feat: QX 支持 AnyTLS

xream · xream · commit 621d61908093 · 2026-04-15T15:44:43.000+08:00
diff --git a/README.md b/README.md
@@ -42,7 +42,7 @@ Core functionalities:
 - [x] Clash Proxies YAML
 - [x] Clash Proxy JSON/JSON5/YAML(single line)
   > [NaiveProxy](https://t.me/zhetengsha/4308)
-- [x] QX (SS, SSR, VMess, Trojan, HTTP, SOCKS5, VLESS)
+- [x] QX (SS, SSR, VMess, Trojan, HTTP, SOCKS5, VLESS, AnyTLS)
 - [x] Loon (SS, SSR, VMess, Trojan, HTTP, SOCKS5, SOCKS5-TLS, WireGuard, VLESS, Hysteria 2, AnyTLS)
 - [x] Surge (Direct, SS, VMess, Trojan, HTTP, SOCKS5, SOCKS5-TLS, AnyTLS, TrustTunnel, TUIC, Snell, Hysteria 2, SSH(Password authentication only), External Proxy Program(only for macOS), WireGuard(Surge to Surge))
 - [x] mihomo(Clash.Meta) Compatible (Direct, SS, SSR, VMess, Trojan, HTTP, SOCKS5, Snell, VLESS, WireGuard, Hysteria, Hysteria 2, TUIC, SSH, mieru, sudoku, AnyTLS, MASQUE, Tailscale)
diff --git a/backend/package.json b/backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "sub-store",
-  "version": "2.21.95",
+  "version": "2.21.96",
   "description": "Advanced Subscription Manager for QX, Loon, Surge, Stash and Shadowrocket.",
   "main": "src/main.js",
   "scripts": {
diff --git a/backend/src/core/proxy-utils/parsers/index.js b/backend/src/core/proxy-utils/parsers/index.js
@@ -1612,6 +1612,15 @@ function QX_VLESS() {
     return { name, test, parse };
 }
 
+function QX_AnyTLS() {
+    const name = 'QX AnyTLS Parser';
+    const test = (line) => {
+        return /^anytls\s*=/.test(line.split(',')[0].trim());
+    };
+    const parse = (line) => getQXParser().parse(line);
+    return { name, test, parse };
+}
+
 function QX_Trojan() {
     const name = 'QX Trojan Parser';
     const test = (line) => {
@@ -2093,6 +2102,7 @@ export default [
     QX_SSR(),
     QX_VMess(),
     QX_VLESS(),
+    QX_AnyTLS(),
     QX_Trojan(),
     QX_Http(),
     QX_Socks5(),
diff --git a/backend/src/core/proxy-utils/parsers/peggy/qx.js b/backend/src/core/proxy-utils/parsers/peggy/qx.js
@@ -53,7 +53,7 @@ const grammars = String.raw`
     }
 }
 
-start = (trojan/shadowsocks/vmess/vless/http/socks5) {
+start = (trojan/shadowsocks/vmess/vless/anytls/http/socks5) {
     return proxy
 }
 
@@ -119,6 +119,12 @@ vless = "vless" equals address
     handleObfs();
 }
 
+anytls = "anytls" equals address
+    (password/over_tls/tls_host/tls_pubkey_sha256/tls_alpn/tls_no_session_ticket/tls_no_session_reuse/tls_fingerprint/tls_verification/tag/udp_relay/fast_open/server_check_url/reality_base64_pubkey/reality_hex_shortid/others)* {
+    proxy.type = "anytls";
+    proxy.tls = true;
+}
+
 http = "http" equals address 
     (username/password/over_tls/tls_host/tls_pubkey_sha256/tls_alpn/tls_no_session_ticket/tls_no_session_reuse/tls_fingerprint/tls_verification/tag/fast_open/udp_relay/udp_over_tcp/server_check_url/reality_base64_pubkey/reality_hex_shortid/others)*{
     proxy.type = "http";
diff --git a/backend/src/core/proxy-utils/producers/qx.js b/backend/src/core/proxy-utils/producers/qx.js
@@ -28,6 +28,8 @@ export default function QX_Producer() {
                 return socks5(proxy);
             case 'vless':
                 return vless(proxy);
+            case 'anytls':
+                return anytls(proxy);
         }
         throw new Error(
             `Platform ${targetPlatform} does not support proxy type: ${proxy.type}`,
@@ -57,12 +59,9 @@ export default function QX_Producer() {
 function getQxHttpObfs(proxy) {
     // QX accepts multiple http-obfs spellings for ss/vmess/vless. Preserve
     // the original token for round-trip output, including "vemss-http".
-    return [
-        'http',
-        'vmess-http',
-        'vemss-http',
-        'shadowsocks-http',
-    ].includes(proxy._qx_obfs_http)
+    return ['http', 'vmess-http', 'vemss-http', 'shadowsocks-http'].includes(
+        proxy._qx_obfs_http,
+    )
         ? proxy._qx_obfs_http
         : 'http';
 }
@@ -533,6 +532,60 @@ function vless(proxy) {
     return result.toString();
 }
 
+function anytls(proxy) {
+    const network = proxy.network?.trim().toLowerCase();
+    if (network && network !== 'tcp') {
+        throw new Error(
+            `Platform ${targetPlatform} does not support AnyTLS with transport ${proxy.network}`,
+        );
+    }
+
+    const result = new Result(proxy);
+    const append = result.append.bind(result);
+    const appendIfPresent = result.appendIfPresent.bind(result);
+
+    append(`anytls=${proxy.server}:${proxy.port}`);
+    append(`,password=${proxy.password}`);
+
+    proxy.tls = true;
+    append(`,over-tls=true`);
+
+    appendIfPresent(
+        `,tls-pubkey-sha256=${proxy['tls-pubkey-sha256']}`,
+        'tls-pubkey-sha256',
+    );
+    appendIfPresent(`,tls-alpn=${proxy['tls-alpn']}`, 'tls-alpn');
+    appendIfPresent(
+        `,tls-no-session-ticket=${proxy['tls-no-session-ticket']}`,
+        'tls-no-session-ticket',
+    );
+    appendIfPresent(
+        `,tls-no-session-reuse=${proxy['tls-no-session-reuse']}`,
+        'tls-no-session-reuse',
+    );
+    appendIfPresent(
+        `,tls-cert-sha256=${proxy['tls-fingerprint']}`,
+        'tls-fingerprint',
+    );
+    appendIfPresent(
+        `,tls-verification=${!proxy['skip-cert-verify']}`,
+        'skip-cert-verify',
+    );
+    appendIfPresent(`,tls-host=${proxy.sni}`, 'sni');
+
+    appendIfPresent(`,fast-open=${proxy.tfo}`, 'tfo');
+    appendIfPresent(`,udp-relay=${proxy.udp}`, 'udp');
+
+    result.appendIfPresent(
+        `,server_check_url=${proxy['test-url']}`,
+        'test-url',
+    );
+
+    append(`,tag=${proxy.name}`);
+
+    return result.toString();
+}
+
 function http(proxy) {
     const result = new Result(proxy);
     const append = result.append.bind(result);
diff --git a/backend/src/test/proxy-parsers/v2ray-and-platforms.spec.js b/backend/src/test/proxy-parsers/v2ray-and-platforms.spec.js
@@ -1742,6 +1742,38 @@ describe('Platform raw-format parser coverage', function () {
                     flow: 'xtls-rprx-vision',
                 },
             },
+            {
+                title: 'parses anytls standard tls lines',
+                input: 'anytls=example.com:443,password=pwd,over-tls=true,tls-host=apple.com,udp-relay=true,tag=anytls-standard-tls-01',
+                expected: {
+                    type: 'anytls',
+                    name: 'anytls-standard-tls-01',
+                    server: 'example.com',
+                    port: 443,
+                    password: 'pwd',
+                    tls: true,
+                    sni: 'apple.com',
+                    udp: true,
+                },
+            },
+            {
+                title: 'parses anytls reality tls lines',
+                input: 'anytls=example.com:443,password=pwd,over-tls=true,tls-host=apple.com,reality-base64-pubkey=k4Uxez0sjl8bKaZH2Vgi8-WDFshML51QkxKFLWFIONk,reality-hex-shortid=0123456789abcdef,tag=anytls-reality-tls-01',
+                expected: {
+                    type: 'anytls',
+                    name: 'anytls-reality-tls-01',
+                    server: 'example.com',
+                    port: 443,
+                    password: 'pwd',
+                    tls: true,
+                    sni: 'apple.com',
+                    'reality-opts': {
+                        'public-key':
+                            'k4Uxez0sjl8bKaZH2Vgi8-WDFshML51QkxKFLWFIONk',
+                        'short-id': '0123456789abcdef',
+                    },
+                },
+            },
             {
                 title: 'parses trojan websocket tls lines',
                 input: 'trojan=qx-trojan.example.com:443,password=secret,obfs=wss,obfs-host=cdn.example.com,obfs-uri=/trojan,tls-verification=false,tls-host=sni.example.com,tls-cert-sha256=fingerprint,tag=QX Trojan',
diff --git a/backend/src/test/proxy-producers/text.spec.js b/backend/src/test/proxy-producers/text.spec.js
@@ -3,6 +3,7 @@ import { Base64 } from 'js-base64';
 import { describe, it } from 'mocha';
 
 import { ProxyUtils } from '@/core/proxy-utils';
+import QX_Producer from '@/core/proxy-utils/producers/qx';
 import { produceExternal, UUID } from './helpers';
 
 describe('Proxy text producers', function () {
@@ -287,6 +288,98 @@ describe('Proxy text producers', function () {
         );
     });
 
+    it('produces Quantumult X AnyTLS standard tls lines', function () {
+        const output = produceExternal('QX', {
+            type: 'anytls',
+            name: 'anytls-standard-tls-01',
+            server: 'example.com',
+            port: 443,
+            password: 'pwd',
+            tls: true,
+            sni: 'apple.com',
+            udp: true,
+        });
+
+        expect(output).to.equal(
+            'anytls=example.com:443,password=pwd,over-tls=true,tls-host=apple.com,udp-relay=true,tag=anytls-standard-tls-01',
+        );
+    });
+
+    it('produces Quantumult X AnyTLS reality tls lines', function () {
+        const output = produceExternal('QX', {
+            type: 'anytls',
+            name: 'anytls-reality-tls-01',
+            server: 'example.com',
+            port: 443,
+            password: 'pwd',
+            tls: true,
+            sni: 'apple.com',
+            udp: true,
+            'reality-opts': {
+                'public-key':
+                    'k4Uxez0sjl8bKaZH2Vgi8-WDFshML51QkxKFLWFIONk',
+                'short-id': '0123456789abcdef',
+            },
+        });
+
+        expect(output).to.equal(
+            'anytls=example.com:443,password=pwd,over-tls=true,tls-host=apple.com,udp-relay=true,tag=anytls-reality-tls-01,reality-base64-pubkey=k4Uxez0sjl8bKaZH2Vgi8-WDFshML51QkxKFLWFIONk,reality-hex-shortid=0123456789abcdef',
+        );
+    });
+
+    it('produces Quantumult X AnyTLS lines and keeps only supported fields', function () {
+        const output = produceExternal('QX', {
+            type: 'anytls',
+            name: 'QX AnyTLS Supported Fields',
+            server: 'anytls.example.com',
+            port: 443,
+            password: 'secret',
+            tls: true,
+            sni: 'sni.example.com',
+            udp: true,
+            tfo: true,
+            'skip-cert-verify': true,
+            'test-url': 'https://check.example.com',
+            'idle-session-timeout': 30,
+            'max-stream-count': 16,
+        });
+
+        expect(output).to.equal(
+            'anytls=anytls.example.com:443,password=secret,over-tls=true,tls-verification=false,tls-host=sni.example.com,fast-open=true,udp-relay=true,server_check_url=https://check.example.com,tag=QX AnyTLS Supported Fields',
+        );
+    });
+
+    it('rejects Quantumult X AnyTLS transport shapes that QX cannot represent', function () {
+        const producer = QX_Producer();
+
+        expect(() =>
+            producer.produce({
+                type: 'anytls',
+                name: 'QX AnyTLS WS',
+                server: 'anytls.example.com',
+                port: 443,
+                password: 'secret',
+                tls: true,
+                network: 'ws',
+                'ws-opts': {
+                    path: '/anytls',
+                    headers: {
+                        Host: 'cdn.example.com',
+                    },
+                },
+            }),
+        ).to.throw('Platform QX does not support AnyTLS with transport ws');
+    });
+
+    it('round-trips Quantumult X AnyTLS reality lines without changing supported semantics', function () {
+        const raw =
+            'anytls=example.com:443,password=pwd,over-tls=true,tls-host=apple.com,udp-relay=true,tag=anytls-reality-tls-01,reality-base64-pubkey=k4Uxez0sjl8bKaZH2Vgi8-WDFshML51QkxKFLWFIONk,reality-hex-shortid=0123456789abcdef';
+        const [proxy] = ProxyUtils.parse(raw);
+        const output = ProxyUtils.produce([proxy], 'QX', 'external');
+
+        expect(output).to.equal(raw);
+    });
+
     it('produces Loon VLESS reality websocket lines', function () {
         const output = produceExternal('Loon', {
             type: 'vless',

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "sub-store",`
`3`		`- "version": "2.21.95",`
	`3`	`+ "version": "2.21.96",`
`4`	`4`	`"description": "Advanced Subscription Manager for QX, Loon, Surge, Stash and Shadowrocket.",`
`5`	`5`	`"main": "src/main.js",`
`6`	`6`	`"scripts": {`
Original file line number	Diff line number	Diff line change
@@ -53,7 +53,7 @@ const grammars = String.raw`
`53`	`53`	`}`
`54`	`54`	`}`
`55`	`55`
`56`		`-start = (trojan/shadowsocks/vmess/vless/http/socks5) {`
	`56`	`+start = (trojan/shadowsocks/vmess/vless/anytls/http/socks5) {`
`57`	`57`	`return proxy`
`58`	`58`	`}`
`59`	`59`
`@@ -119,6 +119,12 @@ vless = "vless" equals address`
`119`	`119`	`handleObfs();`
`120`	`120`	`}`
`121`	`121`
	`122`	`+anytls = "anytls" equals address`
	`123`	`+ (password/over_tls/tls_host/tls_pubkey_sha256/tls_alpn/tls_no_session_ticket/tls_no_session_reuse/tls_fingerprint/tls_verification/tag/udp_relay/fast_open/server_check_url/reality_base64_pubkey/reality_hex_shortid/others)* {`
	`124`	`+ proxy.type = "anytls";`
	`125`	`+ proxy.tls = true;`
	`126`	`+}`
	`127`	`+`
`122`	`128`	`http = "http" equals address`
`123`	`129`	`(username/password/over_tls/tls_host/tls_pubkey_sha256/tls_alpn/tls_no_session_ticket/tls_no_session_reuse/tls_fingerprint/tls_verification/tag/fast_open/udp_relay/udp_over_tcp/server_check_url/reality_base64_pubkey/reality_hex_shortid/others)*{`
`124`	`130`	`proxy.type = "http";`