Hot fix, some user could not login to the app

Bug Fixes Fixed a "false connection" issue occurring after device sleep or background memory reclamation. The app now automatically detects and restores the tunnel connection within seconds after screen lock or low memory events, eliminating the need for manual reconnection (verified on iOS). Fixed a 504 error caused by missing routing rules. Resolved an issue where geolocation misidentification during tunnel routing led to connection failures at certain nodes (e.g., Japan). Routing rules are now accurately anchored to the correct region. Fixed a 500 error that occurred when attempting to log back in with the same email address after account deletion. Improved the stability of rule library updates under weak network conditions or CDN fluctuations. Filtered out irrelevant error logs caused by script injections from third-party browsers. Improvements Optimized the smart node selection algorithm. Added dynamic weighting based on traffic cycles to automatically avoid nodes nearing their data limits. Compliance updates: In accordance with App Store guidelines, the iOS version now exclusively supports In-App Purchases for subscriptions and has removed alternative payment methods.

New Features - Auto Server Selection: A new “Auto” card has been added to the top of the Dashboard; when connecting, it randomly selects a server from the top 5 based on the node's overall rating - Filter Subscription Exits by Country: The “SmartServerSelector” tab now includes a filter by country - Priority Layout for FAQ on Feedback Page: The top 9 frequently asked questions (including Adobe CC app compatibility, AU node congestion, and AllNationConnect onboarding for existing users) are now featured at the top; logged-in users can jump to “My Service Tickets” with a single click - Proxy Payer Settings Page: The old “Proxy Payer Member Management” feature has been discontinued and replaced with a streamlined process for setting up, viewing, and removing proxy payers - Gift Code Redemption with Embedded Login: Directly embeds the login form when not logged in, eliminating the need for redirects - Removed Bottom Rating Bar: After removal, the rating entry has been changed to a lightweight bar at the bottom of the page, no longer using an interruptive pop-up - Old iOS System Prompt: Friendly prompt when the iOS system version is below the JS baseline Fixes - Frequent reconnections after network fluctuations: Added debounce to the K2 engine for rapid network flapping events - Status not refreshing after connecting in Auto mode: Polls VPN status and refreshes tunnel cache after a successful connection - Auto mode mistakenly using blacklisted nodes: Strictly skips hard blacklisted nodes with a rating of 0 - Background fetching overrides user selection: Refreshing the tunnel list no longer accidentally changes the user’s selected node - Low initial tunnel ratings: Addressed the bias where tunnel ratings were underestimated during the first few cycles after launch - Login failure when Safari/iOS cookies are blocked: Automatically fallback to localStorage Bearer Token - Email verification code lifecycle: Refactored sending, validation, and expiration logic to prevent brute-force attacks and recovery exceptions - Center authentication security hardening: Fixed log leaks, panic paths, and OTP randomness - Missing crypto API in legacy WebView: Added crypto.randomUUID and subtle.digest polyfills - Unresponsive delete button on payment proxy page: Replaced `window.confirm` (which was swallowed by WebView) with MUI Dialog - UDP session leakage: Fixed residual UDP connections during idle session cleanup at the engine level - Rule engine / DNS panics: Fixed multiple boundary condition panics in the rule and DNS modules - engine.fail() orphaned healthMonitor: Prevented orphaned goroutines from remaining after engine failure - Hard fail on rule library download: Fallback to existing rule cache on disk upon failure; no longer blocks startup - iOS browser misclassification: Fixed Chrome, Firefox, Edge, and Opera on iOS being incorrectly identified as WebView Improvements - Login flow refactoring: Improved stability of the Center auth flow; added end-to-end login testing - DNS resolution stability: Server-side DNS UDP now uses racingResolver - OpenConnect protocol deprecated: Unified to k2v5 / k2p, resulting in smaller size and reduced attack surface - Continuous CVE dependency scanning: Applied one-time patches for 67 known CVEs

Focuses on enhancing iOS Always-On VPN, the four-scenario routing model, the membership tier system, single-binary installation for Linux, and connection quality feedback, while also fixing numerous stability and UI issues. Additionally, it lays the groundwork for the next phase of features, including smart server selection, node ratings, peer-to-peer direct connections, and Kaitu Router. 8 New Features 14 Bug Fixes Improvements Translated with DeepL.com (free version)

Fixed several important issues affecting daily use and improved multi-platform stability. New Features: - Smart customer service: interactive welcome buttons, auto-handoff for video/voice calls - Three-party error classification: engine errors categorized by client/network/server/target - Diagnostic logging: structured logs for heartbeat, DNS, transport, and proxy diagnostics Bug Fixes: - Fixed devices being unexpectedly signed out (hardware ID collision) - Fixed tunnel identity lost after cold start - Fixed stale 401 response clearing fresh auth tokens after login - Fixed update notification overlapping safe area on notch devices - Fixed unable to switch tunnels after VPN error - Fixed UI stuck on "connecting" after denying VPN permission - Fixed auto-reconnect after iOS kills Network Extension Improvements: - Anti-blocking Happy Eyeballs strategy with 6 concurrent CDN mirrors - iOS Network Extension memory optimization and DNS concurrency control - Migrated secure storage to native Keychain First upgrade requires re-login once.

Major 4.0 Update! • Completely rebuilt from the ground up — faster and more stable • Redesigned interface — clean and intuitive • Smart routing: direct for local, accelerated for international • Global multi-region servers with one-tap switching • Invite rewards: invite friends, both get extra membership time • Enhanced privacy protection

1. 技术更新，防止dns被劫持 2. 添加邀请方式 3. 重写ui 4. 可以支持路由分流 5. 可以支持企业定制app

本次更新修复打开不能连接的bug；调整用户体验，在没有选择服务器的情况下，引导到选择页。