# FRP DEV Contract

The DEV reverse link is D601 to master edge through frp.

- Public API/edge endpoint: `http://74.48.78.17:16667`
- Public browser endpoint: `http://74.48.78.17:16666`
- `hwlab-tunnel-client` owns the frp client health contract.
- `hwlab-cloud-web` owns the public browser entry on port `16666`.
- `hwlab-edge-proxy` owns public API/health ingress on port `16667`.
- `frps.dev.toml` reserves `16666` and `16667` only as TCP `remotePort` values; do not also bind
  them as `vhostHTTPPort`, because that collides with the DEV TCP proxy.
- `deploy/deploy.json` is the source for the public endpoints and FRP proxy
  mapping. Run `node scripts/deploy-contract-plan.mjs --check` to detect drift
  such as public `6666`/`6667` reuse before any future apply command.
- No secret values are stored in this repository. Operators must provide auth
  material out of band before a real deployment.
- UniDesk backend, provider-gateway, and microservice proxy are not HWLAB runtime
  substitutes.