starred/shoes
1
0
Fork 0
mirror of https://github.com/cfal/shoes.git synced 2026-11-06 08:14:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 7db91466a2 docs(rules): explain offline bootstrap and managed cache ownership cfal 2026-10-26 03:33:49 +00:00
  • c2a3c97f0a refactor(rules): separate cache updates from process startup cfal 2026-10-26 03:33:48 +00:00
  • f3f0fd547c refactor(rules): extract delivery metadata before compiling predicates cfal 2026-10-26 03:33:31 +00:00
  • 10f87ce699 test(rules): use canonical cache paths in Unix fixtures cfal 2026-10-26 02:49:14 +00:00
  • adb125c44a fix(rules): bound work in expanded runtime policy lists cfal 2026-10-26 02:48:58 +00:00
  • 37fdf78cd8 fix(dns): preserve bootstrap policy across proxy hops cfal 2026-10-26 02:45:46 +00:00
  • f8a163414a refactor(config): accept slices in the config loader cfal 2026-10-26 01:31:42 +00:00
  • 13d64eff6b fix(rules): stop revisiting cyclic source identities during preflight cfal 2026-10-26 01:17:54 +00:00
  • 02c0fd1f5b fix(rules): allow search-only cache ancestor directories cfal 2026-10-26 01:10:55 +00:00
  • 7934b6e8eb test(rules): parse umask with the platform mode type cfal 2026-10-26 01:10:47 +00:00
  • 11ed66216c fix(config): order download-client identities by TLS target name cfal 2026-10-26 01:10:46 +00:00
  • 624cd75762 fix(process): discover recovery paths before remote ownership checks cfal 2026-10-26 01:10:36 +00:00
  • 11d0bd2e23 fix(rules): preserve runtime-owned state during cold preparation cfal 2026-10-26 01:10:35 +00:00
  • 8524bef8d6 fix(rules): keep optional download policy compact cfal 2026-10-26 00:28:04 +00:00
  • a466981fbb fix(dns): preflight native rule bootstrap endpoints cfal 2026-10-26 00:27:58 +00:00
  • 994503cae0 fix(rules): stagger guarded URL connection candidates cfal 2026-10-26 00:27:53 +00:00
  • a64dd265f7 fix(rules): admit cold source batches before DNS preparation cfal 2026-10-26 00:26:06 +00:00
  • 828f28a96f fix(rules): normalize new update sidecars under restrictive umasks cfal 2026-10-26 00:25:51 +00:00
  • 3ccf35222b fix(process): detect timestamp-preserving edits to managed rule caches cfal 2026-10-26 00:25:50 +00:00
  • 68d52b0ca2 fix(config): reject invalid reserved paths without unwinding reload cfal 2026-10-26 00:25:48 +00:00
  • a732790c9b fix(process): suppress managed cache notifications without losing edits cfal 2026-10-25 23:18:01 +00:00
  • c315ee7d07 fix(rules): bound cold staging descriptor demand before downloading cfal 2026-10-25 23:18:00 +00:00
  • d82632aa92 fix(config): reject programmatically empty rule source groups cfal 2026-10-25 23:17:59 +00:00
  • 23b59740ec fix(rules): redact payload errors from remote-owned caches cfal 2026-10-25 23:17:58 +00:00
  • db80cb9011 fix(rules): preserve first-proxy address fallback and hostname cfal 2026-10-25 23:17:38 +00:00
  • 90ef11cec5 fix(rules): honor DIRECT selector identity during cold downloads cfal 2026-10-25 23:17:37 +00:00
  • 69026fa0a6 test(rules): tolerate filesystem clock skew in cold watch regression cfal 2026-10-25 22:29:56 +00:00
  • 1f1c9d4007 fix(process): watch new rule caches after cold installation cfal 2026-10-25 22:17:14 +00:00
  • 9ed0f6530b fix(ffi): reject remote rules before reading their caches cfal 2026-10-25 22:17:05 +00:00
  • 73684e9982 docs(rules): clarify source migration and cache ownership requirements cfal 2026-10-25 22:17:03 +00:00
  • 9de3dc2513 fix(rules): offload file IO without detaching update publication cfal 2026-10-25 22:13:35 +00:00
  • 4e8fbbdd0a fix(rules): pin download proxy hops through bootstrap DNS cfal 2026-10-25 22:13:21 +00:00
  • 94d819f496 fix(rules): redact staged payloads in alias decoder errors cfal 2026-10-25 22:13:13 +00:00
  • c03aa1a3d8 fix(config): preserve policy group errors and source migration hints cfal 2026-10-25 22:11:52 +00:00
  • 8adbf4ebec Align rule-source documentation and reload benchmark configuration cfal 2026-10-25 21:22:03 +00:00
  • beacece287 Preserve download routing and enforce cold-install boundaries cfal 2026-10-25 21:22:02 +00:00
  • 7611d90fdc Reject synthetic rule-bootstrap endpoints before network access cfal 2026-10-25 21:22:01 +00:00
  • beaf8da34b Bound reference-expanded rule evaluation work cfal 2026-10-25 21:21:33 +00:00
  • 758f56d162 Embed download-chain PEM files in server rules and overrides cfal 2026-10-25 21:21:32 +00:00
  • 88048d0188 Keep remote delivery credentials out of controller rule diagnostics cfal 2026-10-25 21:21:31 +00:00
  • 66c86a0fba Simplify remote rule delivery without changing behavior cfal 2026-10-25 16:31:55 +00:00
  • ecf0f1a4b2 Fetch and atomically refresh remote rule sources cfal 2026-10-25 15:44:22 +00:00
  • 7ed54a7927 Separate reusable rule sources from policy groups cfal 2026-10-25 15:43:58 +00:00
  • 7000b088a3 test(anytls): pin a peer that supports large authentication padding cfal 2026-10-31 09:17:24 +00:00
  • 7f590b28e4 refactor(shadowtls): unify record reads and pin yield behavior cfal 2026-10-31 07:59:57 +00:00
  • 7cd8fc192b test(xudp): cover DATA preflight and frame size boundaries cfal 2026-10-31 07:59:56 +00:00
  • f559a7c3d6 test(tuic): verify session lifecycle and simplify collector fixtures cfal 2026-10-31 07:59:55 +00:00
  • 4ab134ecd4 test(tls): cover verified UDP hop identity and SNI cfal 2026-10-31 07:59:54 +00:00
  • d658f031b9 test(proxy): strengthen failure replies and cleanup deadlines cfal 2026-10-31 07:59:52 +00:00
  • aff6f533cb test(anytls): verify padding boundaries and session responses cfal 2026-10-31 07:59:51 +00:00
  • 4d24961590 test(shadowsocks): consolidate message capacity assertions cfal 2026-10-31 06:09:14 +00:00
  • b6eb59276c refactor(xudp): centralize metadata validation and clarify framing cfal 2026-10-31 06:09:13 +00:00
  • 9b977f62b7 refactor(proxy): simplify authentication and failure replies cfal 2026-10-31 06:09:12 +00:00
  • 9c6d34ef0d refactor(tls): consolidate handshake setup and require hop context cfal 2026-10-31 06:09:11 +00:00
  • 2427886b2d refactor(anytls): simplify padding writes and verify write boundaries cfal 2026-10-31 06:09:11 +00:00
  • 5a1e22e19a refactor(tuic): simplify pre-auth and UDP session plumbing cfal 2026-10-31 06:09:10 +00:00
  • 00922f2a10 test(socks): require explicit rejection when sniffing is disabled cfal 2026-10-31 02:40:07 +00:00
  • f8cb22c85a test(resources): confine current-limit QUIC wrapper to tests cfal 2026-10-31 02:40:06 +00:00
  • 6ca6df0707 fix(tuic): preserve delayed authentication across stream reordering cfal 2026-10-31 02:40:05 +00:00
  • 7297d69a08 fix(tuic): bound pre-auth buffering without starving authentication cfal 2026-10-31 02:16:43 +00:00
  • f15a00802b test(tuic): exercise sing-box QUIC stream-mode UDP routing cfal 2026-10-31 01:47:38 +00:00
  • 1a352ba349 test(socks): assert terminal negative replies before connection closure cfal 2026-10-31 01:47:37 +00:00
  • 55f97a5601 test(xudp): expect oversized datagrams to be dropped without starting a session cfal 2026-10-31 01:46:42 +00:00
  • 998d842463 test(tls): verify factory identities and wire SNI through nested TLS cfal 2026-10-31 01:46:41 +00:00
  • ad9769d7c0 fix(websocket): format IPv6 hop authorities through the client factory cfal 2026-10-31 01:46:40 +00:00
  • 947704eafe fix(vision): select opaque XUDP mode before processing preread data cfal 2026-10-31 01:45:31 +00:00
  • 033650cab4 fix(socks): advertise IPv4 addresses on dual-stack UDP listeners cfal 2026-10-31 01:42:49 +00:00
  • 277bf0e056 fix(xudp): drop oversized datagrams without poisoning the route cfal 2026-10-31 01:42:48 +00:00
  • b581622319 test: place framing regressions after production items cfal 2026-10-31 01:41:25 +00:00
  • 5367be302d test(tuic): cover pre-auth pressure and permit release on teardown cfal 2026-10-31 01:04:44 +00:00
  • 758bfbb7c4 test(anytls): verify large padding schemes with current sing-box peers cfal 2026-10-31 01:03:29 +00:00
  • 2c8472f3c0 fix(vless): carry Vision UDP through opaque MUX and XUDP framing cfal 2026-10-31 01:03:28 +00:00
  • 79ffae11f3 fix(hysteria2): route each UDP packet and preserve relay reply sources cfal 2026-10-31 01:02:10 +00:00
  • 57430133dd refactor(xudp): share bounded whole-frame decoding with client adapters cfal 2026-10-31 00:52:53 +00:00
  • f3f2b9eb7e fix(tuic): retain pre-auth streams and route each UDP destination cfal 2026-10-31 00:52:52 +00:00
  • 06d5192c87 fix(vision): split oversized padding frames and bound accepted writes cfal 2026-10-31 00:52:35 +00:00
  • ef0e7612b8 fix(handshake): preserve hop identity and validate WebSocket upgrades cfal 2026-10-31 00:51:43 +00:00
  • 798fdda201 fix(socks): advertise the control connection's local UDP endpoint cfal 2026-10-31 00:49:05 +00:00
  • 212d50cabb fix(proxy): flush terminal failures and validate SOCKS hostname lengths cfal 2026-10-31 00:49:04 +00:00
  • 4b49092e48 fix(anytls): share validated padding updates and bound wire records cfal 2026-10-31 00:48:43 +00:00
  • c710dfbcd5 fix(vmess): emit UDP padding without advancing state on rejection cfal 2026-10-31 00:48:42 +00:00
  • 0094b1b5ff fix(streams): reject oversized messages and consume empty ShadowTLS records cfal 2026-10-31 00:48:41 +00:00
  • e35e1fe790 refactor(stream): preserve local endpoints through protocol wrappers cfal 2026-10-31 00:48:34 +00:00
  • e256448109 fix(tun): reject fragmented IPv4 UDP packets cfal 2026-10-31 00:26:01 +00:00
  • 96f45f0a01 fix(xudp): isolate and bound metadata decoding cfal 2026-10-31 00:26:00 +00:00
  • 6888329d14 Add WebSocket early-data support (#250) cfal 2026-10-31 18:39:17 +08:00
  • 2ea66891a4 ci(websocket): narrow macOS tests to intended modules feature/websocket-early-data cfal 2026-10-31 08:21:34 +00:00
  • a4eaad2869 ci(websocket): run local early-data coverage on macOS cfal 2026-10-31 07:56:22 +00:00
  • e76dfb5e0a test(websocket): strengthen captures and add Mihomo interoperability cfal 2026-10-31 07:56:22 +00:00
  • 2dbf56d58e test(websocket): cover validation boundaries and upgrade liveness cfal 2026-10-31 07:56:07 +00:00
  • dca0b6be2a test(websocket): add peer interoperability coverage and CI cfal 2026-10-31 06:16:29 +00:00
  • 5ba32dc003 feat(websocket): support early data with automatic server reception cfal 2026-10-31 06:16:28 +00:00
  • 7ad9f28f65 fix(websocket): preserve buffered data and stream contracts cfal 2026-10-31 06:16:20 +00:00
  • e0282cf72c Add native Hysteria2 and TUIC clients (#249) cfal 2026-10-31 16:56:16 +08:00
  • a70101bf10 quic: expand native client interoperability and TLS coverage in CI feature/native-hysteria2-tuic-clients cfal 2026-10-31 07:56:58 +00:00
  • 1ca8749062 hysteria2: bound H3 authentication input through the hardened fork cfal 2026-10-31 07:56:57 +00:00
  • 9de6c9dc8c quic: preserve TUIC commands across cancellation and simplify lifecycle state cfal 2026-10-31 07:56:56 +00:00
  • 40c12acaa5 quic: preserve hostname verification with SNI disabled cfal 2026-10-31 01:35:54 +00:00
  • 340836710f quic: harden client retirement and stream credit cfal 2026-10-31 01:22:57 +00:00
  • 3b35fd9ab0 tuic: release pre-auth stream credit before awaiting AUTH cfal 2026-10-31 01:22:56 +00:00