surgio 3.18.0 → 3.19.0

package/build/validators/masque.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MasqueNodeConfigValidator = void 0;
+const zod_1 = require("zod");
+const types_1 = require("../types");
+const common_1 = require("./common");
+const MasqueTlsNodeConfigValidator = common_1.TlsNodeConfigValidator.omit({
+    tls13: true,
+});
+const MasqueBasicAuthNodeConfigValidator = MasqueTlsNodeConfigValidator.extend({
+    type: zod_1.z.literal(types_1.NodeTypeEnum.Masque),
+    authMode: zod_1.z.literal('basic-auth'),
+    username: zod_1.z.string().optional(),
+    password: zod_1.z.string().optional(),
+});
+const MasqueKeyPairNodeConfigValidator = MasqueTlsNodeConfigValidator.extend({
+    type: zod_1.z.literal(types_1.NodeTypeEnum.Masque),
+    authMode: zod_1.z.literal('key-pair'),
+    privateKey: zod_1.z.string().min(1),
+    publicKey: zod_1.z.string().min(1),
+    ip: zod_1.z.string().min(1).optional(),
+    ipv6: zod_1.z.string().min(1).optional(),
+    dnsServers: zod_1.z.array(zod_1.z.string().min(1)).nonempty().optional(),
+    network: zod_1.z.enum(['h3', 'h2', 'h3-l4proxy']).optional(),
+    sni: zod_1.z.string().optional(),
+    connectUri: zod_1.z
+        .string()
+        .url()
+        .refine((value) => value.startsWith('https://'), {
+        message: 'connectUri 必须为 HTTPS URL',
+    })
+        .optional(),
+    mtu: zod_1.z.number().int().min(1280).max(1500).optional(),
+    keepalive: zod_1.z.number().int().nonnegative().optional(),
+    udpRelay: zod_1.z.boolean().optional(),
+    remoteDnsResolve: zod_1.z.boolean().optional(),
+    congestionController: zod_1.z.literal('bbr').optional(),
+    bbrProfile: zod_1.z.enum(['standard', 'conservative', 'aggressive']).optional(),
+    handshakeTimeout: zod_1.z.number().int().nonnegative().optional(),
+});
+exports.MasqueNodeConfigValidator = zod_1.z
+    .discriminatedUnion('authMode', [
+    MasqueBasicAuthNodeConfigValidator,
+    MasqueKeyPairNodeConfigValidator,
+])
+    .superRefine((node, ctx) => {
+    if (node.shadowTls) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: 'MASQUE 不支持 Shadow TLS',
+            path: ['shadowTls'],
+        });
+    }
+    if (node.authMode === 'basic-auth' &&
+        node.portHopping &&
+        node.underlyingProxy) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: 'MASQUE 的 portHopping 不能与 underlyingProxy 同时使用',
+            path: ['underlyingProxy'],
+        });
+    }
+    if (node.authMode === 'key-pair' &&
+        node.network !== 'h3-l4proxy' &&
+        !node.ip &&
+        !node.ipv6) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: 'MASQUE key-pair 节点必须配置 ip 或 ipv6',
+            path: ['ip'],
+        });
+    }
+    if (node.authMode === 'key-pair' &&
+        node.network === 'h3-l4proxy' &&
+        node.udpRelay === true) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: 'MASQUE h3-l4proxy 模式不支持 UDP',
+            path: ['udpRelay'],
+        });
+    }
+});
+//# sourceMappingURL=masque.js.map

package/build/validators/masque.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"masque.js","sourceRoot":"","sources":["../../src/validators/masque.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AAEvB,oCAAuC;AAEvC,qCAAiD;AAEjD,MAAM,4BAA4B,GAAG,+BAAsB,CAAC,IAAI,CAAC;IAC/D,KAAK,EAAE,IAAI;CACZ,CAAC,CAAA;AAEF,MAAM,kCAAkC,GAAG,4BAA4B,CAAC,MAAM,CAAC;IAC7E,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,oBAAY,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACjC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAA;AAEF,MAAM,gCAAgC,GAAG,4BAA4B,CAAC,MAAM,CAAC;IAC3E,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,oBAAY,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC/B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5D,OAAO,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtD,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,OAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE;QAC/C,OAAO,EAAE,0BAA0B;KACpC,CAAC;SACD,QAAQ,EAAE;IACb,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACpD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACpD,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,oBAAoB,EAAE,OAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACjD,UAAU,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzE,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAA;AAEW,QAAA,yBAAyB,GAAG,OAAC;KACvC,kBAAkB,CAAC,UAAU,EAAE;IAC9B,kCAAkC;IAClC,gCAAgC;CACjC,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAA;IACJ,CAAC;IAED,IACE,IAAI,CAAC,QAAQ,KAAK,YAAY;QAC9B,IAAI,CAAC,WAAW;QAChB,IAAI,CAAC,eAAe,EACpB,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,+CAA+C;YACxD,IAAI,EAAE,CAAC,iBAAiB,CAAC;SAC1B,CAAC,CAAA;IACJ,CAAC;IAED,IACE,IAAI,CAAC,QAAQ,KAAK,UAAU;QAC5B,IAAI,CAAC,OAAO,KAAK,YAAY;QAC7B,CAAC,IAAI,CAAC,EAAE;QACR,CAAC,IAAI,CAAC,IAAI,EACV,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,kCAAkC;YAC3C,IAAI,EAAE,CAAC,IAAI,CAAC;SACb,CAAC,CAAA;IACJ,CAAC;IAED,IACE,IAAI,CAAC,QAAQ,KAAK,UAAU;QAC5B,IAAI,CAAC,OAAO,KAAK,YAAY;QAC7B,IAAI,CAAC,QAAQ,KAAK,IAAI,EACtB,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,6BAA6B;YACtC,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAC,CAAA"}

package/build/validators/trust-tunnel.d.ts

@@ -0,0 +1,338 @@
+import { z } from 'zod';
+import { NodeTypeEnum } from '../types';
+export declare const TrustTunnelNodeConfigValidator: z.ZodEffects<z.ZodObject<{
+    nodeName: z.ZodString;
+    enable: z.ZodOptional<z.ZodBoolean>;
+    tfo: z.ZodOptional<z.ZodBoolean>;
+    mptcp: z.ZodOptional<z.ZodBoolean>;
+    ecn: z.ZodOptional<z.ZodBoolean>;
+    shadowTls: z.ZodOptional<z.ZodObject<{
+        version: z.ZodOptional<z.ZodEffects<z.ZodUnion<[z.ZodString, z.ZodNumber]>, string | number, string | number>>;
+        password: z.ZodString;
+        sni: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        password: string;
+        sni: string;
+        version?: string | number | undefined;
+    }, {
+        password: string;
+        sni: string;
+        version?: string | number | undefined;
+    }>>;
+    blockQuic: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"auto">, z.ZodLiteral<"on">, z.ZodLiteral<"off">]>>;
+    portHopping: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    portHoppingInterval: z.ZodOptional<z.ZodNumber>;
+    underlyingProxy: z.ZodOptional<z.ZodString>;
+    testUrl: z.ZodOptional<z.ZodString>;
+    testTimeout: z.ZodOptional<z.ZodNumber>;
+    surgeConfig: z.ZodOptional<z.ZodObject<{
+        resolveHostname: z.ZodOptional<z.ZodBoolean>;
+        vmessAEAD: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        resolveHostname?: boolean | undefined;
+        vmessAEAD?: boolean | undefined;
+    }, {
+        resolveHostname?: boolean | undefined;
+        vmessAEAD?: boolean | undefined;
+    }>>;
+    surfboardConfig: z.ZodOptional<z.ZodObject<{
+        vmessAEAD: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        vmessAEAD?: boolean | undefined;
+    }, {
+        vmessAEAD?: boolean | undefined;
+    }>>;
+    quantumultXConfig: z.ZodOptional<z.ZodObject<{
+        vmessAEAD: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        vmessAEAD?: boolean | undefined;
+    }, {
+        vmessAEAD?: boolean | undefined;
+    }>>;
+    clashConfig: z.ZodOptional<z.ZodObject<{
+        enableTuic: z.ZodOptional<z.ZodBoolean>;
+        enableShadowTls: z.ZodOptional<z.ZodBoolean>;
+        enableHysteria2: z.ZodOptional<z.ZodBoolean>;
+        enableVless: z.ZodOptional<z.ZodBoolean>;
+        clashCore: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"clash">, z.ZodLiteral<"clash.meta">, z.ZodLiteral<"stash">]>>;
+    }, "strip", z.ZodTypeAny, {
+        enableTuic?: boolean | undefined;
+        enableShadowTls?: boolean | undefined;
+        enableHysteria2?: boolean | undefined;
+        enableVless?: boolean | undefined;
+        clashCore?: "clash" | "clash.meta" | "stash" | undefined;
+    }, {
+        enableTuic?: boolean | undefined;
+        enableShadowTls?: boolean | undefined;
+        enableHysteria2?: boolean | undefined;
+        enableVless?: boolean | undefined;
+        clashCore?: "clash" | "clash.meta" | "stash" | undefined;
+    }>>;
+    hostnameIp: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString, "many">>>;
+    binPath: z.ZodOptional<z.ZodString>;
+    localPort: z.ZodOptional<z.ZodNumber>;
+    interfaceName: z.ZodOptional<z.ZodString>;
+    ipVersion: z.ZodOptional<z.ZodString>;
+    hostname: z.ZodString;
+    port: z.ZodEffects<z.ZodUnion<[z.ZodString, z.ZodNumber]>, string | number, string | number>;
+    tls13: z.ZodOptional<z.ZodBoolean>;
+    skipCertVerify: z.ZodOptional<z.ZodBoolean>;
+    sni: z.ZodOptional<z.ZodString>;
+    alpn: z.ZodOptional<z.ZodArray<z.ZodString, "atleastone">>;
+    serverCertFingerprintSha256: z.ZodOptional<z.ZodString>;
+    clientFingerprint: z.ZodOptional<z.ZodString>;
+} & {
+    type: z.ZodLiteral<NodeTypeEnum.TrustTunnel>;
+    username: z.ZodString;
+    password: z.ZodString;
+    quic: z.ZodOptional<z.ZodBoolean>;
+    udpRelay: z.ZodOptional<z.ZodBoolean>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    healthCheck: z.ZodOptional<z.ZodBoolean>;
+    nameCertVerify: z.ZodOptional<z.ZodString>;
+    congestionController: z.ZodOptional<z.ZodString>;
+    bbrProfile: z.ZodOptional<z.ZodEnum<["standard", "conservative", "aggressive"]>>;
+    maxConnections: z.ZodOptional<z.ZodNumber>;
+    minStreams: z.ZodOptional<z.ZodNumber>;
+    maxStreams: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    port: string | number;
+    type: NodeTypeEnum.TrustTunnel;
+    nodeName: string;
+    password: string;
+    hostname: string;
+    username: string;
+    enable?: boolean | undefined;
+    tfo?: boolean | undefined;
+    mptcp?: boolean | undefined;
+    ecn?: boolean | undefined;
+    sni?: string | undefined;
+    shadowTls?: {
+        password: string;
+        sni: string;
+        version?: string | number | undefined;
+    } | undefined;
+    blockQuic?: "auto" | "on" | "off" | undefined;
+    portHopping?: string | undefined;
+    portHoppingInterval?: number | undefined;
+    underlyingProxy?: string | undefined;
+    testUrl?: string | undefined;
+    testTimeout?: number | undefined;
+    surgeConfig?: {
+        resolveHostname?: boolean | undefined;
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    surfboardConfig?: {
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    quantumultXConfig?: {
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    clashConfig?: {
+        enableTuic?: boolean | undefined;
+        enableShadowTls?: boolean | undefined;
+        enableHysteria2?: boolean | undefined;
+        enableVless?: boolean | undefined;
+        clashCore?: "clash" | "clash.meta" | "stash" | undefined;
+    } | undefined;
+    hostnameIp?: readonly string[] | undefined;
+    binPath?: string | undefined;
+    localPort?: number | undefined;
+    interfaceName?: string | undefined;
+    ipVersion?: string | undefined;
+    tls13?: boolean | undefined;
+    skipCertVerify?: boolean | undefined;
+    alpn?: [string, ...string[]] | undefined;
+    serverCertFingerprintSha256?: string | undefined;
+    clientFingerprint?: string | undefined;
+    headers?: Record<string, string> | undefined;
+    udpRelay?: boolean | undefined;
+    quic?: boolean | undefined;
+    maxConnections?: number | undefined;
+    minStreams?: number | undefined;
+    maxStreams?: number | undefined;
+    congestionController?: string | undefined;
+    bbrProfile?: "standard" | "conservative" | "aggressive" | undefined;
+    healthCheck?: boolean | undefined;
+    nameCertVerify?: string | undefined;
+}, {
+    port: string | number;
+    type: NodeTypeEnum.TrustTunnel;
+    nodeName: string;
+    password: string;
+    hostname: string;
+    username: string;
+    enable?: boolean | undefined;
+    tfo?: boolean | undefined;
+    mptcp?: boolean | undefined;
+    ecn?: boolean | undefined;
+    sni?: string | undefined;
+    shadowTls?: {
+        password: string;
+        sni: string;
+        version?: string | number | undefined;
+    } | undefined;
+    blockQuic?: "auto" | "on" | "off" | undefined;
+    portHopping?: string | undefined;
+    portHoppingInterval?: number | undefined;
+    underlyingProxy?: string | undefined;
+    testUrl?: string | undefined;
+    testTimeout?: number | undefined;
+    surgeConfig?: {
+        resolveHostname?: boolean | undefined;
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    surfboardConfig?: {
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    quantumultXConfig?: {
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    clashConfig?: {
+        enableTuic?: boolean | undefined;
+        enableShadowTls?: boolean | undefined;
+        enableHysteria2?: boolean | undefined;
+        enableVless?: boolean | undefined;
+        clashCore?: "clash" | "clash.meta" | "stash" | undefined;
+    } | undefined;
+    hostnameIp?: readonly string[] | undefined;
+    binPath?: string | undefined;
+    localPort?: number | undefined;
+    interfaceName?: string | undefined;
+    ipVersion?: string | undefined;
+    tls13?: boolean | undefined;
+    skipCertVerify?: boolean | undefined;
+    alpn?: [string, ...string[]] | undefined;
+    serverCertFingerprintSha256?: string | undefined;
+    clientFingerprint?: string | undefined;
+    headers?: Record<string, string> | undefined;
+    udpRelay?: boolean | undefined;
+    quic?: boolean | undefined;
+    maxConnections?: number | undefined;
+    minStreams?: number | undefined;
+    maxStreams?: number | undefined;
+    congestionController?: string | undefined;
+    bbrProfile?: "standard" | "conservative" | "aggressive" | undefined;
+    healthCheck?: boolean | undefined;
+    nameCertVerify?: string | undefined;
+}>, {
+    port: string | number;
+    type: NodeTypeEnum.TrustTunnel;
+    nodeName: string;
+    password: string;
+    hostname: string;
+    username: string;
+    enable?: boolean | undefined;
+    tfo?: boolean | undefined;
+    mptcp?: boolean | undefined;
+    ecn?: boolean | undefined;
+    sni?: string | undefined;
+    shadowTls?: {
+        password: string;
+        sni: string;
+        version?: string | number | undefined;
+    } | undefined;
+    blockQuic?: "auto" | "on" | "off" | undefined;
+    portHopping?: string | undefined;
+    portHoppingInterval?: number | undefined;
+    underlyingProxy?: string | undefined;
+    testUrl?: string | undefined;
+    testTimeout?: number | undefined;
+    surgeConfig?: {
+        resolveHostname?: boolean | undefined;
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    surfboardConfig?: {
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    quantumultXConfig?: {
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    clashConfig?: {
+        enableTuic?: boolean | undefined;
+        enableShadowTls?: boolean | undefined;
+        enableHysteria2?: boolean | undefined;
+        enableVless?: boolean | undefined;
+        clashCore?: "clash" | "clash.meta" | "stash" | undefined;
+    } | undefined;
+    hostnameIp?: readonly string[] | undefined;
+    binPath?: string | undefined;
+    localPort?: number | undefined;
+    interfaceName?: string | undefined;
+    ipVersion?: string | undefined;
+    tls13?: boolean | undefined;
+    skipCertVerify?: boolean | undefined;
+    alpn?: [string, ...string[]] | undefined;
+    serverCertFingerprintSha256?: string | undefined;
+    clientFingerprint?: string | undefined;
+    headers?: Record<string, string> | undefined;
+    udpRelay?: boolean | undefined;
+    quic?: boolean | undefined;
+    maxConnections?: number | undefined;
+    minStreams?: number | undefined;
+    maxStreams?: number | undefined;
+    congestionController?: string | undefined;
+    bbrProfile?: "standard" | "conservative" | "aggressive" | undefined;
+    healthCheck?: boolean | undefined;
+    nameCertVerify?: string | undefined;
+}, {
+    port: string | number;
+    type: NodeTypeEnum.TrustTunnel;
+    nodeName: string;
+    password: string;
+    hostname: string;
+    username: string;
+    enable?: boolean | undefined;
+    tfo?: boolean | undefined;
+    mptcp?: boolean | undefined;
+    ecn?: boolean | undefined;
+    sni?: string | undefined;
+    shadowTls?: {
+        password: string;
+        sni: string;
+        version?: string | number | undefined;
+    } | undefined;
+    blockQuic?: "auto" | "on" | "off" | undefined;
+    portHopping?: string | undefined;
+    portHoppingInterval?: number | undefined;
+    underlyingProxy?: string | undefined;
+    testUrl?: string | undefined;
+    testTimeout?: number | undefined;
+    surgeConfig?: {
+        resolveHostname?: boolean | undefined;
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    surfboardConfig?: {
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    quantumultXConfig?: {
+        vmessAEAD?: boolean | undefined;
+    } | undefined;
+    clashConfig?: {
+        enableTuic?: boolean | undefined;
+        enableShadowTls?: boolean | undefined;
+        enableHysteria2?: boolean | undefined;
+        enableVless?: boolean | undefined;
+        clashCore?: "clash" | "clash.meta" | "stash" | undefined;
+    } | undefined;
+    hostnameIp?: readonly string[] | undefined;
+    binPath?: string | undefined;
+    localPort?: number | undefined;
+    interfaceName?: string | undefined;
+    ipVersion?: string | undefined;
+    tls13?: boolean | undefined;
+    skipCertVerify?: boolean | undefined;
+    alpn?: [string, ...string[]] | undefined;
+    serverCertFingerprintSha256?: string | undefined;
+    clientFingerprint?: string | undefined;
+    headers?: Record<string, string> | undefined;
+    udpRelay?: boolean | undefined;
+    quic?: boolean | undefined;
+    maxConnections?: number | undefined;
+    minStreams?: number | undefined;
+    maxStreams?: number | undefined;
+    congestionController?: string | undefined;
+    bbrProfile?: "standard" | "conservative" | "aggressive" | undefined;
+    healthCheck?: boolean | undefined;
+    nameCertVerify?: string | undefined;
+}>;

package/build/validators/trust-tunnel.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TrustTunnelNodeConfigValidator = void 0;
+const zod_1 = require("zod");
+const types_1 = require("../types");
+const common_1 = require("./common");
+exports.TrustTunnelNodeConfigValidator = common_1.TlsNodeConfigValidator.extend({
+    type: zod_1.z.literal(types_1.NodeTypeEnum.TrustTunnel),
+    username: zod_1.z.string(),
+    password: zod_1.z.string(),
+    quic: zod_1.z.oboolean(),
+    udpRelay: zod_1.z.oboolean(),
+    headers: zod_1.z.record(zod_1.z.string()).optional(),
+    healthCheck: zod_1.z.oboolean(),
+    nameCertVerify: zod_1.z.ostring(),
+    congestionController: zod_1.z.string().min(1).optional(),
+    bbrProfile: zod_1.z.enum(['standard', 'conservative', 'aggressive']).optional(),
+    maxConnections: zod_1.z.number().int().nonnegative().optional(),
+    minStreams: zod_1.z.number().int().nonnegative().optional(),
+    maxStreams: zod_1.z.number().int().nonnegative().optional(),
+}).superRefine((node, ctx) => {
+    const requiredAlpn = node.quic ? 'h3' : 'h2';
+    if (node.alpn && !node.alpn.includes(requiredAlpn)) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: `TrustTunnel ${node.quic ? 'QUIC' : 'HTTP/2'} 模式的 alpn 必须包含 ${requiredAlpn}`,
+            path: ['alpn'],
+        });
+    }
+    if (!node.quic &&
+        (node.portHopping || node.portHoppingInterval !== undefined)) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: 'TrustTunnel 仅在 QUIC 模式下支持端口跳跃',
+            path: ['portHopping'],
+        });
+    }
+    if (!node.quic &&
+        (node.congestionController !== undefined || node.bbrProfile !== undefined)) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: 'TrustTunnel 仅在 QUIC 模式下支持拥塞控制参数',
+            path: ['congestionController'],
+        });
+    }
+    if (node.quic && node.shadowTls) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: 'TrustTunnel QUIC 模式不支持 Shadow TLS',
+            path: ['shadowTls'],
+        });
+    }
+    if (node.maxStreams !== undefined &&
+        (node.maxConnections !== undefined || node.minStreams !== undefined)) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: 'TrustTunnel 的 maxStreams 不能与 maxConnections 或 minStreams 同时配置',
+            path: ['maxStreams'],
+        });
+    }
+});
+//# sourceMappingURL=trust-tunnel.js.map

package/build/validators/trust-tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-tunnel.js","sourceRoot":"","sources":["../../src/validators/trust-tunnel.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AAEvB,oCAAuC;AAEvC,qCAAiD;AAEpC,QAAA,8BAA8B,GAAG,+BAAsB,CAAC,MAAM,CAAC;IAC1E,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,oBAAY,CAAC,WAAW,CAAC;IACzC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,OAAC,CAAC,QAAQ,EAAE;IAClB,QAAQ,EAAE,OAAC,CAAC,QAAQ,EAAE;IACtB,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,OAAC,CAAC,QAAQ,EAAE;IACzB,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE;IAC3B,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClD,UAAU,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzE,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACrD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAE5C,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,eACP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QACvB,kBAAkB,YAAY,EAAE;YAChC,IAAI,EAAE,CAAC,MAAM,CAAC;SACf,CAAC,CAAA;IACJ,CAAC;IAED,IACE,CAAC,IAAI,CAAC,IAAI;QACV,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,EAC5D,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,+BAA+B;YACxC,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAA;IACJ,CAAC;IAED,IACE,CAAC,IAAI,CAAC,IAAI;QACV,CAAC,IAAI,CAAC,oBAAoB,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,EAC1E,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,iCAAiC;YAC1C,IAAI,EAAE,CAAC,sBAAsB,CAAC;SAC/B,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,mCAAmC;YAC5C,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAA;IACJ,CAAC;IAED,IACE,IAAI,CAAC,UAAU,KAAK,SAAS;QAC7B,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,EACpE,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EACL,+DAA+D;YACjE,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "surgio",
   "description": "Generating rules for Surge, Clash, Quantumult like a PRO",
-  "version": "3.18.0",
+  "version": "3.19.0",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "bin": {