@continuumdao/continuum-node-sdk 1.2.27 → 1.2.29

package/dist/core/vpn/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/core/vpn/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,eAAO,MAAM,gBAAgB;;;EAA4B,CAAC;AAE1D,eAAO,MAAM,oBAAoB;;;;;;EAM/B,CAAC;AAEH,eAAO,MAAM,wBAAwB;;kBAI3B,CAAC;AAEX,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;kBAI1B,CAAC;AAEZ,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;kBAGzC,CAAC;AAEZ,eAAO,MAAM,8BAA8B;;;;;;;;;;kBAMjC,CAAC;AAEX,eAAO,MAAM,8BAA8B;;kBAIjC,CAAC;AAEX,eAAO,MAAM,wCAAwC;;;;;;;;;;kBAG1C,CAAC;AAEZ,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgBlB,CAAC;AAEX,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;kBAgBxB,CAAC;AAEX,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;kBAY1B,CAAC;AAEX,eAAO,MAAM,2BAA2B;;;;;;;;;;kBAM9B,CAAC;AAEX,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;kBAW1B,CAAC;AAEX,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;kBAIjC,CAAC"}

package/dist/core/vpn/schemas.js

@@ -0,0 +1,112 @@
+import { z } from 'zod';
+import { SelectedSigningKeySchema } from '../../schemas/extended.js';
+export const VpnProfileSchema = z.enum(['split', 'full']);
+export const VpnObfuscationSchema = z.enum([
+    'none',
+    'shadowsocks',
+    'wg_obfuscator',
+    'lwo',
+    'udp2raw',
+]);
+export const VpnUserFolderInputSchema = z
+    .object({
+    userFolder: z.string().min(1).optional(),
+})
+    .strict();
+export const SetVpnEnabledInputSchema = VpnUserFolderInputSchema.extend({
+    enabled: z.boolean(),
+    profile: VpnProfileSchema.optional(),
+    obfuscation: VpnObfuscationSchema.optional(),
+}).strict();
+export const DownloadVpnAdminClientConfigInputSchema = VpnUserFolderInputSchema.extend({
+    profile: VpnProfileSchema.optional(),
+    obfuscation: VpnObfuscationSchema.optional(),
+}).strict();
+export const SetVpnEgressSharingInputSchema = z
+    .object({
+    enabled: z.boolean(),
+    obfuscation: VpnObfuscationSchema.optional(),
+    defaultRateLimitMbps: z.number().nonnegative().optional(),
+})
+    .strict();
+export const RevokeVpnEgressPeerInputSchema = z
+    .object({
+    consumerNodeKey: z.string().min(1),
+})
+    .strict();
+export const DownloadVpnEgressClientConfigInputSchema = VpnUserFolderInputSchema.extend({
+    targetAddress: z.string().min(1),
+    obfuscation: VpnObfuscationSchema.optional(),
+}).strict();
+export const VpnStatusSchema = z
+    .object({
+    available: z.boolean(),
+    installed: z.boolean(),
+    active: z.boolean(),
+    listenPort: z.number(),
+    endpointHost: z.string(),
+    profiles: z.array(VpnProfileSchema),
+    profile: z.union([VpnProfileSchema, z.literal('')]).optional(),
+    obfuscation: VpnObfuscationSchema.optional(),
+    clientConfigured: z.boolean(),
+    vpnBillingRegistered: z.boolean().optional(),
+    vpnBillingMonthActive: z.boolean().optional(),
+    message: z.string().optional(),
+    lastError: z.string().optional(),
+})
+    .strict();
+export const VpnEgressStatusSchema = z
+    .object({
+    available: z.boolean(),
+    active: z.boolean(),
+    sharingEnabled: z.boolean(),
+    listenPort: z.number(),
+    endpointHost: z.string(),
+    countryCode: z.string(),
+    defaultRateLimitMbps: z.number(),
+    obfuscation: VpnObfuscationSchema,
+    peerCount: z.number().optional(),
+    vpnBillingRegistered: z.boolean().optional(),
+    vpnBillingMonthActive: z.boolean().optional(),
+    message: z.string().optional(),
+    lastError: z.string().optional(),
+})
+    .strict();
+export const VpnEgressExitPeerSchema = z
+    .object({
+    address: z.string(),
+    publicKey: z.string(),
+    countryCode: z.string().optional(),
+    obfuscation: VpnObfuscationSchema.optional(),
+    endpointHost: z.string().optional(),
+    listenPort: z.number().optional(),
+    defaultRateLimitMbps: z.number().optional(),
+    vpnBillingRegistered: z.boolean().optional(),
+    vpnBillingMonthActive: z.boolean().optional(),
+})
+    .strict();
+export const VpnSignedActionOutputSchema = z
+    .object({
+    result: z.record(z.string(), z.unknown()),
+    selectedSigningKey: SelectedSigningKeySchema.optional(),
+    signingMessage: z.string(),
+})
+    .strict();
+export const VpnDownloadOutputSchema = z
+    .object({
+    userFolder: z.string(),
+    wireGuardPath: z.string(),
+    transportPath: z.string().optional(),
+    wireGuardFilename: z.string(),
+    transportFilename: z.string().optional(),
+    setupInstructions: z.string().optional(),
+    selectedSigningKey: SelectedSigningKeySchema.optional(),
+    signingMessage: z.string(),
+})
+    .strict();
+export const ListVpnEgressExitsOutputSchema = z
+    .object({
+    exits: z.array(VpnEgressExitPeerSchema),
+})
+    .strict();
+//# sourceMappingURL=schemas.js.map

package/dist/core/vpn/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/core/vpn/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AACtB,OAAO,EAAC,wBAAwB,EAAC,MAAM,2BAA2B,CAAC;AAEnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAE1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,MAAM;IACN,aAAa;IACb,eAAe;IACf,KAAK;IACL,SAAS;CACT,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACvC,MAAM,CAAC;IACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,wBAAwB,GAAG,wBAAwB,CAAC,MAAM,CAAC;IACvE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,uCAAuC,GAAG,wBAAwB,CAAC,MAAM,CAAC;IACtF,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,WAAW,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC5C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACP,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,wCAAwC,GAAG,wBAAwB,CAAC,MAAM,CAAC;IACvF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,WAAW,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC9B,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9D,WAAW,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC5C,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5C,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACpC,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE;IAChC,WAAW,EAAE,oBAAoB;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5C,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACtC,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5C,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACP,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACzC,kBAAkB,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACtC,MAAM,CAAC;IACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,kBAAkB,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACP,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;CACvC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/core/vpn/vpn-admin.d.ts

@@ -0,0 +1,22 @@
+import type { NodeSdkConfig } from '../../config/schema.js';
+import { type ManagementSigningMethod } from '../../schemas/extended.js';
+import type { SdkResult } from '../result.js';
+import { toSelectedSigner } from '../management-signer.js';
+import { type VpnSetEnabledResult, type VpnStatusData } from './vpn-parse.js';
+export declare function getVpnStatus(config: NodeSdkConfig): Promise<SdkResult<VpnStatusData>>;
+export declare function setVpnEnabled(config: NodeSdkConfig, input: unknown, signing?: ManagementSigningMethod): Promise<SdkResult<{
+    result: VpnSetEnabledResult;
+    selectedSigningKey?: ReturnType<typeof toSelectedSigner>;
+    signingMessage: string;
+}>>;
+export declare function downloadVpnAdminClientConfig(config: NodeSdkConfig, input: unknown, signing?: ManagementSigningMethod): Promise<SdkResult<{
+    userFolder: string;
+    wireGuardPath: string;
+    transportPath?: string;
+    wireGuardFilename: string;
+    transportFilename?: string;
+    setupInstructions?: string;
+    selectedSigningKey?: ReturnType<typeof toSelectedSigner>;
+    signingMessage: string;
+}>>;
+//# sourceMappingURL=vpn-admin.d.ts.map

package/dist/core/vpn/vpn-admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn-admin.d.ts","sourceRoot":"","sources":["../../../src/core/vpn/vpn-admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAEN,KAAK,uBAAuB,EAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAC,gBAAgB,EAAC,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAON,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,MAAM,gBAAgB,CAAC;AAqCxB,wBAAsB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAI3F;AAED,wBAAsB,aAAa,CAClC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,uBAAoD,GAC3D,OAAO,CACT,SAAS,CAAC;IACT,MAAM,EAAE,mBAAmB,CAAC;IAC5B,kBAAkB,CAAC,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACzD,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC,CACF,CA4BA;AAED,wBAAsB,4BAA4B,CACjD,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,uBAAoD,GAC3D,OAAO,CACT,SAAS,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACzD,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC,CACF,CAuCA"}

package/dist/core/vpn/vpn-admin.js

@@ -0,0 +1,88 @@
+import { DEFAULT_MANAGEMENT_SIGNING, } from '../../schemas/extended.js';
+import { saveVpnClientBundleToUserFolder } from './vpn-files.js';
+import { isVpnObfuscated, parseVpnClientConfigPayload, parseVpnSetEnabledPayload, parseVpnStatusPayload, } from './vpn-parse.js';
+import { DownloadVpnAdminClientConfigInputSchema, SetVpnEnabledInputSchema, } from './schemas.js';
+import { getManagementRecord, postSignedManagementRequest } from './vpn-signed.js';
+function normalizeProfile(raw) {
+    return raw === 'split' ? 'split' : 'full';
+}
+function buildSetEnabledFields(input) {
+    const fields = {
+        enabled: input.enabled,
+        profile: input.profile,
+    };
+    if (input.enabled) {
+        fields.obfuscation = input.obfuscation ?? 'none';
+    }
+    return fields;
+}
+function buildClientConfigFields(input) {
+    const fields = { profile: input.profile };
+    if (input.obfuscation && isVpnObfuscated(input.obfuscation)) {
+        fields.obfuscation = input.obfuscation;
+    }
+    return fields;
+}
+export async function getVpnStatus(config) {
+    const result = await getManagementRecord(config, '/vpn/status');
+    if (!result.ok)
+        return result;
+    return { ok: true, data: parseVpnStatusPayload(result.data) };
+}
+export async function setVpnEnabled(config, input, signing = DEFAULT_MANAGEMENT_SIGNING) {
+    const parsed = SetVpnEnabledInputSchema.safeParse(input);
+    if (!parsed.success) {
+        return { ok: false, reason: 'Invalid set VPN enabled input.' };
+    }
+    const profile = normalizeProfile(parsed.data.profile);
+    const posted = await postSignedManagementRequest(config, '/vpn/setEnabled', () => buildSetEnabledFields({
+        enabled: parsed.data.enabled,
+        profile,
+        obfuscation: parsed.data.obfuscation,
+    }), signing);
+    if (!posted.ok)
+        return posted;
+    return {
+        ok: true,
+        data: {
+            result: parseVpnSetEnabledPayload(posted.data.data),
+            selectedSigningKey: posted.data.selectedSigningKey,
+            signingMessage: posted.data.signingMessage,
+        },
+    };
+}
+export async function downloadVpnAdminClientConfig(config, input, signing = DEFAULT_MANAGEMENT_SIGNING) {
+    const parsed = DownloadVpnAdminClientConfigInputSchema.safeParse(input);
+    if (!parsed.success) {
+        return { ok: false, reason: 'Invalid download VPN admin client config input.' };
+    }
+    const profile = normalizeProfile(parsed.data.profile);
+    const posted = await postSignedManagementRequest(config, '/vpn/clientConfig', () => buildClientConfigFields({
+        profile,
+        obfuscation: parsed.data.obfuscation,
+    }), signing);
+    if (!posted.ok)
+        return posted;
+    try {
+        const bundle = parseVpnClientConfigPayload(posted.data.data);
+        const saved = await saveVpnClientBundleToUserFolder(bundle, 'admin', {
+            userFolder: parsed.data.userFolder,
+            profile,
+        });
+        return {
+            ok: true,
+            data: {
+                ...saved,
+                selectedSigningKey: posted.data.selectedSigningKey,
+                signingMessage: posted.data.signingMessage,
+            },
+        };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: error instanceof Error ? error.message : 'Failed to save VPN client config.',
+        };
+    }
+}
+//# sourceMappingURL=vpn-admin.js.map

package/dist/core/vpn/vpn-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn-admin.js","sourceRoot":"","sources":["../../../src/core/vpn/vpn-admin.ts"],"names":[],"mappings":"AACA,OAAO,EACN,0BAA0B,GAE1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAC,+BAA+B,EAAC,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EACN,eAAe,EACf,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,GAKrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,uCAAuC,EACvC,wBAAwB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAC,mBAAmB,EAAE,2BAA2B,EAAC,MAAM,iBAAiB,CAAC;AAEjF,SAAS,gBAAgB,CAAC,GAAgB;IACzC,OAAO,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAI9B;IACA,MAAM,MAAM,GAA4B;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC;IACF,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,KAGhC;IACA,MAAM,MAAM,GAA4B,EAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAC,CAAC;IACjE,IAAI,KAAK,CAAC,WAAW,IAAI,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAqB;IACvD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,MAAqB,EACrB,KAAc,EACd,UAAmC,0BAA0B;IAQ7D,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAC,CAAC;IAC9D,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAC/C,MAAM,EACN,iBAAiB,EACjB,GAAG,EAAE,CACJ,qBAAqB,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;QAC5B,OAAO;QACP,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;KACpC,CAAC,EACH,OAAO,CACP,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE9B,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,MAAM,EAAE,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACnD,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB;YAClD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;SAC1C;KACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,MAAqB,EACrB,KAAc,EACd,UAAmC,0BAA0B;IAa7D,MAAM,MAAM,GAAG,uCAAuC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAC,CAAC;IAC/E,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAC/C,MAAM,EACN,mBAAmB,EACnB,GAAG,EAAE,CACJ,uBAAuB,CAAC;QACvB,OAAO;QACP,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;KACpC,CAAC,EACH,OAAO,CACP,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE9B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,+BAA+B,CAAC,MAAM,EAAE,OAAO,EAAE;YACpE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;YAClC,OAAO;SACP,CAAC,CAAC;QACH,OAAO;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACL,GAAG,KAAK;gBACR,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB;gBAClD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;aAC1C;SACD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC;SACpF,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/core/vpn/vpn-egress.d.ts

@@ -0,0 +1,30 @@
+import type { NodeSdkConfig } from '../../config/schema.js';
+import { type ManagementSigningMethod } from '../../schemas/extended.js';
+import type { SdkResult } from '../result.js';
+import { toSelectedSigner } from '../management-signer.js';
+import { type VpnEgressExitPeer, type VpnEgressStatusData } from './vpn-parse.js';
+export declare function getVpnEgressStatus(config: NodeSdkConfig): Promise<SdkResult<VpnEgressStatusData>>;
+export declare function listVpnEgressExits(config: NodeSdkConfig): Promise<SdkResult<{
+    exits: VpnEgressExitPeer[];
+}>>;
+export declare function setVpnEgressSharing(config: NodeSdkConfig, input: unknown, signing?: ManagementSigningMethod): Promise<SdkResult<{
+    result: Record<string, unknown>;
+    selectedSigningKey?: ReturnType<typeof toSelectedSigner>;
+    signingMessage: string;
+}>>;
+export declare function revokeVpnEgressPeer(config: NodeSdkConfig, input: unknown, signing?: ManagementSigningMethod): Promise<SdkResult<{
+    result: Record<string, unknown>;
+    selectedSigningKey?: ReturnType<typeof toSelectedSigner>;
+    signingMessage: string;
+}>>;
+export declare function downloadVpnEgressClientConfig(config: NodeSdkConfig, input: unknown, signing?: ManagementSigningMethod): Promise<SdkResult<{
+    userFolder: string;
+    wireGuardPath: string;
+    transportPath?: string;
+    wireGuardFilename: string;
+    transportFilename?: string;
+    setupInstructions?: string;
+    selectedSigningKey?: ReturnType<typeof toSelectedSigner>;
+    signingMessage: string;
+}>>;
+//# sourceMappingURL=vpn-egress.d.ts.map

package/dist/core/vpn/vpn-egress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn-egress.d.ts","sourceRoot":"","sources":["../../../src/core/vpn/vpn-egress.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAEN,KAAK,uBAAuB,EAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAC,gBAAgB,EAAC,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAIN,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EAExB,MAAM,gBAAgB,CAAC;AAQxB,wBAAsB,kBAAkB,CACvC,MAAM,EAAE,aAAa,GACnB,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAIzC;AAED,wBAAsB,kBAAkB,CACvC,MAAM,EAAE,aAAa,GACnB,OAAO,CAAC,SAAS,CAAC;IAAC,KAAK,EAAE,iBAAiB,EAAE,CAAA;CAAC,CAAC,CAAC,CAIlD;AAED,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,uBAAoD,GAC3D,OAAO,CACT,SAAS,CAAC;IACT,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,kBAAkB,CAAC,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACzD,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC,CACF,CA0BA;AAED,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,uBAAoD,GAC3D,OAAO,CACT,SAAS,CAAC;IACT,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,kBAAkB,CAAC,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACzD,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC,CACF,CAuBA;AAED,wBAAsB,6BAA6B,CAClD,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,uBAAoD,GAC3D,OAAO,CACT,SAAS,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACzD,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC,CACF,CAuCA"}

package/dist/core/vpn/vpn-egress.js

@@ -0,0 +1,91 @@
+import { DEFAULT_MANAGEMENT_SIGNING, } from '../../schemas/extended.js';
+import { saveVpnClientBundleToUserFolder } from './vpn-files.js';
+import { parseVpnClientConfigPayload, parseVpnEgressExitsPayload, parseVpnEgressStatusPayload, } from './vpn-parse.js';
+import { DownloadVpnEgressClientConfigInputSchema, RevokeVpnEgressPeerInputSchema, SetVpnEgressSharingInputSchema, } from './schemas.js';
+import { getManagementRecord, postSignedManagementRequest } from './vpn-signed.js';
+export async function getVpnEgressStatus(config) {
+    const result = await getManagementRecord(config, '/vpn/egress/status');
+    if (!result.ok)
+        return result;
+    return { ok: true, data: parseVpnEgressStatusPayload(result.data) };
+}
+export async function listVpnEgressExits(config) {
+    const result = await getManagementRecord(config, '/vpn/egress/availableExits');
+    if (!result.ok)
+        return result;
+    return { ok: true, data: { exits: parseVpnEgressExitsPayload(result.data) } };
+}
+export async function setVpnEgressSharing(config, input, signing = DEFAULT_MANAGEMENT_SIGNING) {
+    const parsed = SetVpnEgressSharingInputSchema.safeParse(input);
+    if (!parsed.success) {
+        return { ok: false, reason: 'Invalid set VPN egress sharing input.' };
+    }
+    const posted = await postSignedManagementRequest(config, '/vpn/egress/setSharing', () => ({
+        enabled: parsed.data.enabled,
+        obfuscation: parsed.data.obfuscation ?? 'none',
+        defaultRateLimitMbps: parsed.data.defaultRateLimitMbps ?? 0,
+    }), signing);
+    if (!posted.ok)
+        return posted;
+    return {
+        ok: true,
+        data: {
+            result: posted.data.data,
+            selectedSigningKey: posted.data.selectedSigningKey,
+            signingMessage: posted.data.signingMessage,
+        },
+    };
+}
+export async function revokeVpnEgressPeer(config, input, signing = DEFAULT_MANAGEMENT_SIGNING) {
+    const parsed = RevokeVpnEgressPeerInputSchema.safeParse(input);
+    if (!parsed.success) {
+        return { ok: false, reason: 'Invalid revoke VPN egress peer input.' };
+    }
+    const consumerNodeKey = parsed.data.consumerNodeKey.trim().toLowerCase();
+    const posted = await postSignedManagementRequest(config, '/vpn/egress/revokePeer', () => ({ consumerNodeKey }), signing);
+    if (!posted.ok)
+        return posted;
+    return {
+        ok: true,
+        data: {
+            result: posted.data.data,
+            selectedSigningKey: posted.data.selectedSigningKey,
+            signingMessage: posted.data.signingMessage,
+        },
+    };
+}
+export async function downloadVpnEgressClientConfig(config, input, signing = DEFAULT_MANAGEMENT_SIGNING) {
+    const parsed = DownloadVpnEgressClientConfigInputSchema.safeParse(input);
+    if (!parsed.success) {
+        return { ok: false, reason: 'Invalid download VPN egress client config input.' };
+    }
+    const targetAddress = parsed.data.targetAddress.trim();
+    const obfuscation = (parsed.data.obfuscation ?? 'none');
+    const posted = await postSignedManagementRequest(config, '/vpn/egress/requestClientConfig', () => ({
+        targetAddress,
+        obfuscation,
+    }), signing);
+    if (!posted.ok)
+        return posted;
+    try {
+        const bundle = parseVpnClientConfigPayload(posted.data.data);
+        const saved = await saveVpnClientBundleToUserFolder(bundle, 'egress', {
+            userFolder: parsed.data.userFolder,
+        });
+        return {
+            ok: true,
+            data: {
+                ...saved,
+                selectedSigningKey: posted.data.selectedSigningKey,
+                signingMessage: posted.data.signingMessage,
+            },
+        };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: error instanceof Error ? error.message : 'Failed to save egress client config.',
+        };
+    }
+}
+//# sourceMappingURL=vpn-egress.js.map

package/dist/core/vpn/vpn-egress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn-egress.js","sourceRoot":"","sources":["../../../src/core/vpn/vpn-egress.ts"],"names":[],"mappings":"AACA,OAAO,EACN,0BAA0B,GAE1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAC,+BAA+B,EAAC,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EACN,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,GAI3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,wCAAwC,EACxC,8BAA8B,EAC9B,8BAA8B,GAC9B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAC,mBAAmB,EAAE,2BAA2B,EAAC,MAAM,iBAAiB,CAAC;AAEjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,MAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,MAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,EAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAqB,EACrB,KAAc,EACd,UAAmC,0BAA0B;IAQ7D,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAC,CAAC;IACrE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAC/C,MAAM,EACN,wBAAwB,EACxB,GAAG,EAAE,CAAC,CAAC;QACN,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;QAC5B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM;QAC9C,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC;KAC3D,CAAC,EACF,OAAO,CACP,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE9B,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACxB,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB;YAClD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;SAC1C;KACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAqB,EACrB,KAAc,EACd,UAAmC,0BAA0B;IAQ7D,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAC,CAAC;IACrE,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAC/C,MAAM,EACN,wBAAwB,EACxB,GAAG,EAAE,CAAC,CAAC,EAAC,eAAe,EAAC,CAAC,EACzB,OAAO,CACP,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE9B,OAAO;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACxB,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB;YAClD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;SAC1C;KACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,MAAqB,EACrB,KAAc,EACd,UAAmC,0BAA0B;IAa7D,MAAM,MAAM,GAAG,wCAAwC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAC,CAAC;IAChF,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IACvD,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM,CAAmB,CAAC;IAE1E,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAC/C,MAAM,EACN,iCAAiC,EACjC,GAAG,EAAE,CAAC,CAAC;QACN,aAAa;QACb,WAAW;KACX,CAAC,EACF,OAAO,CACP,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE9B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,+BAA+B,CAAC,MAAM,EAAE,QAAQ,EAAE;YACrE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;SAClC,CAAC,CAAC;QACH,OAAO;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACL,GAAG,KAAK;gBACR,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB;gBAClD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;aAC1C;SACD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC;SACvF,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/core/vpn/vpn-files.d.ts

@@ -0,0 +1,14 @@
+import type { VpnClientBundle, VpnConnectSource, VpnProfile } from './vpn-parse.js';
+export type SavedVpnClientFiles = {
+    userFolder: string;
+    wireGuardPath: string;
+    transportPath?: string;
+    wireGuardFilename: string;
+    transportFilename?: string;
+    setupInstructions?: string;
+};
+export declare function saveVpnClientBundleToUserFolder(bundle: VpnClientBundle, source: VpnConnectSource, options?: {
+    userFolder?: string;
+    profile?: VpnProfile;
+}): Promise<SavedVpnClientFiles>;
+//# sourceMappingURL=vpn-files.d.ts.map

package/dist/core/vpn/vpn-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn-files.d.ts","sourceRoot":"","sources":["../../../src/core/vpn/vpn-files.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACX,eAAe,EACf,gBAAgB,EAChB,UAAU,EACV,MAAM,gBAAgB,CAAC;AAOxB,MAAM,MAAM,mBAAmB,GAAG;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,wBAAsB,+BAA+B,CACpD,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE;IACR,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,UAAU,CAAC;CAChB,GACJ,OAAO,CAAC,mBAAmB,CAAC,CA+B9B"}

package/dist/core/vpn/vpn-files.js

@@ -0,0 +1,32 @@
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { resolveUserFolderPath } from '../../config/paths.js';
+import { resolveTransportBundle, vpnDownloadWireGuardFilename, wireGuardConfigTextFromBundle, } from './vpn-parse.js';
+export async function saveVpnClientBundleToUserFolder(bundle, source, options = {}) {
+    const configText = wireGuardConfigTextFromBundle(bundle);
+    if (!configText) {
+        throw new Error('Empty VPN client config.');
+    }
+    const userFolder = resolveUserFolderPath(options.userFolder);
+    await fs.mkdir(userFolder, { recursive: true });
+    const profile = bundle.profile ?? options.profile;
+    const wireGuardFilename = bundle.filename?.trim() ||
+        vpnDownloadWireGuardFilename(source === 'egress' ? 'egress' : profile);
+    const wireGuardPath = path.join(userFolder, wireGuardFilename);
+    await fs.writeFile(wireGuardPath, configText, { mode: 0o644 });
+    const transport = resolveTransportBundle(bundle, source);
+    let transportPath;
+    if (transport) {
+        transportPath = path.join(userFolder, transport.filename);
+        await fs.writeFile(transportPath, transport.text, { mode: 0o644 });
+    }
+    return {
+        userFolder,
+        wireGuardPath,
+        transportPath,
+        wireGuardFilename,
+        transportFilename: transport?.filename,
+        setupInstructions: bundle.setupInstructions,
+    };
+}
+//# sourceMappingURL=vpn-files.js.map

package/dist/core/vpn/vpn-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn-files.js","sourceRoot":"","sources":["../../../src/core/vpn/vpn-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,IAAI,EAAE,EAAC,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,qBAAqB,EAAC,MAAM,uBAAuB,CAAC;AAM5D,OAAO,EACN,sBAAsB,EACtB,4BAA4B,EAC5B,6BAA6B,GAC7B,MAAM,gBAAgB,CAAC;AAWxB,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,MAAuB,EACvB,MAAwB,EACxB,UAGI,EAAE;IAEN,MAAM,UAAU,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;IAE9C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;IAClD,MAAM,iBAAiB,GACtB,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE;QACvB,4BAA4B,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,UAAU,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IAE7D,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,aAAiC,CAAC;IACtC,IAAI,SAAS,EAAE,CAAC;QACf,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,CAAC,IAAI,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IAClE,CAAC;IAED,OAAO;QACN,UAAU;QACV,aAAa;QACb,aAAa;QACb,iBAAiB;QACjB,iBAAiB,EAAE,SAAS,EAAE,QAAQ;QACtC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC3C,CAAC;AACH,CAAC"}

package/dist/core/vpn/vpn-host-binding.d.ts

@@ -0,0 +1,4 @@
+import { type Hex } from 'viem';
+/** keccak256(abi.encodePacked(nodeKey, hostIpAddress)) — matches continuumdao-node-app vpnHostBinding.ts */
+export declare function computeVpnHostBinding(nodeKey: string, hostIpAddress: string): Hex;
+//# sourceMappingURL=vpn-host-binding.d.ts.map

package/dist/core/vpn/vpn-host-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn-host-binding.d.ts","sourceRoot":"","sources":["../../../src/core/vpn/vpn-host-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,GAAG,EAAC,MAAM,MAAM,CAAC;AAEvD,4GAA4G;AAC5G,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,GAAG,CAEjF"}

package/dist/core/vpn/vpn-host-binding.js

@@ -0,0 +1,6 @@
+import { encodePacked, keccak256 } from 'viem';
+/** keccak256(abi.encodePacked(nodeKey, hostIpAddress)) — matches continuumdao-node-app vpnHostBinding.ts */
+export function computeVpnHostBinding(nodeKey, hostIpAddress) {
+    return keccak256(encodePacked(['string', 'string'], [nodeKey, hostIpAddress]));
+}
+//# sourceMappingURL=vpn-host-binding.js.map

package/dist/core/vpn/vpn-host-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn-host-binding.js","sourceRoot":"","sources":["../../../src/core/vpn/vpn-host-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAE,SAAS,EAAW,MAAM,MAAM,CAAC;AAEvD,4GAA4G;AAC5G,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,aAAqB;IAC3E,OAAO,SAAS,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/core/vpn/vpn-parse.d.ts

@@ -0,0 +1,115 @@
+export type VpnProfile = 'split' | 'full';
+export declare const VPN_OBFUSCATION_PROTOCOLS: readonly ["shadowsocks", "wg_obfuscator", "lwo", "udp2raw"];
+export type VpnObfuscationProtocol = (typeof VPN_OBFUSCATION_PROTOCOLS)[number];
+export type VpnObfuscation = 'none' | VpnObfuscationProtocol;
+export type VpnConnectSource = 'admin' | 'egress';
+export declare const VPN_DOWNLOAD_WG_FULL = "cont-full.conf";
+export declare const VPN_DOWNLOAD_WG_SPLIT = "cont-split.conf";
+export declare const VPN_DOWNLOAD_WG_EGRESS = "cont-egress.conf";
+export declare const VPN_DOWNLOAD_SS_LOCAL = "cont-ss.json";
+export declare const VPN_DOWNLOAD_SS_EGRESS = "cont-egss.json";
+export declare const VPN_DOWNLOAD_WG_OBFUSC = "cont-wgo.conf";
+export declare const VPN_DOWNLOAD_LWO_CLIENT = "cont-lwo.json";
+export declare const VPN_DOWNLOAD_UDP2RAW = "cont-u2r.sh";
+export type VpnStatusData = {
+    available: boolean;
+    installed: boolean;
+    active: boolean;
+    listenPort: number;
+    serverAddress: string;
+    vpnNetworkCidr: string;
+    endpointHost: string;
+    profiles: VpnProfile[];
+    clientConfigured: boolean;
+    profile?: VpnProfile | '';
+    obfuscation?: VpnObfuscation;
+    obfuscationAvailable?: boolean;
+    availableObfuscations?: VpnObfuscationProtocol[];
+    shadowsocksListenPort?: number;
+    shadowsocksMethod?: string;
+    wgObfuscatorListenPort?: number;
+    directWireGuardBlocked?: boolean;
+    managementViaVpn?: string;
+    message?: string;
+    lastError?: string;
+    hostProfile?: string;
+    vpnBillingRegistered?: boolean;
+    vpnBillingMonthActive?: boolean;
+    vpnBillingMonthUTC?: number;
+};
+export type VpnClientBundle = {
+    profile?: VpnProfile;
+    obfuscation?: VpnObfuscation;
+    configText?: string;
+    wireGuardConfigText?: string;
+    transportConfigText?: string;
+    transportFilename?: string;
+    transportBinary?: string;
+    shadowsocksLocalConfigText?: string;
+    shadowsocksUri?: string;
+    setupInstructions?: string;
+    filename?: string;
+    shadowsocksLocalFilename?: string;
+    localTunnelPort?: number;
+};
+export type VpnTransportBundle = {
+    text: string;
+    filename: string;
+    binary?: string;
+};
+export type VpnSetEnabledResult = {
+    message?: string;
+    profile?: VpnProfile;
+    obfuscation?: VpnObfuscation;
+    pendingVpnWritten?: boolean;
+    pendingVpnFileError?: string;
+    transportError?: string;
+};
+export type VpnEgressStatusData = {
+    available: boolean;
+    active: boolean;
+    sharingEnabled: boolean;
+    listenPort: number;
+    vpnNetworkCidr: string;
+    endpointHost: string;
+    obfuscation: VpnObfuscation;
+    countryCode: string;
+    defaultRateLimitMbps: number;
+    shadowsocksListenPort?: number;
+    wgObfuscatorListenPort?: number;
+    udp2rawListenPort?: number;
+    availableObfuscations?: VpnObfuscationProtocol[];
+    peerCount?: number;
+    message?: string;
+    lastError?: string;
+    vpnBillingRegistered?: boolean;
+    vpnBillingMonthActive?: boolean;
+    vpnBillingMonthUTC?: number;
+};
+export type VpnEgressExitPeer = {
+    address: string;
+    publicKey: string;
+    countryCode?: string;
+    obfuscation?: VpnObfuscation;
+    endpointHost?: string;
+    listenPort?: number;
+    defaultRateLimitMbps?: number;
+    shadowsocksListenPort?: number;
+    wgObfuscatorListenPort?: number;
+    udp2rawListenPort?: number;
+    vpnBillingRegistered?: boolean;
+    vpnBillingMonthActive?: boolean;
+    vpnBillingMonthUTC?: number;
+};
+export declare function parseVpnObfuscation(raw: unknown): VpnObfuscation;
+export declare function isVpnObfuscated(obfuscation?: VpnObfuscation | string): boolean;
+export declare function parseVpnStatusPayload(data: Record<string, unknown>): VpnStatusData;
+export declare function parseVpnClientConfigPayload(data: Record<string, unknown>): VpnClientBundle;
+export declare function parseVpnSetEnabledPayload(data: Record<string, unknown>): VpnSetEnabledResult;
+export declare function parseVpnEgressStatusPayload(data: Record<string, unknown>): VpnEgressStatusData;
+export declare function parseVpnEgressExitsPayload(data: Record<string, unknown>): VpnEgressExitPeer[];
+export declare function vpnDownloadWireGuardFilename(profile?: VpnProfile | 'egress' | ''): string;
+export declare function vpnDownloadTransportFilename(obfuscation: VpnObfuscation, source: VpnConnectSource): string | undefined;
+export declare function resolveTransportBundle(bundle: VpnClientBundle, source?: VpnConnectSource): VpnTransportBundle | undefined;
+export declare function wireGuardConfigTextFromBundle(bundle: VpnClientBundle): string;
+//# sourceMappingURL=vpn-parse.d.ts.map

package/dist/core/vpn/vpn-parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn-parse.d.ts","sourceRoot":"","sources":["../../../src/core/vpn/vpn-parse.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AAE1C,eAAO,MAAM,yBAAyB,6DAK5B,CAAC;AACX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChF,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,sBAAsB,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAElD,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AACrD,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AACvD,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AACzD,eAAO,MAAM,qBAAqB,iBAAiB,CAAC;AACpD,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AACvD,eAAO,MAAM,sBAAsB,kBAAkB,CAAC;AACtD,eAAO,MAAM,uBAAuB,kBAAkB,CAAC;AACvD,eAAO,MAAM,oBAAoB,gBAAgB,CAAC;AAElD,MAAM,MAAM,aAAa,GAAG;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,UAAU,GAAG,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,qBAAqB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACjD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC7B,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,cAAc,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAcF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAEhE;AAED,wBAAgB,eAAe,CAAC,WAAW,CAAC,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAM9E;AA0BD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa,CA8ClF;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,CA6B1F;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,mBAAmB,CAoB5F;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,mBAAmB,CAgC9F;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,iBAAiB,EAAE,CAqC7F;AAED,wBAAgB,4BAA4B,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,EAAE,GAAG,MAAM,CAIzF;AAED,wBAAgB,4BAA4B,CAC3C,WAAW,EAAE,cAAc,EAC3B,MAAM,EAAE,gBAAgB,GACtB,MAAM,GAAG,SAAS,CAapB;AAED,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,eAAe,EACvB,MAAM,GAAE,gBAA0B,GAChC,kBAAkB,GAAG,SAAS,CAUhC;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAE7E"}