unplugin-https-reverse-proxy 4.0.3 → 4.1.0-beta.10

package/README.md

@@ -314,15 +314,39 @@ Please check [caddy path](https://github.com/zcf0508/unplugin-https-reverse-prox
 ## Usage
 
 ```bash
-# macOS
-sudo -E npm run dev # your dev script
-#    ^ `-E` is important
-
-# windows
-# use powershell as administrator
+# macOS / Linux / Windows
 npm run dev # your dev script
 ```
 
+Run it as your normal user. The plugin starts a small privileged helper that
+runs as administrator, and only that helper touches `/etc/hosts` and ports
+80/443. Your dev server, its caches and `node_modules` stay owned by you.
+
+On macOS and Linux the plugin asks for your password once when the dev server
+starts, then reuses the sudo credential for the rest of the session. If you
+already ran `sudo -v` in the same terminal, no prompt is shown.
+
+The helper restores the hosts entries by itself when the dev server exits,
+including when it is killed or crashes.
+
+### Granting the permission once (optional)
+
+To skip the password prompt entirely, allow the plugin's helper in
+`/etc/sudoers.d/` (edit with `sudo visudo -f /etc/sudoers.d/uhrp`):
+
+```
+yourname ALL=(root) NOPASSWD: /usr/bin/killall -HUP mDNSResponder
+yourname ALL=(root) NOPASSWD: /usr/bin/install -m 644 -o root -g wheel /tmp/uhrp-hosts.* /etc/hosts
+```
+
+The second rule only matters when the helper rewrites `/etc/hosts` through
+`install`; adjust the paths to your platform.
+
+### Windows
+
+Run `npm run dev` normally. Windows raises a UAC prompt once, when the helper
+is started through `Start-Process -Verb RunAs`.
+
 If your broswer shows a not trusted certificate warning, please check the keychain.
 
 ![keychain](https://github.com/zcf0508/unplugin-https-reverse-proxy/blob/main/images/Snipaste_2023-11-16_16-59-55.png)

package/dist/{chunk-RSBXFJ3Z.js → chunk-C5A7XLKL.js}

@@ -99,10 +99,16 @@ function handleClientMessage(req, res, server) {
     }
   });
 }
+function shouldUseHmrSseBridge(protocol, userAgent) {
+  if (protocol !== "https:")
+    return false;
+  const isApplePlatform = /Macintosh|iPhone|iPad|iPod/.test(userAgent);
+  const isSafari = /Version\//.test(userAgent) && /Safari\//.test(userAgent) && !/(?:Chrome|Chromium|CriOS|Edg|EdgiOS|OPR|OPiOS|Firefox|FxiOS)\//.test(userAgent);
+  return isApplePlatform && isSafari;
+}
 var hmrSseBridgeClientScript = `
 (function() {
-  // Activate when served over HTTPS to bypass WSS self-signed cert issues
-  if (location.protocol !== 'https:') return;
+  if (!(${shouldUseHmrSseBridge.toString()})(location.protocol, navigator.userAgent)) return;
 
   var OriginalWebSocket = window.WebSocket;
 
@@ -228,5 +234,6 @@ var hmrSseBridgeClientScript = `
 
 export {
   setupHmrSseBridge,
+  shouldUseHmrSseBridge,
   hmrSseBridgeClientScript
 };

package/dist/{chunk-2P7SUCQ3.js → chunk-EY3HXBJ4.js}

@@ -1,23 +1,11 @@
 // src/utils.ts
-import { execSync } from "node:child_process";
-import { chmod, readdir, stat } from "node:fs/promises";
 import { networkInterfaces } from "node:os";
-import path from "node:path";
-import process from "node:process";
 import { createConsola } from "consola";
 import c from "picocolors";
 import qrcode from "qrcode-terminal";
 var consola = createConsola({
   level: 3
 }).withTag("reverse-proxy");
-async function chmodRecursive(_path, mode) {
-  await chmod(_path, mode);
-  if ((await stat(_path)).isDirectory()) {
-    const children = await readdir(_path);
-    for (const child of children)
-      await chmodRecursive(path.join(_path, child), mode);
-  }
-}
 function once(fn) {
   let called = false;
   return (...args) => {
@@ -27,18 +15,6 @@ function once(fn) {
     return fn(...args);
   };
 }
-function isAdmin() {
-  if (process.platform === "win32") {
-    try {
-      execSync("net session", { stdio: "ignore" });
-      return true;
-    } catch {
-      return false;
-    }
-  } else {
-    return !!(process.getuid && process.getuid() === 0);
-  }
-}
 function getIpv4List() {
   const interfaces = networkInterfaces();
   return Object.values(interfaces).flatMap((nInterface) => nInterface ?? []).filter(
@@ -55,9 +31,7 @@ async function generateQrcode(input) {
 
 export {
   consola,
-  chmodRecursive,
   once,
-  isAdmin,
   getIpv4List,
   generateQrcode
 };

package/dist/chunk-RKHJN6KY.js

@@ -0,0 +1,53 @@
+// src/privileged/protocol.ts
+function serializeMessage(message) {
+  return `${JSON.stringify(message)}
+`;
+}
+function splitLines(buffer, chunk) {
+  const parts = (buffer + chunk).split("\n");
+  const rest = parts.pop() ?? "";
+  return { lines: parts.filter((line) => line.trim() !== ""), rest };
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+function decodeMessage(line) {
+  let parsed;
+  try {
+    parsed = JSON.parse(line);
+  } catch (error) {
+    return { ok: false, error: `invalid JSON: ${error.message}` };
+  }
+  if (!isRecord(parsed))
+    return { ok: false, error: "message must be an object" };
+  if (parsed.type === "event") {
+    if (typeof parsed.kind !== "string")
+      return { ok: false, error: "event.kind must be a string" };
+    return { ok: true, message: parsed };
+  }
+  if (typeof parsed.id !== "number")
+    return { ok: false, error: "response.id must be a number" };
+  if (parsed.ok === true)
+    return { ok: true, message: { id: parsed.id, ok: true, result: parsed.result } };
+  if (parsed.ok === false) {
+    const error = isRecord(parsed.error) ? parsed.error : {};
+    return {
+      ok: true,
+      message: {
+        id: parsed.id,
+        ok: false,
+        error: {
+          message: typeof error.message === "string" ? error.message : "helper request failed",
+          code: typeof error.code === "string" ? error.code : void 0
+        }
+      }
+    };
+  }
+  return { ok: false, error: "response.ok must be a boolean" };
+}
+
+export {
+  serializeMessage,
+  splitLines,
+  decodeMessage
+};