Explicit Gateway Assignment Control Plane
CPA Orbit v1.3.0 adds a durable local control plane for independently configured Sub2API and CPA gateway targets. Each Auth JSON import is preflighted locally and committed only to the explicitly selected compatible target; failures never trigger an automatic cross-target switch.
Highlights
- Adds bounded Auth JSON preflight followed by an explicit import commit to one gateway target.
- Preserves provider/date subscription archives independently from remote deployment outcomes.
- Records gateway targets, bindings, ownership, import operations, health, quota, and aggregate usage in local SQLite.
- Supports Sub2API SSE account checks, quota polling, retryable import resumption, and conservative stale-binding reconciliation.
- Keeps CPA available as an explicitly selected alternate, migration, or recovery destination.
- Moves gateway health and configuration into Settings → Gateways and streamlines subscription details and actions.
- Expands bilingual setup, architecture, security, and operational documentation.
Security boundaries
Sub2API administrator keys remain write-only. Remote management requires explicit enablement and HTTPS. Redirects and oversized responses are rejected, errors exclude credential content, and a primary marker does not enable automatic failover.
Official CPA Orbit packages embed neither Sub2API nor CLIProxyAPI; both remain separately deployed companions.
Verification
- Go server and Windows desktop host tests/vet passed in CI.
- Web production build and E2E tests passed in CI.
- Native Apple Silicon DMG build passed in CI.
- Windows amd64 Wails executable rebuilt from merge commit
58b58aab557ccfec5115aa8c0e82b4871cc2c3f8. - Windows SHA-256:
a86668ea33fc18d5fc79feab83c944a0e2879d38642967cf0282864b8c864a89.
Full Changelog: v1.2.1...v1.3.0