Changelog

v1.7.0

Reworked root TPROXY runtime recovery with structured reset reports, netstack cleanup verification, and idempotent rescue behavior.
Added privctl doctor diagnostics with redacted configs/logs, compatibility metadata, release integrity, netstack leftovers, node-test summary, and runtime stage reports.
Hardened APK/module/daemon compatibility checks before mutating actions, including repair-safe reset handling.
Split readiness, DNS, routing, egress, and node-test verdicts so TCP-only servers are not treated as usable routes.
Kept production privacy defaults off for localhost SOCKS/HTTP/API helpers and tightened APK privacy guardrails.
Unified runtime listener readiness for start/hot-swap across TPROXY, DNS, and optional API ports, and fixed successful start reports to finish cleanly in both status and doctor payloads.
Extended netstack/status privacy verification to check local listener DROP rules and tightened diagnostic redaction for WireGuard/Amnezia pre-shared keys.
Expanded self-check/doctor summary with compact compatibility, current-release, sing-box check, and runtime stage metadata for quick support triage.
Added typed APK IPC access to self-check with self.check fallback for quick repair summaries.
Exposed self-check through the APK status repository so Settings/Audit can use concise repair summaries without depending on raw IPC.
Treated legacy unknown command audit responses like method-not-found so old daemons still fall back to local audit checks.

Split hard runtime readiness from soft DNS and egress diagnostics so cold-start DNS timeouts leave the runtime connected but degraded.
Added deterministic readiness/operational diagnostics and clearer node-test reasons for runtime, proxy DNS, and HTTP helper failures.
Added in-app display and sharing for /data/adb/privstack/logs/privd.log and /data/adb/privstack/logs/sing-box.log.

Split hard readiness from soft DNS and egress diagnostics so restart no longer tears the runtime down on a single cold-start DNS timeout.
Made health error reporting deterministic instead of depending on random Go map iteration order.
Kept DNS and egress signals visible as operational diagnostics without using them as restart blockers.

Stabilized large config/panel payload handling between APK, privctl, and daemon IPC.
Added panel.json install/upgrade support and migration regression coverage.
Hardened runtime sync, reset cleanup, and mixed APK/module compatibility paths.
Require matching module and APK artifacts for in-app updates after the storage/API split.

Finalized the Russian-first UI pass across Dashboard, Nodes, Apps, Settings, Audit, and Advisor.
Localized daemon-generated audit findings and removed audit mapping dependence on English titles by switching to stable finding code values.
Tightened runtime and control-plane user messaging for import, update, root, timeout, and daemon status flows.
Synchronized app, daemon, module, update feed, and bundled script version metadata to v1.6.1.

Russian-first localization pass across Dashboard, Nodes, Apps, Settings, Audit, and Advisor.
Translated audit findings, advisor recommendations, runtime/import/update errors, and settings statuses.
Switched audit finding mapping to stable code values so localization no longer depends on English titles.
Synchronized release metadata for app, daemon, module, update feed, and bundled scripts to v1.6.0.