@push.rocks/smartproxy 27.12.8 → 27.13.0

package/dist_ts/proxies/smart-proxy/smart-proxy.d.ts

@@ -4,6 +4,7 @@ import type { ISmartProxyOptions, ISmartProxySecurityPolicy, IActiveConnectionSn
 import type { IRouteConfig } from './models/route-types.js';
 import type { IMetrics } from './models/metrics-types.js';
 import type { IRustCertificateStatus, IRustStatistics } from './models/rust-types.js';
+type TChallengeProvider = plugins.smartchallenge.IChallengeProvider;
 /**
  * SmartProxy - Rust-backed proxy engine with TypeScript configuration API.
  *
@@ -21,12 +22,20 @@ export declare class SmartProxy extends plugins.EventEmitter {
     private preprocessor;
     private socketHandlerServer;
     private datagramHandlerServer;
+    private challengeProviderRelayServer;
+    private challengeProviders;
+    private challengeRuntimeOptions?;
     private metricsAdapter;
     private nftablesManager;
     private routeUpdateLock;
     private stopping;
     private certProvisionPromise;
     constructor(settingsArg: ISmartProxyOptions);
+    /**
+     * Register a runtime challenge provider family. Routes reference providerId + challengeType;
+     * deployment wiring and provider secrets stay outside route configs.
+     */
+    registerChallengeProvider(providerId: string, provider: TChallengeProvider): void;
     /**
      * Start the proxy.
      * Spawns the Rust binary, configures socket relay if needed, sends routes, handles cert provisioning.
@@ -89,6 +98,7 @@ export declare class SmartProxy extends plugins.EventEmitter {
      * Get NFTables status.
      */
     getNfTablesStatus(): plugins.smartnftables.INftStatus | null;
+    private cleanupRuntimeResourcesAfterStartFailure;
     /**
      * Apply NFTables rules for routes using the nftables forwarding engine.
      */
@@ -97,6 +107,14 @@ export declare class SmartProxy extends plugins.EventEmitter {
      * Build the Rust configuration object from TS settings.
      */
     private buildRustConfig;
+    private hasChallengeRoutes;
+    private ensureChallengeProviderRelay;
+    private validateChallengeRoutes;
+    private validateChallengeIntentShape;
+    private validateAllowedChallengeKeys;
+    private isPlainRecord;
+    private collectForbiddenChallengeKeys;
+    private looksLikeRuntimeChallengeValue;
     /**
      * For routes with certificate: 'auto', call certProvisionFunction if set.
      * If the callback returns a cert object, load it into Rust.
@@ -122,3 +140,4 @@ export declare class SmartProxy extends plugins.EventEmitter {
     private normalizeDomainsForCertProvisioning;
     private isValidDomain;
 }
+export {};