vite-plugin-io1 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Bitmot
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,94 @@
+# vite-plugin-io1
+
+Publish your Vite dev server to the public internet over a [bitmot io1](https://bitmot.com) relay: a
+stable, optionally email-gated HTTPS URL that hot-reloads as you edit. The plugin manages the `bitmot`
+CLI for you.
+
+While `vite dev` (or `vite preview`) runs, the plugin starts a `bitmot io1 relay` pointed at the
+server's real bound port and tears it down when the server stops. The public URL appears in the
+startup output.
+
+## Why
+
+- **Real HTTPS, real cert** so secure-context APIs (service workers, camera, WebCrypto) just work.
+- **Working HMR through the tunnel** -- the shared URL is your live dev server, not a static copy.
+- **Email-gated sharing** via `allowedEmails` makes a preview shared-but-not-public.
+- **No `server.allowedHosts` fuss** -- the relay presents the upstream's own Host, so Vite's host
+  check never trips.
+
+## Install
+
+```sh
+npm i -D vite-plugin-io1
+```
+
+You do **not** need to install the `bitmot` CLI first: the plugin downloads the current build for
+your platform on demand (content-addressed and checksum-verified) into `~/.cache/bitmot`. If you
+already have `bitmot` on your PATH, that copy is used instead.
+
+One-time per machine, authorize the CLI so the relay can claim hosts on your account:
+
+```sh
+bitmot io1 authorize
+```
+
+## Usage
+
+```ts
+// vite.config.ts
+import { defineConfig } from 'vite'
+import { io1 } from 'vite-plugin-io1'
+
+export default defineConfig({
+  plugins: [
+    io1({
+      host: process.env.IO1_DEV_HOST, // e.g. "🔥.io1.io" or "demo" (-> demo.io1.io)
+    }),
+  ],
+})
+```
+
+The plugin stays dormant unless a host is configured (via `host` or `$IO1_DEV_HOST`): publishing
+every dev server by default would be a bit dicey, and a hardcoded shared host collides between
+teammates. Point `IO1_DEV_HOST` at a per-developer host in your shell profile, or set `host`
+explicitly for a shared demo host.
+
+## Options
+
+| Option | Type | Default | Description |
+| --- | --- | --- | --- |
+| `host` | `string \| string[]` | `$IO1_DEV_HOST` | Host(s) to claim. A bare name is completed to `.io1.io`. |
+| `allowedEmails` | `string[]` | none | Restrict visitors to these verified emails. |
+| `account` | `string` | inferred | Account claim, when your identity has several memberships. |
+| `gateway` | `string` | production | Gateway WebSocket URL override (for a local/dev gateway). |
+| `bitmotPath` | `string` | resolved | Explicit CLI path; skips PATH lookup and download. |
+| `autoInstall` | `boolean` | `true` | Download the CLI when not found. `false` makes a miss an error. |
+| `baseUrl` | `string` | `https://bitmot.com` | Download origin for the CLI. |
+| `extraArgs` | `string[]` | none | Extra `bitmot io1 relay` flags, inserted before `--to`. |
+| `enabled` | `boolean` | on, unless CI or no host | Master switch. |
+
+## How the CLI stays current
+
+The `bitmot` CLI carries a version (`bitmot version`), and the gateway advertises the latest one on
+every relay handshake; run by hand, the CLI nudges you when you are out of date. That nudge is
+deliberately silent when its output is piped or `CI` is set -- that is, whenever this plugin runs it.
+So the plugin keeps the CLI current a different way: auto-download resolves the **currently deployed**
+bytes by content hash, so a plugin-managed CLI is always up to date and the nudge is moot. A CLI you
+installed yourself on your PATH is respected as-is and never replaced.
+
+## Caveats
+
+- **macOS and Linux** -- published binaries cover macOS (arm64/x86_64) and Linux (x86_64/aarch64).
+  Elsewhere (e.g. native Windows), install `bitmot` yourself (the plugin will use it) or set
+  `bitmotPath`.
+- **Middleware mode** (e.g. Nuxt) exposes no `httpServer` for the plugin to hook; not yet supported.
+- The relay is a child process tied to the dev server. A hard crash of the Vite process (SIGKILL) can
+  orphan it; a normal stop or Ctrl-C cleans it up.
+
+## Development
+
+```sh
+npm install
+npm test          # vitest: arg-building, announcement parsing, download+verify, spawn/kill lifecycle
+npm run build     # tsc -> dist
+```

package/dist/announce.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Pure argument-building and output-parsing for the bitmot io1 relay. Kept free of I/O so the wire
+ * contract with the CLI -- which flags it takes, and how it announces a live host -- is unit-tested
+ * in isolation and lives in one place.
+ */
+export interface RelayInvocation {
+    /** Hosts to claim, one `--host` each (the CLI appends across repeats). At least one. */
+    readonly hosts: readonly string[];
+    /** Allow-list emails; the CLI takes a single comma-separated `--allowed-emails`, not repeats. */
+    readonly allowedEmails?: readonly string[];
+    /** Account claim, when the identity has more than one membership. */
+    readonly account?: string;
+    /** Gateway WebSocket URL; omitted to use the CLI's baked-in production default. */
+    readonly gateway?: string;
+    /** Host header presented to the gateway; omitted to derive it from the gateway URL. */
+    readonly gatewayHost?: string;
+    /** Escape hatch for flags this plugin does not model (e.g. `--credential`). Inserted verbatim. */
+    readonly extraArgs?: readonly string[];
+    /** The local dev server to proxy to, e.g. `http://127.0.0.1:5173`. */
+    readonly to: string;
+}
+/**
+ * The full `bitmot io1 relay ...` argv (without the leading program name). `--allowed-emails` is
+ * comma-joined into a single flag because the CLI parses it as one comma-separated value; emitting
+ * repeats would make the native CLI keep only the last. `--to` goes last so the line reads as a claim
+ * of hosts proxied to a target.
+ */
+export declare function buildRelayArgs(invocation: RelayInvocation): string[];
+/**
+ * The public URL from a relay's per-host announcement line, or null for any other line. The relay
+ * prints one `<arrow> <url> live` line per claimed host once its link is up (uncolored when its
+ * stderr is piped, as it is under this plugin). Tolerant of the arrow glyph and surrounding spaces so
+ * both the native and JVM CLIs -- and any cached older build -- parse the same; the trailing `live`
+ * badge is what distinguishes it from the pending-requests and update-nudge lines, which also carry
+ * URLs but must not be mistaken for a live host.
+ */
+export declare function parseLiveUrl(line: string): string | null;
+//# sourceMappingURL=announce.d.ts.map

package/dist/announce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"announce.d.ts","sourceRoot":"","sources":["../src/announce.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,wFAAwF;IACxF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,iGAAiG;IACjG,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,qEAAqE;IACrE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,uFAAuF;IACvF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,kGAAkG;IAClG,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,sEAAsE;IACtE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,eAAe,GAAG,MAAM,EAAE,CAWpE;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGxD"}

package/dist/announce.js

@@ -0,0 +1,42 @@
+/**
+ * Pure argument-building and output-parsing for the bitmot io1 relay. Kept free of I/O so the wire
+ * contract with the CLI -- which flags it takes, and how it announces a live host -- is unit-tested
+ * in isolation and lives in one place.
+ */
+/**
+ * The full `bitmot io1 relay ...` argv (without the leading program name). `--allowed-emails` is
+ * comma-joined into a single flag because the CLI parses it as one comma-separated value; emitting
+ * repeats would make the native CLI keep only the last. `--to` goes last so the line reads as a claim
+ * of hosts proxied to a target.
+ */
+export function buildRelayArgs(invocation) {
+    const args = ['io1', 'relay'];
+    for (const host of invocation.hosts)
+        args.push('--host', host);
+    const emails = invocation.allowedEmails ?? [];
+    if (emails.length > 0)
+        args.push('--allowed-emails', emails.join(','));
+    if (invocation.account)
+        args.push('--account', invocation.account);
+    if (invocation.gateway)
+        args.push('--gateway', invocation.gateway);
+    if (invocation.gatewayHost)
+        args.push('--gateway-host', invocation.gatewayHost);
+    if (invocation.extraArgs)
+        args.push(...invocation.extraArgs);
+    args.push('--to', invocation.to);
+    return args;
+}
+/**
+ * The public URL from a relay's per-host announcement line, or null for any other line. The relay
+ * prints one `<arrow> <url> live` line per claimed host once its link is up (uncolored when its
+ * stderr is piped, as it is under this plugin). Tolerant of the arrow glyph and surrounding spaces so
+ * both the native and JVM CLIs -- and any cached older build -- parse the same; the trailing `live`
+ * badge is what distinguishes it from the pending-requests and update-nudge lines, which also carry
+ * URLs but must not be mistaken for a live host.
+ */
+export function parseLiveUrl(line) {
+    const match = /(https?:\/\/\S+)\s+live\s*$/u.exec(line);
+    return match ? match[1] : null;
+}
+//# sourceMappingURL=announce.js.map

package/dist/announce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"announce.js","sourceRoot":"","sources":["../src/announce.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAmBH;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,UAA2B;IACxD,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAA;IAC7C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACtE,IAAI,UAAU,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;IAClE,IAAI,UAAU,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;IAClE,IAAI,UAAU,CAAC,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;IAC/E,IAAI,UAAU,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;IAC5D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACjC,CAAC"}

package/dist/binary.d.ts

@@ -0,0 +1,50 @@
+export interface ResolveOptions {
+    /** Explicit path to a bitmot binary; when set it is used as-is (no PATH search, no download). */
+    readonly bitmotPath?: string;
+    /** Download the CLI when not otherwise found. Default true; false makes a miss a hard error. */
+    readonly autoInstall?: boolean;
+    /** Download origin; mirrors the installer's BITMOT_BASE_URL. Default https://bitmot.com. */
+    readonly baseUrl?: string;
+    /** Where to cache downloaded binaries. Default ~/.cache/bitmot (or $XDG_CACHE_HOME/bitmot). */
+    readonly cacheDir?: string;
+    /** Sink for human-facing progress ("downloading ..."). */
+    readonly log?: (message: string) => void;
+}
+export interface ResolvedBinary {
+    /** Path to invoke. */
+    readonly path: string;
+    /** How it was found, for logging. */
+    readonly source: 'explicit' | 'path' | 'download' | 'cache';
+    /** `bitmot version`'s reported semver (e.g. "0.2.1"), or null if it could not be read. */
+    readonly version: string | null;
+}
+/**
+ * The published artifact name for a platform/arch, or null when unsupported. Mirrors the server's
+ * download whitelist (io/io1/gateway/download/DownloadRoutesImpl.kt) and the installer's `uname`
+ * mapping: macOS and Linux, on x86_64 or 64-bit ARM. Node's arch is translated to the server's
+ * spelling -- 'x64' -> 'x86_64' on both, but 64-bit ARM is 'arm64' on macOS and 'aarch64' on Linux.
+ */
+export declare function artifactFor(platform: NodeJS.Platform, arch: string): string | null;
+/** `bitmot version` -> "0.2.1", or null if the binary is missing or its output is unexpected. */
+export declare function readVersion(binary: string): string | null;
+/**
+ * Ensures the current published binary is present in the cache and returns its path. The stable
+ * download URL 302-redirects to the content-addressed URL of whatever bytes are deployed now, so the
+ * followed response's checksum header names the current version: if a file for that hash is already
+ * cached the body is dropped undownloaded, otherwise it is streamed, verified against the advertised
+ * checksum, and atomically installed. This is what makes a plugin-managed CLI track production
+ * automatically -- so the CLI's own "you're out of date" nudge (suppressed anyway when its stderr is
+ * piped, as it is here) does not matter for the auto-managed case.
+ */
+export declare function ensureDownloaded(baseUrl: string, artifact: string, cacheDir: string, log?: (message: string) => void): Promise<{
+    path: string;
+    downloaded: boolean;
+}>;
+/**
+ * Resolves a bitmot binary to invoke: an explicit path wins; else a bitmot already on PATH is used
+ * (respecting a user- or installer-managed copy); else, when autoInstall is on, the current published
+ * binary is downloaded and cached. Throws with an actionable message when nothing is available and
+ * downloading is off or the platform has no published artifact.
+ */
+export declare function resolveBitmot(options?: ResolveOptions): Promise<ResolvedBinary>;
+//# sourceMappingURL=binary.d.ts.map

package/dist/binary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary.d.ts","sourceRoot":"","sources":["../src/binary.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,cAAc;IAC7B,iGAAiG;IACjG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,gGAAgG;IAChG,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;IAC9B,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,0DAA0D;IAC1D,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CACzC;AAED,MAAM,WAAW,cAAc;IAC7B,sBAAsB;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,CAAA;IAC3D,0FAA0F;IAC1F,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAChC;AAID;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYlF;AAgBD,iGAAiG;AACjG,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKzD;AASD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAC9B,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC,CA6ChD;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAwBzF"}

package/dist/binary.js

@@ -0,0 +1,137 @@
+import { spawnSync } from 'node:child_process';
+import { createHash, randomBytes } from 'node:crypto';
+import { constants as FS, createWriteStream } from 'node:fs';
+import { access, chmod, mkdir, rename, rm } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { Readable, Transform } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+const DEFAULT_BASE_URL = 'https://bitmot.com';
+/**
+ * The published artifact name for a platform/arch, or null when unsupported. Mirrors the server's
+ * download whitelist (io/io1/gateway/download/DownloadRoutesImpl.kt) and the installer's `uname`
+ * mapping: macOS and Linux, on x86_64 or 64-bit ARM. Node's arch is translated to the server's
+ * spelling -- 'x64' -> 'x86_64' on both, but 64-bit ARM is 'arm64' on macOS and 'aarch64' on Linux.
+ */
+export function artifactFor(platform, arch) {
+    if (platform === 'darwin') {
+        if (arch === 'arm64')
+            return 'bitmot-macos-arm64';
+        if (arch === 'x64')
+            return 'bitmot-macos-x86_64';
+        return null;
+    }
+    if (platform === 'linux') {
+        if (arch === 'x64')
+            return 'bitmot-linux-x86_64';
+        if (arch === 'arm64')
+            return 'bitmot-linux-aarch64';
+        return null;
+    }
+    return null;
+}
+function defaultCacheDir() {
+    const xdg = process.env.XDG_CACHE_HOME;
+    return join(xdg && xdg.length > 0 ? xdg : join(homedir(), '.cache'), 'bitmot');
+}
+async function exists(path) {
+    try {
+        await access(path, FS.F_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** `bitmot version` -> "0.2.1", or null if the binary is missing or its output is unexpected. */
+export function readVersion(binary) {
+    const result = spawnSync(binary, ['version'], { encoding: 'utf8' });
+    if (result.status !== 0 || typeof result.stdout !== 'string')
+        return null;
+    const match = /\bbitmot\s+(\d+\.\d+\.\d+)\b/.exec(result.stdout);
+    return match ? match[1] : null;
+}
+function onPath() {
+    // A bare-name spawn resolves via PATH; a clean `version` exit both locates the binary and proves it
+    // runs on this machine (arch, permissions), which a filesystem check alone would not.
+    const result = spawnSync('bitmot', ['version'], { stdio: 'ignore' });
+    return result.status === 0 && result.error === undefined;
+}
+/**
+ * Ensures the current published binary is present in the cache and returns its path. The stable
+ * download URL 302-redirects to the content-addressed URL of whatever bytes are deployed now, so the
+ * followed response's checksum header names the current version: if a file for that hash is already
+ * cached the body is dropped undownloaded, otherwise it is streamed, verified against the advertised
+ * checksum, and atomically installed. This is what makes a plugin-managed CLI track production
+ * automatically -- so the CLI's own "you're out of date" nudge (suppressed anyway when its stderr is
+ * piped, as it is here) does not matter for the auto-managed case.
+ */
+export async function ensureDownloaded(baseUrl, artifact, cacheDir, log) {
+    const response = await fetch(`${baseUrl}/download/${artifact}`);
+    if (!response.ok || !response.body) {
+        await response.body?.cancel();
+        throw new Error(`download failed: ${baseUrl}/download/${artifact} returned ${response.status}`);
+    }
+    const advertised = response.headers.get('x-checksum-sha256')?.toLowerCase();
+    if (!advertised || !/^[0-9a-f]{64}$/.test(advertised)) {
+        await response.body.cancel();
+        throw new Error('download failed: server did not advertise a sha256 checksum');
+    }
+    const dest = join(cacheDir, `bitmot-${advertised.slice(0, 8)}`);
+    if (await exists(dest)) {
+        await response.body.cancel(); // already have these exact bytes; do not re-download the body
+        return { path: dest, downloaded: false };
+    }
+    await mkdir(cacheDir, { recursive: true });
+    const temp = `${dest}.${randomBytes(6).toString('hex')}.tmp`;
+    const hash = createHash('sha256');
+    const tee = new Transform({
+        transform(chunk, _encoding, callback) {
+            hash.update(chunk);
+            callback(null, chunk);
+        },
+    });
+    log?.(`downloading ${artifact} (${advertised.slice(0, 8)})`);
+    try {
+        await pipeline(Readable.fromWeb(response.body), tee, createWriteStream(temp, { mode: 0o755 }));
+        const actual = hash.digest('hex');
+        if (actual !== advertised) {
+            throw new Error(`checksum mismatch: downloaded ${actual}, server advertised ${advertised}`);
+        }
+        await chmod(temp, 0o755);
+        await rename(temp, dest);
+    }
+    catch (error) {
+        await rm(temp, { force: true });
+        throw error;
+    }
+    return { path: dest, downloaded: true };
+}
+/**
+ * Resolves a bitmot binary to invoke: an explicit path wins; else a bitmot already on PATH is used
+ * (respecting a user- or installer-managed copy); else, when autoInstall is on, the current published
+ * binary is downloaded and cached. Throws with an actionable message when nothing is available and
+ * downloading is off or the platform has no published artifact.
+ */
+export async function resolveBitmot(options = {}) {
+    if (options.bitmotPath) {
+        return { path: options.bitmotPath, source: 'explicit', version: readVersion(options.bitmotPath) };
+    }
+    if (onPath()) {
+        return { path: 'bitmot', source: 'path', version: readVersion('bitmot') };
+    }
+    if (options.autoInstall === false) {
+        throw new Error('bitmot CLI not found on PATH and autoInstall is disabled. ' +
+            'Install it with: curl -fsSL https://bitmot.com/install | sh');
+    }
+    const artifact = artifactFor(process.platform, process.arch);
+    if (!artifact) {
+        throw new Error(`bitmot CLI not found and no published binary for ${process.platform}/${process.arch}. ` +
+            'Install it manually: curl -fsSL https://bitmot.com/install | sh');
+    }
+    const baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;
+    const cacheDir = options.cacheDir ?? defaultCacheDir();
+    const { path, downloaded } = await ensureDownloaded(baseUrl, artifact, cacheDir, options.log);
+    return { path, source: downloaded ? 'download' : 'cache', version: readVersion(path) };
+}
+//# sourceMappingURL=binary.js.map

package/dist/binary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary.js","sourceRoot":"","sources":["../src/binary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,SAAS,IAAI,EAAE,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAyB/C,MAAM,gBAAgB,GAAG,oBAAoB,CAAA;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,QAAyB,EAAE,IAAY;IACjE,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,oBAAoB,CAAA;QACjD,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,qBAAqB,CAAA;QAChD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,qBAAqB,CAAA;QAChD,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,sBAAsB,CAAA;QACnD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;IACtC,OAAO,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAA;AAChF,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;QAC3B,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACzE,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAChE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACjC,CAAC;AAED,SAAS,MAAM;IACb,oGAAoG;IACpG,sFAAsF;IACtF,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IACpE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAA;AAC1D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,QAAgB,EAChB,QAAgB,EAChB,GAA+B;IAE/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,aAAa,QAAQ,EAAE,CAAC,CAAA;IAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;QAC7B,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,aAAa,QAAQ,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IACjG,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAA;IAC3E,IAAI,CAAC,UAAU,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;QAC5B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IAChF,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAA;IAC/D,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA,CAAC,8DAA8D;QAC3F,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;IAC1C,CAAC;IAED,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAA;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;QACxB,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ;YAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAClB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACvB,CAAC;KACF,CAAC,CAAA;IACF,GAAG,EAAE,CAAC,eAAe,QAAQ,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;IAC5D,IAAI,CAAC;QACH,MAAM,QAAQ,CACZ,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAgD,CAAC,EAC3E,GAAG,EACH,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CACzC,CAAA;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACjC,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,uBAAuB,UAAU,EAAE,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACxB,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/B,MAAM,KAAK,CAAA;IACb,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAA0B,EAAE;IAC9D,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAA;IACnG,CAAC;IACD,IAAI,MAAM,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC3E,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,4DAA4D;YAC1D,6DAA6D,CAChE,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,oDAAoD,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,IAAI;YACtF,iEAAiE,CACpE,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAA;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAA;IACtD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC7F,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAA;AACxF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,38 @@
+import type { Plugin } from 'vite';
+export type { RelayInvocation } from './announce.js';
+export type { ResolveOptions, ResolvedBinary } from './binary.js';
+export interface Io1PluginOptions {
+    /**
+     * Host(s) to claim, e.g. "🔥.io1.io" or "demo" (completed to demo.io1.io). Falls back to
+     * $IO1_DEV_HOST. With none set the plugin stays dormant: publishing every dev server by default
+     * would be a footgun, and a hardcoded shared host collides between teammates.
+     */
+    host?: string | string[];
+    /** Allow-list emails; when set, visitors must verify one of them to reach the host. */
+    allowedEmails?: string[];
+    /** Account claim, when your identity has more than one membership. */
+    account?: string;
+    /** Gateway WebSocket URL override; defaults to the CLI's production gateway. */
+    gateway?: string;
+    /** Explicit path to a bitmot binary; skips PATH lookup and auto-download. */
+    bitmotPath?: string;
+    /** Auto-download the CLI when not found. Default true. */
+    autoInstall?: boolean;
+    /** Download origin for the CLI; mirrors the installer's BITMOT_BASE_URL. */
+    baseUrl?: string;
+    /** Extra `bitmot io1 relay` flags this plugin does not model, inserted verbatim before `--to`. */
+    extraArgs?: string[];
+    /** Master switch. Default: on, unless running under CI or no host is configured. */
+    enabled?: boolean;
+}
+/**
+ * Vite plugin: while the dev (or preview) server runs, publish it to the internet over a
+ * `bitmot io1 relay` child process, proxying to the server's real bound port. The relay's lifetime is
+ * tied to the server -- spawned once it is listening, killed when it closes -- so a shared URL never
+ * outlives the session. The CLI is located on PATH or auto-downloaded (content-addressed, so it tracks
+ * the deployed build). Reconnects are the relay's own concern; a non-zero exit is a definitive refusal
+ * (bad auth, host held by another account) and is surfaced, not retried.
+ */
+export declare function io1(options?: Io1PluginOptions): Plugin;
+export default io1;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,MAAM,CAAA;AAIhE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjE,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACxB,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,kGAAkG;IAClG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,oFAAoF;IACpF,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAUD;;;;;;;GAOG;AACH,wBAAgB,GAAG,CAAC,OAAO,GAAE,gBAAqB,GAAG,MAAM,CA0F1D;AAyBD,eAAe,GAAG,CAAA"}

package/dist/index.js

@@ -0,0 +1,127 @@
+import { spawn } from 'node:child_process';
+import { buildRelayArgs, parseLiveUrl } from './announce.js';
+import { resolveBitmot } from './binary.js';
+function normalizeHosts(host) {
+    const raw = host ?? process.env.IO1_DEV_HOST;
+    if (!raw)
+        return [];
+    return (Array.isArray(raw) ? raw : [raw]).filter((entry) => entry.length > 0);
+}
+/**
+ * Vite plugin: while the dev (or preview) server runs, publish it to the internet over a
+ * `bitmot io1 relay` child process, proxying to the server's real bound port. The relay's lifetime is
+ * tied to the server -- spawned once it is listening, killed when it closes -- so a shared URL never
+ * outlives the session. The CLI is located on PATH or auto-downloaded (content-addressed, so it tracks
+ * the deployed build). Reconnects are the relay's own concern; a non-zero exit is a definitive refusal
+ * (bad auth, host held by another account) and is surfaced, not retried.
+ */
+export function io1(options = {}) {
+    const hosts = normalizeHosts(options.host);
+    const enabled = options.enabled ?? (!process.env.CI && hosts.length > 0);
+    let child;
+    let stopping = false;
+    const supervise = (server) => {
+        if (!enabled)
+            return;
+        const logger = server.config.logger;
+        if (hosts.length === 0) {
+            logger.warn('[io1] no host configured (set `host` or $IO1_DEV_HOST); relay not started');
+            return;
+        }
+        const httpServer = server.httpServer;
+        if (!httpServer) {
+            logger.warn('[io1] server has no httpServer (middleware mode?); relay not started');
+            return;
+        }
+        const onExit = () => {
+            stopping = true;
+            child?.kill('SIGTERM');
+            child = undefined;
+            process.removeListener('exit', onExit); // avoid piling up a listener per dev-server restart
+        };
+        httpServer.once('listening', () => {
+            void start(server).catch((error) => {
+                logger.error(`[io1] ${error.message}`);
+            });
+        });
+        httpServer.once('close', onExit);
+        process.once('exit', onExit);
+    };
+    const start = async (server) => {
+        const logger = server.config.logger;
+        const address = server.httpServer?.address();
+        if (!address || typeof address === 'string') {
+            logger.error('[io1] could not determine the dev server port; relay not started');
+            return;
+        }
+        const binary = await resolveBitmot({
+            bitmotPath: options.bitmotPath,
+            autoInstall: options.autoInstall,
+            baseUrl: options.baseUrl,
+            log: (message) => logger.info(`[io1] ${message}`),
+        });
+        if (binary.version)
+            logger.info(`[io1] using bitmot ${binary.version} (${binary.source})`);
+        const args = buildRelayArgs({
+            hosts,
+            allowedEmails: options.allowedEmails,
+            account: options.account,
+            gateway: options.gateway,
+            extraArgs: options.extraArgs,
+            to: `http://127.0.0.1:${address.port}`,
+        });
+        if (stopping)
+            return; // the server closed while we were resolving the binary
+        const relay = spawn(binary.path, args, { stdio: ['ignore', 'ignore', 'pipe'] });
+        child = relay;
+        relay.on('error', (error) => {
+            logger.error(`[io1] failed to start relay: ${error.message}`);
+        });
+        relay.on('exit', (code, signal) => {
+            if (child === relay)
+                child = undefined;
+            if (stopping || signal)
+                return;
+            if (code && code !== 0) {
+                logger.error(`[io1] relay exited (code ${code}). If this is an auth error, run: bitmot io1 authorize`);
+            }
+        });
+        forwardRelayOutput(relay, server);
+    };
+    return {
+        name: 'vite-plugin-io1',
+        configureServer(server) {
+            supervise(server);
+        },
+        configurePreviewServer(server) {
+            supervise(server);
+        },
+    };
+}
+/**
+ * Forwards the relay's stderr to Vite's logger line by line: a per-host "live" announcement becomes a
+ * banner-style URL line, anything else (the link-established line, a pending-access-requests notice,
+ * a diagnostic) is passed through verbatim under an [io1] tag. The relay writes whole lines, but a
+ * chunk may split one, so partial lines are buffered until their newline arrives.
+ */
+function forwardRelayOutput(relay, server) {
+    const logger = server.config.logger;
+    let buffer = '';
+    relay.stderr?.setEncoding('utf8');
+    relay.stderr?.on('data', (chunk) => {
+        buffer += chunk;
+        for (let newline = buffer.indexOf('\n'); newline >= 0; newline = buffer.indexOf('\n')) {
+            const line = buffer.slice(0, newline).replace(/\r$/, '');
+            buffer = buffer.slice(newline + 1);
+            if (line.trim().length === 0)
+                continue;
+            const url = parseLiveUrl(line);
+            if (url)
+                logger.info(`  ➜  io1:     ${url}`, { clear: false, timestamp: false });
+            else
+                logger.info(`[io1] ${line}`);
+        }
+    });
+}
+export default io1;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAA;AAE7D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AA8B3C,SAAS,cAAc,CAAC,IAA8B;IACpD,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IAC5C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAC/E,CAAC;AAID;;;;;;;GAOG;AACH,MAAM,UAAU,GAAG,CAAC,UAA4B,EAAE;IAChD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAExE,IAAI,KAA+B,CAAA;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,MAAM,SAAS,GAAG,CAAC,MAAmB,EAAQ,EAAE;QAC9C,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA;QACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAA;YACxF,OAAM;QACR,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAA;YACnF,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,QAAQ,GAAG,IAAI,CAAA;YACf,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YACtB,KAAK,GAAG,SAAS,CAAA;YACjB,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA,CAAC,oDAAoD;QAC7F,CAAC,CAAA;QAED,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;YAChC,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC1C,MAAM,CAAC,KAAK,CAAC,SAAU,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;YACnD,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAChC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,EAAE,MAAmB,EAAiB,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,CAAA;QAC5C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAA;YAChF,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;YACjC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,OAAO,EAAE,CAAC;SAClD,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;QAE1F,MAAM,IAAI,GAAG,cAAc,CAAC;YAC1B,KAAK;YACL,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,EAAE,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE;SACvC,CAAC,CAAA;QAEF,IAAI,QAAQ;YAAE,OAAM,CAAC,uDAAuD;QAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QAC/E,KAAK,GAAG,KAAK,CAAA;QAEb,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,IAAI,KAAK,KAAK,KAAK;gBAAE,KAAK,GAAG,SAAS,CAAA;YACtC,IAAI,QAAQ,IAAI,MAAM;gBAAE,OAAM;YAC9B,IAAI,IAAI,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,KAAK,CACV,4BAA4B,IAAI,wDAAwD,CACzF,CAAA;YACH,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACnC,CAAC,CAAA;IAED,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,eAAe,CAAC,MAAM;YACpB,SAAS,CAAC,MAAM,CAAC,CAAA;QACnB,CAAC;QACD,sBAAsB,CAAC,MAAM;YAC3B,SAAS,CAAC,MAAM,CAAC,CAAA;QACnB,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,KAAmB,EAAE,MAAmB;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA;IACnC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACjC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,MAAM,IAAI,KAAK,CAAA;QACf,KAAK,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YACxD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;YAClC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ;YACtC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,GAAG;gBAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;;gBAC3E,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;QACnC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,eAAe,GAAG,CAAA"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "vite-plugin-io1",
+  "version": "0.1.0",
+  "description": "Publish your Vite dev server to the public internet over a bitmot io1 relay, with the CLI auto-managed.",
+  "keywords": [
+    "vite",
+    "vite-plugin",
+    "tunnel",
+    "bitmot",
+    "io1",
+    "relay",
+    "https",
+    "share",
+    "dev-server"
+  ],
+  "type": "module",
+  "license": "MIT",
+  "author": "Bitmot <shea@bitmot.com>",
+  "homepage": "https://io1.io/vite",
+  "repository": {
+    "type": "git",
+    "url": "git+https://gitlab.com/bitmot/vite-plugin-io1.git"
+  },
+  "bugs": {
+    "url": "https://gitlab.com/bitmot/vite-plugin-io1/-/issues"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "prepublishOnly": "npm run build"
+  },
+  "peerDependencies": {
+    "vite": ">=5"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.7.0",
+    "vite": "^6.0.0",
+    "vitest": "^2.1.0"
+  }
+}

package/src/announce.ts

@@ -0,0 +1,54 @@
+/**
+ * Pure argument-building and output-parsing for the bitmot io1 relay. Kept free of I/O so the wire
+ * contract with the CLI -- which flags it takes, and how it announces a live host -- is unit-tested
+ * in isolation and lives in one place.
+ */
+
+export interface RelayInvocation {
+  /** Hosts to claim, one `--host` each (the CLI appends across repeats). At least one. */
+  readonly hosts: readonly string[]
+  /** Allow-list emails; the CLI takes a single comma-separated `--allowed-emails`, not repeats. */
+  readonly allowedEmails?: readonly string[]
+  /** Account claim, when the identity has more than one membership. */
+  readonly account?: string
+  /** Gateway WebSocket URL; omitted to use the CLI's baked-in production default. */
+  readonly gateway?: string
+  /** Host header presented to the gateway; omitted to derive it from the gateway URL. */
+  readonly gatewayHost?: string
+  /** Escape hatch for flags this plugin does not model (e.g. `--credential`). Inserted verbatim. */
+  readonly extraArgs?: readonly string[]
+  /** The local dev server to proxy to, e.g. `http://127.0.0.1:5173`. */
+  readonly to: string
+}
+
+/**
+ * The full `bitmot io1 relay ...` argv (without the leading program name). `--allowed-emails` is
+ * comma-joined into a single flag because the CLI parses it as one comma-separated value; emitting
+ * repeats would make the native CLI keep only the last. `--to` goes last so the line reads as a claim
+ * of hosts proxied to a target.
+ */
+export function buildRelayArgs(invocation: RelayInvocation): string[] {
+  const args = ['io1', 'relay']
+  for (const host of invocation.hosts) args.push('--host', host)
+  const emails = invocation.allowedEmails ?? []
+  if (emails.length > 0) args.push('--allowed-emails', emails.join(','))
+  if (invocation.account) args.push('--account', invocation.account)
+  if (invocation.gateway) args.push('--gateway', invocation.gateway)
+  if (invocation.gatewayHost) args.push('--gateway-host', invocation.gatewayHost)
+  if (invocation.extraArgs) args.push(...invocation.extraArgs)
+  args.push('--to', invocation.to)
+  return args
+}
+
+/**
+ * The public URL from a relay's per-host announcement line, or null for any other line. The relay
+ * prints one `<arrow> <url> live` line per claimed host once its link is up (uncolored when its
+ * stderr is piped, as it is under this plugin). Tolerant of the arrow glyph and surrounding spaces so
+ * both the native and JVM CLIs -- and any cached older build -- parse the same; the trailing `live`
+ * badge is what distinguishes it from the pending-requests and update-nudge lines, which also carry
+ * URLs but must not be mistaken for a live host.
+ */
+export function parseLiveUrl(line: string): string | null {
+  const match = /(https?:\/\/\S+)\s+live\s*$/u.exec(line)
+  return match ? match[1]! : null
+}

package/src/binary.ts

@@ -0,0 +1,175 @@
+import { spawnSync } from 'node:child_process'
+import { createHash, randomBytes } from 'node:crypto'
+import { constants as FS, createWriteStream } from 'node:fs'
+import { access, chmod, mkdir, rename, rm } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+import { Readable, Transform } from 'node:stream'
+import { pipeline } from 'node:stream/promises'
+import type { ReadableStream as WebReadableStream } from 'node:stream/web'
+
+export interface ResolveOptions {
+  /** Explicit path to a bitmot binary; when set it is used as-is (no PATH search, no download). */
+  readonly bitmotPath?: string
+  /** Download the CLI when not otherwise found. Default true; false makes a miss a hard error. */
+  readonly autoInstall?: boolean
+  /** Download origin; mirrors the installer's BITMOT_BASE_URL. Default https://bitmot.com. */
+  readonly baseUrl?: string
+  /** Where to cache downloaded binaries. Default ~/.cache/bitmot (or $XDG_CACHE_HOME/bitmot). */
+  readonly cacheDir?: string
+  /** Sink for human-facing progress ("downloading ..."). */
+  readonly log?: (message: string) => void
+}
+
+export interface ResolvedBinary {
+  /** Path to invoke. */
+  readonly path: string
+  /** How it was found, for logging. */
+  readonly source: 'explicit' | 'path' | 'download' | 'cache'
+  /** `bitmot version`'s reported semver (e.g. "0.2.1"), or null if it could not be read. */
+  readonly version: string | null
+}
+
+const DEFAULT_BASE_URL = 'https://bitmot.com'
+
+/**
+ * The published artifact name for a platform/arch, or null when unsupported. Mirrors the server's
+ * download whitelist (io/io1/gateway/download/DownloadRoutesImpl.kt) and the installer's `uname`
+ * mapping: macOS and Linux, on x86_64 or 64-bit ARM. Node's arch is translated to the server's
+ * spelling -- 'x64' -> 'x86_64' on both, but 64-bit ARM is 'arm64' on macOS and 'aarch64' on Linux.
+ */
+export function artifactFor(platform: NodeJS.Platform, arch: string): string | null {
+  if (platform === 'darwin') {
+    if (arch === 'arm64') return 'bitmot-macos-arm64'
+    if (arch === 'x64') return 'bitmot-macos-x86_64'
+    return null
+  }
+  if (platform === 'linux') {
+    if (arch === 'x64') return 'bitmot-linux-x86_64'
+    if (arch === 'arm64') return 'bitmot-linux-aarch64'
+    return null
+  }
+  return null
+}
+
+function defaultCacheDir(): string {
+  const xdg = process.env.XDG_CACHE_HOME
+  return join(xdg && xdg.length > 0 ? xdg : join(homedir(), '.cache'), 'bitmot')
+}
+
+async function exists(path: string): Promise<boolean> {
+  try {
+    await access(path, FS.F_OK)
+    return true
+  } catch {
+    return false
+  }
+}
+
+/** `bitmot version` -> "0.2.1", or null if the binary is missing or its output is unexpected. */
+export function readVersion(binary: string): string | null {
+  const result = spawnSync(binary, ['version'], { encoding: 'utf8' })
+  if (result.status !== 0 || typeof result.stdout !== 'string') return null
+  const match = /\bbitmot\s+(\d+\.\d+\.\d+)\b/.exec(result.stdout)
+  return match ? match[1]! : null
+}
+
+function onPath(): boolean {
+  // A bare-name spawn resolves via PATH; a clean `version` exit both locates the binary and proves it
+  // runs on this machine (arch, permissions), which a filesystem check alone would not.
+  const result = spawnSync('bitmot', ['version'], { stdio: 'ignore' })
+  return result.status === 0 && result.error === undefined
+}
+
+/**
+ * Ensures the current published binary is present in the cache and returns its path. The stable
+ * download URL 302-redirects to the content-addressed URL of whatever bytes are deployed now, so the
+ * followed response's checksum header names the current version: if a file for that hash is already
+ * cached the body is dropped undownloaded, otherwise it is streamed, verified against the advertised
+ * checksum, and atomically installed. This is what makes a plugin-managed CLI track production
+ * automatically -- so the CLI's own "you're out of date" nudge (suppressed anyway when its stderr is
+ * piped, as it is here) does not matter for the auto-managed case.
+ */
+export async function ensureDownloaded(
+  baseUrl: string,
+  artifact: string,
+  cacheDir: string,
+  log?: (message: string) => void,
+): Promise<{ path: string; downloaded: boolean }> {
+  const response = await fetch(`${baseUrl}/download/${artifact}`)
+  if (!response.ok || !response.body) {
+    await response.body?.cancel()
+    throw new Error(`download failed: ${baseUrl}/download/${artifact} returned ${response.status}`)
+  }
+  const advertised = response.headers.get('x-checksum-sha256')?.toLowerCase()
+  if (!advertised || !/^[0-9a-f]{64}$/.test(advertised)) {
+    await response.body.cancel()
+    throw new Error('download failed: server did not advertise a sha256 checksum')
+  }
+
+  const dest = join(cacheDir, `bitmot-${advertised.slice(0, 8)}`)
+  if (await exists(dest)) {
+    await response.body.cancel() // already have these exact bytes; do not re-download the body
+    return { path: dest, downloaded: false }
+  }
+
+  await mkdir(cacheDir, { recursive: true })
+  const temp = `${dest}.${randomBytes(6).toString('hex')}.tmp`
+  const hash = createHash('sha256')
+  const tee = new Transform({
+    transform(chunk, _encoding, callback) {
+      hash.update(chunk)
+      callback(null, chunk)
+    },
+  })
+  log?.(`downloading ${artifact} (${advertised.slice(0, 8)})`)
+  try {
+    await pipeline(
+      Readable.fromWeb(response.body as unknown as WebReadableStream<Uint8Array>),
+      tee,
+      createWriteStream(temp, { mode: 0o755 }),
+    )
+    const actual = hash.digest('hex')
+    if (actual !== advertised) {
+      throw new Error(`checksum mismatch: downloaded ${actual}, server advertised ${advertised}`)
+    }
+    await chmod(temp, 0o755)
+    await rename(temp, dest)
+  } catch (error) {
+    await rm(temp, { force: true })
+    throw error
+  }
+  return { path: dest, downloaded: true }
+}
+
+/**
+ * Resolves a bitmot binary to invoke: an explicit path wins; else a bitmot already on PATH is used
+ * (respecting a user- or installer-managed copy); else, when autoInstall is on, the current published
+ * binary is downloaded and cached. Throws with an actionable message when nothing is available and
+ * downloading is off or the platform has no published artifact.
+ */
+export async function resolveBitmot(options: ResolveOptions = {}): Promise<ResolvedBinary> {
+  if (options.bitmotPath) {
+    return { path: options.bitmotPath, source: 'explicit', version: readVersion(options.bitmotPath) }
+  }
+  if (onPath()) {
+    return { path: 'bitmot', source: 'path', version: readVersion('bitmot') }
+  }
+  if (options.autoInstall === false) {
+    throw new Error(
+      'bitmot CLI not found on PATH and autoInstall is disabled. ' +
+        'Install it with: curl -fsSL https://bitmot.com/install | sh',
+    )
+  }
+  const artifact = artifactFor(process.platform, process.arch)
+  if (!artifact) {
+    throw new Error(
+      `bitmot CLI not found and no published binary for ${process.platform}/${process.arch}. ` +
+        'Install it manually: curl -fsSL https://bitmot.com/install | sh',
+    )
+  }
+  const baseUrl = options.baseUrl ?? DEFAULT_BASE_URL
+  const cacheDir = options.cacheDir ?? defaultCacheDir()
+  const { path, downloaded } = await ensureDownloaded(baseUrl, artifact, cacheDir, options.log)
+  return { path, source: downloaded ? 'download' : 'cache', version: readVersion(path) }
+}

package/src/index.ts

@@ -0,0 +1,165 @@
+import { spawn, type ChildProcess } from 'node:child_process'
+import type { Plugin, PreviewServer, ViteDevServer } from 'vite'
+import { buildRelayArgs, parseLiveUrl } from './announce.js'
+import { resolveBitmot } from './binary.js'
+
+export type { RelayInvocation } from './announce.js'
+export type { ResolveOptions, ResolvedBinary } from './binary.js'
+
+export interface Io1PluginOptions {
+  /**
+   * Host(s) to claim, e.g. "🔥.io1.io" or "demo" (completed to demo.io1.io). Falls back to
+   * $IO1_DEV_HOST. With none set the plugin stays dormant: publishing every dev server by default
+   * would be a footgun, and a hardcoded shared host collides between teammates.
+   */
+  host?: string | string[]
+  /** Allow-list emails; when set, visitors must verify one of them to reach the host. */
+  allowedEmails?: string[]
+  /** Account claim, when your identity has more than one membership. */
+  account?: string
+  /** Gateway WebSocket URL override; defaults to the CLI's production gateway. */
+  gateway?: string
+  /** Explicit path to a bitmot binary; skips PATH lookup and auto-download. */
+  bitmotPath?: string
+  /** Auto-download the CLI when not found. Default true. */
+  autoInstall?: boolean
+  /** Download origin for the CLI; mirrors the installer's BITMOT_BASE_URL. */
+  baseUrl?: string
+  /** Extra `bitmot io1 relay` flags this plugin does not model, inserted verbatim before `--to`. */
+  extraArgs?: string[]
+  /** Master switch. Default: on, unless running under CI or no host is configured. */
+  enabled?: boolean
+}
+
+function normalizeHosts(host: Io1PluginOptions['host']): string[] {
+  const raw = host ?? process.env.IO1_DEV_HOST
+  if (!raw) return []
+  return (Array.isArray(raw) ? raw : [raw]).filter((entry) => entry.length > 0)
+}
+
+type ServeServer = ViteDevServer | PreviewServer
+
+/**
+ * Vite plugin: while the dev (or preview) server runs, publish it to the internet over a
+ * `bitmot io1 relay` child process, proxying to the server's real bound port. The relay's lifetime is
+ * tied to the server -- spawned once it is listening, killed when it closes -- so a shared URL never
+ * outlives the session. The CLI is located on PATH or auto-downloaded (content-addressed, so it tracks
+ * the deployed build). Reconnects are the relay's own concern; a non-zero exit is a definitive refusal
+ * (bad auth, host held by another account) and is surfaced, not retried.
+ */
+export function io1(options: Io1PluginOptions = {}): Plugin {
+  const hosts = normalizeHosts(options.host)
+  const enabled = options.enabled ?? (!process.env.CI && hosts.length > 0)
+
+  let child: ChildProcess | undefined
+  let stopping = false
+
+  const supervise = (server: ServeServer): void => {
+    if (!enabled) return
+    const logger = server.config.logger
+    if (hosts.length === 0) {
+      logger.warn('[io1] no host configured (set `host` or $IO1_DEV_HOST); relay not started')
+      return
+    }
+    const httpServer = server.httpServer
+    if (!httpServer) {
+      logger.warn('[io1] server has no httpServer (middleware mode?); relay not started')
+      return
+    }
+
+    const onExit = (): void => {
+      stopping = true
+      child?.kill('SIGTERM')
+      child = undefined
+      process.removeListener('exit', onExit) // avoid piling up a listener per dev-server restart
+    }
+
+    httpServer.once('listening', () => {
+      void start(server).catch((error: unknown) => {
+        logger.error(`[io1] ${(error as Error).message}`)
+      })
+    })
+    httpServer.once('close', onExit)
+    process.once('exit', onExit)
+  }
+
+  const start = async (server: ServeServer): Promise<void> => {
+    const logger = server.config.logger
+    const address = server.httpServer?.address()
+    if (!address || typeof address === 'string') {
+      logger.error('[io1] could not determine the dev server port; relay not started')
+      return
+    }
+
+    const binary = await resolveBitmot({
+      bitmotPath: options.bitmotPath,
+      autoInstall: options.autoInstall,
+      baseUrl: options.baseUrl,
+      log: (message) => logger.info(`[io1] ${message}`),
+    })
+    if (binary.version) logger.info(`[io1] using bitmot ${binary.version} (${binary.source})`)
+
+    const args = buildRelayArgs({
+      hosts,
+      allowedEmails: options.allowedEmails,
+      account: options.account,
+      gateway: options.gateway,
+      extraArgs: options.extraArgs,
+      to: `http://127.0.0.1:${address.port}`,
+    })
+
+    if (stopping) return // the server closed while we were resolving the binary
+    const relay = spawn(binary.path, args, { stdio: ['ignore', 'ignore', 'pipe'] })
+    child = relay
+
+    relay.on('error', (error) => {
+      logger.error(`[io1] failed to start relay: ${error.message}`)
+    })
+    relay.on('exit', (code, signal) => {
+      if (child === relay) child = undefined
+      if (stopping || signal) return
+      if (code && code !== 0) {
+        logger.error(
+          `[io1] relay exited (code ${code}). If this is an auth error, run: bitmot io1 authorize`,
+        )
+      }
+    })
+
+    forwardRelayOutput(relay, server)
+  }
+
+  return {
+    name: 'vite-plugin-io1',
+    configureServer(server) {
+      supervise(server)
+    },
+    configurePreviewServer(server) {
+      supervise(server)
+    },
+  }
+}
+
+/**
+ * Forwards the relay's stderr to Vite's logger line by line: a per-host "live" announcement becomes a
+ * banner-style URL line, anything else (the link-established line, a pending-access-requests notice,
+ * a diagnostic) is passed through verbatim under an [io1] tag. The relay writes whole lines, but a
+ * chunk may split one, so partial lines are buffered until their newline arrives.
+ */
+function forwardRelayOutput(relay: ChildProcess, server: ServeServer): void {
+  const logger = server.config.logger
+  let buffer = ''
+  relay.stderr?.setEncoding('utf8')
+  relay.stderr?.on('data', (chunk: string) => {
+    buffer += chunk
+    for (let newline = buffer.indexOf('\n'); newline >= 0; newline = buffer.indexOf('\n')) {
+      const line = buffer.slice(0, newline).replace(/\r$/, '')
+      buffer = buffer.slice(newline + 1)
+      if (line.trim().length === 0) continue
+      const url = parseLiveUrl(line)
+      if (url) logger.info(`  ➜  io1:     ${url}`, { clear: false, timestamp: false })
+      else logger.info(`[io1] ${line}`)
+    }
+  })
+}
+
+export default io1