fix: harden ip table failover and config verification under extreme networks

packages/kit-bg/src/dbs/simple/entity/SimpleDbEntityIpTable.ts

@@ -5,6 +5,7 @@ import type {
   IIpTableRemoteConfig,
   IIpTableRuntime,
 } from '@onekeyhq/shared/src/request/types/ipTable';
+import { pruneIpTableRuntimeSelections } from '@onekeyhq/shared/src/utils/ipTableUtils';
 
 import { SimpleDbEntityBase } from '../base/SimpleDbEntityBase';
 
@@ -60,20 +61,48 @@ export class SimpleDbEntityIpTable extends SimpleDbEntityBase<ISimpleDbIpTableDa
   }
 
   @backgroundMethod()
-  async saveConfig(config: IIpTableRemoteConfig): Promise<void> {
-    await this.setRawData((data) => ({
-      ...data,
-      config,
-      runtime: {
-        ...(data?.runtime ?? {
-          enabled: true,
-          lastUpdated: Date.now(),
-          lastRegionCheck: 0,
-          selections: {},
-        }),
+  async saveConfig(
+    config: IIpTableRemoteConfig,
+    verifiedMeta?: { payloadHash: string },
+  ): Promise<void> {
+    await this.setRawData((data) => {
+      const runtime = data?.runtime ?? {
+        enabled: true,
         lastUpdated: Date.now(),
-      },
-    }));
+        lastRegionCheck: 0,
+        selections: {},
+      };
+      // The stored config is the signed envelope verbatim, so runtime state
+      // pointing at endpoints the new config no longer endorses (revoked or
+      // rotated-out IPs) must be dropped alongside it.
+      const pruned = pruneIpTableRuntimeSelections({
+        config,
+        selections: runtime.selections,
+        lastBestIp: runtime.lastBestIp,
+      });
+      return {
+        ...data,
+        config,
+        runtime: {
+          ...runtime,
+          selections: pruned.selections,
+          lastBestIp: pruned.lastBestIp,
+          lastUpdated: Date.now(),
+          // Provenance of the last successfully verified config; consumed by
+          // rollback protection and diagnostics.
+          ...(verifiedMeta
+            ? {
+                lastVerified: {
+                  at: Date.now(),
+                  version: config.version,
+                  generatedAt: config.generated_at,
+                  payloadHash: verifiedMeta.payloadHash,
+                },
+              }
+            : {}),
+        },
+      };
+    });
   }
 
   /**
@@ -105,6 +134,36 @@ export class SimpleDbEntityIpTable extends SimpleDbEntityBase<ISimpleDbIpTableDa
     });
   }
 
+  /**
+   * Record the best IP measured by the latest speed test, independent of the
+   * final selection. Consumed by fast failover when the domain starts failing.
+   */
+  @backgroundMethod()
+  async updateLastBestIp(domain: string, ip: string): Promise<void> {
+    await this.setRawData((data) => {
+      const runtime = data?.runtime ?? {
+        enabled: true,
+        lastUpdated: 0,
+        lastRegionCheck: 0,
+        selections: {},
+      };
+
+      return {
+        ...data,
+        config: data?.config ?? null,
+        currentRegion: data?.currentRegion ?? 'AUTO',
+        runtime: {
+          ...runtime,
+          lastBestIp: {
+            ...runtime.lastBestIp,
+            [domain]: ip,
+          },
+        },
+        version: data?.version ?? 1,
+      };
+    });
+  }
+
   @backgroundMethod()
   async setEnabled(enabled: boolean): Promise<void> {
     await this.setRawData((data) => ({