﻿Version: 1.0.16
Platform: Windows x64; built on Windows with .NET 10
Checked against: naiyou_android/docs/masque-v2rayn-task.md (2026-10-18)
Panel ECH formats: Trojan, AnyTLS, MASQUE and VLESS TLS (including XHTTP).
VMess base64 JSON: no new ECH convention; 1.0.15's premature extension removed.
REALITY: ECH ignored on import/config generation and omitted from exported links.
AnyTLS stays on sing-box (tls.ech); Xray protocols use tlsSettings.echConfigList.
MASQUE: Xray 26.10.17; Basic auth; H2/H3; no mux; optional ECH; H3-only udphop; TUN via sing-box SOCKS to Xray.
UDPHop uses Xray's default 30-second interval.
Self-signed: certificate/pinned SHA256 required as previously agreed; no allowInsecure=true.
Tests: 87 passed (share formats, subscription persistence, empty ECH equivalence, TLS/XHTTP/REALITY, MASQUE/TUN and real-core config validation).
Pending: live TCP/DNS/UDP and negative authentication/path tests. Config tests do not prove live ECH negotiation.
