feat: 脚本操作可使用 ProxyUtils.age.encrypt 和 ProxyUtils.age.decrypt 进行 age 加密解密

Author: xream

backend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sub-store",
-  "version": "2.24.4",
+  "version": "2.24.5",
   "description": "Advanced Subscription Manager for QX, Loon, Surge, Stash and Shadowrocket.",
   "main": "src/main.js",
   "packageManager": "pnpm@11.0.9",

backend/src/core/proxy-utils/index.js

@@ -3,6 +3,10 @@ import { Buffer } from 'buffer';
 import rs from '@/utils/rs';
 import YAML from '@/utils/yaml';
 import download, { downloadFile } from '@/utils/download';
+import {
+    decryptArmorIfPresent,
+    encryptArmor,
+} from '@/utils/age';
 import {
     isIPv4,
     isIPv6,
@@ -37,6 +41,11 @@ import JSON5 from 'json5';
 import { hex_md5 } from '@/vendor/md5';
 import SurgeMac_Producer from './producers/surgemac';
 
+const ageUtils = Object.freeze({
+    encrypt: encryptArmor,
+    decrypt: decryptArmorIfPresent,
+});
+
 function preprocess(raw) {
     for (const processor of PROXY_PREPROCESSORS) {
         try {
@@ -644,6 +653,7 @@ export const ProxyUtils = {
     process: processFn,
     processResponse: processResponseFn,
     produce,
+    age: ageUtils,
     ipAddress,
     getRandomPort,
     isIPv4,

backend/src/test/proxy-processors/process-context.spec.js

@@ -2,6 +2,7 @@ import { expect } from 'chai';
 import { describe, it } from 'mocha';
 
 import { ProxyUtils } from '@/core/proxy-utils';
+import { generateKeyPair } from '@/utils/age';
 
 describe('Process context control', function () {
     it('disables later actions by customName from shared context', async function () {
@@ -189,4 +190,42 @@ describe('Process context control', function () {
 
         expect(output.body).to.equal('AC');
     });
+
+    it('exposes age encrypt/decrypt helpers in script operators', async function () {
+        this.timeout(10000);
+
+        const pair = await generateKeyPair();
+        const operators = [
+            {
+                type: 'Script Operator',
+                args: {
+                    mode: 'script',
+                    arguments: {
+                        publicKey: pair['age-public-key'],
+                        secretKey: pair['age-secret-key'],
+                    },
+                    content: `async function operator(proxies) {
+                        const encrypted = await ProxyUtils.age.encrypt(
+                            'hello age',
+                            $arguments.publicKey,
+                        );
+                        const decrypted = await ProxyUtils.age.decrypt(
+                            encrypted,
+                            $arguments.secretKey,
+                        );
+                        return proxies.map((proxy) => ({
+                            ...proxy,
+                            name: proxy.name + '-' + decrypted,
+                        }));
+                    }`,
+                },
+            },
+        ];
+
+        const output = await ProxyUtils.process([{ name: 'A' }], operators);
+
+        expect(output.map((proxy) => proxy.name)).to.deep.equal([
+            'A-hello age',
+        ]);
+    });
 });

scripts/demo.js

@@ -205,6 +205,10 @@ function operator(proxies = [], targetPlatform, context) {
   //     Gist, // Gist 类
   //     download, // 内部的下载方法, 见 backend/src/utils/download.js
   //     downloadFile, // 下载二进制文件, 见 backend/src/utils/download.js
+  //     age: {
+  //         encrypt, // age 加密, 返回 armored 文本
+  //         decrypt, // age 解密, 非 armored 文本会原样返回
+  //     },
   //     MMDB, // Node.js 环境 可用于模拟 Surge/Loon 的 $utils.ipasn, $utils.ipaso, $utils.geoip. 具体见 https://t.me/zhetengsha/1269
   //     isValidUUID, // 辅助判断是否为有效的 UUID
   //     doh, // DNS over HTTPS 解析, 源码见 backend/src/utils/dns.js, 使用参考本项目里调用方式 backend/src/core/proxy-utils/processors/index.js
@@ -241,6 +245,20 @@ function operator(proxies = [], targetPlatform, context) {
   // }))
   // $server.reuse = config.reuse
 
+  // 示例: 使用 ProxyUtils.age.encrypt 加密文本
+  // const armored = await ProxyUtils.age.encrypt(
+  //     'hello age',
+  //     'age1...'
+  // )
+  // console.log(armored)
+
+  // 示例: 使用 ProxyUtils.age.decrypt 解密 armored 文本
+  // const plaintext = await ProxyUtils.age.decrypt(
+  //     armored,
+  //     'AGE-SECRET-KEY-1...'
+  // )
+  // console.log(plaintext)
+
   // 1. Surge 输出 WireGuard 完整配置
 
   // let proxies = await produceArtifact({