vite-plugin-io1 0.1.0 → 0.1.2

package/README.md

@@ -10,11 +10,15 @@ startup output.
 
 ## Why
 
-- **Real HTTPS, real cert** so secure-context APIs (service workers, camera, WebCrypto) just work.
-- **Working HMR through the tunnel** -- the shared URL is your live dev server, not a static copy.
-- **Email-gated sharing** via `allowedEmails` makes a preview shared-but-not-public.
-- **No `server.allowedHosts` fuss** -- the relay presents the upstream's own Host, so Vite's host
-  check never trips.
+A tunnel is only worth anything if it points at the dev server you are actually editing, and this
+one does: the public URL is your running `vite dev` - HMR and all - so a teammate (or your phone)
+hits the same live server you have open, and a save reloads their page in place. It arrives over a
+genuine HTTPS cert, so the secure-context APIs that quietly refuse to run on plain HTTP - service
+workers, the camera, WebCrypto - just work.
+
+Set `allowedEmails` and the preview turns shared-but-not-public: a visitor verifies one of those
+addresses before the host resolves for them. And because the relay presents the upstream's own Host,
+Vite's host check never trips - there is no `server.allowedHosts` to wrangle.
 
 ## Install
 
@@ -71,14 +75,14 @@ explicitly for a shared demo host.
 
 The `bitmot` CLI carries a version (`bitmot version`), and the gateway advertises the latest one on
 every relay handshake; run by hand, the CLI nudges you when you are out of date. That nudge is
-deliberately silent when its output is piped or `CI` is set -- that is, whenever this plugin runs it.
+deliberately silent when its output is piped or `CI` is set - that is, whenever this plugin runs it.
 So the plugin keeps the CLI current a different way: auto-download resolves the **currently deployed**
 bytes by content hash, so a plugin-managed CLI is always up to date and the nudge is moot. A CLI you
 installed yourself on your PATH is respected as-is and never replaced.
 
 ## Caveats
 
-- **macOS and Linux** -- published binaries cover macOS (arm64/x86_64) and Linux (x86_64/aarch64).
+- **macOS and Linux** - published binaries cover macOS (arm64/x86_64) and Linux (x86_64/aarch64).
   Elsewhere (e.g. native Windows), install `bitmot` yourself (the plugin will use it) or set
   `bitmotPath`.
 - **Middleware mode** (e.g. Nuxt) exposes no `httpServer` for the plugin to hook; not yet supported.

package/dist/announce.d.ts

@@ -1,8 +1,9 @@
 /**
  * Pure argument-building and output-parsing for the bitmot io1 relay. Kept free of I/O so the wire
- * contract with the CLI -- which flags it takes, and how it announces a live host -- is unit-tested
+ * contract with the CLI - which flags it takes, and how it announces a live host - is unit-tested
  * in isolation and lives in one place.
  */
+import type { AddressInfo } from 'node:net';
 export interface RelayInvocation {
     /** Hosts to claim, one `--host` each (the CLI appends across repeats). At least one. */
     readonly hosts: readonly string[];
@@ -30,9 +31,19 @@ export declare function buildRelayArgs(invocation: RelayInvocation): string[];
  * The public URL from a relay's per-host announcement line, or null for any other line. The relay
  * prints one `<arrow> <url> live` line per claimed host once its link is up (uncolored when its
  * stderr is piped, as it is under this plugin). Tolerant of the arrow glyph and surrounding spaces so
- * both the native and JVM CLIs -- and any cached older build -- parse the same; the trailing `live`
+ * both the native and JVM CLIs - and any cached older build - parse the same; the trailing `live`
  * badge is what distinguishes it from the pending-requests and update-nudge lines, which also carry
  * URLs but must not be mistaken for a live host.
  */
 export declare function parseLiveUrl(line: string): string | null;
+/**
+ * The `--to` proxy URL for a dev server bound at [address], a Node AddressInfo read once the socket is
+ * listening (so its port is the one the OS actually settled on, whatever Vite asked for). A wildcard
+ * bind - '0.0.0.0', '::', or the empty string - is not itself a connectable target, so we dial the
+ * loopback of the same family; a concrete address is kept as-is, and an IPv6 authority is bracketed.
+ * Using the bound address rather than a hardcoded 127.0.0.1 is what lets an IPv6 bind (Vite falling
+ * back to ::1 when 127.0.0.1:PORT is taken) be reached, instead of silently missing it or hitting
+ * whatever unrelated server already holds that IPv4 port.
+ */
+export declare function relayTargetUrl(address: AddressInfo): string;
 //# sourceMappingURL=announce.d.ts.map

package/dist/announce.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"announce.d.ts","sourceRoot":"","sources":["../src/announce.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,wFAAwF;IACxF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,iGAAiG;IACjG,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,qEAAqE;IACrE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,uFAAuF;IACvF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,kGAAkG;IAClG,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,sEAAsE;IACtE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,eAAe,GAAG,MAAM,EAAE,CAWpE;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGxD"}
+{"version":3,"file":"announce.d.ts","sourceRoot":"","sources":["../src/announce.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAE3C,MAAM,WAAW,eAAe;IAC9B,wFAAwF;IACxF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,iGAAiG;IACjG,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,qEAAqE;IACrE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,uFAAuF;IACvF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,kGAAkG;IAClG,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,sEAAsE;IACtE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,eAAe,GAAG,MAAM,EAAE,CAWpE;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGxD;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAK3D"}

package/dist/announce.js

@@ -1,6 +1,6 @@
 /**
  * Pure argument-building and output-parsing for the bitmot io1 relay. Kept free of I/O so the wire
- * contract with the CLI -- which flags it takes, and how it announces a live host -- is unit-tested
+ * contract with the CLI - which flags it takes, and how it announces a live host - is unit-tested
  * in isolation and lives in one place.
  */
 /**
@@ -31,7 +31,7 @@ export function buildRelayArgs(invocation) {
  * The public URL from a relay's per-host announcement line, or null for any other line. The relay
  * prints one `<arrow> <url> live` line per claimed host once its link is up (uncolored when its
  * stderr is piped, as it is under this plugin). Tolerant of the arrow glyph and surrounding spaces so
- * both the native and JVM CLIs -- and any cached older build -- parse the same; the trailing `live`
+ * both the native and JVM CLIs - and any cached older build - parse the same; the trailing `live`
  * badge is what distinguishes it from the pending-requests and update-nudge lines, which also carry
  * URLs but must not be mistaken for a live host.
  */
@@ -39,4 +39,19 @@ export function parseLiveUrl(line) {
     const match = /(https?:\/\/\S+)\s+live\s*$/u.exec(line);
     return match ? match[1] : null;
 }
+/**
+ * The `--to` proxy URL for a dev server bound at [address], a Node AddressInfo read once the socket is
+ * listening (so its port is the one the OS actually settled on, whatever Vite asked for). A wildcard
+ * bind - '0.0.0.0', '::', or the empty string - is not itself a connectable target, so we dial the
+ * loopback of the same family; a concrete address is kept as-is, and an IPv6 authority is bracketed.
+ * Using the bound address rather than a hardcoded 127.0.0.1 is what lets an IPv6 bind (Vite falling
+ * back to ::1 when 127.0.0.1:PORT is taken) be reached, instead of silently missing it or hitting
+ * whatever unrelated server already holds that IPv4 port.
+ */
+export function relayTargetUrl(address) {
+    const wildcard = '' === address.address || '0.0.0.0' === address.address || '::' === address.address;
+    const host = wildcard ? ('IPv6' === address.family ? '::1' : '127.0.0.1') : address.address;
+    const authority = host.includes(':') ? `[${host}]` : host;
+    return `http://${authority}:${address.port}`;
+}
 //# sourceMappingURL=announce.js.map

package/dist/announce.js.map

@@ -1 +1 @@
-{"version":3,"file":"announce.js","sourceRoot":"","sources":["../src/announce.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAmBH;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,UAA2B;IACxD,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAA;IAC7C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACtE,IAAI,UAAU,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;IAClE,IAAI,UAAU,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;IAClE,IAAI,UAAU,CAAC,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;IAC/E,IAAI,UAAU,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;IAC5D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACjC,CAAC"}
+{"version":3,"file":"announce.js","sourceRoot":"","sources":["../src/announce.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAqBH;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,UAA2B;IACxD,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAA;IAC7C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACtE,IAAI,UAAU,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;IAClE,IAAI,UAAU,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;IAClE,IAAI,UAAU,CAAC,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;IAC/E,IAAI,UAAU,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;IAC5D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,OAAoB;IACjD,MAAM,QAAQ,GAAG,EAAE,KAAK,OAAO,CAAC,OAAO,IAAI,SAAS,KAAK,OAAO,CAAC,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,OAAO,CAAA;IACpG,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;IAC3F,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,OAAO,UAAU,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAA;AAC9C,CAAC"}

package/dist/binary.d.ts

@@ -22,7 +22,7 @@ export interface ResolvedBinary {
  * The published artifact name for a platform/arch, or null when unsupported. Mirrors the server's
  * download whitelist (io/io1/gateway/download/DownloadRoutesImpl.kt) and the installer's `uname`
  * mapping: macOS and Linux, on x86_64 or 64-bit ARM. Node's arch is translated to the server's
- * spelling -- 'x64' -> 'x86_64' on both, but 64-bit ARM is 'arm64' on macOS and 'aarch64' on Linux.
+ * spelling - 'x64' -> 'x86_64' on both, but 64-bit ARM is 'arm64' on macOS and 'aarch64' on Linux.
  */
 export declare function artifactFor(platform: NodeJS.Platform, arch: string): string | null;
 /** `bitmot version` -> "0.2.1", or null if the binary is missing or its output is unexpected. */
@@ -33,7 +33,7 @@ export declare function readVersion(binary: string): string | null;
  * followed response's checksum header names the current version: if a file for that hash is already
  * cached the body is dropped undownloaded, otherwise it is streamed, verified against the advertised
  * checksum, and atomically installed. This is what makes a plugin-managed CLI track production
- * automatically -- so the CLI's own "you're out of date" nudge (suppressed anyway when its stderr is
+ * automatically - so the CLI's own "you're out of date" nudge (suppressed anyway when its stderr is
  * piped, as it is here) does not matter for the auto-managed case.
  */
 export declare function ensureDownloaded(baseUrl: string, artifact: string, cacheDir: string, log?: (message: string) => void): Promise<{

package/dist/binary.js

@@ -11,7 +11,7 @@ const DEFAULT_BASE_URL = 'https://bitmot.com';
  * The published artifact name for a platform/arch, or null when unsupported. Mirrors the server's
  * download whitelist (io/io1/gateway/download/DownloadRoutesImpl.kt) and the installer's `uname`
  * mapping: macOS and Linux, on x86_64 or 64-bit ARM. Node's arch is translated to the server's
- * spelling -- 'x64' -> 'x86_64' on both, but 64-bit ARM is 'arm64' on macOS and 'aarch64' on Linux.
+ * spelling - 'x64' -> 'x86_64' on both, but 64-bit ARM is 'arm64' on macOS and 'aarch64' on Linux.
  */
 export function artifactFor(platform, arch) {
     if (platform === 'darwin') {
@@ -63,7 +63,7 @@ function onPath() {
  * followed response's checksum header names the current version: if a file for that hash is already
  * cached the body is dropped undownloaded, otherwise it is streamed, verified against the advertised
  * checksum, and atomically installed. This is what makes a plugin-managed CLI track production
- * automatically -- so the CLI's own "you're out of date" nudge (suppressed anyway when its stderr is
+ * automatically - so the CLI's own "you're out of date" nudge (suppressed anyway when its stderr is
  * piped, as it is here) does not matter for the auto-managed case.
  */
 export async function ensureDownloaded(baseUrl, artifact, cacheDir, log) {

package/dist/index.d.ts

@@ -27,11 +27,12 @@ export interface Io1PluginOptions {
 }
 /**
  * Vite plugin: while the dev (or preview) server runs, publish it to the internet over a
- * `bitmot io1 relay` child process, proxying to the server's real bound port. The relay's lifetime is
- * tied to the server -- spawned once it is listening, killed when it closes -- so a shared URL never
- * outlives the session. The CLI is located on PATH or auto-downloaded (content-addressed, so it tracks
- * the deployed build). Reconnects are the relay's own concern; a non-zero exit is a definitive refusal
- * (bad auth, host held by another account) and is surfaced, not retried.
+ * `bitmot io1 relay` child process, proxying to the address the server actually bound. The relay's
+ * lifetime is tied to the server - armed by intercepting listen() and spawned the moment the socket
+ * binds, killed when it closes - so a shared URL never outlives the session. The CLI is located on
+ * PATH or auto-downloaded (content-addressed, so it tracks the deployed build). Reconnects are the
+ * relay's own concern; a non-zero exit is a definitive refusal (bad auth, host held by another
+ * account) and is surfaced, not retried.
  */
 export declare function io1(options?: Io1PluginOptions): Plugin;
 export default io1;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,MAAM,CAAA;AAIhE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjE,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACxB,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,kGAAkG;IAClG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,oFAAoF;IACpF,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAUD;;;;;;;GAOG;AACH,wBAAgB,GAAG,CAAC,OAAO,GAAE,gBAAqB,GAAG,MAAM,CA0F1D;AAyBD,eAAe,GAAG,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,MAAM,CAAA;AAIhE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjE,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACxB,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,kGAAkG;IAClG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,oFAAoF;IACpF,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAUD;;;;;;;;GAQG;AACH,wBAAgB,GAAG,CAAC,OAAO,GAAE,gBAAqB,GAAG,MAAM,CAyG1D;AAyBD,eAAe,GAAG,CAAA"}

package/dist/index.js

@@ -1,5 +1,5 @@
 import { spawn } from 'node:child_process';
-import { buildRelayArgs, parseLiveUrl } from './announce.js';
+import { buildRelayArgs, parseLiveUrl, relayTargetUrl } from './announce.js';
 import { resolveBitmot } from './binary.js';
 function normalizeHosts(host) {
     const raw = host ?? process.env.IO1_DEV_HOST;
@@ -9,11 +9,12 @@ function normalizeHosts(host) {
 }
 /**
  * Vite plugin: while the dev (or preview) server runs, publish it to the internet over a
- * `bitmot io1 relay` child process, proxying to the server's real bound port. The relay's lifetime is
- * tied to the server -- spawned once it is listening, killed when it closes -- so a shared URL never
- * outlives the session. The CLI is located on PATH or auto-downloaded (content-addressed, so it tracks
- * the deployed build). Reconnects are the relay's own concern; a non-zero exit is a definitive refusal
- * (bad auth, host held by another account) and is surfaced, not retried.
+ * `bitmot io1 relay` child process, proxying to the address the server actually bound. The relay's
+ * lifetime is tied to the server - armed by intercepting listen() and spawned the moment the socket
+ * binds, killed when it closes - so a shared URL never outlives the session. The CLI is located on
+ * PATH or auto-downloaded (content-addressed, so it tracks the deployed build). Reconnects are the
+ * relay's own concern; a non-zero exit is a definitive refusal (bad auth, host held by another
+ * account) and is surfaced, not retried.
  */
 export function io1(options = {}) {
     const hosts = normalizeHosts(options.host);
@@ -39,10 +40,24 @@ export function io1(options = {}) {
             child = undefined;
             process.removeListener('exit', onExit); // avoid piling up a listener per dev-server restart
         };
-        httpServer.once('listening', () => {
-            void start(server).catch((error) => {
-                logger.error(`[io1] ${error.message}`);
-            });
+        // Arm the relay by intercepting listen() rather than only awaiting the 'listening' event: Vite
+        // calls listen once it has resolved the final port - the configured one, or (under
+        // strictPort:false) the next free port after a collision - so wrapping the very call that binds
+        // the socket is what guarantees we read the port the server actually took. The one-time
+        // 'listening' hook fires the instant the bind completes; `armed` keeps a second listen() from
+        // spawning a second relay. The casts are the price of replacing an overloaded native method.
+        const originalListen = httpServer.listen.bind(httpServer);
+        let armed = false;
+        httpServer.listen = ((...args) => {
+            if (!armed) {
+                armed = true;
+                httpServer.once('listening', () => {
+                    void start(server).catch((error) => {
+                        logger.error(`[io1] ${error.message}`);
+                    });
+                });
+            }
+            return originalListen(...args);
         });
         httpServer.once('close', onExit);
         process.once('exit', onExit);
@@ -51,7 +66,7 @@ export function io1(options = {}) {
         const logger = server.config.logger;
         const address = server.httpServer?.address();
         if (!address || typeof address === 'string') {
-            logger.error('[io1] could not determine the dev server port; relay not started');
+            logger.error('[io1] could not determine the dev server address; relay not started');
             return;
         }
         const binary = await resolveBitmot({
@@ -68,7 +83,7 @@ export function io1(options = {}) {
             account: options.account,
             gateway: options.gateway,
             extraArgs: options.extraArgs,
-            to: `http://127.0.0.1:${address.port}`,
+            to: relayTargetUrl(address),
         });
         if (stopping)
             return; // the server closed while we were resolving the binary

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAA;AAE7D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AA8B3C,SAAS,cAAc,CAAC,IAA8B;IACpD,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IAC5C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAC/E,CAAC;AAID;;;;;;;GAOG;AACH,MAAM,UAAU,GAAG,CAAC,UAA4B,EAAE;IAChD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAExE,IAAI,KAA+B,CAAA;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,MAAM,SAAS,GAAG,CAAC,MAAmB,EAAQ,EAAE;QAC9C,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA;QACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAA;YACxF,OAAM;QACR,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAA;YACnF,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,QAAQ,GAAG,IAAI,CAAA;YACf,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YACtB,KAAK,GAAG,SAAS,CAAA;YACjB,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA,CAAC,oDAAoD;QAC7F,CAAC,CAAA;QAED,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;YAChC,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC1C,MAAM,CAAC,KAAK,CAAC,SAAU,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;YACnD,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAChC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,EAAE,MAAmB,EAAiB,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,CAAA;QAC5C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAA;YAChF,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;YACjC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,OAAO,EAAE,CAAC;SAClD,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;QAE1F,MAAM,IAAI,GAAG,cAAc,CAAC;YAC1B,KAAK;YACL,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,EAAE,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE;SACvC,CAAC,CAAA;QAEF,IAAI,QAAQ;YAAE,OAAM,CAAC,uDAAuD;QAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QAC/E,KAAK,GAAG,KAAK,CAAA;QAEb,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,IAAI,KAAK,KAAK,KAAK;gBAAE,KAAK,GAAG,SAAS,CAAA;YACtC,IAAI,QAAQ,IAAI,MAAM;gBAAE,OAAM;YAC9B,IAAI,IAAI,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,KAAK,CACV,4BAA4B,IAAI,wDAAwD,CACzF,CAAA;YACH,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACnC,CAAC,CAAA;IAED,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,eAAe,CAAC,MAAM;YACpB,SAAS,CAAC,MAAM,CAAC,CAAA;QACnB,CAAC;QACD,sBAAsB,CAAC,MAAM;YAC3B,SAAS,CAAC,MAAM,CAAC,CAAA;QACnB,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,KAAmB,EAAE,MAAmB;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA;IACnC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACjC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,MAAM,IAAI,KAAK,CAAA;QACf,KAAK,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YACxD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;YAClC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ;YACtC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,GAAG;gBAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;;gBAC3E,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;QACnC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,eAAe,GAAG,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAA;AAE7D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AA8B3C,SAAS,cAAc,CAAC,IAA8B;IACpD,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IAC5C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAC/E,CAAC;AAID;;;;;;;;GAQG;AACH,MAAM,UAAU,GAAG,CAAC,UAA4B,EAAE;IAChD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAExE,IAAI,KAA+B,CAAA;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,MAAM,SAAS,GAAG,CAAC,MAAmB,EAAQ,EAAE;QAC9C,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA;QACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAA;YACxF,OAAM;QACR,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAA;YACnF,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,QAAQ,GAAG,IAAI,CAAA;YACf,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YACtB,KAAK,GAAG,SAAS,CAAA;YACjB,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA,CAAC,oDAAoD;QAC7F,CAAC,CAAA;QAED,+FAA+F;QAC/F,mFAAmF;QACnF,gGAAgG;QAChG,wFAAwF;QACxF,8FAA8F;QAC9F,6FAA6F;QAC7F,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAA+C,CAAA;QACvG,IAAI,KAAK,GAAG,KAAK,CAAA;QACjB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAe,EAAW,EAAE;YACnD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG,IAAI,CAAA;gBACZ,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;oBAChC,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;wBAC1C,MAAM,CAAC,KAAK,CAAC,SAAU,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;oBACnD,CAAC,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,cAAc,CAAC,GAAG,IAAI,CAAC,CAAA;QAChC,CAAC,CAAwC,CAAA;QAEzC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAChC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,EAAE,MAAmB,EAAiB,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,CAAA;QAC5C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAA;YACnF,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;YACjC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,OAAO,EAAE,CAAC;SAClD,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;QAE1F,MAAM,IAAI,GAAG,cAAc,CAAC;YAC1B,KAAK;YACL,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;SAC5B,CAAC,CAAA;QAEF,IAAI,QAAQ;YAAE,OAAM,CAAC,uDAAuD;QAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QAC/E,KAAK,GAAG,KAAK,CAAA;QAEb,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,IAAI,KAAK,KAAK,KAAK;gBAAE,KAAK,GAAG,SAAS,CAAA;YACtC,IAAI,QAAQ,IAAI,MAAM;gBAAE,OAAM;YAC9B,IAAI,IAAI,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,KAAK,CACV,4BAA4B,IAAI,wDAAwD,CACzF,CAAA;YACH,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACnC,CAAC,CAAA;IAED,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,eAAe,CAAC,MAAM;YACpB,SAAS,CAAC,MAAM,CAAC,CAAA;QACnB,CAAC;QACD,sBAAsB,CAAC,MAAM;YAC3B,SAAS,CAAC,MAAM,CAAC,CAAA;QACnB,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,KAAmB,EAAE,MAAmB;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA;IACnC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACjC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,MAAM,IAAI,KAAK,CAAA;QACf,KAAK,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YACxD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;YAClC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ;YACtC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,GAAG;gBAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;;gBAC3E,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;QACnC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,eAAe,GAAG,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vite-plugin-io1",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Publish your Vite dev server to the public internet over a bitmot io1 relay, with the CLI auto-managed.",
   "keywords": [
     "vite",

package/src/announce.ts

@@ -1,9 +1,11 @@
 /**
  * Pure argument-building and output-parsing for the bitmot io1 relay. Kept free of I/O so the wire
- * contract with the CLI -- which flags it takes, and how it announces a live host -- is unit-tested
+ * contract with the CLI - which flags it takes, and how it announces a live host - is unit-tested
  * in isolation and lives in one place.
  */
 
+import type { AddressInfo } from 'node:net'
+
 export interface RelayInvocation {
   /** Hosts to claim, one `--host` each (the CLI appends across repeats). At least one. */
   readonly hosts: readonly string[]
@@ -44,7 +46,7 @@ export function buildRelayArgs(invocation: RelayInvocation): string[] {
  * The public URL from a relay's per-host announcement line, or null for any other line. The relay
  * prints one `<arrow> <url> live` line per claimed host once its link is up (uncolored when its
  * stderr is piped, as it is under this plugin). Tolerant of the arrow glyph and surrounding spaces so
- * both the native and JVM CLIs -- and any cached older build -- parse the same; the trailing `live`
+ * both the native and JVM CLIs - and any cached older build - parse the same; the trailing `live`
  * badge is what distinguishes it from the pending-requests and update-nudge lines, which also carry
  * URLs but must not be mistaken for a live host.
  */
@@ -52,3 +54,19 @@ export function parseLiveUrl(line: string): string | null {
   const match = /(https?:\/\/\S+)\s+live\s*$/u.exec(line)
   return match ? match[1]! : null
 }
+
+/**
+ * The `--to` proxy URL for a dev server bound at [address], a Node AddressInfo read once the socket is
+ * listening (so its port is the one the OS actually settled on, whatever Vite asked for). A wildcard
+ * bind - '0.0.0.0', '::', or the empty string - is not itself a connectable target, so we dial the
+ * loopback of the same family; a concrete address is kept as-is, and an IPv6 authority is bracketed.
+ * Using the bound address rather than a hardcoded 127.0.0.1 is what lets an IPv6 bind (Vite falling
+ * back to ::1 when 127.0.0.1:PORT is taken) be reached, instead of silently missing it or hitting
+ * whatever unrelated server already holds that IPv4 port.
+ */
+export function relayTargetUrl(address: AddressInfo): string {
+  const wildcard = '' === address.address || '0.0.0.0' === address.address || '::' === address.address
+  const host = wildcard ? ('IPv6' === address.family ? '::1' : '127.0.0.1') : address.address
+  const authority = host.includes(':') ? `[${host}]` : host
+  return `http://${authority}:${address.port}`
+}

package/src/binary.ts

@@ -36,7 +36,7 @@ const DEFAULT_BASE_URL = 'https://bitmot.com'
  * The published artifact name for a platform/arch, or null when unsupported. Mirrors the server's
  * download whitelist (io/io1/gateway/download/DownloadRoutesImpl.kt) and the installer's `uname`
  * mapping: macOS and Linux, on x86_64 or 64-bit ARM. Node's arch is translated to the server's
- * spelling -- 'x64' -> 'x86_64' on both, but 64-bit ARM is 'arm64' on macOS and 'aarch64' on Linux.
+ * spelling - 'x64' -> 'x86_64' on both, but 64-bit ARM is 'arm64' on macOS and 'aarch64' on Linux.
  */
 export function artifactFor(platform: NodeJS.Platform, arch: string): string | null {
   if (platform === 'darwin') {
@@ -87,7 +87,7 @@ function onPath(): boolean {
  * followed response's checksum header names the current version: if a file for that hash is already
  * cached the body is dropped undownloaded, otherwise it is streamed, verified against the advertised
  * checksum, and atomically installed. This is what makes a plugin-managed CLI track production
- * automatically -- so the CLI's own "you're out of date" nudge (suppressed anyway when its stderr is
+ * automatically - so the CLI's own "you're out of date" nudge (suppressed anyway when its stderr is
  * piped, as it is here) does not matter for the auto-managed case.
  */
 export async function ensureDownloaded(

package/src/index.ts

@@ -1,6 +1,6 @@
 import { spawn, type ChildProcess } from 'node:child_process'
 import type { Plugin, PreviewServer, ViteDevServer } from 'vite'
-import { buildRelayArgs, parseLiveUrl } from './announce.js'
+import { buildRelayArgs, parseLiveUrl, relayTargetUrl } from './announce.js'
 import { resolveBitmot } from './binary.js'
 
 export type { RelayInvocation } from './announce.js'
@@ -41,11 +41,12 @@ type ServeServer = ViteDevServer | PreviewServer
 
 /**
  * Vite plugin: while the dev (or preview) server runs, publish it to the internet over a
- * `bitmot io1 relay` child process, proxying to the server's real bound port. The relay's lifetime is
- * tied to the server -- spawned once it is listening, killed when it closes -- so a shared URL never
- * outlives the session. The CLI is located on PATH or auto-downloaded (content-addressed, so it tracks
- * the deployed build). Reconnects are the relay's own concern; a non-zero exit is a definitive refusal
- * (bad auth, host held by another account) and is surfaced, not retried.
+ * `bitmot io1 relay` child process, proxying to the address the server actually bound. The relay's
+ * lifetime is tied to the server - armed by intercepting listen() and spawned the moment the socket
+ * binds, killed when it closes - so a shared URL never outlives the session. The CLI is located on
+ * PATH or auto-downloaded (content-addressed, so it tracks the deployed build). Reconnects are the
+ * relay's own concern; a non-zero exit is a definitive refusal (bad auth, host held by another
+ * account) and is surfaced, not retried.
  */
 export function io1(options: Io1PluginOptions = {}): Plugin {
   const hosts = normalizeHosts(options.host)
@@ -74,11 +75,26 @@ export function io1(options: Io1PluginOptions = {}): Plugin {
       process.removeListener('exit', onExit) // avoid piling up a listener per dev-server restart
     }
 
-    httpServer.once('listening', () => {
-      void start(server).catch((error: unknown) => {
-        logger.error(`[io1] ${(error as Error).message}`)
-      })
-    })
+    // Arm the relay by intercepting listen() rather than only awaiting the 'listening' event: Vite
+    // calls listen once it has resolved the final port - the configured one, or (under
+    // strictPort:false) the next free port after a collision - so wrapping the very call that binds
+    // the socket is what guarantees we read the port the server actually took. The one-time
+    // 'listening' hook fires the instant the bind completes; `armed` keeps a second listen() from
+    // spawning a second relay. The casts are the price of replacing an overloaded native method.
+    const originalListen = httpServer.listen.bind(httpServer) as unknown as (...args: unknown[]) => unknown
+    let armed = false
+    httpServer.listen = ((...args: unknown[]): unknown => {
+      if (!armed) {
+        armed = true
+        httpServer.once('listening', () => {
+          void start(server).catch((error: unknown) => {
+            logger.error(`[io1] ${(error as Error).message}`)
+          })
+        })
+      }
+      return originalListen(...args)
+    }) as unknown as typeof httpServer.listen
+
     httpServer.once('close', onExit)
     process.once('exit', onExit)
   }
@@ -87,7 +103,7 @@ export function io1(options: Io1PluginOptions = {}): Plugin {
     const logger = server.config.logger
     const address = server.httpServer?.address()
     if (!address || typeof address === 'string') {
-      logger.error('[io1] could not determine the dev server port; relay not started')
+      logger.error('[io1] could not determine the dev server address; relay not started')
       return
     }
 
@@ -105,7 +121,7 @@ export function io1(options: Io1PluginOptions = {}): Plugin {
       account: options.account,
       gateway: options.gateway,
       extraArgs: options.extraArgs,
-      to: `http://127.0.0.1:${address.port}`,
+      to: relayTargetUrl(address),
     })
 
     if (stopping) return // the server closed while we were resolving the binary