build-reject-domainset.ts 7.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162
  1. // @ts-check
  2. import path from 'node:path';
  3. import process from 'node:process';
  4. import { processHosts } from './lib/parse-filter/hosts';
  5. import { processDomainLists } from './lib/parse-filter/domainlists';
  6. import { processFilterRules } from './lib/parse-filter/filters';
  7. import { HOSTS, ADGUARD_FILTERS, PREDEFINED_WHITELIST, DOMAIN_LISTS, HOSTS_EXTRA, DOMAIN_LISTS_EXTRA, ADGUARD_FILTERS_EXTRA, PHISHING_DOMAIN_LISTS_EXTRA, ADGUARD_FILTERS_WHITELIST } from './constants/reject-data-source';
  8. import { compareAndWriteFile } from './lib/create-file';
  9. import { readFileIntoProcessedArray } from './lib/fetch-text-by-line';
  10. import { task } from './trace';
  11. // tldts-experimental is way faster than tldts, but very little bit inaccurate
  12. // (since it is hashes based). But the result is still deterministic, which is
  13. // enough when creating a simple stat of reject hosts.
  14. import { SHARED_DESCRIPTION } from './constants/description';
  15. import { getPhishingDomains } from './lib/get-phishing-domains';
  16. import { addArrayElementsToSet } from 'foxts/add-array-elements-to-set';
  17. import { appendArrayInPlace } from './lib/append-array-in-place';
  18. import { OUTPUT_INTERNAL_DIR, SOURCE_DIR } from './constants/dir';
  19. import { DomainsetOutput } from './lib/create-file';
  20. import { foundDebugDomain } from './lib/parse-filter/shared';
  21. const readLocalRejectDomainsetPromise = readFileIntoProcessedArray(path.join(SOURCE_DIR, 'domainset/reject_sukka.conf'));
  22. const readLocalRejectExtraDomainsetPromise = readFileIntoProcessedArray(path.join(SOURCE_DIR, 'domainset/reject_sukka_extra.conf'));
  23. const readLocalRejectRulesetPromise = readFileIntoProcessedArray(path.join(SOURCE_DIR, 'non_ip/reject.conf'));
  24. const readLocalRejectDropRulesetPromise = readFileIntoProcessedArray(path.join(SOURCE_DIR, 'non_ip/reject-drop.conf'));
  25. const readLocalRejectNoDropRulesetPromise = readFileIntoProcessedArray(path.join(SOURCE_DIR, 'non_ip/reject-no-drop.conf'));
  26. const readLocalMyRejectRulesetPromise = readFileIntoProcessedArray(path.join(SOURCE_DIR, 'non_ip/my_reject.conf'));
  27. export const buildRejectDomainSet = task(require.main === module, __filename)(async (span) => {
  28. const rejectBaseDescription = [
  29. ...SHARED_DESCRIPTION,
  30. '',
  31. 'The domainset supports AD blocking, tracking protection, privacy protection, anti-phishing, anti-mining',
  32. '',
  33. 'Build from:',
  34. ...HOSTS.map(host => ` - ${host[0]}`),
  35. ...DOMAIN_LISTS.map(domainList => ` - ${domainList[0]}`),
  36. ...ADGUARD_FILTERS.map(filter => ` - ${Array.isArray(filter) ? filter[0] : filter}`)
  37. ];
  38. const rejectOutput = new DomainsetOutput(span, 'reject')
  39. .withTitle('Sukka\'s Ruleset - Reject Base')
  40. .withDescription(rejectBaseDescription);
  41. const rejectExtraOutput = new DomainsetOutput(span, 'reject_extra')
  42. .withTitle('Sukka\'s Ruleset - Reject Extra')
  43. .withDescription([
  44. ...SHARED_DESCRIPTION,
  45. '',
  46. 'The domainset supports AD blocking, tracking protection, privacy protection, anti-phishing, anti-mining',
  47. '',
  48. 'Build from:',
  49. ...HOSTS_EXTRA.map(host => ` - ${host[0]}`),
  50. ...DOMAIN_LISTS_EXTRA.map(domainList => ` - ${domainList[0]}`),
  51. ...ADGUARD_FILTERS_EXTRA.map(filter => ` - ${Array.isArray(filter) ? filter[0] : filter}`),
  52. ...PHISHING_DOMAIN_LISTS_EXTRA.map(domainList => ` - ${domainList[0]}`)
  53. ]);
  54. const appendArrayToRejectOutput = rejectOutput.addFromDomainset.bind(rejectOutput);
  55. const appendArrayToRejectExtraOutput = rejectExtraOutput.addFromDomainset.bind(rejectExtraOutput);
  56. /** Whitelists */
  57. const filterRuleWhitelistDomainSets = new Set(PREDEFINED_WHITELIST);
  58. // Parse from AdGuard Filters
  59. await span
  60. .traceChild('download and process hosts / adblock filter rules')
  61. .traceAsyncFn((childSpan) => Promise.all([
  62. // Parse from remote hosts & domain lists
  63. HOSTS.map(entry => processHosts(childSpan, ...entry).then(appendArrayToRejectOutput)),
  64. HOSTS_EXTRA.map(entry => processHosts(childSpan, ...entry).then(appendArrayToRejectExtraOutput)),
  65. DOMAIN_LISTS.map(entry => processDomainLists(childSpan, ...entry).then(appendArrayToRejectOutput)),
  66. DOMAIN_LISTS_EXTRA.map(entry => processDomainLists(childSpan, ...entry).then(appendArrayToRejectExtraOutput)),
  67. ADGUARD_FILTERS.map(
  68. entry => processFilterRules(childSpan, ...entry)
  69. .then(({ white, black }) => {
  70. addArrayElementsToSet(filterRuleWhitelistDomainSets, white);
  71. appendArrayToRejectOutput(black);
  72. })
  73. ),
  74. ADGUARD_FILTERS_EXTRA.map(
  75. entry => processFilterRules(childSpan, ...entry)
  76. .then(({ white, black }) => {
  77. addArrayElementsToSet(filterRuleWhitelistDomainSets, white);
  78. appendArrayToRejectExtraOutput(black);
  79. })
  80. ),
  81. ADGUARD_FILTERS_WHITELIST.map(entry => processFilterRules(childSpan, ...entry).then(({ white, black }) => {
  82. addArrayElementsToSet(filterRuleWhitelistDomainSets, white);
  83. addArrayElementsToSet(filterRuleWhitelistDomainSets, black);
  84. })),
  85. getPhishingDomains(childSpan).then(appendArrayToRejectExtraOutput),
  86. readLocalRejectDomainsetPromise.then(appendArrayToRejectOutput),
  87. readLocalRejectDomainsetPromise.then(appendArrayToRejectExtraOutput),
  88. readLocalRejectExtraDomainsetPromise.then(appendArrayToRejectExtraOutput),
  89. // Dedupe domainSets
  90. // span.traceChildAsync('collect black keywords/suffixes', async () =>
  91. /**
  92. * Collect DOMAIN, DOMAIN-SUFFIX, and DOMAIN-KEYWORD from non_ip/reject.conf for deduplication
  93. * DOMAIN-WILDCARD is not really useful for deduplication, it is only included in AdGuardHome output
  94. */
  95. rejectOutput.addFromRuleset(readLocalRejectRulesetPromise),
  96. rejectExtraOutput.addFromRuleset(readLocalRejectRulesetPromise)
  97. ].flat()));
  98. if (foundDebugDomain.value) {
  99. process.exit(1);
  100. }
  101. await Promise.all([
  102. rejectOutput.done(),
  103. rejectExtraOutput.done()
  104. ]);
  105. // whitelist
  106. span.traceChildSync('whitelist', () => {
  107. for (const domain of filterRuleWhitelistDomainSets) {
  108. rejectOutput.whitelistDomain(domain);
  109. rejectExtraOutput.whitelistDomain(domain);
  110. }
  111. for (let i = 0, len = rejectOutput.$preprocessed.length; i < len; i++) {
  112. rejectExtraOutput.whitelistDomain(rejectOutput.$preprocessed[i]);
  113. }
  114. });
  115. return Promise.all([
  116. rejectOutput.write(),
  117. rejectExtraOutput.write(),
  118. compareAndWriteFile(
  119. span,
  120. appendArrayInPlace(
  121. [
  122. '! Title: Sukka\'s Ruleset - Blocklist for AdGuardHome',
  123. '! Last modified: ' + new Date().toUTCString(),
  124. '! Expires: 6 hours',
  125. '! License: https://github.com/SukkaW/Surge/blob/master/LICENSE',
  126. '! Homepage: https://github.com/SukkaW/Surge',
  127. '! Description: The domainset supports AD blocking, tracking protection, privacy protection, anti-phishing, anti-mining',
  128. '!'
  129. ],
  130. appendArrayInPlace(
  131. rejectOutput.adguardhome(),
  132. (
  133. await new DomainsetOutput(span, 'my_reject')
  134. .addFromRuleset(readLocalMyRejectRulesetPromise)
  135. .addFromRuleset(readLocalRejectRulesetPromise)
  136. .addFromRuleset(readLocalRejectDropRulesetPromise)
  137. .addFromRuleset(readLocalRejectNoDropRulesetPromise)
  138. .done()
  139. ).adguardhome()
  140. )
  141. ),
  142. path.join(OUTPUT_INTERNAL_DIR, 'reject-adguardhome.txt')
  143. )
  144. ]);
  145. });