@singbox-iac/cli 0.1.0

package/dist/cli/commands/build.js

@@ -0,0 +1,198 @@
+import { homedir } from "node:os";
+import path from "node:path";
+import { buildConfigArtifact } from "../../modules/build/index.js";
+import { resolveBuilderConfig } from "../command-helpers.js";
+export function registerBuildCommand(program) {
+    program
+        .command("build")
+        .description("Fetch, parse, and compile a staging sing-box config.")
+        .option("-c, --config <path>", "path to builder config YAML")
+        .option("--subscription-url <url>", "override subscription URL")
+        .option("--subscription-file <path>", "use a local subscription file instead of fetching")
+        .option("-o, --output <path>", "override output path")
+        .action(async (options) => {
+        const config = await resolveBuildConfig(options);
+        const result = await buildConfigArtifact({
+            config,
+            ...(options.output ? { outputPath: options.output } : {}),
+            ...(options.subscriptionFile ? { subscriptionFile: options.subscriptionFile } : {}),
+            ...(options.subscriptionUrl ? { subscriptionUrl: options.subscriptionUrl } : {}),
+        });
+        const warnings = [...result.warnings];
+        process.stdout.write(`${[
+            `Generated ${result.nodeCount} nodes.`,
+            `Output: ${result.outputPath}`,
+            warnings.length > 0 ? `Warnings: ${warnings.length}` : "Warnings: 0",
+        ].join("\n")}\n`);
+        if (warnings.length > 0) {
+            process.stdout.write(`${warnings.map((warning) => `- ${warning}`).join("\n")}\n`);
+        }
+    });
+}
+async function resolveBuildConfig(options) {
+    const builderConfig = await resolveBuilderConfig(options);
+    if (builderConfig) {
+        return builderConfig;
+    }
+    return {
+        version: 1,
+        subscription: {
+            url: options.subscriptionUrl ?? "",
+            format: "base64-lines",
+            protocols: ["trojan"],
+        },
+        output: {
+            stagingPath: options.output ?? path.resolve(process.cwd(), "config.json"),
+            livePath: options.output ?? path.resolve(process.cwd(), "config.json"),
+            backupPath: path.resolve(process.cwd(), "config.last-known-good.json"),
+        },
+        runtime: {
+            checkCommand: "sing-box check -c {{stagingPath}}",
+            reload: {
+                kind: "signal",
+                processName: "sing-box",
+                signal: "HUP",
+            },
+        },
+        listeners: {
+            mixed: {
+                enabled: true,
+                listen: "127.0.0.1",
+                port: 39097,
+            },
+            proxifier: {
+                enabled: true,
+                listen: "127.0.0.1",
+                port: 39091,
+            },
+        },
+        ruleSets: [
+            localRuleSet("geosite-cn"),
+            localRuleSet("geoip-cn"),
+            localRuleSet("geosite-google"),
+            localRuleSet("geosite-google-gemini"),
+            localRuleSet("geosite-google-deepmind"),
+            localRuleSet("geosite-anthropic"),
+            localRuleSet("geosite-github"),
+            localRuleSet("geosite-github-copilot"),
+            localRuleSet("geosite-cursor"),
+            localRuleSet("geosite-figma"),
+        ],
+        groups: {
+            processProxy: {
+                type: "selector",
+                includes: ["US", "SG", "JP", "HK"],
+                defaultNodePattern: "OnlyAI",
+            },
+            aiOut: { type: "selector", includes: ["HK", "SG", "US", "JP"], defaultTarget: "HK" },
+            devCommonOut: {
+                type: "selector",
+                includes: ["HK", "SG", "US", "JP"],
+                defaultTarget: "HK",
+            },
+            stitchOut: { type: "selector", includes: ["US", "SG", "JP"], defaultTarget: "US" },
+            global: { type: "urltest", includes: ["HK", "SG", "JP", "US"] },
+        },
+        rules: {
+            userRulesFile: path.resolve(process.cwd(), "custom.rules.yaml"),
+        },
+        verification: {
+            scenarios: [
+                {
+                    id: "antigravity-auth",
+                    name: "Antigravity auth via proxifier stays on the OnlyAI US node",
+                    url: "https://accounts.google.com/favicon.ico",
+                    inbound: "in-proxifier",
+                    expectedOutbound: "Process-Proxy",
+                },
+                {
+                    id: "antigravity-oauth",
+                    name: "Antigravity OAuth metadata via proxifier stays on the OnlyAI US node",
+                    url: "https://oauth2.googleapis.com/.well-known/openid-configuration",
+                    inbound: "in-proxifier",
+                    expectedOutbound: "Process-Proxy",
+                },
+                {
+                    id: "antigravity-docs",
+                    name: "Antigravity docs via proxifier stay on the OnlyAI US node",
+                    url: "https://antigravity.google/docs",
+                    inbound: "in-proxifier",
+                    expectedOutbound: "Process-Proxy",
+                },
+                {
+                    id: "antigravity-rules-docs",
+                    name: "Antigravity rules docs via proxifier stay on the OnlyAI US node",
+                    url: "https://antigravity.google/docs/rules",
+                    inbound: "in-proxifier",
+                    expectedOutbound: "Process-Proxy",
+                },
+                {
+                    id: "antigravity-mcp-docs",
+                    name: "Antigravity MCP docs via proxifier stay on the OnlyAI US node",
+                    url: "https://antigravity.google/docs/mcp",
+                    inbound: "in-proxifier",
+                    expectedOutbound: "Process-Proxy",
+                },
+                {
+                    id: "antigravity-google-apis",
+                    name: "Antigravity Google API discovery traffic via proxifier stays on the OnlyAI US node",
+                    url: "https://www.googleapis.com/discovery/v1/apis",
+                    inbound: "in-proxifier",
+                    expectedOutbound: "Process-Proxy",
+                },
+                {
+                    id: "stitch-us",
+                    name: "Google Stitch always uses the dedicated US exit",
+                    url: "https://stitch.withgoogle.com/favicon.ico",
+                    inbound: "in-mixed",
+                    expectedOutbound: "Stitch-Out",
+                },
+                {
+                    id: "cn-direct",
+                    name: "China traffic stays direct",
+                    url: "https://www.baidu.com/favicon.ico",
+                    inbound: "in-mixed",
+                    expectedOutbound: "direct",
+                },
+                {
+                    id: "chatgpt-hk",
+                    name: "ChatGPT uses the HK default AI path",
+                    url: "https://chatgpt.com/favicon.ico",
+                    inbound: "in-mixed",
+                    expectedOutbound: "AI-Out",
+                },
+                {
+                    id: "openrouter-hk",
+                    name: "OpenRouter custom DSL rules send traffic to the HK AI path",
+                    url: "https://openrouter.ai/favicon.ico",
+                    inbound: "in-mixed",
+                    expectedOutbound: "AI-Out",
+                },
+                {
+                    id: "github-hk",
+                    name: "GitHub uses the HK default developer path",
+                    url: "https://github.com/favicon.ico",
+                    inbound: "in-mixed",
+                    expectedOutbound: "Dev-Common-Out",
+                },
+            ],
+        },
+        schedule: {
+            enabled: false,
+            intervalMinutes: 30,
+        },
+        authoring: {
+            provider: "deterministic",
+            timeoutMs: 4000,
+        },
+    };
+}
+function localRuleSet(tag) {
+    return {
+        tag,
+        format: "binary",
+        type: "local",
+        path: path.join(homedir(), ".config", "sing-box", "rule-set", `${tag}.srs`),
+    };
+}
+//# sourceMappingURL=build.js.map

package/dist/cli/commands/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../../src/cli/commands/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAK7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;SAC5D,MAAM,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;SAC/D,MAAM,CAAC,4BAA4B,EAAE,mDAAmD,CAAC;SACzF,MAAM,CAAC,qBAAqB,EAAE,sBAAsB,CAAC;SACrD,MAAM,CAAC,KAAK,EAAE,OAA4B,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG;YACD,aAAa,MAAM,CAAC,SAAS,SAAS;YACtC,WAAW,MAAM,CAAC,UAAU,EAAE;YAC9B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,aAAa;SACrE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,CAAC;QAEF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AASD,KAAK,UAAU,kBAAkB,CAAC,OAA4B;IAC5D,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC;QACV,YAAY,EAAE;YACZ,GAAG,EAAE,OAAO,CAAC,eAAe,IAAI,EAAE;YAClC,MAAM,EAAE,cAAc;YACtB,SAAS,EAAE,CAAC,QAAQ,CAAC;SACtB;QACD,MAAM,EAAE;YACN,WAAW,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC;YACzE,QAAQ,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC;YACtE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,6BAA6B,CAAC;SACvE;QACD,OAAO,EAAE;YACP,YAAY,EAAE,mCAAmC;YACjD,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,UAAU;gBACvB,MAAM,EAAE,KAAK;aACd;SACF;QACD,SAAS,EAAE;YACT,KAAK,EAAE;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,WAAW;gBACnB,IAAI,EAAE,KAAK;aACZ;YACD,SAAS,EAAE;gBACT,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,WAAW;gBACnB,IAAI,EAAE,KAAK;aACZ;SACF;QACD,QAAQ,EAAE;YACR,YAAY,CAAC,YAAY,CAAC;YAC1B,YAAY,CAAC,UAAU,CAAC;YACxB,YAAY,CAAC,gBAAgB,CAAC;YAC9B,YAAY,CAAC,uBAAuB,CAAC;YACrC,YAAY,CAAC,yBAAyB,CAAC;YACvC,YAAY,CAAC,mBAAmB,CAAC;YACjC,YAAY,CAAC,gBAAgB,CAAC;YAC9B,YAAY,CAAC,wBAAwB,CAAC;YACtC,YAAY,CAAC,gBAAgB,CAAC;YAC9B,YAAY,CAAC,eAAe,CAAC;SAC9B;QACD,MAAM,EAAE;YACN,YAAY,EAAE;gBACZ,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;gBAClC,kBAAkB,EAAE,QAAQ;aAC7B;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE;YACpF,YAAY,EAAE;gBACZ,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;gBAClC,aAAa,EAAE,IAAI;aACpB;YACD,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE;YAClF,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;SAChE;QACD,KAAK,EAAE;YACL,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,mBAAmB,CAAC;SAChE;QACD,YAAY,EAAE;YACZ,SAAS,EAAE;gBACT;oBACE,EAAE,EAAE,kBAAkB;oBACtB,IAAI,EAAE,4DAA4D;oBAClE,GAAG,EAAE,yCAAyC;oBAC9C,OAAO,EAAE,cAAc;oBACvB,gBAAgB,EAAE,eAAe;iBAClC;gBACD;oBACE,EAAE,EAAE,mBAAmB;oBACvB,IAAI,EAAE,sEAAsE;oBAC5E,GAAG,EAAE,gEAAgE;oBACrE,OAAO,EAAE,cAAc;oBACvB,gBAAgB,EAAE,eAAe;iBAClC;gBACD;oBACE,EAAE,EAAE,kBAAkB;oBACtB,IAAI,EAAE,2DAA2D;oBACjE,GAAG,EAAE,iCAAiC;oBACtC,OAAO,EAAE,cAAc;oBACvB,gBAAgB,EAAE,eAAe;iBAClC;gBACD;oBACE,EAAE,EAAE,wBAAwB;oBAC5B,IAAI,EAAE,iEAAiE;oBACvE,GAAG,EAAE,uCAAuC;oBAC5C,OAAO,EAAE,cAAc;oBACvB,gBAAgB,EAAE,eAAe;iBAClC;gBACD;oBACE,EAAE,EAAE,sBAAsB;oBAC1B,IAAI,EAAE,+DAA+D;oBACrE,GAAG,EAAE,qCAAqC;oBAC1C,OAAO,EAAE,cAAc;oBACvB,gBAAgB,EAAE,eAAe;iBAClC;gBACD;oBACE,EAAE,EAAE,yBAAyB;oBAC7B,IAAI,EAAE,oFAAoF;oBAC1F,GAAG,EAAE,8CAA8C;oBACnD,OAAO,EAAE,cAAc;oBACvB,gBAAgB,EAAE,eAAe;iBAClC;gBACD;oBACE,EAAE,EAAE,WAAW;oBACf,IAAI,EAAE,iDAAiD;oBACvD,GAAG,EAAE,2CAA2C;oBAChD,OAAO,EAAE,UAAU;oBACnB,gBAAgB,EAAE,YAAY;iBAC/B;gBACD;oBACE,EAAE,EAAE,WAAW;oBACf,IAAI,EAAE,4BAA4B;oBAClC,GAAG,EAAE,mCAAmC;oBACxC,OAAO,EAAE,UAAU;oBACnB,gBAAgB,EAAE,QAAQ;iBAC3B;gBACD;oBACE,EAAE,EAAE,YAAY;oBAChB,IAAI,EAAE,qCAAqC;oBAC3C,GAAG,EAAE,iCAAiC;oBACtC,OAAO,EAAE,UAAU;oBACnB,gBAAgB,EAAE,QAAQ;iBAC3B;gBACD;oBACE,EAAE,EAAE,eAAe;oBACnB,IAAI,EAAE,4DAA4D;oBAClE,GAAG,EAAE,mCAAmC;oBACxC,OAAO,EAAE,UAAU;oBACnB,gBAAgB,EAAE,QAAQ;iBAC3B;gBACD;oBACE,EAAE,EAAE,WAAW;oBACf,IAAI,EAAE,2CAA2C;oBACjD,GAAG,EAAE,gCAAgC;oBACrC,OAAO,EAAE,UAAU;oBACnB,gBAAgB,EAAE,gBAAgB;iBACnC;aACF;SACF;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,KAAK;YACd,eAAe,EAAE,EAAE;SACpB;QACD,SAAS,EAAE;YACT,QAAQ,EAAE,eAAe;YACzB,SAAS,EAAE,IAAI;SAChB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAM/B,OAAO;QACL,GAAG;QACH,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,GAAG,MAAM,CAAC;KAC5E,CAAC;AACJ,CAAC"}

package/dist/cli/commands/check.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from "commander";
+export declare function registerCheckCommand(program: Command): void;

package/dist/cli/commands/check.js

@@ -0,0 +1,23 @@
+import { checkConfig } from "../../modules/manager/index.js";
+import { resolveBuilderConfig } from "../command-helpers.js";
+export function registerCheckCommand(program) {
+    program
+        .command("check")
+        .description("Validate a generated sing-box config.")
+        .option("-c, --config <path>", "path to builder config YAML")
+        .option("-i, --input <path>", "path to config JSON to validate")
+        .option("--sing-box-bin <path>", "path to sing-box binary")
+        .action(async (options) => {
+        const builderConfig = await resolveBuilderConfig(options);
+        const configPath = options.input ?? builderConfig?.output.stagingPath;
+        if (!configPath) {
+            throw new Error("No config path resolved. Pass --input or provide a builder config.");
+        }
+        const result = await checkConfig({
+            configPath,
+            ...(options.singBoxBin ? { singBoxBinary: options.singBoxBin } : {}),
+        });
+        process.stdout.write(`OK: ${configPath}\nBinary: ${result.binaryPath}\n`);
+    });
+}
+//# sourceMappingURL=check.js.map

package/dist/cli/commands/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../../src/cli/commands/check.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,uCAAuC,CAAC;SACpD,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;SAC5D,MAAM,CAAC,oBAAoB,EAAE,iCAAiC,CAAC;SAC/D,MAAM,CAAC,uBAAuB,EAAE,yBAAyB,CAAC;SAC1D,MAAM,CAAC,KAAK,EAAE,OAA4B,EAAE,EAAE;QAC7C,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC;QACtE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;YAC/B,UAAU;YACV,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,UAAU,aAAa,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/doctor.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from "commander";
+export declare function registerDoctorCommand(program: Command): void;

package/dist/cli/commands/doctor.js

@@ -0,0 +1,35 @@
+import path from "node:path";
+import { runDoctor } from "../../modules/doctor/index.js";
+import { findDefaultConfigPath, resolveBuilderConfig } from "../command-helpers.js";
+export function registerDoctorCommand(program) {
+    program
+        .command("doctor")
+        .description("Inspect environment readiness for singbox-iac.")
+        .option("-c, --config <path>", "path to builder config YAML")
+        .option("--sing-box-bin <path>", "path to sing-box binary")
+        .option("--chrome-bin <path>", "path to Chrome binary")
+        .option("--launch-agents-dir <path>", "override launch agents directory for checks")
+        .action(async (options) => {
+        const [config, configPath] = await Promise.all([
+            resolveBuilderConfig(options),
+            options.config ? Promise.resolve(pathResolve(options.config)) : findDefaultConfigPath(),
+        ]);
+        const report = await runDoctor({
+            ...(config ? { config } : {}),
+            ...(configPath ? { configPath } : {}),
+            ...(options.singBoxBin ? { singBoxBinary: options.singBoxBin } : {}),
+            ...(options.chromeBin ? { chromeBinary: options.chromeBin } : {}),
+            ...(options.launchAgentsDir
+                ? { launchAgentsDir: pathResolve(options.launchAgentsDir) }
+                : {}),
+        });
+        process.stdout.write(`${report.checks.map((check) => `[${check.status}] ${check.name}: ${check.details}`).join("\n")}\n`);
+        if (report.checks.some((check) => check.status === "FAIL")) {
+            throw new Error("Doctor found blocking failures.");
+        }
+    });
+}
+function pathResolve(filePath) {
+    return filePath.startsWith("/") ? filePath : path.resolve(process.cwd(), filePath);
+}
+//# sourceMappingURL=doctor.js.map

package/dist/cli/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAEpF,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;SAC5D,MAAM,CAAC,uBAAuB,EAAE,yBAAyB,CAAC;SAC1D,MAAM,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;SACtD,MAAM,CAAC,4BAA4B,EAAE,6CAA6C,CAAC;SACnF,MAAM,CAAC,KAAK,EAAE,OAA6B,EAAE,EAAE;QAC9C,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7C,oBAAoB,CAAC,OAAO,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE;SACxF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,OAAO,CAAC,eAAe;gBACzB,CAAC,CAAC,EAAE,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACpG,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AASD,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;AACrF,CAAC"}

package/dist/cli/commands/init.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from "commander";
+export declare function registerInitCommand(program: Command): void;

package/dist/cli/commands/init.js

@@ -0,0 +1,23 @@
+import { homedir } from "node:os";
+import path from "node:path";
+import { initWorkspace } from "../../modules/init/index.js";
+export function registerInitCommand(program) {
+    program
+        .command("init")
+        .description("Create example singbox-iac configuration assets.")
+        .option("-c, --config-out <path>", "path to write builder config", "builder.config.local.yaml")
+        .option("--rules-out <path>", "path to write the custom rules YAML", path.join(homedir(), ".config", "singbox-iac", "rules", "custom.rules.yaml"))
+        .option("--subscription-url <url>", "seed the generated config with a real subscription URL")
+        .option("-f, --force", "overwrite existing generated assets")
+        .action(async (options) => {
+        const result = await initWorkspace({
+            configOutPath: path.resolve(options.configOut),
+            rulesOutPath: path.resolve(options.rulesOut),
+            examplesDir: path.resolve(process.cwd(), "examples"),
+            ...(options.subscriptionUrl ? { subscriptionUrl: options.subscriptionUrl } : {}),
+            force: options.force === true,
+        });
+        process.stdout.write(`${[`Config: ${result.configPath}`, `Rules: ${result.rulesPath}`].join("\n")}\n`);
+    });
+}
+//# sourceMappingURL=init.js.map

package/dist/cli/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,kDAAkD,CAAC;SAC/D,MAAM,CAAC,yBAAyB,EAAE,8BAA8B,EAAE,2BAA2B,CAAC;SAC9F,MAAM,CACL,oBAAoB,EACpB,qCAAqC,EACrC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAC7E;SACA,MAAM,CAAC,0BAA0B,EAAE,wDAAwD,CAAC;SAC5F,MAAM,CAAC,aAAa,EAAE,qCAAqC,CAAC;SAC5D,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;YACjC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YAC9C,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC5C,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC;YACpD,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;SAC9B,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,CAAC,WAAW,MAAM,CAAC,UAAU,EAAE,EAAE,UAAU,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACjF,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/reload.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from "commander";
+export declare function registerReloadCommand(program: Command): void;

package/dist/cli/commands/reload.js

@@ -0,0 +1,21 @@
+import { reloadRuntime } from "../../modules/manager/index.js";
+import { resolveBuilderConfig } from "../command-helpers.js";
+export function registerReloadCommand(program) {
+    program
+        .command("reload")
+        .description("Reload the running sing-box process.")
+        .option("-c, --config <path>", "path to builder config YAML")
+        .option("--sing-box-bin <path>", "path to sing-box binary")
+        .action(async (options) => {
+        const builderConfig = await resolveBuilderConfig(options);
+        if (!builderConfig) {
+            throw new Error("A builder config is required for reload.");
+        }
+        await reloadRuntime({
+            ...(options.singBoxBin ? { singBoxBinary: options.singBoxBin } : {}),
+            runtime: builderConfig.runtime.reload,
+        });
+        process.stdout.write("Reloaded sing-box runtime.\n");
+    });
+}
+//# sourceMappingURL=reload.js.map

package/dist/cli/commands/reload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reload.js","sourceRoot":"","sources":["../../../src/cli/commands/reload.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,sCAAsC,CAAC;SACnD,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;SAC5D,MAAM,CAAC,uBAAuB,EAAE,yBAAyB,CAAC;SAC1D,MAAM,CAAC,KAAK,EAAE,OAA6B,EAAE,EAAE;QAC9C,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,aAAa,CAAC;YAClB,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM;SACtC,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/run.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from "commander";
+export declare function registerRunCommand(program: Command): void;

package/dist/cli/commands/run.js

@@ -0,0 +1,25 @@
+import { runConfig } from "../../modules/manager/index.js";
+import { resolveBuilderConfig } from "../command-helpers.js";
+export function registerRunCommand(program) {
+    program
+        .command("run")
+        .description("Run sing-box in the foreground with a generated config.")
+        .option("-c, --config <path>", "path to builder config YAML")
+        .option("-i, --input <path>", "path to config JSON to run")
+        .option("--sing-box-bin <path>", "path to sing-box binary")
+        .option("--no-check", "skip sing-box check before run")
+        .action(async (options) => {
+        const builderConfig = await resolveBuilderConfig(options);
+        const configPath = options.input ?? builderConfig?.output.livePath ?? builderConfig?.output.stagingPath;
+        if (!configPath) {
+            throw new Error("No config path resolved. Pass --input or provide a builder config.");
+        }
+        const exitCode = await runConfig({
+            configPath,
+            ...(options.singBoxBin ? { singBoxBinary: options.singBoxBin } : {}),
+            validateFirst: options.check,
+        });
+        process.exitCode = exitCode;
+    });
+}
+//# sourceMappingURL=run.js.map

package/dist/cli/commands/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/cli/commands/run.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,yDAAyD,CAAC;SACtE,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;SAC5D,MAAM,CAAC,oBAAoB,EAAE,4BAA4B,CAAC;SAC1D,MAAM,CAAC,uBAAuB,EAAE,yBAAyB,CAAC;SAC1D,MAAM,CAAC,YAAY,EAAE,gCAAgC,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,OAA0B,EAAE,EAAE;QAC3C,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,UAAU,GACd,OAAO,CAAC,KAAK,IAAI,aAAa,EAAE,MAAM,CAAC,QAAQ,IAAI,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC;QACvF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC;YAC/B,UAAU;YACV,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,aAAa,EAAE,OAAO,CAAC,KAAK;SAC7B,CAAC,CAAC;QAEH,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/schedule.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from "commander";
+export declare function registerScheduleCommand(program: Command): void;

package/dist/cli/commands/schedule.js

@@ -0,0 +1,77 @@
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { installLaunchdSchedule, removeLaunchdSchedule } from "../../modules/schedule/index.js";
+import { findDefaultConfigPath, resolveBuilderConfig } from "../command-helpers.js";
+export function registerScheduleCommand(program) {
+    const schedule = program.command("schedule").description("Manage macOS launchd scheduling.");
+    schedule
+        .command("install")
+        .description("Install a launchd job.")
+        .option("-c, --config <path>", "path to builder config YAML")
+        .option("--label <label>", "LaunchAgent label", "org.singbox-iac.update")
+        .option("--interval-minutes <minutes>", "override update interval in minutes")
+        .option("--launch-agents-dir <path>", "override LaunchAgents directory")
+        .option("--logs-dir <path>", "override log directory")
+        .option("--cwd <path>", "working directory for launchd execution")
+        .option("-f, --force", "replace an existing LaunchAgent file")
+        .option("--no-load", "write the plist without calling launchctl bootstrap")
+        .action(async (options) => {
+        const builderConfig = await resolveBuilderConfig(options);
+        const configPath = options.config
+            ? resolvePath(options.config)
+            : await findDefaultConfigPath();
+        if (!builderConfig || !configPath) {
+            throw new Error("schedule install requires a builder config. Pass --config or run init.");
+        }
+        const intervalMinutes = options.intervalMinutes
+            ? Number.parseInt(options.intervalMinutes, 10)
+            : builderConfig.schedule.intervalMinutes;
+        if (!Number.isInteger(intervalMinutes) || intervalMinutes <= 0) {
+            throw new Error("interval-minutes must be a positive integer.");
+        }
+        const result = await installLaunchdSchedule({
+            configPath,
+            intervalMinutes,
+            cliEntrypoint: resolveCliEntrypoint(import.meta.url),
+            label: options.label,
+            ...(options.launchAgentsDir
+                ? { launchAgentsDir: resolvePath(options.launchAgentsDir) }
+                : {}),
+            ...(options.logsDir ? { logsDir: resolvePath(options.logsDir) } : {}),
+            ...(options.cwd ? { workingDirectory: resolvePath(options.cwd) } : {}),
+            force: options.force === true,
+            load: options.load !== false,
+        });
+        process.stdout.write(`${[
+            `Label: ${result.label}`,
+            `Plist: ${result.plistPath}`,
+            `Stdout: ${result.stdoutPath}`,
+            `Stderr: ${result.stderrPath}`,
+        ].join("\n")}\n`);
+    });
+    schedule
+        .command("remove")
+        .description("Remove a launchd job.")
+        .option("--label <label>", "LaunchAgent label", "org.singbox-iac.update")
+        .option("--launch-agents-dir <path>", "override LaunchAgents directory")
+        .option("--no-unload", "remove the plist without calling launchctl bootout")
+        .action(async (options) => {
+        const plistPath = await removeLaunchdSchedule({
+            label: options.label,
+            ...(options.launchAgentsDir
+                ? { launchAgentsDir: resolvePath(options.launchAgentsDir) }
+                : {}),
+            unload: options.unload !== false,
+        });
+        process.stdout.write(`Removed: ${plistPath}\n`);
+    });
+}
+function resolvePath(filePath) {
+    return filePath.startsWith("/") ? filePath : path.resolve(process.cwd(), filePath);
+}
+function resolveCliEntrypoint(moduleUrl) {
+    const commandModulePath = fileURLToPath(moduleUrl);
+    const extension = path.extname(commandModulePath);
+    return path.resolve(path.dirname(commandModulePath), "..", `index${extension}`);
+}
+//# sourceMappingURL=schedule.js.map

package/dist/cli/commands/schedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule.js","sourceRoot":"","sources":["../../../src/cli/commands/schedule.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAEpF,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,kCAAkC,CAAC,CAAC;IAE7F,QAAQ;SACL,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;SAC5D,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,wBAAwB,CAAC;SACxE,MAAM,CAAC,8BAA8B,EAAE,qCAAqC,CAAC;SAC7E,MAAM,CAAC,4BAA4B,EAAE,iCAAiC,CAAC;SACvE,MAAM,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;SACrD,MAAM,CAAC,cAAc,EAAE,yCAAyC,CAAC;SACjE,MAAM,CAAC,aAAa,EAAE,sCAAsC,CAAC;SAC7D,MAAM,CAAC,WAAW,EAAE,qDAAqD,CAAC;SAC1E,MAAM,CAAC,KAAK,EAAE,OAAsC,EAAE,EAAE;QACvD,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM;YAC/B,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;YAC7B,CAAC,CAAC,MAAM,qBAAqB,EAAE,CAAC;QAClC,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe;YAC7C,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;YAC9C,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;YAC1C,UAAU;YACV,eAAe;YACf,aAAa,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACpD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,CAAC,OAAO,CAAC,eAAe;gBACzB,CAAC,CAAC,EAAE,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;YAC7B,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,KAAK;SAC7B,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG;YACD,UAAU,MAAM,CAAC,KAAK,EAAE;YACxB,UAAU,MAAM,CAAC,SAAS,EAAE;YAC5B,WAAW,MAAM,CAAC,UAAU,EAAE;YAC9B,WAAW,MAAM,CAAC,UAAU,EAAE;SAC/B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uBAAuB,CAAC;SACpC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,wBAAwB,CAAC;SACxE,MAAM,CAAC,4BAA4B,EAAE,iCAAiC,CAAC;SACvE,MAAM,CAAC,aAAa,EAAE,oDAAoD,CAAC;SAC3E,MAAM,CAAC,KAAK,EAAE,OAAqC,EAAE,EAAE;QACtD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;YAC5C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,CAAC,OAAO,CAAC,eAAe;gBACzB,CAAC,CAAC,EAAE,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,KAAK;SACjC,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,SAAS,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACP,CAAC;AAsBD,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,MAAM,iBAAiB,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,QAAQ,SAAS,EAAE,CAAC,CAAC;AAClF,CAAC"}

package/dist/cli/commands/templates.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from "commander";
+export declare function registerTemplatesCommand(program: Command): void;

package/dist/cli/commands/templates.js

@@ -0,0 +1,34 @@
+import { getRuleTemplate, listRuleTemplates } from "../../modules/rule-templates/index.js";
+export function registerTemplatesCommand(program) {
+    const templates = program.command("templates").description("Browse built-in rule templates.");
+    templates
+        .command("list")
+        .description("List available templates.")
+        .action(() => {
+        process.stdout.write(`${listRuleTemplates()
+            .map((template) => `${template.id}: ${template.summary}`)
+            .join("\n")}\n`);
+    });
+    templates
+        .command("show")
+        .description("Show one template in YAML-like form.")
+        .argument("<id>", "template identifier")
+        .action((id) => {
+        const template = getRuleTemplate(id);
+        if (!template) {
+            throw new Error(`Unknown template "${id}".`);
+        }
+        const lines = [
+            `id: ${template.id}`,
+            `title: ${template.title}`,
+            `summary: ${template.summary}`,
+            `tags: ${template.tags.join(", ")}`,
+            "beforeBuiltins:",
+            ...template.beforeBuiltins.map((rule) => `  - ${JSON.stringify(rule)}`),
+            "afterBuiltins:",
+            ...template.afterBuiltins.map((rule) => `  - ${JSON.stringify(rule)}`),
+        ];
+        process.stdout.write(`${lines.join("\n")}\n`);
+    });
+}
+//# sourceMappingURL=templates.js.map

package/dist/cli/commands/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../../src/cli/commands/templates.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAE3F,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,iCAAiC,CAAC,CAAC;IAE9F,SAAS;SACN,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,GAAG,EAAE;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,iBAAiB,EAAE;aACnB,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;aACxD,IAAI,CAAC,IAAI,CAAC,IAAI,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,SAAS;SACN,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sCAAsC,CAAC;SACnD,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;SACvC,MAAM,CAAC,CAAC,EAAU,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,KAAK,GAAG;YACZ,OAAO,QAAQ,CAAC,EAAE,EAAE;YACpB,UAAU,QAAQ,CAAC,KAAK,EAAE;YAC1B,YAAY,QAAQ,CAAC,OAAO,EAAE;YAC9B,SAAS,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACnC,iBAAiB;YACjB,GAAG,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,gBAAgB;YAChB,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;SACvE,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/update.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from "commander";
+export declare function registerUpdateCommand(program: Command): void;

package/dist/cli/commands/update.js

@@ -0,0 +1,52 @@
+import { runUpdate } from "../../modules/update/index.js";
+import { resolveBuilderConfig } from "../command-helpers.js";
+export function registerUpdateCommand(program) {
+    program
+        .command("update")
+        .description("Run build, verify, publish, and optional reload as one closed loop.")
+        .option("-c, --config <path>", "path to builder config YAML")
+        .option("--subscription-url <url>", "override subscription URL when rebuilding")
+        .option("--subscription-file <path>", "use a local subscription file instead of fetching")
+        .option("-o, --output <path>", "override staging output path")
+        .option("--live-path <path>", "override live config path")
+        .option("--backup-path <path>", "override backup config path")
+        .option("--sing-box-bin <path>", "path to sing-box binary")
+        .option("--chrome-bin <path>", "path to Chrome binary")
+        .option("--skip-verify", "skip the runtime verification harness before publish")
+        .option("--reload", "reload sing-box after publish")
+        .action(async (options) => {
+        const builderConfig = await resolveBuilderConfig(options);
+        if (!builderConfig) {
+            throw new Error("Update requires a builder config. Pass --config or create builder.config.local.yaml.");
+        }
+        const result = await runUpdate({
+            config: builderConfig,
+            ...(options.output ? { outputPath: options.output } : {}),
+            ...(options.livePath ? { livePath: options.livePath } : {}),
+            ...(options.backupPath ? { backupPath: options.backupPath } : {}),
+            ...(options.subscriptionFile ? { subscriptionFile: options.subscriptionFile } : {}),
+            ...(options.subscriptionUrl ? { subscriptionUrl: options.subscriptionUrl } : {}),
+            ...(options.singBoxBin ? { singBoxBinary: options.singBoxBin } : {}),
+            ...(options.chromeBin ? { chromeBinary: options.chromeBin } : {}),
+            verify: !options.skipVerify,
+            ...(options.reload ? { reload: true } : {}),
+        });
+        const verificationSummary = result.verification
+            ? `Verified scenarios: ${result.verification.scenarios.filter((scenario) => scenario.passed).length}/${result.verification.scenarios.length}`
+            : "Verified scenarios: skipped";
+        process.stdout.write(`${[
+            `Generated ${result.build.nodeCount} nodes.`,
+            `Staging: ${result.build.outputPath}`,
+            verificationSummary,
+            `Live: ${result.livePath}`,
+            result.backupPath ? `Backup: ${result.backupPath}` : undefined,
+            `Warnings: ${result.build.warnings.length}`,
+        ]
+            .filter((line) => typeof line === "string")
+            .join("\n")}\n`);
+        if (result.build.warnings.length > 0) {
+            process.stdout.write(`${result.build.warnings.map((warning) => `- ${warning}`).join("\n")}\n`);
+        }
+    });
+}
+//# sourceMappingURL=update.js.map

package/dist/cli/commands/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../src/cli/commands/update.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,qEAAqE,CAAC;SAClF,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;SAC5D,MAAM,CAAC,0BAA0B,EAAE,2CAA2C,CAAC;SAC/E,MAAM,CAAC,4BAA4B,EAAE,mDAAmD,CAAC;SACzF,MAAM,CAAC,qBAAqB,EAAE,8BAA8B,CAAC;SAC7D,MAAM,CAAC,oBAAoB,EAAE,2BAA2B,CAAC;SACzD,MAAM,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;SAC7D,MAAM,CAAC,uBAAuB,EAAE,yBAAyB,CAAC;SAC1D,MAAM,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;SACtD,MAAM,CAAC,eAAe,EAAE,sDAAsD,CAAC;SAC/E,MAAM,CAAC,UAAU,EAAE,+BAA+B,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,OAA6B,EAAE,EAAE;QAC9C,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,MAAM,EAAE,aAAa;YACrB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU;YAC3B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;QAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC,YAAY;YAC7C,CAAC,CAAC,uBACE,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MACtE,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE;YAC5C,CAAC,CAAC,6BAA6B,CAAC;QAElC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG;YACD,aAAa,MAAM,CAAC,KAAK,CAAC,SAAS,SAAS;YAC5C,YAAY,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE;YACrC,mBAAmB;YACnB,SAAS,MAAM,CAAC,QAAQ,EAAE;YAC1B,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS;YAC9D,aAAa,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE;SAC5C;aACE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;aAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,CAClB,CAAC;QAEF,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACzE,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/verify.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from "commander";
+export declare function registerVerifyCommand(program: Command): void;