@singbox-iac/cli 0.1.15 → 0.1.17

package/dist/modules/rule-set-catalog/index.js

@@ -0,0 +1,135 @@
+import { constants } from "node:fs";
+import { access, mkdir, readFile, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import path from "node:path";
+const defaultCatalogTtlMs = 24 * 60 * 60 * 1000;
+export function defaultOfficialRuleSetCatalogCachePath() {
+    return path.join(homedir(), ".config", "singbox-iac", "cache", "official-rule-set-catalog.json");
+}
+export async function loadOfficialRuleSetCatalog(input = {}) {
+    const cachePath = input.cachePath ?? defaultOfficialRuleSetCatalogCachePath();
+    const ttlMs = input.ttlMs ?? defaultCatalogTtlMs;
+    const now = input.now ?? (() => new Date());
+    const cached = await readCatalogCache(cachePath);
+    if (input.refresh !== true && cached) {
+        const ageMs = Math.max(0, now().getTime() - Date.parse(cached.refreshedAt));
+        if (Number.isFinite(ageMs) && ageMs <= ttlMs) {
+            return {
+                ...cached,
+                cachePath,
+                source: "cache",
+            };
+        }
+    }
+    try {
+        const refreshed = await fetchOfficialRuleSetCatalog({
+            ...(input.fetchImpl ? { fetchImpl: input.fetchImpl } : {}),
+            refreshedAt: now().toISOString(),
+        });
+        await writeCatalogCache(cachePath, refreshed);
+        return {
+            ...refreshed,
+            cachePath,
+            source: "remote",
+        };
+    }
+    catch {
+        if (!cached) {
+            throw new Error("Unable to refresh the official rule-set catalog and no cached catalog is available.");
+        }
+        return {
+            ...cached,
+            cachePath,
+            source: "stale-cache",
+        };
+    }
+}
+export async function fetchOfficialRuleSetCatalog(input) {
+    const fetchImpl = input?.fetchImpl ?? fetch;
+    const [geositeRef, geoipRef] = await Promise.all([
+        fetchRuleSetBranchHead(fetchImpl, "SagerNet", "sing-geosite"),
+        fetchRuleSetBranchHead(fetchImpl, "SagerNet", "sing-geoip"),
+    ]);
+    const [geositeTags, geoipTags] = await Promise.all([
+        fetchRuleSetTags(fetchImpl, "SagerNet", "sing-geosite", geositeRef),
+        fetchRuleSetTags(fetchImpl, "SagerNet", "sing-geoip", geoipRef),
+    ]);
+    return {
+        refreshedAt: input?.refreshedAt ?? new Date().toISOString(),
+        geositeRef,
+        geoipRef,
+        geositeTags,
+        geoipTags,
+    };
+}
+export function isOfficialRuleSetTag(catalog, tag) {
+    return catalog.geositeTags.includes(tag) || catalog.geoipTags.includes(tag);
+}
+async function fetchRuleSetBranchHead(fetchImpl, owner, repo) {
+    const response = await fetchGithubJson(fetchImpl, `https://api.github.com/repos/${owner}/${repo}/git/ref/heads/rule-set`);
+    const sha = response.object?.sha;
+    if (!sha) {
+        throw new Error(`Missing rule-set branch head for ${owner}/${repo}.`);
+    }
+    return sha;
+}
+async function fetchRuleSetTags(fetchImpl, owner, repo, treeSha) {
+    const response = await fetchGithubJson(fetchImpl, `https://api.github.com/repos/${owner}/${repo}/git/trees/${treeSha}?recursive=1`);
+    const tags = new Set();
+    for (const entry of response.tree ?? []) {
+        const nextPath = entry.path;
+        if (!nextPath || !nextPath.endsWith(".srs")) {
+            continue;
+        }
+        tags.add(nextPath.slice(0, -4));
+    }
+    return [...tags].sort();
+}
+async function fetchGithubJson(fetchImpl, url) {
+    const response = await fetchImpl(url, {
+        headers: {
+            accept: "application/vnd.github+json",
+            "user-agent": "singbox-iac/0.1.16",
+        },
+    });
+    if (!response.ok) {
+        throw new Error(`GitHub API request failed for ${url}: HTTP ${response.status}`);
+    }
+    return (await response.json());
+}
+async function readCatalogCache(filePath) {
+    if (!(await pathExists(filePath))) {
+        return undefined;
+    }
+    const raw = await readFile(filePath, "utf8");
+    const parsed = JSON.parse(raw);
+    if (!parsed ||
+        typeof parsed.refreshedAt !== "string" ||
+        typeof parsed.geositeRef !== "string" ||
+        typeof parsed.geoipRef !== "string" ||
+        !Array.isArray(parsed.geositeTags) ||
+        !Array.isArray(parsed.geoipTags)) {
+        return undefined;
+    }
+    return {
+        refreshedAt: parsed.refreshedAt,
+        geositeRef: parsed.geositeRef,
+        geoipRef: parsed.geoipRef,
+        geositeTags: parsed.geositeTags.filter((value) => typeof value === "string"),
+        geoipTags: parsed.geoipTags.filter((value) => typeof value === "string"),
+    };
+}
+async function writeCatalogCache(filePath, catalog) {
+    await mkdir(path.dirname(filePath), { recursive: true });
+    await writeFile(filePath, JSON.stringify(catalog, null, 2).concat("\n"), "utf8");
+}
+async function pathExists(filePath) {
+    try {
+        await access(filePath, constants.F_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/modules/rule-set-catalog/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/rule-set-catalog/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAmC7B,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD,MAAM,UAAU,sCAAsC;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,gCAAgC,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAyC,EAAE;IAE3C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,sCAAsC,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,mBAAmB,CAAC;IACjD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAEjD,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;YAC7C,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS;gBACT,MAAM,EAAE,OAAO;aAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC;YAClD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO;YACL,GAAG,SAAS;YACZ,SAAS;YACT,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,GAAG,MAAM;YACT,SAAS;YACT,MAAM,EAAE,aAAa;SACtB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAGjD;IACC,MAAM,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,KAAK,CAAC;IAC5C,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC/C,sBAAsB,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,CAAC;QAC7D,sBAAsB,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;KAC5D,CAAC,CAAC;IACH,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC;QACnE,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC;KAChE,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC3D,UAAU;QACV,QAAQ;QACR,WAAW;QACX,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAA+B,EAAE,GAAW;IAC/E,OAAO,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,SAAuB,EACvB,KAAa,EACb,IAAY;IAEZ,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,SAAS,EACT,gCAAgC,KAAK,IAAI,IAAI,yBAAyB,CACvE,CAAC;IACF,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,SAAuB,EACvB,KAAa,EACb,IAAY,EACZ,OAAe;IAEf,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,SAAS,EACT,gCAAgC,KAAK,IAAI,IAAI,cAAc,OAAO,cAAc,CACjF,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,eAAe,CAAI,SAAuB,EAAE,GAAW;IACpE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,OAAO,EAAE;YACP,MAAM,EAAE,6BAA6B;YACrC,YAAY,EAAE,oBAAoB;SACnC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,UAAU,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoC,CAAC;IAClE,IACE,CAAC,MAAM;QACP,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC;QAClC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAC7F,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAA+B;IAChF,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/modules/runtime-watchdog/index.d.ts

@@ -0,0 +1,73 @@
+import type { BuilderConfig } from "../../config/schema.js";
+import { type RuntimeAgentRecoverInput, type RuntimeAgentRecoverResult } from "../desktop-runtime/index.js";
+import { type SystemProxyRuntimeSnapshot } from "../system-proxy/index.js";
+export interface RuntimeWatchdogAgentInstallInput {
+    readonly configPath: string;
+    readonly cliEntrypoint: string;
+    readonly intervalSeconds: number;
+    readonly label?: string;
+    readonly launchAgentsDir?: string;
+    readonly logsDir?: string;
+    readonly workingDirectory?: string;
+    readonly force?: boolean;
+    readonly load?: boolean;
+}
+export interface RuntimeWatchdogAgentInstallResult {
+    readonly label: string;
+    readonly plistPath: string;
+    readonly stdoutPath: string;
+    readonly stderrPath: string;
+}
+export interface RuntimeWatchdogAgentRemoveInput {
+    readonly label?: string;
+    readonly launchAgentsDir?: string;
+    readonly unload?: boolean;
+}
+export interface RuntimeWatchdogState {
+    readonly version: 1;
+    readonly label: string;
+    readonly lastCheckedAt: string;
+    readonly lastResult: "healthy" | "reasserted" | "restarted" | "process-missing" | "listener-missing" | "proxy-unknown" | "reassert-failed" | "restart-failed" | "restart-skipped-cooldown" | "disabled" | "unsupported-profile";
+    readonly lastMessage: string;
+    readonly lastTrigger?: RuntimeWatchdogTrigger;
+    readonly lastRecoveryAction?: RuntimeWatchdogRecoveryAction;
+    readonly lastReassertAt?: string;
+    readonly lastRestartAt?: string;
+    readonly lastError?: string;
+}
+export interface RunRuntimeWatchdogTickInput {
+    readonly config: BuilderConfig;
+    readonly configPath: string;
+    readonly snapshotCollector?: (config: BuilderConfig) => Promise<SystemProxyRuntimeSnapshot>;
+    readonly commandRunner?: RuntimeCommandRunner;
+    readonly runtimeAgentRecoverer?: RuntimeAgentRecoverer;
+    readonly runtimeLaunchAgentsDir?: string;
+    readonly statePath?: string;
+}
+export interface RunRuntimeWatchdogTickResult {
+    readonly statePath: string;
+    readonly state: RuntimeWatchdogState;
+}
+export interface RuntimeCommandRunnerResult {
+    readonly stdout: string;
+    readonly stderr: string;
+}
+export type RuntimeCommandRunner = (command: string, args: readonly string[]) => Promise<RuntimeCommandRunnerResult>;
+export type RuntimeWatchdogTrigger = "process-missing" | "listener-missing" | "proxy-drift";
+export type RuntimeWatchdogRecoveryAction = "reassert-proxy" | "restart-runtime";
+export type RuntimeAgentRecoverer = (input: RuntimeAgentRecoverInput) => Promise<RuntimeAgentRecoverResult>;
+export declare const defaultRuntimeWatchdogLaunchAgentLabel = "org.singbox-iac.runtime.watchdog";
+export declare const defaultRuntimeWatchdogRestartCooldownMs: number;
+export declare function installRuntimeWatchdogAgent(input: RuntimeWatchdogAgentInstallInput): Promise<RuntimeWatchdogAgentInstallResult>;
+export declare function removeRuntimeWatchdogAgent(input: RuntimeWatchdogAgentRemoveInput): Promise<string>;
+export declare function renderRuntimeWatchdogLaunchAgentPlist(input: {
+    readonly label: string;
+    readonly intervalSeconds: number;
+    readonly workingDirectory: string;
+    readonly stdoutPath: string;
+    readonly stderrPath: string;
+    readonly programArguments: readonly string[];
+}): string;
+export declare function runRuntimeWatchdogTick(input: RunRuntimeWatchdogTickInput): Promise<RunRuntimeWatchdogTickResult>;
+export declare function readRuntimeWatchdogState(statePath: string): Promise<RuntimeWatchdogState | undefined>;
+export declare function resolveRuntimeWatchdogStatePath(label?: string): string;