feat(ios): full-tunnel VPN app

Validated locally: cargo test --lib (248 passed), bash -n scripts/build-ios.sh, plist lint, ios/project.yml YAML parse, and git diff --check. iOS target cargo check was attempted but blocked locally by missing full Xcode/iPhoneOS SDK.

Author: yyoyoian-pixel

.cargo/config.toml

@@ -0,0 +1,27 @@
+# Per-target rustflags for cross-compilation.
+#
+# iOS staticlib build (aarch64-apple-ios):
+#   -C panic=abort — propagate abort strategy to all crates so they match the
+#   [profile.release] panic = "abort" setting in Cargo.toml. Without this,
+#   leaf-ffi (which has its own staticlib crate-type) links panic_unwind and
+#   conflicts with our abort-strategy staticlib.
+# IPHONEOS_DEPLOYMENT_TARGET=16.0 is required so the linker doesn't default
+# to iOS 10 and produce version-mismatch errors with leaf's netstack-lwip C
+# objects (which are compiled against the current Xcode SDK).
+[target.aarch64-apple-ios]
+rustflags = []
+
+[target.aarch64-apple-ios.env]
+IPHONEOS_DEPLOYMENT_TARGET = "16.0"
+
+[target.aarch64-apple-ios-sim]
+rustflags = []
+
+[target.aarch64-apple-ios-sim.env]
+IPHONEOS_DEPLOYMENT_TARGET = "16.0"
+
+[target.x86_64-apple-ios]
+rustflags = []
+
+[target.x86_64-apple-ios.env]
+IPHONEOS_DEPLOYMENT_TARGET = "16.0"

.gitignore

@@ -4,3 +4,8 @@
 /config.json
 .DS_Store
 /SCR-*.png
+
+# iOS — generated by xcodegen / Xcode, and local signing (never commit team ID)
+/ios/MhrvVPN.xcodeproj/
+/ios/build/
+/ios/Local.xcconfig