232 Commits

Include renames

Author	SHA1	Message	Date
風雪	6b3a09a09c	update ... update update update update update update update update update update update	2026-08-19 12:49:36 +08:00
風雪	fc00113ea5	fix(vless): pair encryption/decryption correctly for TCP Vision ... - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping fix(vless): pair encryption/decryption correctly for TCP Vision - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping fix(vless): pair encryption/decryption correctly for TCP Vision - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping fix(vless): pair encryption/decryption correctly for TCP Vision - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping fix(vless): pair encryption/decryption correctly for TCP Vision - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping fix(vless): pair encryption/decryption correctly for TCP Vision - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping fix(vless): pair encryption/decryption correctly for TCP Vision - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping fix(vless): pair encryption/decryption correctly for TCP Vision - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping fix(vless): pair encryption/decryption correctly for TCP Vision - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping fix(vless): pair encryption/decryption correctly for TCP Vision - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping fix(vless): pair encryption/decryption correctly for TCP Vision - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping fix(vless): pair encryption/decryption correctly for TCP Vision - Stop copying server decryption into client encryption - Store both fields; strip encryption (client-only) from server Compile - Form + capability + schema support encryption for subscription export - Tests for export and compile stripping	2026-08-18 14:00:26 +00:00
風雪	0e46914891	fix(startup): rollback Mihomo config when activation fails	2026-08-18 20:15:01 +08:00
風雪	44e5c2e46a	test(telegram): prevent chat allowlist ID alias bypass ... test(telegram): prevent chat allowlist ID alias bypass test(telegram): prevent chat allowlist ID alias bypass test(telegram): prevent chat allowlist ID alias bypass test(telegram): prevent chat allowlist ID alias bypass test(telegram): prevent chat allowlist ID alias bypass test(telegram): prevent chat allowlist ID alias bypass test(telegram): prevent chat allowlist ID alias bypass test(telegram): prevent chat allowlist ID alias bypass test(telegram): prevent chat allowlist ID alias bypass test(telegram): prevent chat allowlist ID alias bypass test(telegram): prevent chat allowlist ID alias bypass	2026-08-18 19:08:36 +08:00
風雪	5d2b916307	fix(telegram): enforce exact chat allowlist IDs	2026-08-18 19:08:30 +08:00
風雪	eec0726b52	fix(mihomo): restore config when initial start fails	2026-08-18 19:07:18 +08:00
風雪	3bfe0cd1c5	fix(listener): restore bindings when delete rollback occurs	2026-08-18 19:06:43 +08:00
風雪	94877e6921	test(listener): cover VLESS flow normalization ... test(listener): cover VLESS flow normalization test(listener): cover VLESS flow normalization test(listener): cover VLESS flow normalization test(listener): cover VLESS flow normalization test(listener): cover VLESS flow normalization test(listener): cover VLESS flow normalization test(listener): cover VLESS flow normalization test(listener): cover VLESS flow normalization test(listener): cover VLESS flow normalization test(listener): cover VLESS flow normalization test(listener): cover VLESS flow normalization	2026-08-18 19:03:29 +08:00
風雪	ea71e9f4f3	fix(listener): compile VLESS flow into users	2026-08-18 19:03:19 +08:00
風雪	256180b190	fix(config): pass HasCredentialState into CompileInput	2026-08-18 17:53:49 +08:00
風雪	4212b3ebb7	fix(protocol): pass HasCredentialState into compilers; wire generator	2026-08-18 17:53:10 +08:00
風雪	4c4e3a07ba	fix(protocol): honor HasCredentialState; normalize ShadowQUIC object users	2026-08-18 17:52:47 +08:00
風雪	96153d4531	Add files via upload ... Add files via upload Add files via upload Add files via upload Add files via upload Add files via upload Add files via upload Add files via upload Add files via upload Add files via upload Add files via upload Add files via upload	2026-08-18 17:14:11 +08:00
風雪	7789afd584	refactor(config): generateListeners via protocol.Compile registry	2026-08-18 17:10:31 +08:00
風雪	ef236c6a6f	feat: per-node Access Profile fields on Listener model	2026-08-18 17:09:36 +08:00
風雪	68d9d80a0e	feat(protocol): Compile() modules + registry ( modular generation)	2026-08-18 17:09:22 +08:00
風雪	79fc469e11	feat(node): Access Profile public_host overrides URI export host	2026-08-18 16:58:16 +08:00
風雪	5370cf8b23	feat(router): mount GET /api/v1/capabilities	2026-08-18 16:57:38 +08:00
風雪	b23af508b6	feat(protocol): capability manifest for VLESS/VMess/Trojan/SS/HY2/TUIC/SQ	2026-08-18 16:57:06 +08:00
風雪	a8c8a52a25	feat(protocol): m-ui capability schema + Access Profile (settings + URI export)	2026-08-18 16:56:35 +08:00
風雪	29f7375b38	test: prevent duplicate listener and node route registration ... test: prevent duplicate listener and node route registration test: prevent duplicate listener and node route registration test: prevent duplicate listener and node route registration test: prevent duplicate listener and node route registration test: prevent duplicate listener and node route registration test: prevent duplicate listener and node route registration test: prevent duplicate listener and node route registration test: prevent duplicate listener and node route registration test: prevent duplicate listener and node route registration test: prevent duplicate listener and node route registration test: prevent duplicate listener and node route registration	2026-08-18 13:49:00 +08:00
風雪	aad12647c9	test: cover case-insensitive Bearer parsing ... test: cover case-insensitive Bearer parsing test: cover case-insensitive Bearer parsing test: cover case-insensitive Bearer parsing test: cover case-insensitive Bearer parsing test: cover case-insensitive Bearer parsing test: cover case-insensitive Bearer parsing test: cover case-insensitive Bearer parsing test: cover case-insensitive Bearer parsing test: cover case-insensitive Bearer parsing test: cover case-insensitive Bearer parsing test: cover case-insensitive Bearer parsing	2026-08-18 13:48:49 +08:00
風雪	278eb52b1a	fix: parse Authorization scheme case-insensitively	2026-08-18 13:48:39 +08:00
風雪	9521e304cf	fix: return updated access token fields	2026-08-18 13:48:30 +08:00
風雪	7e80804323	fix: expose node-only routes without duplicate CRUD	2026-08-18 13:48:19 +08:00
風雪	664885ce2a	fix: expose node-only routes without duplicate CRUD	2026-08-18 13:47:43 +08:00
風雪	e73ed4f63e	fix: avoid duplicate node/listener Gin routes	2026-08-18 13:47:34 +08:00
風雪	93e86ef8a2	fix(converter): Hysteria2 + ShadowQUIC client export (alpn/sni/jls-upstream/defaults)	2026-08-18 12:52:00 +08:00
風雪	8d1f087ac7	test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests ... test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests test(converter): fix Reality test (no fmt) + HY2/ShadowQUIC export tests	2026-08-18 12:50:54 +08:00
風雪	0f8682795a	fix(converter): Hysteria2 + ShadowQUIC client export aligned with clashmeta-inbound / official docs	2026-08-18 12:50:28 +08:00
風雪	769770980e	fix(converter): Reality client defaults from clashmeta-inbound (fingerprint/alpn/udp/network/mlkem)	2026-08-18 12:40:45 +08:00
風雪	97109057b3	fix(config): do not emit tls:true on Reality listeners (clashmeta-inbound)	2026-08-18 12:39:48 +08:00
風雪	0fada59209	fix: align Reality export with clashmeta-inbound minimal samples (fingerprint/alpn/pbk defaults; no server tls with reality)	2026-08-18 12:38:57 +08:00
風雪	166c6135c6	fix(converter): full client export parity with official inbound/outbound (TLS wrappers, transport, Reality)	2026-08-18 12:25:31 +08:00
風雪	c7204efc13	fix(converter): align client export with official inbound/outbound docs (TLS wrappers, ws headers, Reality)	2026-08-18 12:23:54 +08:00
風雪	233f29cdce	fix(converter): export TLS/Reality for VLESS client YAML (derive pbk, vision needs tls)	2026-08-18 12:11:17 +08:00
風雪	a6523cd610	fix(node): trust pre-resolved host in ClientURIs; host helper lives in uri_host.go	2026-08-18 11:13:10 +08:00
風雪	a73961d077	fix(node): public host helper for share URI export	2026-08-18 11:12:24 +08:00
風雪	a40b339352	chore: remove uri_host.go pending unified host helper in uri.go	2026-08-18 11:12:13 +08:00
風雪	66f799dfb3	fix(node): host resolution for URI export (public_url + loopback fallback)	2026-08-18 11:11:24 +08:00
風雪	4d05dcf56f	fix(node): resolve share host via public_url / loopback fallback	2026-08-18 11:11:05 +08:00
風雪	6c0a7ac649	fix(node): URI export empty hint; ensure non-nil uris	2026-08-18 11:01:57 +08:00
風雪	afc8bdc099	fix: always register node URI export routes alongside listener CRUD	2026-08-18 11:01:29 +08:00
風雪	eb082b8d02	fix(audit): errors.Is for subscription not-found path	2026-08-18 10:40:36 +08:00
風雪	39145c60da	fix(audit): errors.Is in visual config Get/Save	2026-08-18 10:40:05 +08:00
風雪	2e8367216d	fix(audit): errors.Is for gorm not-found in telegram/subscription/visual/converter	2026-08-18 10:39:43 +08:00
風雪	d2d950578e	fix(audit): use errors.Is for gorm.ErrRecordNotFound; drop unused Divider import	2026-08-18 10:39:28 +08:00
風雪	1302209443	Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs ... security: audit and fix authentication, subscription and restore issues Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs security: audit and fix authentication, subscription and restore issues Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs security: audit and fix authentication, subscription and restore issues Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs security: audit and fix authentication, subscription and restore issues Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs security: audit and fix authentication, subscription and restore issues Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs security: audit and fix authentication, subscription and restore issues Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs security: audit and fix authentication, subscription and restore issues Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs security: audit and fix authentication, subscription and restore issues Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs security: audit and fix authentication, subscription and restore issues Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs security: audit and fix authentication, subscription and restore issues Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs security: audit and fix authentication, subscription and restore issues Merge pull request #39 from kazeyukiro/audit/fix-security-and-runtime-bugs security: audit and fix authentication, subscription and restore issues	2026-08-18 09:47:19 +08:00
風雪	ec2008bf7a	fix: register legacy subscription routes at root	2026-08-18 09:46:14 +08:00
風雪	5693beea46	fix: keep legacy subscription URLs working	2026-08-18 09:46:07 +08:00