fix(telegram): show UPGRADE method and wss:// scheme for WebSocket approvals

Use go-mitmproxy fork with WebSocket Requestheaders fix.

Author: nnemirovsky

go.mod

@@ -82,3 +82,5 @@ require (
 	modernc.org/mathutil v1.7.1 // indirect
 	modernc.org/memory v1.11.0 // indirect
 )
+
+replace github.com/lqqyt2423/go-mitmproxy => github.com/nnemirovsky/go-mitmproxy v1.8.11-0.20260412092537-661f1983cb97

go.sum

@@ -98,8 +98,6 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/lib/pq v1.10.9 h1:YXG7RB+JIjhP29X+OtkiDnYaXQwpS4JEWq7dtCCRUEw=
 github.com/lib/pq v1.10.9/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
-github.com/lqqyt2423/go-mitmproxy v1.8.10 h1:8hAP0xXBWtgHmFXs1oEsOG1klHB4fvNwrXrN+Uf7144=
-github.com/lqqyt2423/go-mitmproxy v1.8.10/go.mod h1:dSGnI17tVZ8dtYu9vnaIz7kxVwJNFH0CoNQwEQlTpxE=
 github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0=
 github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
 github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=
@@ -114,6 +112,8 @@ github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 h1:RWengNIwukTxcDr9
 github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826/go.mod h1:TaXosZuwdSHYgviHp1DAtfrULt5eUgsSMsZf+YrPgl8=
 github.com/ncruces/go-strftime v1.0.0 h1:HMFp8mLCTPp341M/ZnA4qaf7ZlsbTc+miZjCLOFAw7w=
 github.com/ncruces/go-strftime v1.0.0/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJmn9CehxcKcls=
+github.com/nnemirovsky/go-mitmproxy v1.8.11-0.20260412092537-661f1983cb97 h1:/UoDr3b4C1vUjUNwk5tmZiXd0S5IW/sJP2zwROmwzeA=
+github.com/nnemirovsky/go-mitmproxy v1.8.11-0.20260412092537-661f1983cb97/go.mod h1:dSGnI17tVZ8dtYu9vnaIz7kxVwJNFH0CoNQwEQlTpxE=
 github.com/oapi-codegen/runtime v1.3.1 h1:RgDY6J4OGQLbRXhG/Xpt3vSVqYpHQS7hN4m85+5xB9g=
 github.com/oapi-codegen/runtime v1.3.1/go.mod h1:kOdeacKy7t40Rclb1je37ZLFboFxh+YLy0zaPCMibPY=
 github.com/oasdiff/yaml v0.0.0-20260313112342-a3ea61cb4d4c h1:7ACFcSaQsrWtrH4WHHfUqE1C+f8r2uv8KGaW0jTNjus=

internal/proxy/addon.go

@@ -448,8 +448,13 @@ func (a *SluiceAddon) Requestheaders(f *mitmproxy.Flow) {
 	if httpVer == "" && f.ConnContext.ClientConn.NegotiatedProtocol == "h2" {
 		httpVer = "HTTP/2"
 	}
+	method := f.Request.Method
+	if proto == ProtoWS || proto == ProtoWSS {
+		method = "UPGRADE"
+		httpVer = ""
+	}
 	verdict, err := checker.CheckAndConsume(connectHost, connectPort,
-		WithRequestInfo(f.Request.Method, f.Request.URL.Path),
+		WithRequestInfo(method, f.Request.URL.Path),
 		WithProtocol(protoStr),
 		WithHTTPVersion(httpVer),
 		WithSkipBrokerRateLimit(),

internal/telegram/bot.go

@@ -91,9 +91,13 @@ func FormatApprovalMessage(req channel.ApprovalRequest) string {
 // for convenience; everything else defaults to http.
 func schemeForApproval(req channel.ApprovalRequest) string {
 	switch req.Protocol {
-	case "https", "wss", "grpc", "quic":
+	case "wss":
+		return "wss"
+	case "ws":
+		return "ws"
+	case "https", "grpc", "quic":
 		return "https"
-	case "http", "ws":
+	case "http":
 		return "http"
 	}
 	if req.Port == 443 {