Major architectural refactoring of MTProxy (FakeTLS proxy) implementation to improve modularity, testability, and evidence-based failure handling:
Native C++ changes:
- Extract handshake scheduler from ConnectionSocket into MtProxyHandshakeScheduler (mutex, endpoints, queuing, cooldown logic)
- Extract server-flight parsing and HMAC verification into MtProxyServerFlightParser
- Extract data-path shaping (record sizing, timing) into MtProxyDataPathShaper with policy decisions
- Introduce typed failure evidence classification (MtProxyFailureEvidence) mapping phases to evidence kinds
- Introduce typed recovery actions (MtProxyRecoveryPolicy) to gate recipe cursor movement
- Create MtProxyHandshakePlan to capture immutable handshake selections per attempt
- Create MtProxySocketPublisher facade for high-risk phase observations
- Introduce MtProxyRequestClass enum to replace raw priority integers in scheduler API
- Move startup cover state from pendingWrite to fakeTls in state machine
Java changes:
- Create ProxyEventReducer to centralize native event reduction logic
- Create ProxyVisibleStateStore to own visible proxy state, DNS debounce, and mirrorVisiblePhase orchestration
- Refactor ProxyRuntimeStateStore to delegate event routing and visible writes to these modules
- Add ProxyPhasePolicy.evidenceForPhase() to map phases to typed evidence classes
- Update ProxyHealthStore logging to include typed evidence in backoff decisions
- Update ProxyRotationEngine to track and log failure evidence with rotation triggers
Plugin API:
- Upgrade client_utils to export RequestCallback class for externally-managed request callbacks
- Add compatibility guard check_plugin_client_utils_contract.py
Tooling:
- Enhance runtime log analyzer to track failure evidence and response bytes
- Improve runtime verifier to validate evidence mappings and recipe cursor gating
- Add Stage 2 runtime proof checklist for FakeTLS usability verification
92c8e130e6