feat: add VPN auto-disable for proxy settings

Automatically disable proxy when VPN is active and restore it when VPN disconnects.

- VpnDetector using NetworkCallback API for real-time VPN detection
- Proxy saved to SharedPreferences before VPN disables it, restored on disconnect
- UI toggle in proxy settings screen to enable/disable the feature
- VPN warning in proxy confirmation dialog when connecting via proxy link
- Proxy blocked from manual enable when VPN is active
- Translations for EN, RU, UK, ZH, SK
- Clean architecture: VpnDetector interface in domain module
- Type-safe getSystemService calls, persistent proxy storage, ProxyPrefs data class

Author: SEVENID

app/src/main/java/org/monogram/app/MainContent.kt

@@ -199,7 +199,19 @@ private fun ProxyConfirmSheet(root: RootComponent) {
                     }
                 }
 
-                Spacer(modifier = Modifier.height(24.dp))
+                Spacer(modifier = Modifier.height(8.dp))
+
+                val vpnActive by root.vpnDetector.isVpnActive.collectAsState()
+                if (vpnActive) {
+                    Text(
+                        text = stringResource(R.string.proxy_saved_vpn_active_dialog),
+                        style = MaterialTheme.typography.bodyMedium,
+                        color = MaterialTheme.colorScheme.error,
+                        modifier = Modifier.padding(horizontal = 4.dp, vertical = 8.dp)
+                    )
+                }
+
+                Spacer(modifier = Modifier.height(16.dp))
 
                 Row(
                     modifier = Modifier.fillMaxWidth(),

app/src/main/res/values-ru/strings.xml

@@ -15,6 +15,9 @@
     <string name="proxy_port">Порт</string>
     <string name="proxy_type">Тип</string>
     <string name="proxy_unknown">Неизвестно</string>
+    <string name="proxy_saved_vpn_active_dialog">Прокси сохранено, но не включено из-за активной VPN</string>
+    <string name="proxy_enable_failed_vpn_active">Невозможно включить прокси: VPN активна</string>
+    <string name="proxy_added_and_enabled">Прокси добавлен и включён</string>
     <string name="cancel">Отмена</string>
     <string name="connect">Подключиться</string>
 

app/src/main/res/values-sk/strings.xml

@@ -15,6 +15,9 @@
     <string name="proxy_port">Port</string>
     <string name="proxy_type">Typ</string>
     <string name="proxy_unknown">Neznáme</string>
+    <string name="proxy_saved_vpn_active_dialog">Proxy uložené, ale neaktivované kvôli aktívnej VPN</string>
+    <string name="proxy_enable_failed_vpn_active">Nemožno aktivovať proxy: VPN je aktívna</string>
+    <string name="proxy_added_and_enabled">Proxy pridaný a aktivovaný</string>
     <string name="cancel">Zrušiť</string>
     <string name="connect">Pripojiť</string>
 

app/src/main/res/values-uk/strings.xml

@@ -15,6 +15,9 @@
     <string name="proxy_port">Порт</string>
     <string name="proxy_type">Тип</string>
     <string name="proxy_unknown">Невідомо</string>
+    <string name="proxy_saved_vpn_active_dialog">Проксі збережено, але не увімкнено через активну VPN</string>
+    <string name="proxy_enable_failed_vpn_active">Неможливо увімкнути проксі: VPN активна</string>
+    <string name="proxy_added_and_enabled">Проксі додано та увімкнено</string>
     <string name="cancel">Скасувати</string>
     <string name="connect">Підключитися</string>
 

app/src/main/res/values-zh/strings.xml

@@ -15,6 +15,9 @@
     <string name="proxy_port">端口</string>
     <string name="proxy_type">类型</string>
     <string name="proxy_unknown">未知</string>
+    <string name="proxy_saved_vpn_active_dialog">代理已保存，但因 VPN 处于活动状态而未启用</string>
+    <string name="proxy_enable_failed_vpn_active">无法启用代理：VPN 处于活动状态</string>
+    <string name="proxy_added_and_enabled">代理已添加并启用</string>
     <string name="cancel">取消</string>
     <string name="connect">连接</string>
 

app/src/main/res/values/strings.xml

@@ -15,6 +15,9 @@
     <string name="proxy_port">Port</string>
     <string name="proxy_type">Type</string>
     <string name="proxy_unknown">Unknown</string>
+    <string name="proxy_saved_vpn_active_dialog">Proxy saved but not enabled due to active VPN</string>
+    <string name="proxy_enable_failed_vpn_active">Cannot enable proxy: VPN is active</string>
+    <string name="proxy_added_and_enabled">Proxy added and enabled</string>
     <string name="cancel">Cancel</string>
     <string name="connect">Connect</string>
 

data/src/main/java/org/monogram/data/di/dataModule.kt

@@ -22,6 +22,7 @@ import org.monogram.data.gateway.TelegramGateway
 import org.monogram.data.gateway.TelegramGatewayImpl
 import org.monogram.data.gateway.UpdateDispatcher
 import org.monogram.data.gateway.UpdateDispatcherImpl
+import org.monogram.domain.infra.VpnDetector as VpnDetectorInterface
 import org.monogram.data.infra.*
 import org.monogram.data.mapper.ChatMapper
 import org.monogram.data.mapper.MessageMapper
@@ -178,7 +179,7 @@ val dataModule = module {
     single<ChatRemoteSource> {
         TdChatRemoteSource(
             gateway = get(),
-            connectivityManager = androidContext().getSystemService(Context.CONNECTIVITY_SERVICE) as ConnectivityManager,
+            connectivityManager = androidContext().getSystemService(ConnectivityManager::class.java),
         )
     }
 
@@ -212,7 +213,7 @@ val dataModule = module {
 
     single {
         MessageMapper(
-            connectivityManager = androidContext().getSystemService(Context.CONNECTIVITY_SERVICE) as ConnectivityManager,
+            connectivityManager = androidContext().getSystemService(ConnectivityManager::class.java),
             gateway = get(),
             userRepository = get(),
             customEmojiPaths = get<FileUpdateHandler>().customEmojiPaths,
@@ -224,14 +225,22 @@ val dataModule = module {
         )
     }
 
+    single<VpnDetectorInterface> {
+        VpnDetector(
+            connectivityManager = androidContext().getSystemService(ConnectivityManager::class.java),
+            dispatchers = get()
+        )
+    }
+
     single {
         ConnectionManager(
             chatRemoteSource = get(),
             proxyRemoteSource = get(),
             updates = get(),
             appPreferences = get(),
             dispatchers = get(),
-            connectivityManager = androidContext().getSystemService(Context.CONNECTIVITY_SERVICE) as ConnectivityManager,
+            connectivityManager = androidContext().getSystemService(ConnectivityManager::class.java),
+            vpnDetector = get(),
             scopeProvider = get()
         )
     }

data/src/main/java/org/monogram/data/infra/AndroidStringProvider.kt

@@ -1,21 +1,33 @@
 package org.monogram.data.infra
 
 import android.content.Context
+import android.util.Log
 import org.monogram.domain.repository.StringProvider
 
 class AndroidStringProvider(private val context: Context) : StringProvider {
+    private val TAG = "StringProvider"
+
     override fun getString(resName: String): String {
         val resId = context.resources.getIdentifier(resName, "string", context.packageName)
-        return if (resId != 0) context.getString(resId) else resName
+        return if (resId != 0) context.getString(resId) else {
+            Log.w(TAG, "String resource not found: $resName")
+            resName
+        }
     }
 
     override fun getString(resName: String, vararg formatArgs: Any): String {
         val resId = context.resources.getIdentifier(resName, "string", context.packageName)
-        return if (resId != 0) context.getString(resId, *formatArgs) else resName
+        return if (resId != 0) context.getString(resId, *formatArgs) else {
+            Log.w(TAG, "String resource not found: $resName")
+            resName
+        }
     }
 
     override fun getQuantityString(resName: String, quantity: Int, vararg formatArgs: Any): String {
         val resId = context.resources.getIdentifier(resName, "plurals", context.packageName)
-        return if (resId != 0) context.resources.getQuantityString(resId, quantity, *formatArgs) else resName
+        return if (resId != 0) context.resources.getQuantityString(resId, quantity, *formatArgs) else {
+            Log.w(TAG, "Plural resource not found: $resName")
+            resName
+        }
     }
 }

data/src/main/java/org/monogram/data/infra/ConnectionManager.kt

@@ -18,6 +18,7 @@ import org.monogram.core.ScopeProvider
 import org.monogram.data.datasource.remote.ChatRemoteSource
 import org.monogram.data.datasource.remote.ProxyRemoteDataSource
 import org.monogram.data.gateway.UpdateDispatcher
+import org.monogram.domain.infra.VpnDetector
 import org.monogram.domain.repository.AppPreferencesProvider
 import org.monogram.domain.repository.ConnectionStatus
 import kotlin.random.Random
@@ -29,6 +30,7 @@ class ConnectionManager(
     private val appPreferences: AppPreferencesProvider,
     private val dispatchers: DispatcherProvider,
     private val connectivityManager: ConnectivityManager,
+    private val vpnDetector: VpnDetector,
     scopeProvider: ScopeProvider
 ) {
     private val TAG = "ConnectionManager"
@@ -67,13 +69,64 @@ class ConnectionManager(
         registerNetworkCallback()
         startWatchdog()
         startProxyManagement()
+        startVpnMonitoring()
 
         scope.launch(dispatchers.default) {
             runReconnectAttempt("bootstrap", force = true)
             syncConnectionStateFromTdlib("bootstrap")
         }
     }
 
+    private fun startVpnMonitoring() {
+        vpnDetector.startMonitoring()
+
+        scope.launch {
+            combine(
+                appPreferences.isVpnAutoDisableEnabled,
+                vpnDetector.isVpnActive
+            ) { enabled, vpnActive -> enabled to vpnActive }
+                .distinctUntilChanged()
+                .collect { (enabled, vpnActive) ->
+                    if (!enabled) return@collect
+
+                    if (vpnActive) {
+                        val currentProxyId = appPreferences.enabledProxyId.value
+                        if (currentProxyId != null) {
+                            appPreferences.setSavedProxyBeforeVpn(currentProxyId)
+                            Log.d(TAG, "VPN detected active, disabling in-app proxy (saved proxy: $currentProxyId)")
+                            coRunCatching {
+                                proxyRemoteSource.disableProxy()
+                                appPreferences.setEnabledProxyId(null)
+                            }.onFailure { Log.e(TAG, "Failed to disable proxy for VPN", it) }
+                        }
+                        autoBestJob?.cancel()
+                        telegaSwitchJob?.cancel()
+                    } else {
+                        val savedProxyId = appPreferences.savedProxyBeforeVpn.value
+                        if (savedProxyId != null) {
+                            Log.d(TAG, "VPN disconnected, restoring proxy: $savedProxyId")
+                            coRunCatching {
+                                if (proxyRemoteSource.enableProxy(savedProxyId)) {
+                                    appPreferences.setEnabledProxyId(savedProxyId)
+                                    appPreferences.setSavedProxyBeforeVpn(null)
+                                } else {
+                                    Log.w(TAG, "enableProxy returned false for saved proxy $savedProxyId, keeping it for retry")
+                                }
+                            }.onFailure { Log.e(TAG, "Failed to restore proxy after VPN", it) }
+                        }
+
+                        if (appPreferences.isTelegaProxyEnabled.value) {
+                            telegaSwitchJob?.cancel()
+                            telegaSwitchJob = launchTelegaSwitchLoop()
+                        } else if (appPreferences.isAutoBestProxyEnabled.value) {
+                            autoBestJob?.cancel()
+                            autoBestJob = launchAutoBestLoop()
+                        }
+                    }
+                }
+        }
+    }
+
     private fun handleConnectionState(state: TdApi.ConnectionState, source: String) {
         val status = when (state) {
             is TdApi.ConnectionStateReady -> ConnectionStatus.Connected
@@ -248,6 +301,11 @@ class ConnectionManager(
     }
 
     private suspend fun selectBestProxy(telegaOnly: Boolean = false) {
+        if (appPreferences.isVpnAutoDisableEnabled.value && vpnDetector.isVpnActive.value) {
+            Log.d(TAG, "Skipping proxy selection — VPN is active")
+            return
+        }
+
         val allProxies = proxyRemoteSource.getProxies()
         val proxies = if (telegaOnly) {
             val telegaIds = getTelegaIdentifiers()
@@ -370,4 +428,17 @@ class ConnectionManager(
             connectivityManager.activeNetworkInfo?.isConnected == true
         }
     }
+
+    fun stop() {
+        vpnDetector.stopMonitoring()
+        retryJob?.cancel()
+        proxyModeWatcherJob?.cancel()
+        autoBestJob?.cancel()
+        telegaSwitchJob?.cancel()
+        watchdogJob?.cancel()
+        networkCallback?.let {
+            runCatching { connectivityManager.unregisterNetworkCallback(it) }
+            networkCallback = null
+        }
+    }
 }

data/src/main/java/org/monogram/data/infra/VpnDetector.kt

@@ -0,0 +1,83 @@
+package org.monogram.data.infra
+
+import android.net.ConnectivityManager
+import android.net.Network
+import android.net.NetworkCapabilities
+import android.os.Build
+import android.util.Log
+import kotlinx.coroutines.flow.MutableStateFlow
+import kotlinx.coroutines.flow.StateFlow
+import kotlinx.coroutines.flow.asStateFlow
+import org.monogram.core.DispatcherProvider
+import org.monogram.domain.infra.VpnDetector as VpnDetectorInterface
+
+class VpnDetector(
+    private val connectivityManager: ConnectivityManager,
+    private val dispatchers: DispatcherProvider
+) : VpnDetectorInterface {
+    private val _isVpnActive = MutableStateFlow(false)
+    override val isVpnActive: StateFlow<Boolean> = _isVpnActive.asStateFlow()
+
+    private var networkCallback: ConnectivityManager.NetworkCallback? = null
+
+    override fun startMonitoring() {
+        checkVpnStatus()
+
+        val callback = object : ConnectivityManager.NetworkCallback() {
+            override fun onAvailable(network: Network) {
+                checkVpnStatus()
+            }
+
+            override fun onLost(network: Network) {
+                checkVpnStatus()
+            }
+
+            override fun onCapabilitiesChanged(
+                network: Network,
+                networkCapabilities: NetworkCapabilities
+            ) {
+                if (connectivityManager.activeNetwork == network) {
+                    checkVpnStatus()
+                }
+            }
+        }
+
+        runCatching {
+            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.N) {
+                connectivityManager.registerDefaultNetworkCallback(callback)
+            } else {
+                val request = android.net.NetworkRequest.Builder().build()
+                connectivityManager.registerNetworkCallback(request, callback)
+            }
+            networkCallback = callback
+        }.onFailure { throwable ->
+            Log.e("VpnDetector", "Failed to register network callback -- VPN detection disabled", throwable)
+        }
+    }
+
+    override fun stopMonitoring() {
+        networkCallback?.let {
+            runCatching { connectivityManager.unregisterNetworkCallback(it) }
+            networkCallback = null
+        }
+    }
+
+    private fun checkVpnStatus() {
+        val isActive = if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.M) {
+            val activeNetwork = connectivityManager.activeNetwork
+            if (activeNetwork != null) {
+                val capabilities = connectivityManager.getNetworkCapabilities(activeNetwork)
+                capabilities?.hasTransport(NetworkCapabilities.TRANSPORT_VPN) == true
+            } else {
+                false
+            }
+        } else {
+            @Suppress("DEPRECATION")
+            connectivityManager.activeNetworkInfo?.type == ConnectivityManager.TYPE_VPN
+        }
+
+        if (_isVpnActive.value != isActive) {
+            _isVpnActive.value = isActive
+        }
+    }
+}