hle-client 0.4.0__tar.gz

hle_client-0.4.0/.github/workflows/homebrew.yml

@@ -0,0 +1,85 @@
+name: Update Homebrew Formula
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  update-formula:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Derive version from tag
+        run: |
+          VERSION="${GITHUB_REF_NAME#v}"
+          echo "VERSION=${VERSION}" >> "$GITHUB_ENV"
+
+      - name: Wait for PyPI availability
+        run: |
+          echo "Waiting for hle-client==${VERSION} on PyPI..."
+          for i in $(seq 1 30); do
+            if pip index versions hle-client 2>/dev/null | grep -q "$VERSION"; then
+              echo "Package available on PyPI"
+              exit 0
+            fi
+            echo "Attempt $i/30 — waiting 20s..."
+            sleep 20
+          done
+          echo "Timed out waiting for PyPI"
+          exit 1
+
+      - name: Checkout homebrew-tap
+        uses: actions/checkout@v4
+        with:
+          repository: hle-world/homebrew-tap
+          token: ${{ secrets.HOMEBREW_TAP_TOKEN }}
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Update formula
+        run: |
+          pip install homebrew-pypi-poet "hle-client==${VERSION}"
+
+          # Generate resource stanzas
+          RESOURCES=$(poet hle-client 2>/dev/null | sed -n '/^  resource/,/^  end$/p')
+
+          # Get sdist SHA256
+          pip download "hle-client==${VERSION}" --no-deps --no-binary :all: -d /tmp/hle-sdist
+          SHA256=$(sha256sum /tmp/hle-sdist/*.tar.gz | cut -d' ' -f1)
+          SDIST_URL="https://files.pythonhosted.org/packages/source/h/hle-client/hle_client-${VERSION}.tar.gz"
+
+          mkdir -p Formula
+          cat > Formula/hle-client.rb << FORMULA
+          class HleClient < Formula
+            include Language::Python::Virtualenv
+
+            desc "Home Lab Everywhere — Expose homelab services with built-in SSO"
+            homepage "https://hle.world"
+            url "${SDIST_URL}"
+            sha256 "${SHA256}"
+            license "MIT"
+
+            depends_on "python@3.13"
+
+          ${RESOURCES}
+
+            def install
+              virtualenv_install_with_resources
+            end
+
+            test do
+              assert_match version.to_s, shell_output("#{bin}/hle --version")
+            end
+          end
+          FORMULA
+
+      - name: Commit and push
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add Formula/hle-client.rb
+          git commit -m "Update hle-client to ${VERSION}"
+          git push

hle_client-0.4.0/.github/workflows/publish.yml

@@ -0,0 +1,61 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v4
+
+      - name: Install dependencies
+        run: |
+          uv venv
+          uv pip install -e ".[dev]"
+
+      - name: Lint
+        run: |
+          source .venv/bin/activate
+          ruff check src/ tests/
+          ruff format --check src/ tests/
+
+      - name: Test
+        run: |
+          source .venv/bin/activate
+          pytest tests/ -v
+
+  publish:
+    needs: test
+    runs-on: ubuntu-latest
+    environment: pypi
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install build tools
+        run: pip install build
+
+      - name: Build sdist and wheel
+        run: python -m build
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

hle_client-0.4.0/.github/workflows/test.yml

@@ -0,0 +1,48 @@
+name: Test
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v4
+
+      - name: Install dependencies
+        run: |
+          uv venv
+          uv pip install -e ".[dev]"
+
+      - name: Lint
+        run: |
+          source .venv/bin/activate
+          ruff check src/ tests/
+          ruff format --check src/ tests/
+
+      - name: Test
+        run: |
+          source .venv/bin/activate
+          pytest tests/ -v
+
+      - name: Verify imports
+        run: |
+          source .venv/bin/activate
+          python -c "from hle_client.cli import main; print('CLI import OK')"
+          python -c "from hle_common.protocol import MessageType; print('Protocol import OK')"
+          python -c "from hle_common.models import TunnelRegistration; print('Models import OK')"

hle_client-0.4.0/.gitignore

@@ -0,0 +1,34 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.egg-info/
+*.egg
+dist/
+build/
+*.whl
+
+# Virtual environments
+.venv/
+venv/
+ENV/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+*.swo
+*~
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Testing
+.pytest_cache/
+.coverage
+htmlcov/
+.mypy_cache/
+
+# Distribution
+*.tar.gz

hle_client-0.4.0/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+## v0.4.0 — 2026-02-19
+
+Initial public release of the HLE client, extracted from the monorepo as a standalone package.
+
+- First PyPI release with `pip install hle-client`
+- Curl installer script at `https://get.hle.world`
+- Homebrew tap at `hle-world/tap/hle-client`
+- Fixed race condition in WebSocket stream handling (`_ws_streams` now protected by `asyncio.Lock`)
+- Fixed empty body handling: `is not None` checks instead of truthiness for base64 bodies
+- CLI commands: `expose`, `tunnels`, `access` (list/add/remove), `pin` (set/remove/status), `share` (create/list/revoke), `webhook` (placeholder)
+- API key resolution: `--api-key` flag > `HLE_API_KEY` env var > `~/.config/hle/config.toml`
+- WebSocket multiplexing with automatic reconnection and exponential backoff
+- CI with Python 3.11/3.12/3.13 matrix testing

hle_client-0.4.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-2026 Home Lab Everywhere
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

hle_client-0.4.0/PKG-INFO

@@ -0,0 +1,190 @@
+Metadata-Version: 2.4
+Name: hle-client
+Version: 0.4.0
+Summary: Home Lab Everywhere — Expose homelab services to the internet with built-in SSO
+Project-URL: Homepage, https://hle.world
+Project-URL: Repository, https://github.com/hle-world/hle-client
+Project-URL: Issues, https://github.com/hle-world/hle-client/issues
+Author: Home Lab Everywhere
+License-Expression: MIT
+License-File: LICENSE
+Keywords: homelab,reverse-proxy,sso,tunnel,webhook
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: System :: Networking
+Requires-Python: >=3.11
+Requires-Dist: click>=8.1
+Requires-Dist: cryptography>=43.0
+Requires-Dist: httpx>=0.27
+Requires-Dist: pydantic-settings>=2.0
+Requires-Dist: pydantic>=2.0
+Requires-Dist: pyjwt>=2.9
+Requires-Dist: rich>=13.0
+Requires-Dist: websockets>=13.0
+Provides-Extra: dev
+Requires-Dist: mypy>=1.13; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.24; extra == 'dev'
+Requires-Dist: pytest-cov>=6.0; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: ruff>=0.8; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# HLE Client
+
+[![PyPI](https://img.shields.io/pypi/v/hle-client)](https://pypi.org/project/hle-client/)
+[![Python](https://img.shields.io/pypi/pyversions/hle-client)](https://pypi.org/project/hle-client/)
+[![License](https://img.shields.io/github/license/hle-world/hle-client)](LICENSE)
+[![CI](https://github.com/hle-world/hle-client/actions/workflows/test.yml/badge.svg)](https://github.com/hle-world/hle-client/actions/workflows/test.yml)
+
+**Home Lab Everywhere** — Expose homelab services to the internet with built-in SSO authentication and WebSocket support.
+
+One command: `hle expose --service http://localhost:8080`
+
+Your local service gets a public URL like `myapp-x7k.hle.world` with automatic HTTPS and SSO protection.
+
+## Install
+
+### pip (or pipx)
+
+```bash
+pip install hle-client
+# or
+pipx install hle-client
+```
+
+### Curl installer
+
+```bash
+curl -fsSL https://get.hle.world | sh
+```
+
+Installs via pipx (preferred), uv, or pip-in-venv. Supports `--version`:
+
+```bash
+curl -fsSL https://get.hle.world | sh -s -- --version 0.4.0
+```
+
+### Homebrew
+
+```bash
+brew install hle-world/tap/hle-client
+```
+
+## Quick Start
+
+1. **Sign up** at [hle.world](https://hle.world) and create an API key in the dashboard.
+
+2. **Expose a service:**
+
+```bash
+hle expose --service http://localhost:8080 --api-key hle_your_key_here
+```
+
+The API key is saved to `~/.config/hle/config.toml` after first use, so you only need to provide it once.
+
+## CLI Usage
+
+### `hle expose`
+
+Expose a local service to the internet.
+
+```bash
+hle expose --service http://localhost:8080              # Basic usage
+hle expose --service http://localhost:8080 --label ha   # Custom subdomain label
+hle expose --service http://localhost:3000 --auth none  # Disable SSO
+hle expose --service http://localhost:8080 --no-websocket  # Disable WS proxying
+```
+
+Options:
+- `--service` — Local service URL (required)
+- `--label` — Service label for the subdomain (e.g. `ha` → `ha-x7k.hle.world`)
+- `--auth` — Auth mode: `sso` (default) or `none`
+- `--websocket/--no-websocket` — Enable/disable WebSocket proxying (default: enabled)
+- `--api-key` — API key (also reads `HLE_API_KEY` env var, then config file)
+- `--relay-host` — Relay server host (default: `hle.world`)
+- `--relay-port` — Relay server port (default: `443`)
+
+### `hle tunnels`
+
+List your active tunnels.
+
+```bash
+hle tunnels
+```
+
+### `hle access`
+
+Manage per-tunnel email allow-lists for SSO access.
+
+```bash
+hle access list myapp-x7k                            # List access rules
+hle access add myapp-x7k friend@example.com           # Allow an email
+hle access add myapp-x7k dev@co.com --provider github # Require GitHub SSO
+hle access remove myapp-x7k 42                        # Remove rule by ID
+```
+
+### `hle pin`
+
+Manage PIN-based access control for tunnels.
+
+```bash
+hle pin set myapp-x7k       # Set a PIN (prompts for 4-8 digit PIN)
+hle pin status myapp-x7k    # Check PIN status
+hle pin remove myapp-x7k    # Remove PIN
+```
+
+### `hle share`
+
+Create and manage temporary share links.
+
+```bash
+hle share create myapp-x7k                         # 24h link (default)
+hle share create myapp-x7k --duration 1h           # 1-hour link
+hle share create myapp-x7k --max-uses 5            # Limited uses
+hle share list myapp-x7k                           # List share links
+hle share revoke myapp-x7k 42                      # Revoke a link
+```
+
+### Global Options
+
+```bash
+hle --version    # Show version
+hle --debug ...  # Enable debug logging
+```
+
+## Configuration
+
+The HLE client stores configuration in `~/.config/hle/config.toml`:
+
+```toml
+api_key = "hle_your_key_here"
+```
+
+API key resolution order:
+1. `--api-key` CLI flag
+2. `HLE_API_KEY` environment variable
+3. `~/.config/hle/config.toml`
+
+## Development
+
+```bash
+git clone https://github.com/hle-world/hle-client.git
+cd hle-client
+uv venv && source .venv/bin/activate
+uv pip install -e ".[dev]"
+
+# Run tests
+pytest
+
+# Lint
+ruff check src/ tests/
+ruff format --check src/ tests/
+```
+
+## License
+
+MIT — see [LICENSE](LICENSE).

hle_client-0.4.0/README.md

@@ -0,0 +1,155 @@
+# HLE Client
+
+[![PyPI](https://img.shields.io/pypi/v/hle-client)](https://pypi.org/project/hle-client/)
+[![Python](https://img.shields.io/pypi/pyversions/hle-client)](https://pypi.org/project/hle-client/)
+[![License](https://img.shields.io/github/license/hle-world/hle-client)](LICENSE)
+[![CI](https://github.com/hle-world/hle-client/actions/workflows/test.yml/badge.svg)](https://github.com/hle-world/hle-client/actions/workflows/test.yml)
+
+**Home Lab Everywhere** — Expose homelab services to the internet with built-in SSO authentication and WebSocket support.
+
+One command: `hle expose --service http://localhost:8080`
+
+Your local service gets a public URL like `myapp-x7k.hle.world` with automatic HTTPS and SSO protection.
+
+## Install
+
+### pip (or pipx)
+
+```bash
+pip install hle-client
+# or
+pipx install hle-client
+```
+
+### Curl installer
+
+```bash
+curl -fsSL https://get.hle.world | sh
+```
+
+Installs via pipx (preferred), uv, or pip-in-venv. Supports `--version`:
+
+```bash
+curl -fsSL https://get.hle.world | sh -s -- --version 0.4.0
+```
+
+### Homebrew
+
+```bash
+brew install hle-world/tap/hle-client
+```
+
+## Quick Start
+
+1. **Sign up** at [hle.world](https://hle.world) and create an API key in the dashboard.
+
+2. **Expose a service:**
+
+```bash
+hle expose --service http://localhost:8080 --api-key hle_your_key_here
+```
+
+The API key is saved to `~/.config/hle/config.toml` after first use, so you only need to provide it once.
+
+## CLI Usage
+
+### `hle expose`
+
+Expose a local service to the internet.
+
+```bash
+hle expose --service http://localhost:8080              # Basic usage
+hle expose --service http://localhost:8080 --label ha   # Custom subdomain label
+hle expose --service http://localhost:3000 --auth none  # Disable SSO
+hle expose --service http://localhost:8080 --no-websocket  # Disable WS proxying
+```
+
+Options:
+- `--service` — Local service URL (required)
+- `--label` — Service label for the subdomain (e.g. `ha` → `ha-x7k.hle.world`)
+- `--auth` — Auth mode: `sso` (default) or `none`
+- `--websocket/--no-websocket` — Enable/disable WebSocket proxying (default: enabled)
+- `--api-key` — API key (also reads `HLE_API_KEY` env var, then config file)
+- `--relay-host` — Relay server host (default: `hle.world`)
+- `--relay-port` — Relay server port (default: `443`)
+
+### `hle tunnels`
+
+List your active tunnels.
+
+```bash
+hle tunnels
+```
+
+### `hle access`
+
+Manage per-tunnel email allow-lists for SSO access.
+
+```bash
+hle access list myapp-x7k                            # List access rules
+hle access add myapp-x7k friend@example.com           # Allow an email
+hle access add myapp-x7k dev@co.com --provider github # Require GitHub SSO
+hle access remove myapp-x7k 42                        # Remove rule by ID
+```
+
+### `hle pin`
+
+Manage PIN-based access control for tunnels.
+
+```bash
+hle pin set myapp-x7k       # Set a PIN (prompts for 4-8 digit PIN)
+hle pin status myapp-x7k    # Check PIN status
+hle pin remove myapp-x7k    # Remove PIN
+```
+
+### `hle share`
+
+Create and manage temporary share links.
+
+```bash
+hle share create myapp-x7k                         # 24h link (default)
+hle share create myapp-x7k --duration 1h           # 1-hour link
+hle share create myapp-x7k --max-uses 5            # Limited uses
+hle share list myapp-x7k                           # List share links
+hle share revoke myapp-x7k 42                      # Revoke a link
+```
+
+### Global Options
+
+```bash
+hle --version    # Show version
+hle --debug ...  # Enable debug logging
+```
+
+## Configuration
+
+The HLE client stores configuration in `~/.config/hle/config.toml`:
+
+```toml
+api_key = "hle_your_key_here"
+```
+
+API key resolution order:
+1. `--api-key` CLI flag
+2. `HLE_API_KEY` environment variable
+3. `~/.config/hle/config.toml`
+
+## Development
+
+```bash
+git clone https://github.com/hle-world/hle-client.git
+cd hle-client
+uv venv && source .venv/bin/activate
+uv pip install -e ".[dev]"
+
+# Run tests
+pytest
+
+# Lint
+ruff check src/ tests/
+ruff format --check src/ tests/
+```
+
+## License
+
+MIT — see [LICENSE](LICENSE).