silentmode/theseus
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
theseus/bundled-addons/vpn/binary-manifest.json

23 lines
954 B
JSON
Raw Normal View History

feat(theseus/vpn): VPN extension scaffold — sing-box under our own UI Ships the extension small (~50 KB tarball). No binaries in it — the platform-matched sing-box is downloaded on first "Turn on" from bns/theseus.x/vpn-binaries/<platform>/, sha256-verified against the manifest that ships inside this operator-signed tarball, and cached under extensions-data/vpn/bin/. Every subsequent launch re-verifies before spawning; a mismatch redownloads rather than trusts what is on disk. Config generator produces a sing-box config from a vless:// URL (the shape a 3x-UI VLESS+Reality inbound produces), plus a SOCKS5 inbound on 127.0.0.1:<ephemeral>. api.setSessionProxy points every Theseus request at that port while the tunnel is up; child.on("exit") clears it if sing-box dies. Off again clears the proxy back to whatever the browser had. Panel is a big on/off toggle with a status pill, a paste-and-save endpoint box, and an Advanced disclosure with "auto-on at browser start", "re-download binary" and "clear cache". Any user with a vless:// URL can flip it on today; the free tier and the Silent Mode exit inbound are the server-side half, documented under DESIGN.md. Binary manifest ships with PENDING sha256s until the binaries are uploaded to Sia — ensureBinary refuses to activate on a platform whose sha256 is PENDING, so a user cannot flip it on against an unverified download.
2026-09-21 23:39:32 +02:00
{
vpn 0.1.0 → 0.1.1: pin sing-box 1.14.1 sha256s Binaries uploaded to bns/theseus/vpn-binaries/<platform>/, served through the gateway at navigate.st/bns/theseus.x/vpn-binaries/. Manifest hashes match a curl-fetched copy through the gateway.
2026-09-22 00:09:18 +02:00
"version": "1.14.1",
feat(theseus/vpn): VPN extension scaffold — sing-box under our own UI Ships the extension small (~50 KB tarball). No binaries in it — the platform-matched sing-box is downloaded on first "Turn on" from bns/theseus.x/vpn-binaries/<platform>/, sha256-verified against the manifest that ships inside this operator-signed tarball, and cached under extensions-data/vpn/bin/. Every subsequent launch re-verifies before spawning; a mismatch redownloads rather than trusts what is on disk. Config generator produces a sing-box config from a vless:// URL (the shape a 3x-UI VLESS+Reality inbound produces), plus a SOCKS5 inbound on 127.0.0.1:<ephemeral>. api.setSessionProxy points every Theseus request at that port while the tunnel is up; child.on("exit") clears it if sing-box dies. Off again clears the proxy back to whatever the browser had. Panel is a big on/off toggle with a status pill, a paste-and-save endpoint box, and an Advanced disclosure with "auto-on at browser start", "re-download binary" and "clear cache". Any user with a vless:// URL can flip it on today; the free tier and the Silent Mode exit inbound are the server-side half, documented under DESIGN.md. Binary manifest ships with PENDING sha256s until the binaries are uploaded to Sia — ensureBinary refuses to activate on a platform whose sha256 is PENDING, so a user cannot flip it on against an unverified download.
2026-09-21 23:39:32 +02:00
"engine": "sing-box",
vpn 0.1.0 → 0.1.1: pin sing-box 1.14.1 sha256s Binaries uploaded to bns/theseus/vpn-binaries/<platform>/, served through the gateway at navigate.st/bns/theseus.x/vpn-binaries/. Manifest hashes match a curl-fetched copy through the gateway.
2026-09-22 00:09:18 +02:00
"note": "sha256s pin the exact binary this addon version expects. Bumping sing-box means re-uploading, replacing hashes here, and shipping a new addon tarball via the Ed25519 OTA channel.",
feat(theseus/vpn): VPN extension scaffold — sing-box under our own UI Ships the extension small (~50 KB tarball). No binaries in it — the platform-matched sing-box is downloaded on first "Turn on" from bns/theseus.x/vpn-binaries/<platform>/, sha256-verified against the manifest that ships inside this operator-signed tarball, and cached under extensions-data/vpn/bin/. Every subsequent launch re-verifies before spawning; a mismatch redownloads rather than trusts what is on disk. Config generator produces a sing-box config from a vless:// URL (the shape a 3x-UI VLESS+Reality inbound produces), plus a SOCKS5 inbound on 127.0.0.1:<ephemeral>. api.setSessionProxy points every Theseus request at that port while the tunnel is up; child.on("exit") clears it if sing-box dies. Off again clears the proxy back to whatever the browser had. Panel is a big on/off toggle with a status pill, a paste-and-save endpoint box, and an Advanced disclosure with "auto-on at browser start", "re-download binary" and "clear cache". Any user with a vless:// URL can flip it on today; the free tier and the Silent Mode exit inbound are the server-side half, documented under DESIGN.md. Binary manifest ships with PENDING sha256s until the binaries are uploaded to Sia — ensureBinary refuses to activate on a platform whose sha256 is PENDING, so a user cannot flip it on against an unverified download.
2026-09-21 23:39:32 +02:00
"platforms": {
"win32-x64": {
vpn 0.1.0 → 0.1.1: pin sing-box 1.14.1 sha256s Binaries uploaded to bns/theseus/vpn-binaries/<platform>/, served through the gateway at navigate.st/bns/theseus.x/vpn-binaries/. Manifest hashes match a curl-fetched copy through the gateway.
2026-09-22 00:09:18 +02:00
"url": "https://navigate.st/bns/theseus.x/vpn-binaries/win32-x64/sing-box-win32-x64.exe",
"sha256": "b838de45bd0b2e6ddbed1977e4745622f7dffab3b293807ff4c6b1b640fed909",
"bytes": 81883648
feat(theseus/vpn): VPN extension scaffold — sing-box under our own UI Ships the extension small (~50 KB tarball). No binaries in it — the platform-matched sing-box is downloaded on first "Turn on" from bns/theseus.x/vpn-binaries/<platform>/, sha256-verified against the manifest that ships inside this operator-signed tarball, and cached under extensions-data/vpn/bin/. Every subsequent launch re-verifies before spawning; a mismatch redownloads rather than trusts what is on disk. Config generator produces a sing-box config from a vless:// URL (the shape a 3x-UI VLESS+Reality inbound produces), plus a SOCKS5 inbound on 127.0.0.1:<ephemeral>. api.setSessionProxy points every Theseus request at that port while the tunnel is up; child.on("exit") clears it if sing-box dies. Off again clears the proxy back to whatever the browser had. Panel is a big on/off toggle with a status pill, a paste-and-save endpoint box, and an Advanced disclosure with "auto-on at browser start", "re-download binary" and "clear cache". Any user with a vless:// URL can flip it on today; the free tier and the Silent Mode exit inbound are the server-side half, documented under DESIGN.md. Binary manifest ships with PENDING sha256s until the binaries are uploaded to Sia — ensureBinary refuses to activate on a platform whose sha256 is PENDING, so a user cannot flip it on against an unverified download.
2026-09-21 23:39:32 +02:00
},
"linux-x64": {
vpn 0.1.0 → 0.1.1: pin sing-box 1.14.1 sha256s Binaries uploaded to bns/theseus/vpn-binaries/<platform>/, served through the gateway at navigate.st/bns/theseus.x/vpn-binaries/. Manifest hashes match a curl-fetched copy through the gateway.
2026-09-22 00:09:18 +02:00
"url": "https://navigate.st/bns/theseus.x/vpn-binaries/linux-x64/sing-box-linux-x64",
"sha256": "9334a1c1fe97234911afaedd37226667ebdb3dab2abe383f2c4ae1387706dad9",
"bytes": 81236197
feat(theseus/vpn): VPN extension scaffold — sing-box under our own UI Ships the extension small (~50 KB tarball). No binaries in it — the platform-matched sing-box is downloaded on first "Turn on" from bns/theseus.x/vpn-binaries/<platform>/, sha256-verified against the manifest that ships inside this operator-signed tarball, and cached under extensions-data/vpn/bin/. Every subsequent launch re-verifies before spawning; a mismatch redownloads rather than trusts what is on disk. Config generator produces a sing-box config from a vless:// URL (the shape a 3x-UI VLESS+Reality inbound produces), plus a SOCKS5 inbound on 127.0.0.1:<ephemeral>. api.setSessionProxy points every Theseus request at that port while the tunnel is up; child.on("exit") clears it if sing-box dies. Off again clears the proxy back to whatever the browser had. Panel is a big on/off toggle with a status pill, a paste-and-save endpoint box, and an Advanced disclosure with "auto-on at browser start", "re-download binary" and "clear cache". Any user with a vless:// URL can flip it on today; the free tier and the Silent Mode exit inbound are the server-side half, documented under DESIGN.md. Binary manifest ships with PENDING sha256s until the binaries are uploaded to Sia — ensureBinary refuses to activate on a platform whose sha256 is PENDING, so a user cannot flip it on against an unverified download.
2026-09-21 23:39:32 +02:00
},
"darwin-arm64": {
vpn 0.1.0 → 0.1.1: pin sing-box 1.14.1 sha256s Binaries uploaded to bns/theseus/vpn-binaries/<platform>/, served through the gateway at navigate.st/bns/theseus.x/vpn-binaries/. Manifest hashes match a curl-fetched copy through the gateway.
2026-09-22 00:09:18 +02:00
"url": "https://navigate.st/bns/theseus.x/vpn-binaries/darwin-arm64/sing-box-darwin-arm64",
"sha256": "602bce530f540146e8e2feace24a81bdaf7873456203db0cda162811eb44f338",
"bytes": 83768930
feat(theseus/vpn): VPN extension scaffold — sing-box under our own UI Ships the extension small (~50 KB tarball). No binaries in it — the platform-matched sing-box is downloaded on first "Turn on" from bns/theseus.x/vpn-binaries/<platform>/, sha256-verified against the manifest that ships inside this operator-signed tarball, and cached under extensions-data/vpn/bin/. Every subsequent launch re-verifies before spawning; a mismatch redownloads rather than trusts what is on disk. Config generator produces a sing-box config from a vless:// URL (the shape a 3x-UI VLESS+Reality inbound produces), plus a SOCKS5 inbound on 127.0.0.1:<ephemeral>. api.setSessionProxy points every Theseus request at that port while the tunnel is up; child.on("exit") clears it if sing-box dies. Off again clears the proxy back to whatever the browser had. Panel is a big on/off toggle with a status pill, a paste-and-save endpoint box, and an Advanced disclosure with "auto-on at browser start", "re-download binary" and "clear cache". Any user with a vless:// URL can flip it on today; the free tier and the Silent Mode exit inbound are the server-side half, documented under DESIGN.md. Binary manifest ships with PENDING sha256s until the binaries are uploaded to Sia — ensureBinary refuses to activate on a platform whose sha256 is PENDING, so a user cannot flip it on against an unverified download.
2026-09-21 23:39:32 +02:00
}
}
}
Reference in a new issue Copy permalink