vite-plugin-rpx 0.11.28 → 0.11.29

package/dist/index.js

@@ -22023,8 +22023,14 @@ function generateWildcardPatterns(domain) {
   const patterns = new Set;
   patterns.add(domain);
   const parts = domain.split(".");
-  if (parts.length >= 2)
-    patterns.add(`*.${parts.slice(1).join(".")}`);
+  if (parts.length >= 3) {
+    const tld = parts[parts.length - 1];
+    const sld = parts[parts.length - 2];
+    const secondLevelSuffixes = new Set(["co", "com", "org", "net", "ac", "gov", "edu"]);
+    const baseIsPublicSuffix = parts.length === 3 && tld.length === 2 && secondLevelSuffixes.has(sld);
+    if (!baseIsPublicSuffix)
+      patterns.add(`*.${parts.slice(1).join(".")}`);
+  }
   return Array.from(patterns);
 }
 function generateSSLPaths(options) {
@@ -22146,7 +22152,15 @@ async function generateCertificate(options) {
       const scriptPath = join12(sslDir, "trust-rpx-cert.sh");
       const scriptContent = `#!/bin/bash
 echo "Trusting RPX Root CA"
-sudo security add-trusted-cert ${MACOS_CA_TRUST_FLAGS} -k ${MACOS_SYSTEM_KEYCHAIN} "${rootCAPaths.caCertPath}"
+# SUDO_PASSWORD (e.g. from a Stacks app's .env) makes the trust step
+# non-interactive. Without it, fall back to a normal sudo prompt.
+if [ -n "$SUDO_PASSWORD" ]
+then
+  printf '%s
+' "$SUDO_PASSWORD" | sudo -S -p '' security add-trusted-cert ${MACOS_CA_TRUST_FLAGS} -k ${MACOS_SYSTEM_KEYCHAIN} "${rootCAPaths.caCertPath}"
+else
+  sudo security add-trusted-cert ${MACOS_CA_TRUST_FLAGS} -k ${MACOS_SYSTEM_KEYCHAIN} "${rootCAPaths.caCertPath}"
+fi
 echo "Root CA trusted! Please restart your browser."
 echo "If you still see certificate warnings, type 'thisisunsafe' on the warning page in Chrome/Arc browsers."
 `;
@@ -22157,7 +22171,15 @@ echo "If you still see certificate warnings, type 'thisisunsafe' on the warning
       const scriptPath = join12(sslDir, "trust-rpx-cert.sh");
       const scriptContent = `#!/bin/bash
 echo "Trusting RPX Root CA"
-sudo security add-trusted-cert ${MACOS_CA_TRUST_FLAGS} -k ${MACOS_SYSTEM_KEYCHAIN} "${rootCAPaths.caCertPath}"
+# SUDO_PASSWORD (e.g. from a Stacks app's .env) makes the trust step
+# non-interactive. Without it, fall back to a normal sudo prompt.
+if [ -n "$SUDO_PASSWORD" ]
+then
+  printf '%s
+' "$SUDO_PASSWORD" | sudo -S -p '' security add-trusted-cert ${MACOS_CA_TRUST_FLAGS} -k ${MACOS_SYSTEM_KEYCHAIN} "${rootCAPaths.caCertPath}"
+else
+  sudo security add-trusted-cert ${MACOS_CA_TRUST_FLAGS} -k ${MACOS_SYSTEM_KEYCHAIN} "${rootCAPaths.caCertPath}"
+fi
 echo "Root CA trusted! Please restart your browser."
 echo "If you still see certificate warnings, type 'thisisunsafe' on the warning page in Chrome/Arc browsers."
 `;
@@ -24871,15 +24893,262 @@ var init_site_supervisor = __esm(() => {
   init_utils();
   init_logger();
 });
+// ../rpx/src/hosts.ts
+import { exec } from "node:child_process";
+import fs4 from "node:fs";
+import os2 from "node:os";
+import path8 from "node:path";
+import * as process26 from "node:process";
+import { promisify } from "node:util";
+function isLoopbackDevelopmentHost(host) {
+  const normalized = host.trim().toLowerCase();
+  return normalized === "localhost" || normalized.endsWith(".localhost") || normalized.endsWith(".localhost.");
+}
+async function execSudo(command) {
+  if (process26.platform === "win32")
+    throw new Error("Administrator privileges required on Windows");
+  if (isProcessElevated()) {
+    const { stdout } = await execAsync(command);
+    return stdout;
+  }
+  const sudoPassword = getSudoPassword();
+  const escaped = command.replace(/'/g, `'\\''`);
+  try {
+    if (sudoPassword) {
+      const { stdout } = await execAsync(`echo '${sudoPassword}' | sudo -S sh -c '${escaped}' 2>/dev/null`);
+      sudoPrivilegesAcquired = true;
+      return stdout;
+    }
+    if (sudoPrivilegesAcquired) {
+      try {
+        const { stdout } = await execAsync(`sudo -n sh -c '${escaped}'`);
+        return stdout;
+      } catch (error) {
+        debugLog("hosts", "Cached sudo privileges expired, requesting again", true);
+      }
+    }
+    try {
+      const { stdout } = await execAsync(`sudo -n sh -c '${escaped}'`);
+      sudoPrivilegesAcquired = true;
+      return stdout;
+    } catch {
+      throw new Error("sudo required but no cached credentials (set SUDO_PASSWORD in .env or run sudo -v)");
+    }
+  } catch (error) {
+    throw new Error(`Failed to execute sudo command: ${error.message}`);
+  }
+}
+function parseHostsLine(line) {
+  const hashIndex = line.indexOf("#");
+  const body = (hashIndex === -1 ? line : line.slice(0, hashIndex)).trim();
+  if (!body)
+    return null;
+  const comment = hashIndex === -1 ? "" : line.slice(hashIndex + 1).trim();
+  const [address, ...names] = body.split(/\s+/);
+  if (!address || names.length === 0)
+    return null;
+  const marker = /^rpx(?::pid=(\d+))?$/.exec(comment);
+  return {
+    address,
+    names,
+    comment,
+    rpxPid: marker?.[1] ? Number.parseInt(marker[1], 10) : null,
+    rpxManaged: marker !== null
+  };
+}
+function hostsLineMapsHost(line, host) {
+  const parsed = parseHostsLine(line);
+  return parsed !== null && LOOPBACK_ADDRESSES.has(parsed.address) && parsed.names.includes(host);
+}
+function filterRpxHostsEntries(content, hostsToRemove) {
+  const removal = new Set(hostsToRemove);
+  const removed = new Set;
+  const lines = content.split(`
+`);
+  const out = [];
+  let i2 = 0;
+  while (i2 < lines.length) {
+    const line = lines[i2];
+    if (line.trim() === LEGACY_HOSTS_MARKER) {
+      const block = [];
+      let j2 = i2 + 1;
+      while (j2 < lines.length) {
+        const blockLine = lines[j2];
+        if (blockLine.trim() === "" || blockLine.trim().startsWith("#"))
+          break;
+        block.push(blockLine);
+        j2++;
+      }
+      const kept = block.filter((blockLine) => {
+        const parsed2 = parseHostsLine(blockLine);
+        const hit = parsed2 !== null && LOOPBACK_ADDRESSES.has(parsed2.address) && parsed2.names.some((n2) => removal.has(n2));
+        if (hit) {
+          for (const name of parsed2.names) {
+            if (removal.has(name))
+              removed.add(name);
+          }
+        }
+        return !hit;
+      });
+      if (kept.length > 0 || block.length === 0)
+        out.push(line, ...kept);
+      i2 = j2;
+      continue;
+    }
+    const parsed = parseHostsLine(line);
+    if (parsed?.rpxManaged && LOOPBACK_ADDRESSES.has(parsed.address) && parsed.names.some((n2) => removal.has(n2))) {
+      for (const name of parsed.names) {
+        if (removal.has(name))
+          removed.add(name);
+      }
+      i2++;
+      continue;
+    }
+    out.push(line);
+    i2++;
+  }
+  while (out.length > 0 && out[out.length - 1].trim() === "")
+    out.pop();
+  return { content: `${out.join(`
+`)}
+`, removed: [...removed] };
+}
+async function readHostsFile(verbose) {
+  try {
+    return await fs4.promises.readFile(hostsFilePath, "utf-8");
+  } catch {
+    debugLog("hosts", "Reading hosts file requires elevated permissions, using sudo", verbose);
+    return execSudo(`cat "${hostsFilePath}"`);
+  }
+}
+async function writeHostsFile(content, verbose) {
+  const tmpFile = path8.join(os2.tmpdir(), `rpx-hosts-${Date.now()}.tmp`);
+  try {
+    await fs4.promises.writeFile(tmpFile, content, "utf8");
+    await execSudo(`cat "${tmpFile}" | tee "${hostsFilePath}" > /dev/null`);
+  } finally {
+    await fs4.promises.unlink(tmpFile).catch((err) => {
+      debugLog("hosts", `Failed to remove temporary file: ${err}`, verbose);
+    });
+  }
+}
+async function addHosts(hosts, verbose) {
+  const needsHostsFile = hosts.filter((h2) => !isLoopbackDevelopmentHost(h2));
+  const skipped = hosts.filter((h2) => isLoopbackDevelopmentHost(h2));
+  if (skipped.length > 0) {
+    debugLog("hosts", `Skipping /etc/hosts for loopback dev names: ${skipped.join(", ")}`, verbose);
+  }
+  if (needsHostsFile.length === 0)
+    return;
+  debugLog("hosts", `Adding hosts: ${needsHostsFile.join(", ")}`, verbose);
+  debugLog("hosts", `Using hosts file at: ${hostsFilePath}`, verbose);
+  try {
+    let existingContent;
+    try {
+      existingContent = await readHostsFile(verbose);
+    } catch (sudoErr) {
+      console.log("  Could not read hosts file — skipping hosts setup");
+      debugLog("hosts", `sudo read also failed: ${sudoErr}`, verbose);
+      throw new Error(`Cannot read hosts file: ${sudoErr}`);
+    }
+    const existingLines = existingContent.split(`
+`);
+    const newEntries = needsHostsFile.filter((host) => !existingLines.some((line) => hostsLineMapsHost(line, host)));
+    if (newEntries.length === 0) {
+      debugLog("hosts", "All hosts already exist in hosts file", verbose);
+      return;
+    }
+    const pid3 = process26.pid;
+    const hostEntries = newEntries.map((host) => `
+127.0.0.1 ${host} ${RPX_HOSTS_MARKER}:pid=${pid3}
+::1 ${host} ${RPX_HOSTS_MARKER}:pid=${pid3}`).join(`
+`);
+    try {
+      await writeHostsFile(existingContent + hostEntries, verbose);
+      console.log(`  Hosts updated: ${newEntries.join(", ")}`);
+    } catch (error) {
+      console.log("  Could not update hosts file automatically");
+      console.log("  Add these entries to /etc/hosts:");
+      newEntries.forEach((host) => {
+        console.log(`    127.0.0.1 ${host}`);
+        console.log(`    ::1 ${host}`);
+      });
+      console.log(`  Or run: sudo nano ${hostsFilePath}`);
+    }
+  } catch (err) {
+    const error = err;
+    debugLog("hosts", `Failed to manage hosts file: ${error.message}`, verbose);
+  }
+}
+async function removeHosts(hosts, verbose) {
+  debugLog("hosts", `Removing hosts: ${hosts.join(", ")}`, verbose);
+  try {
+    let content;
+    try {
+      content = await readHostsFile(verbose);
+    } catch (sudoErr) {
+      debugLog("hosts", `sudo read also failed: ${sudoErr}`, verbose);
+      throw new Error(`Cannot read hosts file: ${sudoErr}`);
+    }
+    const { content: newContent, removed } = filterRpxHostsEntries(content, hosts);
+    if (removed.length === 0) {
+      debugLog("hosts", "No matching rpx-managed hosts found to remove", verbose);
+      return;
+    }
+    try {
+      await writeHostsFile(newContent, verbose);
+      debugLog("hosts", `Hosts removed successfully: ${removed.join(", ")}`, verbose);
+    } catch (error) {
+      debugLog("hosts", "Could not clean up hosts file automatically", verbose);
+    }
+  } catch (err) {
+    debugLog("hosts", `Failed to clean up hosts file: ${err.message}`, verbose);
+  }
+}
+async function checkHosts(hosts, verbose) {
+  debugLog("hosts", `Checking hosts: ${hosts}`, verbose);
+  let content;
+  try {
+    content = await fs4.promises.readFile(hostsFilePath, "utf-8");
+  } catch (readErr) {
+    debugLog("hosts", `Error reading hosts file: ${readErr}`, verbose);
+    try {
+      const sudoPassword = getSudoPassword();
+      let cmd;
+      if (sudoPassword) {
+        cmd = `echo '${sudoPassword}' | sudo -S cat "${hostsFilePath}" 2>/dev/null`;
+      } else {
+        cmd = `sudo -n cat "${hostsFilePath}" 2>/dev/null || cat "${hostsFilePath}" 2>/dev/null || echo ""`;
+      }
+      const { stdout } = await execAsync(cmd);
+      content = stdout;
+    } catch (sudoErr) {
+      debugLog("hosts", `Cannot read hosts file, assuming entries don't exist: ${sudoErr}`, verbose);
+      return hosts.map(() => false);
+    }
+  }
+  const lines = content.split(`
+`);
+  return hosts.map((host) => lines.some((line) => hostsLineMapsHost(line, host)));
+}
+var execAsync, hostsFilePath, RPX_HOSTS_MARKER = "# rpx", LEGACY_HOSTS_MARKER = "# Added by rpx", LOOPBACK_ADDRESSES, sudoPrivilegesAcquired = false;
+var init_hosts = __esm(() => {
+  init_registry();
+  init_utils();
+  execAsync = promisify(exec);
+  hostsFilePath = process26.platform === "win32" ? path8.join(process26.env.windir || "C:\\Windows", "System32", "drivers", "etc", "hosts") : "/etc/hosts";
+  LOOPBACK_ADDRESSES = new Set(["127.0.0.1", "::1"]);
+});
+
 // ../rpx/src/dns-state.ts
 import * as fsp5 from "node:fs/promises";
 import { homedir as homedir11 } from "node:os";
-import * as path8 from "node:path";
+import * as path9 from "node:path";
 function defaultRpxDir() {
-  return path8.join(homedir11(), ".stacks", "rpx");
+  return path9.join(homedir11(), ".stacks", "rpx");
 }
 function getDnsStatePath(rpxDir = defaultRpxDir()) {
-  return path8.join(rpxDir, RPX_DNS_STATE_FILE);
+  return path9.join(rpxDir, RPX_DNS_STATE_FILE);
 }
 async function loadDnsState(rpxDir = defaultRpxDir()) {
   try {
@@ -24983,8 +25252,8 @@ __export(exports_dns, {
 });
 import dgram from "node:dgram";
 import * as fsp6 from "node:fs/promises";
-import * as path9 from "node:path";
-import * as process26 from "node:process";
+import * as path10 from "node:path";
+import * as process27 from "node:process";
 function parseHeader(buffer) {
   return {
     id: buffer.readUInt16BE(0),
@@ -25098,7 +25367,7 @@ function buildNxdomainResponse(queryId, question) {
   return Buffer.concat(parts);
 }
 async function startDnsServer(domains, verbose) {
-  if (process26.platform !== "darwin")
+  if (process27.platform !== "darwin")
     return false;
   const devDomains = devDomainsFromHosts(domains);
   if (devDomains.length === 0)
@@ -25218,7 +25487,7 @@ port ${DNS_PORT}
 `;
 }
 function resolverFilePath(basename) {
-  return path9.join(MACOS_RESOLVER_DIR, basename);
+  return path10.join(MACOS_RESOLVER_DIR, basename);
 }
 function contentLooksLikeRpxResolver(content) {
   return content.includes("127.0.0.1") && content.includes(String(DNS_PORT));
@@ -25233,7 +25502,7 @@ async function readResolverFile(basename) {
   }
 }
 async function flushDnsCache(verbose) {
-  if (process26.platform !== "darwin")
+  if (process27.platform !== "darwin")
     return;
   const { execSudoSync: execSudoSync2, getSudoPassword: getSudoPassword2, isProcessElevated: isProcessElevated2 } = await Promise.resolve().then(() => (init_utils(), exports_utils));
   if (!isProcessElevated2() && !getSudoPassword2()) {
@@ -25270,7 +25539,7 @@ async function setupResolver(verbose, domains) {
   return setupDevelopmentDns({ domains: domains ?? [], verbose });
 }
 async function installResolvers(basenames, verbose) {
-  if (process26.platform !== "darwin")
+  if (process27.platform !== "darwin")
     return true;
   const { getSudoPassword: getSudoPassword2, isProcessElevated: isProcessElevated2 } = await Promise.resolve().then(() => (init_utils(), exports_utils));
   if (!isProcessElevated2() && !getSudoPassword2()) {
@@ -25288,7 +25557,7 @@ async function installResolvers(basenames, verbose) {
   }
 }
 async function uninstallResolvers(basenames, verbose) {
-  if (process26.platform !== "darwin")
+  if (process27.platform !== "darwin")
     return;
   const { getSudoPassword: getSudoPassword2, isProcessElevated: isProcessElevated2 } = await Promise.resolve().then(() => (init_utils(), exports_utils));
   if (!isProcessElevated2() && !getSudoPassword2())
@@ -25302,7 +25571,7 @@ async function uninstallResolvers(basenames, verbose) {
   }
 }
 async function removeLegacyTldResolvers(verbose) {
-  if (process26.platform !== "darwin")
+  if (process27.platform !== "darwin")
     return [];
   const removed = [];
   for (const label of LEGACY_TLD_RESOLVER_LABELS) {
@@ -25337,7 +25606,7 @@ async function setupDevelopmentDns(opts) {
     version: DNS_STATE_VERSION,
     resolvers: basenames,
     domains,
-    ownerPid: opts.ownerPid ?? process26.pid,
+    ownerPid: opts.ownerPid ?? process27.pid,
     updatedAt: new Date().toISOString()
   };
   await saveDnsState(rpxDir, state);
@@ -25361,7 +25630,7 @@ async function syncDevelopmentDnsFromRegistry(entries, opts = {}) {
     domains,
     rpxDir,
     verbose: opts.verbose,
-    ownerPid: opts.ownerPid ?? process26.pid
+    ownerPid: opts.ownerPid ?? process27.pid
   });
 }
 async function tearDownDevelopmentDns(opts = {}) {
@@ -25403,13 +25672,13 @@ var init_dns = __esm(() => {
 import { spawn as nodeSpawn } from "node:child_process";
 import * as fsp7 from "node:fs/promises";
 import { homedir as homedir12 } from "node:os";
-import * as path10 from "node:path";
-import * as process27 from "node:process";
+import * as path11 from "node:path";
+import * as process28 from "node:process";
 function getDaemonRpxDir() {
-  return path10.join(homedir12(), ".stacks", "rpx");
+  return path11.join(homedir12(), ".stacks", "rpx");
 }
 function getDaemonPidPath(rpxDir = getDaemonRpxDir()) {
-  return path10.join(rpxDir, "daemon.pid");
+  return path11.join(rpxDir, "daemon.pid");
 }
 async function readDaemonPid(rpxDir = getDaemonRpxDir()) {
   try {
@@ -25428,12 +25697,12 @@ async function releaseDaemonLock(rpxDir = getDaemonRpxDir()) {
   await fsp7.unlink(getDaemonPidPath(rpxDir)).catch(() => {});
 }
 function defaultDaemonSpawnCommand() {
-  const exec = process27.execPath;
-  const interpName = path10.basename(exec).toLowerCase();
+  const exec2 = process28.execPath;
+  const interpName = path11.basename(exec2).toLowerCase();
   const isInterpreter = interpName === "bun" || interpName === "node" || interpName.startsWith("bun-");
-  if (isInterpreter && process27.argv[1])
-    return [exec, process27.argv[1], "daemon:start"];
-  return [exec, "daemon:start"];
+  if (isInterpreter && process28.argv[1])
+    return [exec2, process28.argv[1], "daemon:start"];
+  return [exec2, "daemon:start"];
 }
 async function ensureDaemonRunning(opts = {}) {
   const rpxDir = opts.rpxDir ?? getDaemonRpxDir();
@@ -25458,8 +25727,8 @@ async function ensureDaemonRunning(opts = {}) {
   const child = nodeSpawn(command[0], command.slice(1), {
     detached: true,
     stdio: "ignore",
-    cwd: opts.spawnCwd ?? process27.cwd(),
-    env: opts.spawnEnv ? { ...process27.env, ...opts.spawnEnv } : process27.env
+    cwd: opts.spawnCwd ?? process28.cwd(),
+    env: opts.spawnEnv ? { ...process28.env, ...opts.spawnEnv } : process28.env
   });
   child.unref();
   let spawnError = null;
@@ -25472,10 +25741,10 @@ async function ensureDaemonRunning(opts = {}) {
   while (Date.now() < deadline) {
     if (spawnError)
       throw spawnError;
-    const pid4 = await readDaemonPid(rpxDir);
-    if (pid4 !== null && isPidAlive(pid4)) {
-      debugLog("daemon", `daemon registered with pid=${pid4}`, verbose);
-      return { pid: pid4, spawned: true };
+    const pid5 = await readDaemonPid(rpxDir);
+    if (pid5 !== null && isPidAlive(pid5)) {
+      debugLog("daemon", `daemon registered with pid=${pid5}`, verbose);
+      return { pid: pid5, spawned: true };
     }
     await new Promise((resolve14) => setTimeout(resolve14, pollMs));
   }
@@ -25497,6 +25766,7 @@ var init_daemon = __esm(() => {
   init_static_files();
   init_auth();
   init_registry();
+  init_hosts();
   init_dns();
   init_utils();
   registryUpstreamPools = new Map;
@@ -25531,9 +25801,9 @@ init_daemon();
 init_logger();
 init_registry();
 init_utils();
-import * as fs4 from "node:fs";
-import * as path11 from "node:path";
-import * as process28 from "node:process";
+import * as fs5 from "node:fs";
+import * as path12 from "node:path";
+import * as process29 from "node:process";
 function deriveIdFromTarget(to, routePath) {
   const base = routePath && routePath !== "/" ? `${to}${routePath}` : to;
   const cleaned = base.replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 128);
@@ -25561,8 +25831,8 @@ async function runViaDaemon(opts) {
       from: p2.from,
       to: p2.to,
       path: p2.path,
-      pid: opts.persistent ? undefined : process28.pid,
-      cwd: process28.cwd(),
+      pid: opts.persistent ? undefined : process29.pid,
+      cwd: process29.cwd(),
       createdAt,
       cleanUrls: p2.cleanUrls,
       changeOrigin: p2.changeOrigin,
@@ -25600,219 +25870,24 @@ async function runViaDaemon(opts) {
   };
   const onSignal = (sig) => {
     debugLog("runner", `received ${sig}, unregistering ${idsForCleanup.length} entries`, verbose);
-    cleanup().finally(() => process28.exit(0));
+    cleanup().finally(() => process29.exit(0));
   };
-  process28.once("SIGINT", onSignal);
-  process28.once("SIGTERM", onSignal);
-  process28.once("exit", () => {
+  process29.once("SIGINT", onSignal);
+  process29.once("SIGTERM", onSignal);
+  process29.once("exit", () => {
     if (cleaned)
       return;
     for (const id of idsForCleanup) {
       try {
-        fs4.unlinkSync(path11.join(dirForCleanup, `${id}.json`));
+        fs5.unlinkSync(path12.join(dirForCleanup, `${id}.json`));
       } catch {}
     }
   });
   await new Promise(() => {});
 }
 
-// ../rpx/src/hosts.ts
-init_utils();
-import { exec } from "node:child_process";
-import fs5 from "node:fs";
-import os2 from "node:os";
-import path12 from "node:path";
-import * as process29 from "node:process";
-import { promisify } from "node:util";
-var execAsync = promisify(exec);
-function isLoopbackDevelopmentHost(host) {
-  const normalized = host.trim().toLowerCase();
-  return normalized === "localhost" || normalized.endsWith(".localhost") || normalized.endsWith(".localhost.");
-}
-var hostsFilePath = process29.platform === "win32" ? path12.join(process29.env.windir || "C:\\Windows", "System32", "drivers", "etc", "hosts") : "/etc/hosts";
-var sudoPrivilegesAcquired = false;
-async function execSudo(command) {
-  if (process29.platform === "win32")
-    throw new Error("Administrator privileges required on Windows");
-  if (isProcessElevated()) {
-    const { stdout } = await execAsync(command);
-    return stdout;
-  }
-  const sudoPassword = getSudoPassword();
-  const escaped = command.replace(/'/g, `'\\''`);
-  try {
-    if (sudoPassword) {
-      const { stdout } = await execAsync(`echo '${sudoPassword}' | sudo -S sh -c '${escaped}' 2>/dev/null`);
-      sudoPrivilegesAcquired = true;
-      return stdout;
-    }
-    if (sudoPrivilegesAcquired) {
-      try {
-        const { stdout } = await execAsync(`sudo -n sh -c '${escaped}'`);
-        return stdout;
-      } catch (error) {
-        debugLog("hosts", "Cached sudo privileges expired, requesting again", true);
-      }
-    }
-    try {
-      const { stdout } = await execAsync(`sudo -n sh -c '${escaped}'`);
-      sudoPrivilegesAcquired = true;
-      return stdout;
-    } catch {
-      throw new Error("sudo required but no cached credentials (set SUDO_PASSWORD in .env or run sudo -v)");
-    }
-  } catch (error) {
-    throw new Error(`Failed to execute sudo command: ${error.message}`);
-  }
-}
-async function addHosts(hosts, verbose) {
-  const needsHostsFile = hosts.filter((h2) => !isLoopbackDevelopmentHost(h2));
-  const skipped = hosts.filter((h2) => isLoopbackDevelopmentHost(h2));
-  if (skipped.length > 0) {
-    debugLog("hosts", `Skipping /etc/hosts for loopback dev names: ${skipped.join(", ")}`, verbose);
-  }
-  if (needsHostsFile.length === 0)
-    return;
-  debugLog("hosts", `Adding hosts: ${needsHostsFile.join(", ")}`, verbose);
-  debugLog("hosts", `Using hosts file at: ${hostsFilePath}`, verbose);
-  try {
-    let existingContent;
-    try {
-      existingContent = await fs5.promises.readFile(hostsFilePath, "utf-8");
-    } catch {
-      debugLog("hosts", "Reading hosts file requires elevated permissions, using sudo", verbose);
-      try {
-        existingContent = await execSudo(`cat "${hostsFilePath}"`);
-      } catch (sudoErr) {
-        console.log("  Could not read hosts file — skipping hosts setup");
-        debugLog("hosts", `sudo read also failed: ${sudoErr}`, verbose);
-        throw new Error(`Cannot read hosts file: ${sudoErr}`);
-      }
-    }
-    const newEntries = needsHostsFile.filter((host) => {
-      const ipv4Entry = `127.0.0.1 ${host}`;
-      const ipv6Entry = `::1 ${host}`;
-      return !existingContent.includes(ipv4Entry) && !existingContent.includes(ipv6Entry);
-    });
-    if (newEntries.length === 0) {
-      debugLog("hosts", "All hosts already exist in hosts file", verbose);
-      return;
-    }
-    const hostEntries = newEntries.map((host) => `
-# Added by rpx
-127.0.0.1 ${host}
-::1 ${host}`).join(`
-`);
-    const tmpFile = path12.join(os2.tmpdir(), `rpx-hosts-${Date.now()}.tmp`);
-    try {
-      await fs5.promises.writeFile(tmpFile, existingContent + hostEntries, "utf8");
-      await execSudo(`cat "${tmpFile}" | tee "${hostsFilePath}" > /dev/null`);
-      console.log(`  Hosts updated: ${newEntries.join(", ")}`);
-    } catch (error) {
-      console.log("  Could not update hosts file automatically");
-      console.log("  Add these entries to /etc/hosts:");
-      newEntries.forEach((host) => {
-        console.log(`    127.0.0.1 ${host}`);
-        console.log(`    ::1 ${host}`);
-      });
-      console.log(`  Or run: sudo nano ${hostsFilePath}`);
-    } finally {
-      try {
-        await fs5.promises.unlink(tmpFile);
-      } catch {}
-    }
-  } catch (err) {
-    const error = err;
-    debugLog("hosts", `Failed to manage hosts file: ${error.message}`, verbose);
-  }
-}
-async function removeHosts(hosts, verbose) {
-  debugLog("hosts", `Removing hosts: ${hosts.join(", ")}`, verbose);
-  try {
-    let content;
-    try {
-      content = await fs5.promises.readFile(hostsFilePath, "utf-8");
-    } catch {
-      debugLog("hosts", "Reading hosts file requires elevated permissions, using sudo", verbose);
-      try {
-        content = await execSudo(`cat "${hostsFilePath}"`);
-      } catch (sudoErr) {
-        debugLog("hosts", `sudo read also failed: ${sudoErr}`, verbose);
-        throw new Error(`Cannot read hosts file: ${sudoErr}`);
-      }
-    }
-    const lines = content.split(`
-`);
-    let modified = false;
-    const filteredLines = lines.filter((line) => {
-      const isHostLine = hosts.some((host) => line.includes(` ${host}`) && (line.includes("127.0.0.1") || line.includes("::1")));
-      if (isHostLine) {
-        modified = true;
-        return false;
-      }
-      if (line.trim() === "# Added by rpx") {
-        modified = true;
-        return false;
-      }
-      return true;
-    });
-    if (!modified) {
-      debugLog("hosts", "No matching hosts found to remove", verbose);
-      return;
-    }
-    while (filteredLines[filteredLines.length - 1]?.trim() === "")
-      filteredLines.pop();
-    const newContent = `${filteredLines.join(`
-`)}
-`;
-    const tmpFile = path12.join(os2.tmpdir(), `rpx-hosts-${Date.now()}.tmp`);
-    try {
-      await fs5.promises.writeFile(tmpFile, newContent, "utf8");
-      await execSudo(`cat "${tmpFile}" | tee "${hostsFilePath}" > /dev/null`);
-      debugLog("hosts", "Hosts removed successfully", verbose);
-    } catch (error) {
-      debugLog("hosts", "Could not clean up hosts file automatically", verbose);
-    } finally {
-      try {
-        await fs5.promises.unlink(tmpFile);
-      } catch (unlinkErr) {
-        debugLog("hosts", `Failed to remove temporary file: ${unlinkErr}`, verbose);
-      }
-    }
-  } catch (err) {
-    debugLog("hosts", `Failed to clean up hosts file: ${err.message}`, verbose);
-  }
-}
-async function checkHosts(hosts, verbose) {
-  debugLog("hosts", `Checking hosts: ${hosts}`, verbose);
-  let content;
-  try {
-    content = await fs5.promises.readFile(hostsFilePath, "utf-8");
-  } catch (readErr) {
-    debugLog("hosts", `Error reading hosts file: ${readErr}`, verbose);
-    try {
-      const sudoPassword = getSudoPassword();
-      let cmd;
-      if (sudoPassword) {
-        cmd = `echo '${sudoPassword}' | sudo -S cat "${hostsFilePath}" 2>/dev/null`;
-      } else {
-        cmd = `sudo -n cat "${hostsFilePath}" 2>/dev/null || cat "${hostsFilePath}" 2>/dev/null || echo ""`;
-      }
-      const { stdout } = await execAsync(cmd);
-      content = stdout;
-    } catch (sudoErr) {
-      debugLog("hosts", `Cannot read hosts file, assuming entries don't exist: ${sudoErr}`, verbose);
-      return hosts.map(() => false);
-    }
-  }
-  return hosts.map((host) => {
-    const ipv4Entry = `127.0.0.1 ${host}`;
-    const ipv6Entry = `::1 ${host}`;
-    return content.includes(ipv4Entry) || content.includes(ipv6Entry);
-  });
-}
-
 // ../rpx/src/start.ts
+init_hosts();
 init_https();
 init_port_manager();
 
@@ -26846,6 +26921,7 @@ function logToConsole(options) {
 
 // ../rpx/src/index.ts
 init_config();
+init_hosts();
 init_https();
 init_macos_trust();
 init_cert_inspect();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "vite-plugin-rpx",
   "type": "module",
-  "version": "0.11.28",
+  "version": "0.11.29",
   "description": "A modern and smart reverse proxy. Vite plugin.",
   "author": "Chris Breuer <chris@stacksjs.org>",
   "license": "MIT",
@@ -47,7 +47,7 @@
     "typecheck": "bunx tsc --noEmit"
   },
   "dependencies": {
-    "@stacksjs/rpx": "0.11.28",
+    "@stacksjs/rpx": "0.11.29",
     "@stacksjs/tlsx": "^0.13.9"
   },
   "simple-git-hooks": {