green-tunnel 2.0.1 → 3.0.2

package/dist/core/types.d.ts

@@ -0,0 +1,138 @@
+/**
+ * Public shape of everything the engine can be configured with, plus the
+ * events and stats it reports back. Kept dependency-free so the CLI, the
+ * Electron main process and the renderer can all share these types.
+ */
+/** Recursive `Partial` used for user-supplied overrides. Arrays stay atomic. */
+export type DeepPartial<T> = {
+    [K in keyof T]?: T[K] extends readonly (infer _U)[] ? T[K] : T[K] extends object ? DeepPartial<T[K]> : T[K];
+};
+/**
+ * - `doh`   DNS over HTTPS (RFC 8484 wire format) — works with any DoH server.
+ * - `dot`   DNS over TLS (RFC 7858) on port 853.
+ * - `plain` Unencrypted UDP/TCP DNS. Fast, but the resolver sees every lookup.
+ */
+export type DnsMode = 'doh' | 'dot' | 'plain';
+/** Which address families to ask for, in preference order. */
+export type IpFamilyPreference = 'ipv4' | 'ipv6' | 'ipv4-first' | 'ipv6-first';
+export interface DnsSettings {
+    readonly mode: DnsMode;
+    /** DoH endpoint. Used when `mode` is `doh`. */
+    readonly dohUrl: string;
+    /** DoT server hostname. Used when `mode` is `dot`. */
+    readonly dotHost: string;
+    readonly dotPort: number;
+    /** Plain resolvers. Used when `mode` is `plain`. Empty means "OS defaults". */
+    readonly plainServers: readonly string[];
+    readonly family: IpFamilyPreference;
+    /** Max distinct hostnames held in the resolver cache. */
+    readonly cacheSize: number;
+    /** Record TTLs are clamped into this range, in seconds. */
+    readonly minTtlSeconds: number;
+    readonly maxTtlSeconds: number;
+    /** Abort a single DNS query after this long. */
+    readonly timeoutMs: number;
+}
+export interface DnsRecord {
+    readonly address: string;
+    readonly family: 4 | 6;
+    /** Seconds, as reported by the authoritative answer (before clamping). */
+    readonly ttl: number;
+}
+export interface FragmentSettings {
+    readonly enabled: boolean;
+    /** Bytes per outgoing piece of the ClientHello. */
+    readonly size: number;
+    /**
+     * When true each piece is re-framed as its own valid TLS record, so a DPI box
+     * that reassembles at the record layer still never sees a whole SNI in one
+     * record. When false the ClientHello is merely split across TCP segments.
+     */
+    readonly tlsRecords: boolean;
+    /** Pause between pieces. Defeats boxes that reassemble on a short timer. */
+    readonly delayMs: number;
+}
+export interface ProxySettings {
+    readonly host: string;
+    readonly port: number;
+    /** Reject plain-HTTP (non-CONNECT) requests instead of proxying them. */
+    readonly httpsOnly: boolean;
+    /** Give up on the upstream TCP handshake after this long. */
+    readonly connectTimeoutMs: number;
+    /** Tear down a tunnel after this long with no traffic. 0 disables. */
+    readonly idleTimeoutMs: number;
+    readonly fragment: FragmentSettings;
+    readonly dns: DnsSettings;
+}
+export type ProxyOptions = DeepPartial<ProxySettings>;
+export interface ProxyAddress {
+    readonly host: string;
+    readonly port: number;
+}
+export type TunnelKind = 'https' | 'http';
+export interface TunnelInfo {
+    readonly id: number;
+    readonly kind: TunnelKind;
+    readonly host: string;
+    readonly port: number;
+    readonly startedAt: number;
+}
+export interface ProxyStats {
+    readonly activeTunnels: number;
+    readonly totalTunnels: number;
+    readonly failedTunnels: number;
+    readonly bytesSent: number;
+    readonly bytesReceived: number;
+    /** Epoch ms, or `null` while stopped. */
+    readonly startedAt: number | null;
+}
+export interface ProxyEventMap {
+    listening: [ProxyAddress];
+    close: [];
+    error: [Error];
+    'tunnel:open': [TunnelInfo];
+    'tunnel:close': [TunnelInfo & {
+        bytesSent: number;
+        bytesReceived: number;
+    }];
+    'tunnel:error': [TunnelInfo, Error];
+}
+export interface SystemProxySettings {
+    readonly host: string;
+    readonly port: number;
+    /** Hosts that should bypass the proxy, e.g. `localhost`, `*.local`. */
+    readonly bypass: readonly string[];
+}
+/** Opaque snapshot of the OS proxy configuration, used to restore it later. */
+export interface SystemProxySnapshot {
+    readonly platform: NodeJS.Platform;
+    readonly entries: readonly SystemProxySnapshotEntry[];
+    /**
+     * PID that took the snapshot, so an orphaned snapshot left on disk by a
+     * crashed run can be told apart from one a *live* process still owns.
+     */
+    readonly pid?: number;
+}
+/** One proxy endpoint. macOS keeps HTTP and HTTPS independent of each other. */
+export interface ProxyEndpointState {
+    readonly enabled: boolean;
+    readonly host: string;
+    readonly port: number;
+}
+export interface SystemProxySnapshotEntry extends ProxyEndpointState {
+    /** Network service (macOS), schema key (Linux) or registry value (Windows). */
+    readonly target: string;
+    /**
+     * The HTTPS proxy, when the platform tracks it separately from HTTP. Restoring
+     * both from one reading would clobber a service configured with only one of
+     * the two — a real state we found in the wild.
+     */
+    readonly secure?: ProxyEndpointState;
+    /**
+     * The bypass/exceptions list, recorded because `apply` overwrites it. v3.0
+     * set it and never put it back, permanently burning our list into every
+     * service it touched.
+     */
+    readonly bypass?: readonly string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,gFAAgF;AAChF,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI;KAC1B,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,GAC/C,CAAC,CAAC,CAAC,CAAC,GACJ,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,GACjB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GACjB,CAAC,CAAC,CAAC,CAAC;CACX,CAAC;AAMF;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;AAE9C,8DAA8D;AAC9D,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,YAAY,GAAG,YAAY,CAAC;AAE/E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,yDAAyD;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IACvB,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAMD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAMD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;AAEtD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AAE1C,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,CAAC,YAAY,CAAC,CAAC;IAC1B,KAAK,EAAE,EAAE,CAAC;IACV,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;IACf,aAAa,EAAE,CAAC,UAAU,CAAC,CAAC;IAC5B,cAAc,EAAE,CAAC,UAAU,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,cAAc,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;CACrC;AAMD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACtD;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAClE,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC"}

package/dist/core/types.js

@@ -0,0 +1,7 @@
+/**
+ * Public shape of everything the engine can be configured with, plus the
+ * events and stats it reports back. Kept dependency-free so the CLI, the
+ * Electron main process and the renderer can all share these types.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Library surface of the `green-tunnel` package.
+ *
+ * v2 published the engine under this name and v3 does again, so `import { Proxy }
+ * from 'green-tunnel'` has never stopped working. The engine lives in `./core`,
+ * which was briefly a separate `@green-tunnel/core` package and is not published
+ * on its own — one package, one version, no scope to own.
+ */
+export * from './core/index.js';
+export { VERSION } from './version.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,cAAc,iBAAiB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+/**
+ * Library surface of the `green-tunnel` package.
+ *
+ * v2 published the engine under this name and v3 does again, so `import { Proxy }
+ * from 'green-tunnel'` has never stopped working. The engine lives in `./core`,
+ * which was briefly a separate `@green-tunnel/core` package and is not published
+ * on its own — one package, one version, no scope to own.
+ */
+export * from './core/index.js';
+export { VERSION } from './version.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,cAAc,iBAAiB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC"}

package/dist/main.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=main.d.ts.map

package/dist/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":""}

package/dist/main.js

@@ -0,0 +1,155 @@
+#!/usr/bin/env node
+import process from 'node:process';
+import { DEFAULT_BYPASS, Proxy, SystemProxy, createLogger, isSystemProxySupported, recoverSystemProxy, toError, } from './core/index.js';
+import { HELP_TEXT, UsageError, parseCliArgs } from './options.js';
+import { printBanner, printError, printNotice, printStatus, printStopped, printStopping, } from './ui.js';
+import { VERSION } from './version.js';
+async function main() {
+    let parsed;
+    try {
+        parsed = parseCliArgs(process.argv.slice(2));
+    }
+    catch (error) {
+        if (error instanceof UsageError) {
+            printError(error.message);
+            printNotice('Run `gt --help` for usage.');
+            return 2;
+        }
+        throw error;
+    }
+    if (parsed.kind === 'help') {
+        console.log(HELP_TEXT);
+        return 0;
+    }
+    if (parsed.kind === 'version') {
+        console.log(VERSION);
+        return 0;
+    }
+    return run(parsed.options);
+}
+async function run(options) {
+    const logger = createLogger({ level: options.logLevel });
+    // Before anything else: if a previous run was killed without cleaning up, the
+    // machine may still be pointed at a dead port. Undo that first — it is the
+    // difference between "the internet is broken" and a working machine, and it
+    // must happen whether or not this run manages the system proxy at all.
+    if (isSystemProxySupported()) {
+        try {
+            const recovered = await recoverSystemProxy();
+            if (recovered) {
+                printNotice(`Restored the system proxy left behind by a previous run (${String(recovered.entries.length)} ` +
+                    `${recovered.entries.length === 1 ? 'entry' : 'entries'}).`);
+            }
+        }
+        catch (error) {
+            printError(toError(error).message);
+        }
+    }
+    const proxy = new Proxy(options.proxy, { logger });
+    // Without a listener, an emitted `error` would throw out of the event loop.
+    proxy.on('error', (error) => {
+        logger.error(error.message, error);
+    });
+    const address = await proxy.start();
+    const system = options.systemProxy && isSystemProxySupported() ? new SystemProxy() : undefined;
+    if (options.systemProxy && !system) {
+        printNotice(`System proxy is not supported on ${process.platform}; configure it manually.`);
+    }
+    try {
+        await system?.enable({ host: address.host, port: address.port, bypass: DEFAULT_BYPASS });
+    }
+    catch (error) {
+        printNotice(`Could not set the system proxy: ${toError(error).message}`);
+    }
+    // Whether *we* actually changed the OS — the only thing that makes teardown
+    // slow, and the only thing worth reassuring the user about on the way out.
+    const managingSystemProxy = system?.active ?? false;
+    if (!options.quiet) {
+        printBanner();
+        printStatus(address, proxy.settings, managingSystemProxy);
+    }
+    await waitForShutdown(async () => {
+        // Restore the OS first: leaving the machine pointed at a dead port is the
+        // worst possible failure mode.
+        let restored = managingSystemProxy;
+        await system?.disable().catch((error) => {
+            restored = false;
+            printError(`Could not restore the system proxy: ${toError(error).message}`);
+            printNotice('Run `gt` again to retry, or clear the proxy in your network settings.');
+        });
+        await proxy.stop();
+        if (!options.quiet)
+            printStopped(restored);
+    }, { managingSystemProxy, quiet: options.quiet });
+    return 0;
+}
+/** How long teardown gets before we stop waiting and exit anyway. */
+const SHUTDOWN_TIMEOUT_MS = 15_000;
+/**
+ * Resolve once the process has been asked to stop and `cleanup` has finished.
+ *
+ * v2 logged `uncaughtException` and carried on with a half-dead proxy while the
+ * OS still pointed at it. Here any fatal condition runs the same teardown.
+ *
+ * Signals use `process.on`, not `process.once`, on purpose. With `once`, the
+ * handler is removed as soon as it fires, so a second Ctrl-C — exactly what an
+ * impatient user does while "restoring…" is on screen — hits Node's default
+ * SIGINT action and kills the process *mid-restore*, stranding every service
+ * the restore had not reached yet. Repeat signals are now absorbed instead.
+ */
+function waitForShutdown(cleanup, view) {
+    return new Promise((resolve) => {
+        let shuttingDown = false;
+        const stop = (reason) => {
+            if (shuttingDown) {
+                // Always printed, even under --quiet: this is the message that keeps an
+                // impatient user from killing us mid-restore.
+                printNotice(view.managingSystemProxy
+                    ? 'Still restoring your network settings — one moment.'
+                    : 'Still shutting down — one moment.');
+                return;
+            }
+            shuttingDown = true;
+            if (reason !== 'signal')
+                printError(reason);
+            if (!view.quiet)
+                printStopping(view.managingSystemProxy);
+            // Never hang forever on a wedged `networksetup`/`gsettings` call: the
+            // recovery file means the next run can finish the job.
+            const timer = setTimeout(() => {
+                printError('Teardown timed out.');
+                resolve();
+            }, SHUTDOWN_TIMEOUT_MS);
+            timer.unref();
+            void cleanup().finally(() => {
+                clearTimeout(timer);
+                resolve();
+            });
+        };
+        // SIGHUP matters as much as SIGINT here: closing the terminal window is a
+        // completely ordinary way to stop a foreground CLI, and v3.0 ignored it —
+        // Node's default action killed the process with the proxy still set.
+        for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP']) {
+            process.on(signal, () => {
+                stop('signal');
+            });
+        }
+        process.once('uncaughtException', (error) => {
+            stop(`Fatal error: ${toError(error).message}`);
+        });
+        process.once('unhandledRejection', (error) => {
+            stop(`Unhandled rejection: ${toError(error).message}`);
+        });
+    });
+}
+try {
+    process.exitCode = await main();
+}
+catch (error) {
+    const failure = toError(error);
+    printError(failure.code === 'EADDRINUSE'
+        ? 'That port is already in use — pick another with --port.'
+        : failure.message);
+    process.exitCode = 1;
+}
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AACA,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EACL,cAAc,EACd,KAAK,EACL,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,kBAAkB,EAClB,OAAO,GACR,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAmB,MAAM,cAAc,CAAC;AACpF,OAAO,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,WAAW,EACX,YAAY,EACZ,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,KAAK,UAAU,IAAI;IACjB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1B,WAAW,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,OAAmB;IACpC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEzD,8EAA8E;IAC9E,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,sBAAsB,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,kBAAkB,EAAE,CAAC;YAC7C,IAAI,SAAS,EAAE,CAAC;gBACd,WAAW,CACT,4DAA4D,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;oBAC7F,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IAAI,CAC9D,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEnD,4EAA4E;IAC5E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QAC1B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IAEpC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,IAAI,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAE/F,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,WAAW,CAAC,oCAAoC,OAAO,CAAC,QAAQ,0BAA0B,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC3F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,mCAAmC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,mBAAmB,GAAG,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC;IAEpD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,WAAW,EAAE,CAAC;QACd,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,eAAe,CACnB,KAAK,IAAI,EAAE;QACT,0EAA0E;QAC1E,+BAA+B;QAC/B,IAAI,QAAQ,GAAG,mBAAmB,CAAC;QACnC,MAAM,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC/C,QAAQ,GAAG,KAAK,CAAC;YACjB,UAAU,CAAC,uCAAuC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,WAAW,CAAC,uEAAuE,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC,EACD,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAC9C,CAAC;IAEF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,qEAAqE;AACrE,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC;;;;;;;;;;;GAWG;AACH,SAAS,eAAe,CACtB,OAA4B,EAC5B,IAAsD;IAEtD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,IAAI,YAAY,GAAG,KAAK,CAAC;QAEzB,MAAM,IAAI,GAAG,CAAC,MAAc,EAAQ,EAAE;YACpC,IAAI,YAAY,EAAE,CAAC;gBACjB,wEAAwE;gBACxE,8CAA8C;gBAC9C,WAAW,CACT,IAAI,CAAC,mBAAmB;oBACtB,CAAC,CAAC,qDAAqD;oBACvD,CAAC,CAAC,mCAAmC,CACxC,CAAC;gBACF,OAAO;YACT,CAAC;YACD,YAAY,GAAG,IAAI,CAAC;YACpB,IAAI,MAAM,KAAK,QAAQ;gBAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAEzD,sEAAsE;YACtE,uDAAuD;YACvD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,UAAU,CAAC,qBAAqB,CAAC,CAAC;gBAClC,OAAO,EAAE,CAAC;YACZ,CAAC,EAAE,mBAAmB,CAAC,CAAC;YACxB,KAAK,CAAC,KAAK,EAAE,CAAC;YAEd,KAAK,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,0EAA0E;QAC1E,0EAA0E;QAC1E,qEAAqE;QACrE,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAU,EAAE,CAAC;YAC9D,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACtB,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1C,IAAI,CAAC,gBAAgB,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3C,IAAI,CAAC,wBAAwB,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;AAClC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,UAAU,CACP,OAAiC,CAAC,IAAI,KAAK,YAAY;QACtD,CAAC,CAAC,yDAAyD;QAC3D,CAAC,CAAC,OAAO,CAAC,OAAO,CACpB,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/options.d.ts

@@ -0,0 +1,25 @@
+import { type LogLevel, type ProxyOptions } from './core/index.js';
+export interface RunOptions {
+    readonly proxy: ProxyOptions;
+    readonly systemProxy: boolean;
+    readonly logLevel: LogLevel;
+    readonly quiet: boolean;
+}
+export type ParseResult = {
+    readonly kind: 'run';
+    readonly options: RunOptions;
+} | {
+    readonly kind: 'help';
+} | {
+    readonly kind: 'version';
+};
+export declare class UsageError extends Error {
+    readonly name = "UsageError";
+}
+/**
+ * Argument parsing on `node:util.parseArgs` — no yargs, no dependencies.
+ * `allowNegative` gives us `--no-fragment` / `--no-system-proxy` for free.
+ */
+export declare function parseCliArgs(argv: readonly string[]): ParseResult;
+export declare const HELP_TEXT: string;
+//# sourceMappingURL=options.d.ts.map

package/dist/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AACA,OAAO,EAAgC,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEjG,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjC,qBAAa,UAAW,SAAQ,KAAK;IACnC,SAAkB,IAAI,gBAAgB;CACvC;AAKD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,CA+EjE;AAwBD,eAAO,MAAM,SAAS,QAuCd,CAAC"}

package/dist/options.js

@@ -0,0 +1,144 @@
+import { parseArgs } from 'node:util';
+import { DEFAULT_SETTINGS, isLogLevel } from './core/index.js';
+export class UsageError extends Error {
+    name = 'UsageError';
+}
+const DNS_MODES = ['doh', 'dot', 'plain'];
+const FAMILIES = ['ipv4', 'ipv6', 'ipv4-first', 'ipv6-first'];
+/**
+ * Argument parsing on `node:util.parseArgs` — no yargs, no dependencies.
+ * `allowNegative` gives us `--no-fragment` / `--no-system-proxy` for free.
+ */
+export function parseCliArgs(argv) {
+    let parsed;
+    try {
+        parsed = parseArgs({
+            args: [...argv],
+            allowNegative: true,
+            strict: true,
+            options: {
+                host: { type: 'string' },
+                port: { type: 'string', short: 'p' },
+                'https-only': { type: 'boolean', default: false },
+                fragment: { type: 'boolean', default: true },
+                'fragment-size': { type: 'string' },
+                'fragment-delay': { type: 'string' },
+                'tls-records': { type: 'boolean', default: false },
+                dns: { type: 'string' },
+                'doh-url': { type: 'string' },
+                'dot-host': { type: 'string' },
+                'dot-port': { type: 'string' },
+                'dns-server': { type: 'string', multiple: true },
+                family: { type: 'string' },
+                'system-proxy': { type: 'boolean', default: true },
+                'log-level': { type: 'string' },
+                quiet: { type: 'boolean', short: 'q', default: false },
+                help: { type: 'boolean', short: 'h', default: false },
+                version: { type: 'boolean', short: 'V', default: false },
+            },
+        });
+    }
+    catch (cause) {
+        throw new UsageError(cause instanceof Error ? cause.message : String(cause));
+    }
+    const values = parsed.values;
+    if (values.help)
+        return { kind: 'help' };
+    if (values.version)
+        return { kind: 'version' };
+    const logLevel = values['log-level'];
+    if (logLevel !== undefined && !isLogLevel(logLevel)) {
+        throw new UsageError(`--log-level must be one of silent, error, warn, info, debug, trace`);
+    }
+    const proxy = {
+        ...(values.host === undefined ? {} : { host: values.host }),
+        ...(values.port === undefined ? {} : { port: integer('--port', values.port, 0, 65_535) }),
+        httpsOnly: values['https-only'],
+        fragment: {
+            enabled: values.fragment,
+            tlsRecords: values['tls-records'],
+            ...(values['fragment-size'] === undefined
+                ? {}
+                : { size: integer('--fragment-size', values['fragment-size'], 1, 16_384) }),
+            ...(values['fragment-delay'] === undefined
+                ? {}
+                : { delayMs: integer('--fragment-delay', values['fragment-delay'], 0, 60_000) }),
+        },
+        dns: {
+            mode: oneOf('--dns', values.dns, DNS_MODES, DEFAULT_SETTINGS.dns.mode),
+            family: oneOf('--family', values.family, FAMILIES, DEFAULT_SETTINGS.dns.family),
+            ...(values['doh-url'] === undefined ? {} : { dohUrl: values['doh-url'] }),
+            ...(values['dot-host'] === undefined ? {} : { dotHost: values['dot-host'] }),
+            ...(values['dot-port'] === undefined
+                ? {}
+                : { dotPort: integer('--dot-port', values['dot-port'], 1, 65_535) }),
+            ...(values['dns-server'] === undefined ? {} : { plainServers: values['dns-server'] }),
+        },
+    };
+    return {
+        kind: 'run',
+        options: {
+            proxy,
+            systemProxy: values['system-proxy'],
+            logLevel: logLevel ?? (values.quiet ? 'silent' : 'error'),
+            quiet: values.quiet,
+        },
+    };
+}
+function integer(flag, raw, min, max) {
+    const value = Number.parseInt(raw, 10);
+    if (!Number.isInteger(value) || value < min || value > max) {
+        throw new UsageError(`${flag} must be an integer between ${String(min)} and ${String(max)}`);
+    }
+    return value;
+}
+function oneOf(flag, raw, allowed, fallback) {
+    if (raw === undefined)
+        return fallback;
+    const match = allowed.find((value) => value === raw);
+    if (!match) {
+        throw new UsageError(`${flag} must be one of ${allowed.join(', ')}`);
+    }
+    return match;
+}
+export const HELP_TEXT = `
+Usage: gt [options]
+
+  Runs a local proxy that splits the TLS ClientHello so DPI systems cannot read
+  the SNI, and resolves hostnames over encrypted DNS.
+
+Server
+  --host <ip>              Address to bind          (default: ${DEFAULT_SETTINGS.host})
+  -p, --port <n>           Port to bind, 0 = random (default: ${String(DEFAULT_SETTINGS.port)})
+  --https-only             Reject plain HTTP requests
+
+Fragmentation
+  --no-fragment            Forward the ClientHello untouched
+  --fragment-size <n>      Bytes per piece          (default: ${String(DEFAULT_SETTINGS.fragment.size)})
+  --tls-records            Re-frame pieces as valid TLS records
+  --fragment-delay <ms>    Pause between pieces     (default: ${String(DEFAULT_SETTINGS.fragment.delayMs)})
+
+DNS
+  --dns <mode>             doh | dot | plain        (default: ${DEFAULT_SETTINGS.dns.mode})
+  --doh-url <url>          DoH endpoint             (default: ${DEFAULT_SETTINGS.dns.dohUrl})
+  --dot-host <host>        DoT server               (default: ${DEFAULT_SETTINGS.dns.dotHost})
+  --dot-port <n>           DoT port                 (default: ${String(DEFAULT_SETTINGS.dns.dotPort)})
+  --dns-server <ip>        Plain resolver, repeatable
+  --family <pref>          ipv4 | ipv6 | ipv4-first | ipv6-first
+
+Other
+  --no-system-proxy        Do not touch the OS proxy settings
+  --log-level <level>      silent | error | warn | info | debug | trace
+  -q, --quiet              No banner, no logs
+  -h, --help               Show this help
+  -V, --version            Show the version
+
+Examples
+  gt
+  gt --port 8080 --tls-records
+  gt --dns dot --dot-host 9.9.9.9
+  gt --dns plain --dns-server 1.1.1.1 --no-system-proxy
+
+Issues: https://github.com/SadeghHayeri/GreenTunnel/issues
+`.trim();
+//# sourceMappingURL=options.js.map

package/dist/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAoC,MAAM,iBAAiB,CAAC;AAcjG,MAAM,OAAO,UAAW,SAAQ,KAAK;IACjB,IAAI,GAAG,YAAY,CAAC;CACvC;AAED,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAU,CAAC;AACnD,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAEvE;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAuB;IAClD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;YACjB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YACf,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE;gBACP,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;gBACpC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;gBAEjD,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC5C,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACpC,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;gBAElD,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACvB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC7B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC9B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC9B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAChD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAE1B,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;gBAClD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;gBACtD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;gBACrD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;aACzD;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAE/C,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,oEAAoE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,KAAK,GAAiB;QAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QACzF,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC;QAC/B,QAAQ,EAAE;YACR,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;SACnF;QACD,GAAG,EAAE;YACH,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;YACtE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;YAC/E,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;SACtF;KACF,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,KAAK;QACX,OAAO,EAAE;YACP,KAAK;YACL,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC;YACnC,QAAQ,EAAE,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,GAAW,EAAE,GAAW,EAAE,GAAW;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAC3D,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,+BAA+B,MAAM,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CACZ,IAAY,EACZ,GAAuB,EACvB,OAAqB,EACrB,QAAW;IAEX,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;gEAOuC,gBAAgB,CAAC,IAAI;gEACrB,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC;;;;;gEAK7B,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;;gEAEtC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC;;;gEAGzC,gBAAgB,CAAC,GAAG,CAAC,IAAI;gEACzB,gBAAgB,CAAC,GAAG,CAAC,MAAM;gEAC3B,gBAAgB,CAAC,GAAG,CAAC,OAAO;gEAC5B,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;CAkBnG,CAAC,IAAI,EAAE,CAAC"}

package/dist/ui.d.ts

@@ -0,0 +1,17 @@
+import type { ProxyAddress, ProxySettings } from './core/index.js';
+export declare function printBanner(): void;
+export declare function printStatus(address: ProxyAddress, settings: ProxySettings, systemProxy: boolean): void;
+/**
+ * Acknowledge the stop request before teardown starts.
+ *
+ * Restoring the system proxy means several `networksetup`/`gsettings` calls,
+ * which take long enough that a silent CLI looks wedged — and the user's next
+ * move is a second Ctrl-C, the one thing that can strand their network
+ * settings. So say what is happening, and say it is worth waiting for.
+ */
+export declare function printStopping(restoresSystemProxy: boolean): void;
+/** Confirm teardown finished, so the user knows the machine is clean. */
+export declare function printStopped(restoredSystemProxy: boolean): void;
+export declare function printError(message: string): void;
+export declare function printNotice(message: string): void;
+//# sourceMappingURL=ui.d.ts.map

package/dist/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../src/ui.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AA+BnE,wBAAgB,WAAW,IAAI,IAAI,CAWlC;AAED,wBAAgB,WAAW,CACzB,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,aAAa,EACvB,WAAW,EAAE,OAAO,GACnB,IAAI,CAsBN;AAeD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,mBAAmB,EAAE,OAAO,GAAG,IAAI,CAUhE;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,mBAAmB,EAAE,OAAO,GAAG,IAAI,CAG/D;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAEhD;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAEjD"}