op-packages/luci-app-hijpass/htdocs/luci-static/resources/view/hijpass/firewall.js

'use strict';
'require form';
'require fs';
'require network';
'require uci';
'require ui';
'require view';

var LuciView=(()=>{var zt=Object.defineProperty;var tr=Object.getOwnPropertyDescriptor;var er=Object.getOwnPropertyNames;var rr=Object.prototype.hasOwnProperty;var nr=(e,t)=>{for(var r in t)zt(e,r,{get:t[r],enumerable:!0})},sr=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of er(t))!rr.call(e,s)&&s!==r&&zt(e,s,{get:()=>t[s],enumerable:!(n=tr(t,s))||n.enumerable});return e};var or=e=>sr(zt({},"__esModule",{value:!0}),e);var Hn={};nr(Hn,{default:()=>Gn});var we=view;var a=uci;var m={CUSTOM:"custom",LOAD_BALANCE:"load_balance",HYSTERIA2:"hysteria2",SHADOWSOCKS:"shadowsocks",TUIC:"tuic",SHADOWTLS:"shadowtls",VLESS:"vless"},y={XRAY:"xray",SING_BOX:"sing-box",CUSTOM:"custom"},U={NONE:"none",PRE_ROUTING:"pre-routing",ROUTING:"routing"};function M(e){let t=(e||"").trim();return t==="singbox"?y.SING_BOX:t}var Wn={[y.XRAY]:[m.SHADOWSOCKS,m.HYSTERIA2,m.VLESS],[y.SING_BOX]:[m.SHADOWSOCKS,m.HYSTERIA2,m.VLESS,m.TUIC,m.SHADOWTLS]},zn={DNS_STRATEGY_VALUES:[{label:"Prefer IPv6 (sing-box only, xray uses dual stack by default)",value:"64"},{label:"Prefer IPv4 (sing-box only, xray uses dual stack by default)",value:"46"},{label:"IPv6 only",value:"6"},{label:"IPv4 only",value:"4"}],SHUNT_LOG_LEVELS:["info","warn","error","debug"],PROXY_LOG_LEVELS:["info","warn","error","debug"],SHUNT_CONF_TYPE:[y.XRAY,y.SING_BOX],PROXY_TYPES:[{label:"Load Balancing",value:"load_balance"},{label:"Shadowsocks",value:"shadowsocks"},{label:"Hysteria2",value:"hysteria2"},{label:"VLESS",value:"vless"},{label:"TUIC",value:"tuic"},{label:"ShadowTLS",value:"shadowtls"}],SHADOWSOCKS_METHODS:[{label:"2022-blake3-aes-128-gcm",value:"2022-blake3-aes-128-gcm"},{label:"2022-blake3-aes-256-gcm",value:"2022-blake3-aes-256-gcm"},{label:"2022-blake3-chacha20-poly1305",value:"2022-blake3-chacha20-poly1305"},{label:"aes-128-gcm",value:"aes-128-gcm"},{label:"aes-192-gcm",value:"aes-192-gcm"},{label:"aes-256-gcm",value:"aes-256-gcm"},{label:"chacha20-ietf-poly1305",value:"chacha20-ietf-poly1305"},{label:"xchacha20-ietf-poly1305",value:"xchacha20-ietf-poly1305"}],MULTIPLEX_PROTOCOLS:[{label:"smux",value:"smux"},{label:"yamux",value:"yamux"},{label:"h2mux",value:"h2mux"}],TUIC_CONGESTION_CONTROLS:[{label:"cubic",value:"cubic"},{label:"new_reno",value:"new_reno"},{label:"bbr",value:"bbr"}],TUIC_UDP_RELAY_MODES:[{label:"Native UDP",value:"native"},{label:"QUIC Stream",value:"quic"}],SHADOWTLS_VERSIONS:[{label:"v1",value:"1"},{label:"v2",value:"2"},{label:"v3",value:"3"}],VLESS_FLOWS:[{label:"None",value:""},{label:"xtls-rprx-vision",value:"xtls-rprx-vision"},{label:"xtls-rprx-vision-udp443",value:"xtls-rprx-vision-udp443"}],VLESS_PACKET_ENCODINGS:[{label:"Disabled",value:""},{label:"packetaddr",value:"packetaddr"},{label:"xudp",value:"xudp"}],V2RAY_TRANSPORT_TYPES_XRAY:[{label:"None",value:""},{label:"HTTP",value:"http"},{label:"WebSocket",value:"ws"},{label:"gRPC",value:"grpc"},{label:"HTTPUpgrade",value:"httpupgrade"},{label:"XHTTP",value:"xhttp"}],HYSTERIA2_OBFS_TYPES:[{label:"Disabled",value:""},{label:"Salamander",value:"salamander"}],DUAL_CORES:[{label:"sing-box",value:y.SING_BOX},{label:"xray",value:y.XRAY},{label:"Custom",value:y.CUSTOM}]};var b=form;var O=fs;var G=ui;var W=class{disabled;level;timestamp;constructor(t){this.disabled=!1,this.level=t||"info",this.timestamp=!0}},rt=class{type;tag;server;server_port;detour;constructor(t,r,n,s,o){this.type=t,this.tag=r,this.server=n,this.server_port=Number.isFinite(s)&&s>0?s:void 0,this.detour=o==="direct-out"?void 0:o}},pt=class{servers;rules;strategy;disable_cache;disable_expire;final;constructor(t,r,n){this.servers=[],this.rules=[],this.strategy=r||"prefer_ipv6",this.disable_cache=!n,this.disable_expire=!n,this.final=t}},ct=class{action;outbound;constructor(t,r){this.action=t,this.outbound=r}},z=class extends ct{ip_version;protocol;port;port_range;domain;domain_suffix;domain_keyword;domain_regex;rule_set;ip_cidr;network;constructor(t,r){super(t,r)}initRule(t){return this.ip_version=t.ipVersion,this.network=t.network,this.protocol=t.protocol,this.port=t.port,this.port_range=t.portRange.map(r=>r.replace("-",":")),this.domain=t.domain,this.domain_suffix=t.domainSuffix,this.domain_keyword=t.domainKeyword,this.domain_regex=t.domainRegex,this.rule_set=t.ruleSet.map(r=>r.tag),this.ip_cidr=t.ipCidr,this}},dt=class extends ct{domain;domain_keyword;domain_regex;domain_suffix;rule_set;server;strategy;disable_cache;disable_expire;constructor(t,r,n){super(t,void 0),this.action=t,this.server=r,this.strategy=n,this.disable_cache=!0}initRule(t){return this.domain=t.domain,this.domain_suffix=t.domainSuffix,this.domain_keyword=t.domainKeyword,this.domain_regex=t.domainRegex,this.rule_set=t.ruleSet.map(r=>r.tag),this}},Kt=class extends z{constructor(){super("sniff",void 0)}},qt=class extends z{constructor(){super("hijack-dns",void 0),this.protocol=["dns"]}},gt=class{type;tag;format;constructor(t,r,n){this.type=r,this.tag=t,this.format=n}},_t=class extends gt{url;http_client;update_interval;constructor(t,r,n,s,o){super(t,"remote",r),this.url=n,s&&(this.http_client=new $t(s)),this.update_interval=o}},$t=class{detour;constructor(t){this.detour=t}},ft=class extends gt{path;constructor(t,r,n){super(t,"local",r),this.path=n}},mt=class{rules;rule_set;default_domain_resolver;final;constructor(t,r){this.rules=[new Kt,new qt],this.rule_set=[],this.default_domain_resolver=r,this.final=t}},K=class{type="tproxy";tag;listen;listen_port;constructor(t,r,n){this.tag=r,this.listen=n??"::",this.listen_port=t}},ht=class{type="direct";tag;listen;listen_port;constructor(t,r){this.tag=r,this.listen="::",this.listen_port=t}},nt=class{type="socks";tag;listen;listen_port;users;constructor(t,r,n){this.tag=r,this.listen=n??"::",this.listen_port=t}},yt=class{type="block";tag;constructor(t){this.tag=t}},bt=class{type="direct";tag;domain_resolver;constructor(t){this.tag=t}},xt=class{type="urltest";tag;url;interval;tolerance;idle_timeout;interrupt_exist_connections;outbounds;constructor(t,r,n,s,o,i){this.tag=t,this.outbounds=[],this.url=r,this.interval=n,this.tolerance=s,this.idle_timeout=o,this.interrupt_exist_connections=i}},q=class{type="socks";tag;server;server_port;version="5";domain_resolver;constructor(t,r,n){this.tag=n,this.server=t,this.server_port=r,this.version="5"}},k=class{enabled;server_name;insecure;reality;constructor(t){this.enabled=!0,this.server_name=t}},$=class{enabled;up_mbps;down_mbps;constructor(){this.enabled=!0}},J=class{enabled;protocol;max_connections;min_streams;max_streams;brutal;constructor(){this.enabled=!0}};var Jt=class{protocols=new Map;register(t){this.protocols.set(t.type,t)}build(t,r){let n=this.protocols.get(t);if(!n)throw new Error(`Unsupported sing-box protocol: ${t}`);return n.build(r)}},R=new Jt;var Zt=class{type;password;constructor(t){this.type="salamander",this.password=t}},Qt=class{type="hysteria2";tag;server;server_port;password;obfs;up_mbps;down_mbps;server_ports;hop_interval;network;tls;constructor(t,r,n,s){this.tag=t,this.server=r,this.server_port=n,this.tls=new k(s)}},ar={type:"hysteria2",build(e){let t=e,r=new Qt(t.name,t.server,parseInt(t.server_port),t.tls_server_name||t.server);return t.password&&(r.password=t.password),t.up_mbps&&(r.up_mbps=Number(t.up_mbps)),t.down_mbps&&(r.down_mbps=Number(t.down_mbps)),t.server_ports&&t.server_ports.length>0&&(r.server_ports=t.server_ports.map(n=>n.replace("-",":")).filter(n=>n.length>0)),t.hop_interval&&(r.hop_interval=t.hop_interval),t.network&&(r.network=t.network),t.obfs_type==="salamander"&&t.obfs_password&&(r.obfs=new Zt(t.obfs_password)),r.tls.insecure=t.tls_insecure==="1",r}};R.register(ar);var te=class{type="shadowsocks";tag;server;server_port;method;password;network;udp_over_tcp;plugin;plugin_opts;multiplex;constructor(t,r,n,s,o){this.tag=t,this.server=r,this.server_port=n,this.method=s,this.password=o}};function lr(e){let t=new J;if(e.multiplex_protocol&&(t.protocol=e.multiplex_protocol),e.multiplex_max_connections&&(t.max_connections=parseInt(e.multiplex_max_connections)),e.multiplex_min_streams&&(t.min_streams=parseInt(e.multiplex_min_streams)),e.multiplex_max_streams&&(t.max_streams=parseInt(e.multiplex_max_streams)),e.multiplex_brutal_enabled==="1"){let r=new $;e.multiplex_brutal_up_mbps&&(r.up_mbps=parseInt(e.multiplex_brutal_up_mbps)),e.multiplex_brutal_down_mbps&&(r.down_mbps=parseInt(e.multiplex_brutal_down_mbps)),t.brutal=r}return t}var ur={type:"shadowsocks",build(e){let t=e,r=new te(t.name,t.server,parseInt(t.server_port),t.method,t.password);return t.network&&(r.network=t.network),t.udp_over_tcp==="1"&&(r.udp_over_tcp=!0),t.plugin&&(r.plugin=t.plugin),t.plugin_opts&&(r.plugin_opts=t.plugin_opts),t.multiplex_enabled==="1"&&(r.multiplex=lr(t)),r}};R.register(ur);var ee=class{type="vless";tag;server;server_port;uuid;flow;network;packet_encoding;tls;transport;multiplex;constructor(t,r,n,s,o){this.tag=t,this.server=r,this.server_port=n,this.uuid=s,this.tls=new k(o)}};function pr(e){switch(e.transport_type){case"http":{let t={type:"http"};return e.transport_http_host&&(t.host=e.transport_http_host),e.transport_http_path&&(t.path=e.transport_http_path),e.transport_http_method&&(t.method=e.transport_http_method),e.transport_http_idle_timeout&&(t.idle_timeout=e.transport_http_idle_timeout),e.transport_http_ping_timeout&&(t.ping_timeout=e.transport_http_ping_timeout),t}case"ws":{let t={type:"ws"};return e.transport_ws_path&&(t.path=e.transport_ws_path),e.transport_ws_host&&(t.headers={Host:e.transport_ws_host}),e.transport_ws_max_early_data&&(t.max_early_data=parseInt(e.transport_ws_max_early_data)),e.transport_ws_early_data_header_name&&(t.early_data_header_name=e.transport_ws_early_data_header_name),t}case"grpc":{let t={type:"grpc"};return e.transport_grpc_service_name&&(t.service_name=e.transport_grpc_service_name),e.transport_grpc_idle_timeout&&(t.idle_timeout=e.transport_grpc_idle_timeout),e.transport_grpc_ping_timeout&&(t.ping_timeout=e.transport_grpc_ping_timeout),e.transport_grpc_permit_without_stream==="1"&&(t.permit_without_stream=!0),t}case"httpupgrade":{let t={type:"httpupgrade"};return e.transport_httpupgrade_host&&(t.host=e.transport_httpupgrade_host),e.transport_httpupgrade_path&&(t.path=e.transport_httpupgrade_path),t}default:return}}function cr(e){let t=new J;if(e.multiplex_protocol&&(t.protocol=e.multiplex_protocol),e.multiplex_max_connections&&(t.max_connections=parseInt(e.multiplex_max_connections)),e.multiplex_min_streams&&(t.min_streams=parseInt(e.multiplex_min_streams)),e.multiplex_max_streams&&(t.max_streams=parseInt(e.multiplex_max_streams)),e.multiplex_brutal_enabled==="1"){let r=new $;e.multiplex_brutal_up_mbps&&(r.up_mbps=parseInt(e.multiplex_brutal_up_mbps)),e.multiplex_brutal_down_mbps&&(r.down_mbps=parseInt(e.multiplex_brutal_down_mbps)),t.brutal=r}return t}var dr={type:"vless",build(e){let t=e,r=new ee(t.name,t.server,parseInt(t.server_port),t.uuid,t.tls_server_name||t.server);return t.flow&&(r.flow=t.flow),t.network&&(r.network=t.network),t.packet_encoding&&(r.packet_encoding=t.packet_encoding),r.tls.insecure=t.tls_insecure==="1",t.tls_reality_enabled==="1"&&t.tls_reality_public_key&&(r.tls.reality={enabled:!0,public_key:t.tls_reality_public_key,short_id:t.tls_reality_short_id||""}),t.transport_type&&(r.transport=pr(t)),t.multiplex_enabled==="1"&&(r.multiplex=cr(t)),r}};R.register(dr);var re=class{type="tuic";tag;server;server_port;uuid;password;congestion_control;udp_relay_mode;udp_over_stream;zero_rtt_handshake;heartbeat;network;tls;constructor(t,r,n,s,o,i){this.tag=t,this.server=r,this.server_port=n,this.uuid=s,this.password=o,this.tls=new k(i)}},gr={type:"tuic",build(e){let t=e,r=new re(t.name,t.server,parseInt(t.server_port),t.uuid,t.password,t.tls_server_name||t.server);return t.congestion_control&&(r.congestion_control=t.congestion_control),t.udp_relay_mode&&(r.udp_relay_mode=t.udp_relay_mode),t.udp_over_stream==="1"&&(r.udp_over_stream=!0),t.zero_rtt_handshake==="1"&&(r.zero_rtt_handshake=!0),t.heartbeat&&(r.heartbeat=t.heartbeat),t.network&&(r.network=t.network),r.tls.insecure=t.tls_insecure==="1",r}};R.register(gr);var ne=class{type="shadowtls";tag;server;server_port;version;password;tls;constructor(t,r,n,s,o){this.tag=t,this.server=r,this.server_port=n,this.version=s,this.tls=new k(o)}},_r={type:"shadowtls",build(e){let t=e,r=new ne(t.name,t.server,parseInt(t.server_port),parseInt(t.version),t.tls_server_name||t.server);return t.password&&(r.password=t.password),r.tls.insecure=t.tls_insecure==="1",r}};R.register(_r);var Nt=class{tag;type;server;port},St=class{defaultDnsNode;defaultStrategy;rulesetDnsNode;useCache;nodes;constructor(){this.nodes=[]}},Z=class{enabled;name;proxyNode;ipVersionSplit;proxyNodeV4;proxyNodeV6;protocol;network;port;portRange;domainList;ipList;dnsNode;dnsProxyNode;dnsStrategy;constructor(){this.port=[],this.portRange=[],this.network=[],this.protocol=[],this.ipVersionSplit="0"}},Tt=class{defaultProxyNode;rulesetOutNode;rulesetConvert;rules;constructor(){this.rules=[]}},wt=class{type;configType;shuntListenPort;dnsListenPort;logLevel;logPath;route;dns},Ot=class{domain;domainRegex;domainKeyword;domainSuffix;ipCidr;network;protocol;port;portRange;ipVersion;ruleSet;geoIp;geoSite;constructor(){this.domain=[],this.domainRegex=[],this.domainKeyword=[],this.domainSuffix=[],this.ruleSet=[],this.ipCidr=[],this.geoIp=[],this.geoSite=[],this.network=[],this.protocol=[],this.port=[],this.portRange=[]}containDomain(){return this.domain.length>0||this.domainRegex.length>0||this.domainSuffix.length>0||this.domainKeyword.length>0}containGeo(){return this.geoSite.length>0||this.geoIp.length>0}containRuleSet(){return this.ruleSet.length>0}containIp(){return this.ipCidr.length>0||this.geoIp.length>0}isEmpty(t){return!(this.containDomain()||this.containIp()||t==="geo"&&this.containGeo()||t==="set"&&this.containRuleSet()||this.network.length>0||this.port.length>0||this.portRange.length>0||this.protocol.length>0)}},vt=class{name;type="load_balance";core=y.SING_BOX;enabled="1";listen_port;socks_port;member_node;procd_env;log_level;log_path;url;interval;tolerance;idle_timeout;interrupt_exist_connections;strategy;strategy_expected;strategy_max_rtt;strategy_tolerance;fallback_tag;probe_url;probe_connectivity;probe_interval;probe_timeout;probe_sampling;probe_http_method;constructor(){this.member_node=[],this.procd_env=[]}},Et=class{name;type="custom";enabled="1";command;listen_port;socks_port;procd_env;log_enabled;log_path;constructor(){this.type="custom",this.enabled="1",this.procd_env=[]}},Ct=class{name;type="hysteria2";enabled="1";core;server;server_port;server_ports;hop_interval;obfs_type;obfs_password;brutal_debug;udp_idle_timeout;up_mbps;down_mbps;password;network;tls_server_name;tls_insecure;listen_port;socks_port;procd_env;log_path;constructor(){this.type="hysteria2",this.enabled="1",this.core=y.SING_BOX,this.server_ports=[],this.network="",this.brutal_debug="0",this.tls_insecure="0"}},Pt=class{name;type="shadowsocks";enabled="1";core;server;server_port;method;password;plugin;plugin_opts;network;udp_over_tcp;listen_port;socks_port;multiplex_enabled;multiplex_protocol;multiplex_max_connections;multiplex_min_streams;multiplex_max_streams;multiplex_brutal_enabled;multiplex_brutal_up_mbps;multiplex_brutal_down_mbps;procd_env;log_path;constructor(){this.type="shadowsocks",this.enabled="1",this.core=y.SING_BOX,this.network="",this.udp_over_tcp="0",this.multiplex_enabled="0",this.multiplex_protocol="h2mux",this.multiplex_brutal_enabled="0"}},Rt=class{name;type="tuic";enabled="1";core;server;server_port;uuid;password;congestion_control;udp_relay_mode;udp_over_stream;zero_rtt_handshake;heartbeat;network;tls_server_name;tls_insecure;listen_port;socks_port;procd_env;log_path;constructor(){this.type="tuic",this.enabled="1",this.core=y.SING_BOX,this.congestion_control="cubic",this.udp_relay_mode="",this.udp_over_stream="0",this.zero_rtt_handshake="0",this.heartbeat="10s",this.network="",this.tls_insecure="0"}},At=class{name;type="shadowtls";enabled="1";core;server;server_port;version;password;tls_server_name;tls_insecure;listen_port;socks_port;procd_env;log_path;constructor(){this.type="shadowtls",this.enabled="1",this.core=y.SING_BOX,this.version="1",this.tls_insecure="0"}},Dt=class{name;type="vless";enabled="1";core;server;server_port;uuid;flow;network;packet_encoding;tls_server_name;tls_insecure;tls_reality_enabled;tls_reality_public_key;tls_reality_short_id;listen_port;socks_port;multiplex_enabled;multiplex_protocol;multiplex_max_connections;multiplex_min_streams;multiplex_max_streams;multiplex_brutal_enabled;multiplex_brutal_up_mbps;multiplex_brutal_down_mbps;transport_type;transport_http_host;transport_http_path;transport_http_method;transport_http_idle_timeout;transport_http_ping_timeout;transport_ws_host;transport_ws_path;transport_ws_max_early_data;transport_ws_early_data_header_name;transport_grpc_service_name;transport_grpc_idle_timeout;transport_grpc_ping_timeout;transport_grpc_permit_without_stream;transport_httpupgrade_host;transport_httpupgrade_path;transport_xhttp_host;transport_xhttp_path;transport_xhttp_mode;procd_env;log_path;constructor(){this.type="vless",this.enabled="1",this.core=y.XRAY,this.network="tcp",this.packet_encoding="",this.tls_insecure="0",this.tls_reality_enabled="0",this.multiplex_enabled="0",this.multiplex_protocol="h2mux",this.multiplex_brutal_enabled="0",this.transport_type="",this.transport_http_idle_timeout="15s",this.transport_http_ping_timeout="15s",this.transport_grpc_idle_timeout="15s",this.transport_grpc_ping_timeout="15s",this.transport_grpc_permit_without_stream="0",this.transport_xhttp_path="/",this.transport_xhttp_mode="auto"}};var H={camelToSnake:function(e){return e.replace(/([A-Z])/g,function(t){return"_"+t.toLowerCase()})},transFromUci:function(e,t){Object.keys(e).forEach(r=>{let n=H.camelToSnake(r);t[n]&&(e[r]=t[n])})},generateUniqueSectionId:function(e="hijpass"){let t="abcdefghijklmnopqrstuvwxyz0123456789",r="";for(;;){r="";for(let n=0;n<8;n++)r+=t.charAt(Math.floor(Math.random()*t.length));if(!a.get(e,r))break}return r}};function Oe(e,t){let r=e.substring(t==="remote"?16:15),n=r.split("/").pop(),s=n.substring(0,n.lastIndexOf("."))||n,o=(t==="remote"?r:n).endsWith("srs")?"binary":"source";return{tag:s,type:t,format:o,pathOrUrl:r}}var x={getShuntSection:function(){let e=new wt,t=a.get_first("hijpass","shunt");return H.transFromUci(e,t),e.dns=x.getDnsSection(),e.route=x.getRouteSection(),e},getRouteSection:function(){let e=a.get_first("hijpass","shunt"),t=new Tt;return H.transFromUci(t,e),a.sections("hijpass","shunt_route_rule",function(r){let n=new Z;H.transFromUci(n,r),t.rules.push(n)}),t},getRouteRuleVariants:function(e){if(e.ipVersionSplit!=="1")return[{rule:e,proxyNode:e.proxyNode}];let t=[];if(e.proxyNodeV4){let r=Object.assign(new Z,e);r.name=e.name?e.name+"-ipv4":e.name,r.proxyNode=e.proxyNodeV4,t.push({rule:r,proxyNode:e.proxyNodeV4,ipVersion:4})}if(e.proxyNodeV6){let r=Object.assign(new Z,e);r.name=e.name?e.name+"-ipv6":e.name,r.proxyNode=e.proxyNodeV6,t.push({rule:r,proxyNode:e.proxyNodeV6,ipVersion:6})}return t},getDnsSection:function(){let e=a.get_first("hijpass","shunt"),t=new St;return t.nodes=[],H.transFromUci(t,e),a.sections("hijpass","shunt_dns_node",function(r){if(r.enabled==="0")return;let n=new Nt;H.transFromUci(n,r),t.nodes.push(n)}),t},parseRuleList:function(e){let t=new Ot,r=e.domainList,n=e.ipList;if(t.network=e.network?e.network:[],t.protocol=e.protocol?e.protocol:[],e.port&&(t.port=e.port.map(s=>parseInt(s,10)).filter(s=>!isNaN(s))),e.portRange&&(t.portRange=e.portRange.map(s=>s.replace("-",":")).filter(s=>s.length>0)),r&&r.trim()!==""){let s=r.split(`
`);for(let o of s)if(o=o.trim(),!(o===""||o.startsWith("#"))){if(o.startsWith("rule-set:")){let i=o.startsWith("rule-set:remote:")?"remote":"local",l=Oe(o,i);t.ruleSet.push(l);continue}o.startsWith("regexp:")?t.domainRegex.push(o.substring(7)):o.startsWith("domain:")?t.domainSuffix.push(o.substring(7)):o.startsWith("full:")?t.domain.push(o.substring(5)):o.startsWith("geosite:")?t.geoSite.push(o):t.domainKeyword.push(o)}}if(n&&n.trim()!==""){let s=n.split(`
`);for(let o of s)if(o=o.trim(),!(o===""||o.startsWith("#"))){if(o.startsWith("rule-set:")){let i=o.startsWith("rule-set:remote:")?"remote":"local",l=Oe(o,i);t.ruleSet.push(l);continue}o.startsWith("geoip:")?t.geoIp.push(o):t.ipCidr.push(o)}}return t}};var se=3,Ut="lb-member-";function ve(e){return e?.name||e?.[".name"]||""}function oe(e){return M(e?.core||y.SING_BOX)}function ie(e){if(!e)return!1;let t=Number(e);return Number.isInteger(t)&&t>0&&t<=65535}function Ee(){let e=[];return a.sections("hijpass","proxy_node",function(t){e.push(t)}),e}function ae(){let e=new Map;return Ee().forEach(t=>{let r=ve(t);r&&e.set(r,t)}),e}function Ce(e){return"upstream-"+e}function le(e){return e?(Array.isArray(e)?e:[e]).filter(t=>!!t):[]}function Pe(e){return Ut+e}function fr(e,t=ae()){let r=le(e.member_node);if(r.length===0)throw new Error("Load balancing node has no members: "+e.name);return r.map((n,s)=>{if(n===e.name)throw new Error("Load balancing node cannot include itself: "+n);let o=t.get(n);if(!o)throw new Error("Load balancing member node not found: "+n);if(o.type===m.LOAD_BALANCE)throw new Error("Nested load balancing members are not supported: "+n);if(o.enabled!=="1")throw new Error("Load balancing member node disabled: "+n);if(!ie(o.socks_port))throw new Error("Load balancing member node SOCKS port invalid: "+n);return{name:n,socksPort:Number(o.socks_port),tag:Pe(s),core:oe(o),section:o}})}function mr(e,t=ae()){let r=e.upstream_proxy_node;if(!r)return;if(r===e.name)throw new Error("Upstream proxy node cannot be itself: "+r);let n=t.get(r);if(!n)throw new Error("Upstream proxy node not found: "+r);if(n.enabled!=="1")throw new Error("Upstream proxy node disabled: "+r);if(!ie(n.socks_port))throw new Error("Upstream proxy node SOCKS port invalid: "+r);return{name:r,socksPort:Number(n.socks_port),tag:Ce(r),core:oe(n),section:n}}function hr(e,t){let r=[],n=new Set,s=e;for(;s;){if(n.has(s))return r.push(s),{chain:r,cycle:!0};n.add(s),r.push(s);let o=t.get(s);if(!o||!o.upstream_proxy_node)break;s=o.upstream_proxy_node}return{chain:r,cycle:!1}}function Re(e){let t=[];return e?.type===m.LOAD_BALANCE?t.push(...le(e.member_node)):e?.upstream_proxy_node&&t.push(e.upstream_proxy_node),t}function yr(e){let t=new Set,r=new Set,n=[];function s(o){if(r.has(o)){let l=n.indexOf(o);return n.slice(l).concat(o)}if(t.has(o))return;let i=e.get(o);if(!(!i||i.enabled!=="1")){r.add(o),n.push(o);for(let l of Re(i)){let u=s(l);if(u)return u}n.pop(),r.delete(o),t.add(o)}}for(let o of e.keys()){let i=s(o);if(i)return i}}var w={getProxyName:ve,getProxyCore:oe,getProxySections:Ee,getProxySectionMap:ae,isPort:ie,getUpstreamProxyOutboundTag:Ce,normalizeProxyNodeList:le,getLoadBalanceMemberOutboundTag:Pe,resolveUpstreamProxy:mr,resolveLoadBalanceMembers:fr,collectProxyChain:hr,getProxyDependencies:Re,findProxyDependencyCycle:yr};var ot={genShuntConf:br,genProxyConf:xr,writeGeoRule:Tr};function br(){let e=x.getShuntSection();if(!e)return;let t=new Map,r=new Map,n=e.dns,s=e.route,o=new mt(st(s.defaultProxyNode),n.defaultDnsNode),i=new pt(n.defaultDnsNode,ke(n.defaultStrategy),n.useCache==="1");n.nodes.forEach(function(p){let d=new rt(p.type,p.tag,p.server,parseInt(p.port,10),void 0);t.set(p.tag,d)});let l=[new bt("direct-out"),new yt("block")];a.sections("hijpass","proxy_node",function(p){p.enabled==="1"&&l.push(new q("127.0.0.1",Number(p.socks_port),p.name))});let u=[new K(parseInt(e.shuntListenPort,10),"tproxy-in"),new ht(parseInt(e.dnsListenPort,10),"dns-in")];if(o.default_domain_resolver&&o.final){let p=t.get(o.default_domain_resolver);if(!p)throw new Error(_('Default global DNS "%s" does not exist').format(o.default_domain_resolver));i.servers.push(ue(p.tag,o.final,p))}if(s.rulesetOutNode){let p=st(s.rulesetOutNode),d=l.find(g=>g.tag===p);if(d){let g=structuredClone(d);if(g.tag="ruleset-out",n.rulesetDnsNode){g.domain_resolver="ruleset-dns-resolver";let h=t.get(n.rulesetDnsNode);if(!h)throw new Error(_('%s "%s" does not exist').format(_("Rule-set DNS"),n.rulesetDnsNode));i.servers.push(ue("ruleset-dns-resolver","ruleset-out",h))}l.push(g)}}return s.rules.forEach(function(p){if(p.enabled!=="1")return;let d=p.ipVersionSplit==="1",g,h=!1;if(x.getRouteRuleVariants(p).forEach(function(S){let c=x.parseRuleList(S.rule),f=Cr(c,s.rulesetConvert);if(c.ipVersion=S.ipVersion,s.rulesetConvert==="1")Or(c);else if(c.containGeo()&&(vr(c),!Er(c)))return;if(c.isEmpty("set"))return;for(let D of c.ruleSet)r.set(D.tag,wr(D,s.rulesetOutNode?"ruleset-out":void 0));let T="route",F=st(S.proxyNode);if(S.proxyNode==="hijpass-block"&&(T="reject",F=void 0),o.rules.push(new z(T,F).initRule(c)),T!=="reject"){if(d){f&&(g=g||c,h=!0);return}(c.containDomain()||c.containIp()||c.containRuleSet())&&Ae(p,S.rule.name,c,st(p.dnsProxyNode)||F,t,o,i)}}),d&&h&&g){let S=st(p.dnsProxyNode);if(!S)throw new Error(_('Route rule "%s" uses IPv4/IPv6 split and must specify a DNS exit node').format(p.name));Ae(p,p.name,g,S,t,o,i)}}),r.forEach(p=>o.rule_set.push(p)),{log:new W(e.logLevel),inbounds:u,outbounds:l,dns:i,route:o}}function xr(e){if(e.type===m.LOAD_BALANCE)return Nr(e);let t=R.build(e.type,e),r=[t];return Sr(e,t,r),{log:new W(e.log_level),dns:{servers:[{type:"local",tag:"local"}]},inbounds:[new K(Number(e.listen_port),"tproxy-in","127.0.0.1"),new nt(Number(e.socks_port),"socks-in","127.0.0.1")],outbounds:r}}function Nr(e){let t=w.resolveLoadBalanceMembers(e),r=new xt("slb",e.url||void 0,e.interval||void 0,e.tolerance?parseInt(e.tolerance,10):void 0,e.idle_timeout||void 0,e.interrupt_exist_connections==="1"?!0:void 0);return r.outbounds=t.map(n=>n.tag),{log:new W(e.log_level),dns:{servers:[{type:"local",tag:"local"}]},inbounds:[new K(Number(e.listen_port),"tproxy-in","127.0.0.1"),new nt(Number(e.socks_port),"socks-in","127.0.0.1")],outbounds:[r,...t.map(n=>new q("127.0.0.1",n.socksPort,n.tag))],route:{final:"slb"}}}function Sr(e,t,r){let n=w.resolveUpstreamProxy(e);n&&(t.detour=n.tag,r.push(new q("127.0.0.1",n.socksPort,n.tag)))}function Tr(){let e=x.getRouteSection(),t=new Set,r=new Set;for(let l of e.rules){if(l.enabled!=="1")continue;let u=x.parseRuleList(l);for(let p of u.geoSite)t.add(p.replace("geosite:",""));for(let p of u.geoIp)r.add(p.replace("geoip:",""))}let n=[...t],s=[...r],o=a.get_first("hijpass","shunt","geoip_ruleset")??[],i=a.get_first("hijpass","shunt","geosite_ruleset")??[];s.length>0?Ue(o,s)||a.set_first("hijpass","shunt","geoip_ruleset",s):a.set_first("hijpass","shunt","geoip_ruleset",void 0),n.length>0?Ue(i,n)||a.set_first("hijpass","shunt","geosite_ruleset",n):a.set_first("hijpass","shunt","geosite_ruleset",void 0)}function ue(e,t,r){return new rt(r.type,e,r.server,r.server_port,t)}function wr(e,t){return e.type==="remote"?new _t(e.tag,e.format,e.pathOrUrl,t,void 0):new ft(e.tag,e.format,e.pathOrUrl)}function ke(e){switch(e){case"4":return"ipv4_only";case"6":return"ipv6_only";case"64":return"prefer_ipv6";case"46":return"prefer_ipv4";default:return}}function Ae(e,t,r,n,s,o,i){let l=e.dnsNode,u=l?s.get(l):s.get(o.default_domain_resolver);if(!u)throw new Error(_('Route rule "%s" DNS node "%s" does not exist').format(e.name||t,e.dnsNode||o.default_domain_resolver||""));i.servers.push(ue(De(t),n,u)),i.rules.push(new dt("route",De(t),ke(e.dnsStrategy)).initRule(r))}function st(e){return e==="hijpass-block"?"block":e==="hijpass-direct"?"direct-out":e}function De(e){return e+"-dns"}function Or(e){e.ruleSet=[];for(let t of e.geoSite){let r=t.replace("geosite:","geosite-");e.ruleSet.push({tag:r,type:"local",format:"binary",pathOrUrl:"/etc/hijpass/ruleset/"+r+".srs"})}for(let t of e.geoIp){let r=t.replace("geoip:","geoip-");e.ruleSet.push({tag:r,type:"local",format:"binary",pathOrUrl:"/etc/hijpass/ruleset/"+r+".srs"})}}function vr(e){e.geoSite=[],e.geoIp=[]}function Er(e){return e.containDomain()||e.containIp()||e.containRuleSet()}function Cr(e,t){return e.containDomain()||e.containRuleSet()||t==="1"&&e.geoSite.length>0}function Ue(e,t){return!e||!t?!1:e.length===t.length&&e.every((r,n)=>r===t[n])}var ce=class{protocols=new Map;register(t){this.protocols.set(t.type,t)}build(t,r){let n=this.protocols.get(t);if(!n)throw new Error(`Unsupported xray protocol: ${t}`);return n.build(r)}},B=new ce;var de=class{settings;protocol;tag;streamSettings;constructor(t,r,n,s,o,i,l,u){this.protocol="hysteria",this.tag=n,this.settings={version:2,address:t,port:r},this.streamSettings={network:"hysteria",security:"tls",tlsSettings:{serverName:o,alpn:["h3"]},hysteriaSettings:{version:2,auth:s,...i!==void 0?{udpIdleTimeout:i}:{}},...l||u?{finalmask:{quicParams:{...l?{brutalUp:l}:{},...u?{brutalDown:u}:{}}}}:{}}}};function Le(e){let t=(e||"").trim();if(t)return t==="0"?"0":t+" mbps"}var Pr={type:"hysteria2",build(e){let t=e,r=t.udp_idle_timeout?Number(t.udp_idle_timeout):void 0,n=Le(t.up_mbps),s=Le(t.down_mbps);return new de(t.server,Number(t.server_port),t.name,t.password||"",t.tls_server_name||t.server,r,n,s)}};B.register(Pr);var ge=class{settings;protocol;tag;constructor(t,r,n,s,o,i){this.protocol="shadowsocks",this.tag=n,this.settings={address:t,port:r,method:s,password:o,uot:i||void 0,level:0}}},Rr={type:"shadowsocks",build(e){let t=e;return new ge(t.server,Number(t.server_port),t.name,t.method,t.password,t.udp_over_tcp==="1"?!0:void 0)}};B.register(Rr);var _e=class{settings;protocol;tag;streamSettings;constructor(t,r,n,s,o="none",i,l=0){this.protocol="vless",this.tag=s,this.settings={address:t,port:r,id:n,encryption:o,level:l},i&&(this.settings.flow=i)}};function kt(e){let t=(e||"").trim();if(!t)return;let r=t.match(/^(\d+)(?:s)?$/);if(!r)return;let n=Number(r[1]);return Number.isFinite(n)&&n>0?n:void 0}function Ar(e,t){let r=(t||"").trim();if(!r)return e;let n=e||"/",s=n.indexOf("#"),o=s>=0?n.slice(0,s):n,i=s>=0?n.slice(s):"",l=o.indexOf("?")>=0?"&":"?";return o+l+"ed="+encodeURIComponent(r)+i}var Dr={type:"vless",build(e){let t=e,r=new _e(t.server,Number(t.server_port),t.uuid,t.name,"none",t.flow||void 0,0),n=t.tls_reality_enabled==="1",s=n?{fingerprint:"chrome",serverName:t.tls_server_name||t.server,password:t.tls_reality_public_key||"",shortId:t.tls_reality_short_id||""}:void 0,o=n?void 0:{alpn:["h2","http/1.1"],serverName:t.tls_server_name||t.server},i=n?"reality":t.tls_server_name?"tls":"none",l={network:"raw",security:i};switch(s&&(l.realitySettings=s),o&&i==="tls"&&(l.tlsSettings=o),t.transport_type||""){case"xhttp":l.network="xhttp",l.xhttpSettings={host:t.transport_xhttp_host||void 0,path:t.transport_xhttp_path||"/",mode:t.transport_xhttp_mode||"auto"};break;case"ws":l.network="websocket",l.wsSettings={host:t.transport_ws_host||void 0,path:Ar(t.transport_ws_path||"/",t.transport_ws_max_early_data)};break;case"grpc":l.network="grpc",l.grpcSettings={serviceName:t.transport_grpc_service_name||"TunService",...kt(t.transport_grpc_idle_timeout)?{idle_timeout:kt(t.transport_grpc_idle_timeout)}:{},...kt(t.transport_grpc_ping_timeout)?{health_check_timeout:kt(t.transport_grpc_ping_timeout)}:{},...t.transport_grpc_permit_without_stream==="1"?{permit_without_stream:!0}:{}};break;case"http":l.network="xhttp",l.xhttpSettings={...t.transport_http_host?{host:t.transport_http_host}:{},path:t.transport_http_path||"/",mode:"stream-one",...t.transport_http_method?{uplinkHTTPMethod:t.transport_http_method}:{}};break;case"httpupgrade":l.network="httpupgrade",l.httpupgradeSettings={host:t.transport_httpupgrade_host||void 0,path:t.transport_httpupgrade_path||"/"};break}return r.streamSettings=l,r}};B.register(Dr);var Q=class{loglevel;dnsLog;constructor(t){this.loglevel=t||"info",this.dnsLog=!1}},Lt=class{tag;address;port;queryStrategy;domains;skipFallback;disableCache;constructor(t,r,n,s){switch(t){case"tcp":this.address="tcp://"+n,this.port=s;break;case"https":this.address="https://"+n,s&&(this.address+=":"+s),this.address+="/dns-query";break;case"quic":this.address="quic://"+n,this.port=s;break;case"udp":this.address=n,this.port=s;break;default:throw new Error("Invalid xray DNS server type: "+t)}this.tag=r,this.domains=[],this.skipFallback=!0}},It=class{servers;rules;queryStrategy;disableCache;serveStale;serveExpiredTTL;disableFallback;disableFallbackIfMatch;constructor(t,r){this.servers=[],this.rules=[],this.queryStrategy=t||"UseIP",this.disableCache=!r,this.serveStale=!r,this.serveExpiredTTL=3600,this.disableFallback=!1,this.disableFallbackIfMatch=!0}},tt=class{ruleTag;inboundTag;outboundTag;balancerTag;constructor(t,r,n){this.ruleTag=t,this.inboundTag=r,n==="slb"?this.balancerTag=n:this.outboundTag=n}},Ft=class extends tt{domain;network;ip;protocol;port;constructor(t,r){super(t,void 0,r),this.inboundTag=["tproxy-in"],this.domain=[],this.network=[],this.ip=[],this.protocol=[]}},it=class extends tt{constructor(t,r){super(void 0,t,r)}},at=class{rules;domainStrategy;balancers;constructor(){this.rules=[],this.domainStrategy="AsIs",this.balancers=[]}},Mt=class{settings;protocol;tag;streamSettings;constructor(t){this.protocol="blackhole",this.tag=t}},et=class{settings;protocol;tag;constructor(t,r,n){this.protocol="socks",this.tag=n,this.settings={address:t,port:r}}},Bt=class{settings;protocol;tag;constructor(t){this.protocol="dns",this.tag=t,this.settings={rules:[{action:"hijack",qType:"1,28"},{action:"return",rCode:5}]}}},lt=class{settings;protocol;tag;constructor(t){this.protocol="freedom",this.tag=t,this.settings={domainStrategy:"UseIP"}}},Yt=class{tag;selector;fallbackTag;strategy;constructor(t){this.tag=t,this.selector=[],this.fallbackTag=void 0,this.strategy={type:"leastLoad",settings:{expected:1,maxRTT:"1s",tolerance:.05}}}},Gt=class{subjectSelector;pingConfig;constructor(t,r,n,s,o,i){this.subjectSelector=[],this.pingConfig={destination:t||"https://connectivitycheck.gstatic.com/generate_204",connectivity:r||void 0,interval:n||"60s",timeout:s||"2s",sampling:o||3,httpMethod:i||void 0}}},X=class{protocol;tag;listen;port;settings;streamSettings;sniffing;constructor(t,r,n,s){this.protocol="dokodemo-door",this.tag=n,this.listen=s,this.port=r,this.settings={network:"tcp,udp",followRedirect:void 0},t==="tproxy"&&(this.settings.followRedirect=!0,this.streamSettings={sockopt:{tproxy:"tproxy"}},this.sniffing={enabled:!0,destOverride:["http","tls","quic"],routeOnly:!0})}};var me={genShuntConf:kr,genProxyConf:Lr};function kr(){let e=x.getShuntSection(),t=new Map,r=new at,n=e.dns,s=new It(Ye(n.defaultStrategy),n.useCache==="1");n.nodes.forEach(function(c){let f=new Lt(c.type,c.tag,c.server,Number(c.port));t.set(c.tag,f)});let o=e.route,i=[];a.sections("hijpass","proxy_node",function(c){if(c.enabled==="1"){let f=new et("127.0.0.1",Number(c.socks_port),Ht(c.name));c.name===o.defaultProxyNode?i.unshift(f):i.push(f)}}),o.defaultProxyNode==="hijpass-direct"?i.unshift(new lt("direct-out")):i.push(new lt("direct-out")),i.push(new Mt("block")),i.push(new Bt("dns-out"));let l=[new X("tproxy",parseInt(e.shuntListenPort,10),"tproxy-in"),new X("direct",parseInt(e.dnsListenPort,10),"dns-in","::")],u=[new it(["dns-in"],"dns-out")],p=[],d=t.get(n.defaultDnsNode);if(!d)throw new Error(_('Default global DNS "%s" does not exist').format(n.defaultDnsNode||""));let g=new Map;o.rules.forEach(function(c){if(c.enabled!=="1")return;let f=c.ipVersionSplit==="1",T,F=!1;if(x.getRouteRuleVariants(c).forEach(function(D){let jt=Ht(D.proxyNode)||i[0].tag,j=x.parseRuleList(D.rule),Te=Gr(j);if(j.ipVersion=D.ipVersion,!Yr(j)&&(Hr(D.rule.name,jt,j).forEach(Wt=>{p.push(Wt)}),jt!=="block")){if(f){Te&&(T=T||j,F=!0);return}if(Te){let Wt=Ht(c.dnsProxyNode)||jt;Ie(c,D.rule.name,Wt,j,t,d,s,g)}}}),f&&F&&T){let D=Ht(c.dnsProxyNode);if(!D)throw new Error(_('Route rule "%s" uses IPv4/IPv6 split and must specify a DNS exit node').format(c.name));Ie(c,c.name,D,T,t,d,s,g)}});let h=structuredClone(d);return h.tag=Me("default"),h.skipFallback=!1,s.servers.push(h),g.forEach((c,f)=>u.push(new it(c,f))),r.rules=r.rules.concat(u),r.rules=r.rules.concat(p),{log:new Q(he(e.logLevel)),inbounds:l,outbounds:i,dns:s,routing:r}}function Lr(e){if(e.type===m.LOAD_BALANCE)return Fr(e);let t=B.build(e.type,e);return Ir(e,t)}function Ir(e,t){let r=Fe(e),n=[t];return Mr(e,t,n),{log:new Q(he(e.log_level)),inbounds:r,outbounds:n}}function Fe(e){let t=new X("tproxy",Number(e.listen_port),"tproxy-in");t.sniffing=void 0;let r=new X("direct",Number(e.socks_port),"socks-in");return r.settings={udp:!0},r.protocol="socks",[t,r]}function Fr(e){let t=w.resolveLoadBalanceMembers(e),r=new at;r.rules.push(new tt(void 0,["tproxy-in","socks-in"],"slb"));let n=new Yt("slb");n.selector=[Ut];let s=t.find(u=>u.name===e.fallback_tag)||t[0];n.fallbackTag=s.tag;let o=e.strategy||"leastLoad";n.strategy.type=o,o==="leastLoad"?(e.strategy_expected&&(n.strategy.settings.expected=parseInt(e.strategy_expected,10)),e.strategy_max_rtt&&(n.strategy.settings.maxRTT=e.strategy_max_rtt),e.strategy_tolerance&&(n.strategy.settings.tolerance=parseFloat(e.strategy_tolerance))):n.strategy.settings=void 0,r.balancers.push(n);let i=new Gt(e.probe_url||void 0,e.probe_connectivity||void 0,e.probe_interval||void 0,e.probe_timeout||void 0,e.probe_sampling?parseInt(e.probe_sampling,10):void 0,e.probe_http_method||void 0);i.subjectSelector=[Ut];let l=t.map(u=>new et("127.0.0.1",u.socksPort,u.tag));return{log:new Q(he(e.log_level)),inbounds:Fe(e),outbounds:l,routing:r,burstObservatory:i}}function he(e){return e==="warn"?"warning":e}function Mr(e,t,r){let n=w.resolveUpstreamProxy(e);n&&(Br(t,n.tag),r.push(new et("127.0.0.1",n.socksPort,n.tag)))}function Br(e,t){e.streamSettings=e.streamSettings||{},e.streamSettings.sockopt=e.streamSettings.sockopt||{},e.streamSettings.sockopt.dialerProxy=t,e.streamSettings.sockopt.domainStrategy="UseIP"}function Me(e){return e+"-dns"}function Yr(e){return e.isEmpty("geo")?!0:e.containRuleSet()&&!e.containDomain()&&!e.containIp()&&!e.containGeo()}function Gr(e){return e.containDomain()||e.geoSite.length>0}function Ie(e,t,r,n,s,o,i,l){let u=Me(t);l.has(r)?l.get(r).push(u):l.set(r,[u]);let p=e.dnsNode?s.get(e.dnsNode):o;if(!p)throw new Error(_('Route rule "%s" DNS node "%s" does not exist').format(e.name||t,e.dnsNode||""));let d=structuredClone(p);d.tag=u,d.queryStrategy=Ye(e.dnsStrategy),d.domains=Be(n),i.servers.push(d)}function Hr(e,t,r){let n=new Ft(e,t);n.network=r.network,n.protocol=Wr(r.protocol);let s=r.port.map(l=>String(l));r.portRange&&r.portRange.length>0&&(s=s.concat(r.portRange)),n.port=s.join(","),n.domain=Be(r),n.domain=n.domain.length>0?n.domain:void 0,n.ip=Xr(r),n.ip=n.ip.length>0?n.ip:void 0;let o=[],i=jr(r.ipVersion);if(n.domain){let l=structuredClone(n);i?l.ip=[i]:l.ip=void 0,o.push(l)}if(n.ip){let l=structuredClone(n);l.domain=void 0,o.push(l)}return!n.domain&&!n.ip&&(i&&(n.ip=[i]),o.push(n)),o}function Be(e){let t=[fe(e.domain,"full:"),fe(e.domainSuffix,"domain:"),e.domainKeyword,fe(e.domainRegex,"regexp:"),e.geoSite];return[].concat(...t.filter(r=>Array.isArray(r)&&r.length>0))}function Xr(e){let t=[Vr(e.ipCidr,e.ipVersion),e.geoIp];return[].concat(...t.filter(r=>Array.isArray(r)&&r.length>0))}function Vr(e,t){return!t||!Array.isArray(e)?e||[]:e.filter(r=>{let n=r.replace(/^!/,"");return n.startsWith("geoip:")||n.startsWith("ext:")?!0:n.indexOf(":")>=0?t===6:/^\d{1,3}(\.\d{1,3}){3}(\/\d+)?$/.test(n)?t===4:!0})}function jr(e){if(e===4)return"0.0.0.0/0";if(e===6)return"::/0"}function Ht(e){return e==="hijpass-block"?"block":e==="hijpass-direct"?"direct-out":e}function Ye(e){switch(e){case"4":return"UseIPv4";case"6":return"UseIPv6";case"64":case"46":return"UseIP";default:return}}function Wr(e){if(!e)return;let t=e.map(r=>{switch(r){case"http":case"tls":case"quic":case"bittorrent":return r;default:throw new Error("Unsupported xray rule protocol: "+r)}}).filter(r=>r!==void 0);return t.length===0?void 0:t}function fe(e,t){return Array.isArray(e)?e.map(r=>t+r):[]}var v=y,Ge={getCoreAdapter:function(e){switch(M(e)){case v.SING_BOX:return ot;case v.XRAY:return me;default:throw new Error("Unsupported core: "+e)}}},ye={genProxyConf:function(e,t){switch(M(e)){case v.SING_BOX:return ot.genProxyConf(t);case v.XRAY:return me.genProxyConf(t);default:throw new Error("Unsupported core: "+e)}}};var zr={hijpass:{client_dir:"/etc/hijpass/client",shunt_conf:"/etc/hijpass/shunt.json",ip_direct:"/etc/hijpass/rules/ip-direct.txt",ip_proxy:"/etc/hijpass/rules/ip-proxy.txt",domain_direct:"/etc/hijpass/rules/domain-direct.txt",domain_proxy:"/etc/hijpass/rules/domain-proxy.txt",nft:"/etc/hijpass/fw4-template.nft",nft_hook:"/etc/hijpass/hook/nft-hook.sh",dns_hook:"/etc/hijpass/hook/dns-hook.sh"},hijserver:{server_dir:"/etc/hijpass/server"}};function Kr(e){let t=(e||"").trim().replace(/\r\n/g,`
`);return t?t+`
`:""}function be(e,t="hijpass"){let r=a.get_first(t,t,e);if(r)return r;let n=zr[t]?.[e];return n||(console.log(e+" path is empty"),"")}function qr(e,t,r,n){if(!t)throw new Error(_("Configuration file directory is empty"));let o=n?.section?.formvalue?.(r,"name")||a.get(e,r,"name")||r;return t+"/"+o+"-"+r+".json"}function $r(e){let t=e.name||e[".name"];return be("client_dir")+"/"+t+"-"+e[".name"]+".json"}function Jr(e){let t=e.name||e[".name"];return be("server_dir","hijserver")+"/"+t+"-"+e[".name"]+".json"}var N={normalizeFileContent:Kr,getFilePath:be,getNodeConfigFilePath:qr,getProxyConfigFilePath:$r,getServerConfigFilePath:Jr};async function Zr(e){async function t(r,n,s){let o=s?[r,n,s]:[r,n];await O.exec("/usr/lib/hijpass/rm.sh",o)}if(e?.hijpass){for(let r of e.hijpass)if(r.length===2&&r[0]==="remove"&&await t("proxy",r[1]),r.length===4&&r[0]==="set"&&r[2]==="name"){let n=a.get("hijpass",r[1]),s=n?N.getProxyConfigFilePath(n):void 0;await t("proxy",r[1],s)}}if(e?.hijserver){for(let r of e.hijserver)if(r.length===2&&r[0]==="remove"&&await t("server",r[1]),r.length===4&&r[0]==="set"&&r[2]==="name"){let n=a.get("hijserver",r[1]),s=n?N.getServerConfigFilePath(n):void 0;await t("server",r[1],s)}}}var He={cleanupChangedNodeFiles:Zr};function Qr(e,t){if(!(Array.isArray(t)&&t.length===0)&&t!==null&&!(typeof t=="number"&&!Number.isFinite(t))&&!(typeof t=="string"&&!t.trim()))return t}var Xt={omitEmptyReplacer:Qr};var Xe={getShuntConfData:function(){if(a.get_first("hijpass","shunt","enabled")==="0"||a.get_first("hijpass","shunt","config_type")!=="tmpl")return"";let r=a.get_first("hijpass","shunt","type");return JSON.stringify(Ge.getCoreAdapter(r).genShuntConf(),Xt.omitEmptyReplacer,2)}};var xe=class{container=null;notifications=new Map;notificationId=0;autoCloseTimers=new Map;constructor(){this.initContainer()}initContainer(){this.container||(this.container=document.createElement("div"),this.container.id="notification-container",this.container.style.cssText=`
            position: fixed;
            top: 20px;
            right: 20px;
            z-index: 9999;
            pointer-events: none;
        `,document.body.appendChild(this.container))}getTypeConfig(t){let r={success:{bgColor:"#4caf50",borderColor:"#45a049",icon:"\u2713",textColor:"#fff"},error:{bgColor:"#f44336",borderColor:"#da190b",icon:"\u2715",textColor:"#fff"},warning:{bgColor:"#ff9800",borderColor:"#e68900",icon:"\u26A0",textColor:"#fff"},info:{bgColor:"#2196f3",borderColor:"#0b7dda",icon:"\u2139",textColor:"#fff"}};return r[t]||r.info}show(t){let{message:r,title:n,content:s,type:o="info",duration:i=3e3,icon:l=!1}=t;this.initContainer();let u=`notification-${++this.notificationId}`,p=this.getTypeConfig(o),d=n||r,g=s,h=document.createElement("div");if(h.id=u,h.style.cssText=`
            background-color: ${p.bgColor};
            border-left: 4px solid ${p.borderColor};
            color: ${p.textColor};
            padding: 16px 20px;
            margin-bottom: 10px;
            border-radius: 4px;
            box-shadow: 0 4px 12px rgba(0, 0, 0, 0.15);
            display: flex;
            align-items: flex-start;
            gap: 12px;
            min-width: 300px;
            max-width: 400px;
            word-break: break-word;
            animation: slideInRight 0.3s ease-out;
            pointer-events: auto;
            transition: all 0.3s ease;
            font-size: 14px;
            font-weight: 500;
        `,l){let f=document.createElement("span");f.style.cssText=`
                font-size: 20px;
                font-weight: bold;
                flex-shrink: 0;
                display: flex;
                align-items: center;
                justify-content: center;
                width: 24px;
                height: 24px;
                margin-top: 2px;
            `,f.textContent=p.icon,h.appendChild(f)}let S=document.createElement("div");if(S.style.cssText=`
            flex: 1;
            display: flex;
            flex-direction: column;
            gap: 4px;
        `,d){let f=document.createElement("div");f.style.cssText=`
                font-weight: 600;
                font-size: 14px;
                line-height: 1.4;
            `,f.textContent=d,S.appendChild(f)}if(g){let f=document.createElement("div");f.style.cssText=`
                font-weight: 400;
                font-size: 13px;
                line-height: 1.4;
                opacity: 0.9;
                white-space: pre-line;
            `,f.textContent=g,S.appendChild(f)}h.appendChild(S);let c=document.createElement("button");if(c.style.cssText=`
            background: none;
            border: none;
            color: ${p.textColor};
            cursor: pointer;
            font-size: 20px;
            padding: 0;
            width: 24px;
            height: 24px;
            display: flex;
            align-items: center;
            justify-content: center;
            flex-shrink: 0;
            opacity: 0.7;
            transition: opacity 0.2s;
        `,c.innerHTML="\xD7",c.onmouseover=()=>c.style.opacity="1",c.onmouseout=()=>c.style.opacity="0.7",c.onclick=f=>{f.stopPropagation(),this.remove(u)},h.appendChild(c),this.container.appendChild(h),this.notifications.set(u,h),i>0){let f=setTimeout(()=>{this.remove(u)},i);this.autoCloseTimers.set(u,f),h.onmouseenter=()=>{let T=this.autoCloseTimers.get(u);T&&(clearTimeout(T),this.autoCloseTimers.delete(u))},h.onmouseleave=()=>{if(this.notifications.has(u)){let T=setTimeout(()=>{this.remove(u)},i);this.autoCloseTimers.set(u,T)}}}return u}remove(t){let r=this.notifications.get(t);if(!r)return;let n=this.autoCloseTimers.get(t);n&&(clearTimeout(n),this.autoCloseTimers.delete(t)),r.style.animation="slideOutRight 0.3s ease-in",r.style.opacity="0",setTimeout(()=>{r.remove(),this.notifications.delete(t)},300)}success(t,r){return this.show({message:t,type:"success",duration:r})}error(t,r){return this.show({message:t,type:"error",duration:r})}warning(t,r){return this.show({message:t,type:"warning",duration:r})}info(t,r){return this.show({message:t,type:"info",duration:r})}clear(){this.notifications.forEach((t,r)=>{this.remove(r)})}},tn=new xe;function Ve(){if(document.getElementById("notification-styles"))return;let e=document.createElement("style");e.id="notification-styles",e.textContent=`
        @keyframes slideInRight {
            from {
                transform: translateX(400px);
                opacity: 0;
            }
            to {
                transform: translateX(0);
                opacity: 1;
            }
        }

        @keyframes slideOutRight {
            from {
                transform: translateX(0);
                opacity: 1;
            }
            to {
                transform: translateX(400px);
                opacity: 0;
            }
        }

        @media (max-width: 768px) {
            #notification-container {
                left: 10px !important;
                right: 10px !important;
                top: 10px !important;
            }

            #notification-container > div {
                min-width: auto !important;
                max-width: 100% !important;
            }
        }
    `,document.head.appendChild(e)}document.readyState==="loading"?document.addEventListener("DOMContentLoaded",Ve):Ve();var V=tn;var ut={show:function(e){return V.show(e)},success:function(e,t,r){return V.show({title:e,content:t,type:"success",duration:r})},error:function(e,t,r){return V.show({title:e,content:t,type:"error",duration:r})},warning:function(e,t,r){return V.show({title:e,content:t,type:"warning",duration:r})},info:function(e,t,r){return V.show({title:e,content:t,type:"info",duration:r})},clear:function(){return V.clear()}};var Ne={createProxyConfigFromSection:function(e){let t=e.type,r;switch(t){case m.LOAD_BALANCE:r=new vt;break;case m.HYSTERIA2:r=new Ct;break;case m.SHADOWSOCKS:r=new Pt;break;case m.TUIC:r=new Rt;break;case m.SHADOWTLS:r=new At;break;case m.VLESS:r=new Dt;break;case m.CUSTOM:r=new Et;break;default:return null}return Object.keys(e).forEach(n=>{n!==".type"&&n!==".name"&&n!==".anonymous"&&Reflect.set(r,n,e[n])}),r.cfgid=e[".name"],r}};function en(e){return/^(\d{1,3}\.){3}\d{1,3}$/.test(e)||/^[0-9a-fA-F:]+$/.test(e)}function rn(e){return Array.isArray(e?.outbounds)?e.outbounds[0]:void 0}function nn(e,t){let r=rn(e);return r?r.server?(r.server=t,!0):r.settings?.address?(r.settings.address=t,!0):r.settings?.servers?.[0]?.address?(r.settings.servers[0].address=t,!0):r.settings?.vnext?.[0]?.address?(r.settings.vnext[0].address=t,!0):!1:!1}async function sn(e,t){if(!e.upstream_proxy_node||!e.server||en(e.server))return;let r=await O.exec_direct("/usr/lib/hijpass/net.sh",["resolve",e.server],"json");if(!r?.address)throw new Error(_("Resolve proxy server failed: %s").format(e.server));if(!nn(t,r.address))throw new Error(_("Unsupported proxy config server field: %s").format(e.name||e.server))}async function on(){let e=[];if(a.sections("hijpass","proxy_node",r=>{let n=Ne.createProxyConfigFromSection(r);if(r.enabled!=="1"||!n||n.type===m.CUSTOM||n.core===v.CUSTOM)return;let s=ye.genProxyConf(n.core,n);e.push(sn(n,s).then(()=>{let o=typeof s=="string"?s:JSON.stringify(s,Xt.omitEmptyReplacer,2);return O.write(N.getProxyConfigFilePath(r),o)}))}),e.length===0)return;(await Promise.allSettled(e)).forEach(r=>{if(r.status==="rejected")throw new Error(r.reason?.message||String(r.reason))})}function an(e){let t=Ne.createProxyConfigFromSection(e);if(t)return ye.genProxyConf(t.core,t)}var je={writeGeneratedProxyConfigs:on,generateProxyConfigFromSection:an};var P={setAnonymousGridSectionMembers:function(e){P.setGridSectionMembers(e),e.anonymous=!0,e.sectiontitle=function(t){return a.get("hijpass",t,"name")||a.get("hijpass",t,"tag")||t}},setGridSectionMembers:function(e){e.anonymous=!1,e.addremove=!0,e.sortable=!0,e.nodescriptions=!0,e.rowcolors=!0},setAnonymousSection:function(e){e.anonymous=!0,e.addremove=!1},simpleHash:function(e){let t=0;e=e||"";for(let r=0;r<e.length;r++)t=(t<<5)-t+e.charCodeAt(r),t|=0;return t},setEditorOptionMembers:function(e,t,r){e.rows=30,e.load=function(s){return O.trimmed(t)};async function n(s,o){let i=String(P.simpleHash(o)),l=a.get("hijpass",s,r);i!==l&&(a.set("hijpass",s,r,i),await O.write(t,(o||"").trim().replace(/\r\n/g,`
`)+`
`))}return e.write=n,e.remove=n,e.monospace=!0,e},setConfContentOptionMembers:function(e,t,r){e.monospace=!0,e.rows=20,e.load=async function(n){return L.resolveDefault(O.read(N.getNodeConfigFilePath(t,r,n)),"")},e.write=async function(n,s){let o=N.normalizeFileContent(s);await O.write(N.getNodeConfigFilePath(t,r,n,this),o),a.set(t,n,"custom_conf_hash",String(P.simpleHash(o)))},e.remove=async function(n){await O.write(N.getNodeConfigFilePath(t,r,n,this),""),a.set(t,n,"custom_conf_hash","")}},createTextOption:function(e,t,r,n,s,o){let i=e.taboption(t,b.TextValue,r,n,s);return P.setEditorOptionMembers(i,o,r),i},createLogFlagOption:function(e,t,r){let n=a.get_first(t,t,"log_dir"),s=r?e.taboption(r,b.Flag,"log_enabled",_("Record Logs")):e.option(b.Flag,"log_enabled",_("Record Logs"));return s.modalonly=!0,s.write=function(o,i){let l="shunt.log",u=a.get(t,o,"name");u&&(l=u+"-"+o+".log"),a.set(t,o,"log_path",n+"/"+l)},s.remove=function(o){a.unset(t,o,"log_path")},s.load=function(o){return a.get(t,o,"log_path")?"1":"0"},s.rmempty=!0,s},appendEnabledNodeListenPorts:function(e){a.sections("hijpass","proxy_node",t=>{if(t.listen_port&&t.enabled==="1"){let r=_("Proxy node %s: %s").format(t.name,t.listen_port);e.value(t.listen_port,r)}})},loadProxyNodeOptions:function(e,t=!0){e.load=function(r){return delete this.keylist,delete this.vallist,this.value("hijpass-direct",_("Direct")),t&&this.value("hijpass-block",_("Block")),a.sections("hijpass","proxy_node",function(n){if(n.name&&n.enabled==="1"){let s=n.name;n.socks_port&&(s+=" ("+n.socks_port+")"),this.value(n.name,s)}}.bind(this)),b.ListValue.prototype.load.apply(this,[r])}},getEnabledProxyNodeOptions:function(e=!0){let t=[];return e&&(t.push({value:"hijpass-direct",label:_("Direct")}),t.push({value:"hijpass-block",label:_("Block")})),a.sections("hijpass","proxy_node",r=>{if(r.name&&r.enabled==="1"){let n=r.name;r.socks_port&&(n+=" ("+r.socks_port+")"),t.push({value:r.name,label:n})}}),t}};function Ke(e){let t=Number(e);return Number.isInteger(t)&&t>0&&t<=65535}function We(){let e=a.get_first("hijpass","dns"),t=e?.cdg_port||"";return{available:e?.dns_service==="chinadns-ng"&&Ke(t),port:t}}function ze(){let e=a.get_first("hijpass","shunt"),t=e?.dns_listen_port||"";return{available:e?.enabled!=="0"&&Ke(t),port:t}}function ln(e,t){let r=e;return t.port&&(r+=": "+t.port),t.available||(r+=" - "+_("Not available")),r}var I={getSource:function(){return a.get_first("hijpass","firewall","dns_forward")||U.NONE},getPreRoutingTarget:We,getRoutingTarget:ze,getTargetLabel:ln,validateSource:function(e){return!e||e===U.NONE?!0:e===U.PRE_ROUTING?We().available?!0:_("Independent DNS is unavailable or has no valid listen port"):e===U.ROUTING?ze().available?!0:_("Core DNS is disabled or has no valid listen port"):_("Unknown DNS forwarding source: %s").format(e)}};var qe=["http","tls","quic","bittorrent"],un=["hysteria2","vless"];function pn(e){return e?Array.isArray(e)?e.filter(t=>t):[e]:[]}function cn(e){return e==="hijpass-direct"||e==="hijpass-block"}function A(e,t){return t.length===0?!0:(ut.warning(e,t.join(`
`),8e3),!1)}function dn(){return a.get_first("hijpass","shunt","enabled")!=="0"&&a.get_first("hijpass","shunt","config_type")==="tmpl"}function gn(){let e=new Set;a.sections("hijpass","proxy_node",function(o){o.name&&e.add(o.name)});let t=[];function r(o,i){o&&!cn(o)&&!e.has(o)&&t.push(i)}let n=a.get_first("hijpass","shunt","default_proxy_node");n?r(n,_('Default global exit "%s" does not exist').format(n)):t.push(_("Default global exit is not configured"));let s=a.get_first("hijpass","shunt","ruleset_out_node");return r(s,_('Rule-set exit "%s" does not exist').format(s)),a.sections("hijpass","shunt_route_rule",function(o){if(o.enabled!=="1")return;let i=o.name||o[".name"];if(o.ip_version_split==="1"){o.proxy_node_v4?r(o.proxy_node_v4,_('Route rule "%s" IPv4 proxy node "%s" does not exist').format(i,o.proxy_node_v4)):t.push(_('Route rule "%s" IPv4 proxy node is not configured').format(i)),o.proxy_node_v6?r(o.proxy_node_v6,_('Route rule "%s" IPv6 proxy node "%s" does not exist').format(i,o.proxy_node_v6)):t.push(_('Route rule "%s" IPv6 proxy node is not configured').format(i));return}o.proxy_node?r(o.proxy_node,_('Route rule "%s" proxy node "%s" does not exist').format(i,o.proxy_node)):t.push(_('Route rule "%s" proxy node is not configured').format(i))}),A(_("Configuration contains missing proxy nodes"),t)}function _n(){let e=new Set;if(a.sections("hijpass","proxy_node",function(s){s.enabled!=="1"&&s.name&&e.add(s.name)}),e.size===0)return!0;let t=[],r=a.get_first("hijpass","shunt","default_proxy_node");r&&e.has(r)&&t.push(_('Default global exit "%s" is not enabled').format(r));let n=a.get_first("hijpass","shunt","ruleset_out_node");return n&&e.has(n)&&t.push(_('Rule-set exit "%s" is not enabled').format(n)),a.sections("hijpass","shunt_route_rule",function(s){if(s.enabled!=="1")return;let o=s.name||s[".name"];s.ip_version_split==="1"?(s.proxy_node_v4&&e.has(s.proxy_node_v4)&&t.push(_('Route rule "%s" IPv4 proxy node "%s" is not enabled').format(o,s.proxy_node_v4)),s.proxy_node_v6&&e.has(s.proxy_node_v6)&&t.push(_('Route rule "%s" IPv6 proxy node "%s" is not enabled').format(o,s.proxy_node_v6))):s.proxy_node&&e.has(s.proxy_node)&&t.push(_('Route rule "%s" proxy node "%s" is not enabled').format(o,s.proxy_node)),s.dns_proxy_node&&e.has(s.dns_proxy_node)&&t.push(_('Route rule "%s" DNS exit node "%s" is not enabled').format(o,s.dns_proxy_node))}),A(_("Configuration contains disabled nodes"),t)}function fn(){let e=w.getProxySectionMap(),t=[];return e.forEach(r=>{if(r.enabled!=="1"||r.type!==m.LOAD_BALANCE)return;let n=w.getProxyName(r),s=M(r.core);s!==y.SING_BOX&&s!==y.XRAY&&t.push(_('Load balancing node "%s" has an unsupported backend core').format(n));let o=w.normalizeProxyNodeList(r.member_node);if(o.length===0){t.push(_('Load balancing node "%s" has no member nodes').format(n));return}let i=o.filter((l,u)=>o.indexOf(l)!==u);i.length>0&&t.push(_('Load balancing node "%s" contains duplicate member nodes: %s').format(n,Array.from(new Set(i)).join(", "))),o.forEach(l=>{if(l===n){t.push(_('Load balancing node "%s" cannot include itself').format(n));return}let u=e.get(l);if(!u){t.push(_('Load balancing node "%s" member node "%s" does not exist').format(n,l));return}u.type===m.LOAD_BALANCE&&t.push(_('Load balancing node "%s" cannot contain load balancing member "%s"').format(n,l)),u.enabled!=="1"&&t.push(_('Load balancing node "%s" member node "%s" is not enabled').format(n,l)),w.isPort(u.socks_port)||t.push(_('Load balancing node "%s" member node "%s" has no valid SOCKS port configured').format(n,l))}),r.fallback_tag&&o.indexOf(r.fallback_tag)<0&&t.push(_('Load balancing node "%s" fallback node "%s" is not a member').format(n,r.fallback_tag))}),A(_("Configuration contains invalid load balancing nodes"),t)}function mn(){let e=w.getProxySectionMap(),t=[];e.forEach(n=>{if(n.enabled!=="1"||n.type===m.LOAD_BALANCE||!n.upstream_proxy_node)return;let s=w.getProxyName(n),o=n.upstream_proxy_node,i=e.get(o);if(!i){t.push(_('Proxy node "%s" upstream proxy node "%s" does not exist').format(s,o));return}i.enabled!=="1"&&t.push(_('Proxy node "%s" upstream proxy node "%s" is not enabled').format(s,o)),w.isPort(i.socks_port)||t.push(_('Proxy node "%s" upstream proxy node "%s" has no valid SOCKS port configured').format(s,o));let l=w.collectProxyChain(s,e);!l.cycle&&l.chain.length>se&&t.push(_('Proxy node "%s" nesting chain exceeds %d nodes: %s').format(s,se,l.chain.join(" -> ")))});let r=w.findProxyDependencyCycle(e);return r&&t.push(_("Proxy node dependency chain has a cycle: %s").format(r.join(" -> "))),A(_("Configuration contains invalid upstream proxy nodes"),t)}function hn(){let e=new Set,t=new Set;a.sections("hijpass","shunt_dns_node",function(i){i.tag&&(e.add(i.tag),i.enabled==="0"&&t.add(i.tag))});let r=[],n=[];function s(i,l){if(i){if(!e.has(i)){r.push(_('%s "%s" does not exist').format(l,i));return}t.has(i)&&n.push(_('%s "%s" is not enabled').format(l,i))}}let o=a.get_first("hijpass","shunt","default_dns_node");return o?s(o,_("Default global DNS")):r.push(_("Default global DNS is not configured")),s(a.get_first("hijpass","shunt","ruleset_dns_node"),_("Rule-set DNS")),a.sections("hijpass","shunt_route_rule",function(i){i.enabled==="1"&&s(i.dns_node,_('Route rule "%s" DNS node').format(i.name||i[".name"]))}),A(_("Configuration contains missing DNS nodes"),r)&&A(_("Configuration contains disabled DNS nodes"),n)}function yn(){let e=new Set;a.sections("hijpass","proxy_node",function(s){s.name&&e.add(s.name)});let t=a.get_first("hijpass","shunt","type"),r=a.get_first("hijpass","shunt","ruleset_convert"),n=[];return x.getRouteSection().rules.forEach(function(s){if(s.enabled!=="1")return;let o=s.dnsProxyNode,i=s.name||_("Unnamed Rule");if(bn(s,t,r)&&!o){n.push(_('Route rule "%s" uses IPv4/IPv6 split and must specify a DNS exit node').format(i));return}o&&o!=="hijpass-direct"&&!e.has(o)&&n.push(_('Route rule "%s" DNS exit node "%s" does not exist').format(i,o))}),A(_("Configuration contains invalid DNS exit nodes"),n)}function bn(e,t,r){if(e.ipVersionSplit!=="1")return!1;let n=x.parseRuleList(e);return t===v.XRAY?n.containDomain()||n.geoSite.length>0:n.containDomain()||n.containRuleSet()||r==="1"&&n.geoSite.length>0}function xn(){let e=new Set;a.sections("hijpass","proxy_node",function(i){i.enabled==="1"&&i.listen_port&&e.add(i.listen_port)});let t=a.get_first("hijpass","firewall","proxy_port"),r=a.get_first("hijpass","firewall","shunt_port"),n=a.get_first("hijpass","shunt","enabled")!=="0",s=a.get_first("hijpass","shunt","shunt_listen_port"),o=[];return t&&!e.has(t)&&o.push(_("Firewall proxy port %s does not reference an enabled proxy node").format(t)),r&&!e.has(r)&&!(n&&s===r)&&o.push(_("Firewall shunt port %s does not reference an enabled proxy node or shunt service").format(r)),A(_("Configuration conflict"),o)}function Nn(){let e=I.validateSource(I.getSource());return e===!0||A(_("Configuration conflict"),[e])}function Sn(){if(a.get_first("hijpass","dns","dns_service")!=="chinadns-ng")return!0;let t=I.getRoutingTarget(),r=t.port?"127.0.0.1#"+t.port:"",n=[];return[["direct_dns",_("Direct Domain DNS")],["proxy_dns",_("Proxy Domain DNS")]].forEach(([s,o])=>{let i=a.get_first("hijpass","dns",s);!i||i==="dnsmasq"||i==="system"||i==="custom"||(!t.available||i!==r)&&n.push(_("%s references an unavailable Core DNS port").format(o))}),A(_("Configuration conflict"),n)}function Tn(){if(a.get_first("hijpass","shunt","type")!==v.XRAY)return!0;let t=[];return a.sections("hijpass","shunt_route_rule",function(r){if(r.enabled!=="1")return;let n=pn(r.protocol).filter(s=>qe.indexOf(s)===-1);n.length>0&&t.push(_('Route rule "%s" contains protocols unsupported by Xray: %s').format(r.name||r[".name"],n.join(", ")))}),t.length>0?(ut.warning(_("Unsupported Xray protocol configuration"),t.join(`
`)+`
`+_("Xray route protocol only supports: %s").format(qe.join(", ")),8e3),!1):!0}function wn(){if(a.get_first("hijpass","shunt","type")!==v.XRAY)return!0;let t=[];return a.sections("hijpass","shunt_dns_node",function(r){r.enabled!=="0"&&r.type==="tls"&&t.push(_('DNS node "%s" uses TLS, which is only supported by sing-box').format(r.tag||r[".name"]))}),A(_("Unsupported Xray DNS configuration"),t)}function On(){let e=[];return a.sections("hijpass","proxy_node",function(t){t.enabled!=="1"||M(t.core)!==v.XRAY||t.tls_insecure!=="1"||un.indexOf(t.type)!==-1&&e.push(_('Proxy node "%s" enables insecure TLS, which is not supported by current Xray').format(t.name||t[".name"]))}),A(_("Unsupported Xray TLS configuration"),e)}function vn(e,t,r){return new Promise(n=>{G.showModal(e,[E("div",{style:["box-sizing:border-box","width:100%","margin:0 0 14px 0","padding:14px 16px","border-radius:4px","background:rgba(127,127,127,0.08)","line-height:1.55"].join(";")},[E("div",{style:"margin:0 0 12px 0"},t),E("div",{style:"display:flex;flex-direction:column;gap:6px;margin:0"},r.map(s=>E("div",{style:"margin:0;word-break:break-word"},s)))]),E("div",{style:"display:flex;justify-content:flex-end;gap:10px;margin:0"},[E("button",{class:"btn cbi-button",click:function(s){s.preventDefault(),G.hideModal(),n(!1)}},_("Cancel")),E("button",{class:"btn cbi-button-action",click:function(s){s.preventDefault(),G.hideModal(),n(!0)}},_("Continue Apply"))])])})}function En(e,t,r){let n=x.parseRuleList(e),s=e.name||e[".name"]||_("Unnamed Rule"),o=r==="1";if(t===v.XRAY)return n.isEmpty("geo")?_('Route rule "%s" has no valid match conditions for Xray').format(s):n.containRuleSet()&&!n.containDomain()&&!n.containIp()&&!n.containGeo()?_('Route rule "%s" only contains rule-set target conditions unsupported by Xray').format(s):null;if(t===v.SING_BOX){if(!o&&n.containGeo()&&(n.geoSite=[],n.geoIp=[],!n.containDomain()&&!n.containIp()&&!n.containRuleSet()))return _('Route rule "%s" has no target conditions for sing-box after removing unconverted geosite/geoip').format(s);if(n.isEmpty("set")&&!(o&&n.containGeo()))return _('Route rule "%s" has no valid match conditions for sing-box').format(s)}return null}function Cn(){let e=a.get_first("hijpass","shunt","type"),t=a.get_first("hijpass","shunt","ruleset_convert"),r=[];return x.getRouteSection().rules.forEach(n=>{if(n.enabled!=="1")return;let s=En(n,e,t);s&&r.push(s)}),r.length>0?vn(_("Some route rules will be skipped"),_("The following rules have no valid configuration for the current core and options, so they will not be written to the final configuration. Continue applying the configuration?"),r):!0}var $e={runSaveApplyPrechecks:async function(){return!mn()||!fn()||!On()||!xn()||!Nn()||!Sn()?!1:dn()?gn()&&_n()&&hn()&&yn()&&await Cn()&&Tn()&&wn():!0}};function Pn(){return a.get_first("hijpass","hijpass","enabled")==="0"}var Je={genHandleSaveApply:function(){return async function(e,t){try{if(await this.handleSave(e),Pn()){await a.save(),await G.changes.apply(t=="0");return}if(!await $e.runSaveApplyPrechecks())return;if(a.get_first("hijpass","shunt","type")===v.SING_BOX&&a.get_first("hijpass","shunt","ruleset_convert")==="1"&&ot.writeGeoRule(),a.get_first("hijpass","shunt","config_type")==="tmpl"){let o=Xe.getShuntConfData();await O.write(N.getFilePath("shunt_conf"),o),a.set_first("hijpass","shunt","shunt_hash",o?String(P.simpleHash(o)):"-1")}await a.save();let s=await a.changes();await He.cleanupChangedNodeFiles(s),await je.writeGeneratedProxyConfigs(),await G.changes.apply(t=="0")}catch(r){console.log(r),ut.error(_("Configuration Apply Failed"),_(r.message),5e3)}}}};var Vt=network;function Rn(e,t){let r=e[t]?.name,n=e[t]?.ipaddrs?.[0],s=((r??"")+" "+(n??"")).trim();return t+(s?" ("+s+")":"")}function Ze(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"&&t):typeof e=="string"?e.trim().split(/\s+/).filter(Boolean):[]}function Se(e){return e?.getName?.()??e?.device??""}function Qe(e,t,r){if(!t)return;let n=e.get(t)??[];n.includes(r)||n.push(r),e.set(t,n)}function An(){let e=new Map,t=new Map,r=new Set(["wan","wan6"]),n=new Set;return a.sections("firewall","zone",s=>{let o=s.name??"";Ze(s.network).forEach(i=>{Qe(e,i,o),o.toLowerCase()==="wan"&&r.add(i)}),Ze(s.device).forEach(i=>{Qe(t,i,o),o.toLowerCase()==="wan"&&n.add(i)})}),{zonesByNetwork:e,zonesByDevice:t,wanNetworks:r,wanDevices:n}}function Dn(e,t){let r=new Set(t.map(Se).filter(Boolean)),{zonesByNetwork:n,zonesByDevice:s,wanNetworks:o,wanDevices:i}=An(),l=e.map(d=>{let g=d.getName?.()??"",h=d.getL3Device?.(),S=d.getDevice?.(),c=Se(h),f=Se(S),T=c||(r.has(f)?f:""),F=Array.from(new Set([...n.get(g)??[],...s.get(T)??[]]));return{network:g,zones:F,device:T}}),u=new Set([...i,...l.filter(d=>o.has(d.network)||d.zones.some(g=>g.toLowerCase()==="wan")).map(d=>d.device).filter(Boolean)]),p=new Map;return l.forEach(d=>{if(!d.device||d.device==="lo"||d.network==="loopback"||o.has(d.network)||d.zones.some(h=>h.toLowerCase()==="wan")||u.has(d.device))return;let g=p.get(d.device);g||(g={device:d.device,networks:[],zones:[]},p.set(d.device,g)),g.networks.includes(d.network)||g.networks.push(d.network),d.zones.forEach(h=>{g.zones.includes(h)||g.zones.push(h)})}),Array.from(p.values()).sort((d,g)=>d.device.localeCompare(g.device))}function Un(e){let t=[_("Networks: %s").format(e.networks.join(", "))];return e.zones.length>0&&t.push(_("Firewall zones: %s").format(e.zones.join(", "))),e.device+" ("+t.join("; ")+")"}var Y={loadAclContext:async function(){let e={},t=[],r=[];return await Promise.all([Vt.getHostHints().then(n=>{e=n?.hosts??{}}),Vt.getNetworks().then(n=>{t=n??[]}),Vt.getDevices().then(n=>{r=n??[]})]),{hostHints:e,interfaces:Dn(t,r)}},appendHostHintOptions:function(e,t){Object.keys(t).forEach(r=>{e.value(r,Rn(t,r))})},appendInterfaceOptions:function(e,t){t.forEach(r=>{e.value(r.device,Un(r))})},createIfaceValidator:function(e){return function(t,r){return r?e.some(s=>s.device===r)?!0:_('Interface "%s" Not Found').format(r):!0}},createNftViewOption:function(e){let t=e.taboption("nftables",b.TextValue,"_nft_view");t.rows=30,t.monospace=!0,t.load=function(){return""},t.write=function(){},t.renderWidget=function(r,n,s){let o=b.TextValue.prototype.renderWidget.call(this,r,n,s),i=o.querySelector("textarea"),l=!1,u=!1,p=_("Click to View Firewall Rules");i.readOnly=!0,i.placeholder=p,i.setAttribute("aria-label",p),i.title=p,i.style.cursor="pointer";let d=function(){l||u||(u=!0,i.setAttribute("aria-busy","true"),i.style.cursor="progress",i.value=_("Loading"),O.exec_direct("/usr/lib/hijpass/nft.sh",["show"],"text").then(g=>{i.value=g?.trim()||_("No Rules"),i.setAttribute("aria-label",_("Firewall Rules")),i.removeAttribute("title"),l=!0}).catch(()=>{i.value=_("Read Failed")}).finally(()=>{u=!1,i.removeAttribute("aria-busy"),i.style.cursor=l?"text":"pointer"}))};return i.addEventListener("click",d),i.addEventListener("keydown",function(g){!l&&(g.key==="Enter"||g.key===" ")&&(g.preventDefault(),d())}),o}}};var kn=we.extend({load:function(){return Promise.all([a.load("hijpass"),a.load("firewall")])},handleSaveApply:Je.genHandleSaveApply(),render:async function(){let e=new b.Map("hijpass",_("Firewall Configuration"),_("Configure Firewall")),t=e.section(b.TypedSection,"firewall");return t.anonymous=!0,t.addremove=!1,Bn(t),Ln(t),await Yn(t),Mn(t),e.render()}});function Ln(e){let t=e.taboption("basic",b.ListValue,"tproxy_proto",_("TPROXY Protocol"),_("TPROXY Protocol Type"));t.value("tcp","TCP"),t.value("udp","UDP"),t.value("tcp,udp","TCP + UDP"),t.default="tcp,udp",t.rmempty=!1,In(e),Fn(e)}function In(e){let t=e.taboption("basic",b.ListValue,"proxy_port",_("Proxy Port"),_("Select Proxy Port"));P.appendEnabledNodeListenPorts(t),t.value("",_("Disabled")),t.default="",t.rmempty=!0;let r=e.taboption("basic",b.ListValue,"shunt_port",_("Default Shunt Port"),_("Select Shunt Port")),n=a.get_first("hijpass","shunt","shunt_listen_port");n&&r.value(n,_("Shunt Port: %s").format(n)),P.appendEnabledNodeListenPorts(r),r.value("",_("Disabled")),r.default="",r.rmempty=!0;let s=e.taboption("basic",b.ListValue,"dns_forward",_("DNS Forwarding"),_("Redirect DNS queries from clients selected by the firewall ACL and, when enabled, router system DNS queries to the selected local DNS service"));s.value(U.NONE,_("Do not forward"));let o=I.getPreRoutingTarget();s.value(U.PRE_ROUTING,I.getTargetLabel(_("Independent DNS"),o));let i=I.getRoutingTarget();s.value(U.ROUTING,I.getTargetLabel(_("Core DNS"),i)),s.default=U.NONE,s.rmempty=!1,s.validate=function(l,u){return I.validateSource(u)}}function Fn(e){let t=e.taboption("basic",b.Flag,"use_chnroute",_("Use CHN Route"),_("Enable CHN IP Route"));t.rmempty=!0}function Mn(e){P.createTextOption(e,"ip_direct","ip_direct_hash",null,_("Edit IP Direct List"),N.getFilePath("ip_direct")),P.createTextOption(e,"ip_proxy","ip_proxy_hash",null,_("Edit IP Proxy List"),N.getFilePath("ip_proxy")),P.createTextOption(e,"nftables","nft_hash",null,_("Edit the nftables rule template. Intended for users familiar with nftables and HiJpass rule generation. Arbitrary changes may break compatibility with LuCI configuration features and affect network connectivity."),N.getFilePath("nft")),Y.createNftViewOption(e),P.createTextOption(e,"hook","nft_hook_hash",null,_("Executed after HiJpass attempts to load its generated nftables rules during firewall start or reload. Runs only when the generated rules file and this script exist; it may also run if loading the rules fails."),N.getFilePath("nft_hook"))}function Bn(e){e.tab("basic",_("Basic Settings")),e.tab("acl",_("Access Control List")),e.tab("ip_direct",_("IP Direct List")),e.tab("ip_proxy",_("IP Proxy List")),e.tab("nftables",_("Firewall Rules")),e.tab("hook",_("Custom Script"))}async function Yn(e){let t=e.taboption("acl",b.Flag,"proxy_local",_("Proxy Router Traffic"),_("Transparently proxy eligible router-originated TCP and UDP traffic"));t.rmempty=!1,t.default="1";let r=e.taboption("acl",b.Flag,"acl_default_allow",_("Default Proxy All"),_("Off: Default no proxy; On: Default proxy all"));r.rmempty=!1,r.default="0";let n=await Y.loadAclContext(),s=Y.createIfaceValidator(n.interfaces),o=e.taboption("acl",b.DynamicList,"proxy_mac_list",_("Proxy Device"),_("Proxy Device"));o.datatype="macaddr",o.rmempty=!0,o.depends("acl_default_allow","0"),Y.appendHostHintOptions(o,n.hostHints);let i=e.taboption("acl",b.DynamicList,"proxy_iface_list",_("Proxy Interface"),_("Proxy client traffic entering through the selected logical network interfaces; WAN interfaces cannot be selected"));i.rmempty=!0,i.depends("acl_default_allow","0"),i.validate=s,Y.appendInterfaceOptions(i,n.interfaces);let l=e.taboption("acl",b.DynamicList,"proxy_mac_exclude_list",_("Non-Proxy Device"),_("Non-Proxy Device"));l.datatype="macaddr",l.rmempty=!0,l.depends("acl_default_allow","1"),Y.appendHostHintOptions(l,n.hostHints);let u=e.taboption("acl",b.DynamicList,"proxy_iface_exclude_list",_("Non-Proxy Interface"),_("Exclude client traffic entering through the selected logical network interfaces; WAN interfaces are always excluded"));u.rmempty=!0,u.depends("acl_default_allow","1"),u.validate=s,Y.appendInterfaceOptions(u,n.interfaces)}var Gn=kn;return or(Hn);})();


return LuciView.default;