Function createLiveServer

src/artifacts/live-server.ts:100–235

(opts: CreateLiveServerOptions)

}

export async function createLiveServer(opts: CreateLiveServerOptions): Promise<LiveServerHandle> {
  const { cwd, id } = opts;
  const channelPath = opts.channelPath ?? LIVE_CHANNEL_PATH;
  const debounceMs = opts.debounceMs ?? 120;
  const host = opts.host ?? '127.0.0.1';
  const artifactDir = path.join(artifactsRoot(cwd), id);

  const clients = new Set<ServerResponse>();
  let lastHash: string | null = null;
  let closed = false;

  const pushReload = (hash: string) => {
    const frame = `event: reload\ndata: ${hash}\n\n`;
    for (const res of clients) {
      try { res.write(frame); } catch { /* dropped client; pruned on its 'close' */ }
    }
  };

  const flush = () => {
    void renderCurrent(cwd, id, channelPath).then(html => {
      const h = hashHtml(html);
      if (!shouldPush(lastHash, h)) return; // dedupe rename double-fire / no-op rewrites
      lastHash = h;
      pushReload(h);
    }).catch(err => logger.warn('Live artifact flush failed', { id, err: err?.message ?? String(err) }));
  };
  const debouncedFlush = makeDebouncer(flush, debounceMs);

  // ── HTTP server ──────────────────────────────────────────────────────────
  const token = opts.token;
  const server: Server = createServer((req, res) => {
    const url = req.url ?? '/';
    // Token gate: a network-/tunnel-exposed server rejects anyone without the link's token.
    const auth = checkLiveAuth(token, url, req.headers.cookie);
    if (!auth.ok) {
      res.writeHead(403, { 'Content-Type': 'text/plain; charset=utf-8' });
      res.end('403 — invalid or missing access token. Open the full private link (it ends with ?k=…).');
      return;
    }
    const cookieHeader: Record<string, string> = auth.setCookie
      ? { 'Set-Cookie': `qx_live=${token}; Path=/; SameSite=Lax; HttpOnly; Max-Age=86400` }
      : {};
    if (url === channelPath || url.startsWith(channelPath + '?')) {
      // SSE channel: keep open, push reload events.
      res.writeHead(200, {
        'Content-Type': 'text/event-stream',
        'Cache-Control': 'no-cache, no-transform',
        'Connection': 'keep-alive',
        ...cookieHeader,
      });
      res.flushHeaders?.();
      res.write('retry: 1000\n\n');
      res.write(': connected\n\n');
      clients.add(res);
      const heartbeat = setInterval(() => {
        try { res.write(': ping\n\n'); } catch { /* ignore */ }
      }, 25_000);
      const cleanup = () => { clearInterval(heartbeat); clients.delete(res); };