Revert "fix(config): sync Swing settings after Web updates"

This reverts commit b6acc6d509.

.agents/skills/shadcn/SKILL.md

@@ -0,0 +1,277 @@
+---
+name: shadcn
+description: Manages shadcn components and projects — adding, searching, fixing, debugging, styling, and composing UI, including chat interfaces. Provides project context, component docs, and usage examples. Applies when working with shadcn/ui, component registries, presets, --preset codes, or any project with a components.json file. Also triggers for "shadcn init", "create an app with --preset", or "switch to --preset".
+user-invocable: false
+allowed-tools: Bash(npx shadcn@latest *), Bash(pnpm dlx shadcn@latest *), Bash(bunx --bun shadcn@latest *)
+---
+
+# shadcn/ui
+
+A framework for building ui, components and design systems. Components are added as source code to the user's project via the CLI.
+
+> **IMPORTANT:** Run all CLI commands using the project's package runner: `npx shadcn@latest`, `pnpm dlx shadcn@latest`, or `bunx --bun shadcn@latest` — based on the project's `packageManager`. Examples below use `npx shadcn@latest` but substitute the correct runner for the project.
+
+## Current Project Context
+
+```json
+!`npx shadcn@latest info --json`
+```
+
+The JSON above contains the project config and installed components. Use `npx shadcn@latest docs <component>` to get documentation and example URLs for any component.
+
+## Principles
+
+1. **Use existing components first.** Use `npx shadcn@latest search` to check registries before writing custom UI. Check community registries too.
+2. **Compose, don't reinvent.** Settings page = Tabs + Card + form controls. Dashboard = Sidebar + Card + Chart + Table.
+3. **Use built-in variants before custom styles.** `variant="outline"`, `size="sm"`, etc.
+4. **Use semantic colors.** `bg-primary`, `text-muted-foreground` — never raw values like `bg-blue-500`.
+
+## Critical Rules
+
+These rules are **always enforced**. Each links to a file with Incorrect/Correct code pairs.
+
+### Styling & Tailwind → [styling.md](./rules/styling.md)
+
+- **`className` for layout, not styling.** Never override component colors or typography.
+- **No `space-x-*` or `space-y-*`.** Use `flex` with `gap-*`. For vertical stacks, `flex flex-col gap-*`.
+- **Use `size-*` when width and height are equal.** `size-10` not `w-10 h-10`.
+- **Use `truncate` shorthand.** Not `overflow-hidden text-ellipsis whitespace-nowrap`.
+- **No manual `dark:` color overrides.** Use semantic tokens (`bg-background`, `text-muted-foreground`).
+- **Use `cn()` for conditional classes.** Don't write manual template literal ternaries.
+- **No manual `z-index` on overlay components.** Dialog, Sheet, Popover, etc. handle their own stacking.
+
+### Forms & Inputs → [forms.md](./rules/forms.md)
+
+- **Forms use `FieldGroup` + `Field`.** Never use raw `div` with `space-y-*` or `grid gap-*` for form layout.
+- **`InputGroup` uses `InputGroupInput`/`InputGroupTextarea`.** Never raw `Input`/`Textarea` inside `InputGroup`.
+- **Buttons inside inputs use `InputGroup` + `InputGroupAddon`.**
+- **Option sets (2–7 choices) use `ToggleGroup`.** Don't loop `Button` with manual active state.
+- **`FieldSet` + `FieldLegend` for grouping related checkboxes/radios.** Don't use a `div` with a heading.
+- **Field validation uses `data-invalid` + `aria-invalid`.** `data-invalid` on `Field`, `aria-invalid` on the control. For disabled: `data-disabled` on `Field`, `disabled` on the control.
+
+### Component Structure → [composition.md](./rules/composition.md)
+
+- **Items always inside their Group.** `SelectItem` → `SelectGroup`. `DropdownMenuItem` → `DropdownMenuGroup`. `CommandItem` → `CommandGroup`.
+- **Use `asChild` (radix) or `render` (base) for custom triggers.** Check `base` field from `npx shadcn@latest info`. → [base-vs-radix.md](./rules/base-vs-radix.md)
+- **Dialog, Sheet, and Drawer always need a Title.** `DialogTitle`, `SheetTitle`, `DrawerTitle` required for accessibility. Use `className="sr-only"` if visually hidden.
+- **Use full Card composition.** `CardHeader`/`CardTitle`/`CardDescription`/`CardContent`/`CardFooter`. Don't dump everything in `CardContent`.
+- **Button has no `isPending`/`isLoading`.** Compose with `Spinner` + `data-icon` + `disabled`.
+- **`TabsTrigger` must be inside `TabsList`.** Never render triggers directly in `Tabs`.
+- **`Avatar` always needs `AvatarFallback`.** For when the image fails to load.
+
+### Use Components, Not Custom Markup → [composition.md](./rules/composition.md)
+
+- **Use existing components before custom markup.** Check if a component exists before writing a styled `div`.
+- **Callouts use `Alert`.** Don't build custom styled divs.
+- **Empty states use `Empty`.** Don't build custom empty state markup.
+- **Toast follows the project base.** Use `toast` from the `toast` component for
+  Base UI projects. Use `toast()` from `sonner` for Radix and React Aria
+  projects.
+- **Use `Separator`** instead of `<hr>` or `<div className="border-t">`.
+- **Use `Skeleton`** for loading placeholders. No custom `animate-pulse` divs.
+- **Use `Badge`** instead of custom styled spans.
+
+### Icons → [icons.md](./rules/icons.md)
+
+- **Icons in `Button` use `data-icon`.** `data-icon="inline-start"` or `data-icon="inline-end"` on the icon.
+- **No sizing classes on icons inside components.** Components handle icon sizing via CSS. No `size-4` or `w-4 h-4`.
+- **Pass icons as objects, not string keys.** `icon={CheckIcon}`, not a string lookup.
+
+### Chat & Messaging → [chat.md](./rules/chat.md)
+
+- **Chat UI composes the chat primitives.** Conversations use `MessageScroller`, rows use `Message`, surfaces use `Bubble`. Never hand-rolled bubble `div`s or a raw scroll container.
+- **`MessageScroller` owns scroll behavior.** Streaming follow, anchoring, and jump-to-latest (`MessageScrollerButton`) are built in. Don't write a `useStickToBottom`/`ResizeObserver` hook.
+- **Attachments use `Attachment`; system notes and dividers use `Marker`.** Not `Item` cards or `Separator` + a label.
+
+### CLI
+
+- **Never decode preset codes or build preset URLs manually.** Use `npx shadcn@latest preset decode <code>`, `preset url <code>`, or `preset open <code>`. For project-aware preset detection, use `npx shadcn@latest preset resolve`.
+- **Apply preset codes directly with the CLI.** Use `npx shadcn@latest apply <code>` for existing projects, or `npx shadcn@latest init --preset <code>` when initializing.
+
+## Key Patterns
+
+These are the most common patterns that differentiate correct shadcn/ui code. For edge cases, see the linked rule files above.
+
+```tsx
+// Form layout: FieldGroup + Field, not div + Label.
+<FieldGroup>
+  <Field>
+    <FieldLabel htmlFor="email">Email</FieldLabel>
+    <Input id="email" />
+  </Field>
+</FieldGroup>
+
+// Validation: data-invalid on Field, aria-invalid on the control.
+<Field data-invalid>
+  <FieldLabel>Email</FieldLabel>
+  <Input aria-invalid />
+  <FieldDescription>Invalid email.</FieldDescription>
+</Field>
+
+// Icons in buttons: data-icon, no sizing classes.
+<Button>
+  <SearchIcon data-icon="inline-start" />
+  Search
+</Button>
+
+// Spacing: gap-*, not space-y-*.
+<div className="flex flex-col gap-4">  // correct
+<div className="space-y-4">           // wrong
+
+// Equal dimensions: size-*, not w-* h-*.
+<Avatar className="size-10">   // correct
+<Avatar className="w-10 h-10"> // wrong
+
+// Status colors: Badge variants or semantic tokens, not raw colors.
+<Badge variant="secondary">+20.1%</Badge>    // correct
+<span className="text-emerald-600">+20.1%</span> // wrong
+```
+
+## Component Selection
+
+| Need                       | Use                                                                                                 |
+| -------------------------- | --------------------------------------------------------------------------------------------------- |
+| Button/action              | `Button` with appropriate variant                                                                   |
+| Form inputs                | `Input`, `Select`, `Combobox`, `Switch`, `Checkbox`, `RadioGroup`, `Textarea`, `InputOTP`, `Slider` |
+| Toggle between 2–5 options | `ToggleGroup` + `ToggleGroupItem`                                                                   |
+| Data display               | `Table`, `Card`, `Badge`, `Avatar`                                                                  |
+| Navigation                 | `Sidebar`, `NavigationMenu`, `Breadcrumb`, `Tabs`, `Pagination`                                     |
+| Overlays                   | `Dialog` (modal), `Sheet` (side panel), `Drawer` (bottom sheet), `AlertDialog` (confirmation)       |
+| Feedback                   | `toast` (Base UI), `sonner` (Radix/Aria), `Alert`, `Progress`, `Skeleton`, `Spinner`                 |
+| Command palette            | `Command` inside `Dialog`                                                                           |
+| Charts                     | `Chart` (wraps Recharts)                                                                            |
+| Layout                     | `Card`, `Separator`, `Resizable`, `ScrollArea`, `Accordion`, `Collapsible`                          |
+| Empty states               | `Empty`                                                                                             |
+| Menus                      | `DropdownMenu`, `ContextMenu`, `Menubar`                                                            |
+| Tooltips/info              | `Tooltip`, `HoverCard`, `Popover`                                                                   |
+| Chat / conversation UI     | `MessageScroller`, `Message`, `Bubble`, `Attachment`, `Marker`                                      |
+
+## Key Fields
+
+The injected project context contains these key fields:
+
+- **`aliases`** → use the actual alias prefix for imports (e.g. `@/`, `~/`), never hardcode.
+- **`isRSC`** → when `true`, components using `useState`, `useEffect`, event handlers, or browser APIs need `"use client"` at the top of the file. Always reference this field when advising on the directive.
+- **`tailwindVersion`** → `"v4"` uses `@theme inline` blocks; `"v3"` uses `tailwind.config.js`.
+- **`tailwindCssFile`** → the global CSS file where custom CSS variables are defined. Always edit this file, never create a new one.
+- **`style`** → component visual treatment (e.g. `nova`, `vega`).
+- **`base`** → primitive library (`radix` or `base`). Affects component APIs and available props.
+- **`iconLibrary`** → determines icon imports. Use `lucide-react` for `lucide`, `@tabler/icons-react` for `tabler`, etc. Never assume `lucide-react`.
+- **`resolvedPaths`** → exact file-system destinations for components, utils, hooks, etc.
+- **`framework`** → routing and file conventions (e.g. Next.js App Router vs Vite SPA).
+- **`packageManager`** → use this for any non-shadcn dependency installs (e.g. `pnpm add date-fns` vs `npm install date-fns`).
+- **`preset`** → resolved preset code and values for the current project. Use `npx shadcn@latest preset resolve --json` when you only need preset information.
+
+See [cli.md — `info` command](./cli.md) for the full field reference.
+
+## Component Docs, Examples, and Usage
+
+Run `npx shadcn@latest docs <component>` to get the URLs for a component's documentation, examples, and API reference. Fetch these URLs to get the actual content.
+
+```bash
+npx shadcn@latest docs button dialog select
+```
+
+**When creating, fixing, debugging, or using a component, always run `npx shadcn@latest docs` and fetch the URLs first.** This ensures you're working with the correct API and usage patterns rather than guessing.
+
+## Workflow
+
+1. **Get project context** — already injected above. Run `npx shadcn@latest info` again if you need to refresh.
+2. **Check installed components first** — before running `add`, always check the `components` list from project context or list the `resolvedPaths.ui` directory. Don't import components that haven't been added, and don't re-add ones already installed.
+3. **Find components** — `npx shadcn@latest search`.
+4. **Get docs and examples** — run `npx shadcn@latest docs <component>` to get URLs, then fetch them. Use `npx shadcn@latest view` to browse registry items you haven't installed. To preview changes to installed components, use `npx shadcn@latest add --diff`.
+5. **Install or update** — `npx shadcn@latest add`. When updating existing components, use `--dry-run` and `--diff` to preview changes first (see [Updating Components](#updating-components) below).
+6. **Fix imports in third-party components** — After adding components from community registries (e.g. `@bundui`, `@magicui`), check the added non-UI files for hardcoded import paths like `@/components/ui/...`. These won't match the project's actual aliases. Use `npx shadcn@latest info` to get the correct `ui` alias (e.g. `@workspace/ui/components`) and rewrite the imports accordingly. The CLI rewrites imports for its own UI files, but third-party registry components may use default paths that don't match the project.
+7. **Review added components** — After adding a component or block from any registry, **always read the added files and verify they are correct**. Check for missing sub-components (e.g. `SelectItem` without `SelectGroup`), missing imports, incorrect composition, or violations of the [Critical Rules](#critical-rules). Also replace any icon imports with the project's `iconLibrary` from the project context (e.g. if the registry item uses `lucide-react` but the project uses `hugeicons`, swap the imports and icon names accordingly). Fix all issues before moving on.
+8. **Registry must be explicit** — When the user asks to add a block or component, **do not guess the registry**. If no registry is specified (e.g. user says "add a login block" without specifying `@shadcn`, `@tailark`, `owner/repo`, etc.), ask which registry to use. Never default to a registry on behalf of the user.
+9. **Switching presets** — Ask the user first: **overwrite**, **partial**, **merge**, or **skip**?
+   - **Inspect current preset**: `npx shadcn@latest preset resolve`. Use `--json` when you need structured values.
+   - **Inspect incoming preset**: `npx shadcn@latest preset decode <code>`. Use `preset url <code>` or `preset open <code>` to share or open the preset builder.
+   - **Overwrite**: `npx shadcn@latest apply <code>`. Overwrites detected components, fonts, and CSS variables.
+   - **Partial**: `npx shadcn@latest apply <code> --only theme,font`. Updates only the selected preset parts without reinstalling UI components. Supported values are `theme` and `font`; comma-separated combinations are allowed. `icon` is intentionally not supported, because icon changes may require full component reinstall and transforms.
+   - **Merge**: `npx shadcn@latest init --preset <code> --force --no-reinstall`, then run `npx shadcn@latest info` to list installed components, then for each installed component use `--dry-run` and `--diff` to [smart merge](#updating-components) it individually.
+   - **Skip**: `npx shadcn@latest init --preset <code> --force --no-reinstall`. Only updates config and CSS, leaves components as-is.
+   - **Important**: Always run preset commands inside the user's project directory. `apply` only works in an existing project with a `components.json` file. The CLI automatically preserves the current base (`base` vs `radix`) from `components.json`. If you must use a scratch/temp directory (e.g. for `--dry-run` comparisons), pass `--base <current-base>` explicitly — preset codes do not encode the base.
+
+## Updating Components
+
+When the user asks to update a component from upstream while keeping their local changes, use `--dry-run` and `--diff` to intelligently merge. **NEVER fetch raw files from GitHub manually — always use the CLI.**
+
+1. Run `npx shadcn@latest add <component> --dry-run` to see all files that would be affected.
+2. For each file, run `npx shadcn@latest add <component> --diff <file>` to see what changed upstream vs local.
+3. Decide per file based on the diff:
+   - No local changes → safe to overwrite.
+   - Has local changes → read the local file, analyze the diff, and apply upstream updates while preserving local modifications.
+   - User says "just update everything" → use `--overwrite`, but confirm first.
+4. **Never use `--overwrite` without the user's explicit approval.**
+
+## Quick Reference
+
+```bash
+# Create a new project.
+npx shadcn@latest init --name my-app --preset base-nova
+npx shadcn@latest init --name my-app --preset a2r6bw --template vite
+
+# Create a monorepo project.
+npx shadcn@latest init --name my-app --preset base-nova --monorepo
+npx shadcn@latest init --name my-app --preset base-nova --template next --monorepo
+
+# Initialize existing project.
+npx shadcn@latest init --preset base-nova
+npx shadcn@latest init --defaults  # shortcut: --template=next --preset=nova (base style implied)
+
+# Apply a preset to an existing project.
+npx shadcn@latest apply a2r6bw
+npx shadcn@latest apply a2r6bw --only theme
+npx shadcn@latest apply a2r6bw --only font
+npx shadcn@latest apply a2r6bw --only theme,font
+
+# Inspect preset codes and project preset state.
+npx shadcn@latest preset decode a2r6bw
+npx shadcn@latest preset url a2r6bw
+npx shadcn@latest preset open a2r6bw
+npx shadcn@latest preset resolve
+npx shadcn@latest preset resolve --json
+
+# Add components.
+npx shadcn@latest add button card dialog
+npx shadcn@latest add @magicui/shimmer-button
+npx shadcn@latest add owner/repo/item
+npx shadcn@latest add --all
+
+# Preview changes before adding/updating.
+npx shadcn@latest add button --dry-run
+npx shadcn@latest add button --diff button.tsx
+npx shadcn@latest add @acme/form --view button.tsx
+npx shadcn@latest add owner/repo/item --dry-run
+
+# Search registries.
+npx shadcn@latest search @shadcn -q "sidebar"
+npx shadcn@latest search @tailark -q "stats"
+npx shadcn@latest search owner/repo -q "login"
+npx shadcn@latest search                          # all configured registries
+npx shadcn@latest search @shadcn -q "menu" -t ui  # filter by item type
+
+# Get component docs and example URLs.
+npx shadcn@latest docs button dialog select
+
+# View registry item details (for items not yet installed).
+npx shadcn@latest view @shadcn/button
+npx shadcn@latest view owner/repo/item
+```
+
+**Named presets:** `nova`, `vega`, `maia`, `lyra`, `mira`, `luma`
+**Templates:** `next`, `vite`, `start`, `react-router`, `astro` (all support `--monorepo`) and `laravel` (not supported for monorepo)
+**Preset codes:** Version-prefixed base62 strings (e.g. `a2r6bw` or `b0`), from [ui.shadcn.com](https://ui.shadcn.com).
+
+## Detailed References
+
+- [rules/forms.md](./rules/forms.md) — FieldGroup, Field, InputGroup, ToggleGroup, FieldSet, validation states
+- [rules/composition.md](./rules/composition.md) — Groups, overlays, Card, Tabs, Avatar, Alert, Empty, Toast, Separator, Skeleton, Badge, Button loading
+- [rules/chat.md](./rules/chat.md) — MessageScroller, Message, Bubble, Attachment, Marker; streaming, anchoring, jump-to-latest
+- [rules/icons.md](./rules/icons.md) — data-icon, icon sizing, passing icons as objects
+- [rules/styling.md](./rules/styling.md) — Semantic colors, variants, className, spacing, size, truncate, dark mode, cn(), z-index
+- [rules/base-vs-radix.md](./rules/base-vs-radix.md) — asChild vs render, Select, ToggleGroup, Slider, Accordion
+- [cli.md](./cli.md) — Commands, flags, presets, templates
+- [registry.md](./registry.md) — Authoring source registries, `include`, item definitions, dependencies, GitHub registry rules
+- [customization.md](./customization.md) — Theming, CSS variables, extending components

.agents/skills/shadcn/agents/openai.yml

@@ -0,0 +1,5 @@
+interface:
+  display_name: "shadcn/ui"
+  short_description: "Manages shadcn/ui components — adding, searching, fixing, debugging, styling, and composing UI."
+  icon_small: "./assets/shadcn-small.png"
+  icon_large: "./assets/shadcn.png"

.agents/skills/shadcn/cli.md

@@ -0,0 +1,290 @@
+# shadcn CLI Reference
+
+Configuration is read from `components.json`.
+
+> **IMPORTANT:** Always run commands using the project's package runner: `npx shadcn@latest`, `pnpm dlx shadcn@latest`, or `bunx --bun shadcn@latest`. Check `packageManager` from project context to choose the right one. Examples below use `npx shadcn@latest` but substitute the correct runner for the project.
+
+> **IMPORTANT:** Only use the flags documented below. Do not invent or guess flags — if a flag isn't listed here, it doesn't exist. The CLI auto-detects the package manager from the project's lockfile; there is no `--package-manager` flag.
+
+## Contents
+
+- Commands: init, apply, add (dry-run, smart merge), search, view, docs, info, build
+- Templates: next, vite, start, react-router, astro
+- Presets: named, code, URL formats and fields
+- Switching presets
+
+---
+
+## Commands
+
+### `init` — Initialize or create a project
+
+```bash
+npx shadcn@latest init [components...] [options]
+```
+
+Initializes shadcn/ui in an existing project or creates a new project (when `--name` is provided). Optionally installs components in the same step.
+
+| Flag                    | Short | Description                                               | Default |
+| ----------------------- | ----- | --------------------------------------------------------- | ------- |
+| `--template <template>` | `-t`  | Template (next, start, vite, next-monorepo, react-router) | —       |
+| `--preset [name]`       | `-p`  | Preset configuration (named, code, or URL)                | —       |
+| `--yes`                 | `-y`  | Skip confirmation prompt                                  | `true`  |
+| `--defaults`            | `-d`  | Use defaults (`--template=next --preset=base-nova`)       | `false` |
+| `--force`               | `-f`  | Force overwrite existing configuration                    | `false` |
+| `--cwd <cwd>`           | `-c`  | Working directory                                         | current |
+| `--name <name>`         | `-n`  | Name for new project                                      | —       |
+| `--silent`              | `-s`  | Mute output                                               | `false` |
+| `--rtl`                 |       | Enable RTL support                                        | —       |
+| `--reinstall`           |       | Re-install existing UI components                         | `false` |
+| `--monorepo`            |       | Scaffold a monorepo project                               | —       |
+| `--no-monorepo`         |       | Skip the monorepo prompt                                  | —       |
+
+`npx shadcn@latest create` is an alias for `npx shadcn@latest init`.
+
+### `apply` — Apply a preset to an existing project
+
+```bash
+npx shadcn@latest apply [preset] [options]
+```
+
+Applies a preset to an existing project, overwriting preset-driven config, fonts, CSS variables, and detected UI components.
+
+| Flag                | Short | Description                                | Default |
+| ------------------- | ----- | ------------------------------------------ | ------- |
+| `--preset <preset>` | —     | Preset configuration (named, code, or URL) | —       |
+| `--yes`             | `-y`  | Skip confirmation prompt                   | `false` |
+| `--cwd <cwd>`       | `-c`  | Working directory                          | current |
+| `--silent`          | `-s`  | Mute output                                | `false` |
+
+`[preset]` is a shorthand for `--preset <preset>`. If both are provided, they must match.
+If no preset is provided, the CLI offers to open the custom preset builder on `ui.shadcn.com/create`.
+
+### `add` — Add components
+
+> **IMPORTANT:** To compare local components against upstream or to preview changes, ALWAYS use `npx shadcn@latest add <component> --dry-run`, `--diff`, or `--view`. NEVER fetch raw files from GitHub or other sources manually. The CLI handles registry resolution, file paths, and CSS diffing automatically.
+
+```bash
+npx shadcn@latest add [components...] [options]
+```
+
+Accepts component names, registry-prefixed names (`@magicui/shimmer-button`),
+GitHub item addresses (`owner/repo/item`), URLs, or local paths.
+
+| Flag            | Short | Description                                                                                                          | Default |
+| --------------- | ----- | -------------------------------------------------------------------------------------------------------------------- | ------- |
+| `--yes`         | `-y`  | Skip confirmation prompt                                                                                             | `false` |
+| `--overwrite`   | `-o`  | Overwrite existing files                                                                                             | `false` |
+| `--cwd <cwd>`   | `-c`  | Working directory                                                                                                    | current |
+| `--all`         | `-a`  | Add all available components                                                                                         | `false` |
+| `--path <path>` | `-p`  | Target path for the component                                                                                        | —       |
+| `--silent`      | `-s`  | Mute output                                                                                                          | `false` |
+| `--dry-run`     |       | Preview all changes without writing files                                                                            | `false` |
+| `--diff [path]` |       | Show diffs. Without a path, shows the first 5 files. With a path, shows that file only (implies `--dry-run`)         | —       |
+| `--view [path]` |       | Show file contents. Without a path, shows the first 5 files. With a path, shows that file only (implies `--dry-run`) | —       |
+
+#### Dry-Run Mode
+
+Use `--dry-run` to preview what `add` would do without writing any files. `--diff` and `--view` both imply `--dry-run`.
+
+```bash
+# Preview all changes.
+npx shadcn@latest add button --dry-run
+
+# Show diffs for all files (top 5).
+npx shadcn@latest add button --diff
+
+# Show the diff for a specific file.
+npx shadcn@latest add button --diff button.tsx
+
+# Show contents for all files (top 5).
+npx shadcn@latest add button --view
+
+# Show the full content of a specific file.
+npx shadcn@latest add button --view button.tsx
+
+# Works with URLs too.
+npx shadcn@latest add https://api.npoint.io/abc123 --dry-run
+
+# Works with public GitHub registries too.
+npx shadcn@latest add owner/repo/item --dry-run
+
+# CSS diffs.
+npx shadcn@latest add button --diff globals.css
+```
+
+**When to use dry-run:**
+
+- When the user asks "what files will this add?" or "what will this change?" — use `--dry-run`.
+- Before overwriting existing components — use `--diff` to preview the changes first.
+- When the user wants to inspect component source code without installing — use `--view`.
+- When checking what CSS changes would be made to `globals.css` — use `--diff globals.css`.
+- When the user asks to review or audit third-party registry code before installing — use `--view` to inspect the source.
+
+> **`npx shadcn@latest add --dry-run` vs `npx shadcn@latest view`:** Prefer `npx shadcn@latest add --dry-run/--diff/--view` over `npx shadcn@latest view` when the user wants to preview changes to their project. `npx shadcn@latest view` only shows raw registry metadata. `npx shadcn@latest add --dry-run` shows exactly what would happen in the user's project: resolved file paths, diffs against existing files, and CSS updates. Use `npx shadcn@latest view` only when the user wants to browse registry info without a project context.
+
+#### Smart Merge from Upstream
+
+See [Updating Components in SKILL.md](./SKILL.md#updating-components) for the full workflow.
+
+### `search` — Search registries
+
+```bash
+npx shadcn@latest search [registries...] [options]
+```
+
+Fuzzy search across registries. Also aliased as `npx shadcn@latest list`.
+Supports namespaces (`@acme`), public GitHub registry sources (`owner/repo`),
+and registry catalog URLs. Without `-q`, lists all items. When no registries are
+passed, searches every registry configured in `components.json`.
+
+| Flag                | Short | Description                                       | Default |
+| ------------------- | ----- | ------------------------------------------------- | ------- |
+| `--query <query>`   | `-q`  | Search query                                      | —       |
+| `--type <type>`     | `-t`  | Filter by item type (e.g. `ui`, `block`, `hook`); comma-separated | —       |
+| `--limit <number>`  | `-l`  | Max items to display                              | `100`   |
+| `--offset <number>` | `-o`  | Items to skip                                     | `0`     |
+| `--json`            |       | Output as JSON                                    | `false` |
+| `--cwd <cwd>`       | `-c`  | Working directory                                 | current |
+
+### `view` — View item details
+
+```bash
+npx shadcn@latest view <items...> [options]
+```
+
+Displays item info including file contents. Examples:
+`npx shadcn@latest view @shadcn/button`,
+`npx shadcn@latest view owner/repo/item`.
+
+### `docs` — Get component documentation URLs
+
+```bash
+npx shadcn@latest docs <components...> [options]
+```
+
+Outputs resolved URLs for component documentation, examples, and API references. Accepts one or more component names. Fetch the URLs to get the actual content.
+
+Example output for `npx shadcn@latest docs input button`:
+
+```
+base  radix
+
+input
+  docs      https://ui.shadcn.com/docs/components/radix/input
+  examples  https://raw.githubusercontent.com/.../examples/input-example.tsx
+
+button
+  docs      https://ui.shadcn.com/docs/components/radix/button
+  examples  https://raw.githubusercontent.com/.../examples/button-example.tsx
+```
+
+Some components include an `api` link to the underlying library (e.g. `cmdk` for the command component).
+
+### `diff` — Check for updates
+
+Do not use this command. Use `npx shadcn@latest add --diff` instead.
+
+### `info` — Project information
+
+```bash
+npx shadcn@latest info [options]
+```
+
+Displays project info and `components.json` configuration. Run this first to discover the project's framework, aliases, Tailwind version, and resolved paths.
+
+| Flag          | Short | Description       | Default |
+| ------------- | ----- | ----------------- | ------- |
+| `--cwd <cwd>` | `-c`  | Working directory | current |
+
+**Project Info fields:**
+
+| Field                | Type      | Meaning                                                            |
+| -------------------- | --------- | ------------------------------------------------------------------ |
+| `framework`          | `string`  | Detected framework (`next`, `vite`, `react-router`, `start`, etc.) |
+| `frameworkVersion`   | `string`  | Framework version (e.g. `15.2.4`)                                  |
+| `isSrcDir`           | `boolean` | Whether the project uses a `src/` directory                        |
+| `isRSC`              | `boolean` | Whether React Server Components are enabled                        |
+| `isTsx`              | `boolean` | Whether the project uses TypeScript                                |
+| `tailwindVersion`    | `string`  | `"v3"` or `"v4"`                                                   |
+| `tailwindConfigFile` | `string`  | Path to the Tailwind config file                                   |
+| `tailwindCssFile`    | `string`  | Path to the global CSS file                                        |
+| `aliasPrefix`        | `string`  | Import alias prefix (e.g. `@`, `~`, `@/`)                          |
+| `packageManager`     | `string`  | Detected package manager (`npm`, `pnpm`, `yarn`, `bun`)            |
+
+**Components.json fields:**
+
+| Field                | Type      | Meaning                                                                                    |
+| -------------------- | --------- | ------------------------------------------------------------------------------------------ |
+| `base`               | `string`  | Primitive library (`radix` or `base`) — determines component APIs and available props      |
+| `style`              | `string`  | Visual style (e.g. `nova`, `vega`)                                                         |
+| `rsc`                | `boolean` | RSC flag from config                                                                       |
+| `tsx`                | `boolean` | TypeScript flag                                                                            |
+| `tailwind.config`    | `string`  | Tailwind config path                                                                       |
+| `tailwind.css`       | `string`  | Global CSS path — this is where custom CSS variables go                                    |
+| `iconLibrary`        | `string`  | Icon library — determines icon import package (e.g. `lucide-react`, `@tabler/icons-react`) |
+| `aliases.components` | `string`  | Component import alias (e.g. `@/components`)                                               |
+| `aliases.utils`      | `string`  | Utils import alias (e.g. `@/lib/utils`)                                                    |
+| `aliases.ui`         | `string`  | UI component alias (e.g. `@/components/ui`)                                                |
+| `aliases.lib`        | `string`  | Lib alias (e.g. `@/lib`)                                                                   |
+| `aliases.hooks`      | `string`  | Hooks alias (e.g. `@/hooks`)                                                               |
+| `resolvedPaths`      | `object`  | Absolute file-system paths for each alias                                                  |
+| `registries`         | `object`  | Configured custom registries                                                               |
+
+**Links fields:**
+
+The `info` output includes a **Links** section with templated URLs for component docs, source, and examples. For resolved URLs, use `npx shadcn@latest docs <component>` instead.
+
+### `build` — Build a custom registry
+
+```bash
+npx shadcn@latest build [registry] [options]
+```
+
+Builds `registry.json` into individual JSON files for distribution. Default input: `./registry.json`, default output: `./public/r`.
+
+For authoring rules, `include`, item definitions, `registryDependencies`, and
+GitHub registry behavior, see [registry.md](./registry.md).
+
+| Flag              | Short | Description       | Default      |
+| ----------------- | ----- | ----------------- | ------------ |
+| `--output <path>` | `-o`  | Output directory  | `./public/r` |
+| `--cwd <cwd>`     | `-c`  | Working directory | current      |
+
+---
+
+## Templates
+
+| Value          | Framework      | Monorepo support |
+| -------------- | -------------- | ---------------- |
+| `next`         | Next.js        | Yes              |
+| `vite`         | Vite           | Yes              |
+| `start`        | TanStack Start | Yes              |
+| `react-router` | React Router   | Yes              |
+| `astro`        | Astro          | Yes              |
+| `laravel`      | Laravel        | No               |
+
+All templates support monorepo scaffolding via the `--monorepo` flag. When passed, the CLI uses a monorepo-specific template directory (e.g. `next-monorepo`, `vite-monorepo`). When neither `--monorepo` nor `--no-monorepo` is passed, the CLI prompts interactively. Laravel does not support monorepo scaffolding.
+
+---
+
+## Presets
+
+Three ways to specify a preset via `--preset`:
+
+1. **Named:** `--preset nova` or `--preset lyra`
+2. **Code:** `--preset a2r6bw` (version-prefixed base62 string, e.g. `a2r6bw` or `b0`)
+3. **URL:** `--preset "https://ui.shadcn.com/init?base=radix&style=nova&..."`
+
+> **IMPORTANT:** Never try to decode, fetch, or resolve preset codes manually. Preset codes are opaque — pass them directly to `npx shadcn@latest init --preset <code>` and let the CLI handle resolution.
+> Use `npx shadcn@latest apply --preset <code>` when overwriting an existing project's preset.
+
+## Switching Presets
+
+Ask the user first: **overwrite**, **merge**, or **skip** existing components?
+
+- **Overwrite / Re-install** → `npx shadcn@latest apply --preset <code>`. Overwrites all detected component files with the new preset styles. Use when the user hasn't customized components.
+- **Merge** → `npx shadcn@latest init --preset <code> --force --no-reinstall`, then run `npx shadcn@latest info` to get the list of installed components and use the [smart merge workflow](./SKILL.md#updating-components) to update them one by one, preserving local changes. Use when the user has customized components.
+- **Skip** → `npx shadcn@latest init --preset <code> --force --no-reinstall`. Only updates config and CSS variables, leaves existing components as-is.
+
+Always run preset commands inside the user's project directory. `apply` only works in an existing project with a `components.json` file. The CLI automatically preserves the current base (`base` vs `radix`) from `components.json`. If you must use a scratch/temp directory (e.g. for `--dry-run` comparisons), pass `--base <current-base>` explicitly — preset codes do not encode the base.

.agents/skills/shadcn/customization.md

@@ -0,0 +1,209 @@
+# Customization & Theming
+
+Components reference semantic CSS variable tokens. Change the variables to change every component.
+
+## Contents
+
+- How it works (CSS variables → Tailwind utilities → components)
+- Color variables and OKLCH format
+- Dark mode setup
+- Changing the theme (presets, CSS variables)
+- Adding custom colors (Tailwind v3 and v4)
+- Border radius
+- Customizing components (variants, className, wrappers)
+- Checking for updates
+
+---
+
+## How It Works
+
+1. CSS variables defined in `:root` (light) and `.dark` (dark mode).
+2. Tailwind maps them to utilities: `bg-primary`, `text-muted-foreground`, etc.
+3. Components use these utilities — changing a variable changes all components that reference it.
+
+---
+
+## Color Variables
+
+Every color follows the `name` / `name-foreground` convention. The base variable is for backgrounds, `-foreground` is for text/icons on that background.
+
+| Variable                                     | Purpose                          |
+| -------------------------------------------- | -------------------------------- |
+| `--background` / `--foreground`              | Page background and default text |
+| `--card` / `--card-foreground`               | Card surfaces                    |
+| `--primary` / `--primary-foreground`         | Primary buttons and actions      |
+| `--secondary` / `--secondary-foreground`     | Secondary actions                |
+| `--muted` / `--muted-foreground`             | Muted/disabled states            |
+| `--accent` / `--accent-foreground`           | Hover and accent states          |
+| `--destructive` / `--destructive-foreground` | Error and destructive actions    |
+| `--border`                                   | Default border color             |
+| `--input`                                    | Form input borders               |
+| `--ring`                                     | Focus ring color                 |
+| `--chart-1` through `--chart-5`              | Chart/data visualization         |
+| `--sidebar-*`                                | Sidebar-specific colors          |
+| `--surface` / `--surface-foreground`         | Secondary surface                |
+
+Colors use OKLCH: `--primary: oklch(0.205 0 0)` where values are lightness (0–1), chroma (0 = gray), and hue (0–360).
+
+---
+
+## Dark Mode
+
+Class-based toggle via `.dark` on the root element. In Next.js, use `next-themes`:
+
+```tsx
+import { ThemeProvider } from "next-themes"
+
+<ThemeProvider attribute="class" defaultTheme="system" enableSystem>
+  {children}
+</ThemeProvider>
+```
+
+---
+
+## Changing the Theme
+
+```bash
+# Apply a preset code from ui.shadcn.com.
+npx shadcn@latest apply --preset a2r6bw
+
+# Positional shorthand also works.
+npx shadcn@latest apply a2r6bw
+
+# Switch to a named preset and overwrite existing components.
+npx shadcn@latest apply --preset nova
+
+# Preserve existing components instead.
+npx shadcn@latest init --preset nova --force --no-reinstall
+
+# Use a custom theme URL.
+npx shadcn@latest apply --preset "https://ui.shadcn.com/init?base=radix&style=nova&theme=blue&..."
+```
+
+Or edit CSS variables directly in `globals.css`.
+
+---
+
+## Adding Custom Colors
+
+Add variables to the file at `tailwindCssFile` from `npx shadcn@latest info` (typically `globals.css`). Never create a new CSS file for this.
+
+```css
+/* 1. Define in the global CSS file. */
+:root {
+  --warning: oklch(0.84 0.16 84);
+  --warning-foreground: oklch(0.28 0.07 46);
+}
+.dark {
+  --warning: oklch(0.41 0.11 46);
+  --warning-foreground: oklch(0.99 0.02 95);
+}
+```
+
+```css
+/* 2a. Register with Tailwind v4 (@theme inline). */
+@theme inline {
+  --color-warning: var(--warning);
+  --color-warning-foreground: var(--warning-foreground);
+}
+```
+
+When `tailwindVersion` is `"v3"` (check via `npx shadcn@latest info`), register in `tailwind.config.js` instead:
+
+```js
+// 2b. Register with Tailwind v3 (tailwind.config.js).
+module.exports = {
+  theme: {
+    extend: {
+      colors: {
+        warning: "oklch(var(--warning) / <alpha-value>)",
+        "warning-foreground":
+          "oklch(var(--warning-foreground) / <alpha-value>)",
+      },
+    },
+  },
+}
+```
+
+```tsx
+// 3. Use in components.
+<div className="bg-warning text-warning-foreground">Warning</div>
+```
+
+---
+
+## Border Radius
+
+`--radius` controls border radius globally. Components derive values from it (`rounded-lg` = `var(--radius)`, `rounded-md` = `calc(var(--radius) - 2px)`).
+
+---
+
+## Customizing Components
+
+See also: [rules/styling.md](./rules/styling.md) for Incorrect/Correct examples.
+
+Prefer these approaches in order:
+
+### 1. Built-in variants
+
+```tsx
+<Button variant="outline" size="sm">
+  Click
+</Button>
+```
+
+### 2. Tailwind classes via `className`
+
+```tsx
+<Card className="mx-auto max-w-md">...</Card>
+```
+
+### 3. Add a new variant
+
+Edit the component source to add a variant via `cva`:
+
+```tsx
+// components/ui/button.tsx
+warning: "bg-warning text-warning-foreground hover:bg-warning/90",
+```
+
+### 4. Wrapper components
+
+Compose shadcn/ui primitives into higher-level components:
+
+```tsx
+export function ConfirmDialog({ title, description, onConfirm, children }) {
+  return (
+    <AlertDialog>
+      <AlertDialogTrigger asChild>{children}</AlertDialogTrigger>
+      <AlertDialogContent>
+        <AlertDialogHeader>
+          <AlertDialogTitle>{title}</AlertDialogTitle>
+          <AlertDialogDescription>{description}</AlertDialogDescription>
+        </AlertDialogHeader>
+        <AlertDialogFooter>
+          <AlertDialogCancel>Cancel</AlertDialogCancel>
+          <AlertDialogAction onClick={onConfirm}>Confirm</AlertDialogAction>
+        </AlertDialogFooter>
+      </AlertDialogContent>
+    </AlertDialog>
+  )
+}
+```
+
+---
+
+## Checking for Updates
+
+```bash
+npx shadcn@latest add button --diff
+```
+
+To preview exactly what would change before updating, use `--dry-run` and `--diff`:
+
+```bash
+npx shadcn@latest add button --dry-run        # see all affected files
+npx shadcn@latest add button --diff button.tsx # see the diff for a specific file
+```
+
+See [Updating Components in SKILL.md](./SKILL.md#updating-components) for the full smart merge workflow.

.agents/skills/shadcn/evals/evals.json

@@ -0,0 +1,77 @@
+{
+  "skill_name": "shadcn",
+  "evals": [
+    {
+      "id": 1,
+      "prompt": "I'm building a Next.js app with shadcn/ui (base-nova preset, lucide icons). Create a settings form component with fields for: full name, email address, and notification preferences (email, SMS, push notifications as toggle options). Add validation states for required fields.",
+      "expected_output": "A React component using FieldGroup, Field, ToggleGroup, data-invalid/aria-invalid validation, gap-* spacing, and semantic colors.",
+      "files": [],
+      "expectations": [
+        "Uses FieldGroup and Field components for form layout instead of raw div with space-y",
+        "Uses Switch for independent on/off notification toggles (not looping Button with manual active state)",
+        "Uses data-invalid on Field and aria-invalid on the input control for validation states",
+        "Uses gap-* (e.g. gap-4, gap-6) instead of space-y-* or space-x-* for spacing",
+        "Uses semantic color tokens (e.g. bg-background, text-muted-foreground, text-destructive) instead of raw colors like bg-red-500",
+        "No manual dark: color overrides"
+      ]
+    },
+    {
+      "id": 2,
+      "prompt": "Create a dialog component for editing a user profile. It should have the user's avatar at the top, input fields for name and bio, and Save/Cancel buttons with appropriate icons. Using shadcn/ui with radix-nova preset and tabler icons.",
+      "expected_output": "A React component with DialogTitle, Avatar+AvatarFallback, data-icon on icon buttons, no icon sizing classes, tabler icon imports.",
+      "files": [],
+      "expectations": [
+        "Includes DialogTitle for accessibility (visible or with sr-only class)",
+        "Avatar component includes AvatarFallback",
+        "Icons on buttons use the data-icon attribute (data-icon=\"inline-start\" or data-icon=\"inline-end\")",
+        "No sizing classes on icons inside components (no size-4, w-4, h-4, etc.)",
+        "Uses tabler icons (@tabler/icons-react) instead of lucide-react",
+        "Uses asChild for custom triggers (radix preset)"
+      ]
+    },
+    {
+      "id": 3,
+      "prompt": "Create a dashboard component that shows 4 stat cards in a grid. Each card has a title, large number, percentage change badge, and a loading skeleton state. Using shadcn/ui with base-nova preset and lucide icons.",
+      "expected_output": "A React component with full Card composition, Skeleton for loading, Badge for changes, semantic colors, gap-* spacing.",
+      "files": [],
+      "expectations": [
+        "Uses full Card composition with CardHeader, CardTitle, CardContent (not dumping everything into CardContent)",
+        "Uses Skeleton component for loading placeholders instead of custom animate-pulse divs",
+        "Uses Badge component for percentage change instead of custom styled spans",
+        "Uses semantic color tokens instead of raw color values like bg-green-500 or text-red-600",
+        "Uses gap-* instead of space-y-* or space-x-* for spacing",
+        "Uses size-* when width and height are equal instead of separate w-* h-*"
+      ]
+    },
+    {
+      "id": 4,
+      "prompt": "I'm building a Next.js app with shadcn/ui (base-nova preset, lucide icons). Build a chat conversation view: a scrollable thread of messages from two different people, each with an avatar, sender name, timestamp, and message bubble. A couple of messages include an image attachment and a PDF file attachment, and there's a 'Today' divider separating the days.",
+      "expected_output": "A React component composing MessageScroller, Message, Bubble, Attachment, and Marker from the registry instead of hand-rolled bubble/divider/attachment markup.",
+      "files": [],
+      "expectations": [
+        "Uses MessageScroller (MessageScrollerProvider, MessageScrollerViewport, MessageScrollerContent, MessageScrollerItem) for the scrollable thread instead of a raw overflow-y-auto div or ScrollArea",
+        "Wraps each row in MessageScrollerItem inside MessageScrollerContent",
+        "Uses Message with MessageAvatar/MessageContent/MessageHeader for row layout instead of custom flex divs",
+        "Uses Bubble + BubbleContent for the message surface instead of a styled div with bg-muted/bg-primary",
+        "Uses Attachment (AttachmentMedia, AttachmentContent, AttachmentTitle, AttachmentDescription) for the file and image attachments instead of Item or a custom card",
+        "Uses Marker (variant=\"separator\") for the 'Today' divider instead of Separator plus a centered label",
+        "Uses semantic color tokens and gap-* spacing; no raw colors like bg-emerald-500 and no space-y-*",
+        "Includes \"use client\" when the component uses state or event handlers (isRSC)"
+      ]
+    },
+    {
+      "id": 5,
+      "prompt": "Using shadcn/ui (base-nova preset, lucide icons), build a streaming AI chat UI. The assistant's reply streams in while it generates, the view auto-scrolls to follow the latest content but stops following if the user scrolls up to read earlier messages, a 'jump to latest' button appears when the user has scrolled away from the bottom, and a subtle 'thinking…' shimmer shows while the model is generating.",
+      "expected_output": "A React component that delegates scroll/anchor behavior to MessageScroller and uses MessageScrollerButton for jump-to-latest and the shimmer utility for the thinking indicator — no hand-rolled scroll logic or custom shimmer keyframes.",
+      "files": [],
+      "expectations": [
+        "Uses MessageScroller with MessageScrollerProvider (autoScroll) and scrollAnchor on message items for the stick-to-bottom/follow behavior instead of a custom useStickToBottom hook or ResizeObserver/scrollTop wiring",
+        "Uses MessageScrollerButton for the jump-to-latest control instead of a hand-built conditional button driven by manual scroll-position state",
+        "Uses the shimmer utility class for the 'thinking…' indicator instead of a custom @keyframes or bg-clip-text gradient animation",
+        "Wraps each message row in MessageScrollerItem inside MessageScrollerContent",
+        "Uses Message + Bubble + BubbleContent for the conversation rows instead of hand-rolled bubble divs",
+        "Uses semantic color tokens and gap-* spacing; includes \"use client\" (isRSC)"
+      ]
+    }
+  ]
+}

.agents/skills/shadcn/mcp.md

@@ -0,0 +1,105 @@
+# shadcn MCP Server
+
+The CLI includes an MCP server that lets AI assistants search, browse, view, and install items from registries.
+
+---
+
+## Setup
+
+```bash
+shadcn mcp        # start the MCP server (stdio)
+shadcn mcp init   # write config for your editor
+```
+
+Editor config files:
+
+| Editor      | Config file                     |
+| ----------- | ------------------------------- |
+| Claude Code | `.mcp.json`                     |
+| Cursor      | `.cursor/mcp.json`              |
+| VS Code     | `.vscode/mcp.json`              |
+| OpenCode    | `opencode.json`                 |
+| Codex       | `~/.codex/config.toml` (manual) |
+
+---
+
+## Tools
+
+> **Tip:** MCP tools handle registry operations (search, view, install). For project configuration (aliases, framework, Tailwind version), use `npx shadcn@latest info` — there is no MCP equivalent.
+
+### `shadcn:get_project_registries`
+
+Returns registry names from `components.json`. Errors if no `components.json` exists.
+
+**Input:** none
+
+### `shadcn:list_items_in_registries`
+
+Lists all items from one or more registries. Registries can be configured
+namespaces such as `@acme`, public GitHub sources such as `owner/repo`, or
+registry catalog URLs. Omit `registries` to list from every registry configured
+in `components.json`.
+
+**Input:** `registries` (string[], optional — omit for all configured), `types` (string[], optional — e.g. `["ui", "block"]`), `limit` (number, optional, defaults to 100), `offset` (number, optional)
+
+### `shadcn:search_items_in_registries`
+
+Fuzzy search across registries. Registries can be configured namespaces, public
+GitHub sources, or registry catalog URLs. Omit `registries` to search every
+registry configured in `components.json` — e.g. "find me a hero" across all
+configured registries.
+
+**Input:** `registries` (string[], optional — omit for all configured), `query` (string), `types` (string[], optional — e.g. `["ui", "block"]`), `limit` (number, optional, defaults to 100), `offset` (number, optional)
+
+### `shadcn:view_items_in_registries`
+
+View item details including full file contents.
+
+**Input:** `items` (string[]) — e.g.
+`["@shadcn/button", "@shadcn/card", "owner/repo/item"]`
+
+### `shadcn:get_item_examples_from_registries`
+
+Find usage examples and demos with source code. Omit `registries` to search
+every registry configured in `components.json`.
+
+**Input:** `registries` (string[], optional — omit for all configured), `query` (string) — e.g. `"accordion-demo"`, `"button example"`
+
+### `shadcn:get_add_command_for_items`
+
+Returns the CLI install command.
+
+**Input:** `items` (string[]) — e.g. `["@shadcn/button"]`
+
+### `shadcn:get_audit_checklist`
+
+Returns a checklist for verifying components (imports, deps, lint, TypeScript).
+
+**Input:** none
+
+---
+
+## Configuring Registries
+
+Namespaced and authenticated registries are set in `components.json`. The
+`@shadcn` registry is always built-in. Public GitHub registries can also be used
+directly as `owner/repo` registry sources when the repository has a root
+`registry.json`; they do not need `components.json` configuration.
+
+```json
+{
+  "registries": {
+    "@acme": "https://acme.com/r/{name}.json",
+    "@private": {
+      "url": "https://private.com/r/{name}.json",
+      "headers": { "Authorization": "Bearer ${MY_TOKEN}" }
+    }
+  }
+}
+```
+
+- Names must start with `@`.
+- URLs must contain `{name}`.
+- `${VAR}` references are resolved from environment variables.
+
+Community registry index: `https://ui.shadcn.com/r/registries.json`

.agents/skills/shadcn/registry.md

@@ -0,0 +1,277 @@
+# Registry Authoring and Addresses
+
+Use this reference when the user wants to create, fix, publish, or reason about
+a shadcn registry.
+
+## Mental Model
+
+A registry has two forms:
+
+- **Source registry**: an authored `registry.json` in a project or repository.
+  It may use `include` and file paths that point at source files.
+- **Built registry**: generated JSON files served to CLI consumers, usually
+  from `public/r`. Use `npx shadcn@latest build` to create this form.
+
+The CLI installer consumes registry item payloads. A source registry is a way to
+author those payloads from real files.
+
+Registry items are not limited to React components. They can distribute
+components, hooks, utilities, design tokens, pages, config files, docs, rules,
+workflows, templates, MCP files, and other project files.
+
+## Root `registry.json`
+
+The root registry file should define registry metadata and either `items` or
+`include`.
+
+```json
+{
+  "$schema": "https://ui.shadcn.com/schema/registry.json",
+  "name": "acme",
+  "homepage": "https://acme.com",
+  "items": [
+    {
+      "name": "absolute-url",
+      "type": "registry:lib",
+      "title": "Absolute URL",
+      "description": "A utility to turn any path into an absolute URL.",
+      "files": [
+        {
+          "path": "lib/absolute-url.ts",
+          "type": "registry:lib"
+        }
+      ]
+    }
+  ]
+}
+```
+
+Root registry rules:
+
+- Root `registry.json` must include `name` and `homepage`.
+- `items` is an array of registry item definitions.
+- `include` may be used to split the source registry into multiple files.
+- Included registry files may omit `name` and `homepage`.
+
+## Include
+
+Use `include` to keep large registries modular.
+
+```json
+{
+  "$schema": "https://ui.shadcn.com/schema/registry.json",
+  "name": "acme",
+  "homepage": "https://acme.com",
+  "include": ["registry/ui/registry.json", "registry/blocks/registry.json"]
+}
+```
+
+Include rules:
+
+- Include paths are relative to the `registry.json` that declares them.
+- Include paths must explicitly point to a `registry.json` file.
+- Do not use remote URLs, absolute paths, or parent traversal (`..`).
+- Item file paths are relative to the registry file that declares the item.
+- Duplicate item names fail across the resolved registry.
+
+Example included file:
+
+```json
+{
+  "items": [
+    {
+      "name": "button",
+      "type": "registry:ui",
+      "files": [
+        {
+          "path": "button.tsx",
+          "type": "registry:ui"
+        }
+      ]
+    }
+  ]
+}
+```
+
+If this file is at `registry/ui/registry.json`, then `button.tsx` is read from
+`registry/ui/button.tsx`, and the built item path is emitted relative to the
+root registry.
+
+## Item Definitions
+
+Common item fields:
+
+```json
+{
+  "name": "login-form",
+  "type": "registry:block",
+  "title": "Login Form",
+  "description": "A login form with email and password fields.",
+  "dependencies": ["zod"],
+  "registryDependencies": ["button", "input", "label"],
+  "files": [
+    {
+      "path": "blocks/login-form.tsx",
+      "type": "registry:block"
+    }
+  ],
+  "cssVars": {
+    "light": {
+      "brand": "oklch(0.62 0.18 250)"
+    },
+    "dark": {
+      "brand": "oklch(0.72 0.16 250)"
+    }
+  }
+}
+```
+
+Important fields:
+
+- `name`: the installable item name. It is not necessarily a file path.
+- `type`: one of the registry item types, such as `registry:ui`,
+  `registry:block`, `registry:lib`, `registry:hook`, `registry:file`,
+  `registry:page`, `registry:theme`, `registry:style`, `registry:font`, or
+  `registry:item`.
+- `files`: source files copied or generated by the item.
+- `dependencies`: npm runtime dependencies.
+- `devDependencies`: npm development dependencies.
+- `registryDependencies`: other registry items required by this item.
+- `cssVars`, `css`, `tailwind`, `envVars`, and `docs`: optional install-time
+  additions.
+
+File rules:
+
+- File paths are relative to the declaring `registry.json`.
+- `registry:file` and `registry:page` files require a `target`.
+- Do not use remote file URLs in source registry file paths.
+- Keep source files copy-pasteable: no hidden app-only imports.
+
+## Registry Dependencies
+
+`registryDependencies` entries are item addresses, not file paths.
+
+```json
+{
+  "name": "login-form",
+  "type": "registry:block",
+  "registryDependencies": ["button", "@acme/input", "acme/ui/card#v1.2.0"],
+  "files": [
+    {
+      "path": "blocks/login-form.tsx",
+      "type": "registry:block"
+    }
+  ]
+}
+```
+
+Dependency rules:
+
+- Bare names such as `"button"` mean official shadcn items.
+- Bare names never mean same-registry or same-repository items.
+- Namespaced dependencies use `@namespace/item-name`.
+- GitHub dependencies use `owner/repo/item-name`.
+- Pin GitHub dependencies with `owner/repo/item-name#ref` when needed.
+- Refs are not inherited. If `owner/repo/foo#v2` depends on `bar` from the same
+  repo at `v2`, write `owner/repo/bar#v2`.
+- Do not use relative dependencies such as `"./bar"`.
+
+## Address Schemes
+
+When reasoning about a registry item string, classify it first.
+
+| Address                             | Scheme    | Meaning                                                      |
+| ----------------------------------- | --------- | ------------------------------------------------------------ |
+| `button`                            | shadcn    | Official shadcn item named `button`.                         |
+| `@acme/button`                      | namespace | Item `button` from configured registry `@acme`.              |
+| `@acme/ui/button`                   | namespace | Item `ui/button` from configured registry `@acme`.           |
+| `https://example.com/r/button.json` | url       | Built registry item JSON at that URL.                        |
+| `./button.json`                     | file      | Built registry item JSON on disk.                            |
+| `acme/ui/button`                    | github    | Item `button` from GitHub repo `acme/ui`.                    |
+| `acme/ui/forms/login#main`          | github    | Item `forms/login` from GitHub repo `acme/ui` at ref `main`. |
+
+For namespace and GitHub addresses, slashful item names are allowed and are item
+names, not file paths. Addresses ending in `.json` keep file-address
+precedence, so `acme/ui/data/schema.json` is treated as a file path, not a
+GitHub item address.
+
+## GitHub Registries
+
+A public GitHub repository can act as a source registry when it has a root
+`registry.json`.
+
+```txt
+owner/repo/item-name[#ref]
+```
+
+Rules:
+
+- The first two path segments are GitHub owner and repo.
+- All remaining path segments are the registry item name.
+- The source entrypoint is always root `registry.json`.
+- GitHub registries are source registries consumed directly by the CLI. They do
+  not require `shadcn build` or generated item JSON files.
+- `include` follows the same source-registry rules as local registries.
+- Currently, GitHub addresses support public `github.com` repositories only.
+- Private repos and GitHub Enterprise require explicit product decisions.
+
+When implementing GitHub registry fetching, resolve refs to a commit SHA before
+reading source files. Do not read moving refs directly from
+`raw.githubusercontent.com`, because branch-like refs can be cached for several
+minutes.
+
+Preferred flow:
+
+```txt
+owner/repo[#ref]
+  -> resolve ref with git ls-remote
+  -> commit SHA
+  -> read https://raw.githubusercontent.com/{owner}/{repo}/{sha}/registry.json
+  -> read includes and item files from the same SHA
+```
+
+This keeps a command on one consistent repository snapshot.
+
+Full 40-character commit SHAs are already stable and can be used directly.
+Branches, tags, and short refs require Git so the CLI can resolve them to a
+commit SHA first.
+
+## Build and Verify
+
+Use the CLI to build source registries:
+
+```bash
+npx shadcn@latest build
+npx shadcn@latest build registry.json --output public/r
+```
+
+Use CLI commands to inspect the result:
+
+```bash
+npx shadcn@latest list @acme
+npx shadcn@latest search @acme -q "login"
+npx shadcn@latest view @acme/login-form
+npx shadcn@latest add @acme/login-form --dry-run
+npx shadcn@latest registry validate ./registry.json
+```
+
+Use GitHub addresses directly for public GitHub registries:
+
+```bash
+npx shadcn@latest list owner/repo
+npx shadcn@latest search owner/repo -q "login"
+npx shadcn@latest view owner/repo/item
+npx shadcn@latest add owner/repo/item --dry-run
+npx shadcn@latest registry validate owner/repo
+```
+
+When working on registry implementation in the shadcn/ui codebase:
+
+- Keep address parsing pure and testable.
+- Do not add side effects to validators.
+- Preserve existing behavior for official shadcn, namespace, URL, and file
+  schemes.
+- Add tests for address parsing, source loading, dependency resolution, list,
+  search, view, and add paths.
+- Prefer small source-reader abstractions over a plugin system until there are
+  multiple real providers.

.agents/skills/shadcn/rules/base-vs-radix.md

@@ -0,0 +1,306 @@
+# Base vs Radix
+
+API differences between `base` and `radix`. Check the `base` field from `npx shadcn@latest info`.
+
+## Contents
+
+- Composition: asChild vs render
+- Button / trigger as non-button element
+- Select (items prop, placeholder, positioning, multiple, object values)
+- ToggleGroup (type vs multiple)
+- Slider (scalar vs array)
+- Accordion (type and defaultValue)
+
+---
+
+## Composition: asChild (radix) vs render (base)
+
+Radix uses `asChild` to replace the default element. Base uses `render`. Don't wrap triggers in extra elements.
+
+**Incorrect:**
+
+```tsx
+<DialogTrigger>
+  <div>
+    <Button>Open</Button>
+  </div>
+</DialogTrigger>
+```
+
+**Correct (radix):**
+
+```tsx
+<DialogTrigger asChild>
+  <Button>Open</Button>
+</DialogTrigger>
+```
+
+**Correct (base):**
+
+```tsx
+<DialogTrigger render={<Button />}>Open</DialogTrigger>
+```
+
+This applies to all trigger and close components: `DialogTrigger`, `SheetTrigger`, `AlertDialogTrigger`, `DropdownMenuTrigger`, `PopoverTrigger`, `TooltipTrigger`, `CollapsibleTrigger`, `DialogClose`, `SheetClose`, `NavigationMenuLink`, `BreadcrumbLink`, `SidebarMenuButton`, `Badge`, `Item`.
+
+---
+
+## Button / trigger as non-button element (base only)
+
+When `render` changes an element to a non-button (`<a>`, `<span>`), add `nativeButton={false}`.
+
+**Incorrect (base):** missing `nativeButton={false}`.
+
+```tsx
+<Button render={<a href="/docs" />}>Read the docs</Button>
+```
+
+**Correct (base):**
+
+```tsx
+<Button render={<a href="/docs" />} nativeButton={false}>
+  Read the docs
+</Button>
+```
+
+**Correct (radix):**
+
+```tsx
+<Button asChild>
+  <a href="/docs">Read the docs</a>
+</Button>
+```
+
+Same for triggers whose `render` is not a `Button`:
+
+```tsx
+// base.
+<PopoverTrigger render={<InputGroupAddon />} nativeButton={false}>
+  Pick date
+</PopoverTrigger>
+```
+
+---
+
+## Select
+
+**items prop (base only).** Base requires an `items` prop on the root. Radix uses inline JSX only.
+
+**Incorrect (base):**
+
+```tsx
+<Select>
+  <SelectTrigger><SelectValue placeholder="Select a fruit" /></SelectTrigger>
+</Select>
+```
+
+**Correct (base):**
+
+```tsx
+const items = [
+  { label: "Select a fruit", value: null },
+  { label: "Apple", value: "apple" },
+  { label: "Banana", value: "banana" },
+]
+
+<Select items={items}>
+  <SelectTrigger>
+    <SelectValue />
+  </SelectTrigger>
+  <SelectContent>
+    <SelectGroup>
+      {items.map((item) => (
+        <SelectItem key={item.value} value={item.value}>{item.label}</SelectItem>
+      ))}
+    </SelectGroup>
+  </SelectContent>
+</Select>
+```
+
+**Correct (radix):**
+
+```tsx
+<Select>
+  <SelectTrigger>
+    <SelectValue placeholder="Select a fruit" />
+  </SelectTrigger>
+  <SelectContent>
+    <SelectGroup>
+      <SelectItem value="apple">Apple</SelectItem>
+      <SelectItem value="banana">Banana</SelectItem>
+    </SelectGroup>
+  </SelectContent>
+</Select>
+```
+
+**Placeholder.** Base uses a `{ value: null }` item in the items array. Radix uses `<SelectValue placeholder="...">`.
+
+**Content positioning.** Base uses `alignItemWithTrigger`. Radix uses `position`.
+
+```tsx
+// base.
+<SelectContent alignItemWithTrigger={false} side="bottom">
+
+// radix.
+<SelectContent position="popper">
+```
+
+---
+
+## Select — multiple selection and object values (base only)
+
+Base supports `multiple`, render-function children on `SelectValue`, and object values with `itemToStringValue`. Radix is single-select with string values only.
+
+**Correct (base — multiple selection):**
+
+```tsx
+<Select items={items} multiple defaultValue={[]}>
+  <SelectTrigger>
+    <SelectValue>
+      {(value: string[]) => value.length === 0 ? "Select fruits" : `${value.length} selected`}
+    </SelectValue>
+  </SelectTrigger>
+  ...
+</Select>
+```
+
+**Correct (base — object values):**
+
+```tsx
+<Select defaultValue={plans[0]} itemToStringValue={(plan) => plan.name}>
+  <SelectTrigger>
+    <SelectValue>{(value) => value.name}</SelectValue>
+  </SelectTrigger>
+  ...
+</Select>
+```
+
+---
+
+## ToggleGroup
+
+Base uses a `multiple` boolean prop. Radix uses `type="single"` or `type="multiple"`.
+
+**Incorrect (base):**
+
+```tsx
+<ToggleGroup type="single" defaultValue="daily">
+  <ToggleGroupItem value="daily">Daily</ToggleGroupItem>
+</ToggleGroup>
+```
+
+**Correct (base):**
+
+```tsx
+// Single (no prop needed), defaultValue is always an array.
+<ToggleGroup defaultValue={["daily"]} spacing={2}>
+  <ToggleGroupItem value="daily">Daily</ToggleGroupItem>
+  <ToggleGroupItem value="weekly">Weekly</ToggleGroupItem>
+</ToggleGroup>
+
+// Multi-selection.
+<ToggleGroup multiple>
+  <ToggleGroupItem value="bold">Bold</ToggleGroupItem>
+  <ToggleGroupItem value="italic">Italic</ToggleGroupItem>
+</ToggleGroup>
+```
+
+**Correct (radix):**
+
+```tsx
+// Single, defaultValue is a string.
+<ToggleGroup type="single" defaultValue="daily" spacing={2}>
+  <ToggleGroupItem value="daily">Daily</ToggleGroupItem>
+  <ToggleGroupItem value="weekly">Weekly</ToggleGroupItem>
+</ToggleGroup>
+
+// Multi-selection.
+<ToggleGroup type="multiple">
+  <ToggleGroupItem value="bold">Bold</ToggleGroupItem>
+  <ToggleGroupItem value="italic">Italic</ToggleGroupItem>
+</ToggleGroup>
+```
+
+**Controlled single value:**
+
+```tsx
+// base — wrap/unwrap arrays.
+const [value, setValue] = React.useState("normal")
+<ToggleGroup value={[value]} onValueChange={(v) => setValue(v[0])}>
+
+// radix — plain string.
+const [value, setValue] = React.useState("normal")
+<ToggleGroup type="single" value={value} onValueChange={setValue}>
+```
+
+---
+
+## Slider
+
+Base accepts a plain number for a single thumb. Radix always requires an array.
+
+**Incorrect (base):**
+
+```tsx
+<Slider defaultValue={[50]} max={100} step={1} />
+```
+
+**Correct (base):**
+
+```tsx
+<Slider defaultValue={50} max={100} step={1} />
+```
+
+**Correct (radix):**
+
+```tsx
+<Slider defaultValue={[50]} max={100} step={1} />
+```
+
+Both use arrays for range sliders. Controlled `onValueChange` in base may need a cast:
+
+```tsx
+// base.
+const [value, setValue] = React.useState([0.3, 0.7])
+<Slider value={value} onValueChange={(v) => setValue(v as number[])} />
+
+// radix.
+const [value, setValue] = React.useState([0.3, 0.7])
+<Slider value={value} onValueChange={setValue} />
+```
+
+---
+
+## Accordion
+
+Radix requires `type="single"` or `type="multiple"` and supports `collapsible`. `defaultValue` is a string. Base uses no `type` prop, uses `multiple` boolean, and `defaultValue` is always an array.
+
+**Incorrect (base):**
+
+```tsx
+<Accordion type="single" collapsible defaultValue="item-1">
+  <AccordionItem value="item-1">...</AccordionItem>
+</Accordion>
+```
+
+**Correct (base):**
+
+```tsx
+<Accordion defaultValue={["item-1"]}>
+  <AccordionItem value="item-1">...</AccordionItem>
+</Accordion>
+
+// Multi-select.
+<Accordion multiple defaultValue={["item-1", "item-2"]}>
+  <AccordionItem value="item-1">...</AccordionItem>
+  <AccordionItem value="item-2">...</AccordionItem>
+</Accordion>
+```
+
+**Correct (radix):**
+
+```tsx
+<Accordion type="single" collapsible defaultValue="item-1">
+  <AccordionItem value="item-1">...</AccordionItem>
+</Accordion>
+```

.agents/skills/shadcn/rules/chat.md

@@ -0,0 +1,224 @@
+# Chat & Messaging
+
+Components for conversation and chat UI. Compose these instead of hand-rolling
+bubbles, scroll containers, dividers, or attachment cards.
+
+Install: `npx shadcn@latest add message-scroller message bubble attachment marker`
+
+The same component names and props ship for both `base` and `radix`; only
+composition differs (`render` vs `asChild`). See [base-vs-radix.md](./base-vs-radix.md).
+
+## Contents
+
+- Scrollable threads use MessageScroller
+- Message rows use Message
+- Message surfaces use Bubble
+- Attachments use Attachment
+- System notes and dividers use Marker
+- Streaming, anchoring, and jump-to-latest are built in
+- Escape hatch: the scroller hooks
+
+---
+
+## Scrollable threads use MessageScroller
+
+A conversation that scrolls, follows new messages, restores position, or jumps
+to a message uses `MessageScroller`. Don't build a raw overflow container with
+manual scroll wiring, and don't reach for `ScrollArea`.
+
+The parts nest in a fixed order. Every direct child of the content is wrapped in
+a `MessageScrollerItem` so the scroller can measure, anchor, preserve position,
+track visibility, and jump to it. `MessageScrollerButton` sits inside
+`MessageScroller`, after the viewport.
+
+**Incorrect:**
+
+```tsx
+// Hand-rolled scroll container with manual stick-to-bottom logic.
+<div ref={scrollRef} onScroll={handleScroll} className="flex-1 overflow-y-auto">
+  <div className="flex flex-col gap-6 p-4">
+    {messages.map((m) => (
+      <ChatMessage key={m.id} message={m} />
+    ))}
+  </div>
+</div>
+```
+
+**Correct:**
+
+```tsx
+<MessageScrollerProvider autoScroll>
+  <MessageScroller>
+    <MessageScrollerViewport>
+      <MessageScrollerContent>
+        {messages.map((message) => (
+          <MessageScrollerItem
+            key={message.id}
+            messageId={message.id}
+            scrollAnchor={message.role === "user"}
+          >
+            <Message align={message.role === "user" ? "end" : "start"}>
+              {/* ...message content... */}
+            </Message>
+          </MessageScrollerItem>
+        ))}
+      </MessageScrollerContent>
+    </MessageScrollerViewport>
+    <MessageScrollerButton />
+  </MessageScroller>
+</MessageScrollerProvider>
+```
+
+---
+
+## Message rows use Message
+
+`Message` lays out a single row: avatar, header, content, footer, with
+alignment. Group consecutive rows from one sender with `MessageGroup`. Don't
+rebuild the row from flex divs.
+
+`align="end"` is the current user's side; `align="start"` is everyone else.
+
+```tsx
+<Message align="start">
+  <MessageAvatar>
+    <Avatar>
+      <AvatarImage src={sender.avatar} alt={sender.name} />
+      <AvatarFallback>{initials}</AvatarFallback>
+    </Avatar>
+  </MessageAvatar>
+  <MessageContent>
+    <MessageHeader>{sender.name}</MessageHeader>
+    <Bubble>
+      <BubbleContent>{text}</BubbleContent>
+    </Bubble>
+    <MessageFooter>{time}</MessageFooter>
+  </MessageContent>
+</Message>
+```
+
+---
+
+## Message surfaces use Bubble
+
+The colored message surface is `Bubble` + `BubbleContent`, never a styled `div`
+with `bg-muted` / `bg-primary` and hand-managed corners.
+
+- `variant`: `default`, `secondary`, `muted`, `tinted`, `outline`, `ghost`, `destructive`.
+- `align`: `start` or `end` (matches the `Message` side).
+
+`BubbleReactions` renders the reaction cluster. `side` (`top` | `bottom`) and
+`align` (`start` | `end`) position it against the bubble. Don't lay reactions out
+with absolutely-positioned `Badge`s.
+
+**Incorrect:**
+
+```tsx
+<div className="w-fit rounded-2xl bg-primary px-3 py-2 text-primary-foreground">
+  {text}
+</div>
+```
+
+**Correct:**
+
+```tsx
+<Bubble variant="default" align="end">
+  <BubbleContent>{text}</BubbleContent>
+  <BubbleReactions side="bottom" align="end">
+    <Badge variant="secondary">👍 2</Badge>
+  </BubbleReactions>
+</Bubble>
+```
+
+---
+
+## Attachments use Attachment
+
+File and image attachments use `Attachment`, not `Item` or a custom card. It
+carries upload state, so wire `state` to the real status rather than rendering a
+separate spinner.
+
+- `state`: `idle`, `uploading`, `processing`, `error`, `done`. `uploading` and
+  `processing` apply the `shimmer` animation to the title automatically.
+- `size`: `default`, `sm`, `xs`. `orientation`: `horizontal`, `vertical`.
+- Use `AttachmentGroup` to lay out several attachments in a scrolling row.
+
+```tsx
+<Attachment state="done">
+  <AttachmentMedia variant="icon">
+    <FileTextIcon />
+  </AttachmentMedia>
+  <AttachmentContent>
+    <AttachmentTitle>homepage-feedback.pdf</AttachmentTitle>
+    <AttachmentDescription>PDF · 2.4 MB</AttachmentDescription>
+  </AttachmentContent>
+  <AttachmentActions>
+    <AttachmentAction>
+      <DownloadIcon />
+    </AttachmentAction>
+  </AttachmentActions>
+</Attachment>
+```
+
+For an image, use `<AttachmentMedia variant="image">` with an `img` child.
+
+---
+
+## System notes and dividers use Marker
+
+Status lines ("Sarah joined the conversation"), date dividers ("Today"), and
+labeled separators are `Marker`, not a `Separator` plus a centered span.
+
+- `variant`: `default` (plain row), `separator` (centered label with rules on
+  each side), `border` (bottom-bordered row).
+- `MarkerIcon` holds a leading icon; `MarkerContent` holds the label.
+
+**Incorrect:**
+
+```tsx
+<div className="flex items-center gap-3 py-2">
+  <Separator className="flex-1" />
+  <span className="text-xs text-muted-foreground">Today</span>
+  <Separator className="flex-1" />
+</div>
+```
+
+**Correct:**
+
+```tsx
+<Marker variant="separator">
+  <MarkerContent>Today</MarkerContent>
+</Marker>
+```
+
+---
+
+## Streaming, anchoring, and jump-to-latest are built in
+
+`MessageScroller` handles the behavior that chat UIs usually reinvent. Don't
+write a `useStickToBottom` hook, a `ResizeObserver`, or manual `scrollTop` math.
+
+- **Follow the live edge while streaming.** `MessageScrollerProvider` with
+  `autoScroll` keeps the view pinned to new content and yields the moment the
+  user scrolls up. Streaming token updates that grow the last message are
+  followed automatically.
+- **Anchor a turn.** `scrollAnchor` on a `MessageScrollerItem` marks the row to
+  hold in view (typically the user's message that started the turn).
+- **Jump to latest.** `MessageScrollerButton` appears when the user scrolls away
+  and scrolls back on click. `direction="end"` (default) or `direction="start"`.
+  It is a self-managing control, so don't gate it behind your own scroll-position
+  state.
+
+For a "thinking…" indicator while the model generates, apply the `shimmer`
+utility to text. Don't author a custom keyframe animation. See
+[styling.md](./styling.md).
+
+---
+
+## Escape hatch: the scroller hooks
+
+For behavior the parts don't expose, read state from the hooks rather than
+re-implementing the scroller: `useMessageScroller`,
+`useMessageScrollerVisibility`, and `useMessageScrollerScrollable`. They come
+from the auto-installed `@shadcn/react` dependency, so there's nothing extra to
+install. Reach for them only when composition can't express what you need.

.agents/skills/shadcn/rules/composition.md

@@ -0,0 +1,213 @@
+# Component Composition
+
+## Contents
+
+- Items always inside their Group component
+- Callouts use Alert
+- Empty states use Empty component
+- Toast notifications follow the project base
+- Choosing between overlay components
+- Dialog, Sheet, and Drawer always need a Title
+- Card structure
+- Button has no isPending or isLoading prop
+- TabsTrigger must be inside TabsList
+- Avatar always needs AvatarFallback
+- Use Separator instead of raw hr or border divs
+- Use Skeleton for loading placeholders
+- Use Badge instead of custom styled spans
+
+---
+
+## Items always inside their Group component
+
+Never render items directly inside the content container.
+
+**Incorrect:**
+
+```tsx
+<SelectContent>
+  <SelectItem value="apple">Apple</SelectItem>
+  <SelectItem value="banana">Banana</SelectItem>
+</SelectContent>
+```
+
+**Correct:**
+
+```tsx
+<SelectContent>
+  <SelectGroup>
+    <SelectItem value="apple">Apple</SelectItem>
+    <SelectItem value="banana">Banana</SelectItem>
+  </SelectGroup>
+</SelectContent>
+```
+
+This applies to all group-based components:
+
+| Item | Group |
+|------|-------|
+| `SelectItem`, `SelectLabel` | `SelectGroup` |
+| `DropdownMenuItem`, `DropdownMenuLabel`, `DropdownMenuSub` | `DropdownMenuGroup` |
+| `MenubarItem` | `MenubarGroup` |
+| `ContextMenuItem` | `ContextMenuGroup` |
+| `CommandItem` | `CommandGroup` |
+| `MessageScrollerItem` | `MessageScrollerContent` |
+| `Message` (consecutive, same sender) | `MessageGroup` |
+| `Bubble` (stacked) | `BubbleGroup` |
+| `Attachment` (in a row) | `AttachmentGroup` |
+
+Chat components nest in a fixed order (`MessageScrollerProvider` → `MessageScroller` → `MessageScrollerViewport` → `MessageScrollerContent` → `MessageScrollerItem`). See [chat.md](./chat.md).
+
+---
+
+## Callouts use Alert
+
+```tsx
+<Alert>
+  <AlertTitle>Warning</AlertTitle>
+  <AlertDescription>Something needs attention.</AlertDescription>
+</Alert>
+```
+
+---
+
+## Empty states use Empty component
+
+```tsx
+<Empty>
+  <EmptyHeader>
+    <EmptyMedia variant="icon"><FolderIcon /></EmptyMedia>
+    <EmptyTitle>No projects yet</EmptyTitle>
+    <EmptyDescription>Get started by creating a new project.</EmptyDescription>
+  </EmptyHeader>
+  <EmptyContent>
+    <Button>Create Project</Button>
+  </EmptyContent>
+</Empty>
+```
+
+---
+
+## Toast notifications follow the project base
+
+For Base UI projects, use the `toast` component:
+
+```tsx
+import { toast } from "@/components/ui/toast"
+
+toast.add({
+  title: "Changes saved.",
+})
+```
+
+For Radix and React Aria projects, use Sonner:
+
+```tsx
+import { toast } from "sonner"
+
+toast.success("Changes saved.")
+toast.error("Something went wrong.")
+toast("File deleted.", {
+  action: { label: "Undo", onClick: () => undoDelete() },
+})
+```
+
+---
+
+## Choosing between overlay components
+
+| Use case | Component |
+|----------|-----------|
+| Focused task that requires input | `Dialog` |
+| Destructive action confirmation | `AlertDialog` |
+| Side panel with details or filters | `Sheet` |
+| Mobile-first bottom panel | `Drawer` |
+| Quick info on hover | `HoverCard` |
+| Small contextual content on click | `Popover` |
+
+---
+
+## Dialog, Sheet, and Drawer always need a Title
+
+`DialogTitle`, `SheetTitle`, `DrawerTitle` are required for accessibility. Use `className="sr-only"` if visually hidden.
+
+```tsx
+<DialogContent>
+  <DialogHeader>
+    <DialogTitle>Edit Profile</DialogTitle>
+    <DialogDescription>Update your profile.</DialogDescription>
+  </DialogHeader>
+  ...
+</DialogContent>
+```
+
+---
+
+## Card structure
+
+Use full composition — don't dump everything into `CardContent`:
+
+```tsx
+<Card>
+  <CardHeader>
+    <CardTitle>Team Members</CardTitle>
+    <CardDescription>Manage your team.</CardDescription>
+  </CardHeader>
+  <CardContent>...</CardContent>
+  <CardFooter>
+    <Button>Invite</Button>
+  </CardFooter>
+</Card>
+```
+
+---
+
+## Button has no isPending or isLoading prop
+
+Compose with `Spinner` + `data-icon` + `disabled`:
+
+```tsx
+<Button disabled>
+  <Spinner data-icon="inline-start" />
+  Saving...
+</Button>
+```
+
+---
+
+## TabsTrigger must be inside TabsList
+
+Never render `TabsTrigger` directly inside `Tabs` — always wrap in `TabsList`:
+
+```tsx
+<Tabs defaultValue="account">
+  <TabsList>
+    <TabsTrigger value="account">Account</TabsTrigger>
+    <TabsTrigger value="password">Password</TabsTrigger>
+  </TabsList>
+  <TabsContent value="account">...</TabsContent>
+</Tabs>
+```
+
+---
+
+## Avatar always needs AvatarFallback
+
+Always include `AvatarFallback` for when the image fails to load:
+
+```tsx
+<Avatar>
+  <AvatarImage src="/avatar.png" alt="User" />
+  <AvatarFallback>JD</AvatarFallback>
+</Avatar>
+```
+
+---
+
+## Use existing components instead of custom markup
+
+| Instead of | Use |
+|---|---|
+| `<hr>` or `<div className="border-t">` | `<Separator />` |
+| `<div className="animate-pulse">` with styled divs | `<Skeleton className="h-4 w-3/4" />` |
+| `<span className="rounded-full bg-green-100 ...">` | `<Badge variant="secondary">` |

.agents/skills/shadcn/rules/forms.md

@@ -0,0 +1,192 @@
+# Forms & Inputs
+
+## Contents
+
+- Forms use FieldGroup + Field
+- InputGroup requires InputGroupInput/InputGroupTextarea
+- Buttons inside inputs use InputGroup + InputGroupAddon
+- Option sets (2–7 choices) use ToggleGroup
+- FieldSet + FieldLegend for grouping related fields
+- Field validation and disabled states
+
+---
+
+## Forms use FieldGroup + Field
+
+Always use `FieldGroup` + `Field` — never raw `div` with `space-y-*`:
+
+```tsx
+<FieldGroup>
+  <Field>
+    <FieldLabel htmlFor="email">Email</FieldLabel>
+    <Input id="email" type="email" />
+  </Field>
+  <Field>
+    <FieldLabel htmlFor="password">Password</FieldLabel>
+    <Input id="password" type="password" />
+  </Field>
+</FieldGroup>
+```
+
+Use `Field orientation="horizontal"` for settings pages. Use `FieldLabel className="sr-only"` for visually hidden labels.
+
+**Choosing form controls:**
+
+- Simple text input → `Input`
+- Dropdown with predefined options → `Select`
+- Searchable dropdown → `Combobox`
+- Native HTML select (no JS) → `native-select`
+- Boolean toggle → `Switch` (for settings) or `Checkbox` (for forms)
+- Single choice from few options → `RadioGroup`
+- Toggle between 2–5 options → `ToggleGroup` + `ToggleGroupItem`
+- OTP/verification code → `InputOTP`
+- Multi-line text → `Textarea`
+
+---
+
+## InputGroup requires InputGroupInput/InputGroupTextarea
+
+Never use raw `Input` or `Textarea` inside an `InputGroup`.
+
+**Incorrect:**
+
+```tsx
+<InputGroup>
+  <Input placeholder="Search..." />
+</InputGroup>
+```
+
+**Correct:**
+
+```tsx
+import { InputGroup, InputGroupInput } from "@/components/ui/input-group"
+
+<InputGroup>
+  <InputGroupInput placeholder="Search..." />
+</InputGroup>
+```
+
+---
+
+## Buttons inside inputs use InputGroup + InputGroupAddon
+
+Never place a `Button` directly inside or adjacent to an `Input` with custom positioning.
+
+**Incorrect:**
+
+```tsx
+<div className="relative">
+  <Input placeholder="Search..." className="pr-10" />
+  <Button className="absolute right-0 top-0" size="icon">
+    <SearchIcon />
+  </Button>
+</div>
+```
+
+**Correct:**
+
+```tsx
+import { InputGroup, InputGroupInput, InputGroupAddon } from "@/components/ui/input-group"
+
+<InputGroup>
+  <InputGroupInput placeholder="Search..." />
+  <InputGroupAddon>
+    <Button size="icon">
+      <SearchIcon data-icon="inline-start" />
+    </Button>
+  </InputGroupAddon>
+</InputGroup>
+```
+
+---
+
+## Option sets (2–7 choices) use ToggleGroup
+
+Don't manually loop `Button` components with active state.
+
+**Incorrect:**
+
+```tsx
+const [selected, setSelected] = useState("daily")
+
+<div className="flex gap-2">
+  {["daily", "weekly", "monthly"].map((option) => (
+    <Button
+      key={option}
+      variant={selected === option ? "default" : "outline"}
+      onClick={() => setSelected(option)}
+    >
+      {option}
+    </Button>
+  ))}
+</div>
+```
+
+**Correct:**
+
+```tsx
+import { ToggleGroup, ToggleGroupItem } from "@/components/ui/toggle-group"
+
+<ToggleGroup spacing={2}>
+  <ToggleGroupItem value="daily">Daily</ToggleGroupItem>
+  <ToggleGroupItem value="weekly">Weekly</ToggleGroupItem>
+  <ToggleGroupItem value="monthly">Monthly</ToggleGroupItem>
+</ToggleGroup>
+```
+
+Combine with `Field` for labelled toggle groups:
+
+```tsx
+<Field orientation="horizontal">
+  <FieldTitle id="theme-label">Theme</FieldTitle>
+  <ToggleGroup aria-labelledby="theme-label" spacing={2}>
+    <ToggleGroupItem value="light">Light</ToggleGroupItem>
+    <ToggleGroupItem value="dark">Dark</ToggleGroupItem>
+    <ToggleGroupItem value="system">System</ToggleGroupItem>
+  </ToggleGroup>
+</Field>
+```
+
+> **Note:** `defaultValue` and `type`/`multiple` props differ between base and radix. See [base-vs-radix.md](./base-vs-radix.md#togglegroup).
+
+---
+
+## FieldSet + FieldLegend for grouping related fields
+
+Use `FieldSet` + `FieldLegend` for related checkboxes, radios, or switches — not `div` with a heading:
+
+```tsx
+<FieldSet>
+  <FieldLegend variant="label">Preferences</FieldLegend>
+  <FieldDescription>Select all that apply.</FieldDescription>
+  <FieldGroup className="gap-3">
+    <Field orientation="horizontal">
+      <Checkbox id="dark" />
+      <FieldLabel htmlFor="dark" className="font-normal">Dark mode</FieldLabel>
+    </Field>
+  </FieldGroup>
+</FieldSet>
+```
+
+---
+
+## Field validation and disabled states
+
+Both attributes are needed — `data-invalid`/`data-disabled` styles the field (label, description), while `aria-invalid`/`disabled` styles the control.
+
+```tsx
+// Invalid.
+<Field data-invalid>
+  <FieldLabel htmlFor="email">Email</FieldLabel>
+  <Input id="email" aria-invalid />
+  <FieldDescription>Invalid email address.</FieldDescription>
+</Field>
+
+// Disabled.
+<Field data-disabled>
+  <FieldLabel htmlFor="email">Email</FieldLabel>
+  <Input id="email" disabled />
+</Field>
+```
+
+Works for all controls: `Input`, `Textarea`, `Select`, `Checkbox`, `RadioGroupItem`, `Switch`, `Slider`, `NativeSelect`, `InputOTP`.

.agents/skills/shadcn/rules/icons.md

@@ -0,0 +1,101 @@
+# Icons
+
+**Always use the project's configured `iconLibrary` for imports.** Check the `iconLibrary` field from project context: `lucide` → `lucide-react`, `tabler` → `@tabler/icons-react`, etc. Never assume `lucide-react`.
+
+---
+
+## Icons in Button use data-icon attribute
+
+Add `data-icon="inline-start"` (prefix) or `data-icon="inline-end"` (suffix) to the icon. No sizing classes on the icon.
+
+**Incorrect:**
+
+```tsx
+<Button>
+  <SearchIcon className="mr-2 size-4" />
+  Search
+</Button>
+```
+
+**Correct:**
+
+```tsx
+<Button>
+  <SearchIcon data-icon="inline-start"/>
+  Search
+</Button>
+
+<Button>
+  Next
+  <ArrowRightIcon data-icon="inline-end"/>
+</Button>
+```
+
+---
+
+## No sizing classes on icons inside components
+
+Components handle icon sizing via CSS. Don't add `size-4`, `w-4 h-4`, or other sizing classes to icons inside `Button`, `DropdownMenuItem`, `Alert`, `Sidebar*`, or other shadcn components. Unless the user explicitly asks for custom icon sizes.
+
+**Incorrect:**
+
+```tsx
+<Button>
+  <SearchIcon className="size-4" data-icon="inline-start" />
+  Search
+</Button>
+
+<DropdownMenuItem>
+  <SettingsIcon className="mr-2 size-4" />
+  Settings
+</DropdownMenuItem>
+```
+
+**Correct:**
+
+```tsx
+<Button>
+  <SearchIcon data-icon="inline-start" />
+  Search
+</Button>
+
+<DropdownMenuItem>
+  <SettingsIcon />
+  Settings
+</DropdownMenuItem>
+```
+
+---
+
+## Pass icons as component objects, not string keys
+
+Use `icon={CheckIcon}`, not a string key to a lookup map.
+
+**Incorrect:**
+
+```tsx
+const iconMap = {
+  check: CheckIcon,
+  alert: AlertIcon,
+}
+
+function StatusBadge({ icon }: { icon: string }) {
+  const Icon = iconMap[icon]
+  return <Icon />
+}
+
+<StatusBadge icon="check" />
+```
+
+**Correct:**
+
+```tsx
+// Import from the project's configured iconLibrary (e.g. lucide-react, @tabler/icons-react).
+import { CheckIcon } from "lucide-react"
+
+function StatusBadge({ icon: Icon }: { icon: React.ComponentType }) {
+  return <Icon />
+}
+
+<StatusBadge icon={CheckIcon} />
+```

.agents/skills/shadcn/rules/styling.md

@@ -0,0 +1,185 @@
+# Styling & Customization
+
+See [customization.md](../customization.md) for theming, CSS variables, and adding custom colors.
+
+## Contents
+
+- Semantic colors
+- Built-in variants first
+- className for layout only
+- No space-x-* / space-y-*
+- Prefer size-* over w-* h-* when equal
+- Prefer truncate shorthand
+- No manual dark: color overrides
+- Use cn() for conditional classes
+- No manual z-index on overlay components
+- Use shimmer / scroll-fade utilities, not custom animations
+
+---
+
+## Semantic colors
+
+**Incorrect:**
+
+```tsx
+<div className="bg-blue-500 text-white">
+  <p className="text-gray-600">Secondary text</p>
+</div>
+```
+
+**Correct:**
+
+```tsx
+<div className="bg-primary text-primary-foreground">
+  <p className="text-muted-foreground">Secondary text</p>
+</div>
+```
+
+---
+
+## No raw color values for status/state indicators
+
+For positive, negative, or status indicators, use Badge variants, semantic tokens like `text-destructive`, or define custom CSS variables — don't reach for raw Tailwind colors.
+
+**Incorrect:**
+
+```tsx
+<span className="text-emerald-600">+20.1%</span>
+<span className="text-green-500">Active</span>
+<span className="text-red-600">-3.2%</span>
+```
+
+**Correct:**
+
+```tsx
+<Badge variant="secondary">+20.1%</Badge>
+<Badge>Active</Badge>
+<span className="text-destructive">-3.2%</span>
+```
+
+If you need a success/positive color that doesn't exist as a semantic token, use a Badge variant or ask the user about adding a custom CSS variable to the theme (see [customization.md](../customization.md)).
+
+---
+
+## Built-in variants first
+
+**Incorrect:**
+
+```tsx
+<Button className="border border-input bg-transparent hover:bg-accent">
+  Click me
+</Button>
+```
+
+**Correct:**
+
+```tsx
+<Button variant="outline">Click me</Button>
+```
+
+---
+
+## className for layout only
+
+Use `className` for layout (e.g. `max-w-md`, `mx-auto`, `mt-4`), **not** for overriding component colors or typography. To change colors, use semantic tokens, built-in variants, or CSS variables.
+
+**Incorrect:**
+
+```tsx
+<Card className="bg-blue-100 text-blue-900 font-bold">
+  <CardContent>Dashboard</CardContent>
+</Card>
+```
+
+**Correct:**
+
+```tsx
+<Card className="max-w-md mx-auto">
+  <CardContent>Dashboard</CardContent>
+</Card>
+```
+
+To customize a component's appearance, prefer these approaches in order:
+1. **Built-in variants** — `variant="outline"`, `variant="destructive"`, etc.
+2. **Semantic color tokens** — `bg-primary`, `text-muted-foreground`.
+3. **CSS variables** — define custom colors in the global CSS file (see [customization.md](../customization.md)).
+
+---
+
+## No space-x-* / space-y-*
+
+Use `gap-*` instead. `space-y-4` → `flex flex-col gap-4`. `space-x-2` → `flex gap-2`.
+
+```tsx
+<div className="flex flex-col gap-4">
+  <Input />
+  <Input />
+  <Button>Submit</Button>
+</div>
+```
+
+---
+
+## Prefer size-* over w-* h-* when equal
+
+`size-10` not `w-10 h-10`. Applies to icons, avatars, skeletons, etc.
+
+---
+
+## Prefer truncate shorthand
+
+`truncate` not `overflow-hidden text-ellipsis whitespace-nowrap`.
+
+---
+
+## No manual dark: color overrides
+
+Use semantic tokens — they handle light/dark via CSS variables. `bg-background text-foreground` not `bg-white dark:bg-gray-950`.
+
+---
+
+## Use cn() for conditional classes
+
+Use the `cn()` utility from the project for conditional or merged class names. Don't write manual ternaries in className strings.
+
+**Incorrect:**
+
+```tsx
+<div className={`flex items-center ${isActive ? "bg-primary text-primary-foreground" : "bg-muted"}`}>
+```
+
+**Correct:**
+
+```tsx
+import { cn } from "@/lib/utils"
+
+<div className={cn("flex items-center", isActive ? "bg-primary text-primary-foreground" : "bg-muted")}>
+```
+
+---
+
+## No manual z-index on overlay components
+
+`Dialog`, `Sheet`, `Drawer`, `AlertDialog`, `DropdownMenu`, `Popover`, `Tooltip`, `HoverCard` handle their own stacking. Never add `z-50` or `z-[999]`.
+
+---
+
+## Use shimmer / scroll-fade utilities, not custom animations
+
+For a live "thinking…" or loading-text shimmer, apply the `shimmer` utility. Don't author a custom `@keyframes` or a `bg-clip-text` gradient sweep.
+
+For scroll-aware edge fading on a scroll container, use `scroll-fade` (and the axis variants `scroll-fade-x` / `scroll-fade-b`). Don't hand-roll mask gradients. The chat components already apply these internally: `Attachment` shimmers its title during upload, and `MessageScrollerViewport` fades its edges.
+
+**Incorrect:**
+
+```tsx
+<span className="animate-pulse bg-gradient-to-r from-muted-foreground/40 via-foreground/70 to-muted-foreground/40 bg-clip-text text-transparent [animation:shimmer_1.6s_infinite]">
+  Thinking…
+</span>
+```
+
+**Correct:**
+
+```tsx
+<span className="shimmer">Thinking…</span>
+```

.gitignore

@@ -3,3 +3,16 @@
 /klalbs4.json
 /klalbs.json
 /klalbs2.json
+
+# Dashboard / Frontend
+dashboard/node_modules/
+dashboard/dist/
+dashboard/.pnpm-store/
+.pnpm-debug.log*
+dashboard/.env.local
+dashboard/.env.*.local
+
+/klalb-config.json
+/klalbconfig-old.json
+
+/.slim/

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "dashboard"]
+	path = dashboard
+	url = https://git.code.cq.cn/SerinaNya/KLALB-dashboard.git

.vscode/settings.json

@@ -2,7 +2,7 @@
     "java.configuration.runtimes": [
         {
             "name": "JavaSE-25",
-            "path": "C:\\Program Files\\Eclipse Adoptium\\jdk-25.0.4.7-hotspot",
+            "path": "C:\\Program Files\\Zulu\\zulu-25",
             "default": true
         }
     ]

AGENTS.md

@@ -1,55 +1,39 @@
-# AGENTS.md
+# KLALB Repository Guide
 
-KLALB ("KLALB Decentralized SRv6 Network") — Java load-balancing/tunnel system that merges multiple WAN links into one virtual IPv6/SRv6 network. Version constant lives in `src/org/kne/cloud/network/klalb/CONST.java`. Protocol specs and manuals are the Chinese `.docx` files in the repo root.
+KLALB is a Java SRv6/load-balancing system. Start at `org.kne.cloud.network.klalb.KLALBMain`; runtime configuration is root-relative `klalb-config.json`.
 
-## Build & run
+## Build And Run
 
-No Maven/Gradle. Plain Eclipse/IntelliJ project: dependencies are vendored jars in `lib/`, output goes to `bin/` (gitignored). When adding a jar, update **both** `.classpath` and `KLALB.iml`.
+- This is an Eclipse Java project, not Maven or Gradle: `src/` contains sources, `lib/` vendored dependencies, and `bin/` compiled output. `.classpath` targets Java 25.
-
+- Source files contain Chinese text, so compile with UTF-8 from the repository root:
-Compile (verified; `-encoding UTF-8` is mandatory — sources contain Chinese text):
 
 ```powershell
-& javac -encoding UTF-8 -cp "lib/*" -d bin (Get-ChildItem -Recurse src -Filter *.java | ForEach-Object FullName)
+& "C:\Program Files\Zulu\zulu-25\bin\javac.exe" -encoding UTF-8 -cp "lib/*" -d bin (Get-ChildItem -Recurse src -Filter *.java | ForEach-Object FullName)
 ```
 
-Run from the repo root — CWD matters:
+- Run from the repository root. `src` must stay on the classpath because manual compilation does not copy resource bundles:
-- reads `klalb-config.json` from CWD
-- loads native libs from CWD: `tuntap4j.dll/.so/.dylib`, `wintun.dll`, `fastcopy.dll` (TUN device support)
-- classpath must include `src` as well as `bin`: i18n bundles (`/klalb_*.properties`) and images (`/assets/*`) are classpath resources that Eclipse copies to `bin` but manual `javac` does not
 
 ```powershell
-java --enable-native-access=ALL-UNNAMED "--add-opens=java.base/jdk.internal.misc=ALL-UNNAMED" -cp "bin;src;lib/*" org.kne.cloud.network.klalb.KLALBMain
+& "C:\Program Files\Zulu\zulu-25\bin\java.exe" --enable-native-access=ALL-UNNAMED "--add-opens=java.base/jdk.internal.misc=ALL-UNNAMED" -cp "bin;src;lib/*" org.kne.cloud.network.klalb.KLALBMain
 ```
 
-IDE metadata targets JDK 26 (`jdk-26.0.1`); the tree also compiles cleanly on JDK 25. `.classpath` now references the standard container `JavaSE-25` — an execution-environment spec that any JDK ≥25 satisfies, so it works unchanged on JDK 26 machines too (the original named `jdk-26.0.1` VM broke VS Code import on machines without it). `.vscode/settings.json` maps `JavaSE-25` to the locally installed Adoptium JDK; register every installed JDK there when adding another one. Keep compiler compliance ≤25 (`.settings` pins 19) so both JDKs stay usable.
+- Native libraries and `klalb-config.json` are resolved from the current directory; restart the JVM after recompiling. TUN creation requires elevation, so use `"enableTUN": false` for non-admin checks.
 
-Runtime gotchas (all verified):
+## Dashboard
-- On JDK 25, `KNEOptimize.jar`'s `FastLib` reflects into `jdk.internal.misc.Unsafe`; without the two JVM flags above it throws `InaccessibleObjectException` at startup (app still runs).
+
-- Creating the SRv6 TUN adapter (`WintunCreateAdapter`) requires an elevated shell; without admin rights it logs "创建虚拟网卡失败" and continues with only the `inLoopBack` interface — links/bridges still work.
+- `dashboard/` is a Git submodule. Commit dashboard changes in that repository, then update the parent submodule pointer.
-- To disable TUN creation completely (e.g. for non-admin UI/routing testing), set `"TUNName": null` in `klalb-config.json` or leave the TUN Name empty in GUI settings. If omitted, it defaults to `"KLALB_SRv6"`.
+- Run frontend commands from `dashboard/`: `pnpm install --frozen-lockfile`, `pnpm lint`, `pnpm typecheck`, and `pnpm build`. The build is `tsc -b && vite build` and produces `dashboard/dist`, which the Java server hosts.
-- Routing broadcast (`RouterInfo`) transmits `deviceName` across the network, which topology and node overview panels display. `deviceDescription` and `ExtraRoutes` remain local controller configs.
+- Vite proxies `/api` to `http://127.0.0.1:4665`; use `pnpm dev` only with the Java API running there.
 
 ## Verification
 
-No test suite, no CI. Classes named `*Test*` (`nathole/`, `ntp/`) are manual `main()` harnesses requiring real network peers. Practical check = compile succeeds + app launches.
+- No repository test runner or CI workflow is configured. For Java changes, compile and launch the app; for dashboard changes, run `pnpm typecheck` and `pnpm build`.
 
-## Architecture
+## Important Boundaries
 
-- Entrypoint `org.kne.cloud.network.klalb.KLALBMain`: load config → build `KLALBProxySystem` → open Swing GUI (`KLALBStateGUI3`) unless `"nogui": true` → interactive console (`help`, `links-state`, `route`, `kperf`, ...).
+- `KLALBConfigItem` is a polymorphic JSON array keyed by case-sensitive `Type`. New types need serializer and deserializer support; preserve unknown items' raw JSON.
-- `org.kne.cloud.network` — generic socket framework: `VirtualSocket*` hierarchy, `SocketBridge` port-forwarding proxies, `ProtocolDetector` (multi-protocol mux on one port), `MultiProtocolSocketAddress` = URI-style addresses (`tcp://`, `udp://`, `kltp://`, `ntp://`) dispatched through the `SocketType` registry.
+- `/api/config` is field-by-field parsing, not whole-object Gson mapping. Keep legacy key aliases in sync with new fields.
-- `...network.klalb` — app core: `KLALBController` (the virtual SRv6 network), `KLALBRemoteLink` (WAN lines), `*Packet` wire-format classes, virtual socket implementations.
+- Vendored Gson is `2.1`: responses that are `JsonElement` instances must be serialized with `JsonElement.toString()`, not reflective `gson.toJson(Object)`.
-- `...network.congestion` — pluggable congestion control (BBR, Vegas2, DCTCP...), chosen via `"congestionAlgorithm"` in config.
+- UI strings use `UIEnv.getRsb()`; add keys to both `src/klalb_zh_CN.properties` and `src/klalb_en_US.properties`.
-- `...network.kltp` — custom reliable transport protocol (packets/streams).
+- `KLALBController.PublishedNodeInfo` is the thread-safe node-info source. Publish profile, effective external endpoints, and extra routes through the controller so snapshots and update flags remain coherent. Peer queries are separate profile, endpoint, and extra-route requests; use `NodeInfoQueryCoordinator` when a consumer needs an aggregate detail result.
-- `...network.ipv6`, `...network.srv6` — packet codecs, route table, Dijkstra path computation.
+- `RouterInfo` retains an empty legacy UTF slot. `RouterInfoPacket` appends optional update flags behind a marker; treat binary codec changes as mesh-compatibility work and preserve old-reader behavior.
-- `...network.frpc` — frp client integration.
-- `...klalb.ui` — all Swing UI code.
-
-## Config
-
-`klalb-config.json` is an array of items discriminated by their `"Type"` field. Adding a new item type requires a `KLALBConfigItem` subclass **plus** new cases in both `KLALBConfigItem.getDefaultJsonDeserializer()` and `getDefaultJsonSerializer()`; unknown types are preserved as `UnknownKLALBConfigItem`. Any Gson instance handling config must register these adapters via `registerToGsonBuilder` (see `KLALBProxySystem`).
-
-## Conventions
-
-- Sources are UTF-8; comments, log/UI strings, and commit messages are largely Chinese.
-- UI strings go through `UIEnv.getRsb().getString(...)`; add keys to **both** `src/klalb_zh_CN.properties` and `src/klalb_en_US.properties`.
-- `client.cfg`, `server.cfg`, `linetable.txt` at the root are example line-table/port-rule files loaded via the GUI file picker — not hardwired paths.

klalb-config.json

@@ -1,107 +0,0 @@
-[
-  {
-    "language": "ZH_CN",
-    "nogui": false,
-    "VirtualAddress": "2486:1:0:0:0:0:0:8889",
-    "VirtualASN": 2142606939373348329,
-    "DNS": [
-      "2486:1:0:0:0:0:0:8888"
-    ],
-    "TCPListen": "tcp://0.0.0.0:4565",
-    "UDPListen": "udp://0.0.0.0:4572",
-    "VirtualSocketName": "kltp",
-    "LineTable": [
-      "tcp://kne03.yoyo250.fun:4565",
-      "tcp://kne04.yoyo250.fun:4565"
-    ],
-    "ConnectLineTable": [
-      "tcp://07f4acdef99b.ofalias.net:4565",
-      "tcp://kne01.yoyo250.fun:4565",
-      "tcp://kne02.yoyo250.fun:4565"
-    ],
-    "ntpServerTable": [
-      "ntp://ntp1.aliyun.com",
-      "ntp://ntp2.aliyun.com",
-      "ntp://ntp3.aliyun.com",
-      "ntp://ntp4.aliyun.com",
-      "ntp://ntp5.aliyun.com",
-      "ntp://ntp6.aliyun.com",
-      "ntp://ntp7.aliyun.com",
-      "ntp://ntp1.tencent.com",
-      "ntp://ntp2.tencent.com",
-      "ntp://ntp4.tencent.com",
-      "ntp://ntp5.tencent.com",
-      "ntp://time.google.com",
-      "ntp://time.apple.com",
-      "ntp://pool.ntp.org",
-      "ntp://ntp.ntsc.ac.cn",
-      "ntp://us.ntp.org.cn"
-    ],
-    "ExtraRoutes": [],
-    "denyLineTableQuery": false,
-    "denyLineTableBroadcast": false,
-    "congestionAlgorithm": "BBR",
-    "burstLimit": 2.0,
-    "delayUpperBound": 1.2,
-    "delayLowerBound": 1.1,
-    "nagleDelayTime": 1000000,
-    "linkNagleDelayTime": 0,
-    "linkConnectionsCount": 1,
-    "TUNName": null,
-    "performanceStrategy": "multiscatter",
-    "DeviceName": "SerinaNya PC",
-    "DeviceDescription": "desc",
-    "NetworkInterfaceExcepts": [],
-    "Type": "KLALBController"
-  },
-  {
-    "Listen": "kltp://[::0]:5201",
-    "Bridge": {
-      "DEFAULT": "SocketBridge"
-    },
-    "Connect": {
-      "DEFAULT": "tcp://127.0.0.1:5201"
-    },
-    "Type": "SocketBridge"
-  },
-  {
-    "Listen": "tcp://[::1]:5202",
-    "Bridge": {
-      "DEFAULT": "SocketBridge"
-    },
-    "Connect": {
-      "DEFAULT": "kltp://[2486:5acd:e339:4837:a6d9:3aed:4de2:30fd]:5201"
-    },
-    "Type": "SocketBridge"
-  },
-  {
-    "Listen": "tcp://127.0.0.1:35000",
-    "Bridge": {
-      "DEFAULT": "SocketBridge"
-    },
-    "Connect": {
-      "DEFAULT": "kltp://[2486:1::8888]:23333"
-    },
-    "Type": "SocketBridge"
-  },
-  {
-    "Listen": "kltp://[::0]:25565",
-    "Bridge": {
-      "DEFAULT": "SocketBridge"
-    },
-    "Connect": {
-      "DEFAULT": "tcp://127.0.0.1:25566"
-    },
-    "Type": "SocketBridge"
-  },
-  {
-    "Listen": "tcp://127.0.0.1:35565",
-    "Bridge": {
-      "DEFAULT": "SocketBridge"
-    },
-    "Connect": {
-      "DEFAULT": "kltp://[2486:1::8888]:25565"
-    },
-    "Type": "SocketBridge"
-  }
-]

skills-lock.json

@@ -0,0 +1,11 @@
+{
+  "version": 1,
+  "skills": {
+    "shadcn": {
+      "source": "shadcn/ui",
+      "sourceType": "github",
+      "skillPath": "skills/shadcn/SKILL.md",
+      "computedHash": "c1a68ee06a668aced9ab2b5fbdea5f989864123794eb2e056b339a072dbb7f10"
+    }
+  }
+}

src/klalb_en_US.properties

@@ -7,6 +7,7 @@ devicename=Device name
 devicedescription=Device description
 dnsserver=DNS server
 extraroutes=Extra routes
+noextraroutes=No extra routes
 asnumber=AS number
 tcplistening=TCP listening
 udplistening=UDP listening
@@ -111,4 +112,9 @@ performancesettings=Performance settings
 performancestrategy=Performance strategy
 singlecore=Single-Core - Cache Affinity First (Best energy/performance ratio, for low-power & cloud)
 multifill=Multi-Core - Fill Cores Sequentially (Recommended for general-purpose physical servers)
-multiscatter=Multi-Core - Spread Load Evenly (Optimized for multi-socket NUMA architectures)
+multiscatter=Multi-Core - Spread Load Evenly (Optimized for multi-socket NUMA architectures)
+webapisettings=Web API settings
+enablewebapi=Enable Web API
+weblistenaddr=Web API listen address
+invaildweblistenaddr=Invalid Web API listen address
+enabletun=Enable TUN adapter

src/klalb_zh_CN.properties

@@ -4,9 +4,10 @@ language=语言
 basicsettings=基本设置
 ipv6addr=IPv6地址
 devicename=设备名称
-devicedescription=设备描述
+devicedescription=设备描述
 dnsserver=DNS服务器
 extraroutes=额外路由
+noextraroutes=暂无额外路由
 asnumber=AS号码
 tcplistening=TCP监听端口
 udplistening=UDP监听端口
@@ -111,4 +112,9 @@ performancesettings=性能设置
 performancestrategy=性能策略
 singlecore=单核-缓存命中率优先（高能耗比，适合低功耗设备、云机）
 multifill=多核-负载按顺序填充（适合大多数物理服务器、电脑）
-multiscatter=多核-负载均匀打散分配（适合特殊的多路NUMA服务器）
+multiscatter=多核-负载均匀打散分配（适合特殊的多路NUMA服务器）
+webapisettings=Web API 设置
+enablewebapi=启用 Web API
+weblistenaddr=Web API 监听地址:端口
+invaildweblistenaddr=无效的 Web API 监听地址:端口
+enabletun=启用TUN虚拟网卡

src/org/kne/cloud/network/klalb/KLALBConfigItem.java

@@ -7,8 +7,9 @@ import com.google.gson.GsonBuilder;
 import com.google.gson.JsonDeserializationContext;
 import com.google.gson.JsonDeserializer;
 import com.google.gson.JsonElement;
-import com.google.gson.JsonObject;
+import com.google.gson.JsonObject;
-import com.google.gson.JsonParseException;
+import com.google.gson.JsonParseException;
+import com.google.gson.JsonPrimitive;
 import com.google.gson.JsonSerializationContext;
 import com.google.gson.JsonSerializer;
 import com.google.gson.reflect.TypeToken;
@@ -61,6 +62,7 @@ public class KLALBConfigItem {
 					String s=jobj.get("Type").getAsString();
 					switch(s) {
 					case "KLALBController":
+						normalizeLegacyControllerKeys(jobj);
 						return arg2.deserialize(arg0, new TypeToken<KLALBControllerConfigItem>() {}.getType());
 					case "SocketBridge":
 						return arg2.deserialize(arg0, new TypeToken<SocketBridgeConfigItem>() {}.getType());
@@ -70,6 +72,39 @@ public class KLALBConfigItem {
 				}
 				throw new JsonParseException("not a object:"+arg0);
 			}
+
+			/**
+			 * 将历史命名错误的配置键归一化为当前键名（仅在当前键名不存在时生效）：
+			 * openConnections/lineTable → externalEndpoints，
+			 * denyConnectionQuery/denyLineTableQuery → denyExternalEndpointQuery，
+			 * denyConnectionBroadcast/denyLineTableBroadcast → denyExternalEndpointBroadcast。
+			 */
+			private void normalizeLegacyControllerKeys(JsonObject jobj) {
+				renameLegacyKey(jobj,"externalEndpoints","openConnections","OpenConnections","lineTable","LineTable");
+				renameLegacyKey(jobj,"denyExternalEndpointQuery","denyConnectionQuery","denyLineTableQuery");
+				renameLegacyKey(jobj,"denyExternalEndpointBroadcast","denyConnectionBroadcast","denyLineTableBroadcast");
+				if (!jobj.has("webListen") && jobj.has("webPort") && !jobj.get("webPort").isJsonNull()) {
+					int port = jobj.get("webPort").getAsInt();
+					jobj.add("webListen", new JsonPrimitive("http://0.0.0.0:" + port));
+				}
+				jobj.remove("webPort");
+			}
+
+			private void renameLegacyKey(JsonObject jobj, String newKey, String... legacyKeys) {
+				if (jobj.has(newKey)) {
+					for (String legacyKey : legacyKeys) {
+						jobj.remove(legacyKey);
+					}
+					return;
+				}
+				for (String legacyKey : legacyKeys) {
+					if (jobj.has(legacyKey)) {
+						jobj.add(newKey, jobj.get(legacyKey));
+						jobj.remove(legacyKey);
+						return;
+					}
+				}
+			}
 		};
 	}
 	public static JsonSerializer<KLALBConfigItem>getDefaultJsonSerializer(){

src/org/kne/cloud/network/klalb/KLALBController.java

@@ -10,12 +10,14 @@ import java.net.NetworkInterface;
 import java.net.SocketException;
 import java.net.SocketTimeoutException;
 import java.net.UnknownHostException;
-import java.util.ArrayList;
+import java.util.ArrayList;
-import java.util.Enumeration;
+import java.util.Collections;
+import java.util.Enumeration;
 import java.util.HashSet;
 import java.util.Iterator;
 import java.util.List;
-import java.util.Map;
+import java.util.Map;
+import java.util.Objects;
 import java.util.Set;
 import java.util.Timer;
 import java.util.TimerTask;
@@ -51,10 +53,11 @@ import org.kne.cloud.network.ntp.NTPContext;
 import org.kne.cloud.network.ntp.NTPv4Packet;
 import org.kne.cloud.network.ntp.NTPv4Protocol;
 import org.kne.cloud.network.ntp.NTPv4Protocol.NTPPeer;
-import org.kne.cloud.network.srv6.KLALBRoutingProtocol;
+import org.kne.cloud.network.srv6.KLALBRoutingProtocol;
-import org.kne.cloud.network.srv6.KLALBRoutingProtocolAPIClient;
+import org.kne.cloud.network.srv6.KLALBRoutingProtocolAPIClient;
-import org.kne.cloud.network.srv6.KLALBRoutingProtocolAPIServer;
+import org.kne.cloud.network.srv6.KLALBRoutingProtocolAPIServer;
-import org.kne.cloud.network.srv6.SRv6Router;
+import org.kne.cloud.network.srv6.NodeInfoQueryStatus;
+import org.kne.cloud.network.srv6.SRv6Router;
 import org.kne.cloud.network.srv6.SRv6RouterListener;
 import org.kne.cloud.network.tcp.UDPPacket;
 import org.kne.cloud.network.tcp.UDPProtocolRegister;
@@ -76,7 +79,50 @@ public class KLALBController {
 			new HashMapTimestampMonitor<UUID>(HighAccuracyClock.SYSTEM_CLOCK, "up", 100, TIME_WINDOW),
 			new HashMapTimestampMonitor<UUID>(HighAccuracyClock.SYSTEM_CLOCK, "down", 100, TIME_WINDOW));
 
-	private List<MultiProtocolSocketAddress> selflineTable = new ArrayList<>();
+	private List<MultiProtocolSocketAddress> externalEndpoints = new ArrayList<>();
+	private List<MultiProtocolSocketAddress> configuredExternalEndpoints = new ArrayList<>();
+	private List<MultiProtocolSocketAddress> discoveredExternalEndpoints = new ArrayList<>();
+
+	public static final class PublishedNodeInfo {
+		private final String deviceName;
+		private final String deviceDescription;
+		private final List<MultiProtocolSocketAddress> externalEndpoints;
+		private final List<String> extraRoutes;
+		private final long fullRevision;
+
+		private PublishedNodeInfo(String deviceName, String deviceDescription,
+				List<MultiProtocolSocketAddress> externalEndpoints, List<String> extraRoutes, long fullRevision) {
+			this.deviceName = deviceName;
+			this.deviceDescription = deviceDescription;
+			this.externalEndpoints = Collections.unmodifiableList(
+					new ArrayList<MultiProtocolSocketAddress>(externalEndpoints));
+			this.extraRoutes = Collections.unmodifiableList(new ArrayList<String>(extraRoutes));
+			this.fullRevision = fullRevision;
+		}
+
+		public String getDeviceName() {
+			return deviceName;
+		}
+
+		public String getDeviceDescription() {
+			return deviceDescription;
+		}
+
+		public List<MultiProtocolSocketAddress> getExternalEndpoints() {
+			return externalEndpoints;
+		}
+
+		public List<String> getExtraRoutes() {
+			return extraRoutes;
+		}
+
+		public long getFullRevision() {
+			return fullRevision;
+		}
+	}
+
+	private volatile PublishedNodeInfo publishedNodeInfo = new PublishedNodeInfo(null, null,
+			Collections.<MultiProtocolSocketAddress>emptyList(), Collections.<String>emptyList(), 0L);
 
 	private List<MultiProtocolSocketAddress> listensSocketAddress = new CopyOnWriteArrayList<>();
 
@@ -125,7 +171,8 @@ public class KLALBController {
 		@Override
 		public void run() {
 			try {
-				List<InetAddress> localaddress = networkInterfaceManager.getAllNetworkInterfaceAddress();
+				List<InetAddress> localaddress = networkInterfaceManager.getAllNetworkInterfaceAddress();
+				List<MultiProtocolSocketAddress> currentDiscoveredExternalEndpoints = new ArrayList<>();
 			
 				for (InetAddress inetAddress : localaddress) {
 						for (Iterator<MultiProtocolSocketAddress> iterator = listensSocketAddress.iterator(); iterator.hasNext();) {
@@ -137,11 +184,9 @@ public class KLALBController {
 									MultiProtocolSocketAddress bind = new MultiProtocolSocketAddress(tcpl.getProtocol(),
 											inetAddress.getHostAddress(), tcpl.getPort());
 									// System.out.println(bind);
-									synchronized (selflineTable) {
+									if (!currentDiscoveredExternalEndpoints.contains(bind)) {
-										if (!selflineTable.contains(bind)) {
+										currentDiscoveredExternalEndpoints.add(bind);
-											selflineTable.add(bind);
+									}
-										}
-									}
 								}
 							} catch (UnknownHostException e) {
 								// TODO 自动生成的 catch 块
@@ -149,9 +194,15 @@ public class KLALBController {
 							}
 
 						}
-				}
+				}
-			
+				synchronized (externalEndpoints) {
-			lineslock.writeLock().lock();
+					if (!discoveredExternalEndpoints.equals(currentDiscoveredExternalEndpoints)) {
+						discoveredExternalEndpoints = currentDiscoveredExternalEndpoints;
+						publishDiscoveredExternalEndpointLocked();
+					}
+				}
+
+			lineslock.writeLock().lock();
 			try {
 
 				
@@ -210,7 +261,7 @@ public class KLALBController {
 			for (Iterator<IPMulticastDiscovery> iterator = ipmd.iterator(); iterator.hasNext(); ) {
 				IPMulticastDiscovery ipMulticastDiscovery = (IPMulticastDiscovery) iterator.next();
 				if (ipMulticastDiscovery.isClosed() || (!ipMulticastDiscovery.getInterface().isUp())
-						|| (configItem != null && configItem.isDenyLineTableBroadcast())) {
+						|| (configItem != null && configItem.isDenyExternalEndpointBroadcast())) {
 					iterator.remove();
 					try {
 						ipMulticastDiscovery.close();
@@ -222,7 +273,7 @@ public class KLALBController {
 				}
 			}
 
-			if (configItem != null && configItem.isDenyLineTableBroadcast()) {
+			if (configItem != null && configItem.isDenyExternalEndpointBroadcast()) {
 
 			} else {
 				List<NetworkInterface> interfaceList = networkInterfaceManager.getAllAvaliableNetworkInterface();
@@ -298,8 +349,8 @@ public class KLALBController {
 
 	private boolean checkIsSelf(MultiProtocolSocketAddress inetAddress) throws UnknownHostException {
 
-		return inetAddress.getInetAddress().isAnyLocalAddress() || inetAddress.getInetAddress().isLoopbackAddress()
+		return inetAddress.getInetAddress().isAnyLocalAddress() || inetAddress.getInetAddress().isLoopbackAddress()
-				|| selflineTable.contains(inetAddress);
+				|| publishedNodeInfo.getExternalEndpoints().contains(inetAddress);
 	}
 
 	private boolean checkIsSelfLocator(InetAddress inetAddress) {
@@ -339,9 +390,11 @@ public class KLALBController {
 				try {
 					InetSocketAddress iaddr = new InetSocketAddress(neighbor.getAddress().toInet6Address(),
 							KLALBRoutingProtocol.DEFAULT_PORT);
-					apiClient.requestOpenLines(iaddr, (v) -> {
+					apiClient.requestExternalEndpoints(iaddr, (v) -> {
-						ThreadTool.makeVDaemonThreadIfSupport("线路添加任务", () -> {
+						if (v == null || v.getStatus() != NodeInfoQueryStatus.OK) return;
-							for (MultiProtocolSocketAddress msa : v) {
+						ThreadTool.makeVDaemonThreadIfSupport("线路添加任务", () -> {
+							if (v.getExternalEndpoints() == null) return;
+							for (MultiProtocolSocketAddress msa : v.getExternalEndpoints()) {
 								// System.out.print(msa);
 								addRemoteLines(msa);
 							}
@@ -401,9 +454,104 @@ public class KLALBController {
 	}
 
 
-	public List<MultiProtocolSocketAddress> getSelflineTable() {
+	public List<MultiProtocolSocketAddress> getExternalEndpoints() {
-		return selflineTable;
+		return publishedNodeInfo.getExternalEndpoints();
-	}
+	}
+
+	public List<MultiProtocolSocketAddress> getExternalEndpointsSnapshot() {
+		return new ArrayList<MultiProtocolSocketAddress>(publishedNodeInfo.getExternalEndpoints());
+	}
+
+	public PublishedNodeInfo getPublishedNodeInfo() {
+		return publishedNodeInfo;
+	}
+
+	private List<MultiProtocolSocketAddress> createEffectiveExternalEndpointsLocked() {
+		List<MultiProtocolSocketAddress> effective = new ArrayList<MultiProtocolSocketAddress>();
+		for (MultiProtocolSocketAddress endpoint : configuredExternalEndpoints) {
+			if (!effective.contains(endpoint)) {
+				effective.add(endpoint);
+			}
+		}
+		for (MultiProtocolSocketAddress endpoint : discoveredExternalEndpoints) {
+			if (!effective.contains(endpoint)) {
+				effective.add(endpoint);
+			}
+		}
+		return effective;
+	}
+
+	private void publishNodeInfoLocked(String deviceName, String deviceDescription,
+			List<MultiProtocolSocketAddress> configEndpoints, List<String> extraRoutes) {
+		configuredExternalEndpoints = configEndpoints == null
+				? new ArrayList<MultiProtocolSocketAddress>()
+				: new ArrayList<MultiProtocolSocketAddress>(configEndpoints);
+		List<String> publishedExtraRoutes = extraRoutes == null
+				? new ArrayList<String>() : new ArrayList<String>(extraRoutes);
+		List<MultiProtocolSocketAddress> effective = createEffectiveExternalEndpointsLocked();
+		PublishedNodeInfo previous = publishedNodeInfo;
+		boolean nameChanged = !Objects.equals(previous.getDeviceName(), deviceName);
+		boolean fullChanged = !Objects.equals(previous.getDeviceDescription(), deviceDescription)
+				|| !previous.getExternalEndpoints().equals(effective)
+				|| !previous.getExtraRoutes().equals(publishedExtraRoutes);
+
+		externalEndpoints.clear();
+		externalEndpoints.addAll(effective);
+		if (srv6Router != null) {
+			srv6Router.setDeviceName(deviceName);
+		}
+		long fullRevision = previous.getFullRevision() + (fullChanged ? 1L : 0L);
+		publishedNodeInfo = new PublishedNodeInfo(deviceName, deviceDescription, effective, publishedExtraRoutes,
+				fullRevision);
+		if (routingProtocol != null) {
+			if (nameChanged) {
+				routingProtocol.announceNodeInfoUpdate(
+						org.kne.cloud.network.srv6.RouterInfoPacket.NODE_INFO_TINY_UPDATE_REQUIRED);
+			}
+			if (fullChanged) {
+				routingProtocol.announceNodeInfoUpdate(
+						org.kne.cloud.network.srv6.RouterInfoPacket.NODE_INFO_FULL_UPDATE_REQUIRED);
+			}
+		}
+	}
+
+	public void publishNodeInfo(String deviceName, String deviceDescription,
+			List<MultiProtocolSocketAddress> configEndpoints, List<String> extraRoutes) {
+		synchronized (externalEndpoints) {
+			if (configItem != null) {
+				configItem.setDeviceName(deviceName);
+				configItem.setDeviceDescription(deviceDescription);
+				configItem.setExternalEndpoints(new ArrayList<MultiProtocolSocketAddress>(configEndpoints == null
+						? Collections.<MultiProtocolSocketAddress>emptyList() : configEndpoints));
+				configItem.setExtraRoutes(new ArrayList<String>(extraRoutes == null
+						? Collections.<String>emptyList() : extraRoutes));
+			}
+			publishNodeInfoLocked(deviceName, deviceDescription, configEndpoints, extraRoutes);
+		}
+	}
+
+	private void publishDiscoveredExternalEndpointLocked() {
+		List<MultiProtocolSocketAddress> effective = createEffectiveExternalEndpointsLocked();
+		if (new HashSet<MultiProtocolSocketAddress>(effective)
+				.equals(new HashSet<MultiProtocolSocketAddress>(externalEndpoints))) {
+			return;
+		}
+		externalEndpoints.clear();
+		externalEndpoints.addAll(effective);
+		PublishedNodeInfo previous = publishedNodeInfo;
+		publishedNodeInfo = new PublishedNodeInfo(previous.getDeviceName(), previous.getDeviceDescription(), effective,
+				previous.getExtraRoutes(), previous.getFullRevision() + 1L);
+		if (routingProtocol != null) {
+			routingProtocol.announceNodeInfoUpdate(
+					org.kne.cloud.network.srv6.RouterInfoPacket.NODE_INFO_FULL_UPDATE_REQUIRED);
+		}
+	}
+
+	public void replaceExternalEndpoints(List<MultiProtocolSocketAddress> endpoints) {
+		PublishedNodeInfo published = publishedNodeInfo;
+		publishNodeInfo(published.getDeviceName(), published.getDeviceDescription(), endpoints,
+				published.getExtraRoutes());
+	}
 
 
 	public IPv6AddressGroup getSelf() {
@@ -593,19 +741,18 @@ public class KLALBController {
 		lineslock.writeLock().lock();
 		try {
 			krs.startIO();
-			String selflineTable = generateSelfLineTable();
+			String externalEndpointsText = generateExternalEndpointsString();
-			if (selflineTable != null && !selflineTable.equals(""))
+			if (externalEndpointsText != null && !externalEndpointsText.equals(""))
-				krs.sendPacket(new ADDLINESPacket(selflineTable));
+				krs.sendPacket(new ADDLINESPacket(externalEndpointsText));
 			srv6Router.getLinkTabel().add(krs);
 		} finally {
 			lineslock.writeLock().unlock();
 		}
 	}
 
-	private String generateSelfLineTable() {
+	private String generateExternalEndpointsString() {
-		StringBuilder sbd = new StringBuilder();
+		StringBuilder sbd = new StringBuilder();
-		for (Iterator<MultiProtocolSocketAddress> iterator = selflineTable.iterator(); iterator.hasNext();) {
+		for (MultiProtocolSocketAddress klalbRemoteLine : publishedNodeInfo.getExternalEndpoints()) {
-			MultiProtocolSocketAddress klalbRemoteLine = (MultiProtocolSocketAddress) iterator.next();
 			sbd.append(klalbRemoteLine.toString());
 			sbd.append('\n');
 		}
@@ -647,8 +794,9 @@ public class KLALBController {
 		rawPortBinder= new PortBinder(this.getSelf().getAddress());
 		System.out.println("  Loaded: SRv6 Stack");
 
-				String name=(configItem!=null)?configItem.getTUNName():CONST.KLALB_S_RV6;
+		String name = (configItem != null && configItem.getTUNName() != null) ? configItem.getTUNName() : CONST.KLALB_S_RV6;
-		boolean enableTUN = enableVirtualAdapter && (name != null) && !name.trim().isEmpty() && !name.trim().equalsIgnoreCase("null");
+		boolean isEnabled = configItem == null || configItem.isEnableTUN();
+		boolean enableTUN = enableVirtualAdapter && isEnabled && (name != null) && !name.trim().isEmpty() && !name.trim().equalsIgnoreCase("null");
 		if (enableTUN) {
 			Thread t=new Thread(()->{
 			try {
@@ -763,8 +911,11 @@ public class KLALBController {
 			}
 			}
 		}).start();
-		loadSRv6ProtocolStack(selfg, enableVirtualAdapter);
+		loadSRv6ProtocolStack(selfg, enableVirtualAdapter);
-		loadController();
+		if (configItem == null) {
+			publishNodeInfo(srv6Router.getDeviceName(), null, null, null);
+		}
+		loadController();
 	}
 
 	public KLALBController(boolean enableVirtualAdapter, List<InetAddress> dnsaddr) {
@@ -800,18 +951,17 @@ public class KLALBController {
 			getIpv6Router().setASN(vasn);
 		}
 
-		List<MultiProtocolSocketAddress> linele = configItem.getLineTable();
+		List<MultiProtocolSocketAddress> linele = configItem.getExternalEndpoints();
-		if (linele != null) {
+		publishNodeInfo(configItem.getDeviceName(), configItem.getDeviceDescription(), linele,
-			getSelflineTable().addAll(linele);
+				configItem.getExtraRoutes());
-		}
+		List<MultiProtocolSocketAddress> linetoc = configItem.getAutoConnections();
-		List<MultiProtocolSocketAddress> linetoc = configItem.getConnectLineTable();
 		if (linetoc != null) {
 			linetoc.forEach((aline) -> {
 				addRemoteLines(aline);
 			});
 		}
 
-		List<MultiProtocolSocketAddress> ntps = configItem.getNtpServerTable();
+		List<MultiProtocolSocketAddress> ntps = configItem.getNtpServers();
 		if (ntps != null) {
 			getNTPTable().addAll(ntps);
 		}

src/org/kne/cloud/network/klalb/KLALBControllerConfigItem.java

@@ -16,12 +16,12 @@ public class KLALBControllerConfigItem extends KLALBConfigItem {
 	private MultiProtocolSocketAddress TCPListen=new MultiProtocolSocketAddress("0.0.0.0",4565);
 	private MultiProtocolSocketAddress UDPListen=new MultiProtocolSocketAddress("udp","0.0.0.0",4565);
 	private String VirtualSocketName;
-	private List<MultiProtocolSocketAddress>LineTable=new ArrayList<>();
+	private List<MultiProtocolSocketAddress> externalEndpoints = new ArrayList<>();
-	private List<MultiProtocolSocketAddress>ConnectLineTable=new ArrayList<>();
+	private List<MultiProtocolSocketAddress> autoConnections = new ArrayList<>();
-	private List<MultiProtocolSocketAddress>ntpServerTable=new ArrayList<>();
+	private List<MultiProtocolSocketAddress> ntpServers = new ArrayList<>();
-	private List<String>ExtraRoutes=new ArrayList<>();
+	private List<String> ExtraRoutes = new ArrayList<>();
-	private boolean denyLineTableQuery=false;
+	private boolean denyExternalEndpointQuery = false;
-	private boolean denyLineTableBroadcast=false;
+	private boolean denyExternalEndpointBroadcast = false;
 	private String congestionAlgorithm="BBR";
 	private double burstLimit=1.50;
 	private double delayUpperBound=1.20;
@@ -29,10 +29,37 @@ public class KLALBControllerConfigItem extends KLALBConfigItem {
 	private long nagleDelayTime=1000000L;
 	private long linkNagleDelayTime=1000000L;
 	private int linkConnectionsCount=1;
+	private boolean enableTUN = true;
 	private String TUNName=CONST.KLALB_S_RV6;
 	private String performanceStrategy="multifill";
 	private String DeviceName;
 	private String DeviceDescription;
+	private boolean webUI = false;
+	private MultiProtocolSocketAddress webListen = new MultiProtocolSocketAddress("http", "0.0.0.0", 4665);
+
+	public boolean isEnableTUN() {
+		return enableTUN;
+	}
+
+	public void setEnableTUN(boolean enableTUN) {
+		this.enableTUN = enableTUN;
+	}
+
+	public boolean isWebUI() {
+		return webUI;
+	}
+
+	public void setWebUI(boolean webUI) {
+		this.webUI = webUI;
+	}
+
+	public MultiProtocolSocketAddress getWebListen() {
+		return webListen;
+	}
+
+	public void setWebListen(MultiProtocolSocketAddress webListen) {
+		this.webListen = webListen;
+	}
 
 	public String getPerformanceStrategy() {
 		return performanceStrategy;
@@ -177,39 +204,44 @@ public class KLALBControllerConfigItem extends KLALBConfigItem {
 
 
 
-	public List<MultiProtocolSocketAddress> getLineTable() {
+	public List<MultiProtocolSocketAddress> getExternalEndpoints() {
-		return LineTable;
+		return externalEndpoints;
 	}
 
-
+	public void setExternalEndpoints(List<MultiProtocolSocketAddress> externalEndpoints) {
-
+		this.externalEndpoints = externalEndpoints;
-	public void setLineTable(List<MultiProtocolSocketAddress> lineTable) {
-		LineTable = lineTable;
 	}
 
+	public List<MultiProtocolSocketAddress> getAutoConnections() {
+		return autoConnections;
+	}
 
+	public void setAutoConnections(List<MultiProtocolSocketAddress> autoConnections) {
+		this.autoConnections = autoConnections;
+	}
 
 	public List<MultiProtocolSocketAddress> getConnectLineTable() {
-		return ConnectLineTable;
+		return autoConnections;
 	}
 
-
-
 	public void setConnectLineTable(List<MultiProtocolSocketAddress> connectLineTable) {
-		ConnectLineTable = connectLineTable;
+		this.autoConnections = connectLineTable;
 	}
 
-	
+	public List<MultiProtocolSocketAddress> getNtpServers() {
+		return ntpServers;
+	}
+
+	public void setNtpServers(List<MultiProtocolSocketAddress> ntpServers) {
+		this.ntpServers = ntpServers;
+	}
 
 	public List<MultiProtocolSocketAddress> getNtpServerTable() {
-		return ntpServerTable;
+		return ntpServers;
 	}
 
-
-
-
 	public void setNtpServerTable(List<MultiProtocolSocketAddress> ntpServerTable) {
-		this.ntpServerTable = ntpServerTable;
+		this.ntpServers = ntpServerTable;
 	}
 
 	public List<String> getExtraRoutes() {
@@ -280,23 +312,20 @@ public class KLALBControllerConfigItem extends KLALBConfigItem {
 
 
 
-	public boolean isDenyLineTableQuery() {
+	public boolean isDenyExternalEndpointQuery() {
-		return denyLineTableQuery;
+		return denyExternalEndpointQuery;
 	}
 
-
+	public void setDenyExternalEndpointQuery(boolean denyExternalEndpointQuery) {
-	public void setDenyLineTableQuery(boolean denyLineTableQuery) {
+		this.denyExternalEndpointQuery = denyExternalEndpointQuery;
-		this.denyLineTableQuery = denyLineTableQuery;
 	}
 
-
+	public boolean isDenyExternalEndpointBroadcast() {
-	public boolean isDenyLineTableBroadcast() {
+		return denyExternalEndpointBroadcast;
-		return denyLineTableBroadcast;
 	}
 
-
+	public void setDenyExternalEndpointBroadcast(boolean denyExternalEndpointBroadcast) {
-	public void setDenyLineTableBroadcast(boolean denyLineTableBroadcast) {
+		this.denyExternalEndpointBroadcast = denyExternalEndpointBroadcast;
-		this.denyLineTableBroadcast = denyLineTableBroadcast;
 	}
 
 
@@ -352,12 +381,12 @@ public class KLALBControllerConfigItem extends KLALBConfigItem {
 				", TCPListen=" + TCPListen +
 				", UDPListen=" + UDPListen +
 				", VirtualSocketName='" + VirtualSocketName + '\'' +
-				", LineTable=" + LineTable +
+				", externalEndpoints=" + externalEndpoints +
-				", ConnectLineTable=" + ConnectLineTable +
+				", autoConnections=" + autoConnections +
-				", ntpServerTable=" + ntpServerTable +
+				", ntpServers=" + ntpServers +
 				", ExtraRoutes=" + ExtraRoutes +
-				", denyLineTableQuery=" + denyLineTableQuery +
+				", denyExternalEndpointQuery=" + denyExternalEndpointQuery +
-				", denyLineTableBroadcast=" + denyLineTableBroadcast +
+				", denyExternalEndpointBroadcast=" + denyExternalEndpointBroadcast +
 				", congestionAlgorithm='" + congestionAlgorithm + '\'' +
 				", burstLimit=" + burstLimit +
 				", delayUpperBound=" + delayUpperBound +
@@ -365,12 +394,15 @@ public class KLALBControllerConfigItem extends KLALBConfigItem {
 				", nagleDelayTime=" + nagleDelayTime +
 				", linkNagleDelayTime=" + linkNagleDelayTime +
 				", linkConnectionsCount=" + linkConnectionsCount +
+				", enableTUN=" + enableTUN +
 				", TUNName='" + TUNName + '\'' +
 				", performanceStrategy='" + performanceStrategy + '\'' +
-				", DeviceName='" + DeviceName + '\'' +
+				", DeviceName='" + DeviceName + '\'' +
-				", DeviceDescription='" + DeviceDescription + '\'' +
+				", DeviceDescription='" + DeviceDescription + '\'' +
-				", NetworkInterfaceExcepts=" + NetworkInterfaceExcepts +
+				", NetworkInterfaceExcepts=" + NetworkInterfaceExcepts +
-				'}';
+				", webUI=" + webUI +
+				", webListen=" + webListen +
+				'}';
 	}
 
 	@Override
@@ -378,11 +410,11 @@ public class KLALBControllerConfigItem extends KLALBConfigItem {
 		if (o == null || getClass() != o.getClass()) return false;
 		if (!super.equals(o)) return false;
 		KLALBControllerConfigItem that = (KLALBControllerConfigItem) o;
-		return nogui == that.nogui && denyLineTableQuery == that.denyLineTableQuery && denyLineTableBroadcast == that.denyLineTableBroadcast && Double.compare(burstLimit, that.burstLimit) == 0 && Double.compare(delayUpperBound, that.delayUpperBound) == 0 && Double.compare(delayLowerBound, that.delayLowerBound) == 0 && nagleDelayTime == that.nagleDelayTime && linkNagleDelayTime == that.linkNagleDelayTime && linkConnectionsCount == that.linkConnectionsCount && Objects.equals(language, that.language) && Objects.equals(VirtualAddress, that.VirtualAddress) && Objects.equals(VirtualASN, that.VirtualASN) && Objects.equals(DNS, that.DNS) && Objects.equals(TCPListen, that.TCPListen) && Objects.equals(UDPListen, that.UDPListen) && Objects.equals(VirtualSocketName, that.VirtualSocketName) && Objects.equals(LineTable, that.LineTable) && Objects.equals(ConnectLineTable, that.ConnectLineTable) && Objects.equals(ntpServerTable, that.ntpServerTable) && Objects.equals(ExtraRoutes, that.ExtraRoutes) && Objects.equals(congestionAlgorithm, that.congestionAlgorithm) && Objects.equals(TUNName, that.TUNName) && Objects.equals(performanceStrategy, that.performanceStrategy) && Objects.equals(DeviceName, that.DeviceName) && Objects.equals(DeviceDescription, that.DeviceDescription) && Objects.equals(NetworkInterfaceExcepts, that.NetworkInterfaceExcepts);
+		return nogui == that.nogui && enableTUN == that.enableTUN && webUI == that.webUI && denyExternalEndpointQuery == that.denyExternalEndpointQuery && denyExternalEndpointBroadcast == that.denyExternalEndpointBroadcast && Double.compare(burstLimit, that.burstLimit) == 0 && Double.compare(delayUpperBound, that.delayUpperBound) == 0 && Double.compare(delayLowerBound, that.delayLowerBound) == 0 && nagleDelayTime == that.nagleDelayTime && linkNagleDelayTime == that.linkNagleDelayTime && linkConnectionsCount == that.linkConnectionsCount && Objects.equals(webListen, that.webListen) && Objects.equals(language, that.language) && Objects.equals(VirtualAddress, that.VirtualAddress) && Objects.equals(VirtualASN, that.VirtualASN) && Objects.equals(DNS, that.DNS) && Objects.equals(TCPListen, that.TCPListen) && Objects.equals(UDPListen, that.UDPListen) && Objects.equals(VirtualSocketName, that.VirtualSocketName) && Objects.equals(externalEndpoints, that.externalEndpoints) && Objects.equals(autoConnections, that.autoConnections) && Objects.equals(ntpServers, that.ntpServers) && Objects.equals(ExtraRoutes, that.ExtraRoutes) && Objects.equals(congestionAlgorithm, that.congestionAlgorithm) && Objects.equals(TUNName, that.TUNName) && Objects.equals(performanceStrategy, that.performanceStrategy) && Objects.equals(DeviceName, that.DeviceName) && Objects.equals(DeviceDescription, that.DeviceDescription) && Objects.equals(NetworkInterfaceExcepts, that.NetworkInterfaceExcepts);
 	}
 
 	@Override
 	public int hashCode() {
-		return Objects.hash(super.hashCode(), language, nogui, VirtualAddress, VirtualASN, DNS, TCPListen, UDPListen, VirtualSocketName, LineTable, ConnectLineTable, ntpServerTable, ExtraRoutes, denyLineTableQuery, denyLineTableBroadcast, congestionAlgorithm, burstLimit, delayUpperBound, delayLowerBound, nagleDelayTime, linkNagleDelayTime, linkConnectionsCount, TUNName, performanceStrategy, DeviceName, DeviceDescription, NetworkInterfaceExcepts);
+		return Objects.hash(super.hashCode(), language, nogui, VirtualAddress, VirtualASN, DNS, TCPListen, UDPListen, VirtualSocketName, externalEndpoints, autoConnections, ntpServers, ExtraRoutes, denyExternalEndpointQuery, denyExternalEndpointBroadcast, congestionAlgorithm, burstLimit, delayUpperBound, delayLowerBound, nagleDelayTime, linkNagleDelayTime, linkConnectionsCount, enableTUN, TUNName, performanceStrategy, DeviceName, DeviceDescription, NetworkInterfaceExcepts, webUI, webListen);
 	}
 }

src/org/kne/cloud/network/klalb/KLALBMain.java

@@ -52,13 +52,15 @@ public class KLALBMain {
 		}catch(Throwable e) {
 			e.printStackTrace();
 		}
+		try {
+			if(kpcje.getControllerConfig() != null && kpcje.getControllerConfig().isWebUI()) {
+				kpcje.enableWebServer();
+			}
+		} catch(Throwable e) {
+			System.err.println("Failed to start web server: " + e.getMessage());
+		}
 		dtb.putTime("UI");
 		//dtb.print();
-		/*MultipurposeSocketAddress mpa=new MultipurposeSocketAddress("127.9.9.9", 49573);
-		kpcje.enableRemoteManagement(mpa);
-		System.out.println("远程管理端口已在"+mpa+"端口上开启");*/
-		/*if(true)
-		return;*/
 		ServerSocketChannel kpsvr=KLALBVirtualServerSocketChannel.open(kpcje.getKlalbController());
 		kpsvr.bind(new InetSocketAddress("::0", 4564));
 		SocketChannelListener stlr=new SocketChannelListener(kpsvr);
@@ -84,6 +86,7 @@ public class KLALBMain {
 		case "help":
 			System.out.println("  help / ?: see help");
 			System.out.println("  monitor: show monitor GUI");
+			System.out.println("  web [start|stop|status <port>]: manage web dashboard");
 			System.out.println("  links-state: query link states");
 			System.out.println("  links-add <addr:port>: add link");
 			System.out.println("  links-remove <addr:port>: remove link");
@@ -102,6 +105,42 @@ public class KLALBMain {
 				e.printStackTrace();
 			}
 			break;
+		case "web":
+			if(sc.length >= 2) {
+				String action = sc[1].toLowerCase();
+				if("start".equals(action)) {
+					int p = 4665;
+					if(sc.length >= 3) {
+						try { p = Integer.parseInt(sc[2]); } catch (NumberFormatException ignored) {}
+					} else if(kpcje.getControllerConfig() != null && kpcje.getControllerConfig().getWebListen() != null) {
+						p = kpcje.getControllerConfig().getWebListen().getPort();
+					}
+					try {
+						kpcje.enableWebServer(p);
+						System.out.println("Web dashboard started on http://localhost:" + p);
+					} catch(Exception e) {
+						System.out.println("Failed to start web server: " + e.getMessage());
+					}
+				} else if("stop".equals(action)) {
+					kpcje.disableWebServer();
+					System.out.println("Web dashboard stopped.");
+				} else if("status".equals(action)) {
+					if(kpcje.isWebServerEnabled()) {
+						System.out.println("Web dashboard is running on port " + kpcje.getWebServer().getPort());
+					} else {
+						System.out.println("Web dashboard is stopped.");
+					}
+				} else {
+					System.out.println("Usage: web [start|stop|status <port>]");
+				}
+			} else {
+				if(kpcje.isWebServerEnabled()) {
+					System.out.println("Web dashboard is running on port " + kpcje.getWebServer().getPort());
+				} else {
+					System.out.println("Web dashboard is not running. Use 'web start [port]' to start.");
+				}
+			}
+			break;
 		case "links-state":
 			System.out.println("links state：");
 			//System.out.println("状态\t上传流量\t下载流量\t上传速度\t下载速度\t上传延迟\t下载延迟\t上传抖动\t下载抖动");

src/org/kne/cloud/network/klalb/KLALBProxySystem.java

@@ -5,25 +5,34 @@ import java.io.FileReader;
 import java.io.FileWriter;
 import java.io.IOException;
 import java.io.Reader;
-import java.net.InetSocketAddress;
+import java.lang.reflect.Type;
+import java.net.InetAddress;
+import java.net.InetSocketAddress;
 import java.util.HashSet;
 
 import org.kne.cloud.network.*;
 import org.kne.cloud.network.klalb.ui.KLALBStateGUI3;
 import org.kne.cloud.network.klalb.ui.Language;
 import org.kne.cloud.network.klalb.ui.UIEnv;
+import org.kne.cloud.network.klalb.web.KLALBWebServer;
 
 import java.util.Set;
 
 import com.google.gson.Gson;
 import com.google.gson.GsonBuilder;
+import com.google.gson.JsonDeserializationContext;
+import com.google.gson.JsonDeserializer;
 import com.google.gson.JsonElement;
+import com.google.gson.JsonParseException;
+import com.google.gson.JsonPrimitive;
+import com.google.gson.JsonSerializationContext;
+import com.google.gson.JsonSerializer;
 import com.google.gson.JsonParser;
 
 public class KLALBProxySystem {
 	private Set<Proxy> proxys=new HashSet<>();
 	private KLALBController klalbController;
-	private KLALBRemoteManagement krm;
+	private KLALBWebServer webServer;
 	private KLALBConfig config;
 	private Gson gson;
 	private File jsonFile;
@@ -31,8 +40,28 @@ public class KLALBProxySystem {
 		GsonBuilder gb=new GsonBuilder().setPrettyPrinting();
 		MultiProtocolSocketAddress.registerToGsonBuilder(gb);
 		KLALBConfigItem.registerToGsonBuilder(gb);
+		gb.registerTypeAdapter(InetAddress.class, new JsonSerializer<InetAddress>() {
+			@Override
+			public JsonElement serialize(InetAddress src, Type typeOfSrc, JsonSerializationContext context) {
+				return new JsonPrimitive(src.getHostAddress());
+			}
+		});
+		gb.registerTypeAdapter(InetAddress.class, new JsonDeserializer<InetAddress>() {
+			@Override
+			public InetAddress deserialize(JsonElement json, Type typeOfT, JsonDeserializationContext context) throws JsonParseException {
+				try {
+					return InetAddress.getByName(json.getAsString());
+				} catch (Exception e) {
+					throw new JsonParseException(e);
+				}
+			}
+		});
 		gson=gb.create();
 	}
+	public Gson getGson() {
+		return gson;
+	}
+
 	public Set<Proxy> getProxys() {
 		return proxys;
 	}
@@ -55,30 +84,38 @@ public class KLALBProxySystem {
 	public KLALBProxySystem() {
 	}
 	
-	public void enableRemoteManagement() throws IOException {
+	public void enableWebServer() throws IOException {
-		if(krm==null) {
+		KLALBControllerConfigItem cci = getControllerConfig();
-		krm=new KLALBRemoteManagement(this);
+		MultiProtocolSocketAddress listen = cci == null || cci.getWebListen() == null
-		}else {
+				? new MultiProtocolSocketAddress("http", "0.0.0.0", 4665) : cci.getWebListen();
-			throw new IllegalStateException("Remote Management already enabled!");
+		enableWebServer(listen);
+	}
+
+	public void enableWebServer(int port) throws IOException {
+		enableWebServer(new MultiProtocolSocketAddress("http", "0.0.0.0", port));
+	}
+
+	public void enableWebServer(MultiProtocolSocketAddress listen) throws IOException {
+		if (webServer == null) {
+			webServer = new KLALBWebServer(this, listen);
+			webServer.start();
+		} else {
+			throw new IllegalStateException("Web server already enabled!");
 		}
 	}
-	
+
-	public void enableRemoteManagement(MultiProtocolSocketAddress bind) throws IOException {
+	public boolean isWebServerEnabled() {
-		if(krm==null) {
+		return webServer != null && webServer.isRunning();
-		krm=new KLALBRemoteManagement(this,bind);
-		}else {
-			throw new IllegalStateException("Remote Management already enabled!");
-		}
 	}
-	
+
-	public boolean isRemoteManagementEnabled() {
+	public KLALBWebServer getWebServer() {
-		return krm!=null;
+		return webServer;
 	}
-	
+
-	public void disableRemoteManagement() {
+	public void disableWebServer() {
-		if(krm!=null) {
+		if (webServer != null) {
-			krm.close();
+			webServer.stop();
-			krm=null;
+			webServer = null;
 		}
 	}
 	
@@ -195,30 +232,24 @@ public class KLALBProxySystem {
 	}
 	
 	
+	public void saveConfigToFile() {
+		if (jsonFile != null && config != null) {
+			String json = gson.toJson(config);
+			try (FileWriter fw = new FileWriter(jsonFile)) {
+				fw.write(json);
+			} catch (IOException e) {
+				e.printStackTrace();
+			}
+		}
+	}
+
 	private KLALBStateGUI3 kgui;
 	public KLALBStateGUI3 getKLALBGUI() {
 		if(kgui==null) {
 		kgui=new KLALBStateGUI3(klalbController);
 		kgui.loadConfig(config);
 		kgui.setSaveComsumer((cfg)->{
-			String json=gson.toJson(cfg);
+			saveConfigToFile();
-			if(jsonFile!=null) {
-				FileWriter fw = null;
-				try {
-					fw=new FileWriter(jsonFile);
-					fw.write(json);
-				}catch(IOException e) {
-					e.printStackTrace();
-				}finally {
-					if(fw!=null)
-						try {
-							fw.close();
-						} catch (IOException e) {
-							e.printStackTrace();
-						}
-				}
-			}
-				
 		});
 		}
 		return kgui;

src/org/kne/cloud/network/klalb/KLALBRemoteManagement.java

@@ -1,174 +0,0 @@
-package org.kne.cloud.network.klalb;
-
-import java.io.IOException;
-import java.net.SocketTimeoutException;
-import java.nio.charset.Charset;
-import java.util.Iterator;
-import java.util.List;
-
-import org.kne.cloud.network.MultiProtocolSocketAddress;
-import org.kne.cloud.network.SocketListener;
-import org.kne.cloud.network.ipv6.IPv6NetworkLink;
-import org.kne.cloud.network.monitor.LinkStatus;
-
-import com.google.gson.JsonArray;
-import com.google.gson.JsonObject;
-import com.google.gson.JsonParser;
-import com.google.gson.JsonPrimitive;
-
-public class KLALBRemoteManagement {
-	SocketListener slr;
-	private KLALBProxySystem klalbProxySystem;
-	public KLALBRemoteManagement(KLALBProxySystem klalbProxySystem) throws IOException {
-		this(klalbProxySystem,new MultiProtocolSocketAddress("127.9.9.9", 49573));
-	}
-	public KLALBRemoteManagement(KLALBProxySystem klalbProxySystem, MultiProtocolSocketAddress listen) throws IOException {
-		this.klalbProxySystem=klalbProxySystem;
-		slr=new SocketListener(listen);
-		slr.setCon((srcv)->{
-			try {
-				srcv.setSoTimeout(10000);
-				byte[]input= srcv.getInputStream().readAllBytes();
-				srcv.shutdownInput();
-				String req=new String(input,Charset.forName("UTF-8"));
-				System.out.println("远程管理请求："+req);
-				String rsp=processSignal(req);
-				System.out.println("远程管理响应："+rsp);
-				srcv.getOutputStream().write(rsp.getBytes(Charset.forName("UTF-8")));
-				srcv.shutdownOutput();
-			} catch (IOException e) {
-				e.printStackTrace();
-			}finally {
-				try {
-					srcv.close();
-				} catch (IOException e) {
-					e.printStackTrace();
-				}
-			}
-			
-		});
-	}
-	public KLALBProxySystem getKlalbProxySystem() {
-		return klalbProxySystem;
-	}
-	private String processSignal(String req) {
-		JsonObject jreq= (JsonObject) new JsonParser().parse(req);
-		JsonObject jrsp=new JsonObject();
-		
-		
-		String reqt=jreq.getAsJsonPrimitive("REQ").getAsString();
-		jrsp.addProperty("RSP", reqt);
-		switch (reqt) {
-		case "GETLINES":
-			JsonArray lines=new JsonArray();
-			List<IPv6NetworkLink>lineslist= klalbProxySystem.getKlalbController().getLines();
-			synchronized (lineslist) {
-				for (Iterator<IPv6NetworkLink> iterator = lineslist.iterator(); iterator.hasNext();) {
-					IPv6NetworkLink link=iterator.next();
-					if(!(link instanceof KLALBRemoteLink)) {
-						continue;
-					}
-					KLALBRemoteLink klalbRemoteLine = (KLALBRemoteLink) link;
-					if(klalbRemoteLine.getSocketAddress()==null)
-						continue;
-					JsonObject jklbrl=new JsonObject();
-					jklbrl.addProperty("ipport", klalbRemoteLine.getSocketAddress().toString());
-					jklbrl.addProperty("state",LinkStatus.stateToString( klalbRemoteLine.getState()));
-					
-					jklbrl.addProperty("Vaddr", klalbRemoteLine.getRemoteVaddr().getAddress().toString());
-					
-					jklbrl.addProperty("uploadspeed", klalbRemoteLine.getMonitor().getOutSpeed());
-					jklbrl.addProperty("downloadspeed", klalbRemoteLine.getMonitor().getInSpeed());
-					
-					jklbrl.addProperty("uploadtraffic", klalbRemoteLine.getMonitor().getOutTraffic());
-					jklbrl.addProperty("downloadtraffic",  klalbRemoteLine.getMonitor().getInTraffic());
-					
-					jklbrl.addProperty("uploaddelay",klalbRemoteLine.getMonitor().getOutDelay() );
-					jklbrl.addProperty("downloaddelay", klalbRemoteLine.getMonitor().getInDelay());
-					
-					jklbrl.addProperty("uploaddelaymin",klalbRemoteLine.getMonitor().getOutDelayMin() );
-					jklbrl.addProperty("downloaddelaymin", klalbRemoteLine.getMonitor().getInDelayMin());
-					lines.add(jklbrl);
-				}
-			}
-			jrsp.add("table", lines);
-			break;
-		case "ADDLINE":
-			String mip=jreq.getAsJsonPrimitive("ipport").getAsString();
-			try {
-				
-			jrsp.addProperty ("Vaddr",klalbProxySystem.getKlalbController().getRemoteVaddrBySocketAddress(new MultiProtocolSocketAddress(mip)).getHostAddress());
-			} catch (SocketTimeoutException e) {
-				e.printStackTrace();
-			}
-			break;
-		case "GETSELFLINES":	
-			JsonArray lines2=new JsonArray();
-			List<MultiProtocolSocketAddress>selflineslist=klalbProxySystem.getKlalbController().getSelflineTable();
-			synchronized (selflineslist) {
-				for (Iterator<MultiProtocolSocketAddress> iterator = selflineslist.iterator(); iterator.hasNext();) {
-					MultiProtocolSocketAddress multiProtocolSocketAddress = (MultiProtocolSocketAddress) iterator.next();
-					lines2.add(new JsonPrimitive(multiProtocolSocketAddress.toString()));
-				}
-			}
-			jrsp.add("table", lines2);
-			
-			break;
-		case "ADDSELFLINE":
-			String mips=jreq.getAsJsonPrimitive("ipport").getAsString();
-			List<MultiProtocolSocketAddress>selflineslist2=klalbProxySystem.getKlalbController().getSelflineTable();
-			synchronized (selflineslist2) {
-				selflineslist2.add(new MultiProtocolSocketAddress(mips));
-			}
-			break;
-		case "REMOVESELFLINE":
-			String mipsr=jreq.getAsJsonPrimitive("ipport").getAsString();
-			List<MultiProtocolSocketAddress>selflineslist21=klalbProxySystem.getKlalbController().getSelflineTable();
-			synchronized (selflineslist21) {
-				selflineslist21.add(new MultiProtocolSocketAddress(mipsr));
-			}
-			break;
-		case "GETLINKMONITOR":
-			jrsp.addProperty("uploadspeed", klalbProxySystem.getKlalbController().getLinkMonitor().getOutSpeed());
-			jrsp.addProperty("downloadspeed", klalbProxySystem.getKlalbController().getLinkMonitor().getInSpeed());
-			
-			jrsp.addProperty("uploadtraffic", klalbProxySystem.getKlalbController().getLinkMonitor().getOutTraffic());
-			jrsp.addProperty("downloadtraffic",  klalbProxySystem.getKlalbController().getLinkMonitor().getInTraffic());
-			
-			break;
-		case "OPENMONITORUI":
-			klalbProxySystem.getKLALBGUI().setVisible(true);
-			break;
-		/*case "GETSOCKETBRIDGE":
-			JsonArray bridges=new JsonArray();
-			Set<Proxy> pxy=klalbProxySystem.getProxys();
-			synchronized (pxy) {
-				for (Iterator<Proxy> iterator = pxy.iterator(); iterator.hasNext();) {
-					Proxy proxy = (Proxy) iterator.next();
-					bridges.add(klalbProxySystem.createJsonObjectByProxy(proxy));
-				}
-			}
-			jrsp.add("table", bridges);
-			break;
-		case "ADDSOCKETBRIDGE":
-			JsonObject jpxy= jreq.getAsJsonObject("socketbridge");
-			Set<Proxy> pxy2=klalbProxySystem.getProxys();
-			synchronized (pxy2) {
-				try {
-					pxy2.add(klalbProxySystem.createProxyByJson(jpxy));
-				} catch (IOException e) {
-					e.printStackTrace();
-				}
-			}
-			break;*/
-		default:
-			System.out.println("未知请求类型："+reqt);
-			break;
-		}
-		
-		return jrsp.toString();
-	}
-	public void close() {
-		slr.close();
-	}
-}

src/org/kne/cloud/network/klalb/NodeInfoQueryCoordinator.java

@@ -0,0 +1,211 @@
+package org.kne.cloud.network.klalb;
+
+import java.net.SocketAddress;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+import java.util.Objects;
+import java.util.Optional;
+import java.util.concurrent.CompletableFuture;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
+import java.util.concurrent.ScheduledExecutorService;
+import java.util.concurrent.TimeUnit;
+import java.util.concurrent.atomic.AtomicBoolean;
+
+import org.kne.cloud.network.MultiProtocolSocketAddress;
+import org.kne.cloud.network.srv6.ExternalEndpointsResult;
+import org.kne.cloud.network.srv6.ExtraRoutesResult;
+import org.kne.cloud.network.srv6.KLALBRoutingProtocolAPIClient;
+import org.kne.cloud.network.srv6.NodeInfoQueryStatus;
+import org.kne.cloud.network.srv6.NodeProfile;
+
+/** Coordinates the three independent sections of a remote node-info query. */
+public final class NodeInfoQueryCoordinator {
+    private static final long DEADLINE_MILLIS = 3000L;
+    private static final ExecutorService REQUEST_EXECUTOR = Executors.newVirtualThreadPerTaskExecutor();
+    private static final ScheduledExecutorService DEADLINE_EXECUTOR = Executors
+            .newSingleThreadScheduledExecutor(r -> {
+                Thread thread = new Thread(r, "KLALB-node-info-deadline");
+                thread.setDaemon(true);
+                return thread;
+            });
+
+    private final KLALBRoutingProtocolAPIClient client;
+
+    public NodeInfoQueryCoordinator(KLALBRoutingProtocolAPIClient client) {
+        this.client = Objects.requireNonNull(client, "client");
+    }
+
+    /** Starts all section requests and completes at the first all-sections response or the shared deadline. */
+    public CompletableFuture<Result> query(SocketAddress address) {
+        Objects.requireNonNull(address, "address");
+        Pending pending = new Pending();
+        pending.result.whenComplete((ignored, error) -> {
+            if (pending.result.isCancelled()) pending.cancel();
+        });
+        pending.deadline = DEADLINE_EXECUTOR.schedule(pending::timeout, DEADLINE_MILLIS, TimeUnit.MILLISECONDS);
+
+        issue(pending, () -> client.requestNodeProfile(address, pending::profile), pending::profileFailed);
+        issue(pending, () -> client.requestExternalEndpoints(address, pending::externalEndpoints),
+                pending::externalEndpointsFailed);
+        issue(pending, () -> client.requestExtraRoutes(address, pending::extraRoutes), pending::extraRoutesFailed);
+        return pending.result;
+    }
+
+    private void issue(Pending pending, ThrowingRequest request, Runnable failure) {
+        REQUEST_EXECUTOR.execute(() -> pending.issue(request, failure));
+    }
+
+    @FunctionalInterface
+    private interface ThrowingRequest {
+        void run() throws Exception;
+    }
+
+    public static final class Section<T> {
+        private final boolean received;
+        private final Optional<T> value;
+        private final Optional<NodeInfoQueryStatus> status;
+
+        private Section(boolean received, T value, NodeInfoQueryStatus status) {
+            this.received = received;
+            this.value = Optional.ofNullable(value);
+            this.status = Optional.ofNullable(status);
+        }
+
+        public boolean isReceived() {
+            return received;
+        }
+
+        public Optional<T> getValue() {
+            return value;
+        }
+
+        public Optional<NodeInfoQueryStatus> getStatus() {
+            return status;
+        }
+
+        private static <T> Section<T> missing() {
+            return new Section<T>(false, null, null);
+        }
+
+        private static <T> Section<T> received(T value, NodeInfoQueryStatus status) {
+            return new Section<T>(true, value, status);
+        }
+    }
+
+    public static final class Result {
+        private final Section<NodeProfile> profile;
+        private final Section<List<MultiProtocolSocketAddress>> externalEndpoints;
+        private final Section<List<String>> extraRoutes;
+
+        private Result(Section<NodeProfile> profile,
+                Section<List<MultiProtocolSocketAddress>> externalEndpoints,
+                Section<List<String>> extraRoutes) {
+            this.profile = profile;
+            this.externalEndpoints = externalEndpoints;
+            this.extraRoutes = extraRoutes;
+        }
+
+        public Section<NodeProfile> getProfile() {
+            return profile;
+        }
+
+        public Section<List<MultiProtocolSocketAddress>> getExternalEndpoints() {
+            return externalEndpoints;
+        }
+
+        public Section<List<String>> getExtraRoutes() {
+            return extraRoutes;
+        }
+    }
+
+    private final class Pending {
+        private final CompletableFuture<Result> result = new CompletableFuture<>();
+        private final AtomicBoolean finished = new AtomicBoolean();
+        private int remaining = 3;
+        private Section<NodeProfile> profile = Section.missing();
+        private Section<List<MultiProtocolSocketAddress>> externalEndpoints = Section.missing();
+        private Section<List<String>> extraRoutes = Section.missing();
+        private java.util.concurrent.ScheduledFuture<?> deadline;
+
+        private synchronized void profile(NodeProfile value) {
+            if (profile.isReceived()) return;
+            profile = Section.received(value, NodeInfoQueryStatus.OK);
+            completeSection();
+        }
+
+        private synchronized void profileFailed() {
+            if (profile.isReceived()) return;
+            profile = Section.missing();
+            completeSection();
+        }
+
+        private synchronized void externalEndpoints(ExternalEndpointsResult value) {
+            if (externalEndpoints.isReceived()) return;
+            if (value == null) {
+                externalEndpoints = Section.missing();
+            } else {
+                List<MultiProtocolSocketAddress> endpoints = value.getExternalEndpoints();
+                externalEndpoints = Section.received(endpoints == null
+                        ? Collections.<MultiProtocolSocketAddress>emptyList()
+                        : Collections.unmodifiableList(new ArrayList<MultiProtocolSocketAddress>(endpoints)),
+                        value.getStatus());
+            }
+            completeSection();
+        }
+
+        private synchronized void externalEndpointsFailed() {
+            if (externalEndpoints.isReceived()) return;
+            externalEndpoints = Section.missing();
+            completeSection();
+        }
+
+        private synchronized void extraRoutes(ExtraRoutesResult value) {
+            if (extraRoutes.isReceived()) return;
+            if (value == null) {
+                extraRoutes = Section.missing();
+            } else {
+                List<String> routes = value.getExtraRoutes();
+                extraRoutes = Section.received(routes == null
+                        ? Collections.<String>emptyList()
+                        : Collections.unmodifiableList(new ArrayList<String>(routes)), value.getStatus());
+            }
+            completeSection();
+        }
+
+        private synchronized void extraRoutesFailed() {
+            if (extraRoutes.isReceived()) return;
+            extraRoutes = Section.missing();
+            completeSection();
+        }
+
+        private synchronized void issue(ThrowingRequest request, Runnable failure) {
+            if (finished.get() || result.isDone() || result.isCancelled()) return;
+            try {
+                request.run();
+            } catch (Exception e) {
+                failure.run();
+            }
+        }
+
+        private synchronized void cancel() {
+            finish();
+        }
+
+        private void completeSection() {
+            remaining--;
+            if (remaining == 0) finish();
+        }
+
+        private synchronized void timeout() {
+            finish();
+        }
+
+        private void finish() {
+            if (!finished.compareAndSet(false, true)) return;
+            if (deadline != null) deadline.cancel(false);
+            result.complete(new Result(profile, externalEndpoints, extraRoutes));
+        }
+    }
+}

src/org/kne/cloud/network/klalb/ui/KLALBStateGUI3.java

@@ -5,9 +5,10 @@ import java.awt.datatransfer.StringSelection;
 import java.awt.event.*;
 import java.io.IOException;
 import java.net.*;
-import java.util.ArrayList;
+import java.util.ArrayList;
-import java.util.List;
+import java.util.List;
-import java.util.Timer;
+import java.util.Objects;
+import java.util.Timer;
 import java.util.TimerTask;
 import java.util.function.Consumer;
 import javax.imageio.ImageIO;
@@ -26,7 +27,7 @@ import org.kne.cloud.network.ipv6.IPv6NetworkLink;
 import org.kne.cloud.network.klalb.*;
 import org.kne.cloud.network.klalb.ui.GraphPanel.GraphNode;
 import org.kne.cloud.network.monitor.LinkStatus;
-import org.kne.cloud.network.srv6.SRv6Router;
+import org.kne.cloud.network.srv6.SRv6Router;
 import org.kne.ui.XFrame;
 import org.kne.ui.YScrollPane;
 
@@ -75,7 +76,9 @@ public class KLALBStateGUI3 extends XFrame {
     private JTextField addressField;                   // 地址显示框
     private JTextField addressFieldSet;                // 地址设置框
     private JTextField asnFieldSet;                    // ASN设置框
+    private JCheckBox enableTUN;						// 虚拟网卡启用禁用
     private JTextField tunDeviceName;                    // 虚拟网卡名称设置框
+    private JTextField webListenSet;                     // Web API 监听地址设置框
     private NetworkGraphPanel graph;                   // 网络图面板
     private JTextField textFieldLocate;                // 定位地址输入框
     private JTextField asnField2;                      // ASN显示框
@@ -96,6 +99,7 @@ public class KLALBStateGUI3 extends XFrame {
     private JTextArea ntpServerSet;                    // NTP服务器设置区域
 	private JCheckBox denyBroadcast;
 	private JCheckBox denyQuery;
+    private JCheckBox webApiEnabled;                   // 启用 Web API 开关
     private ClosableTabbedPane tabbedPane;             // 可关闭的标签页面板
 	private JCheckBox nogui;
 
@@ -820,6 +824,12 @@ public class KLALBStateGUI3 extends XFrame {
         asnFieldSet = asn.getTextField();
         settings.getView().add(asn);
         
+        //虚拟网卡
+        CheckBoxSettingItem enableTUNs = new CheckBoxSettingItem(UIEnv.getRsb().getString("enabletun"), 
+                CONST.itemwidth, CONST.settingheight);
+        enableTUN=enableTUNs.getCheckBox();
+        settings.getView().add(enableTUNs);
+        
         TextSettingItem tunName = new TextSettingItem(UIEnv.getRsb().getString("tunname"), 
                 CONST.itemwidth, CONST.settingheight);
         tunDeviceName = tunName.getTextField();
@@ -904,7 +914,22 @@ public class KLALBStateGUI3 extends XFrame {
                 CONST.itemwidth, CONST.settingheight);
         denyBroadcast=denyBroadcastc.getCheckBox();
         settings.getView().add(denyBroadcastc);
-        
+
+        // Web服务设置标题
+        SettingItem wsi = new SettingItem(UIEnv.getRsb().getString("webapisettings"),
+            UIEnv.getFont().deriveFont(20.0f).deriveFont(Font.BOLD), CONST.itemwidth, CONST.settingheight);
+        settings.getView().add(wsi);
+
+        CheckBoxSettingItem webApic = new CheckBoxSettingItem(UIEnv.getRsb().getString("enablewebapi"),
+                CONST.itemwidth, CONST.settingheight);
+        webApiEnabled=webApic.getCheckBox();
+        settings.getView().add(webApic);
+
+        TextSettingItem webListen = new TextSettingItem(UIEnv.getRsb().getString("weblistenaddr"),
+            CONST.itemwidth, CONST.settingheight);
+        webListenSet = webListen.getTextField();
+        settings.getView().add(webListen);
+
         //性能设置标题
 
         SettingItem pshi = new SettingItem(UIEnv.getRsb().getString("performancesettings"), 
@@ -1037,8 +1062,19 @@ public class KLALBStateGUI3 extends XFrame {
         }
         
         for (KLALBConfigItem item : config) {
-            if (item instanceof KLALBControllerConfigItem) {
+            if (item instanceof KLALBControllerConfigItem) {
-                KLALBControllerConfigItem kck = (KLALBControllerConfigItem) item;
+                KLALBControllerConfigItem kck = (KLALBControllerConfigItem) item;
+                String oldDeviceName = kck.getDeviceName();
+                String oldDeviceDescription = kck.getDeviceDescription();
+                List<MultiProtocolSocketAddress> oldExternalEndpoints = kck.getExternalEndpoints() == null
+                        ? null
+                        : new ArrayList<MultiProtocolSocketAddress>(kck.getExternalEndpoints());
+                List<String> oldExtraRoutes = kck.getExtraRoutes() == null
+                        ? null : new ArrayList<String>(kck.getExtraRoutes());
+                String newDeviceName;
+                String newDeviceDescription;
+                List<String> newExtraRoutes;
+                List<MultiProtocolSocketAddress> newExternalEndpoints;
                 
                 // 保存语言设置
                 kck.setLanguage(((Language) comboLang.getSelectedItem()).name());
@@ -1046,23 +1082,19 @@ public class KLALBStateGUI3 extends XFrame {
                 kck.setNogui(nogui.isSelected());
                 
                 // 保存设备名称
-                String dnametext = deviceNameSet.getText().trim();
+                String dnametext = deviceNameSet.getText().trim();
-                if (dnametext.equals("")) {
+                if (dnametext.equals("")) {
-                    kck.setDeviceName(null);
+                    newDeviceName = null;
-                } else {
+                } else {
-                    kck.setDeviceName(dnametext);
+                    newDeviceName = dnametext;
-                }
+                }
-                if (kcontroller != null && kcontroller.getIpv6Router() != null) {
+                // 保存设备描述
-                    kcontroller.getIpv6Router().setDeviceName(kck.getDeviceName());
+                String ddesctext = deviceDescriptionSet.getText().trim();
-                }
+                if (ddesctext.equals("")) {
-                
+                    newDeviceDescription = null;
-                // 保存设备描述
+                } else {
-                String ddesctext = deviceDescriptionSet.getText().trim();
+                    newDeviceDescription = ddesctext;
-                if (ddesctext.equals("")) {
+                }
-                    kck.setDeviceDescription(null);
-                } else {
-                    kck.setDeviceDescription(ddesctext);
-                }
                 
                 
                 // 保存IPv6地址
@@ -1117,7 +1149,7 @@ public class KLALBStateGUI3 extends XFrame {
                         }
                     }
                 }
-                kck.setExtraRoutes(eroutes);
+                newExtraRoutes = eroutes;
                 
                 // 保存ASN
                 String asntext = asnFieldSet.getText();
@@ -1134,12 +1166,30 @@ public class KLALBStateGUI3 extends XFrame {
                     }
                 }
                 
+                kck.setEnableTUN( enableTUN.isSelected());
+                
                 String tunNameText=tunDeviceName.getText().trim();
                 if(tunNameText.equals("") || tunNameText.equalsIgnoreCase("null")) {
                 	kck.setTUNName(null);
                 }else {
                 	kck.setTUNName(tunNameText);
                 }
+
+                // 保存Web API设置
+                kck.setWebUI(webApiEnabled.isSelected());
+                String webListenText = webListenSet.getText().trim();
+                if (webListenText.equals("")) {
+                    kck.setWebListen(new MultiProtocolSocketAddress("http", "0.0.0.0", 4665));
+                } else {
+                    try {
+                        kck.setWebListen(new MultiProtocolSocketAddress(webListenText));
+                    } catch (RuntimeException e) {
+                        e.printStackTrace();
+                        JOptionPane.showMessageDialog(this, UIEnv.getRsb().getString("invaildweblistenaddr"),
+                            UIEnv.getRsb().getString("warning"), JOptionPane.WARNING_MESSAGE);
+                        return;
+                    }
+                }
                 
                 // 保存TCP监听设置
                 String tcptext = tcpListeningSet.getText();
@@ -1190,7 +1240,7 @@ public class KLALBStateGUI3 extends XFrame {
                         }
                     }
                 }
-                kck.setLineTable(iaddr1);
+                newExternalEndpoints = iaddr1;
                 
                 // 保存自动连接线路表
                 String[] splt11 = connectLineTabelSet.getText().split("\n");
@@ -1243,9 +1293,9 @@ public class KLALBStateGUI3 extends XFrame {
 
                 kck.setLinkConnectionsCount(linkConnectionsCount.getSlider().getValue());
                 
-                kck.setDenyLineTableQuery(denyQuery.isSelected());
+                kck.setDenyExternalEndpointQuery(denyQuery.isSelected());
-                
+
-                kck.setDenyLineTableBroadcast(denyBroadcast.isSelected());
+                kck.setDenyExternalEndpointBroadcast(denyBroadcast.isSelected());
 
                 PerformanceStrategyItem psi=((PerformanceStrategyItem)comboPerformance.getSelectedItem());
                 if(psi!=null) {
@@ -1262,7 +1312,23 @@ public class KLALBStateGUI3 extends XFrame {
                 
                 kck.setNagleDelayTime(nagleDelayTime.getSlider().getValue()*100000L);
                 
-                kck.setLinkNagleDelayTime(linkNagleDelayTime.getSlider().getValue()*100000L);
+                kck.setLinkNagleDelayTime(linkNagleDelayTime.getSlider().getValue()*100000L);
+
+                boolean deviceNameChanged = !Objects.equals(oldDeviceName, newDeviceName);
+                boolean deviceDescriptionChanged = !Objects.equals(oldDeviceDescription, newDeviceDescription);
+                boolean externalEndpointsChanged = !Objects.equals(oldExternalEndpoints, newExternalEndpoints);
+                boolean extraRoutesChanged = !Objects.equals(oldExtraRoutes, newExtraRoutes);
+                if (deviceNameChanged || deviceDescriptionChanged || externalEndpointsChanged || extraRoutesChanged) {
+                    if (kcontroller != null) {
+                        kcontroller.publishNodeInfo(newDeviceName, newDeviceDescription, newExternalEndpoints,
+                                newExtraRoutes);
+                    } else {
+                        kck.setDeviceName(newDeviceName);
+                        kck.setDeviceDescription(newDeviceDescription);
+                        kck.setExternalEndpoints(newExternalEndpoints);
+                        kck.setExtraRoutes(newExtraRoutes);
+                    }
+                }
             }
         }
         
@@ -1361,20 +1427,22 @@ public class KLALBStateGUI3 extends XFrame {
         if (tsk5 != null) {
             tsk5.cancel();
         }
-        tsk5 = new TimerTask() {
+        tsk5 = new TimerTask() {
-            @Override
+            @Override
-            public void run() {
+            public void run() {
-                if (isVisible()) {
+                SwingUtilities.invokeLater(() -> {
-                    graph.loadNodes();
+                    if (isVisible()) {
-                    for (int i = 0; i < 100; i++) {
+                        graph.loadNodes();
-                        graph.runPhy();
+                        for (int i = 0; i < 100; i++) {
-                    }
+                            graph.runPhy();
-                    graph.repaint();
+                        }
-                    graph.revalidate();
+                        graph.repaint();
-                }
+                        graph.revalidate();
-            }
+                    }
-        };
+                });
-        t.scheduleAtFixedRate(tsk5, 1000, 1000);
+            }
+        };
+        t.scheduleAtFixedRate(tsk5, 0, 1000);
     }
 
     /**
@@ -1538,8 +1606,18 @@ public class KLALBStateGUI3 extends XFrame {
                 Long vasn = kck.getVirtualASN();
                 asnFieldSet.setText(vasn != null ? vasn.toString() : "");
                 
+                enableTUN.setSelected(kck.isEnableTUN());
+                
+                
                 String tunname=kck.getTUNName();
                 tunDeviceName.setText(tunname!=null?tunname:"");
+
+                
+                
+                // 加载Web API设置
+                webApiEnabled.setSelected(kck.isWebUI());
+                webListenSet.setText(kck.getWebListen() != null ? kck.getWebListen().toString()
+                        : "http://0.0.0.0:4665");
                 
                 // 加载TCP监听
                 MultiProtocolSocketAddress mpat = kck.getTCPListen();
@@ -1550,7 +1628,7 @@ public class KLALBStateGUI3 extends XFrame {
                 udpListeningSet.setText(mpau != null ? mpau.toString() : "");
                 
                 // 加载开放线路表
-                List<MultiProtocolSocketAddress> linet = kck.getLineTable();
+                List<MultiProtocolSocketAddress> linet = kck.getExternalEndpoints();
                 openLineTabelSet.setText(listToStr2(linet));
                 
                 // 加载自动连接线路表
@@ -1579,9 +1657,9 @@ public class KLALBStateGUI3 extends XFrame {
                 }
                 linkConnectionsCount.getSlider().setValue(conc);
                 
-                denyQuery.setSelected( kck.isDenyLineTableQuery());
+                denyQuery.setSelected( kck.isDenyExternalEndpointQuery());
 
-                denyBroadcast.setSelected( kck.isDenyLineTableBroadcast());
+                denyBroadcast.setSelected( kck.isDenyExternalEndpointBroadcast());
 
                String stategy= kck.getPerformanceStrategy();
                PerformanceStrategy pfs=PerformanceStrategy.fromDescription(stategy);
@@ -1709,9 +1787,18 @@ public class KLALBStateGUI3 extends XFrame {
     /**
      * 关闭窗口并清理资源
      */
-    public void close() {
+    public void close() {
-        setVisible(false);
+        for (int i = 0; i < tabbedPane.getTabCount(); i++) {
-        if (tsk != null) {
+            Component component = tabbedPane.getComponentAt(i);
+            if (component instanceof NodeInformationPanel) {
+                ((NodeInformationPanel) component).close();
+            }
+        }
+        if (graph != null) {
+            graph.close();
+        }
+        setVisible(false);
+        if (tsk != null) {
             tsk.cancel();
         }
         if (st != null) {
@@ -1727,4 +1814,4 @@ public class KLALBStateGUI3 extends XFrame {
         KLALBStateGUI3 kcg = new KLALBStateGUI3(new KLALBController());
         kcg.setVisible(true);
     }
-}
+}

src/org/kne/cloud/network/klalb/ui/NetworkGraphPanel.java

@@ -8,28 +8,58 @@ import java.awt.event.ActionEvent;
 import java.awt.event.ActionListener;
 import java.awt.event.MouseEvent;
 import java.awt.event.MouseListener;
+import java.io.IOException;
+import java.net.InetSocketAddress;
+import java.util.HashMap;
 import java.util.Iterator;
 import java.util.List;
-import java.util.Map;
+import java.util.Map;
-import java.util.Map.Entry;
+import java.util.Map.Entry;
-import java.util.Set;
+import java.util.Set;
+import java.util.function.BiConsumer;
 
 import javax.swing.JMenuItem;
 import javax.swing.JPopupMenu;
+import javax.swing.SwingUtilities;
 
-import org.kne.cloud.network.MultiProtocolSocketAddress;
+import org.kne.cloud.network.MultiProtocolSocketAddress;
-import org.kne.cloud.network.ipv6.IPv6Address;
+import org.kne.cloud.network.ipv6.IPv6Address;
-import org.kne.cloud.network.klalb.KLALBController;
+import org.kne.cloud.network.klalb.KLALBController;
-import org.kne.cloud.network.srv6.KLALBRoutingProtocol.LinkDirection;
+import org.kne.cloud.network.srv6.KLALBRoutingProtocol;
+import org.kne.cloud.network.srv6.KLALBRoutingProtocolAPIClient;
+import org.kne.cloud.network.srv6.KLALBRoutingProtocol.LinkDirection;
+import org.kne.cloud.network.srv6.NodeProfile;
+import org.kne.cloud.network.srv6.RouterInfoPacket;
 
 public class NetworkGraphPanel extends GraphPanel {
-	private KLALBController controller;
+	private KLALBController controller;
-	private KLALBStateGUI3 klbgui;
+	private KLALBStateGUI3 klbgui;
-	
+	private final KLALBRoutingProtocolAPIClient nodeInfoClient;
+	private final KLALBRoutingProtocol nodeInfoRoutingProtocol;
+	private final BiConsumer<IPv6Address, Integer> nodeInfoUpdateListener;
+	private final Object nodeInfoLock = new Object();
+	private final Map<IPv6Address, String> nodeNameCache = new HashMap<IPv6Address, String>();
+	private final Map<IPv6Address, Long> nodeNameCacheTimes = new HashMap<IPv6Address, Long>();
+	private final Map<IPv6Address, Long> nodeInfoRequestTimes = new HashMap<IPv6Address, Long>();
+	private final Map<IPv6Address, Long> nodeInfoRequestGenerations = new HashMap<IPv6Address, Long>();
+	private static final long NODE_INFO_REQUEST_TIMEOUT = 3000L;
+	private static final long NODE_INFO_CACHE_TTL = 60000L;
+	private long nextNodeInfoRequestGeneration;
+	private volatile boolean nodeInfoClosed;
+
 	public NetworkGraphPanel(KLALBController controller,KLALBStateGUI3 klbgui) {
 		super();
 		this.controller = controller;
 		this.klbgui=klbgui;
+		this.nodeInfoRoutingProtocol = controller.getIpv6Router().getKlalbRouteProtol();
+		this.nodeInfoClient = new KLALBRoutingProtocolAPIClient(nodeInfoRoutingProtocol);
+		this.nodeInfoUpdateListener = (address, flags) -> {
+			if ((flags & RouterInfoPacket.NODE_INFO_TINY_UPDATE_REQUIRED) != 0) {
+				SwingUtilities.invokeLater(() -> invalidateTinyNodeInfo(address));
+			}
+		};
+		nodeInfoRoutingProtocol.addNodeInfoUpdateListener(nodeInfoUpdateListener);
+		cacheLocalNodeName();
 	}
 	
 	public NetworkGraphPanel(KLALBController kc) {
@@ -153,18 +183,146 @@ public class NetworkGraphPanel extends GraphPanel {
 	}
 
 	/**
-	 * 节点标签：显示广播得知的设备名称（若有）+IP地址
+	 * 节点标签：显示 Tiny API 查询的设备名称（若有）+IP地址
 	 */
-	private String getNodeText(IPv6Address address) {
+	private String getNodeText(IPv6Address address) {
-		StringBuilder sb=new StringBuilder();
+		StringBuilder sb=new StringBuilder();
-		String dname=controller.getIpv6Router().getKlalbRouteProtol().getDeviceName(address);
+		String dname;
-		if(dname!=null)
+		synchronized (nodeInfoLock) {
-			sb.append(dname).append('\n');
+			dname = nodeNameCache.get(address);
-		sb.append(InetGraphNode.getText(address));
+		}
-		return sb.toString();
+		if(dname!=null&&!dname.isEmpty())
-	}
+			sb.append(dname).append('\n');
+		sb.append(InetGraphNode.getText(address));
+		return sb.toString();
+	}
 
-	private double nsPerPixel=1000L;
+	private void cacheLocalNodeName() {
+		IPv6Address localAddress = controller.getIpv6Router().getLocator().getAddress();
+		synchronized (nodeInfoLock) {
+			nodeNameCache.put(localAddress, controller.getIpv6Router().getDeviceName());
+			nodeNameCacheTimes.put(localAddress, System.currentTimeMillis());
+		}
+	}
+
+	private void requestNodeProfile(final IPv6Address address) {
+		final long requestTime = System.currentTimeMillis();
+		final long requestGeneration;
+		synchronized (nodeInfoLock) {
+			if (nodeInfoClosed)
+				return;
+			Long cachedAt = nodeNameCacheTimes.get(address);
+			if (nodeNameCache.containsKey(address) && cachedAt != null
+					&& requestTime - cachedAt < NODE_INFO_CACHE_TTL)
+				return;
+			nodeNameCache.remove(address);
+			nodeNameCacheTimes.remove(address);
+			Long previousRequestTime = nodeInfoRequestTimes.get(address);
+			if (previousRequestTime != null && requestTime - previousRequestTime < NODE_INFO_REQUEST_TIMEOUT)
+				return;
+			nodeInfoRequestTimes.put(address, requestTime);
+			requestGeneration = ++nextNodeInfoRequestGeneration;
+			nodeInfoRequestGenerations.put(address, requestGeneration);
+		}
+		try {
+			nodeInfoClient.requestNodeProfile(
+					new InetSocketAddress(address.toInet6Address(), KLALBRoutingProtocol.DEFAULT_PORT),
+					(profile) -> SwingUtilities.invokeLater(() -> handleNodeProfile(address, requestGeneration, profile)));
+		} catch (IOException e) {
+			synchronized (nodeInfoLock) {
+				if (nodeInfoRequestGenerations.get(address) != null
+						&& nodeInfoRequestGenerations.get(address).longValue() == requestGeneration) {
+					nodeInfoRequestTimes.remove(address);
+					nodeInfoRequestGenerations.remove(address);
+				}
+			}
+		}
+	}
+
+	private void handleNodeProfile(IPv6Address address, long requestGeneration, NodeProfile profile) {
+		if (nodeInfoClosed)
+			return;
+		boolean currentRequest;
+		boolean nodeExists = getNodes().containsKey(address);
+		String deviceName = profile == null ? "" : profile.getDeviceName();
+		if (deviceName == null || deviceName.isEmpty())
+			deviceName = "";
+		synchronized (nodeInfoLock) {
+			if (nodeInfoClosed)
+				return;
+			Long activeRequestGeneration = nodeInfoRequestGenerations.get(address);
+			currentRequest = activeRequestGeneration != null
+					&& activeRequestGeneration.longValue() == requestGeneration;
+			if (currentRequest) {
+				nodeInfoRequestTimes.remove(address);
+				nodeInfoRequestGenerations.remove(address);
+				if (nodeExists)
+					nodeNameCache.put(address, deviceName);
+				else
+					nodeNameCache.remove(address);
+				if (nodeExists)
+					nodeNameCacheTimes.put(address, System.currentTimeMillis());
+				else
+					nodeNameCacheTimes.remove(address);
+			}
+		}
+		if (currentRequest && nodeExists) {
+			((InetGraphNode) getNodes().get(address)).updateLabel();
+			repaint();
+		}
+	}
+
+	private void removeNodeInfoState(IPv6Address address) {
+		synchronized (nodeInfoLock) {
+			nodeNameCache.remove(address);
+			nodeNameCacheTimes.remove(address);
+			nodeInfoRequestTimes.remove(address);
+			nodeInfoRequestGenerations.remove(address);
+		}
+	}
+
+	private void invalidateTinyNodeInfo(IPv6Address address) {
+		synchronized (nodeInfoLock) {
+			if (nodeInfoClosed)
+				return;
+			nodeNameCache.remove(address);
+			nodeNameCacheTimes.remove(address);
+			nodeInfoRequestTimes.remove(address);
+			nodeInfoRequestGenerations.remove(address);
+		}
+		InetGraphNode node = (InetGraphNode) getNodes().get(address);
+		if (node != null) {
+			node.updateLabel();
+		}
+		repaint();
+		requestNodeProfile(address);
+	}
+
+	public void close() {
+		synchronized (nodeInfoLock) {
+			if (nodeInfoClosed)
+				return;
+			nodeInfoClosed = true;
+			nodeNameCache.clear();
+			nodeNameCacheTimes.clear();
+			nodeInfoRequestTimes.clear();
+			nodeInfoRequestGenerations.clear();
+		}
+		nodeInfoRoutingProtocol.removeNodeInfoUpdateListener(nodeInfoUpdateListener);
+		nodeInfoClient.close();
+	}
+
+	@Override
+	public void removeNotify() {
+		super.removeNotify();
+		SwingUtilities.invokeLater(() -> {
+			if (!isDisplayable() && getParent() == null) {
+				close();
+			}
+		});
+	}
+
+	private double nsPerPixel=5000L;
 	private class InetGraphEdgeGroup extends GraphEdgeGroup{
 		public InetGraphEdgeGroup(GraphNode nodeA, GraphNode nodeB) {
 			super(nodeA, nodeB);
@@ -181,6 +339,8 @@ public class NetworkGraphPanel extends GraphPanel {
 	}
 	protected void loadNodes() {
 		Map<IPv6Address, Long> addr= controller.getIpv6Router().getKlalbRouteProtol().getAddresses();
+		IPv6Address localAddress = controller.getIpv6Router().getLocator().getAddress();
+		cacheLocalNodeName();
 		Set<IPv6Address> ks=addr.keySet();
 		for (Iterator<IPv6Address> iterator = ks.iterator(); iterator.hasNext();) {
 			IPv6Address inet6Address = (IPv6Address) iterator.next();
@@ -188,12 +348,15 @@ public class NetworkGraphPanel extends GraphPanel {
 				Vector2 v2pos=super.getRandomPos();
 				getNodes().put(inet6Address,new InetGraphNode(inet6Address,Color.BLACK,v2pos.x,v2pos.y,inet6Address.equals(controller.getIpv6Router().getLocator().getAddress())));
 			}
+			if(!inet6Address.equals(localAddress))
+				requestNodeProfile(inet6Address);
 			}
 		Set<IPv6Address> kns=getNodes().keySet();
 		for (Iterator<IPv6Address> iterator = kns.iterator(); iterator.hasNext();) {
 			IPv6Address inet6Address = (IPv6Address) iterator.next();
 			if(!addr.containsKey(inet6Address)) {
 				iterator.remove();
+				removeNodeInfoState(inet6Address);
 			}else {
 				((InetGraphNode)getNodes().get(inet6Address)).updateLabel();
 			}

src/org/kne/cloud/network/klalb/ui/NodeInformationPanel.java

@@ -4,9 +4,9 @@ import java.awt.BorderLayout;
 import java.awt.Image;
 import java.awt.Toolkit;
 import java.awt.datatransfer.StringSelection;
-import java.io.IOException;
+import java.net.InetSocketAddress;
-import java.net.InetSocketAddress;
+import java.util.Collections;
-import java.util.List;
+import java.util.List;
 
 import javax.swing.Icon;
 import javax.swing.ImageIcon;
@@ -15,33 +15,42 @@ import javax.swing.JButton;
 import javax.swing.JPanel;
 import javax.swing.JPopupMenu;
 import javax.swing.JScrollPane;
-import javax.swing.JTextArea;
+import javax.swing.JTextArea;
 import javax.swing.ListSelectionModel;
 import javax.swing.event.ListSelectionEvent;
 import javax.swing.event.ListSelectionListener;
 
 import org.kne.cloud.klalb.uitool.XDefaultListModel;
 import org.kne.cloud.network.MultiProtocolSocketAddress;
-import org.kne.cloud.network.ipv6.IPv6Address;
+import org.kne.cloud.network.ipv6.IPv6Address;
-import org.kne.cloud.network.klalb.KLALBController;
+import org.kne.cloud.network.klalb.KLALBController;
-import org.kne.cloud.network.srv6.KLALBRoutingProtocol;
+import org.kne.cloud.network.klalb.NodeInfoQueryCoordinator;
-import org.kne.cloud.network.srv6.KLALBRoutingProtocolAPIClient;
+import org.kne.cloud.network.srv6.KLALBRoutingProtocol;
+import org.kne.cloud.network.srv6.KLALBRoutingProtocolAPIClient;
+import org.kne.cloud.network.srv6.NodeInfoQueryStatus;
+import org.kne.cloud.network.srv6.NodeProfile;
 import javax.swing.JTabbedPane;
 import javax.swing.JList;
 import javax.swing.JMenuItem;
 
 import java.awt.event.ActionListener;
 import java.awt.event.MouseEvent;
-import java.awt.event.MouseListener;
+import java.awt.event.MouseListener;
-import java.awt.event.ActionEvent;
+import java.awt.event.ActionEvent;
+import java.util.concurrent.atomic.AtomicLong;
 
 public class NodeInformationPanel extends JPanel {
-	private IPv6Address address;
+	private IPv6Address address;
-	private KLALBRoutingProtocolAPIClient client;
+	private KLALBRoutingProtocolAPIClient client;
+	private NodeInfoQueryCoordinator queryCoordinator;
 	private KLALBController controller;
 	private Image image;
 	
-	private XDefaultListModel<MultiProtocolSocketAddress> listModel=new XDefaultListModel<>();
+	private XDefaultListModel<MultiProtocolSocketAddress> listModel=new XDefaultListModel<>();
+	private XDefaultListModel<String> extraRoutesModel=new XDefaultListModel<>();
+	private volatile boolean active=true;
+	private final AtomicLong fullInfoGeneration=new AtomicLong();
+	private final java.util.function.BiConsumer<IPv6Address,Integer> nodeInfoUpdateListener;
 	public KLALBController getController() {
 		return controller;
 	}
@@ -73,20 +82,20 @@ public class NodeInformationPanel extends JPanel {
 		overviewArea.setWrapStyleWord(true);
 		overviewArea.setFont(UIEnv.getFont().deriveFont(14.0f));
 		overviewArea.setBorder(BorderFactory.createEmptyBorder(8, 8, 8, 8));
-		StringBuilder sb=new StringBuilder();
+		overviewArea.setText(buildOverviewText(null, null));
-		sb.append(UIEnv.getRsb().getString("ipv6addr")).append(": ").append(address.toCompressedString()).append('\n');
+		panel.add(new JScrollPane(overviewArea), BorderLayout.CENTER);
-		String dname=controller.getIpv6Router().getKlalbRouteProtol().getDeviceName(address);
+
-		if(dname!=null) {
+		JPanel extraRoutesPanel = new JPanel(new BorderLayout());
-			sb.append('\n').append(UIEnv.getRsb().getString("devicename")).append(": ").append(dname).append('\n');
+		JList<String> extraRoutesList = new JList<String>(extraRoutesModel);
-		}
+		extraRoutesList.setSelectionMode(ListSelectionModel.SINGLE_SELECTION);
-		if(address.equals(controller.getIpv6Router().getLocator().getAddress())&&controller.getConfigItem()!=null) {
+		extraRoutesList.setFont(UIEnv.getFont().deriveFont(14.0f));
-			String ddesc=controller.getConfigItem().getDeviceDescription();
+		extraRoutesPanel.add(new JScrollPane(extraRoutesList), BorderLayout.CENTER);
-			if(ddesc!=null&&!ddesc.isEmpty()) {
+		javax.swing.JLabel extraRoutesEmptyLabel=new javax.swing.JLabel(UIEnv.getRsb().getString("noextraroutes"));
-				sb.append('\n').append(UIEnv.getRsb().getString("devicedescription")).append(":\n").append(ddesc).append('\n');
+		extraRoutesEmptyLabel.setText("...");
-			}
+		extraRoutesEmptyLabel.setBorder(BorderFactory.createEmptyBorder(8, 8, 8, 8));
-		}
+		extraRoutesEmptyLabel.setHorizontalAlignment(javax.swing.SwingConstants.CENTER);
-		overviewArea.setText(sb.toString());
+		extraRoutesPanel.add(extraRoutesEmptyLabel, BorderLayout.SOUTH);
-		panel.add(new JScrollPane(overviewArea), BorderLayout.CENTER);
+		tabbedPane.addTab(UIEnv.getRsb().getString("extraroutes"), null, extraRoutesPanel, null);
 		
 		JPanel panel_1 = new JPanel();
 		panel_1.setLayout(new BorderLayout(0, 0));
@@ -167,17 +176,121 @@ public class NodeInformationPanel extends JPanel {
 		
 		panel_1.add(btnNewButton, BorderLayout.SOUTH);
 		
-		client=new KLALBRoutingProtocolAPIClient(controller.getIpv6Router().getKlalbRouteProtol());
+		KLALBRoutingProtocol routingProtocol=controller.getIpv6Router().getKlalbRouteProtol();
-		try {
+		client=new KLALBRoutingProtocolAPIClient(routingProtocol);
-			client.requestOpenLines(new InetSocketAddress( address.toInet6Address(), KLALBRoutingProtocol.DEFAULT_PORT), (result)->{
+		queryCoordinator=new NodeInfoQueryCoordinator(client);
-				listModel.clear();
+		nodeInfoUpdateListener=(updatedAddress, flags) -> {
-				for (MultiProtocolSocketAddress multiProtocolSocketAddress : result) {
+			if(active && address.equals(updatedAddress)
-					listModel.addElement(multiProtocolSocketAddress);
+					&& (flags & org.kne.cloud.network.srv6.RouterInfoPacket.NODE_INFO_FULL_UPDATE_REQUIRED) != 0) {
-				}
+				requestFullInfo(overviewArea, extraRoutesEmptyLabel);
-			});
+			}
-		} catch (IOException e) {
+		};
-			e.printStackTrace();
+		routingProtocol.addNodeInfoUpdateListener(nodeInfoUpdateListener);
+		requestFullInfo(overviewArea, extraRoutesEmptyLabel);
+	}
+
+	private void requestFullInfo(JTextArea overviewArea, javax.swing.JLabel extraRoutesEmptyLabel) {
+		final long generation=fullInfoGeneration.incrementAndGet();
+		if (controller.getIpv6Router().getLocator().getAddress().equals(address)) {
+			KLALBController.PublishedNodeInfo published=controller.getPublishedNodeInfo();
+			applyNodeInfo(overviewArea, extraRoutesEmptyLabel, published.getDeviceName(),
+					published.getDeviceDescription(), published.getExternalEndpoints(), published.getExtraRoutes());
+			return;
+		}
+		try {
+			queryCoordinator.query(new InetSocketAddress(address.toInet6Address(), KLALBRoutingProtocol.DEFAULT_PORT)).whenComplete((info, error)->{
+				if(!active || generation!=fullInfoGeneration.get()) return;
+				javax.swing.SwingUtilities.invokeLater(() -> {
+					if(!active || generation!=fullInfoGeneration.get()) return;
+					if (error != null || info == null) {
+						return;
+					}
+					applyRemoteNodeInfo(overviewArea, extraRoutesEmptyLabel, info);
+				});
+			});
+		} catch (RuntimeException e) {
+			if(active) e.printStackTrace();
+		}
+	}
+
+	private void applyNodeInfo(JTextArea overviewArea, javax.swing.JLabel extraRoutesEmptyLabel,
+			String deviceName, String deviceDescription, List<MultiProtocolSocketAddress> endpoints,
+			List<String> routes) {
+		applyProfile(overviewArea, deviceName, deviceDescription);
+		applyEndpoints(endpoints == null ? Collections.<MultiProtocolSocketAddress>emptyList() : endpoints);
+		applyRoutes(extraRoutesEmptyLabel, routes == null ? Collections.<String>emptyList() : routes);
+	}
+
+	private void applyRemoteNodeInfo(JTextArea overviewArea, javax.swing.JLabel extraRoutesEmptyLabel,
+			NodeInfoQueryCoordinator.Result info) {
+		if (info.getProfile().isReceived()) {
+			NodeProfile profile=info.getProfile().getValue().orElse(null);
+			applyProfile(overviewArea, profile == null ? null : profile.getDeviceName(),
+					profile == null ? null : profile.getDeviceDescription());
+		}
+
+		if (info.getExternalEndpoints().isReceived()) {
+			List<MultiProtocolSocketAddress> endpoints=info.getExternalEndpoints().getStatus()
+					.filter(NodeInfoQueryStatus.OK::equals).isPresent()
+					? info.getExternalEndpoints().getValue().orElse(Collections.<MultiProtocolSocketAddress>emptyList())
+					: Collections.<MultiProtocolSocketAddress>emptyList();
+			applyEndpoints(endpoints);
+		}
+
+		if (info.getExtraRoutes().isReceived()) {
+			List<String> routes=info.getExtraRoutes().getStatus().filter(NodeInfoQueryStatus.OK::equals).isPresent()
+					? info.getExtraRoutes().getValue().orElse(Collections.<String>emptyList())
+					: Collections.<String>emptyList();
+			applyRoutes(extraRoutesEmptyLabel, routes);
+		}
+}
+
+	private void applyProfile(JTextArea overviewArea, String deviceName, String deviceDescription) {
+	overviewArea.setText(buildOverviewText(deviceName,
+				deviceDescription == null || deviceDescription.isEmpty() ? null : deviceDescription));
+}
+
+	private void applyEndpoints(List<MultiProtocolSocketAddress> endpoints) {
+		listModel.clear();
+		if (endpoints != null) for (MultiProtocolSocketAddress item : endpoints) listModel.addElement(item);
+	}
+
+	private void applyRoutes(javax.swing.JLabel extraRoutesEmptyLabel, List<String> routes) {
+		extraRoutesModel.clear();
+		if (routes != null) for (String route : routes) extraRoutesModel.addElement(route);
+		extraRoutesEmptyLabel.setText(UIEnv.getRsb().getString("noextraroutes"));
+		extraRoutesEmptyLabel.setVisible(extraRoutesModel.isEmpty());
+	}
+
+	public synchronized void close() {
+		if (!active)
+			return;
+		active=false;
+		fullInfoGeneration.incrementAndGet();
+		KLALBRoutingProtocol routingProtocol=controller.getIpv6Router().getKlalbRouteProtol();
+		routingProtocol.removeNodeInfoUpdateListener(nodeInfoUpdateListener);
+		if(client!=null) {
+			client.close();
+			client=null;
+		}
+	}
+
+	@Override
+	public void removeNotify() {
+		close();
+		super.removeNotify();
+	}
+
+	private String buildOverviewText(String dname,String ddesc) {
+		StringBuilder sb=new StringBuilder();
+		sb.append(UIEnv.getRsb().getString("ipv6addr")).append(": ").append(address.toCompressedString()).append('\n');
+		if(dname!=null&&!dname.isEmpty()) {
+			sb.append('\n').append(UIEnv.getRsb().getString("devicename")).append(": ").append(dname).append('\n');
 		}
+		if(ddesc!=null&&!ddesc.isEmpty()) {
+			sb.append('\n').append(UIEnv.getRsb().getString("devicedescription")).append(":\n").append(ddesc).append('\n');
+		}
+		return sb.toString();
 	}
 	public Icon getIcon() {
 		return new ImageIcon(image);

src/org/kne/cloud/network/srv6/ExternalEndpointsResult.java

@@ -0,0 +1,49 @@
+package org.kne.cloud.network.srv6;
+
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+import java.util.Objects;
+
+import org.kne.cloud.network.MultiProtocolSocketAddress;
+
+public final class ExternalEndpointsResult {
+	private final List<MultiProtocolSocketAddress> externalEndpoints;
+	private final NodeInfoQueryStatus status;
+
+	public ExternalEndpointsResult(List<MultiProtocolSocketAddress> externalEndpoints, NodeInfoQueryStatus status) {
+		this.externalEndpoints = Collections.unmodifiableList(new ArrayList<MultiProtocolSocketAddress>(
+				externalEndpoints == null ? Collections.<MultiProtocolSocketAddress>emptyList() : externalEndpoints));
+		this.status = status;
+	}
+
+	public List<MultiProtocolSocketAddress> getExternalEndpoints() {
+		return externalEndpoints;
+	}
+
+	public NodeInfoQueryStatus getStatus() {
+		return status;
+	}
+
+	@Override
+	public int hashCode() {
+		return Objects.hash(externalEndpoints, status);
+	}
+
+	@Override
+	public boolean equals(Object obj) {
+		if (this == obj) {
+			return true;
+		}
+		if (!(obj instanceof ExternalEndpointsResult)) {
+			return false;
+		}
+		ExternalEndpointsResult other = (ExternalEndpointsResult) obj;
+		return Objects.equals(externalEndpoints, other.externalEndpoints) && status == other.status;
+	}
+
+	@Override
+	public String toString() {
+		return "ExternalEndpointsResult [externalEndpoints=" + externalEndpoints + ", status=" + status + "]";
+	}
+}

src/org/kne/cloud/network/srv6/ExtraRoutesResult.java

@@ -0,0 +1,47 @@
+package org.kne.cloud.network.srv6;
+
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+import java.util.Objects;
+
+public final class ExtraRoutesResult {
+	private final List<String> extraRoutes;
+	private final NodeInfoQueryStatus status;
+
+	public ExtraRoutesResult(List<String> extraRoutes, NodeInfoQueryStatus status) {
+		this.extraRoutes = Collections.unmodifiableList(new ArrayList<String>(
+				extraRoutes == null ? Collections.<String>emptyList() : extraRoutes));
+		this.status = status;
+	}
+
+	public List<String> getExtraRoutes() {
+		return extraRoutes;
+	}
+
+	public NodeInfoQueryStatus getStatus() {
+		return status;
+	}
+
+	@Override
+	public int hashCode() {
+		return Objects.hash(extraRoutes, status);
+	}
+
+	@Override
+	public boolean equals(Object obj) {
+		if (this == obj) {
+			return true;
+		}
+		if (!(obj instanceof ExtraRoutesResult)) {
+			return false;
+		}
+		ExtraRoutesResult other = (ExtraRoutesResult) obj;
+		return Objects.equals(extraRoutes, other.extraRoutes) && status == other.status;
+	}
+
+	@Override
+	public String toString() {
+		return "ExtraRoutesResult [extraRoutes=" + extraRoutes + ", status=" + status + "]";
+	}
+}

src/org/kne/cloud/network/srv6/JsonDataPacket.java

@@ -33,7 +33,8 @@ public class JsonDataPacket extends KLALBRoutingProtocolPacket implements Serial
 
 	private String data;
 
-	private static final int HEADER_LENGTH=3;
+	private static final int HEADER_LENGTH=3;
+	private static final int MAX_JSON_PAYLOAD_LENGTH=65535-HEADER_LENGTH;
 
 	private static Gson gson;
 	static{
@@ -73,9 +74,12 @@ public class JsonDataPacket extends KLALBRoutingProtocolPacket implements Serial
 	
 	
 	@Override
-	public void writeToChannel(WritableByteChannel dto) throws IOException {
+	public void writeToChannel(WritableByteChannel dto) throws IOException {
-		byte[]bta=data.getBytes(Charset.forName("UTF-8"));
+		byte[]bta=data.getBytes(Charset.forName("UTF-8"));
-		getHeader().putChar(1,(char) bta.length);
+		if(bta.length>MAX_JSON_PAYLOAD_LENGTH) {
+			throw new IOException("JSON payload exceeds " + MAX_JSON_PAYLOAD_LENGTH + " bytes");
+		}
+		getHeader().putChar(1,(char) bta.length);
 		super.writeToChannel(dto);
 		dto.write(ByteBuffer.wrap(bta));
 	}

src/org/kne/cloud/network/srv6/KLALBRoutingProtocol.java

@@ -13,15 +13,18 @@ import java.nio.channels.Channels;
 import java.util.ArrayList;
 import java.util.HashMap;
 import java.util.HashSet;
-import java.util.Iterator;
+import java.util.Iterator;
-import java.util.List;
+import java.util.LinkedHashSet;
+import java.util.List;
 import java.util.Map;
 import java.util.Map.Entry;
 import java.util.Objects;
 import java.util.Set;
-import java.util.concurrent.ConcurrentHashMap;
+import java.util.concurrent.ConcurrentHashMap;
-import java.util.concurrent.CopyOnWriteArraySet;
+import java.util.concurrent.CopyOnWriteArraySet;
-import java.util.concurrent.locks.ReentrantLock;
+import java.util.concurrent.atomic.AtomicInteger;
+import java.util.concurrent.atomic.AtomicLong;
+import java.util.concurrent.locks.ReentrantLock;
 import java.util.function.BiConsumer;
 
 import org.kne.cloud.network.ipv6.IPv6Address;
@@ -41,8 +44,16 @@ public class KLALBRoutingProtocol extends Thread{
 
 	private static final boolean debug = false;
 
-	private RouterInfo selfRouterInfo;
+	private RouterInfo selfRouterInfo;
-	private Map<IPv6Address, RouterInfo> netmap=new ConcurrentHashMap<>();
+	private Map<IPv6Address, RouterInfo> netmap=new ConcurrentHashMap<>();
+	private final AtomicLong selfCreateTime = new AtomicLong();
+	private final AtomicInteger pendingNodeInfoUpdateFlags = new AtomicInteger();
+	private static final int NODE_INFO_UPDATE_REPLAY_WINDOW_SIZE = 64;
+	private final Map<IPv6Address, LinkedHashSet<Long>> seenNodeInfoUpdates = new HashMap<>();
+
+	public Map<IPv6Address, RouterInfo> getNetmap() {
+		return netmap;
+	}
 	
 	
 	private volatile Map<IPv6Address,Long>addresses;
@@ -80,15 +91,67 @@ public class KLALBRoutingProtocol extends Thread{
 		private KLALBVirtualRawSocket ds = null;
 		private ReentrantLock sendLock=new ReentrantLock();
 		
-	private Set<BiConsumer<SocketAddress,JsonDataPacket>>receivers=new CopyOnWriteArraySet<BiConsumer<SocketAddress,JsonDataPacket>>();
+	private Set<BiConsumer<SocketAddress,JsonDataPacket>>receivers=new CopyOnWriteArraySet<BiConsumer<SocketAddress,JsonDataPacket>>();
+	private Set<BiConsumer<IPv6Address,Integer>> nodeInfoUpdateListeners = new CopyOnWriteArraySet<BiConsumer<IPv6Address,Integer>>();
 	
 	public void addReceiver(BiConsumer<SocketAddress,JsonDataPacket> rec) {
 		receivers.add(rec);
 	}
 	
-	public void removeReceiver(BiConsumer<SocketAddress,JsonDataPacket> rec) {
+	public void removeReceiver(BiConsumer<SocketAddress,JsonDataPacket> rec) {
-		receivers.remove(rec);
+		receivers.remove(rec);
-	}
+	}
+
+	public void addNodeInfoUpdateListener(BiConsumer<IPv6Address,Integer> listener) {
+		nodeInfoUpdateListeners.add(listener);
+	}
+
+	public void removeNodeInfoUpdateListener(BiConsumer<IPv6Address,Integer> listener) {
+		nodeInfoUpdateListeners.remove(listener);
+	}
+
+	public void announceNodeInfoUpdate(int flags) {
+		int validFlags = flags & (RouterInfoPacket.NODE_INFO_TINY_UPDATE_REQUIRED
+				| RouterInfoPacket.NODE_INFO_FULL_UPDATE_REQUIRED);
+		if(validFlags != 0) {
+			pendingNodeInfoUpdateFlags.getAndUpdate(old -> old | validFlags);
+		}
+	}
+
+	private boolean markNodeInfoUpdateSeen(IPv6Address origin, long createTime) {
+		synchronized(seenNodeInfoUpdates) {
+			LinkedHashSet<Long> createTimes = seenNodeInfoUpdates.get(origin);
+			if(createTimes == null) {
+				createTimes = new LinkedHashSet<>();
+				seenNodeInfoUpdates.put(origin, createTimes);
+			}
+			if(!createTimes.add(createTime)) {
+				return false;
+			}
+			while(createTimes.size() > NODE_INFO_UPDATE_REPLAY_WINDOW_SIZE) {
+				createTimes.remove(createTimes.iterator().next());
+			}
+			return true;
+		}
+	}
+
+	private void removeNodeInfoUpdateWindow(IPv6Address origin) {
+		synchronized(seenNodeInfoUpdates) {
+			seenNodeInfoUpdates.remove(origin);
+		}
+	}
+
+	private void notifyNodeInfoUpdate(IPv6Address origin, int flags) {
+		for(BiConsumer<IPv6Address,Integer> listener : nodeInfoUpdateListeners) {
+			try {
+				listener.accept(origin, flags);
+			} catch(Throwable e) {
+				if(debug) {
+					e.printStackTrace();
+				}
+			}
+		}
+	}
 	
 	@Override
 	public void run() {
@@ -99,11 +162,22 @@ public class KLALBRoutingProtocol extends Thread{
 			new Thread(()->{
 				Thread.currentThread().setName("KLALB路由协议发送线程");
 					
-				while(true) {
+				while(true) {
-				try {
+				try {
-					selfRouterInfo = getSelfRouterInfo();
+					selfRouterInfo = getSelfRouterInfo();
-					RouterInfo oslf=netmap.put(selfRouterInfo.getLocator().getAddress(), selfRouterInfo);
+					RouterInfo oslf=netmap.put(selfRouterInfo.getLocator().getAddress(), selfRouterInfo);
-					noticeUpdate();
+					noticeUpdate();
+					int nodeInfoUpdateFlags = pendingNodeInfoUpdateFlags.getAndSet(0);
+					if(nodeInfoUpdateFlags != 0) {
+						RouterInfoPacket updatePacket = new RouterInfoPacket(getSelfRouterInfo(), true, -1);
+						updatePacket.setNodeInfoUpdateFlags(nodeInfoUpdateFlags);
+						try {
+							floodPacket(null, updatePacket);
+						} catch(IOException e) {
+							pendingNodeInfoUpdateFlags.getAndUpdate(old -> old | nodeInfoUpdateFlags);
+							e.printStackTrace();
+						}
+					}
 					/*if(oslf==null||(!selfRouterInfo.equals(oslf))) {
 					long cur=System.nanoTime();
 					if(cur-floodTimer2>5000000000L) {
@@ -143,10 +217,12 @@ public class KLALBRoutingProtocol extends Thread{
 						if(val.getAsn()==router.getASN()) {
 							timeout=2000000000L;
 						}
-						if(val.checkTimeOut(timeout)) {
+						if(val.checkTimeOut(timeout)) {
-							iterator.remove();
+							if(netmap.remove(type.getKey(), val)) {
-							noticeUpdate();
+								removeNodeInfoUpdateWindow(type.getKey());
-						}
+								noticeUpdate();
+							}
+						}
 						/*List<NeighborInfo> ads=val.getNeighborAddresses();
 						for (Iterator<NeighborInfo> iterator2 = ads.iterator(); iterator2.hasNext();) {
 							Inet6Address address=iterator2.next().getLocator().getAddress();
@@ -212,7 +288,7 @@ public class KLALBRoutingProtocol extends Thread{
 			ds.receive(dgp);
 			//System.out.println(Arrays.toString( Arrays.copyOf( dgp.getData(),dgp.getLength())));
 			ByteArrayInputStream bi=new ByteArrayInputStream(dgp.getData(),0,dgp.getLength());
-			KLALBRoutingProtocolPacket kp=KLALBRoutingProtocolPacket.readKLALBPacketFromChannel(Channels.newChannel(bi));
+			KLALBRoutingProtocolPacket kp=KLALBRoutingProtocolPacket.readKLALBPacketFromChannel(Channels.newChannel(bi), dgp.getLength());
 			
 			switch(kp.getType()) {
 			case KLALBRoutingProtocolPacket.RINFO_REQ:
@@ -230,28 +306,34 @@ public class KLALBRoutingProtocol extends Thread{
 				break;
 			case KLALBRoutingProtocolPacket.RINFO:
 				
-				RouterInfoPacket rifp=(RouterInfoPacket) kp;
+				RouterInfoPacket rifp=(RouterInfoPacket) kp;
-				RouterInfo rif=rifp.getRinfo();
+				RouterInfo rif=rifp.getRinfo();
-				RouterInfo oldrif=netmap.get(rif.getLocator().getAddress());
+				RouterInfo oldrif=netmap.get(rif.getLocator().getAddress());
+				IPv6Address origin = rif.getLocator().getAddress();
+				int nodeInfoUpdateFlags = rifp.getNodeInfoUpdateFlags();
+				boolean newNodeInfoUpdate = nodeInfoUpdateFlags != 0
+						&& markNodeInfoUpdateSeen(origin, rif.getCreateTime());
 
 				if(debug)
 					System.out.println(rif);
-				if(oldrif==null||oldrif.getCreateTime()<rif.getCreateTime()) {
+				boolean topologyUpdated = oldrif==null||oldrif.getCreateTime()<rif.getCreateTime();
+				if(topologyUpdated) {
 					if(debug)
 						System.out.println("update RouterInfo");
 				netmap.put(rif.getLocator().getAddress(), rif);
 				noticeUpdate();
-				if(rifp.isFlood()) {
+				}else {
-					floodPacket( dgp.getSocketAddress(), rifp);
-				
-				}
-				
-				}else {
 
 					if(debug)
-						System.out.println("dispose RouterInfo");
+						System.out.println("dispose RouterInfo");
-				}
+				}
-				computeShortestPathIfUpdated();
+				if(newNodeInfoUpdate) {
+					notifyNodeInfoUpdate(origin, nodeInfoUpdateFlags);
+				}
+				if(rifp.isFlood() && (topologyUpdated || newNodeInfoUpdate)) {
+					floodPacket(dgp.getSocketAddress(), rifp);
+				}
+				computeShortestPathIfUpdated();
 				break;
 			case KLALBRoutingProtocolPacket.JSON_DATA:
 				JsonDataPacket data=(JsonDataPacket) kp;
@@ -310,10 +392,11 @@ public class KLALBRoutingProtocol extends Thread{
 		sendLock.lock();
 		try {
 		ds.send(dgpx);
-		}catch(BindException e) {
+		}catch(BindException e) {
-			e.printStackTrace();
+			e.printStackTrace();
-			System.err.println("Cannot assign:"+dest);
+			System.err.println("Cannot assign:"+dest);
-		}finally {
+			throw e;
+		}finally {
 			sendLock.unlock();
 		}
 	}
@@ -544,8 +627,9 @@ public class KLALBRoutingProtocol extends Thread{
 	private RouterInfo getSelfRouterInfo() {
 		List<IPv6NetworkLink>links=router.getLinkTabel();
 		Object[] nls=links.toArray();
-		RouterInfo ri=new RouterInfo(System.currentTimeMillis(),router.getLocator(),router.getASN());
+		long currentTime = System.currentTimeMillis();
-		ri.setDeviceName(router.getDeviceName());
+		long createTime = selfCreateTime.updateAndGet(previous -> Math.max(currentTime, previous + 1));
+		RouterInfo ri=new RouterInfo(createTime,router.getLocator(),router.getASN());
 		for(int i=0;i<nls.length;i++) {
 			IPv6NetworkLink nl=(IPv6NetworkLink) nls[i];
 			if((!nl.isLoopBack())&&nl.isUp()) {
@@ -600,14 +684,8 @@ public class KLALBRoutingProtocol extends Thread{
 	/**
 	 * 查询某地址广播的设备名称（未知返回null）
 	 */
-	public String getDeviceName(IPv6Address address) {
+	public String getDeviceName(IPv6Address address) {
-		RouterInfo ri=netmap.get(address);
+		return null;
-		if(ri!=null) {
-			String dn=ri.getDeviceName();
-			if(dn!=null&&!dn.isEmpty())
-				return dn;
-		}
-		return null;
 	}
 	public Map<IPv6Address, List<LinkDirection>> getPaths() {
 		return paths;

src/org/kne/cloud/network/srv6/KLALBRoutingProtocolAPIClient.java

@@ -1,103 +1,208 @@
-package org.kne.cloud.network.srv6;
+package org.kne.cloud.network.srv6;
-
+
-import java.io.IOException;
+import java.io.IOException;
-import java.lang.ref.Cleaner;
+import java.lang.ref.Cleaner;
-import java.net.InetSocketAddress;
+import java.net.InetSocketAddress;
-import java.net.SocketAddress;
+import java.net.InetAddress;
-import java.util.ArrayList;
+import java.net.SocketAddress;
-import java.util.List;
+import java.util.ArrayList;
-import java.util.UUID;
+import java.util.List;
-import java.util.function.BiConsumer;
+import java.util.UUID;
-import java.util.function.Consumer;
+import java.util.concurrent.atomic.AtomicBoolean;
-
+import java.util.function.BiConsumer;
-import org.kne.cloud.network.MultiProtocolSocketAddress;
+import java.util.function.Consumer;
-import org.kne.cloud.network.congestion.NOCongestionAlgorithm;
+
-import org.kne.cloud.network.congestion.SendPacketSlidingWindow;
+import org.kne.cloud.network.MultiProtocolSocketAddress;
-import org.kne.opencl64.Releaser;
+import org.kne.cloud.network.congestion.NOCongestionAlgorithm;
-
+import org.kne.cloud.network.congestion.SendPacketSlidingWindow;
-public class KLALBRoutingProtocolAPIClient {
+import org.kne.cloud.network.klalb.SendItem;
-	private KLALBRoutingProtocol routingProtocol;
+import org.kne.opencl64.Releaser;
-	private SendPacketSlidingWindow<UUID, JsonDataPacket> window = new SendPacketSlidingWindow<UUID, JsonDataPacket>(
+
-			new NOCongestionAlgorithm(3000000000L), 1024 * 1024);
+public class KLALBRoutingProtocolAPIClient {
-
+	private KLALBRoutingProtocol routingProtocol;
-	private static final Cleaner clr = Cleaner.create();
+	private SendPacketSlidingWindow<UUID, JsonDataPacket> window = new SendPacketSlidingWindow<UUID, JsonDataPacket>(
-
+			new NOCongestionAlgorithm(3000000000L), 1024 * 1024);
-	private BiConsumer<SocketAddress, JsonDataPacket> rec = (addr, data) -> {
+
-		KLALBRoutingProtocolJsonData dataobj = data.getDecodedData();
+	private static final Cleaner clr = Cleaner.create();
-		InetSocketAddress addrs = (InetSocketAddress) addr;
+
-		UUID ruid = dataobj.getUuid();
+	private BiConsumer<SocketAddress, JsonDataPacket> rec = (addr, data) -> {
-		JsonDataPacket relate = null;
+		KLALBRoutingProtocolJsonData dataobj = data.getDecodedData();
-		//System.out.println(ruid + " " + window.getSendmap());
+		UUID ruid = dataobj.getUuid();
-		switch (dataobj.getType()) {
+		switch (dataobj.getType()) {
-		case KLALBRoutingProtocolJsonData.OPEN_LINES_RESP:
+		case KLALBRoutingProtocolJsonData.NODE_PROFILE_RESP:
-
+			PendingRequest profileRequest = acknowledgeResponse(ruid,
-			if ((relate = window.ack(ruid)) != null) {
+					KLALBRoutingProtocolJsonData.NODE_PROFILE_REQ, addr);
-				List<?> connects = (List<?>) dataobj.getData();
+			if (profileRequest != null) {
-				List<MultiProtocolSocketAddress> connectsm = new ArrayList<MultiProtocolSocketAddress>(connects.size());
+				((Consumer<NodeProfile>) profileRequest.callback)
-				for (Object open : connects) {
+						.accept(new NodeProfile(dataobj.getDeviceName(), dataobj.getDeviceDescription()));
-					if (open instanceof MultiProtocolSocketAddress) {
+			}
-						connectsm.add((MultiProtocolSocketAddress) open);
+			break;
-					} else {
+		case KLALBRoutingProtocolJsonData.NODE_EXTERNAL_ENDPOINTS_RESP:
-						connectsm.add(new MultiProtocolSocketAddress((String) open));
+			PendingRequest endpointsRequest = acknowledgeResponse(ruid,
-
+					KLALBRoutingProtocolJsonData.NODE_EXTERNAL_ENDPOINTS_REQ, addr);
-					}
+			if (endpointsRequest != null) {
-				}
+				((Consumer<ExternalEndpointsResult>) endpointsRequest.callback).accept(
-				((Consumer<List<MultiProtocolSocketAddress>>) relate.getUserCallback()).accept(connectsm);
+						new ExternalEndpointsResult(decodeExternalEndpoints(dataobj.getData()), dataobj.getStatus()));
-			}
+			}
-			break;
+			break;
-		}
+		case KLALBRoutingProtocolJsonData.NODE_EXTRA_ROUTES_RESP:
-
+			PendingRequest routesRequest = acknowledgeResponse(ruid,
-	};
+					KLALBRoutingProtocolJsonData.NODE_EXTRA_ROUTES_REQ, addr);
-
+			if (routesRequest != null) {
-	public KLALBRoutingProtocolAPIClient(KLALBRoutingProtocol routingProtocol) {
+				((Consumer<ExtraRoutesResult>) routesRequest.callback).accept(
-		this.routingProtocol = routingProtocol;
+						new ExtraRoutesResult(decodeExtraRoutes(dataobj.getData()), dataobj.getStatus()));
-		routingProtocol.addReceiver(rec);
+			}
-		this.releaser = new KLALBRoutingProtocolAPIClientReleaser(this.routingProtocol, rec, window);
+			break;
-		clr.register(this, releaser);
+		}
-	}
+	};
-
+
-	public void requestOpenLines(SocketAddress addr, Consumer<List<MultiProtocolSocketAddress>> callback)
+	private PendingRequest acknowledgeResponse(UUID uuid, String expectedRequestType, SocketAddress sourceAddress) {
-			throws IOException {
+		SendItem<JsonDataPacket> pending = window.getSendmap().get(uuid);
-		UUID suid = UUID.randomUUID();
+		if (pending == null) {
-		KLALBRoutingProtocolJsonData json = new KLALBRoutingProtocolJsonData(
+			return null;
-				KLALBRoutingProtocolJsonData.OPEN_LINES_REQ, suid, null);
+		}
-		JsonDataPacket packet = new JsonDataPacket(json);
+		KLALBRoutingProtocolJsonData request = pending.getPacket().getDecodedData();
-		packet.setUserCallback(callback);
+		if (request == null || !expectedRequestType.equals(request.getType())) {
-		window.put(suid, packet);
+			return null;
-		routingProtocol.sendJsonPacketToAddress(packet, addr);
+		}
-
+		Object callback = pending.getPacket().getUserCallback();
-	}
+		if (!(callback instanceof PendingRequest)) {
-
+			return null;
-	public KLALBRoutingProtocol getRoutingProtocol() {
+		}
-		return routingProtocol;
+		PendingRequest pendingRequest = (PendingRequest) callback;
-	}
+		if (!expectedRequestType.equals(pendingRequest.expectedRequestType)
-
+				|| !sameDestination(pendingRequest.expectedDestination, sourceAddress)) {
-	private KLALBRoutingProtocolAPIClientReleaser releaser;
+			return null;
-
+		}
-	public void close() {
+		return window.ack(uuid) == null ? null : pendingRequest;
-		releaser.run();
+	}
-	}
+
-
+	private static boolean sameDestination(SocketAddress expected, SocketAddress actual) {
-	public boolean isClosed() {
+		if (expected instanceof InetSocketAddress && actual instanceof InetSocketAddress) {
-		return releaser.isReleased();
+			InetSocketAddress expectedInet = (InetSocketAddress) expected;
-	}
+			InetSocketAddress actualInet = (InetSocketAddress) actual;
-}
+			if (expectedInet.getPort() != actualInet.getPort()) return false;
-
+			InetAddress expectedAddress = expectedInet.getAddress();
-class KLALBRoutingProtocolAPIClientReleaser extends Releaser<BiConsumer<SocketAddress, JsonDataPacket>> {
+			InetAddress actualAddress = actualInet.getAddress();
-
+			if (expectedAddress != null && actualAddress != null) return expectedAddress.equals(actualAddress);
-	private KLALBRoutingProtocol routingProtocol;
+			if (expectedAddress == null && actualAddress == null) {
-	private SendPacketSlidingWindow<UUID, JsonDataPacket> window;
+				return expectedInet.getHostString().equalsIgnoreCase(actualInet.getHostString());
-
+			}
-	public KLALBRoutingProtocolAPIClientReleaser(KLALBRoutingProtocol routingProtocol,
+			return false;
-			BiConsumer<SocketAddress, JsonDataPacket> resource, SendPacketSlidingWindow<UUID, JsonDataPacket> window) {
+		}
-		super(resource);
+		return expected != null && expected.equals(actual);
-		this.routingProtocol = routingProtocol;
+	}
-		this.window = window;
+
-	}
+	private List<MultiProtocolSocketAddress> decodeExternalEndpoints(Object data) {
-
+		if (!(data instanceof List<?>)) {
-	@Override
+			return new ArrayList<MultiProtocolSocketAddress>();
-	protected void release(BiConsumer<SocketAddress, JsonDataPacket> resource) {
+		}
-		window.close();
+		List<?> encoded = (List<?>) data;
-		routingProtocol.removeReceiver(resource);
+		List<MultiProtocolSocketAddress> endpoints = new ArrayList<MultiProtocolSocketAddress>(encoded.size());
-	}
+		for (Object value : encoded) {
-}
+			if (value instanceof MultiProtocolSocketAddress) {
+				endpoints.add((MultiProtocolSocketAddress) value);
+			} else if (value instanceof String) {
+				try {
+					endpoints.add(new MultiProtocolSocketAddress((String) value));
+				} catch (RuntimeException ignored) {
+					// Ignore malformed entries while preserving the rest of the response.
+				}
+			}
+		}
+		return endpoints;
+	}
+
+	private List<String> decodeExtraRoutes(Object data) {
+		if (!(data instanceof List<?>)) {
+			return new ArrayList<String>();
+		}
+		List<?> encoded = (List<?>) data;
+		List<String> routes = new ArrayList<String>(encoded.size());
+		for (Object value : encoded) {
+			if (value instanceof String) {
+				routes.add((String) value);
+			}
+		}
+		return routes;
+	}
+
+	public KLALBRoutingProtocolAPIClient(KLALBRoutingProtocol routingProtocol) {
+		this.routingProtocol = routingProtocol;
+		routingProtocol.addReceiver(rec);
+		this.releaser = new KLALBRoutingProtocolAPIClientReleaser(this.routingProtocol, rec, window);
+		clr.register(this, releaser);
+	}
+
+	public void requestNodeProfile(SocketAddress addr, Consumer<NodeProfile> callback) throws IOException {
+		sendNodeInfoRequest(KLALBRoutingProtocolJsonData.NODE_PROFILE_REQ, addr, callback);
+	}
+
+	public void requestExternalEndpoints(SocketAddress addr, Consumer<ExternalEndpointsResult> callback)
+			throws IOException {
+		sendNodeInfoRequest(KLALBRoutingProtocolJsonData.NODE_EXTERNAL_ENDPOINTS_REQ, addr, callback);
+	}
+
+	public void requestExtraRoutes(SocketAddress addr, Consumer<ExtraRoutesResult> callback) throws IOException {
+		sendNodeInfoRequest(KLALBRoutingProtocolJsonData.NODE_EXTRA_ROUTES_REQ, addr, callback);
+	}
+
+	private void sendNodeInfoRequest(String type, SocketAddress addr, Object callback) throws IOException {
+		UUID suid = UUID.randomUUID();
+		KLALBRoutingProtocolJsonData json = new KLALBRoutingProtocolJsonData(type, suid, null);
+		JsonDataPacket packet = new JsonDataPacket(json);
+		packet.setUserCallback(new PendingRequest(addr, type, callback));
+		synchronized (this) {
+			if (closed.get() || releaser.isReleased()) throw new IOException("Node info client is closed");
+			window.put(suid, packet);
+			routingProtocol.sendJsonPacketToAddress(packet, addr);
+		}
+	}
+
+	public KLALBRoutingProtocol getRoutingProtocol() {
+		return routingProtocol;
+	}
+
+	private KLALBRoutingProtocolAPIClientReleaser releaser;
+
+	public synchronized void close() {
+		if (closed.compareAndSet(false, true)) releaser.run();
+	}
+
+	public boolean isClosed() {
+		return closed.get() || releaser.isReleased();
+	}
+
+	private static final class PendingRequest {
+		private final SocketAddress expectedDestination;
+		private final String expectedRequestType;
+		private final Object callback;
+
+		private PendingRequest(SocketAddress expectedDestination, String expectedRequestType, Object callback) {
+			this.expectedDestination = expectedDestination;
+			this.expectedRequestType = expectedRequestType;
+			this.callback = callback;
+		}
+	}
+
+	private final AtomicBoolean closed = new AtomicBoolean();
+}
+
+class KLALBRoutingProtocolAPIClientReleaser extends Releaser<BiConsumer<SocketAddress, JsonDataPacket>> {
+
+	private KLALBRoutingProtocol routingProtocol;
+	private SendPacketSlidingWindow<UUID, JsonDataPacket> window;
+
+	public KLALBRoutingProtocolAPIClientReleaser(KLALBRoutingProtocol routingProtocol,
+			BiConsumer<SocketAddress, JsonDataPacket> resource, SendPacketSlidingWindow<UUID, JsonDataPacket> window) {
+		super(resource);
+		this.routingProtocol = routingProtocol;
+		this.window = window;
+	}
+
+	@Override
+	protected void release(BiConsumer<SocketAddress, JsonDataPacket> resource) {
+		window.close();
+		routingProtocol.removeReceiver(resource);
+	}
+}

src/org/kne/cloud/network/srv6/KLALBRoutingProtocolAPIServer.java

@@ -1,78 +1,98 @@
-package org.kne.cloud.network.srv6;
+package org.kne.cloud.network.srv6;
-
+
-import java.io.IOException;
+import java.io.IOException;
-import java.lang.ref.Cleaner;
+import java.lang.ref.Cleaner;
-import java.net.InetSocketAddress;
+import java.net.SocketAddress;
-import java.net.SocketAddress;
+import java.util.ArrayList;
-import java.util.function.BiConsumer;
+import java.util.function.BiConsumer;
-
+
-import org.kne.cloud.network.klalb.KLALBController;
+import org.kne.cloud.network.klalb.KLALBController;
-import org.kne.opencl64.Releaser;
+import org.kne.opencl64.Releaser;
-
+
-public class KLALBRoutingProtocolAPIServer {
+public class KLALBRoutingProtocolAPIServer {
-	private KLALBController controller;
+	private KLALBController controller;
-	private KLALBRoutingProtocol routingProtocol;
+	private KLALBRoutingProtocol routingProtocol;
-	
+
-
+	private static final Cleaner clr = Cleaner.create();
-	private static final Cleaner clr=Cleaner.create();
+
-	
+	private BiConsumer<SocketAddress, JsonDataPacket> rec = (addr, data) -> {
-	private BiConsumer<SocketAddress, JsonDataPacket> rec=(addr,data)->{
+		try {
-		try {
+			KLALBRoutingProtocolJsonData dataobj = data.getDecodedData();
-		KLALBRoutingProtocolJsonData dataobj= data.getDecodedData();
+			switch (dataobj.getType()) {
-		InetSocketAddress addrs=(InetSocketAddress) addr;
+			case KLALBRoutingProtocolJsonData.NODE_PROFILE_REQ:
-		switch(dataobj.getType()){
+				KLALBController.PublishedNodeInfo profilePublished = controller.getPublishedNodeInfo();
-		case KLALBRoutingProtocolJsonData.OPEN_LINES_REQ:
+				KLALBRoutingProtocolJsonData profile = new KLALBRoutingProtocolJsonData(
-			if(controller.getConfigItem()==null||(!controller.getConfigItem().isDenyLineTableQuery())) {
+						KLALBRoutingProtocolJsonData.NODE_PROFILE_RESP, dataobj.getUuid(), null);
-			KLALBRoutingProtocolJsonData json=new KLALBRoutingProtocolJsonData(KLALBRoutingProtocolJsonData.OPEN_LINES_RESP,dataobj.getUuid(),controller.getSelflineTable());
+				profile.setDeviceName(profilePublished.getDeviceName());
-				routingProtocol.sendJsonPacketToAddress(new JsonDataPacket(json),addr);
+				profile.setDeviceDescription(profilePublished.getDeviceDescription());
-			}
+				profile.setStatus(NodeInfoQueryStatus.OK);
-			break;
+				routingProtocol.sendJsonPacketToAddress(new JsonDataPacket(profile), addr);
-		}
+				break;
-		} catch (IOException e) {
+			case KLALBRoutingProtocolJsonData.NODE_EXTERNAL_ENDPOINTS_REQ:
-			e.printStackTrace();
+				boolean denyEndpoints = controller.getConfigItem() != null
-		}
+						&& controller.getConfigItem().isDenyExternalEndpointQuery();
-	};
+				KLALBController.PublishedNodeInfo endpointsPublished = controller.getPublishedNodeInfo();
-
+				KLALBRoutingProtocolJsonData endpoints = new KLALBRoutingProtocolJsonData(
-	public KLALBRoutingProtocolAPIServer(KLALBRoutingProtocol routingProtocol,KLALBController controller) {
+						KLALBRoutingProtocolJsonData.NODE_EXTERNAL_ENDPOINTS_RESP, dataobj.getUuid(),
-		this.controller=controller;
+						denyEndpoints ? new ArrayList<org.kne.cloud.network.MultiProtocolSocketAddress>()
-		this.routingProtocol=routingProtocol;
+								: new ArrayList<org.kne.cloud.network.MultiProtocolSocketAddress>(
-		routingProtocol.addReceiver(rec);
+										endpointsPublished.getExternalEndpoints()));
-		this.releaser=new KLALBRoutingProtocolAPIServerReleaser(this.routingProtocol,rec);
+				endpoints.setStatus(denyEndpoints ? NodeInfoQueryStatus.DENIED : NodeInfoQueryStatus.OK);
-		clr.register(this, releaser);
+				routingProtocol.sendJsonPacketToAddress(new JsonDataPacket(endpoints), addr);
-	}
+				break;
-
+			case KLALBRoutingProtocolJsonData.NODE_EXTRA_ROUTES_REQ:
-	public KLALBController getController() {
+				KLALBController.PublishedNodeInfo routesPublished = controller.getPublishedNodeInfo();
-		return controller;
+				KLALBRoutingProtocolJsonData routes = new KLALBRoutingProtocolJsonData(
-	}
+						KLALBRoutingProtocolJsonData.NODE_EXTRA_ROUTES_RESP, dataobj.getUuid(),
-
+						new ArrayList<String>(routesPublished.getExtraRoutes()));
-	public KLALBRoutingProtocol getRoutingProtocol() {
+				routes.setStatus(NodeInfoQueryStatus.OK);
-		return routingProtocol;
+				routingProtocol.sendJsonPacketToAddress(new JsonDataPacket(routes), addr);
-	}
+				break;
-	
+			}
-	
+		} catch (IOException e) {
-private KLALBRoutingProtocolAPIServerReleaser releaser;
+			e.printStackTrace();
-	
+		}
-	public void close() {
+	};
-		releaser.run();
+
-	}
+	public KLALBRoutingProtocolAPIServer(KLALBRoutingProtocol routingProtocol, KLALBController controller) {
-	
+		this.controller = controller;
-	
+		this.routingProtocol = routingProtocol;
-	public boolean isClosed() {
+		routingProtocol.addReceiver(rec);
-		return releaser.isReleased();
+		this.releaser = new KLALBRoutingProtocolAPIServerReleaser(this.routingProtocol, rec);
-	}
+		clr.register(this, releaser);
-	
+	}
-}
+
-class KLALBRoutingProtocolAPIServerReleaser extends Releaser<BiConsumer<SocketAddress, JsonDataPacket>>{
+	public KLALBController getController() {
-
+		return controller;
-	private KLALBRoutingProtocol routingProtocol;
+	}
-
+
-	public KLALBRoutingProtocolAPIServerReleaser(KLALBRoutingProtocol routingProtocol,BiConsumer<SocketAddress, JsonDataPacket> resource) {
+	public KLALBRoutingProtocol getRoutingProtocol() {
-		super(resource);
+		return routingProtocol;
-		this.routingProtocol=routingProtocol;
+	}
-	}
+
-
+	private KLALBRoutingProtocolAPIServerReleaser releaser;
-	@Override
+
-	protected void release(BiConsumer<SocketAddress, JsonDataPacket> resource) {
+	public void close() {
-		routingProtocol.removeReceiver(resource);
+		releaser.run();
-	}
+	}
-}
+
+	public boolean isClosed() {
+		return releaser.isReleased();
+	}
+}
+
+class KLALBRoutingProtocolAPIServerReleaser extends Releaser<BiConsumer<SocketAddress, JsonDataPacket>> {
+
+	private KLALBRoutingProtocol routingProtocol;
+
+	public KLALBRoutingProtocolAPIServerReleaser(KLALBRoutingProtocol routingProtocol,
+			BiConsumer<SocketAddress, JsonDataPacket> resource) {
+		super(resource);
+		this.routingProtocol = routingProtocol;
+	}
+
+	@Override
+	protected void release(BiConsumer<SocketAddress, JsonDataPacket> resource) {
+		routingProtocol.removeReceiver(resource);
+	}
+}

src/org/kne/cloud/network/srv6/KLALBRoutingProtocolJsonData.java

@@ -1,66 +1,89 @@
-package org.kne.cloud.network.srv6;
+package org.kne.cloud.network.srv6;
-
+
-import java.util.UUID;
+import java.util.Objects;
-
+import java.util.UUID;
-public class KLALBRoutingProtocolJsonData {
+
-	public static final String OPEN_LINES_REQ="openlinesreq";
+public class KLALBRoutingProtocolJsonData {
-	public static final String OPEN_LINES_RESP="openlinesresp";
+	public static final String NODE_PROFILE_REQ = "nodeprofilereq";
-	private String type;
+	public static final String NODE_PROFILE_RESP = "nodeprofileresp";
-	private UUID uuid;
+	public static final String NODE_EXTERNAL_ENDPOINTS_REQ = "nodeexternalendpointsreq";
-	private Object data;
+	public static final String NODE_EXTERNAL_ENDPOINTS_RESP = "nodeexternalendpointsresp";
-	public String getType() {
+	public static final String NODE_EXTRA_ROUTES_REQ = "nodeextraroutesreq";
-		return type;
+	public static final String NODE_EXTRA_ROUTES_RESP = "nodeextraroutesresp";
-	}
+
-	public Object getData() {
+	private String type;
-		return data;
+	private UUID uuid;
-	}
+	private Object data;
-	public UUID getUuid() {
+	private String deviceName;
-		return uuid;
+	private String deviceDescription;
-	}
+	private NodeInfoQueryStatus status;
-	@Override
+
-	public int hashCode() {
+	public KLALBRoutingProtocolJsonData(String type, UUID uuid, Object data) {
-		final int prime = 31;
+		this.type = type;
-		int result = 1;
+		this.uuid = uuid;
-		result = prime * result + ((data == null) ? 0 : data.hashCode());
+		this.data = data;
-		result = prime * result + ((type == null) ? 0 : type.hashCode());
+	}
-		result = prime * result + ((uuid == null) ? 0 : uuid.hashCode());
+
-		return result;
+	public String getType() {
-	}
+		return type;
-	@Override
+	}
-	public boolean equals(Object obj) {
+
-		if (this == obj)
+	public UUID getUuid() {
-			return true;
+		return uuid;
-		if (obj == null)
+	}
-			return false;
+
-		if (getClass() != obj.getClass())
+	public Object getData() {
-			return false;
+		return data;
-		KLALBRoutingProtocolJsonData other = (KLALBRoutingProtocolJsonData) obj;
+	}
-		if (data == null) {
+
-			if (other.data != null)
+	public String getDeviceName() {
-				return false;
+		return deviceName;
-		} else if (!data.equals(other.data))
+	}
-			return false;
+
-		if (type == null) {
+	public void setDeviceName(String deviceName) {
-			if (other.type != null)
+		this.deviceName = deviceName;
-				return false;
+	}
-		} else if (!type.equals(other.type))
+
-			return false;
+	public String getDeviceDescription() {
-		if (uuid == null) {
+		return deviceDescription;
-			if (other.uuid != null)
+	}
-				return false;
+
-		} else if (!uuid.equals(other.uuid))
+	public void setDeviceDescription(String deviceDescription) {
-			return false;
+		this.deviceDescription = deviceDescription;
-		return true;
+	}
-	}
+
-	public KLALBRoutingProtocolJsonData(String type, UUID uuid, Object data) {
+	public NodeInfoQueryStatus getStatus() {
-		super();
+		return status;
-		this.type = type;
+	}
-		this.uuid = uuid;
+
-		this.data = data;
+	public void setStatus(NodeInfoQueryStatus status) {
-	}
+		this.status = status;
-	@Override
+	}
-	public String toString() {
+
-		return "KLALBRoutingProtocolJsonData [type=" + type + ", uuid=" + uuid + ", data=" + data + "]";
+	@Override
-	}
+	public int hashCode() {
-	
+		return Objects.hash(type, uuid, data, deviceName, deviceDescription, status);
-}
+	}
+
+	@Override
+	public boolean equals(Object obj) {
+		if (this == obj) {
+			return true;
+		}
+		if (!(obj instanceof KLALBRoutingProtocolJsonData)) {
+			return false;
+		}
+		KLALBRoutingProtocolJsonData other = (KLALBRoutingProtocolJsonData) obj;
+		return Objects.equals(type, other.type) && Objects.equals(uuid, other.uuid)
+				&& Objects.equals(data, other.data) && Objects.equals(deviceName, other.deviceName)
+				&& Objects.equals(deviceDescription, other.deviceDescription)
+				&& Objects.equals(status, other.status);
+	}
+
+	@Override
+	public String toString() {
+		return "KLALBRoutingProtocolJsonData [type=" + type + ", uuid=" + uuid + ", data=" + data
+				+ ", deviceName=" + deviceName + ", deviceDescription=" + deviceDescription + ", status=" + status
+				+ "]";
+	}
+}

src/org/kne/cloud/network/srv6/KLALBRoutingProtocolPacket.java

@@ -95,8 +95,12 @@ public abstract class KLALBRoutingProtocolPacket extends NetworkPacket {
 		return readKLALBPacketFromChannel(Channels.newChannel(in));
 	}
 	
-	public static KLALBRoutingProtocolPacket readKLALBPacketFromChannel(ReadableByteChannel in) throws IOException {
+	public static KLALBRoutingProtocolPacket readKLALBPacketFromChannel(ReadableByteChannel in) throws IOException {
-		while(true) {
+		return readKLALBPacketFromChannel(in, -1);
+	}
+
+	public static KLALBRoutingProtocolPacket readKLALBPacketFromChannel(ReadableByteChannel in, long packetLength) throws IOException {
+		while(true) {
 		ByteBuffer bb=NetworkPacket.bufferAllocator.allocate(40);
 		bb.limit(1);
 		 while(bb.hasRemaining()){
@@ -109,18 +113,20 @@ public abstract class KLALBRoutingProtocolPacket extends NetworkPacket {
 				
 				KLALBRoutingProtocolPacket klp;
 				switch(type) {
-				case RINFO_REQ:
+				case RINFO_REQ:
-					klp=new RouterInfoRequestPacket(bb);
+					klp=new RouterInfoRequestPacket(bb);
-					klp.readFromChannel(in);
+					if(packetLength < 0) klp.readFromChannel(in);
-					return klp;
+					else klp.readFromChannel(in, packetLength);
-				case RINFO:
+					return klp;
-					klp=new RouterInfoPacket(bb);
+				case RINFO:
-					klp.readFromChannel(in);
+					klp=new RouterInfoPacket(bb);
-					return klp;
+					if(packetLength < 0) klp.readFromChannel(in);
-				case JSON_DATA:
+					else klp.readFromChannel(in, packetLength);
-					klp=new JsonDataPacket(bb);
+					return klp;
-					klp.readFromChannel(in);
+				case JSON_DATA:
-					return klp;
+					klp=new JsonDataPacket(bb);
+					klp.readFromChannel(in);
+					return klp;
 				}
 				//throw new StreamCorruptedException("unknown package type:"+type);
 				System.err.println("ignore unknown KLALBRoutingProtocolPacket type:"+type);

src/org/kne/cloud/network/srv6/NodeInfoQueryStatus.java

@@ -0,0 +1,6 @@
+package org.kne.cloud.network.srv6;
+
+public enum NodeInfoQueryStatus {
+	OK,
+	DENIED
+}

src/org/kne/cloud/network/srv6/NodeProfile.java

@@ -0,0 +1,44 @@
+package org.kne.cloud.network.srv6;
+
+import java.util.Objects;
+
+public final class NodeProfile {
+	private final String deviceName;
+	private final String deviceDescription;
+
+	public NodeProfile(String deviceName, String deviceDescription) {
+		this.deviceName = deviceName;
+		this.deviceDescription = deviceDescription;
+	}
+
+	public String getDeviceName() {
+		return deviceName;
+	}
+
+	public String getDeviceDescription() {
+		return deviceDescription;
+	}
+
+	@Override
+	public int hashCode() {
+		return Objects.hash(deviceName, deviceDescription);
+	}
+
+	@Override
+	public boolean equals(Object obj) {
+		if (this == obj) {
+			return true;
+		}
+		if (!(obj instanceof NodeProfile)) {
+			return false;
+		}
+		NodeProfile other = (NodeProfile) obj;
+		return Objects.equals(deviceName, other.deviceName)
+				&& Objects.equals(deviceDescription, other.deviceDescription);
+	}
+
+	@Override
+	public String toString() {
+		return "NodeProfile [deviceName=" + deviceName + ", deviceDescription=" + deviceDescription + "]";
+	}
+}

src/org/kne/cloud/network/srv6/RouterInfo.java

@@ -60,15 +60,15 @@ public class RouterInfo implements Serializable{
 		return Objects.equals(locator, other.locator) && Objects.equals(neighborAddresses, other.neighborAddresses);
 	}
 	private List<NeighborInfo> neighborAddresses=new ArrayList<>();
-	private String deviceName=""; // 设备名称（广播时携带，描述不广播）
+	private long createTime;
-	private long createTime;
 	
 	
 	public long getCreateTime() {
 		return createTime;
 	}
-	private static final long INFO_UPDATETIME=10000000000L;
+	private static final long INFO_UPDATETIME=10000000000L;
-	private static final long INFO_TIMEOUT=60000000000L;
+	private static final long INFO_TIMEOUT=60000000000L;
+	private static final int MAX_NEIGHBOR_COUNT = 512;
 	private long putTime=System.nanoTime();
 	public boolean checkUpdateTime() {
 		return System.nanoTime()-putTime>INFO_UPDATETIME;
@@ -91,31 +91,28 @@ public class RouterInfo implements Serializable{
 		return neighborAddresses;
 	}
 	
-	public String getDeviceName() {
+	public RouterInfo( long createTime,IPv6AddressGroup locator,long asn) {
-		return deviceName;
-	}
-	
-	public void setDeviceName(String deviceName) {
-		this.deviceName = deviceName;
-	}
-	
-	public RouterInfo( long createTime,IPv6AddressGroup locator,long asn) {
 		this.createTime = createTime;
 		this.locator=locator;
 		this.asn=asn;
 	}
 
-	public RouterInfo() {
+	public RouterInfo() {
-	}
+	}
-	public void writeToStream(DataOutputStream out) throws IOException {
+	public void writeToStream(DataOutputStream out) throws IOException {
-		locator.writeToStream(out);
+		int neighborCount = neighborAddresses == null ? -1 : neighborAddresses.size();
-		out.writeLong(asn);
+		if(neighborCount<0 || neighborCount>MAX_NEIGHBOR_COUNT) {
-		out.writeLong(createTime);
+			throw new IOException("Invalid neighbor count: " + neighborCount);
-		out.writeInt(neighborAddresses.size());
+		}
+		locator.writeToStream(out);
+		out.writeLong(asn);
+		out.writeLong(createTime);
+		out.writeInt(neighborCount);
 		for(	NeighborInfo neighborInfo :neighborAddresses) {
 			neighborInfo.writeToStream(out);
 		}
-		out.writeUTF(deviceName==null?"":deviceName);
+		// Keep the legacy UTF slot so older RINFO decoders stay aligned.
+		out.writeUTF("");
 	}
 	
 	protected void writeToChannel(WritableByteChannel dto) throws IOException {
@@ -127,16 +124,20 @@ public class RouterInfo implements Serializable{
 	public void readFromStream(DataInputStream in) throws IOException {
 		locator=new IPv6AddressGroup(in);
 		asn=in.readLong();
-		createTime=in.readLong();
+		createTime=in.readLong();
-		int size=in.readInt();
+		int size=in.readInt();
-		neighborAddresses=new ArrayList<>(size);
+		if(size<0 || size>MAX_NEIGHBOR_COUNT) {
+			throw new IOException("Invalid neighbor count: " + size);
+		}
+		neighborAddresses=new ArrayList<>(size);
 		for (int i = 0; i < size; i++) {
 			NeighborInfo nif=new NeighborInfo();
 			nif.readFromStream(in);
 			neighborAddresses.add(nif);
 			
 		}
-		deviceName=in.readUTF();
+		// Consume the legacy device-name slot; names are no longer broadcast here.
+		in.readUTF();
 	}
 	
 }

src/org/kne/cloud/network/srv6/RouterInfoPacket.java

@@ -1,7 +1,8 @@
 package org.kne.cloud.network.srv6;
 
 import java.io.DataInputStream;
-import java.io.DataOutputStream;
+import java.io.DataOutputStream;
+import java.io.ByteArrayInputStream;
 import java.io.Externalizable;
 import java.io.IOException;
 import java.io.ObjectInput;
@@ -22,7 +23,12 @@ import java.util.Set;
 import org.kne.cloud.network.NetworkPacket;
 import org.kne.cloud.network.ipv6.IPv6AddressGroup;
 
-public class RouterInfoPacket extends KLALBRoutingProtocolPacket implements Serializable{
+public class RouterInfoPacket extends KLALBRoutingProtocolPacket implements Serializable{
+	public static final int NODE_INFO_TINY_UPDATE_REQUIRED = 1;
+	public static final int NODE_INFO_FULL_UPDATE_REQUIRED = 2;
+	private static final int NODE_INFO_UPDATE_FLAGS_MASK = NODE_INFO_TINY_UPDATE_REQUIRED
+			| NODE_INFO_FULL_UPDATE_REQUIRED;
+	private static final int NODE_INFO_UPDATE_MAGIC = 0xA5;
 
 	public RouterInfoPacket(RouterInfo routerInfo, boolean flood,long asn) {
 		super(RINFO);
@@ -34,7 +40,8 @@ public class RouterInfoPacket extends KLALBRoutingProtocolPacket implements Seri
 		super(bb);
 	}
 	
-	private RouterInfo rinfo;
+	private RouterInfo rinfo;
+	private transient int nodeInfoUpdateFlags;
 	
 	public boolean isFlood() {
 		return (getHeader().get(1)&1)==1;
@@ -44,9 +51,17 @@ public class RouterInfoPacket extends KLALBRoutingProtocolPacket implements Seri
 		return getHeader().getLong(2);
 	}
 	
-	public RouterInfo getRinfo() {
+	public RouterInfo getRinfo() {
-		return rinfo;
+		return rinfo;
-	}
+	}
+
+	public int getNodeInfoUpdateFlags() {
+		return nodeInfoUpdateFlags;
+	}
+
+	public void setNodeInfoUpdateFlags(int flags) {
+		nodeInfoUpdateFlags = flags & NODE_INFO_UPDATE_FLAGS_MASK;
+	}
 	@Override
 	protected long getHeaderSize() {
 		return super.getHeaderSize()+9;
@@ -65,15 +80,46 @@ public class RouterInfoPacket extends KLALBRoutingProtocolPacket implements Seri
 	
 
 	@Override
-	public void writeToChannel(WritableByteChannel dto) throws IOException {
+	public void writeToChannel(WritableByteChannel dto) throws IOException {
-		super.writeToChannel(dto);
+		super.writeToChannel(dto);
-		rinfo.writeToChannel(dto);
+		rinfo.writeToChannel(dto);
-	}
+		int flags = nodeInfoUpdateFlags & NODE_INFO_UPDATE_FLAGS_MASK;
+		if(flags != 0) {
+			ByteBuffer extension = ByteBuffer.wrap(new byte[] {(byte) NODE_INFO_UPDATE_MAGIC, (byte) flags});
+			while(extension.hasRemaining()) {
+				dto.write(extension);
+			}
+		}
+	}
 	@Override
 	public void readFromChannel(ReadableByteChannel din, long length) throws IOException {
-		super.readFromChannel(din, length);
+		super.readFromChannel(din, length);
-		rinfo=new RouterInfo();
+		rinfo=new RouterInfo();
-		rinfo.readFromChannel(din, length);
+		if(length < 0) {
+			rinfo.readFromChannel(din, length);
+			nodeInfoUpdateFlags = 0;
+			return;
+		}
+		long payloadLength = length - getHeaderSize();
+		if(payloadLength < 0 || payloadLength > Integer.MAX_VALUE) {
+			throw new IOException("Invalid RINFO packet length: " + length);
+		}
+		byte[] payload = new byte[(int) payloadLength];
+		ByteBuffer payloadBuffer = ByteBuffer.wrap(payload);
+		while(payloadBuffer.hasRemaining()) {
+			if(din.read(payloadBuffer) == -1) {
+				throw new java.io.EOFException();
+			}
+		}
+		ByteArrayInputStream payloadInput = new ByteArrayInputStream(payload);
+		rinfo.readFromStream(new DataInputStream(payloadInput));
+		nodeInfoUpdateFlags = 0;
+		int marker = payloadInput.read();
+		int flags = payloadInput.read();
+		int trailing = payloadInput.read();
+		if(marker == NODE_INFO_UPDATE_MAGIC && flags >= 0 && trailing == -1) {
+			nodeInfoUpdateFlags = flags & NODE_INFO_UPDATE_FLAGS_MASK;
+		}
 	}
 
 }