v46.1-ui-mt76: Argon theme + hardened WG tunnel + Link Health dashboard

基于 v46 正式版(mt76)只恢复 UI 层: - luci-theme-argon 2.4.3: local-background-wins 登录页 + bg1.jpg fallback - luci-app-argon-config: 去 ui.changes.apply, ACL mutator 移 write - luci-app-wgtunnel: rpcd ucode 后端(get/status/prepare/apply/rollback/reconnect), JSONMap 前端, 60s 一次性 token, 快照回滚, 无全局 network ACL - luci-app-tr3000-status: 只读 rpcd ucode + 5s 轮询仪表盘 - tools/: audit_ui_packages.py + install_preview.sh + rollback_watchdog.sh - docs/: 开发经历与翻车记录 + 固件哈希记录固件本体(含烤入 WG 私钥/PSK)不入 git, 仅 K 盘保存. kernel 成员与 v46 byte-identical; 尚未刷机.
2026-08-19 15:04:02 +08:00
parent c6c90c1db8
commit 29cf67154a
92 changed files with 16036 additions and 0 deletions
@@ -0,0 +1,19 @@
+{
+  "scenario": "all_healthy",
+  "expect_partial": false,
+  "expect_errors": [],
+  "expect_summary": { "ok": true, "status": "healthy" },
+  "expect_wireguard_status": "healthy",
+  "expect_route_present": true,
+  "expect_vxlan_present": true,
+  "expect_vxlan_all_invariants_ok": true,
+  "expect_acceleration": {
+    "mt76": { "status": "enabled" },
+    "wed": { "status": "enabled" },
+    "hnat": { "status": "disabled_by_design" },
+    "warp": { "status": "disabled_by_design" },
+    "flowtable": { "status": "disabled_by_design" },
+    "fullcone": { "status": "disabled_by_design" },
+    "masquerade": { "status": "disabled_by_design" }
+  }
+}
@@ -0,0 +1,6 @@
+{
+  "scenario": "design_invariant_violation",
+  "expect_partial": false,
+  "expect_lan_to_wan_forwarding_absent": false,
+  "expect_summary": { "ok": false, "status": "degraded", "invariant_ok": false }
+}
@@ -0,0 +1,5 @@
+{
+  "scenario": "ip_unavailable",
+  "expect_partial": true,
+  "expect_errors_any": ["WIFI_LINK_STATUS_UNAVAILABLE", "WG_ROUTE_STATUS_UNAVAILABLE", "WG_LINK_STATUS_UNAVAILABLE", "VXLAN_STATUS_UNAVAILABLE"]
+}
@@ -0,0 +1,5 @@
+{
+  "scenario": "malformed_json",
+  "expect_partial": true,
+  "expect_errors_any": ["WIFI_LINK_JSON_INVALID", "WG_ROUTE_JSON_INVALID", "VXLAN_JSON_INVALID", "MSS_RULE_JSON_INVALID", "FIREWALL_RUNTIME_JSON_INVALID"]
+}
@@ -0,0 +1,6 @@
+{
+  "scenario": "mss_missing",
+  "expect_partial": false,
+  "expect_mss_clamp_1330": false,
+  "expect_summary": { "ok": false, "status": "degraded", "invariant_ok": false }
+}
@@ -0,0 +1,6 @@
+{
+  "scenario": "nft_unavailable",
+  "expect_partial": true,
+  "expect_errors_any": ["FIREWALL_RUNTIME_UNAVAILABLE", "MSS_RULE_STATUS_UNAVAILABLE"],
+  "expect_acceleration_flowtable_status": "unavailable"
+}
@@ -0,0 +1,5 @@
+{
+  "scenario": "no_hwmon",
+  "expect_partial": true,
+  "expect_errors": ["HWMON_TEMPERATURE_UNAVAILABLE"]
+}
@@ -0,0 +1,6 @@
+{
+  "scenario": "route_missing",
+  "expect_partial": false,
+  "expect_route_present": false,
+  "expect_summary": { "ok": false, "status": "degraded", "route_ok": false }
+}
@@ -0,0 +1,6 @@
+{
+  "scenario": "vxlan_missing",
+  "expect_partial": false,
+  "expect_vxlan_present": false,
+  "expect_summary": { "ok": false, "status": "degraded", "vxlan_ok": false }
+}
@@ -0,0 +1,8 @@
+{
+  "scenario": "vxlan_wrong_vni",
+  "expect_partial": false,
+  "expect_vxlan_present": true,
+  "expect_vxlan_vni": 11,
+  "expect_vxlan_all_invariants_ok": false,
+  "expect_summary": { "ok": false, "status": "degraded", "vxlan_ok": false }
+}
@@ -0,0 +1,7 @@
+{
+  "scenario": "wg_interface_down",
+  "expect_partial": false,
+  "expect_wireguard_status": "healthy",
+  "expect_wireguard_interface_up": false,
+  "expect_summary": { "ok": false, "status": "degraded", "link_ok": false }
+}
@@ -0,0 +1,6 @@
+{
+  "scenario": "wg_stale_handshake",
+  "expect_partial": false,
+  "expect_wireguard_status": "stale",
+  "expect_summary": { "ok": false, "status": "degraded", "wg_ok": false }
+}