pac-proxy-cli 0.1.7 → 1.0.1

package/lib/capture-log.js

@@ -0,0 +1,138 @@
+/**
+ * 抓包记录存储：MITM 模式下的请求/响应详情，支持筛选与排序
+ */
+const MAX_RECORDS = 300;
+const MAX_BODY_LENGTH = 512 * 1024; // 512KB 每侧截断
+
+const records = [];
+let idSeq = 0;
+
+function nextId() {
+  idSeq += 1;
+  return `c${Date.now()}_${idSeq}`;
+}
+
+function headersToObject(headers) {
+  if (!headers) return {};
+  const out = {};
+  for (const [k, v] of Object.entries(headers)) {
+    if (typeof v === 'string') out[k] = v;
+    else if (Array.isArray(v)) out[k] = v.join(', ');
+    else out[k] = String(v);
+  }
+  return out;
+}
+
+function truncateBody(buf, max = MAX_BODY_LENGTH) {
+  if (!buf || !buf.length) return '';
+  const str = Buffer.isBuffer(buf) ? buf.toString('utf-8', 0, max) : String(buf).slice(0, max);
+  const truncated = (Buffer.isBuffer(buf) ? buf.length : String(buf).length) > max;
+  return truncated ? str + '\n\n… (已截断)' : str;
+}
+
+/**
+ * 从请求头推断资源类型
+ */
+function inferRequestType(reqHeaders) {
+  const accept = (reqHeaders && reqHeaders['accept']) || '';
+  const secFetchMode = (reqHeaders && reqHeaders['sec-fetch-mode']) || '';
+  const secFetchDest = (reqHeaders && reqHeaders['sec-fetch-dest']) || '';
+  if (secFetchDest === 'document' || (accept && accept.indexOf('text/html') !== -1 && secFetchMode === 'navigate')) return 'document';
+  if (secFetchDest === 'script' || (accept && accept.indexOf('application/javascript') !== -1)) return 'script';
+  if (secFetchDest === 'style') return 'stylesheet';
+  if (secFetchMode === 'cors' || (accept && accept.indexOf('application/json') !== -1)) return 'xhr';
+  if (secFetchDest === 'image') return 'image';
+  if (secFetchDest === 'font') return 'font';
+  if (secFetchDest === 'empty' && accept.indexOf('application/json') !== -1) return 'xhr';
+  return 'other';
+}
+
+/**
+ * 追加一条抓包记录（由 MITM 在 onResponseEnd 时调用）
+ * @param {object} opts - method, url, statusCode, requestHeaders, responseHeaders, requestBody (Buffer), responseBody (Buffer), startTime
+ */
+export function pushCapture(opts) {
+  const id = nextId();
+  const reqHeaders = headersToObject(opts.requestHeaders);
+  const resHeaders = headersToObject(opts.responseHeaders);
+  const requestBody = truncateBody(opts.requestBody);
+  const responseBody = truncateBody(opts.responseBody);
+  const type = opts.type || inferRequestType(opts.requestHeaders);
+
+  const record = {
+    id,
+    time: opts.startTime ?? Date.now(),
+    method: (opts.method || 'GET').toUpperCase(),
+    url: opts.url || '',
+    statusCode: opts.statusCode != null ? opts.statusCode : 0,
+    type,
+    requestHeaders: reqHeaders,
+    responseHeaders: resHeaders,
+    requestBody,
+    responseBody,
+  };
+
+  records.unshift(record);
+  if (records.length > MAX_RECORDS) records.length = MAX_RECORDS;
+  return record;
+}
+
+/**
+ * 查询抓包记录
+ * @param {object} options - q(关键词), method, status, type, sort(time|method|status|url), order(asc|desc), limit, offset
+ * @returns {{ list: array, total: number }}
+ */
+export function getCaptures(options = {}) {
+  const {
+    q = '',
+    method = '',
+    status = '',
+    type = '',
+    sort = 'time',
+    order = 'desc',
+    limit = 100,
+    offset = 0,
+  } = options;
+
+  let list = [...records];
+
+  const qLower = String(q).trim().toLowerCase();
+  if (qLower) {
+    list = list.filter((r) => (r.url || '').toLowerCase().includes(qLower));
+  }
+  if (method) {
+    const m = String(method).toUpperCase();
+    list = list.filter((r) => r.method === m);
+  }
+  if (status !== '' && status !== undefined) {
+    const s = Number(status);
+    if (!Number.isNaN(s)) list = list.filter((r) => r.statusCode === s);
+  }
+  if (type) {
+    const t = String(type).toLowerCase();
+    list = list.filter((r) => (r.type || 'other') === t);
+  }
+
+  const total = list.length;
+
+  const sortKey = sort === 'time' ? 'time' : sort === 'method' ? 'method' : sort === 'status' ? 'statusCode' : 'url';
+  list.sort((a, b) => {
+    let va = a[sortKey];
+    let vb = b[sortKey];
+    if (sortKey === 'time') {
+      va = Number(va) || 0;
+      vb = Number(vb) || 0;
+      return order === 'asc' ? va - vb : vb - va;
+    }
+    va = String(va ?? '');
+    vb = String(vb ?? '');
+    const cmp = va.localeCompare(vb, undefined, { numeric: true });
+    return order === 'asc' ? cmp : -cmp;
+  });
+
+  const limitNum = Math.min(Math.max(1, Number(limit) || 100), 200);
+  const offsetNum = Math.max(0, Number(offset) || 0);
+  list = list.slice(offsetNum, offsetNum + limitNum);
+
+  return { list, total };
+}

package/lib/index.js

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+
+import { Command } from 'commander';
+import { startServer } from './server.js';
+
+const program = new Command();
+
+program
+  .name('pac-proxy')
+  .description('PAC/全局代理本地控制台')
+  .version('0.1.0');
+
+program
+  .command('serve')
+  .description('启动本地 Web 服务，供控制台访问')
+  .option('-p, --port <number>', '端口号', '5174')
+  .action(async (opts) => {
+    const port = Number(opts.port) || 5174;
+    await startServer(port);
+  });
+
+program.parse();

package/lib/local-store.js

@@ -0,0 +1,122 @@
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+const DEFAULT_CONFIG = {
+  mode: 'local', // 'local' | 'remote'，决定 getPacRules/setPacRules 读写 config 还是 remote_config.json
+  proxy: {
+    enabled: false,
+    mode: 'pac',
+    upstream: '',
+    httpPort: 5175,
+    httpsPort: 5176,
+    applySystemProxy: true,
+  },
+  pacRules: [],
+};
+
+function getStoreDir() {
+  return process.env.PAC_PROXY_HOME || path.join(os.homedir(), '.pac-proxy');
+}
+
+function getStorePath() {
+  return path.join(getStoreDir(), 'config.json');
+}
+
+function getRemoteConfigPath() {
+  return path.join(getStoreDir(), 'remote_config.json');
+}
+
+function ensureDir(dir) {
+  if (!fs.existsSync(dir)) {
+    fs.mkdirSync(dir, { recursive: true });
+  }
+}
+
+export function loadConfig() {
+  const file = getStorePath();
+  if (!fs.existsSync(file)) {
+    return JSON.parse(JSON.stringify(DEFAULT_CONFIG));
+  }
+  try {
+    const raw = fs.readFileSync(file, 'utf-8');
+    const data = JSON.parse(raw);
+    const mode = data.mode === 'remote' ? 'remote' : 'local';
+    return {
+      ...DEFAULT_CONFIG,
+      ...data,
+      mode,
+      proxy: { ...DEFAULT_CONFIG.proxy, ...(data.proxy || {}) },
+      pacRules: Array.isArray(data.pacRules) ? data.pacRules : DEFAULT_CONFIG.pacRules,
+    };
+  } catch {
+    return JSON.parse(JSON.stringify(DEFAULT_CONFIG));
+  }
+}
+
+function loadRemoteConfig() {
+  const file = getRemoteConfigPath();
+  if (!fs.existsSync(file)) return { pacRules: [] };
+  try {
+    const raw = fs.readFileSync(file, 'utf-8');
+    const data = JSON.parse(raw);
+    return { pacRules: Array.isArray(data.pacRules) ? data.pacRules : [] };
+  } catch {
+    return { pacRules: [] };
+  }
+}
+
+function saveRemoteConfig(data) {
+  const file = getRemoteConfigPath();
+  ensureDir(path.dirname(file));
+  fs.writeFileSync(file, JSON.stringify(data, null, 2), 'utf-8');
+  return data;
+}
+
+export function saveConfig(config) {
+  const file = getStorePath();
+  ensureDir(path.dirname(file));
+  fs.writeFileSync(file, JSON.stringify(config, null, 2), 'utf-8');
+  return config;
+}
+
+export function getPacRules() {
+  const config = loadConfig();
+  if (config.mode === 'remote') {
+    return loadRemoteConfig().pacRules;
+  }
+  return config.pacRules || [];
+}
+
+export function setPacRules(rules) {
+  const list = Array.isArray(rules) ? rules : (rules?.rules ?? []);
+  const config = loadConfig();
+  if (config.mode === 'remote') {
+    saveRemoteConfig({ pacRules: list });
+    return list;
+  }
+  config.pacRules = list;
+  saveConfig(config);
+  return config.pacRules;
+}
+
+export function getProxyConfig() {
+  const config = loadConfig();
+  const proxy = { ...DEFAULT_CONFIG.proxy, ...config.proxy };
+  proxy.enabled = proxy.enabled === true || proxy.enabled === 'true';
+  proxy.applySystemProxy = proxy.applySystemProxy !== false && proxy.applySystemProxy !== 'false';
+  return proxy;
+}
+
+export function setProxyConfig(proxy) {
+  const config = loadConfig();
+  const merged = { ...DEFAULT_CONFIG.proxy, ...proxy };
+  merged.enabled = merged.enabled === true || merged.enabled === 'true';
+  merged.applySystemProxy = merged.applySystemProxy !== false && merged.applySystemProxy !== 'false';
+  config.proxy = merged;
+  saveConfig(config);
+  return config.proxy;
+}

package/lib/mitm-proxy-server.js

@@ -0,0 +1,143 @@
+/**
+ * 抓包代理（HTTPS MITM）：所有流量经本地解密，CA 证书供用户安装信任；请求/响应写入 capture-log 供流量记录页展示
+ */
+import path from 'path';
+import os from 'os';
+import fs from 'fs';
+import { createRequire } from 'module';
+import { pushCapture } from './capture-log.js';
+
+const require = createRequire(import.meta.url);
+const { Proxy } = require('http-mitm-proxy');
+
+function getCertDir() {
+  const base = process.env.PAC_PROXY_HOME || path.join(os.homedir(), '.pac-proxy');
+  return path.join(base, 'mitm-certs');
+}
+
+/** CA 证书路径（listen 成功后由库生成） */
+export function getCaCertPath() {
+  return path.join(getCertDir(), 'certs', 'ca.pem');
+}
+
+/** CA 证书是否存在 */
+export function hasCaCert() {
+  try {
+    return fs.existsSync(getCaCertPath());
+  } catch {
+    return false;
+  }
+}
+
+let proxyInstance = null;
+let listenPort = null;
+
+export function startMitmProxyServer(port) {
+  return new Promise((resolve, reject) => {
+    stopMitmProxyServer().then(() => {
+      if (port == null || port <= 0) {
+        return resolve(null);
+      }
+      const certDir = getCertDir();
+      try {
+        fs.mkdirSync(certDir, { recursive: true });
+      } catch (e) {
+        return reject(e);
+      }
+      const proxy = new Proxy();
+      proxy.use(Proxy.gunzip);
+
+      proxy.onRequest((ctx, callback) => {
+        const startTime = Date.now();
+        const req = ctx.clientToProxyRequest;
+        const method = req.method || 'GET';
+        const host = (req.headers && req.headers.host) || '';
+        const url = (req.url || '').startsWith('/') ? `http://${host}${req.url}` : req.url;
+        ctx._capture = {
+          startTime,
+          method,
+          url,
+          requestHeaders: req.headers,
+          reqBodyChunks: [],
+          resBodyChunks: [],
+          statusCode: 0,
+          responseHeaders: {},
+        };
+        ctx.onResponseData((ctx, chunk, cb) => {
+          if (ctx._capture) ctx._capture.resBodyChunks.push(chunk);
+          cb(null, chunk);
+        });
+        ctx.onResponseEnd((ctx, cb) => {
+          const c = ctx._capture;
+          if (c) {
+            const requestBody = c.reqBodyChunks.length ? Buffer.concat(c.reqBodyChunks) : Buffer.alloc(0);
+            const responseBody = c.resBodyChunks.length ? Buffer.concat(c.resBodyChunks) : Buffer.alloc(0);
+            pushCapture({
+              method: c.method,
+              url: c.url,
+              statusCode: c.statusCode,
+              requestHeaders: c.requestHeaders,
+              responseHeaders: c.responseHeaders,
+              requestBody,
+              responseBody,
+              startTime: c.startTime,
+            });
+          }
+          cb();
+        });
+        callback();
+      });
+
+      proxy.onRequestData((ctx, chunk, callback) => {
+        if (ctx._capture) ctx._capture.reqBodyChunks.push(chunk);
+        callback(null, chunk);
+      });
+
+      proxy.onResponse((ctx, callback) => {
+        if (ctx.serverToProxyResponse && ctx._capture) {
+          ctx._capture.statusCode = ctx.serverToProxyResponse.statusCode;
+          ctx._capture.responseHeaders = ctx.serverToProxyResponse.headers;
+        }
+        callback();
+      });
+
+      proxyInstance = proxy;
+      proxy.listen(
+        {
+          port: Number(port),
+          host: '127.0.0.1',
+          sslCaDir: certDir,
+        },
+        (err) => {
+          if (err) {
+            proxyInstance = null;
+            return reject(err);
+          }
+          listenPort = proxyInstance.httpPort;
+          console.log(`抓包代理已启动: http://127.0.0.1:${listenPort}（HTTPS 需安装 CA 证书）`);
+          resolve(proxy);
+        }
+      );
+    });
+  });
+}
+
+export function stopMitmProxyServer() {
+  if (!proxyInstance) return Promise.resolve();
+  const proxy = proxyInstance;
+  proxyInstance = null;
+  listenPort = null;
+  return new Promise((resolve) => {
+    try {
+      proxy.close(() => resolve());
+    } catch {
+      resolve();
+    }
+    setTimeout(resolve, 2000);
+  });
+}
+
+export function getMitmProxyStatus() {
+  const running = !!(proxyInstance && listenPort);
+  return { running, port: running ? listenPort : null };
+}

package/lib/pac-file.js

@@ -0,0 +1,49 @@
+/**
+ * 生成 PAC 文件内容，供浏览器/系统“自动代理配置”使用
+ * 规则与 pac-match 一致：按优先级匹配，命中则 proxy/direct，未命中直连
+ */
+import { getPacRules, getProxyConfig } from './local-store.js';
+
+function escapeForPac(str) {
+  return String(str)
+    .replace(/\\/g, '\\\\')
+    .replace(/"/g, '\\"')
+    .replace(/\r/g, '')
+    .replace(/\n/g, ' ');
+}
+
+/**
+ * 将一条规则的 pattern 转为 PAC 中 shExpMatch(url, pattern) 的表达式
+ */
+function patternToPacCondition(urlVar, pattern) {
+  if (!pattern || typeof pattern !== 'string') return 'false';
+  const escaped = escapeForPac(pattern);
+  return `shExpMatch(${urlVar}, "${escaped}")`;
+}
+
+/**
+ * 生成 FindProxyForURL 函数体
+ */
+export function generatePacJs(proxyHost, proxyPort) {
+  const rules = getPacRules();
+  const config = getProxyConfig();
+  const port = Number(proxyPort) || Number(config?.httpPort) || 5175;
+  const host = (proxyHost || '127.0.0.1').trim();
+  const proxyStr = `PROXY ${host}:${port}`;
+
+  if (!Array.isArray(rules) || rules.length === 0) {
+    return `function FindProxyForURL(url, host) { return "DIRECT"; }`;
+  }
+
+  const sorted = [...rules].sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+  const lines = [];
+  for (const r of sorted) {
+    const condUrl = patternToPacCondition('url', r.pattern);
+    const condHost = patternToPacCondition('host', r.pattern);
+    const cond = `${condUrl} || ${condHost}`;
+    const ret = r.action === 'proxy' ? `return "${proxyStr}";` : 'return "DIRECT";';
+    lines.push(`  if (${cond}) { ${ret} }`);
+  }
+  const body = lines.join('\n');
+  return `function FindProxyForURL(url, host) {\n${body}\n  return "DIRECT";\n}`;
+}

package/lib/pac-match.js

@@ -0,0 +1,44 @@
+/**
+ * PAC 规则匹配：按优先级排序，命中则返回对应动作（proxy/direct）
+ * pattern 支持 * 通配符，匹配请求的 URL 或 host
+ */
+export function patternToRegex(pattern) {
+  if (!pattern || typeof pattern !== 'string') return null;
+  const escaped = pattern
+    .replace(/[.+?^${}()|[\]\\]/g, '\\$&')
+    .replace(/\*/g, '.*');
+  try {
+    return new RegExp(escaped, 'i');
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * 判断 url 是否匹配 pattern（支持 * 通配）
+ */
+export function matchPattern(url, pattern) {
+  const re = patternToRegex(pattern);
+  if (!re) return false;
+  return re.test(url);
+}
+
+/**
+ * 根据 PAC 规则决定该 URL 走代理还是直连。
+ * PAC 模式下：匹配到规则则按规则执行（proxy/direct），未匹配到的一律直连。
+ * @param {string} url - 请求的完整 URL（如 http://example.com/path）或 CONNECT 时为 host:port
+ * @param {Array<{pattern:string, action:string, priority:number}>} rules
+ * @returns {'proxy'|'direct'}
+ */
+export function getPacAction(url, rules) {
+  if (!url || !Array.isArray(rules) || rules.length === 0) {
+    return 'direct';
+  }
+  const sorted = [...rules].sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+  for (const r of sorted) {
+    if (matchPattern(url, r.pattern)) {
+      return r.action === 'proxy' ? 'proxy' : 'direct';
+    }
+  }
+  return 'direct';
+}