DuQi 47d2303334 fix(inbounds): reject missing TLS certificates before saving (#6429) ...

An inbound could be saved with security "tls" and a certificate row carrying
neither a file path nor inline content. Nothing rejected it, so the row reached
xray-core, whose readFileOrString fails with "both file and bytes are empty"
and takes the whole config build down with it — every other inbound included.

Validate the credentials on both sides of the wire. validateInboundTLSCertificates
follows xray's file-over-inline precedence, requires a private key for every
non-verify certificate and insists on at least one server certificate, so a
verify-only CA list no longer passes as a server config. The inbound form's Zod
schema enforces the same rules per field and serializes only the editor mode the
operator actually used, and a failed save jumps to the Security tab naming the
certificate row that broke.

On update the guard is scoped to a real TLS edit. A row already stored
incomplete is grandfathered: it stays editable, and only a save that breaks a
previously valid block is refused.

A sub-node stores whatever the master pushes, and Remote.UpdateInbound falls
back to AddInbound when the node does not yet hold the tag, so a grandfathered
row could otherwise never be deployed or re-seeded — the rejection is swallowed
to a logger.Debug line and the node stays on a stale config while the panel
shows the client as cut off. The controller now marks a node-sync request (mTLS
or a node-sync token) on a per-request copy of InboundService, and the guard
steps aside for it on both add and update: the row was judged where the
operator acted, and a node that refuses it only falls out of sync. Operator and
admin-token saves are held to the guard as before.

The security union is parameterised on its tlsSettings branch instead of copied,
and tlsCertUsesFiles is the one file-vs-inline inference shared by the form
schema and the adapter, so the mode the editor opens in and the pair of fields
the save serializes cannot drift apart.

2026-09-08 18:08:24 +02:00

..

email

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

integration

feat(nord): support multi-server NordLynx outbounds (#6311)

2026-09-02 20:20:10 +02:00

outbound

fix(outbound): test VLESS vnext endpoints (#6358)

2026-09-02 20:46:49 +02:00

panel

fix(cli): let -getApiToken name the token it regenerates (#6405)

2026-09-08 14:15:37 +02:00

tgbot

Update deps and simplify parsing

2026-09-08 14:12:13 +02:00

access_log_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

api_scale_postgres_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

backup_filename_test.go

feat(backup): prefix backup filenames with date and time (#5606)

2026-06-27 12:08:20 +02:00

bulk_clients_test.go

fix(node): stop client edits from tearing down node inbounds and harden reconcile fingerprints

2026-07-05 02:06:58 +02:00

bulk_traffic_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

calendar_renew_test.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

calendar_renew.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

client_add_dedupe_test.go

fix(client): stop duplicate client entries accumulating in inbound settings

2026-07-05 21:17:25 +02:00

client_amneziawg_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_amneziawg.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_apply_field_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_attach_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_bulk_fanout_test.go

perf(clients): push a bulk client change to every node at once

2026-09-07 02:19:16 +02:00

client_bulk_flow_test.go

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

client_bulk_reenable_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_bulk_reset_reenable_test.go

fix(clients): surface bulk-reset auto-enable failures (#5763)

2026-07-08 20:53:42 +02:00

client_bulk.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_create_fanout_test.go

perf(clients): apply a multi-inbound client create concurrently

2026-09-04 01:01:20 +02:00

client_create_reuse_test.go

fix(clients): reuse stored credentials when re-adding an existing identity

2026-07-11 22:48:51 +02:00

client_cross_inbound_race_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_crud.go

perf(clients): push a bulk client change to every node at once

2026-09-07 02:19:16 +02:00

client_delete_continue_test.go

fix(clients): finish deleting from every inbound when one fails

2026-07-11 22:48:57 +02:00

client_delete_node_baseline_test.go

fix(client): clean node_client_traffics rows when deleting a client

2026-07-07 15:05:22 +02:00

client_delete_node_full_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_delete_tombstone_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

client_edit_node_dirty_test.go

fix(node): flag every hosting node before a client edit applies

2026-09-07 01:51:18 +02:00

client_effective_flow_test.go

fix(flow): restore XTLS Vision when an inbound becomes flow-eligible (#5520)

2026-06-24 13:02:42 +02:00

client_email_validation_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

client_external_link_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_external_link.go

Add per-client external link controls (#5650)

2026-08-18 13:55:04 +02:00

client_flow_isolation_test.go

fix: enable XTLS vision flow for VLESS+XHTTP+vlessenc in UI and share links (#5157) (#5185)

2026-06-11 12:04:02 +02:00

client_group_bulk_test.go

fix(groups): report changed bulk moves without restarting xray (#6199)

2026-08-14 19:50:06 +02:00

client_group_node_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_group_reset_test.go

fix(groups): keep group traffic totals stable across client resets and deletes

2026-07-02 09:17:47 +02:00

client_groups.go

fix(groups): report changed bulk moves without restarting xray (#6199)

2026-08-14 19:50:06 +02:00

client_hwid_test.go

feat(clients): allow removing a single HWID device (#6265)

2026-08-21 14:17:05 +02:00

client_hwid.go

feat(clients): allow removing a single HWID device (#6265)

2026-08-21 14:17:05 +02:00

client_identity_normalized_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_inbound_apply_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_inbound_apply.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_ips_prune_test.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

client_link_delta_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_link.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_locks_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_locks.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_lookup_test.go

feat(api): add GET endpoint to look up clients by Telegram ID (#5945)

2026-07-28 22:38:44 +02:00

client_lookup.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_node_push_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_paging_test.go

perf(clients): make the clients page scale to large panels

2026-07-30 02:49:32 +02:00

client_paging.go

docs(api): align OpenAPI with runtime contracts (#6409)

2026-09-04 15:23:41 +02:00

client_portable.go

feat(clients): give each client its own traffic reset cycle (#6240)

2026-08-18 13:08:44 +02:00

client_stat_reuse_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_sync_mtproto_test.go

feat(mtproto): per-client ad-tags, management-API auth, and record secret sync

2026-07-07 12:00:43 +02:00

client_sync_multiprotocol_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

client_sync_orphan_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_sync_orphan.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

client_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_traffic_cycle_test.go

feat(clients): give each client its own traffic reset cycle (#6240)

2026-08-18 13:08:44 +02:00

client_traffic.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_update_allowedips_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_update_enable_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_fanout_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_update_no_inbound_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_rename_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_wireguard_crud_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_wireguard_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_wireguard.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

config.json

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

del_shared_email_runtime_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

depleted_calendar_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

fallback.go

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

finalmask_rand_packet_test.go

fix(xray): reject configs xray-core refuses, and check the fixtures against it

2026-07-28 14:43:55 +02:00

geodata.go

feat(xray): browse geosite/geoip categories from routing rules (#6165)

2026-08-15 17:12:59 +02:00

global_traffic_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

golden_fixtures_xray_test.go

chore: refresh dependencies and modernize Go test idioms

2026-07-30 03:14:22 +02:00

host_test.go

feat(hosts): bulk-add multiple hosts to multiple inbounds (#5677)

2026-07-08 23:35:20 +02:00

host.go

fix(hosts): assign group ids to imported hosts and repair empty ones

2026-07-23 18:52:42 +02:00

import_host_settings_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

inbound_amneziawg_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_amneziawg.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_autorenew_calendar_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

inbound_autorenew_globaltraffic_test.go

fix(traffic): clear cross-panel rows only for clients actually renewed (#6263)

2026-08-22 23:12:33 +02:00

inbound_autorenew_maxcount_test.go

feat(clients): cap how many times a client may auto-renew (#6238)

2026-08-18 11:53:11 +02:00

inbound_autorenew_shadowsocks_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_autorenew_shared_email_test.go

fix(clients): sync auto-renewal across inbounds (#6339)

2026-09-02 20:39:03 +02:00

inbound_autorenew_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_client_ips_merge_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

inbound_client_ips.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

inbound_client_move_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

inbound_client_traffic_test.go

fix(traffic): persist delayed-start expiry only for converted clients

2026-07-02 16:24:18 +02:00

inbound_clients.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

inbound_create_race_test.go

fix(inbounds): close the port check-and-claim race on the serial writer (#6225)

2026-08-18 11:48:40 +02:00

inbound_disable_flow_test.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_disable.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_durable_postgres_test.go

fix(inbounds): reject missing TLS certificates before saving (#6429)

2026-09-08 18:08:24 +02:00

inbound_fallback_runtime_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_finalmask_reality_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_finalmask_xmc_test.go

feat(xray): update xray-core to v26.7.28 and adapt panel

2026-07-28 13:14:06 +02:00

inbound_flow_restore_test.go

fix(flow): restore XTLS Vision when an inbound becomes flow-eligible (#5520)

2026-06-24 13:02:42 +02:00

inbound_flow_restore.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_hysteria_auth_test.go

fix: reject Hysteria inbound updates with empty client auth (#6268)

2026-08-22 23:11:42 +02:00

inbound_import_external_proxy_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_import_shared_clients_test.go

fix: refresh stale client_traffics row when an inbound-deleted client's email is reused (#6003)

2026-07-21 15:57:55 +02:00

inbound_migration_test.go

fix(migration): stop a half-applied startup migration from committing silently (#6182)

2026-08-14 20:10:39 +02:00

inbound_migration.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_mtproto_apply_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

inbound_mtproto_client_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

inbound_mtproto_desired_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_mtproto_test.go

fix(mtproto): stop persisting a vestigial inbound-level secret

2026-07-06 17:55:57 +02:00

inbound_mtproto_txfail_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_mtproto.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_node_ips_test.go

fix(nodes): cloned-node attribution, node-hosted client display (online/speed/counts), and sync robustness (#5488)

2026-06-22 20:20:55 +02:00

inbound_node_ips.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

inbound_node_reconcile_test.go

fix(node): sweep a selected inbound the node reports without its prefix

2026-09-04 02:34:53 +02:00

inbound_node_sweep_log_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

inbound_node.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

inbound_options_node_address_test.go

fix(panel): use the hosting node address for WireGuard client configs (#5679)

2026-07-03 01:12:32 +02:00

inbound_protocol_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_protocol.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_settings_clients_test.go

fix(clients): parse only settings.clients across protocols (#5855)

2026-07-08 20:31:00 +02:00

inbound_settings_clients.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

inbound_sub_sort_test.go

feat(sub): per-inbound sort order for subscription links

2026-06-12 12:03:22 +02:00

inbound_sublink.go

feat(inbounds): apply remark template to Export all inbound links

2026-06-27 11:22:45 +02:00

inbound_subsort_test.go

feat(inbounds): add a narrow endpoint for subscription sort order (#6179)

2026-08-15 21:48:24 +02:00

inbound_tgbot_lookup_test.go

fix(tgbot): find clients by tgId regardless of settings JSON formatting

2026-07-05 20:18:59 +02:00

inbound_tls_test.go

fix(inbounds): reject missing TLS certificates before saving (#6429)

2026-09-08 18:08:24 +02:00

inbound_traffic_apply.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_traffic_global.go

fix(node): stop a departed master's frozen traffic from disabling clients (#6113)

2026-07-27 14:21:56 +02:00

inbound_traffic_reset_test.go

inbounds: allow custom monthly traffic reset days (#6071)

2026-07-28 23:27:09 +02:00

inbound_traffic.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

inbound_update_tag_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_util.go

feat(sub): per-inbound sort order for subscription links

2026-06-12 12:03:22 +02:00

inbound.go

fix(inbounds): reject missing TLS certificates before saving (#6429)

2026-09-08 18:08:24 +02:00

key_gen_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

metric_history_test.go

chore: bump deps and modernize test loops

2026-06-26 00:10:30 +02:00

metric_history.go

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

mtproto_fake_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

node_bulk_dispatch_test.go

perf(clients): apply a multi-inbound client create concurrently

2026-09-04 01:01:20 +02:00

node_client_breakdown_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_client_expiry_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_client_renew_sync_test.go

fix(node): start a fresh quota window when a node auto-renews a client

2026-07-07 15:05:23 +02:00

node_client_traffic_sum_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_contract.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_credentials_writeonly_test.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_delete_orphan_test.go

fix(nodes): block node delete while inbounds are still attached (#5394)

2026-06-20 01:09:53 +02:00

node_dirty_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_foreign_client_test.go

fix(node): refuse a node's claim on another inbound's client

2026-09-03 18:06:35 +02:00

node_host_adopt_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_http_fake_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

node_mtls_test.go

fix(nodes): apply a rotated master mTLS certificate without restarting the panel (#6194)

2026-08-15 16:03:42 +02:00

node_mtls.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

node_netmetrics_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

node_origin_guid_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_probe_body_cap_test.go

Update deps and simplify parsing

2026-09-08 14:12:13 +02:00

node_push_payload_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

node_shared_guid_test.go

fix(nodes): cloned-node attribution, node-hosted client display (online/speed/counts), and sync robustness (#5488)

2026-06-22 20:20:55 +02:00

node_sweep_guard_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_sync_link_churn_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

node_tag_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_test.go

fix(node): adopt a matching deployed inbound instead of recreating it (#6197)

2026-08-14 20:01:35 +02:00

node_token_encryption_test.go

feat(nodes): opt-in encryption at rest for the outbound node API token (#6186)

2026-08-15 16:48:50 +02:00

node_tree_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_tree.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node.go

fix(node): cap the status body the heartbeat probe decodes

2026-09-04 02:35:11 +02:00

outbound_subscription_ssrf_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

outbound_subscription_test.go

fix(outbounds): preserve stable subscription tags (#6345)

2026-09-02 20:46:20 +02:00

outbound_subscription.go

fix(outbounds): preserve stable subscription tags (#6345)

2026-09-02 20:46:20 +02:00

port_conflict_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

port_conflict.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

reality_scan_test.go

fix(reality): make the REALITY target check usable on a private network (#6242)

2026-08-18 13:47:59 +02:00

reality_scan.go

fix(reality): make the REALITY target check usable on a private network (#6242)

2026-08-18 13:47:59 +02:00

reset_writer_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

scale_helpers_test.go

refactor: modernize Go with strings.SplitSeq and maps.Copy

2026-07-08 22:10:54 +02:00

server_geofile_test.go

fix(geofile): verify downloaded geo databases against published digests (#6404)

2026-09-05 20:49:15 +02:00

server_import_sniff_test.go

feat(server): sniff sqlite panel restore uploads and keep the fallback on failure

2026-07-12 20:14:22 +02:00

server_import_stage_test.go

feat(server): sniff sqlite panel restore uploads and keep the fallback on failure

2026-07-12 20:14:22 +02:00

server_pg_restore_test.go

feat(db): add pgclient command to install or upgrade PostgreSQL client tools

2026-07-06 09:24:18 +02:00

server_vlessenc_test.go

feat(web): vless encryption new modes (#5517)

2026-06-24 21:22:42 +02:00

server_xray_checksum_test.go

fix(xray): verify the release archive checksum before installing (#5396)

2026-06-20 00:37:35 +02:00

server.go

Update deps and simplify parsing

2026-09-08 14:12:13 +02:00

setting_clash_test.go

feat(sub): auto-detect subscription format by User-Agent (Updated) (#5826)

2026-07-14 13:01:40 +02:00

setting_factory_defaults_test.go

fix(nodes): persist the master mTLS credential atomically and stop silent reissue (#6195)

2026-08-14 20:03:54 +02:00

setting_mtls_bundle_test.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

setting_mtls_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

setting_mtls.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

setting_remote_routing_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

setting_security_test.go

fix(sub): randomize fresh panel subscription paths (#6375)

2026-09-03 16:34:37 +02:00

setting_sub_identity_test.go

feat(sub): allow identity tokens on every subscription link (#5935)

2026-07-28 22:12:52 +02:00

setting_sub_info_node_test.go

feat(sub): add dummy info node and status configs for subscriptions (#6412)

2026-09-08 17:14:01 +02:00

setting.go

feat(sub): add dummy info node and status configs for subscriptions (#6412)

2026-09-08 17:14:01 +02:00

shadowsocks_client_key_test.go

fix(inbound): regenerate SS-2022 client PSKs on method key-size change

2026-06-17 14:11:35 +02:00

stream_network_alias_test.go

feat(xray): update xray-core to v26.7.11 and adapt panel

2026-07-12 00:30:47 +02:00

sub_balancer_inbound_cleanup_test.go

feat(sub): client-side balancers for the JSON subscription (#6243)

2026-08-23 22:34:20 +02:00

sub_balancer_test.go

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

sub_balancer.go

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

sub_uri_base_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

sync_scale_postgres_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

traffic_commit_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

traffic_poll_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

traffic_runtime_apply_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

traffic_writer_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

traffic_writer.go

fix(service): serialize client/inbound writes to prevent Postgres deadlock

2026-06-17 15:55:47 +02:00

url_safety_test.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

url_safety.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

ws_payload_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_config_clients_test.go

style: drop the line comments added with the triage fixes

2026-07-27 14:37:57 +02:00

xray_config_inject_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

xray_config_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_lifecycle_test.go

fix(xray): synchronize lifecycle state (#6138)

2026-07-29 21:00:29 +02:00

xray_log_confine_test.go

fix(xray): confine log paths written under any key case

2026-09-03 18:06:15 +02:00

xray_metrics_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_metrics.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_restart_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

xray_setting_dns_routing_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_setting_dns_routing.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_setting_routing_sync_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

xray_setting_routing_sync.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

xray_setting_test.go

fix: gate embedded unencrypted-outbound rejection on running Xray core version (#6028)

2026-07-21 15:51:46 +02:00

xray_setting.go

fix(xray): synchronize lifecycle state (#6138)

2026-07-29 21:00:29 +02:00

xray_strip_rules_test.go

Add Enable/Disable Toggle for Xray Routing Rules (#5296)

2026-06-15 00:43:49 +02:00

xray_wireguard_config_test.go

fix: preserve per-inbound WireGuard peer addresses (#6344)

2026-09-02 20:45:11 +02:00

xray_xhttp_session_test.go

feat(xhttp): support sessionID* rename + sessionIDTable/Length (xray v26.6.22) (#5506)

2026-06-23 17:38:16 +02:00

xray.go

fix(xray): confine log paths written under any key case

2026-09-03 18:06:15 +02:00