Commit Graph

5 Commits

Author SHA1 Message Date
maksarsanjeev a7a0195d34 Network core: home WireGuard as a client network (off = direct at home, on = via home tunnel when away); drop Saga's overlapping 10.0.0.0/24 tunnel subnet
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-08 01:31:14 +03:00
maksarsanjeev 52e1e8288b Security + upstream fixes
- Network core moves to a root-only folder; BroV talks to a narrow root helper (netctl.py) over a user-only socket; install script verifies the mihomo SHA256 and migrates keys (scripts/netcore)
- Hardened runtime, no get-task-allow; bypassPermissions removed from the chat; concealed clipboard items are not restored; DangerCheck knows core, LaunchAgents and hook paths; dropped-file copies expire after 7 days
- Ported from upstream Coucou: 1h crash fix (d05f22b), safe settings.json writes (918d30e), Escape/fold for pending approvals (6012900, 40e3ba8), auto-close delay + reopen (74984f2, ea244a7), full AskUserQuestion (52b1562)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-07 23:49:11 +03:00
maksarsanjeev 91878fa2e3 Network panel: several Amnezia connections (expand the Amnezia row, pick a connection or Auto, add a vpn:// key with live check, remove), auto = fastest across all Amnezia and VLESS exits
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-07 22:14:16 +03:00
maksarsanjeev 5a119d01a1 Network panel: core on/off (TUN) toggle without a password, Amnezia conflict guard, install hint for the netd service
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-07 21:42:40 +03:00
maksarsanjeev 14114d1a58 Header globe → network panel: pick the internet exit (auto, Amnezia, each VLESS node, with live delays) and switch client networks (Saga, Planet9) through the mihomo core API without reloads
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-07 21:29:33 +03:00