@jonathanleelx/meddle 0.4.5-beta.6 → 0.4.5

package/dist/core/mitm-socket.d.ts

@@ -0,0 +1,25 @@
+import type { Socket } from 'net';
+import { isExpectedSocketError } from './connect-tunnel';
+export { isExpectedSocketError };
+export interface MitmClientSocketOptions {
+    /** Called once when the socket is accepted (tracking). */
+    onTrack: () => void;
+    /** Called once when the socket closes (untracking). */
+    onUntrack: () => void;
+    /** Attach per-connection metadata (e.g. client identity registry). */
+    attachIdentity: (socket: Socket) => void;
+    /** Report non-routine errors (ECONNRESET/EPIPE are swallowed). */
+    onUnexpectedError?: (err: NodeJS.ErrnoException) => void;
+}
+/**
+ * Wire the per-connection MITM TLS socket.
+ *
+ * A client resetting its TLS connection (ECONNRESET) can surface as an
+ * 'error' on the socket. Without a persistent listener the error propagates
+ * to uncaughtException and kills the whole proxy (observed in the deno
+ * binary). The listener is `on` (not `once`) because a socket can emit
+ * 'error' more than once; `once` would be consumed by the first error and a
+ * second emission would have no listener.
+ */
+export declare function wireMitmClientSocket(tlsSocket: Socket, options: MitmClientSocketOptions): void;
+//# sourceMappingURL=mitm-socket.d.ts.map

package/dist/core/mitm-socket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mitm-socket.d.ts","sourceRoot":"","sources":["../../core/mitm-socket.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,EAAE,qBAAqB,EAAE,CAAA;AAEhC,MAAM,WAAW,uBAAuB;IACpC,0DAA0D;IAC1D,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB,uDAAuD;IACvD,SAAS,EAAE,MAAM,IAAI,CAAA;IACrB,sEAAsE;IACtE,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,cAAc,KAAK,IAAI,CAAA;CAC3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAO9F"}

package/dist/core/mitm-socket.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isExpectedSocketError = void 0;
+exports.wireMitmClientSocket = wireMitmClientSocket;
+const connect_tunnel_1 = require("./connect-tunnel");
+Object.defineProperty(exports, "isExpectedSocketError", { enumerable: true, get: function () { return connect_tunnel_1.isExpectedSocketError; } });
+/**
+ * Wire the per-connection MITM TLS socket.
+ *
+ * A client resetting its TLS connection (ECONNRESET) can surface as an
+ * 'error' on the socket. Without a persistent listener the error propagates
+ * to uncaughtException and kills the whole proxy (observed in the deno
+ * binary). The listener is `on` (not `once`) because a socket can emit
+ * 'error' more than once; `once` would be consumed by the first error and a
+ * second emission would have no listener.
+ */
+function wireMitmClientSocket(tlsSocket, options) {
+    options.onTrack();
+    tlsSocket.once('close', () => { options.onUntrack(); });
+    options.attachIdentity(tlsSocket);
+    tlsSocket.on('error', (err) => {
+        if (!(0, connect_tunnel_1.isExpectedSocketError)(err))
+            options.onUnexpectedError?.(err);
+    });
+}
+//# sourceMappingURL=mitm-socket.js.map

package/dist/core/mitm-socket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mitm-socket.js","sourceRoot":"","sources":["../../core/mitm-socket.ts"],"names":[],"mappings":";;;AA0BA,oDAOC;AAhCD,qDAAwD;AAE/C,sGAFA,sCAAqB,OAEA;AAa9B;;;;;;;;;GASG;AACH,SAAgB,oBAAoB,CAAC,SAAiB,EAAE,OAAgC;IACpF,OAAO,CAAC,OAAO,EAAE,CAAA;IACjB,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IACtD,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;IACjC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;QACjD,IAAI,CAAC,IAAA,sCAAqB,EAAC,GAAG,CAAC;YAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;AACN,CAAC"}

package/index.js

@@ -13,6 +13,7 @@ const {
     establishConnectTunnel,
     isExpectedSocketError,
 } = require('./dist/core/connect-tunnel')
+const { wireMitmClientSocket } = require('./dist/core/mitm-socket')
 const {
     createClientIdentityResolver,
     createMitmClientIdentityRegistry,
@@ -776,13 +777,18 @@ proxyServer.on('connect', async (req, socket, head) => {
                     clientIdentityRegistry.register(remotePort, identity)
                 }
                 server.on('secureConnection', tlsSocket => {
-                    markMitmServerUsed(server)
-                    server._epActiveSockets.add(tlsSocket)
-                    tlsSocket.once('close', () => {
-                        server._epActiveSockets.delete(tlsSocket)
-                        markMitmServerUsed(server)
+                    wireMitmClientSocket(tlsSocket, {
+                        onTrack: () => {
+                            markMitmServerUsed(server)
+                            server._epActiveSockets.add(tlsSocket)
+                        },
+                        onUntrack: () => {
+                            server._epActiveSockets.delete(tlsSocket)
+                            markMitmServerUsed(server)
+                        },
+                        attachIdentity: socket => clientIdentityRegistry.attach(socket),
+                        onUnexpectedError: err => proxyDebug('MITM client socket error', originHost, getErrorMessage(err)),
                     })
-                    clientIdentityRegistry.attach(tlsSocket)
                 })
 
                 // WebSocket 代理（MITM HTTPS 服务器）- 使用 noServer 模式，统一在此处理并强制上游→客户端为文本

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jonathanleelx/meddle",
-  "version": "0.4.5-beta.6",
+  "version": "0.4.5",
   "description": "A simple development proxy server with custom routing rules, mock responses, HTTPS interception, and a plugin system",
   "type": "commonjs",
   "main": "index.js",