'named'");
+	const hasHostname = "hostname" in options && typeof options.hostname === "string";
+	const isQuickMode = requestedMode ? requestedMode === "quick" : !hasHostname;
+	if (requestedMode === "named" && !hasHostname) throw new Error("[unplugin-cloudflare-tunnel] hostname is required when mode is set to named");
 	if (isQuickMode) {
 		const invalidOptions = [
 			"apiToken",
@@ -116,7 +122,7 @@ const unpluginFactory = (options = {}) => {
 			"ssl",
 			"cleanup"
 		].filter((opt) => opt in options);
-		if (invalidOptions.length > 0) throw new Error(`[unplugin-cloudflare-tunnel] The following options are only supported in named tunnel mode (when hostname is provided): ${invalidOptions.join(", ")}. Either provide a hostname for named tunnel mode, or remove these options for quick tunnel mode.`);
+		if (invalidOptions.length > 0) throw new Error(`[unplugin-cloudflare-tunnel] The following options are only supported in named tunnel mode: ${invalidOptions.join(", ")}. Set mode to 'named' and provide a hostname, or remove these options for quick tunnel mode.`);
 	}
 	let providedApiToken;
 	let hostname;
@@ -140,11 +146,37 @@ const unpluginFactory = (options = {}) => {
 		sslOption = namedOptions.ssl;
 		cleanupConfig = namedOptions.cleanup || {};
 	}
-	const { port: userProvidedPort, logFile, logLevel, debug = false } = options;
+	const { port: userProvidedPort, logFile, logLevel, protocol = "http2", debug = false } = options;
 	const effectivePluginLogLevel = logLevel ?? (debug ? "debug" : "info");
+	const redactForDebug = (value) => {
+		if (typeof value === "string") {
+			if (value.startsWith("eyJ") && value.length > 40) return "[REDACTED_TOKEN]";
+			return value;
+		}
+		if (Array.isArray(value)) return value.map((item) => redactForDebug(item));
+		if (value && typeof value === "object") {
+			const entries = Object.entries(value).map(([key, nestedValue]) => {
+				if (/token|authorization|secret|password/i.test(key)) return [key, "[REDACTED]"];
+				return [key, redactForDebug(nestedValue)];
+			});
+			return Object.fromEntries(entries);
+		}
+		return value;
+	};
+	const formatDebugValue = (value) => {
+		const redactedValue = redactForDebug(value);
+		if (typeof redactedValue === "string") return redactedValue;
+		return NodeUtil.inspect(redactedValue, {
+			depth: null,
+			colors: supportsColor(),
+			compact: false,
+			breakLength: 120,
+			sorted: true
+		});
+	};
 	const pluginLog = {
 		debug: (...args) => {
-			if (debug || effectivePluginLogLevel === "debug") console.log("[cloudflare-tunnel:debug]", ...args);
+			if (debug || effectivePluginLogLevel === "debug") console.log("[cloudflare-tunnel:debug]", ...args.map((arg) => formatDebugValue(arg)));
 		},
 		info: (message) => {
 			if (shouldLog(effectivePluginLogLevel, "info")) console.log(`[unplugin-cloudflare-tunnel] ${message}`);
@@ -201,8 +233,6 @@ const unpluginFactory = (options = {}) => {
 		out.push(rule);
 		out.push(center(colorize("Tunnel URL", ANSI.bold)));
 		out.push(center(urlLine));
-		out.push(center(urlLine));
-		out.push(center(urlLine));
 		if (localLine) {
 			out.push("");
 			out.push(center(colorize("Local", ANSI.dim + ANSI.bold)));
@@ -224,13 +254,17 @@ const unpluginFactory = (options = {}) => {
 		"fatal"
 	].includes(logLevel)) throw new Error("[unplugin-cloudflare-tunnel] logLevel must be one of: debug, info, warn, error, fatal");
 	const effectiveLogLevel = logLevel ?? (debug ? "info" : "warn");
-	debugLog("Effective cloudflared log level:", effectiveLogLevel);
+	const cloudflaredProcessLogLevel = effectiveLogLevel === "debug" ? "debug" : "info";
+	debugLog("Effective cloudflared log level filter:", effectiveLogLevel);
+	debugLog("Effective cloudflared process log level:", cloudflaredProcessLogLevel);
+	debugLog("Effective cloudflared protocol:", protocol);
 	if (dnsOption) {
 		if (!dnsOption.startsWith("*.") && dnsOption !== hostname) throw new Error("[unplugin-cloudflare-tunnel] dns option must either be a wildcard (e.g., '*.example.com') or exactly match the hostname");
 	}
 	if (sslOption) {
 		if (!sslOption.startsWith("*.") && sslOption !== hostname) throw new Error("[unplugin-cloudflare-tunnel] ssl option must either be a wildcard (e.g., '*.example.com') or exactly match the hostname");
 	}
+	if (!["http2", "quic"].includes(protocol)) throw new Error("[unplugin-cloudflare-tunnel] protocol must be one of: 'http2', 'quic'");
 	const trackSslCertificate = (certificateId, hosts, tunnelName, timestamp = (/* @__PURE__ */ new Date()).toISOString()) => {
 		const trackingKey = `ssl-cert-${certificateId}`;
 		globalState[trackingKey] = {
@@ -360,10 +394,11 @@ const unpluginFactory = (options = {}) => {
 			await new Promise((resolve) => setTimeout(resolve, delay));
 		}
 	};
-	const spawnQuickTunnel = async (localTarget) => {
+	const spawnQuickTunnel = async (localTarget, protocol) => {
 		const cloudflaredArgs = ["tunnel"];
 		cloudflaredArgs.push("--loglevel", "info");
 		if (logFile) cloudflaredArgs.push("--logfile", logFile);
+		cloudflaredArgs.push("--protocol", protocol);
 		cloudflaredArgs.push("--url", localTarget);
 		debugLog("Spawning quick tunnel:", bin, cloudflaredArgs);
 		const child = NodeChildProcess.spawn(bin, cloudflaredArgs, {
@@ -379,8 +414,24 @@ const unpluginFactory = (options = {}) => {
 		debugLog(`[unplugin-cloudflare-tunnel] Quick tunnel process spawned with PID: ${child.pid}`);
 		return new Promise((resolve, reject) => {
 			let urlFound = false;
+			let settled = false;
+			const rejectOnce = (error) => {
+				if (settled) return;
+				settled = true;
+				reject(error);
+			};
+			const resolveOnce = (result) => {
+				if (settled) return;
+				settled = true;
+				resolve(result);
+			};
 			const timeout = setTimeout(() => {
-				if (!urlFound) reject(/* @__PURE__ */ new Error("Quick tunnel URL not found in output within 30 seconds"));
+				if (!urlFound) {
+					try {
+						child.kill("SIGTERM");
+					} catch {}
+					rejectOnce(/* @__PURE__ */ new Error("Quick tunnel URL not found in output within 30 seconds"));
+				}
 			}, 3e4);
 			child.stdout?.on("data", (data) => {
 				const output = data.toString();
@@ -395,7 +446,7 @@ const unpluginFactory = (options = {}) => {
 				if (urlMatch && !urlFound) {
 					urlFound = true;
 					clearTimeout(timeout);
-					resolve({
+					resolveOnce({
 						child,
 						url: urlMatch[0]
 					});
@@ -411,11 +462,11 @@ const unpluginFactory = (options = {}) => {
 			});
 			child.on("error", (error) => {
 				clearTimeout(timeout);
-				reject(/* @__PURE__ */ new Error(`Failed to start quick tunnel process: ${error.message}`));
+				rejectOnce(/* @__PURE__ */ new Error(`Failed to start quick tunnel process: ${error.message}`));
 			});
 			child.on("exit", (code, signal) => {
 				clearTimeout(timeout);
-				if (!urlFound) reject(/* @__PURE__ */ new Error(`Quick tunnel process exited before URL was found (code: ${code}, signal: ${signal})`));
+				if (!urlFound) rejectOnce(/* @__PURE__ */ new Error(`Quick tunnel process exited before URL was found (code: ${code}, signal: ${signal})`));
 			});
 		});
 	};
@@ -525,11 +576,12 @@ const unpluginFactory = (options = {}) => {
 				const localTarget = getLocalTarget(serverHost, port);
 				debugLog("← Quick tunnel connecting to local target", localTarget);
 				try {
-					const { child: quickChild, url } = await spawnQuickTunnel(localTarget);
+					const { child: quickChild, url } = await spawnQuickTunnel(localTarget, protocol);
 					tunnelUrl = url;
 					child = quickChild;
 					globalState.child = child;
 					globalState.configHash = newConfigHash;
+					globalState.tunnelUrl = Promise.resolve(url);
 					registerExitHandler();
 					registerListeningHandler(() => {
 						const { host: actualServerHost, port: actualPort } = normalizeAddress(server.httpServer?.address());
@@ -549,10 +601,11 @@ const unpluginFactory = (options = {}) => {
 								killCloudflared("SIGTERM");
 								await new Promise((resolve) => setTimeout(resolve, 1e3));
 								const newLocalTarget = getLocalTarget(actualServerHost, actualPort ?? port);
-								const { child: newChild, url: newUrl } = await spawnQuickTunnel(newLocalTarget);
+								const { child: newChild, url: newUrl } = await spawnQuickTunnel(newLocalTarget, protocol);
 								tunnelUrl = newUrl;
 								child = newChild;
 								globalState.child = child;
+								globalState.tunnelUrl = Promise.resolve(newUrl);
 								announceTunnel({
 									key: `quick:${newUrl}:${actualPort ?? port}`,
 									url: newUrl,
@@ -585,13 +638,11 @@ const unpluginFactory = (options = {}) => {
 			if (!apiToken) throw new Error("[unplugin-cloudflare-tunnel] API token is required. Provide it via 'apiToken' option or set the CLOUDFLARE_API_TOKEN environment variable. Get your token at: https://dash.cloudflare.com/profile/api-tokens");
 			debugLog(`[unplugin-cloudflare-tunnel] Using port ${port}${userProvidedPort === port ? " (user-provided)" : " (from bundler config)"}`);
 			await ensureCloudflaredBinary(bin);
-			const accounts = await cf(apiToken, "GET", "/accounts", void 0, array(AccountSchema));
-			const accountId = forcedAccount || accounts[0]?.id;
-			if (!accountId) throw new Error("Unable to determine Cloudflare account ID");
 			const apexDomain = hostname.split(".").slice(-2).join(".");
 			const parentDomain = hostname.split(".").slice(1).join(".");
 			debugLog("← Apex domain", apexDomain);
 			debugLog("← Parent domain", parentDomain);
+			let resolvedZone;
 			let zoneId = forcedZone;
 			if (!zoneId) {
 				let zones = [];
@@ -601,8 +652,12 @@ const unpluginFactory = (options = {}) => {
 					debugLog("← Error fetching zone for parent domain", error);
 				}
 				if (zones.length === 0) zones = await cf(apiToken, "GET", `/zones?name=${apexDomain}`, void 0, array(ZoneSchema));
-				zoneId = zones[0]?.id;
+				resolvedZone = zones[0];
+				zoneId = resolvedZone?.id;
 			}
+			let accountId = forcedAccount || resolvedZone?.account?.id;
+			if (!accountId) accountId = (await cf(apiToken, "GET", "/accounts", void 0, array(AccountSchema)))[0]?.id;
+			if (!accountId) throw new Error("Unable to determine Cloudflare account ID");
 			if (!zoneId) throw new Error(`Zone ${apexDomain} not found in account ${accountId}`);
 			const { autoCleanup = true } = cleanupConfig;
 			let tunnel = (await cf(apiToken, "GET", `/accounts/${accountId}/cfd_tunnel?name=${tunnelName}`, void 0, array(TunnelSchema)))[0];
@@ -726,26 +781,17 @@ const unpluginFactory = (options = {}) => {
 				console.error(`[unplugin-cloudflare-tunnel] ⚠️  SSL management error: ${sslError.message}`);
 				throw sslError;
 			}
-			const cloudflaredArgs = ["tunnel"];
-			cloudflaredArgs.push("--loglevel", effectiveLogLevel);
-			if (logFile) cloudflaredArgs.push("--logfile", logFile);
-			debugLog("Spawning cloudflared", bin, cloudflaredArgs);
-			cloudflaredArgs.push("run", "--token", token);
-			child = NodeChildProcess.spawn(bin, cloudflaredArgs, {
-				stdio: [
-					"ignore",
-					"pipe",
-					"pipe"
-				],
-				detached: false,
-				windowsHide: true,
-				shell: process.platform === "win32"
-			});
-			debugLog(`[unplugin-cloudflare-tunnel] Process spawned with PID: ${child.pid}`);
-			globalState.child = child;
-			globalState.configHash = newConfigHash;
-			registerExitHandler();
 			let tunnelReady = false;
+			let localTargetForAnnouncement = localTarget;
+			let activeTunnelProtocol;
+			const announceNamedTunnelIfReady = () => {
+				if (!tunnelReady) return;
+				announceTunnel({
+					key: `named:${hostname}:${localTargetForAnnouncement}`,
+					url: `https://${hostname}`,
+					localTarget: localTargetForAnnouncement
+				});
+			};
 			const logCloudflaredLines = (kind, text) => {
 				if (globalState.shuttingDown && !debug) return;
 				const isVerbose = effectiveLogLevel === "debug" || effectiveLogLevel === "info";
@@ -765,42 +811,70 @@ const unpluginFactory = (options = {}) => {
 					else console.error(`${prefix} ${line}`);
 				}
 			};
-			child.stdout?.on("data", (data) => {
-				const output = data.toString();
-				logCloudflaredLines("stdout", output);
-				if (output.includes("Connection") && output.includes("registered")) {
-					if (!tunnelReady) {
-						tunnelReady = true;
-						pluginLog.info(`Tunnel connected for https://${hostname}`);
+			const spawnNamedTunnelProcess = (protocol) => {
+				const cloudflaredArgs = ["tunnel"];
+				cloudflaredArgs.push("--loglevel", cloudflaredProcessLogLevel);
+				if (logFile) cloudflaredArgs.push("--logfile", logFile);
+				cloudflaredArgs.push("--protocol", protocol);
+				debugLog("Spawning cloudflared", bin, cloudflaredArgs);
+				const spawnedChild = NodeChildProcess.spawn(bin, [
+					...cloudflaredArgs,
+					"run",
+					"--token",
+					token
+				], {
+					stdio: [
+						"ignore",
+						"pipe",
+						"pipe"
+					],
+					detached: false,
+					windowsHide: true,
+					shell: process.platform === "win32"
+				});
+				child = spawnedChild;
+				globalState.child = spawnedChild;
+				globalState.configHash = newConfigHash;
+				debugLog(`[unplugin-cloudflare-tunnel] Process spawned with PID: ${spawnedChild.pid}`);
+				const handleCloudflaredOutput = (kind, text) => {
+					if (text.includes("Failed to parse ICMP reply") || text.includes("unknow ip version 0")) {
+						if (logLevel === "debug") console.log(`[cloudflared debug] ${text.trim()}`);
+						return;
 					}
-				}
-			});
-			child.stderr?.on("data", (data) => {
-				const error = data.toString().trim();
-				if (error.includes("Failed to parse ICMP reply") || error.includes("unknow ip version 0")) {
-					if (logLevel === "debug") console.log(`[cloudflared debug] ${error}`);
-					return;
-				}
-				logCloudflaredLines("stderr", error);
-			});
-			child.on("error", (error) => {
-				console.error(`[unplugin-cloudflare-tunnel] ❌ Failed to start tunnel process: ${error.message}`);
-				if (error.message.includes("ENOENT")) console.error(`[unplugin-cloudflare-tunnel] Hint: cloudflared binary may not be installed correctly`);
-			});
-			child.on("exit", (code, signal) => {
-				if (code !== 0 && code !== null) {
-					console.error(`[unplugin-cloudflare-tunnel] ❌ Tunnel process exited with code ${code}`);
-					if (signal) console.error(`[unplugin-cloudflare-tunnel] Process terminated by signal: ${signal}`);
-				} else if (code === 0) console.log(`[unplugin-cloudflare-tunnel] ✅ Tunnel process exited cleanly`);
-			});
+					logCloudflaredLines(kind, text);
+					if (/registered tunnel connection|connection.*registered/i.test(text)) {
+						activeTunnelProtocol = protocol;
+						if (!tunnelReady) {
+							tunnelReady = true;
+							pluginLog.info(`Tunnel connected for https://${hostname} via ${protocol.toUpperCase()}`);
+						}
+						announceNamedTunnelIfReady();
+					}
+				};
+				spawnedChild.stdout?.on("data", (data) => {
+					handleCloudflaredOutput("stdout", data.toString());
+				});
+				spawnedChild.stderr?.on("data", (data) => {
+					handleCloudflaredOutput("stderr", data.toString());
+				});
+				spawnedChild.on("error", (error) => {
+					console.error(`[unplugin-cloudflare-tunnel] ❌ Failed to start tunnel process: ${error.message}`);
+					if (error.message.includes("ENOENT")) console.error(`[unplugin-cloudflare-tunnel] Hint: cloudflared binary may not be installed correctly`);
+				});
+				spawnedChild.on("exit", (code, signal) => {
+					if (globalState.child !== spawnedChild) return;
+					if (code !== 0 && code !== null) {
+						console.error(`[unplugin-cloudflare-tunnel] ❌ Tunnel process exited with code ${code}`);
+						if (signal) console.error(`[unplugin-cloudflare-tunnel] Process terminated by signal: ${signal}`);
+					} else if (code === 0) console.log(`[unplugin-cloudflare-tunnel] ✅ Tunnel process exited cleanly`);
+				});
+			};
+			spawnNamedTunnelProcess(protocol);
+			registerExitHandler();
 			registerListeningHandler(() => {
 				const { host: actualServerHost, port: actualPort } = normalizeAddress(server.httpServer?.address());
-				const actualLocalTarget = getLocalTarget(actualServerHost, actualPort ?? port);
-				announceTunnel({
-					key: `named:${hostname}:${actualPort ?? port}`,
-					url: `https://${hostname}`,
-					localTarget: actualLocalTarget
-				});
+				localTargetForAnnouncement = getLocalTarget(actualServerHost, actualPort ?? port);
+				announceNamedTunnelIfReady();
 			});
 			server.httpServer?.once("close", () => {
 				killCloudflared("SIGTERM");
@@ -812,6 +886,7 @@ const unpluginFactory = (options = {}) => {
 						pluginLog.warn(`Port conflict detected - server is using port ${actualPort} instead of ${port}`);
 						pluginLog.info("Updating tunnel configuration...");
 						const newLocalTarget = getLocalTarget(actualServerHost, actualPort ?? port);
+						localTargetForAnnouncement = newLocalTarget;
 						debugLog("← Updating local target to", newLocalTarget);
 						await cf(apiToken, "PUT", `/accounts/${accountId}/cfd_tunnel/${tunnelId}/configurations`, { config: { ingress: [{
 							hostname,
@@ -825,6 +900,8 @@ const unpluginFactory = (options = {}) => {
 							dnsOption,
 							sslOption
 						});
+						if (tunnelReady && activeTunnelProtocol) pluginLog.info(`Tunnel remains connected via ${activeTunnelProtocol.toUpperCase()} after port update`);
+						announceNamedTunnelIfReady();
 					}
 				} catch (error) {
 					console.error(`[unplugin-cloudflare-tunnel] ❌ Failed to update tunnel for port change: ${error.message}`);
@@ -871,6 +948,18 @@ const unpluginFactory = (options = {}) => {
 		}
 		if (modified) debugLog(`[unplugin-cloudflare-tunnel] Configured ${label} devServer.allowedHosts to include ${hostToAllow}`);
 	};
+	const ensureViteAllowedHosts = (serverConfig) => {
+		const hostToAllow = isQuickMode ? ".trycloudflare.com" : hostname;
+		if (!hostToAllow) return;
+		const current = serverConfig.allowedHosts;
+		if (current === true) return;
+		if (typeof current === "undefined") serverConfig.allowedHosts = [hostToAllow];
+		else if (typeof current === "string") {
+			if (current !== hostToAllow) serverConfig.allowedHosts = [current, hostToAllow];
+		} else if (Array.isArray(current)) {
+			if (!current.includes(hostToAllow)) current.push(hostToAllow);
+		}
+	};
 	const setupWebpackLikeDevServerIntegration = (compiler, bundler) => {
 		if ((compiler?.options?.mode ?? process.env.NODE_ENV) === "production") return;
 		const optionsContainer = compiler.options;
@@ -952,19 +1041,8 @@ const unpluginFactory = (options = {}) => {
 			config: (config) => {
 				announceConnecting();
 				if (!config.server) config.server = {};
-				if (isQuickMode) {
-					config.server.allowedHosts = [".trycloudflare.com"];
-					return;
-				}
-				if (!config.server.allowedHosts) {
-					config.server.allowedHosts = [hostname];
-					debugLog(`[unplugin-cloudflare-tunnel] Configured Vite to allow requests from ${hostname}`);
-				} else if (Array.isArray(config.server.allowedHosts)) {
-					if (!config.server.allowedHosts.includes(hostname)) {
-						config.server.allowedHosts.push(hostname);
-						debugLog(`[unplugin-cloudflare-tunnel] Added ${hostname} to allowed hosts`);
-					}
-				}
+				ensureViteAllowedHosts(config.server);
+				if (!isQuickMode) debugLog(`[unplugin-cloudflare-tunnel] Configured Vite to allow requests from ${hostname}`);
 			},
 			configureServer: (server) => {
 				const configuredPromise = configureServer(server);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unplugin-cloudflare-tunnel",
-  "version": "0.0.5",
+  "version": "0.1.0",
   "description": "A plugin that automatically creates and manages Cloudflare tunnels for local development",
   "type": "module",
   "imports": {
@@ -54,26 +54,26 @@
   },
   "devDependencies": {
     "@arethetypeswrong/core": "^0.18.2",
-    "@biomejs/biome": "^2.4.10",
+    "@biomejs/biome": "^2.4.12",
     "@changesets/changelog-github": "^0.6.0",
     "@changesets/cli": "^2.30.0",
     "@j178/prek": "^0.3.8",
     "@rspack/core": "^1.7.11",
     "@sxzz/test-utils": "^0.5.16",
     "@total-typescript/ts-reset": "^0.6.1",
-    "@types/bun": "^1.3.11",
-    "@types/node": "^25.5.2",
-    "@typescript/native-preview": "^7.0.0-dev.20260406.1",
+    "@types/bun": "^1.3.12",
+    "@types/node": "^25.6.0",
+    "@typescript/native-preview": "^7.0.0-dev.20260414.1",
     "publint": "^0.3.18",
     "rollup": "^4.60.1",
     "simple-git-hooks": "^2.13.1",
-    "tsdown": "^0.21.7",
+    "tsdown": "^0.21.8",
     "tsx": "^4.21.0",
     "typescript": "^6.0.2",
     "unplugin-unused": "^0.5.7",
     "unplugin-utils": "^0.3.1",
-    "vite": "^8.0.5",
-    "vitest": "^4.1.2",
+    "vite": "^8.0.8",
+    "vitest": "^4.1.4",
     "webpack-dev-server": "^5.2.3",
     "zod": "^4.3.6"
   },
@@ -126,7 +126,7 @@
     "farm",
     "astro"
   ],
-  "packageManager": "bun@1.3.11",
+  "packageManager": "bun@1.3.12",
   "simple-git-hooks": {
     "pre-commit": "bun prek run --all-files --config='.github/.pre-commit.yml'"
   },