v0.1.0 — Rewrite (core + VPN-orchestrator features + spider graph)

First release of the rewrite: v0.1.0. Development started over from scratch.

Core (Stage 1)

• Role-based config generator: proxy_node (VLESS REALITY+XHTTP max obfuscation — ECH, post-quantum X25519MLKEM768, tokenish padding, cookie placement, xmux), awg_balancer (kernel AWG + bind_interface), awg_hop (userspace amnezia).
• Reliable deploy/install: backup(cp)→cert→upload→check→rollback→restart→health-probe, per-node mutex, stderr preserved, patched binary with sha256.
• AWG kernel module install (amneziawg-tools + upstream fallback).
• Patched sing-box-extended (deps/…-patched-linux-amd64.tar.gz):
  • wireguard-go-awg-overlap.patch — fixes chacha20poly1305 buffer-overlap panic in userspace AmneziaWG (enables AWG-as-hop).
  • fallback-round-robin.patch — per-connection round-robin.
• AWG presets (lite/standard/pro, invariants) + CPS I1-I5 <b 0x...> with odd-hex padding.

VPN-orchestrator features (Stage 2)

• Live QUIC signature capture; SSH import of existing AWG configs; background auto-apply + per-host lock; audit log + deploy-status hash tracking; Profiles + ClientAssignment; per-node RouteRule CRUD + 45 routing presets; protocol-presets catalog + obfuscation levels + crypto-gen endpoints; share-links (vmess/trojan/ss/mtproxy/vless-reality-xhttp); AWG client .conf with amnezia + MTProxy FakeTLS; unified clients page + config preview.

Spider web (Stage 3)

• Graph model: ConnectionLink edges (topology) + Chain.Nodes (deploy path), synced by handlers.
• Persistent node positions; native SVG pan/zoom (no libs).

Assets

• sing-box-1.13.14-extended-2.5.0-patched-linux-amd64.tar.gz — patched binary (sha256 in deps/checksums.txt).