smartcontext-proxy 0.1.0 → 0.2.1

package/dist/src/system/dns-redirect.js

@@ -0,0 +1,141 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cacheRealIPs = cacheRealIPs;
+exports.getRealIP = getRealIP;
+exports.getAllRealIPs = getAllRealIPs;
+exports.enableDNSRedirect = enableDNSRedirect;
+exports.disableDNSRedirect = disableDNSRedirect;
+exports.isDNSRedirectActive = isDNSRedirectActive;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_child_process_1 = require("node:child_process");
+const node_dns_1 = __importDefault(require("node:dns"));
+const HOSTS_FILE = '/etc/hosts';
+const MARKER_START = '# SmartContext Proxy — START (auto-generated, do not edit)';
+const MARKER_END = '# SmartContext Proxy — END';
+/** LLM provider hostnames to redirect */
+const LLM_HOSTS = [
+    'api.anthropic.com',
+    'api.openai.com',
+    'generativelanguage.googleapis.com',
+    'openrouter.ai',
+    'api.together.xyz',
+    'api.fireworks.ai',
+    'api.mistral.ai',
+    'api.cohere.com',
+    'api.groq.com',
+    'api.deepseek.com',
+];
+/** Original IP mappings — needed to forward traffic to real providers */
+const originalIPs = new Map();
+/**
+ * Resolve and cache real IPs before overriding DNS.
+ * MUST be called before enableDNSRedirect.
+ */
+async function cacheRealIPs() {
+    for (const host of LLM_HOSTS) {
+        try {
+            const addrs = await new Promise((resolve, reject) => {
+                node_dns_1.default.resolve4(host, (err, addresses) => {
+                    if (err)
+                        reject(err);
+                    else
+                        resolve(addresses);
+                });
+            });
+            originalIPs.set(host, addrs);
+        }
+        catch { }
+    }
+    return originalIPs;
+}
+/** Get cached real IP for a hostname */
+function getRealIP(hostname) {
+    const ips = originalIPs.get(hostname);
+    return ips?.[0] || null;
+}
+/** Get all original IP mappings */
+function getAllRealIPs() {
+    return originalIPs;
+}
+/**
+ * Add /etc/hosts entries pointing LLM hostnames to 127.0.0.1.
+ * Requires sudo.
+ * After this, all apps resolve LLM hosts to localhost → our proxy.
+ */
+function enableDNSRedirect() {
+    try {
+        const current = node_fs_1.default.readFileSync(HOSTS_FILE, 'utf-8');
+        // Don't add if already present
+        if (current.includes(MARKER_START)) {
+            return { success: true, message: 'DNS redirect already active', hosts: LLM_HOSTS.length };
+        }
+        const block = [
+            '',
+            MARKER_START,
+            ...LLM_HOSTS.map((h) => `127.0.0.1  ${h}`),
+            MARKER_END,
+            '',
+        ].join('\n');
+        const newContent = current + block;
+        // Write via sudo tee
+        (0, node_child_process_1.execFileSync)('sudo', ['tee', HOSTS_FILE], {
+            input: newContent,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        // Flush DNS cache
+        flushDNS();
+        return { success: true, message: `DNS redirect active: ${LLM_HOSTS.length} hosts → 127.0.0.1`, hosts: LLM_HOSTS.length };
+    }
+    catch (err) {
+        return { success: false, message: `Failed: ${err}`, hosts: 0 };
+    }
+}
+/**
+ * Remove /etc/hosts entries.
+ */
+function disableDNSRedirect() {
+    try {
+        const current = node_fs_1.default.readFileSync(HOSTS_FILE, 'utf-8');
+        if (!current.includes(MARKER_START)) {
+            return { success: true, message: 'DNS redirect not active' };
+        }
+        // Remove our block
+        const regex = new RegExp(`\\n?${escapeRegex(MARKER_START)}[\\s\\S]*?${escapeRegex(MARKER_END)}\\n?`, 'g');
+        const cleaned = current.replace(regex, '\n');
+        (0, node_child_process_1.execFileSync)('sudo', ['tee', HOSTS_FILE], {
+            input: cleaned,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        flushDNS();
+        return { success: true, message: 'DNS redirect removed' };
+    }
+    catch (err) {
+        return { success: false, message: `Failed: ${err}` };
+    }
+}
+/** Check if DNS redirect is active */
+function isDNSRedirectActive() {
+    try {
+        const content = node_fs_1.default.readFileSync(HOSTS_FILE, 'utf-8');
+        return content.includes(MARKER_START);
+    }
+    catch {
+        return false;
+    }
+}
+function flushDNS() {
+    try {
+        if (process.platform === 'darwin') {
+            (0, node_child_process_1.execFileSync)('dscacheutil', ['-flushcache'], { stdio: 'pipe' });
+            (0, node_child_process_1.execFileSync)('sudo', ['killall', '-HUP', 'mDNSResponder'], { stdio: 'pipe' });
+        }
+    }
+    catch { }
+}
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+//# sourceMappingURL=dns-redirect.js.map

package/dist/src/system/installer.d.ts

@@ -0,0 +1,25 @@
+export interface InstallResult {
+    success: boolean;
+    steps: Array<{
+        step: string;
+        success: boolean;
+        message: string;
+    }>;
+}
+/**
+ * Full installation:
+ * 1. Generate CA cert
+ * 2. Install CA in trust store
+ * 3. Configure system proxy
+ * 4. Install system service
+ */
+export declare function install(port: number): InstallResult;
+/**
+ * Full uninstallation:
+ * 1. Remove system service
+ * 2. Clear system proxy
+ * 3. Remove CA from trust store
+ */
+export declare function uninstall(purge?: boolean): InstallResult;
+/** Check installation status */
+export declare function status(port: number): Record<string, boolean | string>;

package/dist/src/system/installer.js

@@ -0,0 +1,180 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.install = install;
+exports.uninstall = uninstall;
+exports.status = status;
+const ca_manager_js_1 = require("../tls/ca-manager.js");
+const trust_store_js_1 = require("../tls/trust-store.js");
+const service_js_1 = require("../daemon/service.js");
+const macos = __importStar(require("./macos.js"));
+const linux = __importStar(require("./linux.js"));
+const platform = process.platform === 'darwin' ? macos : linux;
+/**
+ * Full installation:
+ * 1. Generate CA cert
+ * 2. Install CA in trust store
+ * 3. Configure system proxy
+ * 4. Install system service
+ */
+function install(port) {
+    const steps = [];
+    let allOk = true;
+    // Step 1: Generate CA
+    try {
+        (0, ca_manager_js_1.ensureCA)();
+        steps.push({ step: 'Generate CA certificate', success: true, message: `CA cert at ${(0, ca_manager_js_1.getCACertPath)()}` });
+    }
+    catch (err) {
+        steps.push({ step: 'Generate CA certificate', success: false, message: String(err) });
+        allOk = false;
+    }
+    // Step 2: Install CA in trust store
+    if (allOk) {
+        const result = (0, trust_store_js_1.installCA)();
+        steps.push({ step: 'Install CA in trust store', success: result.success, message: result.message });
+        if (!result.success)
+            allOk = false;
+    }
+    // Step 3: Configure system proxy (PAC URL for selective proxying)
+    if (allOk) {
+        if (process.platform === 'darwin') {
+            const result = macos.setAutoproxyURL(`http://127.0.0.1:${port}/proxy.pac`);
+            steps.push({ step: 'Configure system proxy (PAC)', success: result.success, message: result.message });
+            if (!result.success)
+                allOk = false;
+        }
+        else {
+            const result = platform.setSystemProxy('127.0.0.1', port);
+            steps.push({ step: 'Configure system proxy', success: result.success, message: result.message });
+            if (!result.success)
+                allOk = false;
+        }
+    }
+    // Step 4: Install system service
+    if (allOk) {
+        try {
+            const servicePath = (0, service_js_1.installService)(port);
+            steps.push({ step: 'Install system service', success: true, message: `Service at ${servicePath}` });
+        }
+        catch (err) {
+            steps.push({ step: 'Install system service', success: false, message: String(err) });
+            // Non-fatal: proxy can still run manually
+        }
+    }
+    // Rollback on failure
+    if (!allOk) {
+        rollback(steps);
+    }
+    return { success: allOk, steps };
+}
+/**
+ * Full uninstallation:
+ * 1. Remove system service
+ * 2. Clear system proxy
+ * 3. Remove CA from trust store
+ */
+function uninstall(purge = false) {
+    const steps = [];
+    // Step 1: Remove service
+    try {
+        const msg = (0, service_js_1.uninstallService)();
+        steps.push({ step: 'Remove system service', success: true, message: msg });
+    }
+    catch (err) {
+        steps.push({ step: 'Remove system service', success: false, message: String(err) });
+    }
+    // Step 2: Clear proxy
+    if (process.platform === 'darwin') {
+        const r1 = macos.clearAutoproxyURL();
+        steps.push({ step: 'Clear auto-proxy', success: r1.success, message: r1.message });
+        const r2 = macos.clearSystemProxy();
+        steps.push({ step: 'Clear system proxy', success: r2.success, message: r2.message });
+    }
+    else {
+        const r = linux.clearSystemProxy();
+        steps.push({ step: 'Clear system proxy', success: r.success, message: r.message });
+    }
+    // Step 3: Remove CA
+    const caResult = (0, trust_store_js_1.uninstallCA)();
+    steps.push({ step: 'Remove CA from trust store', success: caResult.success, message: caResult.message });
+    // Step 4: Purge data (optional)
+    if (purge) {
+        try {
+            const fs = require('node:fs');
+            const path = require('node:path');
+            const dataDir = path.join(process.env['HOME'] || '.', '.smartcontext');
+            fs.rmSync(dataDir, { recursive: true, force: true });
+            steps.push({ step: 'Purge data directory', success: true, message: `Removed ${dataDir}` });
+        }
+        catch (err) {
+            steps.push({ step: 'Purge data directory', success: false, message: String(err) });
+        }
+    }
+    const allOk = steps.every((s) => s.success);
+    return { success: allOk, steps };
+}
+/** Check installation status */
+function status(port) {
+    return {
+        caExists: require('node:fs').existsSync((0, ca_manager_js_1.getCACertPath)()),
+        caInstalled: (0, trust_store_js_1.isCAInstalled)(),
+        proxyConfigured: platform.isProxyConfigured(port),
+    };
+}
+/** Rollback completed steps on failure */
+function rollback(completedSteps) {
+    for (const step of completedSteps.reverse()) {
+        if (!step.success)
+            continue;
+        try {
+            if (step.step.includes('CA in trust store'))
+                (0, trust_store_js_1.uninstallCA)();
+            if (step.step.includes('system proxy') || step.step.includes('PAC')) {
+                if (process.platform === 'darwin') {
+                    macos.clearAutoproxyURL();
+                    macos.clearSystemProxy();
+                }
+                else {
+                    linux.clearSystemProxy();
+                }
+            }
+            if (step.step.includes('system service'))
+                (0, service_js_1.uninstallService)();
+        }
+        catch { }
+    }
+}
+//# sourceMappingURL=installer.js.map

package/dist/src/system/linux.d.ts

@@ -0,0 +1,11 @@
+/** Configure Linux system proxy */
+export declare function setSystemProxy(host: string, port: number): {
+    success: boolean;
+    message: string;
+};
+/** Clear Linux system proxy */
+export declare function clearSystemProxy(): {
+    success: boolean;
+    message: string;
+};
+export declare function isProxyConfigured(port: number): boolean;

package/dist/src/system/linux.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setSystemProxy = setSystemProxy;
+exports.clearSystemProxy = clearSystemProxy;
+exports.isProxyConfigured = isProxyConfigured;
+const node_child_process_1 = require("node:child_process");
+/** Configure Linux system proxy */
+function setSystemProxy(host, port) {
+    const proxyUrl = `http://${host}:${port}`;
+    try {
+        // Try GNOME settings
+        try {
+            (0, node_child_process_1.execFileSync)('gsettings', ['set', 'org.gnome.system.proxy', 'mode', "'manual'"], { stdio: 'pipe' });
+            (0, node_child_process_1.execFileSync)('gsettings', ['set', 'org.gnome.system.proxy.http', 'host', `'${host}'`], { stdio: 'pipe' });
+            (0, node_child_process_1.execFileSync)('gsettings', ['set', 'org.gnome.system.proxy.http', 'port', String(port)], { stdio: 'pipe' });
+            (0, node_child_process_1.execFileSync)('gsettings', ['set', 'org.gnome.system.proxy.https', 'host', `'${host}'`], { stdio: 'pipe' });
+            (0, node_child_process_1.execFileSync)('gsettings', ['set', 'org.gnome.system.proxy.https', 'port', String(port)], { stdio: 'pipe' });
+        }
+        catch { }
+        // Write environment file for shell sessions
+        const envFile = '/etc/profile.d/smartcontext-proxy.sh';
+        const content = `# SmartContext Proxy - auto-generated
+export http_proxy="${proxyUrl}"
+export https_proxy="${proxyUrl}"
+export HTTP_PROXY="${proxyUrl}"
+export HTTPS_PROXY="${proxyUrl}"
+export no_proxy="localhost,127.0.0.1,::1"
+`;
+        try {
+            (0, node_child_process_1.execFileSync)('sudo', ['tee', envFile], { input: content, stdio: ['pipe', 'pipe', 'pipe'] });
+        }
+        catch { }
+        return { success: true, message: `System proxy set to ${proxyUrl}` };
+    }
+    catch (err) {
+        return { success: false, message: `Failed: ${err}` };
+    }
+}
+/** Clear Linux system proxy */
+function clearSystemProxy() {
+    try {
+        try {
+            (0, node_child_process_1.execFileSync)('gsettings', ['set', 'org.gnome.system.proxy', 'mode', "'none'"], { stdio: 'pipe' });
+        }
+        catch { }
+        try {
+            (0, node_child_process_1.execFileSync)('sudo', ['rm', '-f', '/etc/profile.d/smartcontext-proxy.sh'], { stdio: 'pipe' });
+        }
+        catch { }
+        return { success: true, message: 'System proxy cleared' };
+    }
+    catch (err) {
+        return { success: false, message: `Failed: ${err}` };
+    }
+}
+function isProxyConfigured(port) {
+    const proxyEnv = process.env['https_proxy'] || process.env['HTTPS_PROXY'] || '';
+    return proxyEnv.includes(String(port));
+}
+//# sourceMappingURL=linux.js.map

package/dist/src/system/macos.d.ts

@@ -0,0 +1,24 @@
+/** Get active network interface name (e.g., "Wi-Fi", "Ethernet") */
+export declare function getActiveInterface(): string;
+/** Configure macOS system proxy to use SmartContext */
+export declare function setSystemProxy(host: string, port: number): {
+    success: boolean;
+    message: string;
+};
+/** Remove system proxy configuration */
+export declare function clearSystemProxy(): {
+    success: boolean;
+    message: string;
+};
+/** Set PAC URL as auto-proxy configuration */
+export declare function setAutoproxyURL(pacUrl: string): {
+    success: boolean;
+    message: string;
+};
+/** Clear auto-proxy configuration */
+export declare function clearAutoproxyURL(): {
+    success: boolean;
+    message: string;
+};
+/** Check if system proxy is currently set to SmartContext */
+export declare function isProxyConfigured(port: number): boolean;

package/dist/src/system/macos.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getActiveInterface = getActiveInterface;
+exports.setSystemProxy = setSystemProxy;
+exports.clearSystemProxy = clearSystemProxy;
+exports.setAutoproxyURL = setAutoproxyURL;
+exports.clearAutoproxyURL = clearAutoproxyURL;
+exports.isProxyConfigured = isProxyConfigured;
+const node_child_process_1 = require("node:child_process");
+/** Get active network interface name (e.g., "Wi-Fi", "Ethernet") */
+function getActiveInterface() {
+    try {
+        const route = (0, node_child_process_1.execFileSync)('route', ['-n', 'get', 'default'], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+        const ifMatch = route.match(/interface:\s*(\S+)/);
+        if (!ifMatch)
+            return 'Wi-Fi';
+        const ifName = ifMatch[1];
+        // Map interface ID to service name
+        const services = (0, node_child_process_1.execFileSync)('networksetup', ['-listallhardwareports'], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+        const lines = services.split('\n');
+        for (let i = 0; i < lines.length; i++) {
+            if (lines[i].includes(`Device: ${ifName}`)) {
+                const nameLine = lines[i - 1];
+                const nameMatch = nameLine?.match(/Hardware Port:\s*(.+)/);
+                if (nameMatch)
+                    return nameMatch[1];
+            }
+        }
+        return 'Wi-Fi';
+    }
+    catch {
+        return 'Wi-Fi';
+    }
+}
+/** Configure macOS system proxy to use SmartContext */
+function setSystemProxy(host, port) {
+    const iface = getActiveInterface();
+    try {
+        // Set HTTPS proxy
+        (0, node_child_process_1.execFileSync)('networksetup', ['-setsecurewebproxy', iface, host, String(port)], { stdio: 'pipe' });
+        // Set HTTP proxy
+        (0, node_child_process_1.execFileSync)('networksetup', ['-setwebproxy', iface, host, String(port)], { stdio: 'pipe' });
+        // Enable them
+        (0, node_child_process_1.execFileSync)('networksetup', ['-setsecurewebproxystate', iface, 'on'], { stdio: 'pipe' });
+        (0, node_child_process_1.execFileSync)('networksetup', ['-setwebproxystate', iface, 'on'], { stdio: 'pipe' });
+        return { success: true, message: `System proxy set to ${host}:${port} on ${iface}` };
+    }
+    catch (err) {
+        return { success: false, message: `Failed to set proxy on ${iface}: ${err}` };
+    }
+}
+/** Remove system proxy configuration */
+function clearSystemProxy() {
+    const iface = getActiveInterface();
+    try {
+        (0, node_child_process_1.execFileSync)('networksetup', ['-setsecurewebproxystate', iface, 'off'], { stdio: 'pipe' });
+        (0, node_child_process_1.execFileSync)('networksetup', ['-setwebproxystate', iface, 'off'], { stdio: 'pipe' });
+        return { success: true, message: `System proxy cleared on ${iface}` };
+    }
+    catch (err) {
+        return { success: false, message: `Failed to clear proxy on ${iface}: ${err}` };
+    }
+}
+/** Set PAC URL as auto-proxy configuration */
+function setAutoproxyURL(pacUrl) {
+    const iface = getActiveInterface();
+    try {
+        (0, node_child_process_1.execFileSync)('networksetup', ['-setautoproxyurl', iface, pacUrl], { stdio: 'pipe' });
+        (0, node_child_process_1.execFileSync)('networksetup', ['-setautoproxystate', iface, 'on'], { stdio: 'pipe' });
+        return { success: true, message: `Auto-proxy URL set to ${pacUrl} on ${iface}` };
+    }
+    catch (err) {
+        return { success: false, message: `Failed: ${err}` };
+    }
+}
+/** Clear auto-proxy configuration */
+function clearAutoproxyURL() {
+    const iface = getActiveInterface();
+    try {
+        (0, node_child_process_1.execFileSync)('networksetup', ['-setautoproxystate', iface, 'off'], { stdio: 'pipe' });
+        return { success: true, message: `Auto-proxy cleared on ${iface}` };
+    }
+    catch (err) {
+        return { success: false, message: `Failed: ${err}` };
+    }
+}
+/** Check if system proxy is currently set to SmartContext */
+function isProxyConfigured(port) {
+    const iface = getActiveInterface();
+    try {
+        const info = (0, node_child_process_1.execFileSync)('networksetup', ['-getsecurewebproxy', iface], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+        return info.includes(`Port: ${port}`) && info.includes('Enabled: Yes');
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=macos.js.map

package/dist/src/system/pf-redirect.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Install pf redirect rules.
+ * Requires sudo.
+ */
+export declare function enablePFRedirect(proxyPort: number): Promise<{
+    success: boolean;
+    message: string;
+    ips: number;
+}>;
+/**
+ * Remove pf redirect rules.
+ */
+export declare function disablePFRedirect(): {
+    success: boolean;
+    message: string;
+};
+/**
+ * Check if pf redirect is active.
+ */
+export declare function isPFRedirectActive(): boolean;
+/**
+ * Refresh IP addresses (IPs can change due to DNS).
+ * Call periodically to keep rules current.
+ */
+export declare function refreshPFRules(proxyPort: number): Promise<void>;