Proxelar: vanhemmat versiot ja versiohistoria

### Added

• Add a customizable TUI color theme system：a `--theme` flag / `config.toml` `theme` key selects `default`/`dark`/`light`, `system` (auto-detects terminal/OS appearance via `theme_dark`/`theme_light`), a bundled preset (`cyberdream`, `cyberdream-light`, `cyberdream-muted`, `rose-pine`, `rose-pine-dawn`, `tokyonight`, `tokyonight-day`, `dracula`, `alucard`, `catppuccin-mocha`, `catppuccin-latte`), or a custom theme file under `CA_DIR/themes/<name>.toml`. Custom and bundled theme files only need to override the colors they change; a `[colors]` table in `config.toml` also allows one-off overrides with no theme file. JSON highlighting uses the selected theme. Unknown theme names, unknown color keys, and invalid colors warn and fall back to the default palette rather than failing to start. `Theme::default()` reproduces every previously hardcoded ANSI color, so existing setups are unaffected until a theme is chosen. ([#190](https://github.com/emanuele-em/proxelar/pull/190) by @byt3m4st3r)
• Honor `$XDG_CONFIG_HOME` when resolving the directory holding the CA certificate/key, addons, and other proxelar state. When the variable is set to a non-empty absolute path, state lives in `$XDG_CONFIG_HOME/proxelar`; otherwise `~/.proxelar` is used as before. `--ca-dir` still overrides both. If `$XDG_CONFIG_HOME` points somewhere new while an existing `~/.proxelar` is present, proxelar prints a warning naming both directories, since state is not migrated. ([#177](https://github.com/emanuele-em/proxelar/pull/177) by @byt3m4st3r)

### Fixed

• Serialize the TUI theme system's appearance-detection tests on a shared guard so parallel test runs no longer race on the process-wide `COLORFGBG` environment variable. ([#190](https://github.com/emanuele-em/proxelar/pull/190) by @byt3m4st3r)

• Install Git in the container builder for BoringSSL patch setup, test container builds in pull requests, and allow independent container release recovery. ([#188](https://github.com/emanuele-em/proxelar/pull/188) by @emanuele-em)

• Build Linux ARM64 release artifacts on a native runner with a supported libclang, validate release builds in workflow pull requests, and allow release recovery against an existing tag. ([#186](https://github.com/emanuele-em/proxelar/pull/186) by @emanuele-em)

### Added

• Add an optional `justfile` task runner for the documented build, test, lint, packaging, and coverage commands. ([#176](https://github.com/emanuele-em/proxelar/pull/176) by @byt3m4st3r)
• Add a native transport-neutral HTTP core with custom HTTP/1, direct HTTP/2, and ordered byte-safe headers across capture, replay, REST, and Lua. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)
• Replace captured request and response header maps with `HeaderBlock`, exposing ordered iteration, case-insensitive lookup, duplicate-value lookup, append, replacement, and removal. The native HTTP/1 parser preserves interleaved duplicates, original field-name casing, and non-UTF-8 values, addressing #170. HTTP/2 retains duplicate-value order, but its `h2` adapter does not guarantee the original global wire order across different field names. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)
• Carry ordered headers through intercept editing, TUI and web views, Lua hooks, replay, and session export. REST responses represent headers as ordered entries with text or base64 values, allowing arbitrary header bytes to survive JSON serialization without replacement characters. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)
• Enable HTTP/3 by default in official CLI artifacts for reverse and WireGuard interception, including RFC 9220 WebSockets. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)
• Add regression coverage for CONNECT backpressure in both directions, independent tunnel half-closes, cancellation and error propagation, Lua request-trailer preservation, and the exact SOCKS5 wire encoding of domain, IPv4, and IPv6 destinations. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)
• Extend protocol tests to cover plaintext and TLS interception, pinned upstream destinations, HTTP/1 reverse WebSocket upgrades, Lua WebSocket edits and failures, HTTP/3 stream resets and driver shutdown, connection reuse after rejected requests, malformed binary content, and UDP/DNS listener lifecycle and timeout capture. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)

### Changed

• Remove Hyper from the `proxyapi` data path, public API, and production dependencies; it remains transitively in the CLI through Axum and as a dev-only protocol test dependency. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)
• Bump native sessions to format v2 with ordered byte-safe header lists; v1 files are rejected explicitly instead of being decoded with lossy header semantics. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)
• Compare header-value iterators directly when reconciling captured headers with hook edits, avoiding temporary header-value vectors while preserving duplicate-value order. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)
• Simplify the protocol adapters by replacing the custom ready-frame stream with `futures_util::stream::iter`, making the infallible outbound connector constructor return `Self`, and removing obsolete dead-code allowances from the active HTTP/3 certificate path. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)

### Fixed

• Open a changelog attribution pull request instead of pushing directly to protected main, attribute only entries introduced by the source merge, and dispatch CI for the generated branch. ([#183](https://github.com/emanuele-em/proxelar/pull/183) by @emanuele-em)

• Cancel pending HTTP/2 handlers when the client resets its stream, releasing intercepted requests and upstream work. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)
• Frame HTTP/1 `205 Reset Content` responses with `Content-Length：0` so keep-alive clients complete the response and can reuse the connection. ([#182](https://github.com/emanuele-em/proxelar/pull/182) by @emanuele-em)