ysk-server-core 1.0.0

package/dist/net/ip.js

@@ -0,0 +1,326 @@
+/**
+ * Dual-stack IP utilities — single source of truth for IPv4 + IPv6.
+ * Prefer Node `net.isIP` / `net.BlockList`; no third-party IP libs.
+ */
+import { isIP, BlockList } from 'node:net';
+/** Reject zone-id (fe80::1%eth0) and empty. */
+function stripAndRejectZone(raw) {
+    const s = raw.trim();
+    if (!s || s.includes('%'))
+        return null;
+    // Strip optional surrounding brackets used in URLs: [2001:db8::1]
+    if (s.startsWith('[') && s.endsWith(']')) {
+        const inner = s.slice(1, -1);
+        if (!inner || inner.includes('%'))
+            return null;
+        return inner;
+    }
+    return s;
+}
+/**
+ * IPv4-mapped IPv6 → plain IPv4 (e.g. ::ffff:203.0.113.1 → 203.0.113.1).
+ */
+function unmapV4Mapped(ip) {
+    const lower = ip.toLowerCase();
+    if (lower.startsWith('::ffff:')) {
+        const rest = ip.slice(7);
+        if (isIP(rest) === 4)
+            return rest;
+        // dotted form after ::ffff: already handled; hex form ::ffff:c000:0201 rare — leave to isIP
+    }
+    return ip;
+}
+export function ipFamily(ip) {
+    const s = stripAndRejectZone(ip);
+    if (!s)
+        return 0;
+    const n = isIP(unmapV4Mapped(s));
+    return n === 4 || n === 6 ? n : 0;
+}
+export function isValidIp(ip) {
+    return ipFamily(ip) !== 0;
+}
+/**
+ * Normalize for storage / comparison.
+ * - trims, strips []
+ * - rejects zone id
+ * - unmaps IPv4-mapped IPv6
+ * - lowercases IPv6 hex (Node does not expand; equality uses BlockList / family-aware compare)
+ */
+export function normalizeIp(ip) {
+    const s = stripAndRejectZone(ip);
+    if (!s)
+        return null;
+    const unmapped = unmapV4Mapped(s);
+    const fam = isIP(unmapped);
+    if (fam === 4)
+        return unmapped;
+    if (fam === 6)
+        return unmapped.toLowerCase();
+    return null;
+}
+export function isValidCidr(cidr) {
+    return normalizeIpOrCidr(cidr) !== null && cidr.trim().includes('/');
+}
+export function isValidIpOrCidr(s) {
+    return normalizeIpOrCidr(s) !== null;
+}
+/**
+ * Normalize IP or CIDR. Returns `addr` or `addr/prefix` or null.
+ */
+export function normalizeIpOrCidr(raw) {
+    const s = stripAndRejectZone(raw);
+    if (!s)
+        return null;
+    if (!s.includes('/')) {
+        return normalizeIp(s);
+    }
+    const slash = s.lastIndexOf('/');
+    const base = s.slice(0, slash);
+    const bitsStr = s.slice(slash + 1);
+    if (!/^\d{1,3}$/.test(bitsStr))
+        return null;
+    const bits = Number(bitsStr);
+    const normBase = normalizeIp(base);
+    if (!normBase)
+        return null;
+    const fam = isIP(normBase);
+    if (fam === 4) {
+        if (bits < 0 || bits > 32)
+            return null;
+        return `${normBase}/${bits}`;
+    }
+    if (fam === 6) {
+        if (bits < 0 || bits > 128)
+            return null;
+        return `${normBase}/${bits}`;
+    }
+    return null;
+}
+function ipv4ToInt(ip) {
+    return ip.split('.').reduce((a, o) => (a << 8) + Number(o), 0) >>> 0;
+}
+function ipv4InCidr(ip, base, bits) {
+    if (bits === 0)
+        return true;
+    const mask = bits === 32 ? 0xffffffff : (~0 << (32 - bits)) >>> 0;
+    return (ipv4ToInt(ip) & mask) === (ipv4ToInt(base) & mask);
+}
+/** Expand IPv6 to 8×16-bit groups (for CIDR mask when BlockList fails). */
+function ipv6ToGroups(ip) {
+    // Use URL parser trick: new URL('http://[ip]/') 
+    // Prefer manual expand for compressed forms
+    let s = ip.toLowerCase();
+    if (s.startsWith('[') && s.endsWith(']'))
+        s = s.slice(1, -1);
+    if (s.includes('.')) {
+        // v4-mapped already unmapped before call
+        return null;
+    }
+    const halves = s.split('::');
+    if (halves.length > 2)
+        return null;
+    const left = halves[0] ? halves[0].split(':').filter(Boolean) : [];
+    const right = halves.length === 2 && halves[1] ? halves[1].split(':').filter(Boolean) : [];
+    if (halves.length === 1) {
+        if (left.length !== 8)
+            return null;
+    }
+    else {
+        const missing = 8 - left.length - right.length;
+        if (missing < 0)
+            return null;
+        const mid = Array.from({ length: missing }, () => '0');
+        const full = [...left, ...mid, ...right];
+        if (full.length !== 8)
+            return null;
+        return full.map((g) => {
+            const n = parseInt(g, 16);
+            return Number.isFinite(n) && n >= 0 && n <= 0xffff ? n : -1;
+        }).every((n) => n >= 0)
+            ? full.map((g) => parseInt(g, 16))
+            : null;
+    }
+    const nums = left.map((g) => parseInt(g, 16));
+    if (nums.some((n) => !Number.isFinite(n) || n < 0 || n > 0xffff))
+        return null;
+    return nums;
+}
+function ipv6GroupsToBigInt(groups) {
+    let x = 0n;
+    for (const g of groups) {
+        x = (x << 16n) + BigInt(g);
+    }
+    return x;
+}
+function ipv6InCidr(ip, base, bits) {
+    if (bits === 0)
+        return true;
+    const ig = ipv6ToGroups(ip);
+    const bg = ipv6ToGroups(base);
+    if (!ig || !bg) {
+        // Fallback: BlockList
+        try {
+            const bl = new BlockList();
+            bl.addSubnet(base, bits, 'ipv6');
+            return bl.check(ip, 'ipv6');
+        }
+        catch {
+            return false;
+        }
+    }
+    const mask = bits >= 128 ? (1n << 128n) - 1n : ((1n << BigInt(bits)) - 1n) << BigInt(128 - bits);
+    const a = ipv6GroupsToBigInt(ig);
+    const b = ipv6GroupsToBigInt(bg);
+    return (a & mask) === (b & mask);
+}
+export function ipInCidr(ip, cidr) {
+    const nIp = normalizeIp(ip);
+    const nCidr = normalizeIpOrCidr(cidr);
+    if (!nIp || !nCidr || !nCidr.includes('/'))
+        return false;
+    const slash = nCidr.lastIndexOf('/');
+    const base = nCidr.slice(0, slash);
+    const bits = Number(nCidr.slice(slash + 1));
+    const famIp = isIP(nIp);
+    const famBase = isIP(base);
+    if (!famIp || famIp !== famBase)
+        return false;
+    if (famIp === 4)
+        return ipv4InCidr(nIp, base, bits);
+    return ipv6InCidr(nIp, base, bits);
+}
+/**
+ * Exact match (normalized) or CIDR membership.
+ */
+export function ipMatchesList(ip, list) {
+    const nIp = normalizeIp(ip);
+    if (!nIp)
+        return false;
+    for (const raw of list) {
+        const rule = normalizeIpOrCidr(raw);
+        if (!rule)
+            continue;
+        if (!rule.includes('/')) {
+            if (rule === nIp)
+                return true;
+            continue;
+        }
+        if (ipInCidr(nIp, rule))
+            return true;
+    }
+    return false;
+}
+export function isPrivateOrLocalIp(ip) {
+    const n = normalizeIp(ip);
+    if (!n)
+        return false;
+    const fam = isIP(n);
+    if (fam === 4) {
+        if (n === '0.0.0.0' || n === '127.0.0.1')
+            return true;
+        if (n.startsWith('10.') || n.startsWith('192.168.') || n.startsWith('169.254.'))
+            return true;
+        if (n.startsWith('127.'))
+            return true;
+        const m = /^172\.(\d+)\./.exec(n);
+        if (m) {
+            const o = Number(m[1]);
+            if (o >= 16 && o <= 31)
+                return true;
+        }
+        return false;
+    }
+    if (fam === 6) {
+        if (n === '::1' || n === '::')
+            return true;
+        // link-local fe80::/10
+        if (n.startsWith('fe8') || n.startsWith('fe9') || n.startsWith('fea') || n.startsWith('feb'))
+            return true;
+        // ULA fc00::/7 → fc… / fd…
+        if (n.startsWith('fc') || n.startsWith('fd'))
+            return true;
+        // Unique local and loopback already; also IPv4-mapped private handled via unmap
+        return false;
+    }
+    return false;
+}
+const IPV4_RE = /\b((?:\d{1,3}\.){3}\d{1,3})\b/g;
+/**
+ * Extract IPs from a log line. Prefers leading field (nginx combined).
+ * Validates with isIP; skips obvious non-addresses.
+ */
+export function extractIpsFromText(line) {
+    const found = [];
+    const seen = new Set();
+    const push = (raw) => {
+        const n = normalizeIp(raw);
+        if (!n || seen.has(n))
+            return;
+        // skip 0.x noise sometimes
+        if (n.startsWith('0.'))
+            return;
+        seen.add(n);
+        found.push(n);
+    };
+    // Leading token (common for access logs)
+    const lead = line.match(/^(\S+)/);
+    if (lead) {
+        const t = lead[1].replace(/^\[|\]$/g, '');
+        if (isValidIp(t))
+            push(t);
+    }
+    // All IPv4
+    let m;
+    const re4 = new RegExp(IPV4_RE.source, 'g');
+    while ((m = re4.exec(line)) !== null) {
+        if (isIP(m[1]) === 4)
+            push(m[1]);
+    }
+    // IPv6 candidates: sequences with colons (not timestamps alone)
+    // Match compressed/full hex groups
+    const re6 = /(?:^|[\s\[,;"])((?:[0-9a-fA-F]{0,4}:){2,7}[0-9a-fA-F]{0,4}|::1|::)(?=[\s\],;"]|$)/g;
+    while ((m = re6.exec(line)) !== null) {
+        const cand = m[1];
+        if (cand.includes('.') && !cand.toLowerCase().includes('::ffff:'))
+            continue;
+        if (isIP(cand) === 6)
+            push(cand);
+    }
+    return found;
+}
+/** First non-private IPv4/IPv6 from line (for ban deep-link). */
+export function extractIpFromLogLine(line) {
+    for (const ip of extractIpsFromText(line)) {
+        if (!isPrivateOrLocalIp(ip))
+            return ip;
+    }
+    return null;
+}
+/**
+ * DNSBL reverse name (RFC 5782 for IPv6 nibble form).
+ * IPv4: 1.2.3.4 → 4.3.2.1
+ * IPv6: expand to 32 nibbles reversed.
+ */
+export function reverseDnsblName(ip) {
+    const n = normalizeIp(ip);
+    if (!n)
+        return null;
+    if (isIP(n) === 4) {
+        return n.split('.').reverse().join('.');
+    }
+    if (isIP(n) === 6) {
+        const groups = ipv6ToGroups(n);
+        if (!groups)
+            return null;
+        const nibbles = [];
+        for (const g of groups) {
+            const hex = g.toString(16).padStart(4, '0');
+            for (const ch of hex)
+                nibbles.push(ch);
+        }
+        return nibbles.reverse().join('.');
+    }
+    return null;
+}
+//# sourceMappingURL=ip.js.map

package/dist/net/ip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip.js","sourceRoot":"","sources":["../../src/net/ip.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAI3C,+CAA+C;AAC/C,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,kEAAkE;IAClE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/B,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,4FAA4F;IAC9F,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,EAAU;IACjC,MAAM,CAAC,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjB,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,OAAO,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,MAAM,CAAC,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,GAAG,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/B,IAAI,GAAG,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,OAAO,iBAAiB,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QACvC,OAAO,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,UAAU,CAAC,EAAU,EAAE,IAAY,EAAE,IAAY;IACxD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IAClE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,EAAU;IAC9B,iDAAiD;IACjD,4CAA4C;IAC5C,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACzB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,yCAAyC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/C,IAAI,OAAO,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAgB;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,EAAU,EAAE,IAAY,EAAE,IAAY;IACxD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC5B,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACf,sBAAsB;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,SAAS,EAAE,CAAC;YAC3B,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACjC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GACR,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACtF,MAAM,CAAC,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,EAAU,EAAE,IAAY;IAC/C,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,EAAU,EAAE,IAAc;IACtD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,IAAI,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QACtD,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7F,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE,CAAC;YACN,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAC;QACtC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3C,uBAAuB;QACvB,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YAC1F,OAAO,IAAI,CAAC;QACd,2BAA2B;QAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,gFAAgF;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,GAAG,gCAAgC,CAAC;AAEjD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;QAC3B,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO;QAC9B,2BAA2B;QAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC,CAAC;IAEF,yCAAyC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,SAAS,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAED,WAAW;IACX,IAAI,CAAyB,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,gEAAgE;IAChE,mCAAmC;IACnC,MAAM,GAAG,GACP,oFAAoF,CAAC;IACvF,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QAC5E,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,KAAK,MAAM,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5C,KAAK,MAAM,EAAE,IAAI,GAAG;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/net/network-apply.d.ts

@@ -0,0 +1,73 @@
+import type { HostExecutor } from '../host/executor.js';
+import type { NetApplyResult } from './network-types.js';
+export declare function networkAddAddr(input: {
+    host: HostExecutor;
+    ifname: string;
+    cidr: string;
+    /** Save to NetworkManager profile (reboot-safe) */
+    persistent?: boolean;
+}): Promise<NetApplyResult>;
+export declare function networkDelAddr(input: {
+    host: HostExecutor;
+    ifname: string;
+    cidr: string;
+    /** Also remove from NM profile */
+    persistent?: boolean;
+}): Promise<NetApplyResult>;
+export declare function networkSetLink(input: {
+    host: HostExecutor;
+    ifname: string;
+    action?: 'up' | 'down';
+    mtu?: number;
+    /** required when down on default egress or any down */
+    confirmName?: string;
+    isDefaultEgress?: boolean;
+}): Promise<NetApplyResult>;
+/**
+ * Add route. persistent=true → NetworkManager connection (survives reboot).
+ */
+export declare function networkAddRoute(input: {
+    host: HostExecutor;
+    dst: string;
+    gateway?: string;
+    dev?: string;
+    confirmDefault?: boolean;
+    /** Save to NM connection profile (reboot-safe) */
+    persistent?: boolean;
+}): Promise<NetApplyResult>;
+export declare function networkDelRoute(input: {
+    host: HostExecutor;
+    dst: string;
+    gateway?: string;
+    dev?: string;
+    confirmDefault?: boolean;
+    /** Also remove from NM profile when possible */
+    persistent?: boolean;
+}): Promise<NetApplyResult>;
+/**
+ * Set IPv4 DNS on active NetworkManager connection (persistent) + re-up.
+ * mode=dhcp restores auto DNS from DHCP.
+ */
+export declare function networkSetDns(input: {
+    host: HostExecutor;
+    /** Explicit servers; empty + mode dhcp clears static DNS */
+    nameservers?: string[];
+    search?: string[];
+    /** nm connection id; auto-detect if omitted */
+    connection?: string;
+    /** Prefer device when auto-picking connection */
+    device?: string;
+    /**
+     * static = set ipv4.dns + ignore-auto-dns yes
+     * dhcp = clear ipv4.dns + ignore-auto-dns no
+     */
+    mode?: 'static' | 'dhcp';
+}): Promise<NetApplyResult>;
+/** Resolve a name via getent — honest connectivity check */
+export declare function networkTestDns(input: {
+    host: HostExecutor;
+    name?: string;
+}): Promise<NetApplyResult & {
+    answers?: string[];
+}>;
+//# sourceMappingURL=network-apply.d.ts.map

package/dist/net/network-apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-apply.d.ts","sourceRoot":"","sources":["../../src/net/network-apply.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AA2BzD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CA2G1B;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CAoE1B;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC,cAAc,CAAC,CAsF1B;AAiCD;;GAEG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,IAAI,EAAE,YAAY,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kDAAkD;IAClD,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CA+I1B;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,IAAI,EAAE,YAAY,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gDAAgD;IAChD,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CAqG1B;AAqBD;;;GAGG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE;IACzC,IAAI,EAAE,YAAY,CAAC;IACnB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,cAAc,CAAC,CAwI1B;AAED,4DAA4D;AAC5D,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,cAAc,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA+BnD"}