20115 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
DenozordecandClaude Opus 5.5	2b40eebf5b	android: close TCP probe sockets right after connecting ... tcpPing never closed its socket: every health/whitelist/home probe leaked an fd until GC and the peer's later FIN/RST woke the radio again. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 09:09:39 +07:00
DenozordecandClaude Opus 5.5	793ca1b410	android: native - hold charon_mutex while reading routing engine stats ... getRoutingStats/getDeadDirectTargets are polled from the UI once a second; a concurrent disconnect frees the engine under charon_mutex, so reading it without the lock was a use-after-free. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 09:05:09 +07:00
DenozordecandClaude Opus 5.5	5e38fc2f76	android: keep the BETA badge on one line on narrow mode cards ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 01:55:19 +07:00
DenozordecandClaude Opus 5.5	c23d4dad8b	android: 2.16.0 - Routing 2.0: one direct-apps list, inline RU mode, no per-profile app picker ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 01:48:33 +07:00
DenozordecandClaude Opus 5.5	e2ce8420a7	android: remove per-profile app picker, rule-set UI and SelectedApplicationsActivity ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 01:48:00 +07:00
DenozordecandClaude Opus 5.5	488c0aa210	android: Routing tab redesign - RU sites card, direct apps screen, advanced pages ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 01:47:59 +07:00
DenozordecandClaude Opus 5.5	48f1ed7fb8	android: routing 2.0 strings (en/ru/de), drop obsolete rule-set strings ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 01:47:59 +07:00
DenozordecandClaude Opus 5.5	389712bba3	android: global direct-apps routing model, migration, single-source CharonVpnService excludes ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 01:47:58 +07:00
DenozordecandClaude Opus 5.5	584004a25c	android: 2.15.1 - fix startup crash: R8 stripped WorkDatabase_Impl constructor ... AGP 9 strict full-mode keep rules no longer keep no-arg constructors of -keep'd classes, so WorkManager's reflectively created Room database lost its constructor and the app crashed in InitializationProvider. Restore AGP 8 keep-rule semantics and keep RoomDatabase constructors. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 00:50:59 +07:00
DenozordecandClaude Opus 5.5	6a8528fc98	android: 2.15.0 - Material 3 Expressive redesign ... Toolchain AGP 9.1 / Gradle 9.3 / Kotlin 2.2 / compileSdk 37, minSdk 24, material3 1.5.0-beta01. Expressive theme and motion, redesigned Connect, Profiles, Routing and Settings screens, adaptive layouts, home-screen widget, Live Update download progress, predictive back. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 00:38:00 +07:00
Denozordec	8ef7c0a53b	docs: ui plan status - deferred items completed	2026-10-10 00:33:20 +07:00
Denozordec	dc6e1e32fb	android: predictive back scale for settings pages and remediation detail	2026-10-10 00:33:20 +07:00
Denozordec	2681233449	android: route check results as cards with status pills	2026-10-10 00:32:24 +07:00
Denozordec	7a7673119e	android: profile import as an Expressive bottom sheet in a transparent host	2026-10-10 00:32:00 +07:00
Denozordec	8deafeae8e	android: trusted networks - inline location explainer card	2026-10-10 00:31:32 +07:00
Denozordec	59a31d6a1d	android: app picker - hide system apps by default with a toggle	2026-10-10 00:30:41 +07:00
Denozordec	8bedf432e2	android: log screen - level filter chips, snackbar instead of toast	2026-10-10 00:30:27 +07:00
Denozordec	42cd361c58	android: QS tile - connectivity category, toggleable	2026-10-10 00:29:39 +07:00
Denozordec	87c3d73fbc	android: update download progress notification (ProgressStyle / Live Update on API 36+)	2026-10-10 00:29:30 +07:00
Denozordec	564b8aaa8d	android: profiles list-detail on expanded width with in-pane profile form	2026-10-10 00:28:47 +07:00
Denozordec	7cc6343ba1	android: build.gradle comment cleanup	2026-10-10 00:27:29 +07:00
Denozordec	c9048143cc	android: minSdk 24 (material3 1.5 requirement), drop overrideLibrary workaround	2026-10-10 00:27:24 +07:00
Denozordec	203a67ee86	android: a11y (headings, switch role), form snackbar, German strings, smoke tests, docs	2026-10-10 00:21:31 +07:00
Denozordec	3c7c121c7d	android: expanded width - two-column Connect, 640dp settings	2026-10-10 00:13:51 +07:00
Denozordec	0e5e28b4da	android: spacing tokens - migrate padding/spacing literals and ScreenPadding to ShxSpacing	2026-10-10 00:13:08 +07:00
Denozordec	22e4082825	android: home screen widget (Glance), tile subtitle with profile name	2026-10-10 00:13:07 +07:00
Denozordec	0c3ea75cac	android: settings as grouped pages (appearance, automation, security, updates, support), theme mode, snackbars instead of toasts	2026-10-10 00:09:45 +07:00
Denozordec	a451386e0a	android: split RoutingScreen into routing/{RoutingHero,RuleSetList,AdvancedRouting}	2026-10-10 00:09:44 +07:00
Denozordec	8bd65d535e	android: routing - advanced block (RU details, GeoIP, force prefixes), kill switch vs excluded apps note	2026-10-10 00:07:12 +07:00
Denozordec	c5585df135	android: profiles - swipe to delete with undo, search only for long lists	2026-10-10 00:06:05 +07:00
DenozordecandClaude Opus 5.5	385819caf0	android: redesigned Connect screen - morphing hero, profile chip + picker sheet, traffic tiles, one banner slot, collapsed availability ... Split HomeScreen into home/{HeroConnect,TrafficTiles,AvailabilityCard,HomeBanners}. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 00:05:34 +07:00
DenozordecandClaude Opus 5.5	3f7bd94a69	android: expressive motion - fade-through tabs, back to Connect, LoadingIndicator, wavy progress, snackbar messages ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 00:01:17 +07:00
DenozordecandClaude Opus 5.5	6fd03f37f7	android: toolchain AGP 9.1.1 / Gradle 9.3.1 / Kotlin 2.2.21 / compileSdk 37, BOM 2026.09.00 + material3 1.5.0-beta01 ... Built-in Kotlin (kotlin-android removed), Java 11 compile options (compose 1.12), proguard-android-optimize.txt (the non-optimize file is rejected by AGP 9), ExposedDropdownMenu import, minSdk 23 kept via tools:overrideLibrary for material3 1.5 libs that declare minSdk 24. -PshortNdkCommands for deep worktree paths. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-09 23:59:09 +07:00
DenozordecandClaude Opus 5.5	65989b3a5a	android: shared ui components (SectionCard, ListRow, StatusPill, SnackbarHost) ... Replace the duplicate FormSection, ActiveBadge and SnackbarHost call sites. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-09 23:39:35 +07:00
DenozordecandClaude Opus 5.5	5f6726f173	android: drop reui palette, align splash/window/system bars with Compose surface ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-09 23:39:35 +07:00
DenozordecandClaude Opus 5.5	fda3ec158c	android: expressive theme, tonal palette, ShxSpacing/ShxShapes tokens ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-09 23:35:59 +07:00
DenozordecandClaude Opus 5.5	c872246b8c	android: compose BOM 2026.06.01 + material3 1.5.0-alpha18 (expressive API) ... Drop unused navigation-compose and material3-window-size-class. alpha19+/beta01 need AGP 9.1 + compileSdk 37, so alpha18 is pinned. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-09 23:35:59 +07:00
DenozordecandClaude Opus 5.5	e9a239e419	android: 2.14.6 - reroute long-dead direct hosts through the tunnel ... Direct destinations that stay unreachable past the cooldown are now routed through the VPN tunnel until the network changes. The Home availability card marks such hosts "via tunnel" and offers a one-tap "Via VPN" action for the rest. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-09 23:28:03 +07:00
Denozordec	bc256ad369	android: 2.14.2 - fix network label showing cellular while on Wi-Fi ... underlyingNetworkLabel() returned the first non-VPN network from allNetworks, whose order is unspecified - Android keeps the cellular network agent alive in parallel with Wi-Fi, so on Wi-Fi the details sheet could show "Сотовая сеть". Wi-Fi now wins when present (same precedence as NetworkMonitor's trust decision); cellular is only reported when no Wi-Fi network exists.	2026-10-05 01:56:46 +07:00
Denozordec	7185aa4ba5	android: 2.14.1 - traffic split, exit IP, dead-host visibility (UX phase 1) ... - ConnectionDetailsSheet: session traffic split "via VPN / direct (RU)" from the native engine counters (userspace mode only; system-routes mode shows no split - the engine never sees that traffic), public exit IP + country via cloudflare cdn-cgi/trace through the tunnel, current underlying network (Wi-Fi + SSID / cellular) - ConnectionCard: one-glance "N% direct" caption when the RU split moves traffic directly - dead direct hosts surfaced in UI: native snapshot of the negative-cache table via new get_dead_targets (mutex-guarded, sorted by failures) + JNI getDeadDirectTargets; section on the Routing tab and a badge in the Home availability card naming dst, failure count, remaining cooldown and the owning app (from the 2.13.15 owner-attribution cache) - HomeViewModel: split/exit/deadTargets as separate hot flows; exit refreshed with the probe round (60s cache), dead targets every round	2026-10-05 00:56:47 +07:00
Denozordec	de5b093d62	android: keep jniLibs compressed after the minSdk 23 bump ... minSdk 23 flipped AGP's useLegacyPackaging default to false (uncompressed .so, extractNativeLibs=false): the APK grew 12 -> 23 MB. Updates are downloaded over cellular, so pin useLegacyPackaging = true; APK is back to ~12 MB (2.14.0 re-published with the same versionCode, sha updated in the manifest before any device fetched it).	2026-10-05 00:41:51 +07:00
Denozordec	2c69cbe775	android: 2.14.0 - minSdk 23 + adaptive navigation (Stage 3) ... - minSdkVersion 21 -> 23 (device is Android 17, no other users); jni Application.mk: APP_PLATFORM android-23 + -DHAVE_SIGWAITINFO (the NDK sysroot declares sigwaitinfo since API 23, conflicting with strongSwan's fallback prototype; the system implementation is used now) - replace the bottom NavigationBar with NavigationSuiteScaffold (bottom bar on phones, navigation rail in landscape/on tablets); item colors keep the brand palette via NavigationSuiteItemColors(bar/rail/drawer) - HomeScreen applies statusBarsPadding itself (the adaptive scaffold no longer pads the content area) - predictive back was already enabled (android:enableOnBackInvokedCallback)	2026-10-05 00:39:09 +07:00
Denozordec	285d14e996	android: 2.13.15 - exponential direct-dst cooldown, double-start guard, flap-aware auto-connect ... Log-driven fixes from the 10-04 diag/charon analysis: - direct_tcp: negative-cache window now escalates 45s x2 up to 5 min (Telegram was opening ~3000 connects/h to each of two dead hosts, waking the radio for every leaked 45s probe); skip the unconditional fresh-socket retry on ECONNREFUSED (a refusal is deterministic on the network the socket is bound to; roam-time sockets are already aborted by reprotect) - new dead-destination diag line (dst, fail count, cooldown) via JNI callback when the window escalates or hits every 100th failure - VpnStateService: double-start guard - a second connect() for the same profile while a healthy attempt is in flight is ignored (four starters raced through here within 20 s after the 2.13.14 self-update) - NetworkMonitor/AutoConnectManager: flap detection (>=2 kind changes in 5 min stretches the auto-connect delay to 10 s; a Wi-Fi flap produced a 7-second-lived session and a wasted IKE handshake) - hardcode diag TAGs obfuscated by R8 ("a: update: up to date" -> "UpdateManager: ..."), same for UpdateInstaller/VpnShortcutManager	2026-10-04 23:04:01 +07:00
Denozordec	3c73eb5a27	android: 2.13.14 - fix owner attribution protocol, log update events, ESP replay window context	2026-10-04 01:15:25 +07:00
Denozordec	95d88709f9	android: 2.13.11-2.13.13 release snapshot (battery backoff, direct-flow cooldown, owner attribution, rule-set editor)	2026-10-04 01:07:04 +07:00
Denozordec	56f5a00417	android: Ignore Kotlin build scratch dir	2026-09-30 17:38:16 +07:00
Denozordec	e9bdf60f82	android: Pin direct-flow sockets to the active network (2.13.10) ... Diag/charon logs from 2026-09-30 16:45 showed that after a Wi-Fi->cellular roam every direct-TCP connect failed asynchronously with EHOSTUNREACH for minutes, while the IKE socket worked and a Java socket explicitly bound to the underlying network connected fine: a bare VpnService.protect() left fresh sockets routed over the vanished network. - CharonVpnService.protectDirect(fd): protect + Network.bindSocket to the active non-VPN network (API 23+, best-effort, adoptFd/detachFd) - charonservice_protect_direct_socket() JNI wrapper; relay and UDP flow sockets use it at creation - direct_tcp: one retry on a fresh socket when an async connect fails; reprotect aborts still-connecting relays (RST) instead of letting the kernel take ~90s to report the dead route; failures log dst=ip:port - direct_udp: reprotect closes all flows; they re-open per packet with a fresh, network-pinned socket - TUN reader: EBADF after a reauth re-establish is no longer logged Published as 2.13.10 (versionCode 147).	2026-09-30 17:37:45 +07:00
Denozordec	d12fb96dc2	android: Full Compose rewrite + two-mode RU split with userspace routing ... Replaces the fragment-based UI with a full Jetpack Compose app (HOME/profiles/routing/settings/trusted networks in Compose, adaptive brand theming, notification/vector drawables), adds the SHX release pipeline (build-local.sh, UpdateManager self-update from the S3 bucket, DiagLog diagnostics rotated into diag.log with crash capture) and the watchdog/auto-connect/reconnect hardening series. RU-GeoIP split now has two modes (Routing screen): - OS routes (default): coarsened complement of the RU list installed as system routes, bounded by the binder budget (2.12.x behavior) - Userspace routing (beta): only the default routes point into the TUN; every packet is classified natively against the exact RU list (ring-buffer queue, fixed flow tables - allocation-free hot path) and RU TCP/UDP leaves through protected sockets. TCP is terminated by a vendored lwIP 2.2.0 (tun2socks model, err_t renamed to avoid the strongSwan typedef clash, wildcard-port listener patch, asserts into diag.log). IPv4 addresses are compared in Java's numeric byte order and ranges sorted natively; direct flows re-protect on roam; relay errors log errno. Route diagnostics block 12s after connect. Also: SIM2-crash hardening, connectivity watchdog with wakeup alarm, profile export, connectivity self-check screen, tests. Published as 2.13.9 (versionCode 146).	2026-09-30 16:50:03 +07:00
Denozordec	9dcc56c821	Update Android project configuration and permissions ... - Added new entries to .gitignore to exclude Android build artifacts and keystore files. - Updated build.gradle files to include Kotlin Gradle plugin dependencies. - Enhanced gradle.properties with JVM arguments for better performance. - Modified AndroidManifest.xml to include additional permissions for network and location access. - Refactored package names in several classes to use a new namespace. - Removed deprecated LogActivity, SelectedApplicationsActivity, SettingsActivity, and TrustedCertificatesActivity. - Introduced a new scheduling mechanism in the Scheduler class to handle exact alarms on Android 13+. - Updated MainActivity to integrate new UI components. These changes improve the overall structure and functionality of the Android application.	2026-09-01 15:38:09 +07:00
Tobias Brunner	2265fcd1b4	stroke: Avoid underflow when reporting number of SAs ... Since 5.9.6, the number of half-open SAs includes queued initial IKE messages. So that number could be higher than the number of managed SAs, which causes an underflow in the output. Fixes: b866ee88bf ("ike: Track unprocessed initial IKE messages like half-open IKE_SAs")	2026-08-24 16:21:49 +02:00