fix: improve VLESS link compatibility and add Reality repair script

Only encode SNI dots, keep pbk/sid raw, copy links via API, prefer xray keygen, and add repair-reality.sh for server-side fixes.

Co-authored-by: Cursor <cursoragent@cursor.com>

panel/links.py

@@ -21,14 +21,12 @@ def load_env() -> dict[str, str]:
     return env
 
 
-def _qs(value: str) -> str:
-    """URL-encode query / userinfo values for share links."""
-    # quote() leaves unreserved chars like '.' unencoded; some clients (v2rayNG)
-    # misparsed sni=www.microsoft.com — force dots encoded for compatibility.
-    return quote(value, safe="").replace(".", "%2E")
+def _sni_qs(value: str) -> str:
+    """Encode dots in SNI; some clients misparsed sni=www.microsoft.com."""
+    return value.replace(".", "%2E")
 
 
-def build_links(node: dict, env: dict | None = None) -> dict[str, str]:
+def build_links(node: dict, env: dict | None = None) -> dict[str, str | dict[str, str]]:
     env = env or load_env()
     vps_ip = env["VPS_IP"]
     domain = env["DOMAIN"]
@@ -38,14 +36,29 @@ def build_links(node: dict, env: dict | None = None) -> dict[str, str]:
     name = quote(node["name"])
     port = hy2_port(node, list_nodes())
 
+    # Parameter order follows Xray VLESS share-link convention; pbk/sid stay raw.
     vless = (
         f"vless://{node['uuid']}@{vps_ip}:443"
-        f"?encryption=none&flow=xtls-rprx-vision&security=reality"
-        f"&sni={_qs(reality_sni)}&fp=chrome&pbk={_qs(public_key)}&sid={_qs(short_id)}"
-        f"&spx=%2F&type=tcp#{name}"
+        f"?type=tcp&security=reality&encryption=none&flow=xtls-rprx-vision"
+        f"&sni={_sni_qs(reality_sni)}&fp=chrome&pbk={public_key}&sid={short_id}"
+        f"&spx=%2F#{name}"
     )
     hy2 = (
-        f"hy2://{_qs(node['hy2_password'])}@{domain}:{port}"
-        f"?sni={_qs(domain)}#{name}-Hy2"
+        f"hy2://{quote(node['hy2_password'], safe='')}@{domain}:{port}"
+        f"?sni={_sni_qs(domain)}#{name}-Hy2"
     )
-    return {"vless": vless, "hy2": hy2}
+    return {
+        "vless": vless,
+        "hy2": hy2,
+        "meta": {
+            "address": vps_ip,
+            "port": "443",
+            "uuid": node["uuid"],
+            "sni": reality_sni,
+            "pbk": public_key,
+            "sid": short_id,
+            "spx": "/",
+            "fp": "chrome",
+            "flow": "xtls-rprx-vision",
+        },
+    }