Skip to content

feat: add Mihomo-native domain intelligence backend - #32

Open
gentslava wants to merge 62 commits into
masterfrom
feature/domain-intelligence
Open

feat: add Mihomo-native domain intelligence backend#32
gentslava wants to merge 62 commits into
masterfrom
feature/domain-intelligence

Conversation

@gentslava

@gentslava gentslava commented Aug 3, 2026

Copy link
Copy Markdown
Owner

Summary

  • collect privacy-bounded domain observations from Mihomo and retain operational history for 14 days
  • evaluate active rule coverage and run pinned DIRECT versus forced-PROXY HTTPS validation with conservative decision thresholds
  • expose protected report/review settings and APIs through a serialized, fail-closed runtime coordinator

Safety

  • disabled by default and report/review only; no Git publisher, automatic apply, or production enablement
  • no AdGuard dependency, DNS configuration changes, VPN egress changes, or secret exposure
  • terminal network-cleanup latch blocks further probes while executor-free retention continues

Test plan

  • shared: 120 passed
  • server: 909 passed, 1 skipped
  • web: 249 passed
  • TypeScript, Biome, design-token drift, production build, Drizzle, and git diff checks passed
  • independent correctness, architecture, and security reviews: PASS

Deferred

  • report/review UI completion
  • CLI/report artifacts and deployment runbook
  • Git-backed publisher and automatic apply

gentslava and others added 30 commits August 3, 2026 15:36
@gentslava @claude
docs: define domain intelligence architecture
a94e138 
Document the Mihomo-native observation and validation boundary, guarded rule ownership and apply semantics, and approved Indigo Console mockups for exact and site-scoped custom rules.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
docs: plan domain intelligence implementation
38aab10 
Split the approved report and review scope into risk-first, testable slices while keeping Git publication and automatic apply explicitly deferred.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): normalize Mihomo domain observations
75e5d59 
Add fail-closed routing-log and connection-snapshot adapters with IDNA normalization, privacy-safe timestamps, source-independent fingerprints, and adjacent-bucket reconciliation. The module remains disconnected and disabled.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): persist domain observations
fae496e 
Persist privacy-bounded Mihomo observations and UTC daily aggregates with source-independent deduplication, deterministic cross-source reconciliation, migration-safe schema changes, and transactional rollback guarantees.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): model domain rule scope
892c861 
Derive registrable sites with the PSL private section, keep never-add and non-widenable policies independent, and serialize validated exact or site rules without crossing protected boundaries.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): attach domain observer
ab7e461 
Fan the existing Mihomo log stream into a disabled-by-default domain observer with a bounded fingerprint-deduplicated queue, single-flight persistence drain, failure-streak reporting, and shutdown-safe cancellation.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): reconcile domain snapshots
1581f55 
Add an abortable single-flight /connections pulse, conservatively reconcile snapshot observations, and expose bounded parser-drift health with delayed same-ID correlation and clean restart semantics.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): evaluate active domain coverage
17554e8 
Parse active inline and provider rules conservatively, preserve managed provider identity, and block recommendations when coverage cannot be proven complete.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): validate public resolver quorum
e4a88e7 
Reject non-global DNS answers and require distinct external resolver authorities before DIRECT probing.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): pin direct domain probes
257e768 
Validate and pin every HTTPS hop while preserving SNI and Host, bounding redirects, and sanitizing transport evidence.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): add forced validation listener
86c12a8 
Generate an authenticated private Mihomo listener for the selected non-empty channel while keeping credentials out of APIs and URLs.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat(server): prove forced proxy validation route
afee103 
Authenticate dedicated proxy probes, pin every HTTPS hop, and verify the generated Mihomo route identity without mutating live selectors. Add an opt-in real-Mihomo integration test for listener auth and connection metadata.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat(server): decide domain routing candidates
9cb11ed 
Evaluate canonical, deduplicated A/B evidence against non-weakenable safety thresholds and current scope policy. Persist safe address-alternative facts and fail closed on unstable proxy, stale scope, malformed evidence, or incomplete coverage.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat(server): persist domain validation evidence
5af36a9 
Add durable candidate, validation, attempt, and decision state with strict persistence boundaries, lease fencing, lifecycle chronology, and fourteen-day operational retention. Reconcile current filter policy before validation and preserve inert excluded audit rows for safe re-entry.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): schedule bounded domain validation
06b0e5a 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): expose domain intelligence report API
fbb581d 
Add protected bounded overview and candidate-list read models with strict shared contracts. Harden settings and persisted decision reads against malformed storage while preserving fail-closed report semantics.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): add domain intelligence review actions
d7a5807 
Add reversible candidate review state, scope changes, rechecks, strict report contracts, lifecycle-aware counts, and the additive SQLite migration. Keep the slice report-only and document the future locked apply veto for rejected candidates.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat(server): compose domain intelligence runtime
b77921c 
Wire report-only settings, production coverage and A/B execution through the serialized Mihomo runtime gate.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
docs: approve guarded domain apply scope
4f0b492 
Move UI, CLI, and guarded publication into the active implementation plan while keeping production capability server-derived and disabled by default.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: add domain intelligence review UI
cef1d93 
Add the protected Auto Rules workspace, candidate and exclusion review flows, separate safety filters, responsive behavior, and browser evidence. Keep automatic publishing fail-closed until the server capability lands.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
fix: accept infinite-query pagination direction
e7fde6c 
Keep the strict list contract while accepting the forward-only transport hint emitted by TanStack Query. Parse the shared contract inside browser fixtures so the live failure remains covered.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: add domain intelligence report CLI
65b3acd 
Add read-only collect, validation, and report commands with protected atomic artifacts. Read every report component from one SQLite snapshot and keep live observer uncertainty fail-closed.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
fix: refine domain intelligence interactions
2fd17a0 
Align candidate and exclusion states, responsive mode and filter editors, and shared controls with the approved design. Keep apply-only actions fail-closed until publisher mutations are implemented.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
fix: improve domain intelligence accessibility
0a8716d 
Add a native skip-to-content control, codify the interaction contract, and synchronize the approved Pencil exceptions state.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
fix: stabilize auto-rule candidate actions
d3a67db 
Keep pending actions and detail affordances explicit while preventing long candidate rules and recheck controls from breaking responsive layouts.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
fix: expose safe validation failure categories
cbac26f 
Preserve the allowlisted validation stage in scheduler logs while redacting source errors, and align typed Mihomo connection fixtures with normalized inbound metadata.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
fix: stabilize auto-rule candidate layout
3484acf 
Align candidate actions across review states, preserve long domain readability at the desktop boundary, and expose unavailable apply feedback to pointer and keyboard users.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
fix: align auto-rule candidate actions
42f6e4a 
Keep candidate actions on stable desktop columns and bound long rule identities so observed and generated domains cannot overlap.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
fix: stabilize auto-rule candidate rows
3dfa2f9 
Keep desktop action columns fixed, constrain long domain identities to their copy area, and give pending mobile status controls the same geometry as actions. Add regression coverage across compact and wide layouts.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
fix: contain auto-rule candidate content
fc65bbe 
Keep candidate actions aligned across desktop breakpoints and isolate long observed domains from full proposed rules.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
gentslava and others added 25 commits August 4, 2026 21:42
@gentslava @claude
feat: add private local rule repository
8742ed5 
Add a fail-closed local-only Git publisher with deterministic managed-block updates, crash recovery, repository attestation, and container runtime support.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat: add domain rules deployment gate
64c5182 
Parse a report-first deployment capability, expose strict apply readiness, and keep apply unavailable until local provisioning is attested.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
fix: tolerate the previous auto-rules contract
747a820 
Recognize only the exact legacy settings capability, fail closed to report-only, and surface malformed current responses as errors.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat: add attested rule materialization
f7e375e 
Materialize the attested local Git blob atomically into Mihomo’s code-owned provider path while preserving conflicting or interrupted state for explicit reconciliation.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat: generate managed domain rule provider
6d3f0bb 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat: verify managed rule activation
5b55523 
Parse bounded Mihomo provider and rule state, then fail closed unless the generated local domain provider and route prefix are active on the intended VPN group.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat: reconcile domain rule provisioning
9f0a1cb 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat: guard managed rule config wiring
2266dd2 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
fix: keep domain CLI runtime contracts current
a7b3cdc 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat: coordinate domain rule deployment
f720cd3 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat: bind domain rule deployment dependencies
25f0a00 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: recover domain rule deployment lifecycle
0310079 
Coordinate managed rule deployment across boot and reconnect, and make Mihomo secret rotation crash-safe with a durable dual-credential journal.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: journal domain rule mutations
a7f6f62 
Persist prepared rule operations, automatic consent and UTC budget reservations so local Git publication can recover without duplicate ownership or budget effects. Isolate router tests from the developer database and cover migration invariants and crash boundaries.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
test: stabilize materialization under suite load
9b593f1 
Give the Git and fsync integration scenario a scoped timeout that reflects its measured runtime under the full test suite.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: journal domain rule activation
f9e742b 
Persist fenced activation attempts and terminal outcomes so interrupted apply operations can resume safely without stale completions.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: materialize committed domain rules
5e56f1c 
Add a journal-callable, attested and crash-safe publisher for replacing the active local Mihomo provider from an exact managed Git commit.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: attest domain rule operation state
12bb01c 
Distinguish an untouched expected parent from the exact journaled child commit without mutating or provisioning the local rule repository.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat: commit prepared domain rule mutations
b87f7c1 
Apply a journaled delta to the attested managed block and verify the exact intended digest before creating a local Git commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
fix: tolerate stale deployment capability
3a07027 
Validate deployment capability before reading apply readiness so a stale runtime contract schedules recovery instead of crashing the lifecycle.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: execute journaled domain rule mutations
322e013 
Recover prepared local Git commits, materialize exact journaled content, and persist fenced activation outcomes under a caller-held apply lock.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: bind domain rule apply to production
d64ebc7 
Route activation through the shared config coordinator and keep report-mode recovery free of side effects.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: serialize durable domain rule apply work
bf01c59 
Recover journaled operations before admission and preserve ordered, deferred wakes across partial activation and shutdown.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: recover domain rule apply on server lifecycle
ce47e1f 
Revalidate mutable evidence under the shared mutation tail, recover durable operations before validation, and fail closed without stranding ordinary vetoes.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
feat: apply confirmed domain rules from review
fcf9f96 
Add durable, fail-closed candidate application with idempotent operation recovery and activation reporting. Wire the review UI to per-domain apply states and align responsive controls with the approved Pencil design.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava @claude
refactor: keep domain rules in local storage
9da6898 
Remove Git publishing from Submerge and make the dedicated domain-rules volume the canonical rule store.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
gentslava marked this pull request as ready for review August 5, 2026 07:45
@gentslava @claude
test(web): align traffic palette assertion
f03a0d6 
Update the light Traffic chart expectation and design-system reference to the approved Pencil accent token.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
gentslava force-pushed the feature/domain-intelligence branch from c8e7c09 to f03a0d6 Compare August 5, 2026 08:03
@gentslava
fix(web): synchronize accent color tokens
56264f0 
Align derived accent surfaces and borders with the approved Pencil accent while preserving the separate brand logo color.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@gentslava
feat: enhance domain intelligence with geosite support
94ba471 
- Introduced geosite handling in the domain intelligence module, including decoding and materializing geosite categories from local databases.
- Added tests for geosite functionality, ensuring proper decoding of geosite entries and validation of attributes.
- Updated coverage model to incorporate geosite categories, enhancing domain coverage evaluation.
- Refactored existing code to improve whitespace handling and semantic normalization for domain rules.
- Improved error handling for malformed geosite data and ensured compatibility with existing domain coverage logic.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@gentslava