feat: mihomo 支持 ZeroTier; 协议筛选支持 ZeroTier

Author: xream

README.md

@@ -83,7 +83,7 @@ Sub-Store also supports a configurable browser CORS allowlist for the backend AP
 - [x] QX (SS, SSR, VMess, Trojan, HTTP, SOCKS5, VLESS, AnyTLS)
 - [x] Loon (SS, SSR, VMess, Trojan, HTTP, SOCKS5, SOCKS5-TLS, WireGuard, VLESS, Hysteria 2, AnyTLS)
 - [x] Surge (Direct, SS, VMess, Trojan, HTTP, HTTPS, HTTP/2 CONNECT, SOCKS5, SOCKS5-TLS, AnyTLS, TrustTunnel, TUIC, Snell, Hysteria 2, SSH(Password authentication only), External Proxy Program(only for macOS), WireGuard(Surge to Surge))
-- [x] mihomo(Clash.Meta) Compatible (Direct, SS, SSR, VMess, Trojan, HTTP, SOCKS5, Snell, VLESS, WireGuard, Hysteria, Hysteria 2, TUIC, SSH, mieru, sudoku, AnyTLS, MASQUE, Tailscale, GOST Relay, Shadow QUIC)
+- [x] mihomo(Clash.Meta) Compatible (Direct, SS, SSR, VMess, Trojan, HTTP, SOCKS5, Snell, VLESS, WireGuard, Hysteria, Hysteria 2, TUIC, SSH, mieru, sudoku, AnyTLS, MASQUE, Tailscale, GOST Relay, Shadow QUIC, ZeroTier)
 
 Deprecated(The frontend doesn't show it, but the backend still supports it, with the query parameter `target=Clash`):
 

backend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sub-store",
-  "version": "2.36.26",
+  "version": "2.36.27",
   "description": "Advanced Subscription Manager for QX, Loon, Surge, Stash and Shadowrocket.",
   "main": "src/main.js",
   "packageManager": "pnpm@11.0.9",

backend/src/core/proxy-utils/parsers/index.js

@@ -2535,6 +2535,7 @@ function Clash_All() {
         }
         if (
             ![
+                'zerotier',
                 'shadowquic',
                 'gost-relay',
                 'openvpn',

backend/src/core/proxy-utils/producers/shadowrocket.js

@@ -47,6 +47,7 @@ export default function Shadowrocket_Producer() {
                         'openvpn',
                         'gost-relay',
                         'shadowquic',
+                        'zerotier',
                     ].includes(proxy.type)
                 ) {
                     return false;

backend/src/core/proxy-utils/producers/surge.js

@@ -233,6 +233,7 @@ function shadowsocks(proxy) {
     if (!proxy.cipher) {
         proxy.cipher = 'none';
     }
+    // TODO: Surge 5 5.102.0 (3792) removed unsupported legacy Shadowsocks ciphers including `bf-cfb`, `camellia-*-cfb`, `cast5-cfb`, `des-cfb`, `idea-cfb`, `rc2-cfb`, and `seed-cfb`
     if (
         ![
             'aes-128-gcm',