DUNGEONS-34: simplify external HTTPS proxy setup

Co-authored-by: multica-agent <github@multica.ai>

scripts/dev-all.test.mjs

@@ -1,6 +1,9 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
-import { parseArgs, addresses } from './dev-all.mjs';
+import { mkdtempSync, writeFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { parseArgs, addresses, connectionEnv, readSettings } from './dev-all.mjs';
 
 test('default and named host/port options', () => {
   assert.deepEqual(parseArgs([]), { host: '127.0.0.1', port: 3000 });
@@ -26,3 +29,38 @@ test('explicit HTTPS origin does not silently authorize HTTP aliases', () => {
   assert.throws(() => addresses(parseArgs([]), {}, { WEBKA_ORIGIN: 'https://webka.local/login' }));
   assert.throws(() => addresses(parseArgs([]), {}, { WEBKA_ALLOWED_ORIGINS: '*' }));
 });
+
+test('homepage mode accepts proxy domain/IP, normalizes HTTPS and exposes the upstream', () => {
+  assert.deepEqual(parseArgs(['--homepage', 'camera.example.com', '--port', '3002']), { host: '0.0.0.0', port: 3002, homepage: 'https://camera.example.com' });
+  assert.deepEqual(parseArgs(['--homepage=https://192.168.1.10:8443/', '--host=127.0.0.1']), { host: '127.0.0.1', port: 3000, homepage: 'https://192.168.1.10:8443' });
+  for (const address of ['', 'http://camera.example.com', 'https://camera.example.com/watch', 'https://a:b@camera.example.com', 'https://camera.example.com?x=1', 'https://camera.example.com#x', 'https://0.0.0.0', 'https://[::]']) assert.throws(() => parseArgs(['--homepage', address]));
+});
+test('saved settings apply, with command-line overrides', () => {
+  const settings = { homepage: 'https://camera.example.com', port: 3002 };
+  assert.deepEqual(parseArgs([], settings), { host: '0.0.0.0', port: 3002, homepage: settings.homepage });
+  assert.deepEqual(parseArgs(['--homepage', 'https://other.example.com', '--port', '3003', '--host', '127.0.0.1'], settings), { host: '127.0.0.1', port: 3003, homepage: 'https://other.example.com' });
+  assert.throws(() => parseArgs([], { port: 'invalid' }));
+});
+test('configuration file loads a homepage and rejects malformed or misspelled settings', () => {
+  const directory = mkdtempSync(join(tmpdir(), 'webka-settings-'));
+  const path = join(directory, 'webka.config.json');
+  try {
+    assert.deepEqual(readSettings(path), {});
+    writeFileSync(path, JSON.stringify({ homepage: 'camera.example.com', port: 3002 }));
+    assert.deepEqual(parseArgs([], readSettings(path)), { host: '0.0.0.0', port: 3002, homepage: 'https://camera.example.com' });
+    for (const invalid of ['{', 'null', '[]', '{"homePage":"camera.example.com"}']) {
+      writeFileSync(path, invalid);
+      assert.throws(() => readSettings(path), /webka.config.json/);
+    }
+  } finally {
+    rmSync(directory, { recursive: true, force: true });
+  }
+});
+test('homepage wins over old HTTPS/mDNS environment settings without allowing HTTP aliases', () => {
+  const env = { WEBKA_MDNS: '1', WEBKA_ORIGIN: 'https://old.local', WEBKA_ALLOWED_ORIGINS: 'http://unsafe.example.com' };
+  const config = parseArgs(['--homepage', 'https://camera.example.com:8443', '--port', '3002']);
+  const urls = addresses(config, networks, env);
+  assert.equal(urls.origin, config.homepage);
+  assert.deepEqual(urls.allowed, [config.homepage]);
+  assert.deepEqual(connectionEnv(config, urls, env), { WEBKA_BIND: '0.0.0.0:3002', WEBKA_ORIGIN: config.homepage, WEBKA_ALLOWED_ORIGINS: config.homepage, WEBKA_MDNS: '0', WEBKA_PUBLIC_PORT: '8443' });
+});