feat: 根据 DNS 自动启用 localhost 补丁

- 删除公开的 AllowLocalhost 配置 section

- 检测所有 DNS 服务器字段中的 localhost 与回环 IP

- DNS 启用且指向本机时自动应用 AM Daemon localhost 补丁

- 添加 URL、端口、IPv4 与 IPv6 回环地址回归测试

Author: clansty

packages/applechu-amdaemon/src/amdaemon_patch.rs

@@ -1,4 +1,4 @@
-use applechu::amdaemon::{AllowLocalhostConfig, CreditFreezeConfig};
+use applechu::amdaemon::{CreditFreezeConfig, DnsConfig};
 use applechu::config::Config;
 use applechu::patch_engine::{apply_patch, PatchVariant, VersionedPatch};
 use applechu::util::api::Api;
@@ -19,8 +19,8 @@ pub(crate) fn apply_pre_tls() {
         return;
     };
     if config
-        .section::<AllowLocalhostConfig>()
-        .is_some_and(|section| section.enabled)
+        .section::<DnsConfig>()
+        .is_some_and(|section| section.enabled && section.requires_localhost_patch())
     {
         apply_localhost(&api);
     }

packages/applechu-schema/src/lib.rs

@@ -1024,7 +1024,6 @@ mod tests {
                 "System",
                 "Amdaemon",
                 "Dns",
-                "AllowLocalhost",
                 "Keychip",
                 "Aime",
                 "Io4",

packages/applechu/src/amdaemon.rs

@@ -129,18 +129,6 @@ crate::config_section! {
     }
 }
 
-crate::config_section! {
-    pub struct AllowLocalhostConfig => ALLOW_LOCALHOST_CONFIG_SECTION {
-        section: "AllowLocalhost",
-        order: 35,
-        default_on: false,
-        always_enabled: false,
-        hidden: false,
-        comment: "允许 127.0.0.1/localhost 作为网络服务器",
-        fields: {}
-    }
-}
-
 crate::config_section! {
     pub struct CreditFreezeConfig => CREDIT_FREEZE_CONFIG_SECTION {
         section: "CreditFreeze",
@@ -153,6 +141,58 @@ crate::config_section! {
     }
 }
 
+impl DnsConfig {
+    pub fn requires_localhost_patch(&self) -> bool {
+        [
+            &self.default,
+            &self.router,
+            &self.startup,
+            &self.billing,
+            &self.aimedb,
+            &self.title,
+        ]
+        .into_iter()
+        .any(|target| is_loopback_target(target))
+    }
+}
+
+fn is_loopback_target(target: &str) -> bool {
+    let target = target.trim();
+    let authority = target
+        .split_once("://")
+        .map_or(target, |(_, authority)| authority)
+        .split(['/', '?', '#'])
+        .next()
+        .unwrap_or("");
+    let authority = authority
+        .rsplit_once('@')
+        .map_or(authority, |(_, host)| host);
+    let host = endpoint_host(authority).trim_end_matches('.');
+    host.eq_ignore_ascii_case("localhost")
+        || host
+            .to_ascii_lowercase()
+            .strip_suffix(".localhost")
+            .is_some_and(|prefix| !prefix.is_empty())
+        || host
+            .parse::<std::net::IpAddr>()
+            .is_ok_and(|address| address.is_loopback())
+}
+
+fn endpoint_host(authority: &str) -> &str {
+    if authority.parse::<std::net::IpAddr>().is_ok() {
+        return authority;
+    }
+    if let Some(bracketed) = authority.strip_prefix('[') {
+        return bracketed
+            .split_once(']')
+            .map_or(bracketed, |(host, _)| host);
+    }
+    authority
+        .rsplit_once(':')
+        .filter(|(_, port)| !port.is_empty() && port.bytes().all(|byte| byte.is_ascii_digit()))
+        .map_or(authority, |(host, _)| host)
+}
+
 crate::config_section! {
     pub struct DnsConfig => DNS_CONFIG_SECTION {
         section: "Dns",

packages/applechu/src/config/tests.rs

@@ -1,5 +1,5 @@
 use super::{Config, DiagnosticLevel};
-use crate::amdaemon::{AllowLocalhostConfig, AmdaemonConfig, CreditFreezeConfig, EpayConfig};
+use crate::amdaemon::{AmdaemonConfig, CreditFreezeConfig, EpayConfig};
 use crate::system_config::SystemConfig;
 
 mod amdaemon;
@@ -106,22 +106,14 @@ fn amdaemon_is_a_container_with_independent_controls() {
 }
 
 #[test]
-fn amdaemon_patch_features_have_independent_sections() {
+fn credit_freeze_has_independent_section() {
     let source = concat!(
         "config_version = 1\n",
-        "[AllowLocalhost]\n",
-        "enable = true\n",
         "[CreditFreeze]\n",
         "enable = false\n",
     );
     let config = Config::parse(".", source).expect("测试配置必须有效");
 
-    assert!(
-        config
-            .section::<AllowLocalhostConfig>()
-            .expect("localhost section 必须存在")
-            .enabled
-    );
     assert!(
         !config
             .section::<CreditFreezeConfig>()

packages/applechu/src/config/tests/amdaemon.rs

@@ -53,6 +53,59 @@ fn empty_dns_section_is_filled_by_game_proxy() {
     assert!(output.contains("#Title = \"\""));
 }
 
+#[test]
+fn dns_detects_loopback_targets_across_server_fields() {
+    // Given: 每个 DNS 服务器字段分别使用一种本机地址写法。
+    for entry in [
+        "Default = \"localhost\"",
+        "Router = \"LOCALHOST.\"",
+        "Startup = \"127.8.9.10:8080\"",
+        "Billing = \"http://127.0.0.1:8443\"",
+        "Aimedb = \"[::1]:22345\"",
+        "Title = \"::1\"",
+        "Title = \"service.localhost\"",
+    ] {
+        let source = format!("ConfigVersion = 1\n[Dns]\n{entry}\n");
+        let config = Config::parse(".", &source).expect("测试配置必须有效");
+        let dns = config
+            .section::<crate::amdaemon::DnsConfig>()
+            .expect("DNS 配置必须完成注入");
+
+        // When: AM Daemon 判断是否需要本机服务器补丁。
+        let required = dns.enabled && dns.requires_localhost_patch();
+
+        // Then: 任一字段指向回环目标都会自动启用补丁。
+        assert!(required, "未识别本机 DNS 目标: {entry}");
+    }
+}
+
+#[test]
+fn dns_does_not_enable_localhost_patch_for_remote_or_disabled_mapping() {
+    // Given: 一个远程 DNS 映射，以及一个明确禁用的本机映射。
+    let remote = Config::parse(
+        ".",
+        "ConfigVersion = 1\n[Dns]\nDefault = \"server.example.com\"\n",
+    )
+    .expect("远程 DNS 配置必须有效");
+    let disabled = Config::parse(
+        ".",
+        "ConfigVersion = 1\n[Dns]\nEnable = false\nDefault = \"127.0.0.1\"\n",
+    )
+    .expect("禁用 DNS 配置必须有效");
+
+    // When: AM Daemon 计算 localhost 补丁状态。
+    let remote = remote
+        .section::<crate::amdaemon::DnsConfig>()
+        .expect("DNS 配置必须完成注入");
+    let disabled = disabled
+        .section::<crate::amdaemon::DnsConfig>()
+        .expect("DNS 配置必须完成注入");
+
+    // Then: 远程目标和禁用的 DNS 均不启用补丁。
+    assert!(!remote.requires_localhost_patch());
+    assert!(!(disabled.enabled && disabled.requires_localhost_patch()));
+}
+
 #[test]
 fn required_internal_sections_are_not_emitted() {
     let source = concat!(