fix: protocol bugs in Loon, Stash, and Clash

[onesyue]

Summary

• Loon.php: Fix Hysteria2 download bandwidth using wrong field name (bandwidth.download_bandwidth → bandwidth.down); add missing obfs (salamander) support
• Stash.php: Enable AnyTLS support (was commented out); fix AnyTLS TLS field path (tls_settings.* → tls.*); add missing Hysteria2 obfs support
• Clash.php: Add VLESS (TLS/Reality/ws/grpc), Hysteria/Hysteria2 (with obfs), and AnyTLS protocol support — these were already in ClashMeta but missing from the plain Clash protocol handler

Details

Loon.php — Hysteria2 bandwidth field name

The XBoard protocol_settings.bandwidth object uses up/down keys (matching ClashMeta, Stash, SingBox), but Loon's buildHysteria() was reading bandwidth.download_bandwidth which doesn't exist, resulting in empty download-bandwidth= in the subscription output.

Stash.php — AnyTLS commented out + wrong TLS path

1. The AnyTLS handler in handle() was fully commented out, so AnyTLS nodes were silently dropped from Stash subscriptions even though allowedProtocols included it.
2. buildAnyTLS() used tls_settings.server_name / tls_settings.allow_insecure, but AnyTLS (like Hysteria/TUIC) stores TLS config under tls.*, not tls_settings.*. This caused SNI and skip-cert-verify to always be null/false.

Stash.php + Loon.php — Missing Hysteria2 obfs

Neither file handled Hysteria2 obfs (salamander), so nodes with obfs enabled would connect without obfs and fail if the server requires it.

Clash.php — Missing VLESS/Hysteria/AnyTLS

allowedProtocols only listed ss/vmess/trojan/socks/http. Build methods for VLESS, Hysteria, and AnyTLS were missing entirely. Added them following the same patterns used in ClashMeta.php.

Test plan

• Verify Loon subscription includes correct download-bandwidth= value for Hysteria2 nodes
• Verify Stash subscription includes AnyTLS nodes with correct SNI
• Verify Stash Hysteria2 nodes include obfs fields when enabled
• Verify Clash subscription includes VLESS, Hysteria2, and AnyTLS nodes
• Verify existing protocols (ss/vmess/trojan/socks/http) are unaffected

🤖 Generated with Claude Code