Method AddSubscription

app.go:2346–2440

AddSubscription stores a new subscription. allowInsecure=true must be passed explicitly for http:// URLs after the user has confirmed the warning. The consent is persisted on the Subscription record so RefreshSubscription doesn't need to re-prompt.

(name, subURL string, allowInsecure bool, source string)

// warning. The consent is persisted on the Subscription record so
// RefreshSubscription doesn't need to re-prompt.
func (a *App) AddSubscription(name, subURL string, allowInsecure bool, source string) ([]config.ProxyEntry, error) {
	if a.config == nil {
		return nil, fmt.Errorf("config manager not initialized")
	}

	cfg := a.config.GetConfig()
	staleIdx := -1
	for i, s := range cfg.Subscriptions {
		if s.URL != subURL {
			continue
		}
		hasProxies := false
		for _, p := range cfg.Proxies {
			if p.SubscriptionURL == subURL {
				hasProxies = true
				break
			}
		}
		if hasProxies {
			return nil, fmt.Errorf("подписка с этим URL уже добавлена")
		}
		// Subscription record is orphaned (proxies were deleted but the
		// subscription metadata stayed). Drop it so the new import can take
		// its place.
		staleIdx = i
		break
	}
	if staleIdx >= 0 {
		cfg.Subscriptions = append(cfg.Subscriptions[:staleIdx], cfg.Subscriptions[staleIdx+1:]...)
		if err := a.config.SaveConfig(cfg); err != nil {
			return nil, fmt.Errorf("clearing stale subscription: %w", err)
		}
	}

	entries, up, down, tot, exp, iconURL, profileTitle, err := a.fetchSubscriptionFromURL(subURL, allowInsecure)
	if err != nil {
		return nil, err
	}

	displayName := name
	if profileTitle != "" {
		displayName = profileTitle
	}

	sub := config.Subscription{
		ID:              fmt.Sprintf("%d", time.Now().UnixMilli()),
		Name:            displayName,
		URL:             subURL,
		UpdatedAt:       time.Now().Format(time.RFC3339),
		TrafficUpload:   up,
		TrafficDownload: down,
		TrafficTotal:    tot,
		ExpireUnix:      exp,
		IconURL:         iconURL,
		Source:          strings.TrimSpace(source),
		// Only mark as allow-insecure when the URL actually is plaintext —
		// no need to flag https:// subscriptions, which would be misleading.
		AllowInsecure: allowInsecure && isInsecureSubURL(subURL),