fix(core): 节点内容指纹递归忽略内部 _ 前缀字段

buildNodeContentKey 只在节点顶层过滤 _ 前缀的内部字段，嵌套对象
（如 reality-opts 中的 _spider-x）未过滤。机场每次更新订阅都会
轮换 spider-x，导致内容指纹变化、智能匹配永远失败，节点被当成
全新节点重复插入列表末尾。

修复 stableJsonStringify 递归时同样忽略 _ 前缀键，与顶层行为一致。
新增 node-identity 单测和 source-node-refresh 场景测试覆盖。

Author: 212duo

packages/core/src/node-identity.test.ts

@@ -0,0 +1,56 @@
+import { describe, expect, it } from "vitest";
+import type { ParsedNode } from "./types/node";
+import { buildNodeContentKey } from "./node-identity";
+
+// 测试数据全部为虚构，不包含任何真实订阅信息
+function realityNode(name: string, uuid: string, spiderX: string, patch: Record<string, unknown> = {}): ParsedNode {
+  return {
+    name,
+    type: "vless",
+    server: "reality.example.com",
+    port: 443,
+    uuid,
+    tls: true,
+    "client-fingerprint": "chrome",
+    flow: "xtls-rprx-vision",
+    network: "tcp",
+    "reality-opts": {
+      "public-key": "FAKE_PUBLIC_KEY_AAAAAAAAAAAAAAAA",
+      "short-id": "0000",
+      "_spider-x": spiderX,
+    },
+    ...patch,
+  } as unknown as ParsedNode;
+}
+
+const UUID_A = "11111111-1111-1111-1111-111111111111";
+const UUID_B = "22222222-2222-2222-2222-222222222222";
+
+describe("buildNodeContentKey", () => {
+  it("ignores nested internal underscore fields such as reality-opts._spider-x", () => {
+    const stored = realityNode("Reality Node A (v1)", UUID_A, "/spider-old");
+    const fresh = realityNode("Reality Node A (v2)", UUID_A, "/spider-new");
+
+    // spider-x 轮换 + 显示名动态变化，不应改变内容指纹
+    expect(buildNodeContentKey(fresh)).toBe(buildNodeContentKey(stored));
+  });
+
+  it("still distinguishes nodes whose real identity fields differ", () => {
+    const nodeA = realityNode("Node A", UUID_A, "/spider-a");
+    const nodeB = realityNode("Node B", UUID_B, "/spider-a");
+
+    expect(buildNodeContentKey(nodeB)).not.toBe(buildNodeContentKey(nodeA));
+  });
+
+  it("keeps ignoring top-level internal fields (existing behavior)", () => {
+    const base = realityNode("Same Node", UUID_A, "/spider");
+    const withMeta = {
+      ...base,
+      _sourceIds: ["source-a"],
+      _originName: "origin-a",
+      _meta: { importedAt: 1 },
+    };
+
+    expect(buildNodeContentKey(withMeta)).toBe(buildNodeContentKey(base));
+  });
+});

packages/core/src/node-identity.ts

@@ -20,7 +20,12 @@ export function stableJsonStringify(value: unknown): string {
     const obj = input as Record<string, unknown>;
     const keys = Object.keys(obj).sort();
     const out: Record<string, unknown> = {};
-    for (const key of keys) out[key] = normalize(obj[key]);
+    for (const key of keys) {
+      // 与 buildNodeContentKey 顶层行为一致：递归忽略 SubBoost 内部 _ 前缀字段
+      // （如 reality-opts._spider-x，机场每次更新轮换会导致内容指纹变化、节点匹配失败）
+      if (key.startsWith("_")) continue;
+      out[key] = normalize(obj[key]);
+    }
     return out;
   };
 

packages/core/src/subscription/source-node-refresh.test.ts

@@ -554,6 +554,68 @@ describe("source node refresh helpers", () => {
       [SOURCE_IDS_KEY]: ["source-b", "source-a"],
     });
   });
+
+  it("keeps matching a reality node when the airport rotates spider-x but uuid stays stable", () => {
+    // 测试数据全部为虚构，不包含任何真实订阅信息
+    const state = [
+      {
+        name: "Reality Node A (v1)",
+        type: "vless",
+        server: "reality.example.com",
+        port: 443,
+        uuid: "11111111-1111-1111-1111-111111111111",
+        tls: true,
+        "client-fingerprint": "chrome",
+        flow: "xtls-rprx-vision",
+        network: "tcp",
+        udp: true,
+        "reality-opts": {
+          "public-key": "FAKE_PUBLIC_KEY_AAAAAAAAAAAAAAAA",
+          "short-id": "0000",
+          "_spider-x": "/spider-old",
+        },
+        [ORIGIN_NAME_KEY]: "Reality Node A (v1)",
+        [SOURCE_IDS_KEY]: ["source-a"],
+      },
+    ];
+    const parsed = prepareSourceParsedNodes(
+      [
+        {
+          name: "Reality Node A (v2)",
+          type: "vless",
+          server: "reality.example.com",
+          port: 443,
+          uuid: "11111111-1111-1111-1111-111111111111",
+          tls: true,
+          "client-fingerprint": "chrome",
+          flow: "xtls-rprx-vision",
+          network: "tcp",
+          udp: true,
+          "reality-opts": {
+            "public-key": "FAKE_PUBLIC_KEY_AAAAAAAAAAAAAAAA",
+            "short-id": "0000",
+            "_spider-x": "/spider-new",
+          },
+        },
+      ],
+      {}
+    );
+
+    const result = mergeParsedSourceNodes(state, parsed, [], {
+      sourceId: "source-a",
+    });
+
+    // 匹配成功：不产生重复节点，保留原位置与原显示名，spider-x 更新为新值
+    expect(result.nodes).toHaveLength(1);
+    expect(result.nodes[0]).toMatchObject({
+      name: "Reality Node A (v1)",
+      uuid: "11111111-1111-1111-1111-111111111111",
+      [SOURCE_IDS_KEY]: ["source-a"],
+    });
+    expect(
+      (result.nodes[0] as unknown as { "reality-opts"?: { "_spider-x"?: string } })["reality-opts"]?.["_spider-x"]
+    ).toBe("/spider-new");
+  });
 });
 
 describe("subscription response info helpers", () => {