pac-proxy-cli 1.1.13 → 1.2.1

package/lib/config-cli.js

@@ -0,0 +1,768 @@
+import fs from 'fs';
+import path from 'path';
+import { input, select, confirm, password } from '@inquirer/prompts';
+import {
+  loadConfig,
+  saveConfig,
+  getStoreDir,
+  getStorePath,
+  getRemoteConfigPath,
+  getPacRules,
+  setPacRules,
+  getProxyConfig,
+  getSslocalConfig,
+} from './local-store.js';
+import { getSslocalCiphers } from './sslocal-manager.js';
+
+/** @param {unknown} n */
+export function validatePortNum(n) {
+  const p = Number(n);
+  if (!Number.isInteger(p) || p < 1 || p > 65535) {
+    return '请输入 1–65535 之间的整数端口';
+  }
+  return true;
+}
+
+/** @param {string} s */
+export function validateUpstreamUrl(s) {
+  const t = (s || '').trim();
+  if (!t) return true;
+  try {
+    const u = new URL(t);
+    if (!u.protocol || (u.protocol !== 'socks5:' && u.protocol !== 'socks4:' && u.protocol !== 'http:' && u.protocol !== 'https:')) {
+      return '上游地址需为 socks5://、socks4://、http:// 或 https:// 开头';
+    }
+    return true;
+  } catch {
+    return '请输入合法的上游代理 URL';
+  }
+}
+
+/** @param {Record<string, unknown>} config */
+export function sanitizeConfigForPrint(config) {
+  const c = JSON.parse(JSON.stringify(config));
+  if (c.sslocal && typeof c.sslocal === 'object' && c.sslocal.password) {
+    c.sslocal = { ...c.sslocal, password: '***' };
+  }
+  return c;
+}
+
+/**
+ * CLI / 脚本用：解析代理模式关键字，与 Web「代理设置」四档一致。
+ * @param {string} raw
+ * @returns {'direct'|'global'|'pac'|'mitm'|null}
+ */
+export function normalizeProxyModeCli(raw) {
+  const k = String(raw || '').trim().toLowerCase();
+  if (k === 'direct' || k === 'off' || k === 'clear' || k === 'none') return 'direct';
+  if (k === 'global' || k === 'system') return 'global';
+  if (k === 'pac') return 'pac';
+  if (k === 'mitm' || k === 'capture') return 'mitm';
+  return null;
+}
+
+/**
+ * 写入 config.json 中的 proxy（与 Web 切换模式时保存的字段一致）。若需立即启停代理与系统设置，请使用带 `tryPushProxyToRunningServe` 的交互命令，或确保 `pac-proxy serve` 已运行。
+ * @param {string} modeInput
+ */
+export function runConfigSetProxyMode(modeInput) {
+  const mode = normalizeProxyModeCli(modeInput);
+  if (!mode) {
+    console.error(
+      `无效的代理模式「${modeInput}」。可选: direct（直连）, global|system（系统/全局代理）, pac, mitm（抓包）`,
+    );
+    process.exitCode = 1;
+    return;
+  }
+  const cfg = loadConfig();
+  const proxy = { ...cfg.proxy };
+  if (mode === 'direct') {
+    proxy.enabled = false;
+    proxy.applySystemProxy = true;
+  } else {
+    proxy.enabled = true;
+    proxy.mode = mode;
+    proxy.applySystemProxy = true;
+  }
+  saveConfig({ ...cfg, proxy });
+  const labels = {
+    direct: '直连（无代理）',
+    global: '系统代理（全局 HTTP）',
+    pac: 'PAC 代理',
+    mitm: '抓包代理 (MITM)',
+  };
+  console.log(`已写入代理模式: ${labels[mode]}`);
+}
+
+/** 探测本机控制台 HTTP 端口（默认扫 5174–5184，可用 PAC_PROXY_CONSOLE_PORT 指定） */
+function getConsoleHttpPortsToProbe() {
+  const raw = process.env.PAC_PROXY_CONSOLE_PORT;
+  if (raw != null && String(raw).trim()) {
+    const p = Number(String(raw).trim());
+    if (Number.isInteger(p) && p >= 1 && p <= 65535) return [p];
+  }
+  const ports = [];
+  for (let i = 5174; i <= 5184; i++) ports.push(i);
+  return ports;
+}
+
+/**
+ * 若本机已有 `pac-proxy serve` 在跑，对其发起 PUT /api/local/proxy，触发与 Web「代理设置」相同的 applyProxyService（启停本地代理、系统代理等）。
+ * @returns {Promise<boolean>} 是否成功命中并同步
+ */
+export async function tryPushProxyToRunningServe() {
+  const proxy = getProxyConfig();
+  const body = JSON.stringify(proxy);
+  for (const port of getConsoleHttpPortsToProbe()) {
+    const ctrl = new AbortController();
+    const tid = setTimeout(() => ctrl.abort(), 800);
+    try {
+      const r = await fetch(`http://127.0.0.1:${port}/api/local/proxy`, {
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json' },
+        body,
+        signal: ctrl.signal,
+      });
+      if (r.ok) {
+        console.log('已向运行中的控制台同步代理设置（与 Web 保存一致）。');
+        return true;
+      }
+    } catch {
+      /* 下一端口 */
+    } finally {
+      clearTimeout(tid);
+    }
+  }
+  return false;
+}
+
+/**
+ * 若本机已有 `pac-proxy serve` 在跑，对其发起 PUT /api/local/sslocal，与 Web「Shadowsocks」页保存一致（写盘、启停 sslocal、applyProxyService）。
+ * @returns {Promise<boolean>} 是否成功命中并同步
+ */
+export async function tryPushSslocalToRunningServe() {
+  const sslocal = getSslocalConfig();
+  const body = JSON.stringify(sslocal);
+  for (const port of getConsoleHttpPortsToProbe()) {
+    const ctrl = new AbortController();
+    const tid = setTimeout(() => ctrl.abort(), 800);
+    try {
+      const r = await fetch(`http://127.0.0.1:${port}/api/local/sslocal`, {
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json' },
+        body,
+        signal: ctrl.signal,
+      });
+      if (r.ok) {
+        console.log('已向运行中的控制台同步 Shadowsocks (sslocal) 设置（与 Web 保存一致）。');
+        return true;
+      }
+    } catch {
+      /* 下一端口 */
+    } finally {
+      clearTimeout(tid);
+    }
+  }
+  return false;
+}
+
+/**
+ * 与 Web「Shadowsocks / sslocal」页字段一致的交互问答。
+ * @param {Record<string, unknown>} currentSslocal
+ */
+async function promptSslocalFields(currentSslocal) {
+  const sslocal = { ...currentSslocal };
+  sslocal.enabled = await confirm({
+    message: '是否启用内置代理客户端 (sslocal)',
+    default: !!sslocal.enabled,
+  });
+  if (!sslocal.enabled) {
+    return { ...currentSslocal, enabled: false };
+  }
+
+  const server = await input({
+    message: '服务器地址',
+    default: sslocal.server || '',
+  });
+  if ((server || '').trim()) sslocal.server = server.trim();
+
+  const sp = await input({
+    message: '服务器端口',
+    default: String(sslocal.serverPort ?? 8388),
+    validate: validatePortNum,
+  });
+  sslocal.serverPort = Number(sp);
+
+  const lp = await input({
+    message: '本地 SOCKS5 端口',
+    default: String(sslocal.localPort ?? 1080),
+    validate: validatePortNum,
+  });
+  sslocal.localPort = Number(lp);
+
+  const changePw = await confirm({
+    message: '是否修改密码？（否则保留已保存密码）',
+    default: false,
+  });
+  if (changePw) {
+    const pw = await password({ message: '密码', mask: '*' });
+    sslocal.password = pw || '';
+  }
+
+  const methods = getSslocalCiphers();
+  const methodChoices = methods.map((m) => ({ name: m, value: m }));
+  const currentMethod = methods.includes(sslocal.method) ? sslocal.method : methods[0];
+  sslocal.method = await select({
+    message: '加密方法',
+    choices: methodChoices,
+    default: currentMethod,
+  });
+
+  const to = await input({
+    message: '超时（秒）',
+    default: String(sslocal.timeout ?? 300),
+    validate: (v) => {
+      const n = Number((v || '').trim());
+      if (!Number.isInteger(n) || n < 1) return '请输入正整数';
+      return true;
+    },
+  });
+  sslocal.timeout = Number((to || '').trim());
+  sslocal.enabled = true;
+  return sslocal;
+}
+
+export async function runConfigProxyModeInteractive() {
+  const proxy = getProxyConfig();
+  /** @type {'direct'|'global'|'pac'|'mitm'} */
+  let current = 'pac';
+  if (!proxy.enabled) current = 'direct';
+  else if (proxy.mode === 'global') current = 'global';
+  else if (proxy.mode === 'mitm') current = 'mitm';
+  else current = 'pac';
+
+  console.log('\n与 Web「代理设置」共用配置。\n');
+
+  const choice = await select({
+    message: '选择代理模式',
+    choices: [
+      { value: 'direct', name: '直连（无代理）' },
+      { value: 'global', name: '系统代理（全局 HTTP）' },
+      { value: 'pac', name: 'PAC 代理' },
+      { value: 'mitm', name: '抓包代理 (MITM)' },
+    ],
+    default: current,
+  });
+
+  runConfigSetProxyMode(choice);
+  const pushed = await tryPushProxyToRunningServe();
+  if (!pushed) {
+    console.log('未检测到运行中的控制台（pac-proxy serve），仅已写入配置文件；启动后可自动同步或于 Web 中保存一次。');
+  }
+  printPathsHint(loadConfig());
+}
+
+/**
+ * @param {Array<{ pattern?: string, id?: string, action?: string, priority?: number }>} existing
+ * @param {unknown} imported
+ */
+export function mergePacRulesImport(existing, imported) {
+  if (!Array.isArray(imported)) {
+    throw new Error('文件格式错误：需为规则 JSON 数组');
+  }
+  const merged = [...existing];
+  for (const r of imported) {
+    if (!r || typeof r !== 'object' || !r.pattern) continue;
+    const pattern = String(r.pattern).trim();
+    if (!pattern) continue;
+    const idx = merged.findIndex((x) => (x.pattern || '').trim() === pattern);
+    const entry = {
+      id: r.id || String(Date.now() + Math.random()),
+      pattern,
+      action: r.action === 'direct' ? 'direct' : r.action === 'block' ? 'block' : 'proxy',
+      priority: Number(r.priority) || 0,
+    };
+    if (idx >= 0) merged[idx] = { ...merged[idx], ...entry };
+    else merged.push(entry);
+  }
+  return merged;
+}
+
+/**
+ * @param {Array<{ pattern?: string, id?: string }>} rules
+ * @param {string} patternTrimmed
+ * @param {string | undefined} excludeId 编辑时传入当前规则 id，新增时不传
+ */
+export function pacRulePatternTakenByOther(rules, patternTrimmed, excludeId) {
+  return rules.some((r) => {
+    if (excludeId != null && r.id === excludeId) return false;
+    return (r.pattern || '').trim() === patternTrimmed;
+  });
+}
+
+/**
+ * @param {Array<{ pattern?: string, id?: string, action?: string, priority?: number }>} rules
+ * @param {string} id
+ * @param {{ pattern: string, action: string, priority: number }} fields
+ */
+export function applyPacRuleEdit(rules, id, fields) {
+  const idx = rules.findIndex((r) => r.id === id);
+  if (idx < 0) return { ok: false, error: 'not_found' };
+  if (pacRulePatternTakenByOther(rules, fields.pattern, id)) {
+    return { ok: false, error: 'duplicate' };
+  }
+  const next = [...rules];
+  next[idx] = { ...next[idx], ...fields };
+  return { ok: true, rules: next };
+}
+
+/**
+ * @param {{ pattern?: string, action?: string, priority?: number }} [defaults]
+ */
+export async function promptPacRuleFields(defaults = {}) {
+  const pattern = await input({
+    message: '匹配模式（如 *.google.com）',
+    default: (defaults.pattern || '').trim(),
+    validate: (v) => ((v || '').trim() ? true : '不能为空'),
+  });
+  const defaultAction =
+    defaults.action === 'direct' ? 'direct' : defaults.action === 'block' ? 'block' : 'proxy';
+  const action = await select({
+    message: '动作',
+    choices: [
+      { value: 'proxy', name: '代理' },
+      { value: 'direct', name: '直连' },
+      { value: 'block', name: '拦截' },
+    ],
+    default: defaultAction,
+  });
+  const pr = await input({
+    message: '优先级（数字越大越优先）',
+    default: String(defaults.priority ?? 0),
+    validate: (v) => {
+      const n = Number((v || '').trim());
+      if (Number.isNaN(n)) return '请输入数字';
+      return true;
+    },
+  });
+  return {
+    pattern: String(pattern).trim(),
+    action,
+    priority: Number((pr || '').trim()) || 0,
+  };
+}
+
+function sortPacRulesByPriorityDesc(rules) {
+  return [...rules].sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+}
+
+function printPathsHint(cfg) {
+  const home = getStoreDir();
+  console.log('');
+  console.log(`数据目录 PAC_PROXY_HOME: ${home}`);
+  console.log(`配置文件: ${getStorePath()}`);
+  if (cfg.mode === 'remote') {
+    console.log(`远程模式下 PAC 规则文件: ${getRemoteConfigPath()}`);
+  }
+}
+
+export function runConfigPrint() {
+  const cfg = loadConfig();
+  console.log(JSON.stringify(sanitizeConfigForPrint(cfg), null, 2));
+}
+
+/**
+ * @param {string} filePath
+ */
+export async function runPacImportFile(filePath) {
+  const abs = path.resolve(filePath);
+  if (!fs.existsSync(abs)) {
+    console.error(`文件不存在: ${abs}`);
+    process.exitCode = 1;
+    return;
+  }
+  const text = fs.readFileSync(abs, 'utf-8');
+  let imported;
+  try {
+    imported = JSON.parse(text);
+  } catch (e) {
+    console.error(`JSON 解析失败: ${e instanceof Error ? e.message : e}`);
+    process.exitCode = 1;
+    return;
+  }
+  const current = getPacRules();
+  const merged = mergePacRulesImport(current, imported);
+  setPacRules(merged);
+  console.log(`已合并写入 ${merged.length} 条 PAC 规则（与 Web 控制台一致）。`);
+  printPathsHint(loadConfig());
+}
+
+async function promptPacOptional() {
+  const choice = await select({
+    message: 'PAC 规则（可选）',
+    choices: [
+      { value: 'skip', name: '跳过，不改 PAC 规则' },
+      { value: 'import', name: '从 JSON 文件合并导入' },
+      { value: 'add', name: '追加一条规则' },
+    ],
+  });
+
+  if (choice === 'skip') return;
+
+  if (choice === 'import') {
+    const fp = await input({
+      message: '规则 JSON 文件路径',
+      validate: (v) => ((v || '').trim() ? true : '请输入路径'),
+    });
+    const abs = path.resolve((fp || '').trim());
+    if (!fs.existsSync(abs)) {
+      console.error(`文件不存在: ${abs}`);
+      return;
+    }
+    try {
+      const text = fs.readFileSync(abs, 'utf-8');
+      const imported = JSON.parse(text);
+      const current = getPacRules();
+      const merged = mergePacRulesImport(current, imported);
+      setPacRules(merged);
+      console.log(`已导入合并，当前共 ${merged.length} 条规则。`);
+    } catch (e) {
+      console.error(e instanceof Error ? e.message : e);
+    }
+    return;
+  }
+
+  if (choice === 'add') {
+    const fields = await promptPacRuleFields();
+    const current = getPacRules();
+    if (pacRulePatternTakenByOther(current, fields.pattern, undefined)) {
+      console.error(`规则「${fields.pattern}」已存在，未追加。`);
+      return;
+    }
+    current.push({
+      id: String(Date.now()),
+      ...fields,
+    });
+    setPacRules(current);
+    console.log('已追加 1 条规则。');
+  }
+}
+
+export async function runPacRulesInteractive() {
+  console.log('\nPAC 规则管理（与 Web 控制台共用存储）。\n');
+
+  for (;;) {
+    const action = await select({
+      message: '操作',
+      choices: [
+        { value: 'list', name: '列出当前规则' },
+        { value: 'add', name: '添加规则' },
+        { value: 'edit', name: '编辑规则' },
+        { value: 'remove', name: '删除规则' },
+        { value: 'exit', name: '退出' },
+      ],
+    });
+
+    if (action === 'exit') break;
+
+    const raw = getPacRules();
+    const list = Array.isArray(raw) ? raw : [];
+
+    if (action === 'list') {
+      const sorted = sortPacRulesByPriorityDesc(list);
+      if (!sorted.length) {
+        console.log('\n（暂无规则）\n');
+        continue;
+      }
+      console.log('');
+      const wPat = Math.max(8, ...sorted.map((r) => (r.pattern || '').length));
+      const head = `${'匹配模式'.padEnd(wPat)}  ${'动作'.padEnd(8)}  优先级`;
+      console.log(head);
+      console.log('-'.repeat(head.length + 2));
+      for (const r of sorted) {
+        const pat = (r.pattern || '').padEnd(wPat);
+        const act = (r.action === 'direct' ? 'direct' : r.action === 'block' ? 'block' : 'proxy').padEnd(8);
+        console.log(`${pat}  ${act}  ${r.priority ?? 0}`);
+      }
+      console.log(`\n共 ${sorted.length} 条\n`);
+      continue;
+    }
+
+    if (action === 'add') {
+      const fields = await promptPacRuleFields();
+      if (pacRulePatternTakenByOther(list, fields.pattern, undefined)) {
+        console.error(`规则「${fields.pattern}」已存在，未保存。\n`);
+        continue;
+      }
+      const next = [...list, { id: String(Date.now()), ...fields }];
+      setPacRules(next);
+      console.log('已添加。\n');
+      continue;
+    }
+
+    if (action === 'edit' || action === 'remove') {
+      if (!list.length) {
+        console.log('\n暂无规则可编辑或删除。\n');
+        continue;
+      }
+      const sorted = sortPacRulesByPriorityDesc(list);
+      const pick = await select({
+        message: action === 'edit' ? '选择要编辑的规则' : '选择要删除的规则',
+        choices: sorted.map((r) => {
+          const p = (r.pattern || '').trim() || '(空)';
+          const short = p.length > 48 ? `${p.slice(0, 45)}…` : p;
+          return {
+            value: r.id,
+            name: `[${r.priority ?? 0}] ${short} (${r.action === 'direct' ? '直连' : r.action === 'block' ? '拦截' : '代理'})`,
+          };
+        }),
+      });
+      const rule = list.find((r) => r.id === pick);
+      if (!rule) {
+        console.error('未找到该规则。\n');
+        continue;
+      }
+      if (action === 'remove') {
+        const ok = await confirm({
+          message: `确定删除「${(rule.pattern || '').trim()}」？`,
+          default: false,
+        });
+        if (!ok) {
+          console.log('已取消。\n');
+          continue;
+        }
+        setPacRules(list.filter((r) => r.id !== pick));
+        console.log('已删除。\n');
+        continue;
+      }
+      const fields = await promptPacRuleFields({
+        pattern: rule.pattern || '',
+        action: rule.action === 'direct' ? 'direct' : rule.action === 'block' ? 'block' : 'proxy',
+        priority: rule.priority ?? 0,
+      });
+      const result = applyPacRuleEdit(list, pick, fields);
+      if (!result.ok) {
+        if (result.error === 'duplicate') {
+          console.error(`与已有规则 pattern 冲突，未保存。\n`);
+        } else {
+          console.error('未找到该规则。\n');
+        }
+        continue;
+      }
+      setPacRules(result.rules);
+      console.log('已更新。\n');
+    }
+  }
+
+  printPathsHint(loadConfig());
+}
+
+export async function runConfigInteractive() {
+  let cfg = loadConfig();
+  const proxy = { ...cfg.proxy };
+  const sslocal = { ...cfg.sslocal };
+
+  console.log('\n与 Web 控制台共用本地配置。留空回车可保持当前值（布尔项用提示选择）。\n');
+
+  const mode = await select({
+    message: '运行模式（PAC 规则存储位置）',
+    choices: [
+      {
+        value: 'local',
+        name: '本地模式 — 规则在 config.json',
+      },
+      {
+        value: 'remote',
+        name: '远程模式 — 规则在 remote_config.json（登录仍在 Web）',
+      },
+    ],
+    default: cfg.mode === 'remote' ? 'remote' : 'local',
+  });
+  cfg = { ...cfg, mode };
+
+  proxy.enabled = await confirm({
+    message: '是否启用本地代理服务（与 Web「代理设置」一致）',
+    default: !!proxy.enabled,
+  });
+
+  proxy.mode = await select({
+    message: '代理模式',
+    choices: [
+      { value: 'pac', name: 'PAC 代理' },
+      { value: 'global', name: '全局代理' },
+      { value: 'mitm', name: '抓包代理 (MITM)' },
+    ],
+    default: ['pac', 'global', 'mitm'].includes(proxy.mode) ? proxy.mode : 'pac',
+  });
+
+  const up = await input({
+    message: '上游代理地址（socks5/http，留空保持）',
+    default: proxy.upstream || '',
+    validate: validateUpstreamUrl,
+  });
+  if ((up || '').trim()) proxy.upstream = up.trim();
+
+  const httpP = await input({
+    message: '本地 HTTP 代理端口',
+    default: String(proxy.httpPort ?? 5175),
+    validate: validatePortNum,
+  });
+  proxy.httpPort = Number(httpP);
+
+  const httpsP = await input({
+    message: '本地 HTTPS 代理端口',
+    default: String(proxy.httpsPort ?? 5176),
+    validate: validatePortNum,
+  });
+  proxy.httpsPort = Number(httpsP);
+
+  proxy.applySystemProxy = await confirm({
+    message: '保存后是否应用系统代理（需本机支持，见 README）',
+    default: proxy.applySystemProxy !== false,
+  });
+
+  const nextSslocal = await promptSslocalFields(sslocal);
+
+  cfg = {
+    ...cfg,
+    proxy: { ...cfg.proxy, ...proxy },
+    sslocal: nextSslocal,
+  };
+  saveConfig(cfg);
+
+  await promptPacOptional();
+
+  console.log('\n配置已保存。');
+  const pushed = await tryPushProxyToRunningServe();
+  if (!pushed) {
+    console.log('未检测到运行中的控制台，代理相关进程与系统代理未自动应用；可启动 pac-proxy serve 后重试本命令或于 Web 保存。');
+  }
+  printPathsHint(loadConfig());
+}
+
+/** 仅编辑 Shadowsocks (sslocal)，与 Web「Shadowsocks」页共用 config.json 字段与保存副作用。 */
+export async function runConfigShadowsocksInteractive() {
+  const cfg = loadConfig();
+  console.log('\nShadowsocks (sslocal) — 与 Web 控制台「代理客户端」页共用配置。\n');
+
+  const nextSslocal = await promptSslocalFields({ ...cfg.sslocal });
+  saveConfig({ ...cfg, sslocal: nextSslocal });
+
+  console.log('\n配置已保存。');
+  const pushed = await tryPushSslocalToRunningServe();
+  if (!pushed) {
+    console.log('未检测到运行中的控制台，sslocal 进程与上游代理未自动应用；可启动 pac-proxy serve 后重试本命令或在 Web 中保存。');
+  }
+  printPathsHint(loadConfig());
+}
+
+export async function runConfigInit() {
+  console.log('\n首次配置向导（可随时用 pac-proxy config 再次编辑）。\n');
+  printPathsHint(loadConfig());
+
+  const mode = await select({
+    message: '运行模式',
+    choices: [
+      { value: 'local', name: '本地模式' },
+      { value: 'remote', name: '远程模式（PAC 规则存 remote_config.json）' },
+    ],
+    default: 'local',
+  });
+
+  const upstream = await input({
+    message: '上游代理 URL（例如 socks5://127.0.0.1:1080）',
+    default: 'socks5://127.0.0.1:1080',
+    validate: (v) => {
+      if (!(v || '').trim()) return '请输入上游地址';
+      return validateUpstreamUrl(v);
+    },
+  });
+
+  const httpPort = await input({
+    message: '本地 HTTP 端口',
+    default: '5175',
+    validate: validatePortNum,
+  });
+  const httpsPort = await input({
+    message: '本地 HTTPS 端口',
+    default: '5176',
+    validate: validatePortNum,
+  });
+
+  const enableClient = await confirm({
+    message: '是否启用内置代理客户端（sslocal）？',
+    default: false,
+  });
+
+  let sslocal = {
+    enabled: enableClient,
+    server: '',
+    serverPort: 8388,
+    localPort: 1080,
+    password: '',
+    method: 'aes-256-gcm',
+    timeout: 300,
+  };
+
+  if (enableClient) {
+    sslocal.server = await input({
+      message: '服务器地址',
+      validate: (v) => ((v || '').trim() ? true : '必填'),
+    });
+    const sp = await input({
+      message: '服务器端口',
+      default: '8388',
+      validate: validatePortNum,
+    });
+    sslocal.serverPort = Number(sp);
+    const lp = await input({
+      message: '本地 SOCKS5 端口',
+      default: '1080',
+      validate: validatePortNum,
+    });
+    sslocal.localPort = Number(lp);
+    sslocal.password = await password({ message: '密码', mask: '*' });
+    const methods = getSslocalCiphers();
+    sslocal.method = await select({
+      message: '加密方法',
+      choices: methods.map((m) => ({ name: m, value: m })),
+      default: 'aes-256-gcm',
+    });
+  }
+
+  const proxySummary = {
+    enabled: false,
+    mode: 'pac',
+    upstream: upstream.trim(),
+    httpPort: Number(httpPort),
+    httpsPort: Number(httpsPort),
+    applySystemProxy: true,
+  };
+
+  const ok = await confirm({
+    message: `确认写入？\n  模式: ${mode}\n  上游: ${proxySummary.upstream}\n  端口: ${proxySummary.httpPort}/${proxySummary.httpsPort}\n  sslocal: ${sslocal.enabled ? '开' : '关'}`,
+    default: true,
+  });
+  if (!ok) {
+    console.log('已取消。');
+    return;
+  }
+
+  const current = loadConfig();
+  const mergedSslocal = enableClient
+    ? { ...current.sslocal, ...sslocal }
+    : { ...current.sslocal, enabled: false };
+  const merged = {
+    ...current,
+    mode,
+    proxy: { ...current.proxy, ...proxySummary },
+    sslocal: mergedSslocal,
+  };
+  saveConfig(merged);
+  console.log('\n已保存。');
+  const pushed = await tryPushProxyToRunningServe();
+  if (!pushed) {
+    console.log('未检测到运行中的控制台，代理未自动应用；可启动 pac-proxy serve 后于 Web 保存或再次执行本向导。');
+  }
+  printPathsHint(loadConfig());
+}