17 Commits
Author SHA1 Message Date
Naveax 3f7aead263 fix(app): fail closed on invalid connection mode state
Restore SOCKS5 only from the current proxy value and keep UI state unchanged when persistence fails.
2026-09-06 11:51:52 +03:00
Naveax b6ed976346 fix(app): harden Hivemind control-plane trust boundaries (#8)
Bound and nonce-bind control responses, reject redirects, and pin session tunnel coordinates so control-plane compromise cannot redirect VPN traffic.
2026-09-06 11:34:06 +03:00
Naveax ba89e35442 fix(app): harden session runtime lifecycle (#18)
Scope asynchronous connect, disconnect, sync, and reattachment work to the active session so stale work cannot mutate newer VPN state.
2026-09-06 11:24:03 +03:00
Naveax 321bbae44d fix(app): align Android VPN runtime integration (#17)
Remove obsolete UI-process runtime plumbing and reuse the native service-owned notification and generation-scoped control path.
2026-09-06 11:23:55 +03:00
Naveax 5f851f3485 build: vendor pinned flutter_vless Android runtime (#10)
Replace build-time pub-cache mutation with a repository-owned pinned runtime so reviewed native source is the source compiled into the app.
2026-09-06 11:23:48 +03:00
Naveax 74e522e982 build(config): remove unused Flutter dependencies (#16)
Remove dependencies and asset declarations that are no longer referenced so the resolved package graph stays smaller and easier to verify.
2026-09-06 11:18:43 +03:00
Naveax d2283c07cc fix(app): enforce authenticated ephemeral local SOCKS5 (#9)
Require the active per-session loopback SOCKS credentials and remove unauthenticated fallback behavior from the client diagnostic path.
2026-09-06 11:18:35 +03:00
Naveax ecdf6e549f refactor(app): remove unsupported server selector state (#6)
Remove UI and provider state that does not control the authoritative tunnel destination while preserving the existing connection-health status behavior.
2026-09-06 11:18:28 +03:00
Naveax 6da601b565 fix(app): persist disclosure acknowledgement after acceptance (#5)
Write the disclosure preference only after explicit confirmation so failed persistence does not create a false accepted state.
2026-09-06 11:18:24 +03:00
Naveax 14403e1d76 fix(app): make ConnectButton listener lifecycle-safe (#4)
Keep the exact VpnConnection instance used for listener registration so lifecycle cleanup does not depend on a deactivated BuildContext.
2026-09-06 11:17:19 +03:00
Naveax 915f8260d5 build: add reproducible Android release verification
Pin Gradle inputs and dependency metadata, then enforce analyze, lint, build, R8, immutability, and focused regression gates in CI.
2026-09-04 02:01:21 +03:00
Naveax da82a833cb docs: document 3.3.1 release changes
Document the client routing, secure SOCKS5, runtime resilience, lifecycle, notification and migration changes so reviewers can compare the 3.3.1 release against 3.3.0 without reconstructing the behavior from implementation commits.
2026-08-31 20:31:35 +03:00
Naveax 0ab008b80b fix(app): hide session metadata from public lock screen
Keep the ongoing VPN notification visible while marking its timer and speed content private so Android does not expose session metadata in public lock-screen previews.
2026-08-31 20:24:04 +03:00
Naveax f7f425517c build(config): increase gradle heap for release builds
Raise the Gradle heap to 4 GB and cap workers at two so Jetifier and Kotlin release compilation do not exhaust memory while processing Flutter engine artifacts.
2026-08-31 20:22:05 +03:00
Naveax 76bf84453f build(config): bump app version to 3.3.1
Set the release version to 3.3.1+27 for the upstream 3.3.0 follow-up release.
2026-08-31 19:47:23 +03:00
Naveax 6c99366602 test(app): cover routing and secure socks migrations
Cover legacy Auto and ASS preference migration, authenticated SOCKS session generation and the stock-runtime Xray SOCKS schema so future runtime changes cannot silently restore the old fixed-port/no-auth behavior.
2026-08-31 19:47:05 +03:00
Naveax 8ead3ff249 feat(app): add secure routing and runtime resilience
Add explicit TUN and SOCKS5 connection modes, app routing controls, authenticated per-session local SOCKS5, Android network monitoring, persistent haptics, resilient session recovery, notification hardening and client-side Hivemind cleanup.

Keep the hosted flutter_vless_android 1.1.5 runtime as the base and apply the Android compatibility/security patches at build time instead of restoring the unstable vendored runtime.
2026-08-31 19:31:12 +03:00