7605902324
Test-quality audit: fix 2 prod bugs, strengthen weak tests, add mutation/fuzz/CI tooling ( #5345 )
...
* test(audit): add gremlins/rapid/coverage tooling + AUDIT.md scaffold
* test(audit): hygiene sweep (race-clean except logger global; Finding #2 ) + smell inventory
* test(audit): cover untested error/edge branches (TLS proxy+pin, migration tag cleanup=Finding #1 )
* test(audit): strengthen internal/sub link tests (dedup key, TLS/Reality mapping, clash well-formedness)
* test(audit): property (rapid) + fuzz tests for joinHostPort/userinfo/pin/ParseLink
* test(audit): tighten frontend subSortIndex rejection assertions + wire coverage
* ci(audit): add shuffle gate + non-blocking race job (Finding #2 ) + fuzz-smoke; document mutation policy
* chore(audit): gitignore frontend coverage output
* test(audit): exhaustive whole-repo pass — strengthen 5 weak/fake tests (netproxy, CSP, modal per-protocol loops, schema coercions)
* docs(contributing): add Testing section (conventions, race/shuffle, fuzz, mutation policy); drop AUDIT.md ledger
* fix(logger,migration): guard logBuffer with mutex; execute legacy tag cleanup (tx.Exec); make CI race gate blocking
* ci(mutation): add nightly scoped gremlins workflow (informational artifacts)
* test(audit): strengthen runtime tests — baseURL scheme/port bounds, isNonEmptySlice, trafficReset
* test(audit): strengthen clash tests — reality field mapping + tcp-header validation
* test(audit): runtime — egress-proxy + content-type tests; drop redundant bp=='' branch
* test(audit): strengthen link parser/helper tests (defaultPort, splitComma, base64, canonicalQuery, tls/reality/transport mapping)
* test(audit): strengthen sub/xray/common/netsafe/mtproto/config/middleware tests (kill surviving mutants)
* test(audit): raise timeout on protocol-iteration modal tests (heavy re-renders, slow on CI)
* fix(logger): GetLogs returns at most c entries (off-by-one fix; addresses PR review)
* perf(logger): snapshot logBuffer under lock so GetLogs doesn't block logging; clarify fuzz-seed docs (addresses PR review)
2026-06-15 15:17:03 +02:00
4c8d3cb625
fix(nodes): honor TLS verify mode skip/pin for remote node operations ( #5264 )
...
The node probe honored the per-node TlsVerifyMode (skip/pin) but
runtime.Remote used a shared client with no TLSClientConfig, so traffic
sync and every other remote op fell back to system-CA verification and
failed against self-signed nodes even after the operator set skip/pin.
Move the TLS client builder into the runtime layer (HTTPClientForNode /
DecodeCertPin) as the single source of truth, have Remote build and cache
its per-node client through it, and delegate the service probe to the same
builder so the two paths can no longer diverge.
2026-06-13 11:11:02 +02:00
Sanaei