mirror of
https://github.com/YuanDevTeam/Vole.git
synced 2026-11-15 08:05:52 +00:00
yiguodev
66889d9d98
* feat(platform): add tvOS runtime and Apple artifacts * test(memory): add isolated process benchmark and peak monitoring Add frozen-input Release ABI probes, kernel footprint peaks, fault calibration and resumable owned-container runs. Fix UDP facility fan-in and scheduling bottlenecks with a bounded process-wide sender, allocation-free peer address checks, per-flow official Mihomo listeners and eight peer vCPUs. Preserve default buffers, full payload checks and single-flow acceptance as a separate gate. Validation: 25 expected facility outcomes, 18 repeated zero-loss UDP calibrations, 198 script tests, Ruff and Go vet. No full-CN or mobile Provider memory acceptance. * fix(geodata): support complete enhanced cn within bounded storage The enhanced CN category exceeded the old 65,536-record work bound. Raise it to 131,072 without changing value or shared allocation budgets, and account for old/new vector buffers during growth. Add exhaustive independent CN semantics, production-ABI route and memory evidence, and bounded-resource regressions. Verify forwarding by the origin peer identity rather than guest-wide TCP counters. Three fresh macOS processes pass with a worst lifetime footprint of 9,191,976 bytes; mobile and high-rate acceptance remain separate. * test(memory): add cold-start geodata attribution * perf(memory): complete SOCKS5 load drivers and index GeoSite matches * perf(memory): add external dual-stack TUN workloads and reliable shutdown * test(memory): add protocol profiles and same-process transport reuse workloads * test(memory): add lifecycle cancellation and update endurance scenarios * docs(memory): retain standard policy pending complete candidate acceptance * test(memory): freeze candidates and orchestrate final acceptance matrix * test: move container experiments to independent benchmark * test(geodata): isolate HTTP benchmark fixtures from production delivery * perf(tun): streamline packet processing and UDP flow routing Add real Linux TUN support and shared bounded packet batching across platforms. Separate UDP ingress from TCP netstack maintenance while preserving cancellation and synchronous shutdown. Optimize GeoData category lookup and compatibility, pin TUN UDP rule actions per five-tuple, and track authenticated QUIC connection changes with independent idle reclamation. Align runtime resource policies, documentation, and regressions with the validated memory and throughput workload. * perf(runtime): isolate socket setup and expand UDP burst capacity Run synchronous physical socket setup on tracked blocking tasks with cancellation and shutdown barriers. Increase the shared ordinary TUN UDP response queue to 4096 while retaining independent DNS capacity and nonblocking saturation. Align resource contracts, documentation, and regression coverage. * build: restore boring release dependencies for PR * feat: cap mobile GeoData and separate external test tooling Share a 1,280,000-record iOS/tvOS allowance across GeoIP and GeoSite, preferring GeoIP. Keep VCore scripts compilation-only, move external validation responsibilities to the benchmark, and refresh public contracts and CI/build tooling. * fix: complete GeoData matching and bound socket initialization * fix: align Android bindgen targets and lazily resolve SDK defaults NDK 30 rejects unversioned bindgen targets even when CC/CXX and CMake already use an API level. Supply the same versioned compiler target through bindgen target-scoped arguments while preserving effective extra flags. Avoid querying Path.home when ANDROID_HOME is configured, which fixes hermetic helper tests on Windows. Cover API and argument precedence, missing home, and fallback behavior with regressions.
VCore 文档
本文档只维护当前契约、有效约束和发布边界。历史方案、阶段报告与已取消能力留在 Git 历史，不另建归档副本。行为以当前源码、测试和契约为准，不一致时一起修正。
配置与接口
- 配置协议：严格 YAML、节点、静态 select 组、DNS 与规则。
- Invoke API：请求格式、生命周期、平台回调与内联配置。
- Controller：认证、运行中组选择和 TUN 流量。
- 入站：HTTP 转发/隧道、SOCKS5 TCP/授权 UDP、监听及认证。
- 出站：SOCKS5、AnyTLS、Trojan、VMess AEAD、Hysteria2、SS 2022。
- VLESS：传输、Vision、Encryption、REALITY、JLS、静态 ECH。
- XHTTP 与 sing-mux：双腿、H1/H2/H3、连接池及复用。
- TLS 证书与指纹：证书 pin、ClientHello 模板、身份与缓存。
- REALITY 线协议：认证、密钥与失败边界。
运行与平台
- DNS 与 ICMP、GeoData。
- 资源策略：局部预算、所有权、取消和观测。
- TUN 平台、Windows VPN。
- TLS 依赖与发布：来源、provider、fork 与升级门禁。
- Windows 最小集成示例。
开发与验证
- 平台编译、离线回归与独立容器入口。
- 测试隔离：所有网络服务端必须容器化。
- 验收边界：本地、CI、设备和发布证据分别记录。
- 领域上下文、架构决策。
- 工程 skills：Issue 跟踪、分类标签、领域流程。
配置字段由 config.yaml 维护；协议文档补充语义与限制，不复制阶段计划。
技术标识符保留原文，说明使用中文。AGENTS.md 只放跨任务约束与读取入口。