Require sing-box to survive a dedicated startup stability window before Podkop Plus continues startup. This is generic runtime dependency validation, not special handling for rule-set, list, URL, or specific sing-box FATAL text.
When startup fails, Podkop Plus rolls back runtime/DNS state and the UI service action is closed through a short post-command wait instead of staying in the starting state until the full action timeout.
Keep the diagnostic restart action hidden during start/stop transitions, even if runtime probes briefly report Podkop Plus as running before the transition finishes. This prevents the restart button from flickering during failed startup.
Delay stable sing-box package version failures until after package index refresh, preserve non-none VLESS encryption through import/cache/manual paths, and avoid false-positive FakeIP/firewall diagnostics.
Add targeted backend and frontend regression coverage for the accepted cases.
Replace user-facing direct routing action with bypass, add priority nft bypass handling, real DNS for bypass domains, migration cleanup, and the related runtime/frontend tests.
Also includes the previously pending runtime log hygiene cleanup and regression coverage that was already in the working tree.
Replace the legacy shell-owned runtime with modular ucode implementations for configuration, service lifecycle, subscriptions, diagnostics, DNS, nftables, routing, providers, updates, and sing-box generation.
Keep thin OpenWrt entrypoints and add regression and package-contract coverage for the new runtime ownership model.
ushan0v