@aemeath/surf-cli 0.1.0

package/dist/commands/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/commands/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClD,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,iBAAiB,CAAC,2DAA2D,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC;QACpC,OAAO,EAAE,oCAAoC;QAC7C,IAAI,EAAE,GAAG;KACV,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAyB;IAC7D,iBAAiB,CACf,mFAAmF,CACpF,CAAC;IACF,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG;QACnE,KAAK,EAAE,OAAO;KACf,CAAC,CAAC,CAAC;IAEJ,OAAO,MAAM,CAAC;QACZ,OAAO,EAAE,yBAAyB;QAClC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACf,IAAI,CAAC,IAAI;gBAAE,OAAO,UAAU,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,OAAO,UAAU,CAAC,MAAM,CACtB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACzC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC7C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAClD,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/servers.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+import { ServerCatalogService } from '../services/server-catalog-service.js';
+export declare function createServersCommand(catalogService?: ServerCatalogService): Command;

package/dist/commands/servers.js

@@ -0,0 +1,38 @@
+import { Command, Option } from 'commander';
+import { protocolSchema } from '../core/types.js';
+import { ServerCatalogService } from '../services/server-catalog-service.js';
+export function createServersCommand(catalogService = new ServerCatalogService()) {
+    const servers = new Command('servers').description('Manage cached Surfshark OpenVPN server profiles');
+    servers
+        .command('refresh')
+        .description('Download Surfshark OpenVPN configuration files')
+        .action(async () => {
+        const result = await catalogService.refresh();
+        console.log(`Downloaded ${result.written} OpenVPN profiles to ${result.directory}.`);
+        if (result.removed > 0) {
+            console.log(`Removed ${result.removed} stale profiles.`);
+        }
+    });
+    servers
+        .command('list')
+        .description('List cached Surfshark OpenVPN server profiles')
+        .addOption(new Option('--protocol <protocol>', 'filter protocol').choices(['udp', 'tcp']))
+        .option('--json', 'print machine-readable JSON')
+        .action(async (options) => {
+        const protocol = options.protocol ? protocolSchema.parse(options.protocol) : undefined;
+        const profiles = await catalogService.list(protocol);
+        if (options.json) {
+            console.log(JSON.stringify(profiles, null, 2));
+            return;
+        }
+        if (profiles.length === 0) {
+            console.log('No cached profiles. Run `surf-cli servers refresh`.');
+            return;
+        }
+        for (const profile of profiles) {
+            console.log(`${profile.id.padEnd(24)} ${profile.host.padEnd(36)} ${profile.protocol.toUpperCase()}`);
+        }
+    });
+    return servers;
+}
+//# sourceMappingURL=servers.js.map

package/dist/commands/servers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"servers.js","sourceRoot":"","sources":["../../src/commands/servers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAiB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAE7E,MAAM,UAAU,oBAAoB,CAAC,cAAc,GAAG,IAAI,oBAAoB,EAAE;IAC9E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAChD,iDAAiD,CAClD,CAAC;IAEF,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,wBAAwB,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;QACrF,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,+CAA+C,CAAC;SAC5D,SAAS,CAAC,IAAI,MAAM,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;SACzF,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,OAAgD,EAAE,EAAE;QACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CACT,GAAG,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CACxF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/vpn.d.ts

@@ -0,0 +1,7 @@
+import { Command } from 'commander';
+import { ServerCatalogService } from '../services/server-catalog-service.js';
+import { VpnService } from '../services/vpn-service.js';
+export declare function createConnectCommand(vpnService?: VpnService, catalogService?: ServerCatalogService): Command;
+export declare function createDisconnectCommand(vpnService?: VpnService): Command;
+export declare function createStatusCommand(vpnService?: VpnService): Command;
+export declare function createKillCommand(): Command;

package/dist/commands/vpn.js

@@ -0,0 +1,137 @@
+import { setTimeout as delay } from 'node:timers/promises';
+import { Command, Option } from 'commander';
+import { confirm } from '@inquirer/prompts';
+import { protocolSchema } from '../core/types.js';
+import { SurfCliError } from '../core/errors.js';
+import { ServerCatalogService } from '../services/server-catalog-service.js';
+import { VpnService } from '../services/vpn-service.js';
+import { findOpenVpnProcesses, terminateProcess } from '../adapters/openvpn-runner.js';
+import { promptForServer, assertInteractive } from './prompt.js';
+export function createConnectCommand(vpnService = new VpnService(), catalogService = new ServerCatalogService()) {
+    return new Command('connect')
+        .description('Connect to a Surfshark OpenVPN server')
+        .argument('[server]', 'server id, location code, host, or unique substring')
+        .addOption(new Option('--protocol <protocol>', 'OpenVPN transport protocol')
+        .choices(['udp', 'tcp'])
+        .default('udp'))
+        .option('--foreground', 'run OpenVPN in the foreground')
+        .action(async (server, options) => {
+        const protocol = protocolSchema.parse(options.protocol);
+        let serverQuery = server;
+        if (!serverQuery) {
+            let profiles = await catalogService.list(protocol);
+            if (profiles.length === 0) {
+                console.error('No cached Surfshark profiles found. Downloading profiles first...');
+                await catalogService.refresh();
+                profiles = await catalogService.list(protocol);
+            }
+            if (profiles.length === 0) {
+                throw new SurfCliError('CONFIG_ERROR', 'No Surfshark OpenVPN profiles are available.');
+            }
+            serverQuery = (await promptForServer(profiles)).locationCode;
+        }
+        const activeConnection = await vpnService.connect(serverQuery, protocol, {
+            ...(options.foreground === undefined ? {} : { foreground: options.foreground })
+        });
+        if (!options.foreground) {
+            console.log(`Connected to ${activeConnection.serverId} with OpenVPN PID ${activeConnection.pid}. Run \`surf-cli status\` for details.`);
+        }
+    });
+}
+export function createDisconnectCommand(vpnService = new VpnService()) {
+    return new Command('disconnect')
+        .description('Disconnect the surf-cli managed OpenVPN session')
+        .action(async () => {
+        const stopped = await vpnService.disconnect();
+        if (!stopped) {
+            console.log('No surf-cli managed OpenVPN connection was active.');
+            return;
+        }
+        console.log(`Disconnected ${stopped.serverId} (PID ${stopped.pid}).`);
+    });
+}
+export function createStatusCommand(vpnService = new VpnService()) {
+    return new Command('status')
+        .description('Show surf-cli managed OpenVPN connection status')
+        .option('--json', 'print machine-readable JSON')
+        .action(async (options) => {
+        const status = await vpnService.status();
+        if (options.json) {
+            console.log(JSON.stringify(status, null, 2));
+            return;
+        }
+        if (!status.connected) {
+            console.log('Disconnected');
+            return;
+        }
+        const active = status.activeConnection;
+        console.log(`Connected: ${active.serverId}`);
+        console.log(`PID: ${active.pid}`);
+        console.log(`Started: ${active.startedAt}`);
+        if (status.openVpnStatus?.updatedAt) {
+            console.log(`OpenVPN status updated: ${status.openVpnStatus.updatedAt}`);
+        }
+    });
+}
+export function createKillCommand() {
+    return new Command('kill')
+        .description('Kill all running OpenVPN processes (last resort)')
+        .option('--force', 'skip confirmation prompt')
+        .action(async (options) => {
+        const processes = await findOpenVpnProcesses();
+        if (processes.length === 0) {
+            console.log('No running OpenVPN processes found.');
+            return;
+        }
+        console.log(`Found ${processes.length} OpenVPN process(es):`);
+        for (const proc of processes) {
+            console.log(`  PID ${proc.pid}: ${proc.commandLine}`);
+        }
+        if (!options.force) {
+            assertInteractive('Kill confirmation requires an interactive terminal. Use --force to skip.');
+            const answer = await confirm({
+                message: `Kill ${processes.length} OpenVPN process(es)?`,
+                default: false
+            });
+            if (!answer) {
+                console.log('Aborted.');
+                return;
+            }
+        }
+        let killed = 0;
+        let forceKilled = 0;
+        for (const proc of processes) {
+            const terminated = await terminateProcess(proc.pid, 'SIGTERM');
+            if (!terminated) {
+                console.error(`Failed to send SIGTERM to PID ${proc.pid}.`);
+                continue;
+            }
+            killed++;
+        }
+        // Wait briefly then check for survivors
+        await delay(1000);
+        for (const proc of processes) {
+            try {
+                process.kill(proc.pid, 0);
+                // Still alive — escalate to SIGKILL
+                const forceTerminated = await terminateProcess(proc.pid, 'SIGKILL');
+                if (forceTerminated) {
+                    forceKilled++;
+                }
+            }
+            catch {
+                // Process exited (ESRCH) — good
+            }
+        }
+        const sigtermed = killed - forceKilled;
+        const parts = [];
+        if (sigtermed > 0) {
+            parts.push(`${sigtermed} terminated (SIGTERM)`);
+        }
+        if (forceKilled > 0) {
+            parts.push(`${forceKilled} force-killed (SIGKILL)`);
+        }
+        console.log(`Done. ${parts.join(', ')}.`);
+    });
+}
+//# sourceMappingURL=vpn.js.map

package/dist/commands/vpn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn.js","sourceRoot":"","sources":["../../src/commands/vpn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAiB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEjE,MAAM,UAAU,oBAAoB,CAClC,UAAU,GAAG,IAAI,UAAU,EAAE,EAC7B,cAAc,GAAG,IAAI,oBAAoB,EAAE;IAE3C,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC;SAC1B,WAAW,CAAC,uCAAuC,CAAC;SACpD,QAAQ,CAAC,UAAU,EAAE,qDAAqD,CAAC;SAC3E,SAAS,CACR,IAAI,MAAM,CAAC,uBAAuB,EAAE,4BAA4B,CAAC;SAC9D,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;SACvB,OAAO,CAAC,KAAK,CAAC,CAClB;SACA,MAAM,CAAC,cAAc,EAAE,+BAA+B,CAAC;SACvD,MAAM,CACL,KAAK,EAAE,MAA0B,EAAE,OAAqD,EAAE,EAAE;QAC1F,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,WAAW,GAAG,MAAM,CAAC;QAEzB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;gBACnF,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC/B,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,8CAA8C,CAAC,CAAC;YACzF,CAAC;YAED,WAAW,GAAG,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;QAC/D,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE;YACvE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;SAChF,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CACT,gBAAgB,gBAAgB,CAAC,QAAQ,qBAAqB,gBAAgB,CAAC,GAAG,wCAAwC,CAC3H,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACN,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAU,GAAG,IAAI,UAAU,EAAE;IACnE,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC;SAC7B,WAAW,CAAC,iDAAiD,CAAC;SAC9D,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,QAAQ,SAAS,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAAU,GAAG,IAAI,UAAU,EAAE;IAC/D,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;SACzB,WAAW,CAAC,iDAAiD,CAAC;SAC9D,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAiB,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;SACvB,WAAW,CAAC,kDAAkD,CAAC;SAC/D,MAAM,CAAC,SAAS,EAAE,0BAA0B,CAAC;SAC7C,MAAM,CAAC,KAAK,EAAE,OAA4B,EAAE,EAAE;QAC7C,MAAM,SAAS,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAE/C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,SAAS,SAAS,CAAC,MAAM,uBAAuB,CAAC,CAAC;QAC9D,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,iBAAiB,CACf,0EAA0E,CAC3E,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;gBAC3B,OAAO,EAAE,QAAQ,SAAS,CAAC,MAAM,uBAAuB;gBACxD,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CAAC,iCAAiC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC5D,SAAS;YACX,CAAC;YACD,MAAM,EAAE,CAAC;QACX,CAAC;QAED,wCAAwC;QACxC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAElB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC1B,oCAAoC;gBACpC,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACpE,IAAI,eAAe,EAAE,CAAC;oBACpB,WAAW,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,GAAG,WAAW,CAAC;QACvC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,uBAAuB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,yBAAyB,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/core/errors.d.ts

@@ -0,0 +1,12 @@
+export type SurfCliErrorCode = 'INVALID_USAGE' | 'DEPENDENCY_MISSING' | 'AUTH_REQUIRED' | 'AUTH_FAILED' | 'CONNECTION_FAILED' | 'NETWORK_ERROR' | 'CONFIG_ERROR' | 'UNSUPPORTED_PLATFORM';
+export type SurfCliExitCode = 1 | 2 | 3 | 4 | 5;
+export declare class SurfCliError extends Error {
+    readonly code: SurfCliErrorCode;
+    readonly exitCode: SurfCliExitCode;
+    constructor(code: SurfCliErrorCode, message: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare function isSurfCliError(error: unknown): error is SurfCliError;
+export declare function redactSecrets(input: string): string;
+export declare function toErrorMessage(error: unknown): string;

package/dist/core/errors.js

@@ -0,0 +1,37 @@
+const EXIT_CODE_BY_ERROR_CODE = {
+    INVALID_USAGE: 2,
+    DEPENDENCY_MISSING: 3,
+    AUTH_REQUIRED: 4,
+    AUTH_FAILED: 4,
+    CONNECTION_FAILED: 5,
+    NETWORK_ERROR: 1,
+    CONFIG_ERROR: 1,
+    UNSUPPORTED_PLATFORM: 3
+};
+export class SurfCliError extends Error {
+    code;
+    exitCode;
+    constructor(code, message, options) {
+        super(message, options);
+        this.name = 'SurfCliError';
+        this.code = code;
+        this.exitCode = EXIT_CODE_BY_ERROR_CODE[code];
+    }
+}
+export function isSurfCliError(error) {
+    return error instanceof SurfCliError;
+}
+export function redactSecrets(input) {
+    return input
+        .replace(/(password\s*[=:]\s*)[^\s,;]+/gi, '$1[REDACTED]')
+        .replace(/(token\s*[=:]\s*)[^\s,;]+/gi, '$1[REDACTED]')
+        .replace(/(authorization:\s*bearer\s+)[^\s,;]+/gi, '$1[REDACTED]')
+        .replace(/(auth-user-pass\s+)[^\s]+/gi, '$1[REDACTED]');
+}
+export function toErrorMessage(error) {
+    if (error instanceof Error) {
+        return redactSecrets(error.message);
+    }
+    return redactSecrets(String(error));
+}
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAYA,MAAM,uBAAuB,GAA8C;IACzE,aAAa,EAAE,CAAC;IAChB,kBAAkB,EAAE,CAAC;IACrB,aAAa,EAAE,CAAC;IAChB,WAAW,EAAE,CAAC;IACd,iBAAiB,EAAE,CAAC;IACpB,aAAa,EAAE,CAAC;IAChB,YAAY,EAAE,CAAC;IACf,oBAAoB,EAAE,CAAC;CACxB,CAAC;AAEF,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IACvB,QAAQ,CAAkB;IAEnC,YAAY,IAAsB,EAAE,OAAe,EAAE,OAA6B;QAChF,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,YAAY,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK;SACT,OAAO,CAAC,gCAAgC,EAAE,cAAc,CAAC;SACzD,OAAO,CAAC,6BAA6B,EAAE,cAAc,CAAC;SACtD,OAAO,CAAC,wCAAwC,EAAE,cAAc,CAAC;SACjE,OAAO,CAAC,6BAA6B,EAAE,cAAc,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/dist/core/types.d.ts

@@ -0,0 +1,56 @@
+import { z } from 'zod';
+export declare const protocolSchema: z.ZodEnum<{
+    udp: "udp";
+    tcp: "tcp";
+}>;
+export type Protocol = z.infer<typeof protocolSchema>;
+export declare const openVpnCredentialsSchema: z.ZodObject<{
+    username: z.ZodString;
+    password: z.ZodString;
+}, z.core.$strip>;
+export type OpenVpnCredentials = z.infer<typeof openVpnCredentialsSchema>;
+export declare const serverProfileSchema: z.ZodObject<{
+    id: z.ZodString;
+    host: z.ZodString;
+    locationCode: z.ZodString;
+    protocol: z.ZodEnum<{
+        udp: "udp";
+        tcp: "tcp";
+    }>;
+    fileName: z.ZodString;
+    configPath: z.ZodString;
+}, z.core.$strip>;
+export type ServerProfile = z.infer<typeof serverProfileSchema>;
+export declare const activeConnectionSchema: z.ZodObject<{
+    pid: z.ZodNumber;
+    serverId: z.ZodString;
+    protocol: z.ZodEnum<{
+        udp: "udp";
+        tcp: "tcp";
+    }>;
+    configPath: z.ZodString;
+    authFilePath: z.ZodString;
+    pidFilePath: z.ZodString;
+    statusFilePath: z.ZodString;
+    logFilePath: z.ZodString;
+    startedAt: z.ZodString;
+}, z.core.$strip>;
+export type ActiveConnection = z.infer<typeof activeConnectionSchema>;
+export declare const appStateSchema: z.ZodObject<{
+    activeConnection: z.ZodOptional<z.ZodObject<{
+        pid: z.ZodNumber;
+        serverId: z.ZodString;
+        protocol: z.ZodEnum<{
+            udp: "udp";
+            tcp: "tcp";
+        }>;
+        configPath: z.ZodString;
+        authFilePath: z.ZodString;
+        pidFilePath: z.ZodString;
+        statusFilePath: z.ZodString;
+        logFilePath: z.ZodString;
+        startedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AppState = z.infer<typeof appStateSchema>;
+export type OutputMode = 'text' | 'json';

package/dist/core/types.js

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+export const protocolSchema = z.enum(['udp', 'tcp']);
+export const openVpnCredentialsSchema = z.object({
+    username: z.string().min(1, 'username is required'),
+    password: z.string().min(1, 'password is required')
+});
+export const serverProfileSchema = z.object({
+    id: z.string().min(1),
+    host: z.string().min(1),
+    locationCode: z.string().min(1),
+    protocol: protocolSchema,
+    fileName: z.string().min(1),
+    configPath: z.string().min(1)
+});
+export const activeConnectionSchema = z.object({
+    pid: z.number().int().positive(),
+    serverId: z.string().min(1),
+    protocol: protocolSchema,
+    configPath: z.string().min(1),
+    authFilePath: z.string().min(1),
+    pidFilePath: z.string().min(1),
+    statusFilePath: z.string().min(1),
+    logFilePath: z.string().min(1),
+    startedAt: z.string().datetime()
+});
+export const appStateSchema = z.object({
+    activeConnection: activeConnectionSchema.optional()
+});
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAGrD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;CACpD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,gBAAgB,EAAE,sBAAsB,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC"}

package/dist/services/auth-service.d.ts

@@ -0,0 +1,16 @@
+import { type OpenVpnCredentials } from '../core/types.js';
+import { type CredentialStore, type CredentialStoreStatus } from '../adapters/credential-store.js';
+import { SurfsharkAccountClient, type CodeLoginOutcome, type EmailLoginOutcome, type LoginCodeChallenge } from '../adapters/surfshark-account-client.js';
+export declare class AuthService {
+    private readonly credentialStore;
+    private readonly accountClient;
+    constructor(credentialStore?: CredentialStore, accountClient?: SurfsharkAccountClient);
+    getCredentials(): Promise<OpenVpnCredentials | null>;
+    saveManualCredentials(credentials: OpenVpnCredentials): Promise<void>;
+    clearCredentials(): Promise<void>;
+    credentialStoreStatus(): Promise<CredentialStoreStatus>;
+    loginWithEmail(email: string, password: string): Promise<EmailLoginOutcome>;
+    createLoginCodeChallenge(): Promise<LoginCodeChallenge>;
+    waitForLoginCodeActivation(challenge: LoginCodeChallenge): Promise<CodeLoginOutcome>;
+    requireCredentials(): Promise<OpenVpnCredentials>;
+}

package/dist/services/auth-service.js

@@ -0,0 +1,49 @@
+import { SurfCliError } from '../core/errors.js';
+import { openVpnCredentialsSchema } from '../core/types.js';
+import { KeyringCredentialStore } from '../adapters/credential-store.js';
+import { SurfsharkAccountClient } from '../adapters/surfshark-account-client.js';
+export class AuthService {
+    credentialStore;
+    accountClient;
+    constructor(credentialStore = new KeyringCredentialStore(), accountClient = new SurfsharkAccountClient()) {
+        this.credentialStore = credentialStore;
+        this.accountClient = accountClient;
+    }
+    async getCredentials() {
+        return this.credentialStore.get();
+    }
+    async saveManualCredentials(credentials) {
+        await this.credentialStore.set(openVpnCredentialsSchema.parse(credentials));
+    }
+    async clearCredentials() {
+        await this.credentialStore.delete();
+    }
+    async credentialStoreStatus() {
+        return this.credentialStore.status();
+    }
+    async loginWithEmail(email, password) {
+        const outcome = await this.accountClient.loginWithEmail(email, password);
+        if (outcome.credentials) {
+            await this.saveManualCredentials(outcome.credentials);
+        }
+        return outcome;
+    }
+    async createLoginCodeChallenge() {
+        return this.accountClient.createLoginCodeChallenge();
+    }
+    async waitForLoginCodeActivation(challenge) {
+        const outcome = await this.accountClient.waitForLoginCodeActivation(challenge);
+        if (outcome.credentials) {
+            await this.saveManualCredentials(outcome.credentials);
+        }
+        return outcome;
+    }
+    async requireCredentials() {
+        const credentials = await this.getCredentials();
+        if (!credentials) {
+            throw new SurfCliError('AUTH_REQUIRED', 'OpenVPN service credentials are not configured. Run `surf-cli auth login --manual`.');
+        }
+        return credentials;
+    }
+}
+//# sourceMappingURL=auth-service.js.map

package/dist/services/auth-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-service.js","sourceRoot":"","sources":["../../src/services/auth-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAA2B,MAAM,kBAAkB,CAAC;AACrF,OAAO,EACL,sBAAsB,EAGvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,sBAAsB,EAIvB,MAAM,yCAAyC,CAAC;AAEjD,MAAM,OAAO,WAAW;IAEH;IACA;IAFnB,YACmB,kBAAmC,IAAI,sBAAsB,EAAE,EAC/D,gBAAgB,IAAI,sBAAsB,EAAE;QAD5C,oBAAe,GAAf,eAAe,CAAgD;QAC/D,kBAAa,GAAb,aAAa,CAA+B;IAC5D,CAAC;IAEJ,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,WAA+B;QACzD,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,QAAgB;QAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,wBAAwB;QAC5B,OAAO,IAAI,CAAC,aAAa,CAAC,wBAAwB,EAAE,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,SAA6B;QAC5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,qFAAqF,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF"}

package/dist/services/doctor-service.d.ts

@@ -0,0 +1,11 @@
+import { type AppPaths } from '../adapters/xdg-paths.js';
+export interface DoctorCheck {
+    name: string;
+    ok: boolean;
+    message: string;
+}
+export declare class DoctorService {
+    private readonly paths;
+    constructor(paths?: AppPaths);
+    run(): Promise<DoctorCheck[]>;
+}

package/dist/services/doctor-service.js

@@ -0,0 +1,61 @@
+import { spawn } from 'node:child_process';
+import { access } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { getAppPaths } from '../adapters/xdg-paths.js';
+export class DoctorService {
+    paths;
+    constructor(paths = getAppPaths()) {
+        this.paths = paths;
+    }
+    async run() {
+        const checks = [];
+        checks.push(checkPlatform());
+        checks.push(await checkCommand('openvpn'));
+        checks.push(await checkCommand('sudo'));
+        checks.push(await checkOpenVpnProfiles(this.paths.openVpnConfigDir));
+        return checks;
+    }
+}
+function checkPlatform() {
+    const supported = process.platform === 'linux' || process.platform === 'darwin';
+    return {
+        name: 'platform',
+        ok: supported,
+        message: supported
+            ? `${process.platform} is supported${process.platform === 'darwin' ? ' on a best-effort basis' : ''}.`
+            : `${process.platform} is not supported. Linux is the primary target; macOS is best-effort.`
+    };
+}
+async function checkCommand(command) {
+    const exists = await commandExists(command);
+    return {
+        name: command,
+        ok: exists,
+        message: exists ? `${command} is available in PATH.` : `${command} was not found in PATH.`
+    };
+}
+async function checkOpenVpnProfiles(directory) {
+    try {
+        await access(directory, constants.R_OK);
+        return {
+            name: 'profiles',
+            ok: true,
+            message: `OpenVPN profile cache exists at ${directory}.`
+        };
+    }
+    catch {
+        return {
+            name: 'profiles',
+            ok: false,
+            message: 'OpenVPN profiles are not cached yet. Run `surf-cli servers refresh`.'
+        };
+    }
+}
+async function commandExists(command) {
+    return new Promise((resolve) => {
+        const child = spawn('sh', ['-c', `command -v ${command}`], { stdio: 'ignore' });
+        child.on('close', (code) => resolve(code === 0));
+        child.on('error', () => resolve(false));
+    });
+}
+//# sourceMappingURL=doctor-service.js.map

package/dist/services/doctor-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-service.js","sourceRoot":"","sources":["../../src/services/doctor-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,WAAW,EAAiB,MAAM,0BAA0B,CAAC;AAQtE,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,QAAkB,WAAW,EAAE;QAA/B,UAAK,GAAL,KAAK,CAA0B;IAAG,CAAC;IAEhE,KAAK,CAAC,GAAG;QACP,MAAM,MAAM,GAAkB,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,SAAS,aAAa;IACpB,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAChF,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,SAAS;YAChB,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,gBAAgB,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,GAAG;YACtG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,uEAAuE;KAC/F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe;IACzC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO;QACL,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,MAAM;QACV,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,wBAAwB,CAAC,CAAC,CAAC,GAAG,OAAO,yBAAyB;KAC3F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,mCAAmC,SAAS,GAAG;SACzD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,sEAAsE;SAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAe;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,cAAc,OAAO,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/services/server-catalog-service.d.ts

@@ -0,0 +1,17 @@
+import { type Protocol, type ServerProfile } from '../core/types.js';
+import { SurfsharkConfigClient } from '../adapters/surfshark-config-client.js';
+import { type AppPaths } from '../adapters/xdg-paths.js';
+export interface RefreshResult {
+    written: number;
+    removed: number;
+    directory: string;
+}
+export declare class ServerCatalogService {
+    private readonly configClient;
+    private readonly paths;
+    constructor(configClient?: SurfsharkConfigClient, paths?: AppPaths);
+    refresh(): Promise<RefreshResult>;
+    list(protocol?: Protocol): Promise<ServerProfile[]>;
+    resolve(query: string, protocol: Protocol): Promise<ServerProfile>;
+}
+export declare function parseProfileFile(fileName: string, directory: string): ServerProfile | null;

package/dist/services/server-catalog-service.js

@@ -0,0 +1,112 @@
+import { readdir, rm, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { unzipSync } from 'fflate';
+import { SurfCliError } from '../core/errors.js';
+import { protocolSchema } from '../core/types.js';
+import { SurfsharkConfigClient } from '../adapters/surfshark-config-client.js';
+import { ensureAppDirectories, getAppPaths } from '../adapters/xdg-paths.js';
+const PROFILE_FILE_PATTERN = /^(?<locationCode>[a-z]{2}-[a-z0-9-]+)\.prod\.surfshark\.com_(?<protocol>udp|tcp)\.ovpn$/;
+export class ServerCatalogService {
+    configClient;
+    paths;
+    constructor(configClient = new SurfsharkConfigClient(), paths = getAppPaths()) {
+        this.configClient = configClient;
+        this.paths = paths;
+    }
+    async refresh() {
+        await ensureAppDirectories(this.paths);
+        const archive = await this.configClient.fetchOpenVpnConfigurations();
+        const entries = unzipSync(archive);
+        const writtenFiles = new Set();
+        for (const [entryName, data] of Object.entries(entries)) {
+            const safeName = assertSafeProfileName(entryName);
+            const targetPath = path.join(this.paths.openVpnConfigDir, safeName);
+            await writeFile(targetPath, data, { mode: 0o600 });
+            writtenFiles.add(safeName);
+        }
+        let removed = 0;
+        for (const existing of await safeReadDir(this.paths.openVpnConfigDir)) {
+            if (existing.endsWith('.ovpn') && !writtenFiles.has(existing)) {
+                await rm(path.join(this.paths.openVpnConfigDir, existing), { force: true });
+                removed += 1;
+            }
+        }
+        return {
+            written: writtenFiles.size,
+            removed,
+            directory: this.paths.openVpnConfigDir
+        };
+    }
+    async list(protocol) {
+        await ensureAppDirectories(this.paths);
+        const profiles = (await safeReadDir(this.paths.openVpnConfigDir))
+            .map((fileName) => parseProfileFile(fileName, this.paths.openVpnConfigDir))
+            .filter((profile) => profile !== null)
+            .filter((profile) => (protocol ? profile.protocol === protocol : true))
+            .sort((a, b) => a.id.localeCompare(b.id));
+        return profiles;
+    }
+    async resolve(query, protocol) {
+        const normalizedQuery = query.trim().toLowerCase();
+        if (!normalizedQuery) {
+            throw new SurfCliError('INVALID_USAGE', 'Server name is required. Run `surf-cli servers list`.');
+        }
+        const profiles = await this.list(protocol);
+        const candidates = profiles.filter((profile) => {
+            return (profile.fileName.toLowerCase() === normalizedQuery ||
+                profile.id.toLowerCase() === normalizedQuery ||
+                profile.host.toLowerCase() === normalizedQuery ||
+                profile.locationCode.toLowerCase() === normalizedQuery ||
+                profile.id.toLowerCase().includes(normalizedQuery));
+        });
+        if (candidates.length === 1) {
+            return candidates[0];
+        }
+        if (candidates.length > 1) {
+            throw new SurfCliError('INVALID_USAGE', `Server query "${query}" is ambiguous for ${protocol}. Matches: ${candidates
+                .slice(0, 8)
+                .map((candidate) => candidate.id)
+                .join(', ')}`);
+        }
+        throw new SurfCliError('INVALID_USAGE', `No Surfshark ${protocol.toUpperCase()} profile matched "${query}". Run \`surf-cli servers list --protocol ${protocol}\`.`);
+    }
+}
+export function parseProfileFile(fileName, directory) {
+    const match = PROFILE_FILE_PATTERN.exec(fileName);
+    if (!match?.groups) {
+        return null;
+    }
+    const protocol = protocolSchema.parse(match.groups.protocol);
+    const locationCode = match.groups.locationCode;
+    const host = `${locationCode}.prod.surfshark.com`;
+    return {
+        id: `${locationCode}-${protocol}`,
+        host,
+        locationCode,
+        protocol,
+        fileName,
+        configPath: path.join(directory, fileName)
+    };
+}
+function assertSafeProfileName(entryName) {
+    const fileName = path.basename(entryName);
+    if (entryName !== fileName ||
+        entryName.includes('..') ||
+        entryName.includes('\0') ||
+        !PROFILE_FILE_PATTERN.test(fileName)) {
+        throw new SurfCliError('CONFIG_ERROR', `Surfshark configuration archive contained an unsafe or unexpected entry: ${entryName}`);
+    }
+    return fileName;
+}
+async function safeReadDir(directory) {
+    try {
+        return await readdir(directory);
+    }
+    catch (error) {
+        if (error instanceof Error && 'code' in error && error.code === 'ENOENT') {
+            return [];
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=server-catalog-service.js.map