Start or attach a tunnel targeting port.
Bound local HTTP port to expose.
The public origin and assigned tunnel identifier.
Current tunnel public origin URL, or null when inactive.
Public origin while the tunnel is active, null otherwise.
Stop the WebSocket relay and release its reservation.
Minimal tunnel manager surface used by the dev and production CLI paths.