@ykurilov/remontnik-browser 0.0.0-stage → 0.1.0

package/dist/attempts.d.ts

@@ -0,0 +1,11 @@
+export interface AttemptLimiter {
+    blocked(client: string): boolean;
+    fail(client: string): void;
+    /** Сколько адресов сейчас помним — для проверки, что память не растёт. */
+    size(): number;
+}
+export declare function createAttemptLimiter(options: {
+    limit: number;
+    windowMs: number;
+    now?: () => number;
+}): AttemptLimiter;

package/dist/attempts.js

@@ -0,0 +1,26 @@
+// Ограничение подбора ключа: неудачные попытки считаются отдельно по адресу клиента,
+// поэтому чужие ошибки из той же сети не закрывают вход владельцу или врачу.
+export function createAttemptLimiter(options) {
+    const { limit, windowMs } = options;
+    const now = options.now ?? Date.now;
+    const failures = new Map();
+    const recent = (client) => {
+        const since = now() - windowMs;
+        const times = (failures.get(client) ?? []).filter((time) => time > since);
+        if (times.length === 0)
+            failures.delete(client);
+        else
+            failures.set(client, times);
+        return times;
+    };
+    return {
+        blocked: (client) => recent(client).length >= limit,
+        fail(client) {
+            for (const known of [...failures.keys()])
+                recent(known);
+            failures.set(client, [...recent(client), now()]);
+        },
+        size: () => failures.size,
+    };
+}
+//# sourceMappingURL=attempts.js.map

package/dist/attempts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempts.js","sourceRoot":"","sources":["../src/attempts.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,6EAA6E;AAS7E,MAAM,UAAU,oBAAoB,CAAC,OAAgE;IACnG,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAA;IAE5C,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAA;QAC9B,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAA;QACzE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;;YAC1C,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAChC,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IAED,OAAO;QACL,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,KAAK;QACnD,IAAI,CAAC,MAAM;YACT,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YACvD,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QAClD,CAAC;QACD,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI;KAC1B,CAAA;AACH,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,8 @@
+export interface CliIo {
+    env: Record<string, string | undefined>;
+    stdin: AsyncIterable<Uint8Array | string>;
+    stdout: (text: string) => void;
+    stderr: (text: string) => void;
+    fetch?: typeof fetch;
+}
+export declare function runBrowserCli(argv: readonly string[], io: CliIo): Promise<number>;

package/dist/cli/index.js

@@ -0,0 +1,210 @@
+// Консольная `remontnik-browser`: те же команды страницы, что у HTTP-службы, плюс управление входами,
+// которого по HTTP нет. Пароль — только из стандартного ввода (`--password-stdin`).
+import { readFileSync } from 'node:fs';
+import { BROWSER_COMMANDS } from '../actions/index.js';
+import { browserPolicyProblems } from '../policy/index.js';
+import { loginVaultPath, openLoginVault, parseVaultKey } from '../vault/index.js';
+const USAGE = `remontnik-browser <команда> -p <профиль> [параметры]
+
+Служба:
+  serve                                   запустить службу (настройки из окружения)
+  check-policy [путь]                     проверить настройку браузера (по умолчанию REMONTNIK_BROWSER_POLICY)
+
+Страница (через службу, REMONTNIK_BROWSER_URL и REMONTNIK_BROWSER_TOKEN):
+  open | read | back | shot | status -p <профиль>
+  url -p <профиль> <адрес>
+  click -p <профиль> --ref <e12> --danger <none|submit>
+  type -p <профиль> --ref <e12> --text <текст> [--submit] --danger <none|submit>
+  key -p <профиль> <клавиша>
+  scroll -p <профиль> --direction <up|down|left|right> [--px <число>]
+  fill-password -p <профиль> --entry <номер> --ref <e12>
+
+Входы (на сервере браузера, REMONTNIK_BROWSER_DATA_DIR и REMONTNIK_BROWSER_VAULT_KEY):
+  logins list [--site <origin>]
+  logins add --site <origin> --login <логин> --profile <профиль> --password-stdin
+  logins remove <номер>
+`;
+const BOOLEAN_FLAGS = new Set(['submit', 'password-stdin', 'help']);
+class UsageError extends Error {
+}
+function parseArguments(argv) {
+    const positional = [];
+    const flags = new Map();
+    for (let index = 0; index < argv.length; index++) {
+        const argument = argv[index];
+        if (argument === '-p' || argument.startsWith('--')) {
+            const name = argument === '-p' ? 'profile' : argument.slice(2);
+            if (name === 'password')
+                throw new UsageError('пароль в аргументах не принимается: передайте его в стандартный ввод с --password-stdin');
+            if (BOOLEAN_FLAGS.has(name)) {
+                flags.set(name, true);
+                continue;
+            }
+            const value = argv[index + 1];
+            if (value === undefined)
+                throw new UsageError(`${argument}: нужно значение`);
+            flags.set(name, value);
+            index++;
+        }
+        else {
+            positional.push(argument);
+        }
+    }
+    return { positional, flags };
+}
+function vaultFrom(env) {
+    const dataDir = env.REMONTNIK_BROWSER_DATA_DIR;
+    if (!dataDir)
+        throw new UsageError('REMONTNIK_BROWSER_DATA_DIR не задан');
+    return openLoginVault({ file: loginVaultPath(dataDir), key: parseVaultKey(env.REMONTNIK_BROWSER_VAULT_KEY) });
+}
+async function logins(action, rest, flags, io) {
+    const vault = vaultFrom(io.env);
+    const text = (name) => {
+        const value = flags.get(name);
+        if (typeof value !== 'string' || value === '')
+            throw new UsageError(`нужен --${name}`);
+        return value;
+    };
+    switch (action) {
+        case 'list': {
+            const site = flags.get('site');
+            io.stdout(`${JSON.stringify({ logins: vault.list(typeof site === 'string' ? { site } : {}) })}\n`);
+            return 0;
+        }
+        case 'add': {
+            if (flags.get('password-stdin') !== true)
+                throw new UsageError('пароль читается только из стандартного ввода: добавьте --password-stdin');
+            const entry = await vault.add({ site: text('site'), login: text('login'), profile: text('profile') }, io.stdin);
+            io.stdout(`${JSON.stringify({ ok: true, entry })}\n`);
+            return 0;
+        }
+        case 'remove': {
+            const id = Number(rest[0]);
+            if (!Number.isInteger(id) || id <= 0)
+                throw new UsageError('logins remove <номер>');
+            if (!vault.remove(id)) {
+                io.stderr(`вход ${id} не найден\n`);
+                return 1;
+            }
+            io.stdout(`${JSON.stringify({ ok: true, removed: id })}\n`);
+            return 0;
+        }
+        default:
+            throw new UsageError('logins list | add | remove');
+    }
+}
+/** Проверка файла настройки без запуска службы: её зовёт и `remontnik-doctor check-config`. */
+function checkPolicy(path, io) {
+    if (!path)
+        throw new UsageError('нужен путь к настройке или REMONTNIK_BROWSER_POLICY');
+    let text;
+    try {
+        text = readFileSync(path, 'utf8');
+    }
+    catch (error) {
+        io.stdout(`${JSON.stringify({ ok: false, problems: [`файл настройки не читается: ${error.code ?? error.message}`] })}\n`);
+        return 1;
+    }
+    let problems;
+    try {
+        problems = browserPolicyProblems(JSON.parse(text));
+    }
+    catch (error) {
+        problems = [`файл не читается как JSON: ${error.message}`];
+    }
+    io.stdout(`${JSON.stringify({ ok: problems.length === 0, problems })}\n`);
+    return problems.length === 0 ? 0 : 1;
+}
+function commandInput(command, rest, flags) {
+    const profile = flags.get('profile');
+    if (typeof profile !== 'string' || profile === '')
+        throw new UsageError('профиль обязателен: -p <профиль>');
+    const input = { profile };
+    const copy = (flag, field = flag) => {
+        const value = flags.get(flag);
+        if (typeof value === 'string')
+            input[field] = value;
+    };
+    switch (command) {
+        case 'url':
+            input.url = rest[0] ?? flags.get('url');
+            break;
+        case 'key':
+            input.key = rest[0] ?? flags.get('key');
+            break;
+        case 'click':
+            copy('ref');
+            copy('danger');
+            break;
+        case 'type':
+            copy('ref');
+            copy('text');
+            if (flags.get('submit') === true)
+                input.submit = true;
+            copy('danger');
+            break;
+        case 'scroll':
+            copy('direction');
+            if (typeof flags.get('px') === 'string')
+                input.px = Number(flags.get('px'));
+            break;
+        case 'fill-password':
+            input.entryId = Number(flags.get('entry'));
+            copy('ref');
+            break;
+    }
+    return input;
+}
+async function callService(command, input, io) {
+    const token = io.env.REMONTNIK_BROWSER_TOKEN;
+    if (!token)
+        throw new UsageError('REMONTNIK_BROWSER_TOKEN не задан');
+    const base = (io.env.REMONTNIK_BROWSER_URL ?? 'http://127.0.0.1:7700').replace(/\/$/, '');
+    const response = await (io.fetch ?? fetch)(`${base}/v1/${command}`, {
+        method: 'POST',
+        headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },
+        body: JSON.stringify(input),
+    });
+    const text = await response.text();
+    io.stdout(`${text}\n`);
+    try {
+        return JSON.parse(text).ok === true ? 0 : 1;
+    }
+    catch {
+        return 1;
+    }
+}
+export async function runBrowserCli(argv, io) {
+    try {
+        const { positional, flags } = parseArguments(argv);
+        const [command, ...rest] = positional;
+        if (!command || flags.get('help') === true) {
+            io.stdout(USAGE);
+            return command ? 0 : 2;
+        }
+        if (command === 'serve') {
+            const { startBrowserServiceFromEnv } = await import('../service/start.js');
+            const service = await startBrowserServiceFromEnv(io.env);
+            io.stderr(`remontnik-browser: служба слушает ${service.url}${service.liveUrl ? `, живой экран ${service.liveUrl}` : ''}\n`);
+            for (const signal of ['SIGINT', 'SIGTERM'])
+                process.once(signal, () => void service.close().then(() => process.exit(0)));
+            return await new Promise(() => { });
+        }
+        if (command === 'check-policy')
+            return checkPolicy(rest[0] ?? io.env.REMONTNIK_BROWSER_POLICY, io);
+        if (command === 'logins') {
+            // Список входов есть и в службе; добавление и удаление — только здесь.
+            return await logins(rest[0], rest.slice(1), flags, io);
+        }
+        if (!BROWSER_COMMANDS.includes(command))
+            throw new UsageError(`нет команды ${command}`);
+        return await callService(command, commandInput(command, rest, flags), io);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        io.stderr(`remontnik-browser: ${message}\n${error instanceof UsageError ? `\n${USAGE}` : ''}`);
+        return error instanceof UsageError ? 2 : 1;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,oFAAoF;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAUjF,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;CAmBb,CAAA;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAA;AAEnE,MAAM,UAAW,SAAQ,KAAK;CAAG;AAEjC,SAAS,cAAc,CAAC,IAAuB;IAC7C,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAA;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAE,CAAA;QAC7B,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC9D,IAAI,IAAI,KAAK,UAAU;gBAAE,MAAM,IAAI,UAAU,CAAC,yFAAyF,CAAC,CAAA;YACxI,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;gBACrB,SAAQ;YACV,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YAC7B,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,UAAU,CAAC,GAAG,QAAQ,kBAAkB,CAAC,CAAA;YAC5E,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YACtB,KAAK,EAAE,CAAA;QACT,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;AAC9B,CAAC;AAED,SAAS,SAAS,CAAC,GAAiB;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,0BAA0B,CAAA;IAC9C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,qCAAqC,CAAC,CAAA;IACzE,OAAO,cAAc,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAA;AAC/G,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,MAA0B,EAAE,IAAc,EAAE,KAAiC,EAAE,EAAS;IAC5G,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,CAAA;QACtF,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IACD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC9B,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;YAClG,OAAO,CAAC,CAAA;QACV,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,IAAI;gBAAE,MAAM,IAAI,UAAU,CAAC,yEAAyE,CAAC,CAAA;YACzI,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;YAC/G,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,CAAA;YACrD,OAAO,CAAC,CAAA;QACV,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,CAAC,CAAA;YACnF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtB,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;gBACnC,OAAO,CAAC,CAAA;YACV,CAAC;YACD,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;YAC3D,OAAO,CAAC,CAAA;QACV,CAAC;QACD;YACE,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,CAAA;IACtD,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAS,WAAW,CAAC,IAAwB,EAAE,EAAS;IACtD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAA;IACtF,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,+BAAgC,KAA+B,CAAC,IAAI,IAAK,KAAe,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;QAC/J,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,GAAG,CAAC,8BAA+B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IACvE,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAA;IACzE,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,IAAc,EAAE,KAAiC;IACtF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACpC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAA;IAC3G,MAAM,KAAK,GAA4B,EAAE,OAAO,EAAE,CAAA;IAClD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;IACrD,CAAC,CAAA;IACD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,KAAK;YACR,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACvC,MAAK;QACP,KAAK,KAAK;YACR,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACvC,MAAK;QACP,KAAK,OAAO;YACV,IAAI,CAAC,KAAK,CAAC,CAAA;YACX,IAAI,CAAC,QAAQ,CAAC,CAAA;YACd,MAAK;QACP,KAAK,MAAM;YACT,IAAI,CAAC,KAAK,CAAC,CAAA;YACX,IAAI,CAAC,MAAM,CAAC,CAAA;YACZ,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI;gBAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAA;YACrD,IAAI,CAAC,QAAQ,CAAC,CAAA;YACd,MAAK;QACP,KAAK,QAAQ;YACX,IAAI,CAAC,WAAW,CAAC,CAAA;YACjB,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ;gBAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;YAC3E,MAAK;QACP,KAAK,eAAe;YAClB,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;YAC1C,IAAI,CAAC,KAAK,CAAC,CAAA;YACX,MAAK;IACT,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,KAA8B,EAAE,EAAS;IACnF,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAA;IAC5C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAA;IACpE,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qBAAqB,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACzF,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,GAAG,IAAI,OAAO,OAAO,EAAE,EAAE;QAClE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;KAC5B,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;IACtB,IAAI,CAAC;QACH,OAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB,EAAE,EAAS;IACpE,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,CAAA;QACrC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3C,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAChB,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC;QACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAA;YAC1E,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,EAAE,CAAC,GAAwB,CAAC,CAAA;YAC7E,EAAE,CAAC,MAAM,CAAC,qCAAqC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;YAC3H,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACjI,OAAO,MAAM,IAAI,OAAO,CAAS,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC5C,CAAC;QACD,IAAI,OAAO,KAAK,cAAc;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAA;QAClG,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,uEAAuE;YACvE,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;QACxD,CAAC;QACD,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,eAAe,OAAO,EAAE,CAAC,CAAA;QAC9G,OAAO,MAAM,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,EAAE,CAAC,MAAM,CAAC,sBAAsB,OAAO,KAAK,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9F,OAAO,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5C,CAAC;AACH,CAAC"}

package/dist/cli/main.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli/main.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import { runBrowserCli } from './index.js';
+const code = await runBrowserCli(process.argv.slice(2), {
+    env: process.env,
+    stdin: process.stdin,
+    stdout: (text) => process.stdout.write(text),
+    stderr: (text) => process.stderr.write(text),
+});
+process.exitCode = code;
+//# sourceMappingURL=main.js.map

package/dist/cli/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE1C,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;IACtD,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,KAAK,EAAE,OAAO,CAAC,KAAK;IACpB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;CAC7C,CAAC,CAAA;AACF,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAA"}

package/dist/egress/index.d.ts

@@ -0,0 +1,43 @@
+export interface EgressTarget {
+    /** Имя хоста без квадратных скобок IPv6, в нижнем регистре. */
+    host: string;
+    port: number;
+    /** Для запроса `http://` — его origin; у туннеля схемы не видно. */
+    origin?: string;
+}
+export interface UpstreamProxy {
+    server: string;
+    username?: string;
+    password?: string;
+}
+export interface EgressProxy {
+    /** Адрес для `--proxy-server` Chromium. */
+    readonly url: string;
+    /** Пароль на прокси, свой на каждый запуск: без него — `407`. */
+    readonly username: string;
+    readonly password: string;
+    /** Рвёт открытые туннели и запросы, которые сейчас уже не разрешены (замок только что закрылся). */
+    dropRefused(): void;
+    close(): Promise<void>;
+}
+export type RefusalReason = 'locked' | 'internal';
+export interface EgressOptions {
+    /** Можно ли соединиться с адресом сейчас: решение замка. */
+    allows(target: EgressTarget): boolean;
+    /** Разрешённый сайт: ему можно и на внутренний адрес. */
+    exempt(target: EgressTarget): boolean;
+    onRefused(target: EgressTarget, reason: RefusalReason): void;
+    upstream?: UpstreamProxy;
+    /** Внутренние `адрес:порт` (IPv6 — в скобках), куда можно и вне разрешённых сайтов: для тестов. */
+    reachableInternal?: readonly string[];
+    /** Разрешение имён; по умолчанию — системное. */
+    lookup?: (host: string) => Promise<string[]>;
+    /** Срок на разрешение имени, подключение и рукопожатие с прокси профиля. */
+    connectTimeoutMs?: number;
+}
+/** Адрес из разрешённых origin: для запроса http:// — точный origin, для туннеля — тот же хост и порт. */
+export declare function isAllowedTarget(target: EgressTarget, allowedOrigins: readonly string[]): boolean;
+export declare function describeTarget(target: EgressTarget): string;
+/** Петля, частные сети, link-local, CGNAT, служебные и групповые адреса — и они же внутри IPv6. */
+export declare function isInternalAddress(ip: string): boolean;
+export declare function startEgressProxy(options: EgressOptions): Promise<EgressProxy>;