@agentcamo/cli 0.1.0

package/dist/cli.js

@@ -0,0 +1,280 @@
+#!/usr/bin/env node
+import yargs from "yargs";
+import { hideBin } from "yargs/helpers";
+import chalk from "chalk";
+import { createSession, buildProxyUrl, deleteSession } from "./session.js";
+import { SessionTUI } from "./tui.js";
+import { JsonEmitter } from "./json-output.js";
+import { registerCleanup, setSession, setDockerContainer } from "./cleanup.js";
+import { swapCountry } from "./geo-swap.js";
+import { dockerPreflight, startSidecar, waitForHealth, verifyExitIpViaSocks, CONTAINER_NAME, } from "./docker.js";
+import { verifyExitIp } from "./ip-verify.js";
+import { BANNER } from "./banner.js";
+const argv = await yargs(hideBin(process.argv))
+    .scriptName("agentcamo")
+    .usage("$0 [options]")
+    .option("mode", {
+    type: "string",
+    choices: ["residential", "mobile", "socks5", "wireguard"],
+    default: "residential",
+    describe: "Proxy mode",
+})
+    .option("chain", {
+    type: "string",
+    choices: ["evm", "solana"],
+    describe: "Payment chain (auto-detects from env)",
+})
+    .option("country", {
+    type: "string",
+    default: "us",
+    describe: "ISO 3166-1 alpha-2 country code",
+})
+    .option("json", {
+    type: "boolean",
+    default: false,
+    describe: "Machine-readable JSONL output",
+})
+    .option("verbose", {
+    type: "boolean",
+    default: false,
+    describe: "Show full response bodies",
+})
+    .fail((msg, err) => {
+    process.stderr.write(`ERROR: ${msg || err?.message}\n`);
+    process.exit(1);
+})
+    .strict()
+    .parse();
+const EVM_KEY = process.env.AGENT_PRIVATE_KEY;
+const SOL_KEY = process.env.SOLANA_PRIVATE_KEY;
+const chain = argv.chain ??
+    (SOL_KEY && !EVM_KEY ? "solana" : EVM_KEY && !SOL_KEY ? "evm" : "evm");
+if (!argv.chain && EVM_KEY && SOL_KEY) {
+    process.stderr.write(chalk.yellow("Warning: Both AGENT_PRIVATE_KEY and SOLANA_PRIVATE_KEY are set. " +
+        `Defaulting to ${chain}. Use --chain to specify.\n`));
+}
+const privateKey = chain === "evm" ? EVM_KEY : SOL_KEY;
+if (!privateKey) {
+    const envVar = chain === "evm" ? "AGENT_PRIVATE_KEY" : "SOLANA_PRIVATE_KEY";
+    process.stderr.write(chalk.red(`ERROR: ${envVar} environment variable is required for ${chain} chain\n`));
+    process.exit(1);
+}
+const mode = argv.mode;
+const jsonMode = argv.json;
+registerCleanup();
+// --- Docker preflight for wireguard mode ---
+if (mode === "wireguard") {
+    try {
+        dockerPreflight();
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stderr.write(chalk.red(msg + "\n"));
+        process.exit(1);
+    }
+}
+// --- Banner ---
+if (!jsonMode && process.stderr.isTTY) {
+    process.stderr.write(BANNER + "\n\n");
+}
+// --- Create session ---
+const tui = jsonMode || !process.stderr.isTTY ? null : new SessionTUI();
+const json = jsonMode ? new JsonEmitter() : null;
+if (tui) {
+    tui.setStatus("Creating session...");
+    tui.start();
+}
+if (json) {
+    json.emit("status", {
+        message: `Creating ${mode} session in ${argv.country.toUpperCase()}...`,
+    });
+}
+let sessionResponse;
+try {
+    sessionResponse = await createSession({
+        mode,
+        country: argv.country,
+        chain,
+        privateKey,
+    });
+}
+catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (tui) {
+        tui.setError(msg);
+        tui.stop();
+    }
+    if (json) {
+        json.emit("error", { message: msg });
+    }
+    process.exit(1);
+}
+const proxyUrl = buildProxyUrl(sessionResponse, mode);
+// Use the server's ttl_remaining to compute expiry relative to our local clock.
+// This avoids relying on server-absolute expiresAt which may differ due to clock skew.
+const adjustedExpiresAt = new Date(Date.now() + sessionResponse.ttl_remaining * 1000);
+const state = {
+    sessionId: sessionResponse.sessionId,
+    token: sessionResponse.token,
+    country: sessionResponse.country,
+    mode,
+    exitIp: null,
+    expiresAt: adjustedExpiresAt,
+    ttl: sessionResponse.ttl,
+    startedAt: Date.now(),
+    proxyUrl,
+    response: sessionResponse,
+};
+setSession(state.sessionId, state.token);
+if (tui) {
+    tui.setSession(state);
+    tui.setStatus("Verifying exit IP...");
+}
+if (json) {
+    json.emit("session_created", {
+        sessionId: state.sessionId,
+        country: state.country,
+        mode: state.mode,
+        expiresAt: sessionResponse.expiresAt,
+        ttl: state.ttl,
+        proxyUrl: state.proxyUrl,
+    });
+}
+if (argv.verbose) {
+    const redacted = { ...sessionResponse };
+    if ("token" in redacted)
+        redacted.token = "[REDACTED]";
+    if ("proxyAuth" in redacted)
+        redacted.proxyAuth = "[REDACTED]";
+    if (sessionResponse.mode === "wireguard") {
+        redacted.wireguard_config = {
+            ...sessionResponse.wireguard_config,
+            client_private_key: "[REDACTED]",
+        };
+    }
+    if (sessionResponse.mode === "socks5") {
+        redacted.socks5 = {
+            ...sessionResponse.socks5,
+            password: "[REDACTED]",
+        };
+    }
+    process.stderr.write(chalk.dim(JSON.stringify(redacted, null, 2) + "\n"));
+}
+// --- Verify exit IP ---
+// Fly.io requires TLS on port 8080 (handlers = ["tls"]), so plain curl -x http:// fails.
+// Use Node.js tls.connect + CONNECT tunnel (same pattern as scripts/kayak-arbitrage.ts).
+try {
+    let exitIp;
+    if (mode === "wireguard" && sessionResponse.mode === "wireguard") {
+        // Start Docker sidecar
+        if (tui)
+            tui.setStatus("Starting WireGuard sidecar...");
+        const wgConfigB64 = Buffer.from(JSON.stringify(sessionResponse.wireguard_config)).toString("base64");
+        startSidecar(wgConfigB64);
+        setDockerContainer(CONTAINER_NAME);
+        if (tui)
+            tui.setStatus("Waiting for tunnel...");
+        await waitForHealth();
+        if (tui)
+            tui.setStatus("Verifying exit IP through tunnel...");
+        exitIp = verifyExitIpViaSocks();
+    }
+    else {
+        exitIp = await verifyExitIp(state, sessionResponse);
+    }
+    state.exitIp = exitIp;
+    if (tui) {
+        tui.setExitIp(exitIp);
+        tui.setStatus("");
+    }
+    if (json) {
+        json.emit("ip_verified", { exitIp });
+    }
+}
+catch {
+    if (tui)
+        tui.setStatus("Exit IP verification failed");
+    if (json)
+        json.emit("error", { message: "Exit IP verification failed" });
+}
+// --- Enable inline geo-swap input ---
+if (tui) {
+    tui.onSwap(async (newCountry) => {
+        const result = await swapCountry(state.sessionId, state.token, newCountry);
+        state.country = result.country;
+        // Re-verify exit IP after swap — use SOCKS for WireGuard mode
+        try {
+            const newIp = state.mode === "wireguard"
+                ? verifyExitIpViaSocks()
+                : await verifyExitIp(state, sessionResponse);
+            state.exitIp = newIp;
+            return {
+                country: result.country,
+                exitIp: newIp,
+                cooldownExpiresAt: result.cooldownExpiresAt,
+            };
+        }
+        catch {
+            return {
+                country: result.country,
+                cooldownExpiresAt: result.cooldownExpiresAt,
+            };
+        }
+    });
+    tui.enableInput();
+}
+// --- Session timer (for --json mode expiry events) ---
+if (json) {
+    let expiringEmitted = false;
+    const expiryCheckInterval = setInterval(() => {
+        const remaining = Math.max(0, (state.expiresAt.getTime() - Date.now()) / 1000);
+        if (remaining <= 30 && !expiringEmitted) {
+            expiringEmitted = true;
+            json.emit("session_expiring", { ttl_remaining: Math.floor(remaining) });
+        }
+        if (remaining <= 0) {
+            json.emit("session_expired", {});
+            clearInterval(expiryCheckInterval);
+            deleteSession(state.sessionId, state.token).finally(() => process.exit(0));
+        }
+    }, 1000);
+}
+// --- TUI keeps running until session expires or Ctrl+C ---
+if (tui) {
+    // TUI render loop also auto-stops; this watcher handles cleanup (deleteSession)
+    await new Promise((resolve) => {
+        const check = setInterval(() => {
+            const remaining = (state.expiresAt.getTime() - Date.now()) / 1000;
+            if (remaining <= 0) {
+                clearInterval(check);
+                tui.setStatus("Session expired");
+                tui.stop();
+                process.stderr.write(chalk.dim("\nSession expired. Cleaning up...\n"));
+                deleteSession(state.sessionId, state.token).finally(() => {
+                    resolve();
+                });
+            }
+        }, 1000);
+    });
+}
+// --- JSON mode: keep process alive until expiry ---
+if (json) {
+    await new Promise(() => {
+        // Process stays alive via the expiryCheckInterval above
+        // Exits when session expires or SIGINT
+    });
+}
+// --- Headless mode (non-TTY, no --json): print proxy URL and keep alive ---
+if (!tui && !json) {
+    process.stdout.write(proxyUrl + "\n");
+    await new Promise((resolve) => {
+        const check = setInterval(() => {
+            const remaining = (state.expiresAt.getTime() - Date.now()) / 1000;
+            if (remaining <= 0) {
+                clearInterval(check);
+                deleteSession(state.sessionId, state.token).finally(() => resolve());
+            }
+        }, 1000);
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EACL,eAAe,EACf,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAC5C,UAAU,CAAC,WAAW,CAAC;KACvB,KAAK,CAAC,cAAc,CAAC;KACrB,MAAM,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAU;IAClE,OAAO,EAAE,aAAsB;IAC/B,QAAQ,EAAE,YAAY;CACvB,CAAC;KACD,MAAM,CAAC,OAAO,EAAE;IACf,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAU;IACnC,QAAQ,EAAE,uCAAuC;CAClD,CAAC;KACD,MAAM,CAAC,SAAS,EAAE;IACjB,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,iCAAiC;CAC5C,CAAC;KACD,MAAM,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,+BAA+B;CAC1C,CAAC;KACD,MAAM,CAAC,SAAS,EAAE;IACjB,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,2BAA2B;CACtC,CAAC;KACD,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;KACD,MAAM,EAAE;KACR,KAAK,EAAE,CAAC;AAEX,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;AAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AAE/C,MAAM,KAAK,GACT,IAAI,CAAC,KAAK;IACV,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAEzE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,CAAC,MAAM,CACV,kEAAkE;QAChE,iBAAiB,KAAK,6BAA6B,CACtD,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AAEvD,IAAI,CAAC,UAAU,EAAE,CAAC;IAChB,MAAM,MAAM,GAAG,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAC5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,CAAC,GAAG,CACP,UAAU,MAAM,yCAAyC,KAAK,UAAU,CACzE,CACF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,IAAI,GAAY,IAAI,CAAC,IAAI,CAAC;AAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;AAE3B,eAAe,EAAE,CAAC;AAElB,8CAA8C;AAC9C,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,eAAe,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,iBAAiB;AACjB,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,yBAAyB;AACzB,MAAM,GAAG,GAAG,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC;AACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAEjD,IAAI,GAAG,EAAE,CAAC;IACR,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACrC,GAAG,CAAC,KAAK,EAAE,CAAC;AACd,CAAC;AACD,IAAI,IAAI,EAAE,CAAC;IACT,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;QAClB,OAAO,EAAE,YAAY,IAAI,eAAe,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK;KACxE,CAAC,CAAC;AACL,CAAC;AAED,IAAI,eAAe,CAAC;AACpB,IAAI,CAAC;IACH,eAAe,GAAG,MAAM,aAAa,CAAC;QACpC,IAAI;QACJ,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK;QACL,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAAC,OAAO,GAAY,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,EAAE,CAAC;IACb,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,QAAQ,GAAG,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;AAEtD,gFAAgF;AAChF,uFAAuF;AACvF,MAAM,iBAAiB,GAAG,IAAI,IAAI,CAChC,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC,aAAa,GAAG,IAAI,CAClD,CAAC;AAEF,MAAM,KAAK,GAAiB;IAC1B,SAAS,EAAE,eAAe,CAAC,SAAS;IACpC,KAAK,EAAE,eAAe,CAAC,KAAK;IAC5B,OAAO,EAAE,eAAe,CAAC,OAAO;IAChC,IAAI;IACJ,MAAM,EAAE,IAAI;IACZ,SAAS,EAAE,iBAAiB;IAC5B,GAAG,EAAE,eAAe,CAAC,GAAG;IACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;IACrB,QAAQ;IACR,QAAQ,EAAE,eAAe;CAC1B,CAAC;AAEF,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AAEzC,IAAI,GAAG,EAAE,CAAC;IACR,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACtB,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;AACxC,CAAC;AAED,IAAI,IAAI,EAAE,CAAC;IACT,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,eAAe,CAAC,SAAS;QACpC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC;AAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,MAAM,QAAQ,GAAG,EAAE,GAAG,eAAe,EAA6B,CAAC;IACnE,IAAI,OAAO,IAAI,QAAQ;QAAE,QAAQ,CAAC,KAAK,GAAG,YAAY,CAAC;IACvD,IAAI,WAAW,IAAI,QAAQ;QAAE,QAAQ,CAAC,SAAS,GAAG,YAAY,CAAC;IAC/D,IAAI,eAAe,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACzC,QAAQ,CAAC,gBAAgB,GAAG;YAC1B,GAAG,eAAe,CAAC,gBAAgB;YACnC,kBAAkB,EAAE,YAAY;SACjC,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,QAAQ,CAAC,MAAM,GAAG;YAChB,GAAG,eAAe,CAAC,MAAM;YACzB,QAAQ,EAAE,YAAY;SACvB,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,yBAAyB;AACzB,yFAAyF;AACzF,yFAAyF;AACzF,IAAI,CAAC;IACH,IAAI,MAAc,CAAC;IAEnB,IAAI,IAAI,KAAK,WAAW,IAAI,eAAe,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjE,uBAAuB;QACvB,IAAI,GAAG;YAAE,GAAG,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAC7B,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,gBAAgB,CAAC,CACjD,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrB,YAAY,CAAC,WAAW,CAAC,CAAC;QAC1B,kBAAkB,CAAC,cAAc,CAAC,CAAC;QAEnC,IAAI,GAAG;YAAE,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAChD,MAAM,aAAa,EAAE,CAAC;QAEtB,IAAI,GAAG;YAAE,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAC9D,MAAM,GAAG,oBAAoB,EAAE,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtB,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,IAAI,GAAG;QAAE,GAAG,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACtD,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,uCAAuC;AACvC,IAAI,GAAG,EAAE,CAAC;IACR,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC3E,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,8DAA8D;QAC9D,IAAI,CAAC;YACH,MAAM,KAAK,GACT,KAAK,CAAC,IAAI,KAAK,WAAW;gBACxB,CAAC,CAAC,oBAAoB,EAAE;gBACxB,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YACjD,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,KAAK;gBACb,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;aAC5C,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;aAC5C,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,WAAW,EAAE,CAAC;AACpB,CAAC;AAED,wDAAwD;AACxD,IAAI,IAAI,EAAE,CAAC;IACT,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,CAAC,EACD,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAChD,CAAC;QACF,IAAI,SAAS,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,eAAe,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;YACjC,aAAa,CAAC,mBAAmB,CAAC,CAAC;YACnC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAChB,CAAC;QACJ,CAAC;IACH,CAAC,EAAE,IAAI,CAAC,CAAC;AACX,CAAC;AAED,4DAA4D;AAC5D,IAAI,GAAG,EAAE,CAAC;IACR,gFAAgF;IAChF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;YAClE,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;gBACjC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAC;gBACvE,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;oBACvD,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qDAAqD;AACrD,IAAI,IAAI,EAAE,CAAC;IACT,MAAM,IAAI,OAAO,CAAO,GAAG,EAAE;QAC3B,wDAAwD;QACxD,uCAAuC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;YAClE,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/docker.d.ts

@@ -0,0 +1,7 @@
+declare const CONTAINER_NAME = "agentcamo-tunnel";
+declare const SOCKS_PORT = 1080;
+export declare function dockerPreflight(): void;
+export declare function startSidecar(wgConfigB64: string): string;
+export declare function waitForHealth(maxWaitSecs?: number): Promise<void>;
+export declare function verifyExitIpViaSocks(): string;
+export { CONTAINER_NAME, SOCKS_PORT };

package/dist/docker.js

@@ -0,0 +1,106 @@
+import { execSync } from "child_process";
+import { writeFileSync, unlinkSync } from "fs";
+import { tmpdir } from "os";
+import { join } from "path";
+import { randomUUID } from "crypto";
+const CONTAINER_NAME = "agentcamo-tunnel";
+const IMAGE = "agentcamo/wg-sidecar:1";
+const SOCKS_PORT = 1080; // host port
+const HEALTH_PORT = 8081; // host port
+const CONTAINER_SOCKS_PORT = 1080; // fixed internal port
+const CONTAINER_HEALTH_PORT = 8081; // fixed internal port
+export function dockerPreflight() {
+    try {
+        execSync("docker info >/dev/null 2>&1", { stdio: "pipe", timeout: 5000 });
+    }
+    catch {
+        throw new Error("Docker is required for wireguard mode but is not running. " +
+            "Start Docker and try again.");
+    }
+    // Check port conflict
+    try {
+        execSync(`lsof -i :${SOCKS_PORT} -sTCP:LISTEN >/dev/null 2>&1`, {
+            stdio: "pipe",
+            timeout: 3000,
+        });
+        throw new Error(`Port ${SOCKS_PORT} is already in use. ` +
+            `Stop the existing service or use a different mode.`);
+    }
+    catch (err) {
+        // lsof exits non-zero when port is NOT in use — that's what we want
+        if (err instanceof Error && err.message.includes("already in use"))
+            throw err;
+    }
+}
+export function startSidecar(wgConfigB64) {
+    // Remove stale container if exists
+    try {
+        execSync(`docker rm -f ${CONTAINER_NAME} 2>/dev/null`, { stdio: "pipe" });
+    }
+    catch {
+        /* none running */
+    }
+    // Write config to a temp env-file instead of passing via -e flag,
+    // which would expose the WireGuard private key in `ps aux` output.
+    const envFile = join(tmpdir(), `agentcamo-${randomUUID()}.env`);
+    try {
+        writeFileSync(envFile, `AGENT_CAMO_WG_CONFIG=${wgConfigB64}\n`, {
+            mode: 0o600,
+        });
+        const cmd = [
+            "docker run -d",
+            `--name ${CONTAINER_NAME}`,
+            `--env-file ${envFile}`,
+            `-p ${SOCKS_PORT}:${CONTAINER_SOCKS_PORT}`,
+            `-p ${HEALTH_PORT}:${CONTAINER_HEALTH_PORT}`,
+            IMAGE,
+        ].join(" ");
+        return execSync(cmd, { encoding: "utf-8", timeout: 30_000 }).trim();
+    }
+    finally {
+        try {
+            unlinkSync(envFile);
+        }
+        catch {
+            /* best-effort cleanup */
+        }
+    }
+}
+export async function waitForHealth(maxWaitSecs = 20) {
+    for (let i = 1; i <= maxWaitSecs; i++) {
+        try {
+            execSync(`curl -sf http://localhost:${HEALTH_PORT}/readyz`, {
+                stdio: "pipe",
+                timeout: 3000,
+            });
+            return;
+        }
+        catch {
+            await new Promise((r) => setTimeout(r, 1000));
+        }
+    }
+    // Dump container logs for debugging
+    let logs = "";
+    try {
+        logs = execSync(`docker logs ${CONTAINER_NAME} 2>&1`, {
+            encoding: "utf-8",
+            timeout: 5000,
+        });
+    }
+    catch {
+        /* best effort */
+    }
+    // Check if WG handshake succeeded despite health check failure
+    if (logs.includes("Received handshake response")) {
+        // Known issue: published image uses ICMP CheckAlive which fails through TCP-only tunnel
+        // But SOCKS5 TCP traffic works fine
+        return;
+    }
+    throw new Error(`Sidecar not ready after ${maxWaitSecs}s.\n` +
+        (logs ? `Container logs:\n${logs.slice(0, 500)}` : "No logs available."));
+}
+export function verifyExitIpViaSocks() {
+    return execSync(`curl -sf --max-time 10 --socks5-hostname localhost:${SOCKS_PORT} https://api.ipify.org`, { encoding: "utf-8", timeout: 15_000 }).trim();
+}
+export { CONTAINER_NAME, SOCKS_PORT };
+//# sourceMappingURL=docker.js.map

package/dist/docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAC1C,MAAM,KAAK,GAAG,wBAAwB,CAAC;AACvC,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,YAAY;AACrC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,YAAY;AACtC,MAAM,oBAAoB,GAAG,IAAI,CAAC,CAAC,sBAAsB;AACzD,MAAM,qBAAqB,GAAG,IAAI,CAAC,CAAC,sBAAsB;AAE1D,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,QAAQ,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,4DAA4D;YAC1D,6BAA6B,CAChC,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC;QACH,QAAQ,CAAC,YAAY,UAAU,+BAA+B,EAAE;YAC9D,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,QAAQ,UAAU,sBAAsB;YACtC,oDAAoD,CACvD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,oEAAoE;QACpE,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAChE,MAAM,GAAG,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,mCAAmC;IACnC,IAAI,CAAC;QACH,QAAQ,CAAC,gBAAgB,cAAc,cAAc,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IAED,kEAAkE;IAClE,mEAAmE;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,UAAU,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,aAAa,CAAC,OAAO,EAAE,wBAAwB,WAAW,IAAI,EAAE;YAC9D,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG;YACV,eAAe;YACf,UAAU,cAAc,EAAE;YAC1B,cAAc,OAAO,EAAE;YACvB,MAAM,UAAU,IAAI,oBAAoB,EAAE;YAC1C,MAAM,WAAW,IAAI,qBAAqB,EAAE;YAC5C,KAAK;SACN,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAW,GAAG,EAAE;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,QAAQ,CAAC,6BAA6B,WAAW,SAAS,EAAE;gBAC1D,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,eAAe,cAAc,OAAO,EAAE;YACpD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IAED,+DAA+D;IAC/D,IAAI,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACjD,wFAAwF;QACxF,oCAAoC;QACpC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,KAAK,CACb,2BAA2B,WAAW,MAAM;QAC1C,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,QAAQ,CACb,sDAAsD,UAAU,wBAAwB,EACxF,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CACvC,CAAC,IAAI,EAAE,CAAC;AACX,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC"}

package/dist/geo-swap.d.ts

@@ -0,0 +1,2 @@
+import type { LocationSwapResponse } from "./types.js";
+export declare function swapCountry(sessionId: string, token: string, newCountry: string): Promise<LocationSwapResponse>;

package/dist/geo-swap.js

@@ -0,0 +1,25 @@
+import { API_URL } from "./session.js";
+export async function swapCountry(sessionId, token, newCountry) {
+    const res = await fetch(`${API_URL}/sessions/${sessionId}/location`, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${token}`,
+        },
+        body: JSON.stringify({ countryCode: newCountry }),
+    });
+    if (res.status === 429) {
+        const body = (await res.json());
+        const expiresAt = body.cooldownExpiresAt ?? "unknown";
+        throw new Error(`Rate limited: geo-swap cooldown active until ${expiresAt}`);
+    }
+    if (res.status === 400) {
+        throw new Error(`Invalid country code: ${newCountry}`);
+    }
+    if (!res.ok) {
+        const body = await res.text();
+        throw new Error(`Geo-swap failed (${res.status}): ${body}`);
+    }
+    return (await res.json());
+}
+//# sourceMappingURL=geo-swap.js.map

package/dist/geo-swap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"geo-swap.js","sourceRoot":"","sources":["../src/geo-swap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,KAAa,EACb,UAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,aAAa,SAAS,WAAW,EAAE;QACnE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;KAClD,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,IAAI,SAAS,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,gDAAgD,SAAS,EAAE,CAC5D,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;AACpD,CAAC"}

package/dist/ip-verify.d.ts

@@ -0,0 +1,12 @@
+import type { SessionState, CreateSessionResponse } from "./types.js";
+/**
+ * Verify exit IP via HTTP forward proxy through the TLS tunnel.
+ *
+ * Fly.io requires TLS on proxy port 8080 (handlers = ["tls"]),
+ * so we tls.connect first, then send a plain HTTP forward proxy
+ * request with an absolute URI (http://api.ipify.org/?format=text).
+ *
+ * This avoids the CONNECT+inner-TLS path which requires BD's CA cert
+ * (BD residential/mobile zones MITM TLS on CONNECT tunnels).
+ */
+export declare function verifyExitIp(state: SessionState, _response: CreateSessionResponse): Promise<string>;

package/dist/ip-verify.js

@@ -0,0 +1,58 @@
+import * as tls from "node:tls";
+import * as nodeHttp from "node:http";
+import { API_URL } from "./session.js";
+const API_HOST = new URL(API_URL).hostname;
+/**
+ * Verify exit IP via HTTP forward proxy through the TLS tunnel.
+ *
+ * Fly.io requires TLS on proxy port 8080 (handlers = ["tls"]),
+ * so we tls.connect first, then send a plain HTTP forward proxy
+ * request with an absolute URI (http://api.ipify.org/?format=text).
+ *
+ * This avoids the CONNECT+inner-TLS path which requires BD's CA cert
+ * (BD residential/mobile zones MITM TLS on CONNECT tunnels).
+ */
+export function verifyExitIp(state, _response) {
+    return new Promise((resolve, reject) => {
+        const proxyAuth = Buffer.from(`${state.sessionId}:${state.token}`).toString("base64");
+        const timer = setTimeout(() => {
+            tlsSocket.destroy();
+            reject(new Error("IP verify timeout (15s)"));
+        }, 15_000);
+        const tlsSocket = tls.connect({ host: API_HOST, port: 8080, servername: API_HOST }, () => {
+            const req = nodeHttp.request({
+                createConnection: () => tlsSocket,
+                path: "http://api.ipify.org/?format=text",
+                method: "GET",
+                headers: {
+                    "Proxy-Authorization": `Basic ${proxyAuth}`,
+                    Host: "api.ipify.org",
+                },
+            }, (res) => {
+                let body = "";
+                res.on("data", (chunk) => {
+                    body += chunk.toString();
+                });
+                res.on("end", () => {
+                    clearTimeout(timer);
+                    tlsSocket.destroy();
+                    if (res.statusCode !== 200) {
+                        reject(new Error(`IP verify failed: HTTP ${res.statusCode} — ${body.trim()}`));
+                        return;
+                    }
+                    resolve(body.trim());
+                });
+            });
+            req.on("error", (err) => {
+                clearTimeout(timer);
+                reject(err);
+            });
+            req.end();
+        });
+        tlsSocket.on("error", (err) => {
+            clearTimeout(timer);
+            reject(err);
+        });
+    });
+}
+//# sourceMappingURL=ip-verify.js.map

package/dist/ip-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-verify.js","sourceRoot":"","sources":["../src/ip-verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,QAAQ,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;AAE3C;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAmB,EACnB,SAAgC;IAEhC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CACzE,QAAQ,CACT,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,SAAS,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC/C,CAAC,EAAE,MAAM,CAAC,CAAC;QAEX,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAC3B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EACpD,GAAG,EAAE;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAC1B;gBACE,gBAAgB,EAAE,GAAG,EAAE,CACrB,SAAiD;gBACnD,IAAI,EAAE,mCAAmC;gBACzC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,qBAAqB,EAAE,SAAS,SAAS,EAAE;oBAC3C,IAAI,EAAE,eAAe;iBACtB;aACF,EACD,CAAC,GAAG,EAAE,EAAE;gBACN,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC3B,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,SAAS,CAAC,OAAO,EAAE,CAAC;oBACpB,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;wBAC3B,MAAM,CACJ,IAAI,KAAK,CACP,0BAA0B,GAAG,CAAC,UAAU,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,CAC5D,CACF,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvB,CAAC,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACtB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CACF,CAAC;QAEF,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/json-output.d.ts

@@ -0,0 +1,3 @@
+export declare class JsonEmitter {
+    emit(event: string, data: Record<string, unknown>): void;
+}

package/dist/json-output.js

@@ -0,0 +1,11 @@
+export class JsonEmitter {
+    emit(event, data) {
+        const line = JSON.stringify({
+            event,
+            ts: new Date().toISOString(),
+            ...data,
+        });
+        process.stdout.write(line + "\n");
+    }
+}
+//# sourceMappingURL=json-output.js.map

package/dist/json-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-output.js","sourceRoot":"","sources":["../src/json-output.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,WAAW;IACtB,IAAI,CAAC,KAAa,EAAE,IAA6B;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,KAAK;YACL,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,GAAG,IAAI;SACR,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/session.d.ts

@@ -0,0 +1,11 @@
+import type { CliMode, Chain, CreateSessionResponse } from "./types.js";
+export declare const API_URL: string;
+export declare function createSession(opts: {
+    mode: CliMode;
+    country: string;
+    chain: Chain;
+    privateKey: string;
+}): Promise<CreateSessionResponse>;
+export declare function buildRequestBody(mode: CliMode, country: string): Record<string, string>;
+export declare function buildProxyUrl(response: CreateSessionResponse, mode: CliMode): string;
+export declare function deleteSession(sessionId: string, token: string): Promise<void>;