From a5aea9438ac0dbc923a1ff44f1d5a6b035f16a70 Mon Sep 17 00:00:00 2001
From: wangjia <809946525@qq.com>
Date: Mon, 6 Jul 2026 16:37:42 +0800
Subject: [PATCH] =?UTF-8?q?feat(client):=20=E6=8E=A7=E5=88=B6=E9=9D=A2?=
 =?UTF-8?q?=E5=9F=BA=E5=9D=80=E9=BB=98=E8=AE=A4=20https://api.yanmeiai.com?=
 =?UTF-8?q?=20+=20=E7=A7=BB=E9=99=A4=20Android=20=E6=98=8E=E6=96=87?=
 =?UTF-8?q?=E5=BC=80=E5=85=B3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

TDD: 先加守护测试(断言 kApiBaseUrl 走 https 且不含硬编码 IP),确认失败后
再改 api_config.dart 默认值 + 去掉 AndroidManifest 的 usesCleartextTraffic。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013nMthbVEmQquxBRKb9Fj8u
---
 client/android/app/src/main/AndroidManifest.xml |  3 +--
 client/lib/services/api_config.dart             |  5 +++--
 client/test/unit/api_config_test.dart           | 11 +++++++++++
 3 files changed, 15 insertions(+), 4 deletions(-)
 create mode 100644 client/test/unit/api_config_test.dart

diff --git a/client/android/app/src/main/AndroidManifest.xml b/client/android/app/src/main/AndroidManifest.xml
index 42cc843..a52e295 100644
--- a/client/android/app/src/main/AndroidManifest.xml
+++ b/client/android/app/src/main/AndroidManifest.xml
@@ -26,8 +26,7 @@
     <application
         android:label="穿山甲"
         android:name="${applicationName}"
-        android:icon="@mipmap/ic_launcher"
-        android:usesCleartextTraffic="true"><!-- 控制面 API 当前为 http(联调),Android 9+ 默认禁明文,需开;生产改 https 后可去掉 -->
+        android:icon="@mipmap/ic_launcher">
 
         <!-- 主 Activity -->
         <activity
diff --git a/client/lib/services/api_config.dart b/client/lib/services/api_config.dart
index 5fc33b8..c292d97 100644
--- a/client/lib/services/api_config.dart
+++ b/client/lib/services/api_config.dart
@@ -2,8 +2,9 @@
 //
 // 历史上各 service/provider 各自重复声明 _kApiUrl；统一收敛到这里,
 // 由 --dart-define=PANGOLIN_API_URL 注入。
-// TODO(联调临时): 默认值改成测试节点,避免 release 构建漏传 dart-define;发版前改回 localhost 或正式控制面域名。
+// 控制面 API 基址(单源,全端 providers 共用)。默认走 CF Tunnel 的 https 域名;
+// 本地联调可 --dart-define=PANGOLIN_API_URL=http://127.0.0.1:8080 覆盖。
 const String kApiBaseUrl = String.fromEnvironment(
   'PANGOLIN_API_URL',
-  defaultValue: 'http://103.119.13.48:8080',
+  defaultValue: 'https://api.yanmeiai.com',
 );
diff --git a/client/test/unit/api_config_test.dart b/client/test/unit/api_config_test.dart
new file mode 100644
index 0000000..4886f35
--- /dev/null
+++ b/client/test/unit/api_config_test.dart
@@ -0,0 +1,11 @@
+import 'package:flutter_test/flutter_test.dart';
+import 'package:pangolin_vpn/services/api_config.dart';
+
+void main() {
+  test('控制面基址默认走 https(禁止回退明文 http)', () {
+    expect(kApiBaseUrl, startsWith('https://'),
+        reason: '控制面已迁 CF Tunnel(api.yanmeiai.com);默认值不得是明文 http');
+    expect(kApiBaseUrl, isNot(contains('103.119.13.48')),
+        reason: '不得再硬编码节点 IP 作控制面基址');
+  });
+}