Pin meow-rs to 0.21.0 and default to the app extension

BaoLianDeng/Views/SettingsView.swift

@@ -70,8 +70,8 @@ struct SettingsView: View {
                 }
             }
 
-            // App-extension builds (Mac App Store) have no system extension
-            // to uninstall — the provider lives inside the app bundle.
+            // App-extension builds (MAS / local) have no system extension
+            // to uninstall — the provider lives in PlugIns as an .appex.
             if !VPNManager.providerIsAppExtension {
                 Section("System Extension") {
                     Button("Uninstall System Extension") {
@@ -122,7 +122,7 @@ struct SettingsView: View {
             Text("Proxy Method")
         } footer: {
             if vpnManager.engineMode == .localProxy {
-                Text("Runs the engine inside the app as an HTTP/SOCKS5 proxy on 127.0.0.1 — no system extension or VPN configuration needed. Apps must be pointed at the proxy manually. Switching method or port takes effect on the next start.")
+                Text("Runs the engine inside the app as an HTTP/SOCKS5 proxy on 127.0.0.1 — no network extension or VPN configuration needed. Apps must be pointed at the proxy manually. Switching method or port takes effect on the next start.")
             } else {
                 Text("Intercepts all traffic system-wide via the Network Extension.")
             }

BaoLianDengTests/ProxyEngineIntegrationTests.swift

@@ -8,7 +8,7 @@ import Testing
 @testable import BaoLianDeng
 
 /// Integration tests that start/stop the mihomo engine directly via bridge
-/// functions — no VPN tunnel, no system extension, CI-compatible.
+/// functions — no VPN tunnel, no network extension, CI-compatible.
 ///
 /// All engine tests must be serialized because BridgeSetHomeDir and the
 /// proxy listener ports (chosen ephemerally per run, but still

BaoLianDengTests/Utilities/ProxyEngineHelper.swift

@@ -79,7 +79,10 @@ enum ProxyEngineHelper {
         socksPort: UInt16,
         timeout: Int = 10
     ) -> (output: String, exitCode: Int32) {
-        curl(url: url, proxyArgs: ["--socks5", "127.0.0.1:\(socksPort)"], timeout: timeout)
+        // socks5h: send the hostname to the engine. `--socks5` resolves
+        // locally first, which fails when system DNS is still holding a
+        // leftover fake-ip (or a hanging AAAA) from a previous tunnel.
+        curl(url: url, proxyArgs: ["--socks5-hostname", "127.0.0.1:\(socksPort)"], timeout: timeout)
     }
 
     /// Run curl through the HTTP side of the mixed listener — the path

README.md

@@ -26,10 +26,10 @@ macOS VPN proxy app powered by [meow-rs](https://github.com/madeye/meow-rs), a C
 │  │  Nodes   │ Editor │& Stats│ Logs      │  │
 │  └──────────┴────────┴───────┴───────────┘  │
 │  ┌───────────────────────────────────────┐  │
-│  │  VPNManager (NETunnelProviderManager) │  │
+│  │  VPNManager (NETransparentProxyManager)│  │
 │  └──────────────────┬────────────────────┘  │
 ├─────────────────────┼───────────────────────┤
-│    System Extension (TransparentProxy)      │
+│  App Extension (PlugIns/TransparentProxy)   │
 │  ┌──────────────────┴────────────────────┐  │
 │  │  NETransparentProxyProvider           │  │
 │  │    ┌──────────────────────────────┐   │  │
@@ -75,9 +75,9 @@ cp Local.xcconfig.template Local.xcconfig
 
 > **Finding your Team ID:** Apple Developer portal → Membership → Team ID (10-character string, e.g. `AB12CD34EF`).
 
-Both targets require these capabilities (already configured in entitlements):
+The app and the provider require these capabilities (already configured in entitlements):
 - **App Sandbox**
-- **Network Extensions** — Packet Tunnel Provider
+- **Network Extensions** — App Proxy Provider (transparent proxy)
 
 #### 3. Build and run