feat(kube-portforward): introduce standalone websocket port-forward crate

[hcavarsan]

Stack Context

This stack restructures the websocket-pf branch into 11 atomic PRs.
The goal is to extract a standalone kube-portforward crate (OSS-ready
WebSocket port-forwarder for Kubernetes) and rebuild kftray's port-forward
path on top of it, with a new HTTP proxy in kftray-server.

Stack order (bottom to top):

1. ws-pf/dev-tooling — dev tooling and gitignore
2. ws-pf/workspace-deps — workspace dependency consolidation
3. ws-pf/kube-portforward-crate — new kube-portforward crate
4. ws-pf/portforward-deps — wire kftray-portforward to new crate
5. ws-pf/ssl-platform-cleanup — remove dead SSL platform code
6. ws-pf/server-http-proxy — HTTP proxy with relay and sniffer
7. ws-pf/kube-registry-refactor — registry + kube listener rebuilt
8. ws-pf/expose-updates — expose flows through new registry
9. ws-pf/network-monitor-fix — PortForwardError type fix
10. ws-pf/tauri-integration — tauri command wiring
11. ws-pf/kftui-integration — kftui integration (top)

Why?

Extracts the WebSocket port-forward implementation into an independent, publishable crate. kube-portforward speaks both v4 and v5 channel-mux subprotocols (KEP-4006), multiplexes N local TCP connections over a single WebSocket upgrade, includes keepalive, graceful shutdown, session recovery, and pod watching. Decoupled from kftray's internal state so it can be used as a library by other projects.

What?

• crates/kube-portforward/ (new: Cargo.toml, MIT+Apache licenses, README, 4 examples, 18 src files)

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 592bc23f-38bf-423e-afdc-e6e59c76e768

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ws-pf/kube-portforward-crate

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[hcavarsan]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[hcavarsan]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• chore: kftray-kube restructure verification evidence #660
• refactor(kftray-tauri): update kftray-kube import paths #659
• refactor(kftray-kube): promote kube/client/ to crate root #658
• refactor(kftray-kube): collapse PortForwardProcess Option fields into PortForwardKind enum #656
• refactor(kftray-kube): split start.rs into domain modules #655
• refactor!: rename kftray-portforward to kftray-kube #654
• refactor: extract kftray-expose crate #653
• chore: scaffold kftray-hosts crate (empty) #652
• chore: scaffold kftray-ssl crate (empty) #651
• refactor(kftray-portforward): replace wildcard re-exports with explicit list #650
• feat(kftui): add stdout logger initializer with RUST_LOG support #649
• refactor(kftray-portforward): isolate data plane runtime + add service-port translation #648
• refactor(kube-portforward)!: drop v4/v5 channel protocol, default to SPDY/3.1 with kubectl-style fallback #647
• feat(kube-portforward): add SPDY/3.1 tunnel backend with channel multiplex restructure #645
• feat(kftui): integrate websocket port-forward path #642
• feat(tauri): wire commands and init to new port-forward registry #641
• fix(network-monitor): adapt to PortForwardError type change #640
• refactor(expose): wire expose flows through new registry #639
• refactor(portforward): introduce registry and rebuild kube listener/start/stop on kube-portforward #638
• feat(server): add HTTP proxy with relay and sniffer #637
• refactor(ssl): remove dead native macOS and Windows trust-store paths #636
• chore(portforward): depend on kube-portforward workspace crate #635
• feat(kube-portforward): introduce standalone websocket port-forward crate #634 👈 (View in Graphite)
• chore(deps): consolidate workspace dependencies #633
• chore(dev): add mise tasks #632
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in two weeks if no further activity occurs. Thank you for your contributions.