Sanaei ab4229534e fix(node): cap the status body the heartbeat probe decodes ...

probe decoded the node status response with json.NewDecoder(resp.Body) and no
size limit. encoding/json buffers the whole value before decoding, so the
allocation was dictated by the peer regardless of how few fields the envelope
declares — and the heartbeat job probes up to 32 nodes concurrently on a 4s
budget with no client-level timeout.

The sibling RPC path already caps every node response at 64 MiB
(readCappedBody in internal/web/runtime), so this was the one uncapped read
of node-controlled data. A status envelope holds a handful of scalars, so the
cap here is 1 MiB rather than the RPC figure.

The peer is untrusted in the skip and pin TLS modes, and the same decode is
reachable from the nodes test and probe endpoints.

2026-09-04 02:35:11 +02:00

..

email

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

integration

feat(nord): support multi-server NordLynx outbounds (#6311)

2026-09-02 20:20:10 +02:00

outbound

fix(outbound): test VLESS vnext endpoints (#6358)

2026-09-02 20:46:49 +02:00

panel

fix(panel): forward the panel's proxy to update.sh's own downloads (#6259)

2026-08-24 03:01:56 +02:00

tgbot

fix(tgbot): split long messages at line boundaries (#6293)

2026-08-24 13:03:37 +02:00

access_log_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

api_scale_postgres_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

backup_filename_test.go

feat(backup): prefix backup filenames with date and time (#5606)

2026-06-27 12:08:20 +02:00

bulk_clients_test.go

fix(node): stop client edits from tearing down node inbounds and harden reconcile fingerprints

2026-07-05 02:06:58 +02:00

bulk_traffic_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

calendar_renew_test.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

calendar_renew.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

client_add_dedupe_test.go

fix(client): stop duplicate client entries accumulating in inbound settings

2026-07-05 21:17:25 +02:00

client_amneziawg_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_amneziawg.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_apply_field_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_attach_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_bulk_flow_test.go

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

client_bulk_reenable_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_bulk_reset_reenable_test.go

fix(clients): surface bulk-reset auto-enable failures (#5763)

2026-07-08 20:53:42 +02:00

client_bulk.go

fix: Prevent node snapshots from resurrecting bulk-deleted clients (#6382)

2026-09-02 20:25:40 +02:00

client_create_fanout_test.go

perf(clients): apply a multi-inbound client create concurrently

2026-09-04 01:01:20 +02:00

client_create_reuse_test.go

fix(clients): reuse stored credentials when re-adding an existing identity

2026-07-11 22:48:51 +02:00

client_cross_inbound_race_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_crud.go

perf(clients): apply a multi-inbound client create concurrently

2026-09-04 01:01:20 +02:00

client_delete_continue_test.go

fix(clients): finish deleting from every inbound when one fails

2026-07-11 22:48:57 +02:00

client_delete_node_baseline_test.go

fix(client): clean node_client_traffics rows when deleting a client

2026-07-07 15:05:22 +02:00

client_delete_node_full_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_delete_tombstone_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

client_effective_flow_test.go

fix(flow): restore XTLS Vision when an inbound becomes flow-eligible (#5520)

2026-06-24 13:02:42 +02:00

client_email_validation_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

client_external_link_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_external_link.go

Add per-client external link controls (#5650)

2026-08-18 13:55:04 +02:00

client_flow_isolation_test.go

fix: enable XTLS vision flow for VLESS+XHTTP+vlessenc in UI and share links (#5157) (#5185)

2026-06-11 12:04:02 +02:00

client_group_bulk_test.go

fix(groups): report changed bulk moves without restarting xray (#6199)

2026-08-14 19:50:06 +02:00

client_group_node_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_group_reset_test.go

fix(groups): keep group traffic totals stable across client resets and deletes

2026-07-02 09:17:47 +02:00

client_groups.go

fix(groups): report changed bulk moves without restarting xray (#6199)

2026-08-14 19:50:06 +02:00

client_hwid_test.go

feat(clients): allow removing a single HWID device (#6265)

2026-08-21 14:17:05 +02:00

client_hwid.go

feat(clients): allow removing a single HWID device (#6265)

2026-08-21 14:17:05 +02:00

client_identity_normalized_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_inbound_apply_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_inbound_apply.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_ips_prune_test.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

client_link_delta_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_link.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_locks_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_locks.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_lookup_test.go

feat(api): add GET endpoint to look up clients by Telegram ID (#5945)

2026-07-28 22:38:44 +02:00

client_lookup.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_paging_test.go

perf(clients): make the clients page scale to large panels

2026-07-30 02:49:32 +02:00

client_paging.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

client_portable.go

feat(clients): give each client its own traffic reset cycle (#6240)

2026-08-18 13:08:44 +02:00

client_stat_reuse_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_sync_mtproto_test.go

feat(mtproto): per-client ad-tags, management-API auth, and record secret sync

2026-07-07 12:00:43 +02:00

client_sync_multiprotocol_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

client_sync_orphan_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_sync_orphan.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

client_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_traffic_cycle_test.go

feat(clients): give each client its own traffic reset cycle (#6240)

2026-08-18 13:08:44 +02:00

client_traffic.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_allowedips_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_update_enable_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_no_inbound_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_rename_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_wireguard_crud_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_wireguard_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_wireguard.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

config.json

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

del_shared_email_runtime_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

depleted_calendar_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

fallback.go

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

finalmask_rand_packet_test.go

fix(xray): reject configs xray-core refuses, and check the fixtures against it

2026-07-28 14:43:55 +02:00

geodata.go

feat(xray): browse geosite/geoip categories from routing rules (#6165)

2026-08-15 17:12:59 +02:00

global_traffic_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

golden_fixtures_xray_test.go

chore: refresh dependencies and modernize Go test idioms

2026-07-30 03:14:22 +02:00

host_test.go

feat(hosts): bulk-add multiple hosts to multiple inbounds (#5677)

2026-07-08 23:35:20 +02:00

host.go

fix(hosts): assign group ids to imported hosts and repair empty ones

2026-07-23 18:52:42 +02:00

import_host_settings_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

inbound_amneziawg_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_amneziawg.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_autorenew_calendar_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

inbound_autorenew_globaltraffic_test.go

fix(traffic): clear cross-panel rows only for clients actually renewed (#6263)

2026-08-22 23:12:33 +02:00

inbound_autorenew_maxcount_test.go

feat(clients): cap how many times a client may auto-renew (#6238)

2026-08-18 11:53:11 +02:00

inbound_autorenew_shadowsocks_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_autorenew_shared_email_test.go

fix(clients): sync auto-renewal across inbounds (#6339)

2026-09-02 20:39:03 +02:00

inbound_autorenew_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_client_ips_merge_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

inbound_client_ips.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

inbound_client_move_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

inbound_client_traffic_test.go

fix(traffic): persist delayed-start expiry only for converted clients

2026-07-02 16:24:18 +02:00

inbound_clients.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

inbound_create_race_test.go

fix(inbounds): close the port check-and-claim race on the serial writer (#6225)

2026-08-18 11:48:40 +02:00

inbound_disable_flow_test.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_disable.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_durable_postgres_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

inbound_fallback_runtime_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_finalmask_reality_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_finalmask_xmc_test.go

feat(xray): update xray-core to v26.7.28 and adapt panel

2026-07-28 13:14:06 +02:00

inbound_flow_restore_test.go

fix(flow): restore XTLS Vision when an inbound becomes flow-eligible (#5520)

2026-06-24 13:02:42 +02:00

inbound_flow_restore.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_hysteria_auth_test.go

fix: reject Hysteria inbound updates with empty client auth (#6268)

2026-08-22 23:11:42 +02:00

inbound_import_external_proxy_test.go

fix(inbound): convert legacy externalProxy to hosts on import

2026-06-27 13:50:06 +02:00

inbound_import_shared_clients_test.go

fix: refresh stale client_traffics row when an inbound-deleted client's email is reused (#6003)

2026-07-21 15:57:55 +02:00

inbound_migration_test.go

fix(migration): stop a half-applied startup migration from committing silently (#6182)

2026-08-14 20:10:39 +02:00

inbound_migration.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_mtproto_apply_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

inbound_mtproto_client_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

inbound_mtproto_desired_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_mtproto_test.go

fix(mtproto): stop persisting a vestigial inbound-level secret

2026-07-06 17:55:57 +02:00

inbound_mtproto_txfail_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_mtproto.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_node_ips_test.go

fix(nodes): cloned-node attribution, node-hosted client display (online/speed/counts), and sync robustness (#5488)

2026-06-22 20:20:55 +02:00

inbound_node_ips.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

inbound_node_reconcile_test.go

fix(node): sweep a selected inbound the node reports without its prefix

2026-09-04 02:34:53 +02:00

inbound_node_sweep_log_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

inbound_node.go

fix(node): sweep a selected inbound the node reports without its prefix

2026-09-04 02:34:53 +02:00

inbound_options_node_address_test.go

fix(panel): use the hosting node address for WireGuard client configs (#5679)

2026-07-03 01:12:32 +02:00

inbound_protocol_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_protocol.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_settings_clients_test.go

fix(clients): parse only settings.clients across protocols (#5855)

2026-07-08 20:31:00 +02:00

inbound_settings_clients.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

inbound_sub_sort_test.go

feat(sub): per-inbound sort order for subscription links

2026-06-12 12:03:22 +02:00

inbound_sublink.go

feat(inbounds): apply remark template to Export all inbound links

2026-06-27 11:22:45 +02:00

inbound_subsort_test.go

feat(inbounds): add a narrow endpoint for subscription sort order (#6179)

2026-08-15 21:48:24 +02:00

inbound_tgbot_lookup_test.go

fix(tgbot): find clients by tgId regardless of settings JSON formatting

2026-07-05 20:18:59 +02:00

inbound_traffic_apply.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_traffic_global.go

fix(node): stop a departed master's frozen traffic from disabling clients (#6113)

2026-07-27 14:21:56 +02:00

inbound_traffic_reset_test.go

inbounds: allow custom monthly traffic reset days (#6071)

2026-07-28 23:27:09 +02:00

inbound_traffic.go

fix(clients): sync auto-renewal across inbounds (#6339)

2026-09-02 20:39:03 +02:00

inbound_update_tag_test.go

fix(inbound): scope port-conflict check to the stored node on update (#5833)

2026-07-09 01:18:30 +02:00

inbound_util.go

feat(sub): per-inbound sort order for subscription links

2026-06-12 12:03:22 +02:00

inbound.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

key_gen_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

metric_history_test.go

chore: bump deps and modernize test loops

2026-06-26 00:10:30 +02:00

metric_history.go

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

mtproto_fake_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

node_bulk_dispatch_test.go

perf(clients): apply a multi-inbound client create concurrently

2026-09-04 01:01:20 +02:00

node_client_breakdown_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_client_expiry_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_client_renew_sync_test.go

fix(node): start a fresh quota window when a node auto-renews a client

2026-07-07 15:05:23 +02:00

node_client_traffic_sum_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_contract.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_credentials_writeonly_test.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_delete_orphan_test.go

fix(nodes): block node delete while inbounds are still attached (#5394)

2026-06-20 01:09:53 +02:00

node_dirty_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_foreign_client_test.go

fix(node): refuse a node's claim on another inbound's client

2026-09-03 18:06:35 +02:00

node_host_adopt_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_mtls_test.go

fix(nodes): apply a rotated master mTLS certificate without restarting the panel (#6194)

2026-08-15 16:03:42 +02:00

node_mtls.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

node_netmetrics_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

node_origin_guid_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_probe_body_cap_test.go

fix(node): cap the status body the heartbeat probe decodes

2026-09-04 02:35:11 +02:00

node_push_payload_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

node_shared_guid_test.go

fix(nodes): cloned-node attribution, node-hosted client display (online/speed/counts), and sync robustness (#5488)

2026-06-22 20:20:55 +02:00

node_sweep_guard_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_sync_link_churn_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

node_tag_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_test.go

fix(node): adopt a matching deployed inbound instead of recreating it (#6197)

2026-08-14 20:01:35 +02:00

node_token_encryption_test.go

feat(nodes): opt-in encryption at rest for the outbound node API token (#6186)

2026-08-15 16:48:50 +02:00

node_tree_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_tree.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node.go

fix(node): cap the status body the heartbeat probe decodes

2026-09-04 02:35:11 +02:00

outbound_subscription_ssrf_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

outbound_subscription_test.go

fix(outbounds): preserve stable subscription tags (#6345)

2026-09-02 20:46:20 +02:00

outbound_subscription.go

fix(outbounds): preserve stable subscription tags (#6345)

2026-09-02 20:46:20 +02:00

port_conflict_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

port_conflict.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

reality_scan_test.go

fix(reality): make the REALITY target check usable on a private network (#6242)

2026-08-18 13:47:59 +02:00

reality_scan.go

fix(reality): make the REALITY target check usable on a private network (#6242)

2026-08-18 13:47:59 +02:00

reset_writer_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

scale_helpers_test.go

refactor: modernize Go with strings.SplitSeq and maps.Copy

2026-07-08 22:10:54 +02:00

server_import_sniff_test.go

feat(server): sniff sqlite panel restore uploads and keep the fallback on failure

2026-07-12 20:14:22 +02:00

server_import_stage_test.go

feat(server): sniff sqlite panel restore uploads and keep the fallback on failure

2026-07-12 20:14:22 +02:00

server_pg_restore_test.go

feat(db): add pgclient command to install or upgrade PostgreSQL client tools

2026-07-06 09:24:18 +02:00

server_vlessenc_test.go

feat(web): vless encryption new modes (#5517)

2026-06-24 21:22:42 +02:00

server_xray_checksum_test.go

fix(xray): verify the release archive checksum before installing (#5396)

2026-06-20 00:37:35 +02:00

server.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

setting_clash_test.go

feat(sub): auto-detect subscription format by User-Agent (Updated) (#5826)

2026-07-14 13:01:40 +02:00

setting_factory_defaults_test.go

fix(nodes): persist the master mTLS credential atomically and stop silent reissue (#6195)

2026-08-14 20:03:54 +02:00

setting_mtls_bundle_test.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

setting_mtls_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

setting_mtls.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

setting_remote_routing_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

setting_security_test.go

fix(sub): randomize fresh panel subscription paths (#6375)

2026-09-03 16:34:37 +02:00

setting_sub_identity_test.go

feat(sub): allow identity tokens on every subscription link (#5935)

2026-07-28 22:12:52 +02:00

setting.go

fix(sub): randomize fresh panel subscription paths (#6375)

2026-09-03 16:34:37 +02:00

shadowsocks_client_key_test.go

fix(inbound): regenerate SS-2022 client PSKs on method key-size change

2026-06-17 14:11:35 +02:00

stream_network_alias_test.go

feat(xray): update xray-core to v26.7.11 and adapt panel

2026-07-12 00:30:47 +02:00

sub_balancer_inbound_cleanup_test.go

feat(sub): client-side balancers for the JSON subscription (#6243)

2026-08-23 22:34:20 +02:00

sub_balancer_test.go

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

sub_balancer.go

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

sub_uri_base_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

sync_scale_postgres_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

traffic_commit_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

traffic_poll_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

traffic_runtime_apply_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

traffic_writer_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

traffic_writer.go

fix(service): serialize client/inbound writes to prevent Postgres deadlock

2026-06-17 15:55:47 +02:00

url_safety_test.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

url_safety.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

ws_payload_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_config_clients_test.go

style: drop the line comments added with the triage fixes

2026-07-27 14:37:57 +02:00

xray_config_inject_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

xray_config_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_lifecycle_test.go

fix(xray): synchronize lifecycle state (#6138)

2026-07-29 21:00:29 +02:00

xray_log_confine_test.go

fix(xray): confine log paths written under any key case

2026-09-03 18:06:15 +02:00

xray_metrics_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_metrics.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_restart_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

xray_setting_dns_routing_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_setting_dns_routing.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_setting_routing_sync_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

xray_setting_routing_sync.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

xray_setting_test.go

fix: gate embedded unencrypted-outbound rejection on running Xray core version (#6028)

2026-07-21 15:51:46 +02:00

xray_setting.go

fix(xray): synchronize lifecycle state (#6138)

2026-07-29 21:00:29 +02:00

xray_strip_rules_test.go

Add Enable/Disable Toggle for Xray Routing Rules (#5296)

2026-06-15 00:43:49 +02:00

xray_wireguard_config_test.go

fix: preserve per-inbound WireGuard peer addresses (#6344)

2026-09-02 20:45:11 +02:00

xray_xhttp_session_test.go

feat(xhttp): support sessionID* rename + sessionIDTable/Length (xray v26.6.22) (#5506)

2026-06-23 17:38:16 +02:00

xray.go

fix(xray): confine log paths written under any key case

2026-09-03 18:06:15 +02:00