ilyusha 05a083eaef fix(api-token): keep a token's scope when -getApiToken regenerates it, add -tokenScope (#6700) ...

* fix(api-token): keep a token's scope when the CLI regenerates it

RecreateByName deleted the named row and created a new one without a Scope,
so the insert took the column default of admin. Since -tokenName lets the CLI
regenerate any token, rotating a monitor or node-sync token silently turned it
into a full-access one.

The replacement now takes the scope of the row it replaces, and a new name
still gets admin as before. A stored scope this build does not know, as after
a downgrade, fails the rotation and leaves the row alone instead of guessing.

Assisted-by: Claude Code:claude-opus-5-5 (mostly)

* feat(cli): let -getApiToken choose the scope of the token it issues

-tokenScope sets the scope on both branches of -getApiToken: the token minted
on a fresh panel and the one regenerated on a populated panel. Without the flag
a regenerated token keeps its scope and a new one gets admin, so every existing
invocation, install.sh included, behaves as before.

An unknown scope is refused before anything is deleted, so a typo cannot
revoke the token it meant to rotate.

Assisted-by: Claude Code:claude-opus-5-5 (mostly)

* fix(api-token): keep a token's expiry when the CLI regenerates it

RecreateByName built the replacement row with ExpiresAt 0, so running
`x-ui setting -getApiToken -tokenName <name>` on a token issued through
the API with a deadline handed back one that never expires, and said
nothing about it - the same silent widening this branch fixed for scope.

The replacement now carries the replaced row's ExpiresAt. A token whose
deadline has already passed is refused instead of rotated, since keeping
the deadline would mint a dead token and dropping it would revive an
expired credential without limit; the expired row is left untouched.

---------

Co-authored-by: Sanaei <ho3ein.sanaei@gmail.com>

2026-10-02 19:05:27 +02:00

..

discord

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

email

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

integration

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

outbound

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

panel

fix(api-token): keep a token's scope when -getApiToken regenerates it, add -tokenScope (#6700)

2026-10-02 19:05:27 +02:00

tgbot

fix(tgbot): build a client's individual links in-process

2026-09-27 18:07:33 +02:00

access_log_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

api_scale_postgres_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

backup_filename_test.go

feat(backup): prefix backup filenames with date and time (#5606)

2026-06-27 12:08:20 +02:00

bulk_clients_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

bulk_traffic_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

calendar_renew_test.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

calendar_renew.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

calendar_weekly_bound_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

calendar_weekly_renew_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_add_dedupe_test.go

fix(client): stop duplicate client entries accumulating in inbound settings

2026-07-05 21:17:25 +02:00

client_amneziawg_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_amneziawg.go

fix(wireguard): reject allowedIPs that overlap another client's range

2026-09-27 18:18:50 +02:00

client_apply_field_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_attach_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_bulk_fanout_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_flow_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_reenable_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_reset_query_count_test.go

perf(clients): batch the client record lookup in bulk operations

2026-09-10 21:07:49 +02:00

client_bulk_reset_reenable_test.go

fix(clients): surface bulk-reset auto-enable failures (#5763)

2026-07-08 20:53:42 +02:00

client_bulk.go

fix(clients): stop client ops from reverting a renewal committed mid-op

2026-09-28 01:59:33 +02:00

client_create_fanout_test.go

perf(clients): apply a multi-inbound client create concurrently

2026-09-04 01:01:20 +02:00

client_create_reuse_test.go

fix(clients): reuse stored credentials when re-adding an existing identity

2026-07-11 22:48:51 +02:00

client_cross_inbound_race_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_crud.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_delete_continue_test.go

fix(clients): finish deleting from every inbound when one fails

2026-07-11 22:48:57 +02:00

client_delete_node_baseline_test.go

fix(client): clean node_client_traffics rows when deleting a client

2026-07-07 15:05:22 +02:00

client_delete_node_full_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_delete_tombstone_test.go

fix(clients): withdraw the delete tombstone when the email is re-created

2026-09-09 00:17:54 +02:00

client_disable_restart_test.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

client_edit_node_dirty_test.go

fix(node): flag every hosting node before a client edit applies

2026-09-07 01:51:18 +02:00

client_effective_flow_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_email_validation_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

client_external_link_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_external_link.go

Add per-client external link controls (#5650)

2026-08-18 13:55:04 +02:00

client_flow_isolation_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_group_bulk_test.go

fix(groups): report changed bulk moves without restarting xray (#6199)

2026-08-14 19:50:06 +02:00

client_group_node_sync_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_group_reset_test.go

fix(groups): keep group traffic totals stable across client resets and deletes

2026-07-02 09:17:47 +02:00

client_groups.go

feat(clients): preserve traffic counters in portable export/import (#6469)

2026-09-27 02:48:40 +02:00

client_hwid_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_hwid_tx_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_hwid.go

fix(hwid): serialize the device-limit write with its trim (#6591)

2026-09-26 20:30:22 +02:00

client_identity_normalized_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_inbound_apply_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_inbound_apply.go

fix(clients): stop client ops from reverting a renewal committed mid-op

2026-09-28 01:59:33 +02:00

client_ips_prune_test.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

client_link_delta_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_link.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_locks_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_locks.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_lookup_test.go

feat(api): add GET endpoint to look up clients by Telegram ID (#5945)

2026-07-28 22:38:44 +02:00

client_lookup.go

feat(tgbot): access levels and /start account binding (#6518)

2026-09-27 13:33:29 +02:00

client_node_push_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_paging_test.go

feat(clients): filter the client list by clicking a summary stat card

2026-09-15 22:06:22 +02:00

client_paging.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_portable_test.go

feat(clients): preserve traffic counters in portable export/import (#6469)

2026-09-27 02:48:40 +02:00

client_portable.go

feat(clients): preserve traffic counters in portable export/import (#6469)

2026-09-27 02:48:40 +02:00

client_renewal_preview.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_renewal_write_validation_test.go

fix(inbounds): keep the stored client list and enable on inbound save

2026-09-28 13:23:48 +02:00

client_reverse_readd_test.go

fix(clients): keep a vless reverse client's handler across a re-add (#6558)

2026-09-15 18:00:54 +03:00

client_stat_reuse_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_sync_mtproto_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_sync_multiprotocol_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_sync_orphan_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_sync_orphan.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

client_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_traffic_cycle_test.go

feat(clients): give each client its own traffic reset cycle (#6240)

2026-08-18 13:08:44 +02:00

client_traffic_reset_order_test.go

fix(clients): zero traffic before re-enabling a client on reset

2026-09-28 01:59:53 +02:00

client_traffic.go

fix(mtproto): zero sidecar quotas only for clients whose usage was reset

2026-09-28 13:02:50 +02:00

client_update_allowedips_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_update_enable_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_fanout_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_update_keepalive_test.go

feat(clients): let admins set PersistentKeepalive on tunnel clients (#6377)

2026-09-10 22:32:42 +02:00

client_update_no_inbound_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_rename_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_tunnel_peers_test.go

fix(clients): keep per-peer keys when a client spans several tunnel inbounds

2026-09-09 00:30:02 +02:00

client_weekly_renew_crud_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_wireguard_crud_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_wireguard_test.go

fix(wireguard): reject allowedIPs that overlap another client's range

2026-09-27 18:18:50 +02:00

client_wireguard.go

fix(wireguard): reject allowedIPs that overlap another client's range

2026-09-27 18:18:50 +02:00

client.go

feat(clients): preserve traffic counters in portable export/import (#6469)

2026-09-27 02:48:40 +02:00

config.json

fix(xray): place the freedom domain strategy where the core reads it (#6515)

2026-09-14 12:08:38 +02:00

default_template_freedom_test.go

fix(xray): place the freedom domain strategy where the core reads it (#6515)

2026-09-14 12:08:38 +02:00

del_shared_email_runtime_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

depleted_calendar_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

external_hwid.go

fix(sub): send panel guid as X-HWID on outbound subscription fetch (#6579)

2026-09-26 21:59:29 +02:00

fallback.go

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

finalmask_rand_packet_test.go

fix(xray): reject configs xray-core refuses, and check the fixtures against it

2026-07-28 14:43:55 +02:00

geodata.go

feat(xray): browse geosite/geoip categories from routing rules (#6165)

2026-08-15 17:12:59 +02:00

global_traffic_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

golden_fixtures_xray_test.go

chore: refresh dependencies and modernize Go test idioms

2026-07-30 03:14:22 +02:00

happ_crypto.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ_local_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

happ.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

host_test.go

feat(hosts): add a cipher suites override and accept custom suites

2026-09-16 11:56:20 +02:00

host.go

feat(hosts): add a cipher suites override and accept custom suites

2026-09-16 11:56:20 +02:00

import_host_settings_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

inbound_amneziawg_relay_window_test.go

fix(amneziawg): refuse a row's own relay port and keep a disabled row's slot reserved (#6544)

2026-09-15 13:31:07 +03:00

inbound_amneziawg_test.go

fix(amneziawg): bound S1-S3 by the receive buffer, reject overlapping H (#6642)

2026-09-26 22:02:49 +02:00

inbound_amneziawg.go

fix(runtime): drop depleted clients by email, not by stale inbound_id

2026-09-28 02:23:50 +02:00

inbound_autorenew_calendar_test.go

fix(clients): snap EOM 23:59:59 expiry to billing midnight without renew (#6457)

2026-09-12 11:06:47 +02:00

inbound_autorenew_globaltraffic_test.go

fix(traffic): clear cross-panel rows only for clients actually renewed (#6263)

2026-08-22 23:12:33 +02:00

inbound_autorenew_maxcount_test.go

feat(clients): cap how many times a client may auto-renew (#6238)

2026-08-18 11:53:11 +02:00

inbound_autorenew_shadowsocks_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_autorenew_shared_email_test.go

fix(clients): sync auto-renewal across inbounds (#6339)

2026-09-02 20:39:03 +02:00

inbound_autorenew_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_autorenew_weekly_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

inbound_client_ips_merge_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_client_ips.go

fix(ip-limit): CAS-retry inbound_client_ips merges under Postgres (#6612)

2026-09-26 22:00:40 +02:00

inbound_client_move_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

inbound_client_traffic_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_clients_stale_uuid_test.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458)

2026-09-12 11:12:13 +02:00

inbound_clients_tuic_test.go

Feature/tuic v5 (#6337)

2026-09-12 10:15:48 +02:00

inbound_clients.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458)

2026-09-12 11:12:13 +02:00

inbound_create_race_test.go

fix(inbounds): close the port check-and-claim race on the serial writer (#6225)

2026-08-18 11:48:40 +02:00

inbound_disable_flow_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_disable.go

fix(runtime): drop depleted clients by email, not by stale inbound_id

2026-09-28 02:23:50 +02:00

inbound_durable_postgres_test.go

fix(inbounds): reject missing TLS certificates before saving (#6429)

2026-09-08 18:08:24 +02:00

inbound_enable_port_test.go

fix(inbounds): check ports when an inbound is enabled, not only when it is saved (#6549)

2026-09-15 15:29:32 +03:00

inbound_exclude_from_sub_test.go

feat(inbound): excludeFromSub hides links without disabling (#6463)

2026-09-27 12:26:37 +02:00

inbound_fallback_runtime_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_finalmask_reality_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_finalmask_xdns_test.go

feat(xray): update xray-core to v26.9.30 and adapt panel

2026-10-02 13:54:39 +02:00

inbound_finalmask_xmc_test.go

feat(xray): update xray-core to v26.7.28 and adapt panel

2026-07-28 13:14:06 +02:00

inbound_flow_restore_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_flow_restore.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_hysteria_auth_test.go

fix(inbounds): keep the stored client list and enable on inbound save

2026-09-28 13:23:48 +02:00

inbound_import_external_proxy_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_import_legacy_fields_test.go

fix(inbounds): accept v2.x client fields on inbound import

2026-09-27 18:28:07 +02:00

inbound_import_shared_clients_test.go

fix: refresh stale client_traffics row when an inbound-deleted client's email is reused (#6003)

2026-07-21 15:57:55 +02:00

inbound_migration_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_migration.go

fix(database): keep the legacy tag cleanup from colliding with an existing tag (#6592)

2026-09-26 20:30:25 +02:00

inbound_mtproto_apply_test.go

fix(inbounds): keep the stored client list and enable on inbound save

2026-09-28 13:23:48 +02:00

inbound_mtproto_client_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

inbound_mtproto_desired_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_mtproto_test.go

fix(mtproto): stop persisting a vestigial inbound-level secret

2026-07-06 17:55:57 +02:00

inbound_mtproto_txfail_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_mtproto.go

fix(traffic): make a client reset reach every counter enforcing its quota

2026-09-28 02:56:53 +02:00

inbound_node_ips_test.go

fix(nodes): cloned-node attribution, node-hosted client display (online/speed/counts), and sync robustness (#5488)

2026-06-22 20:20:55 +02:00

inbound_node_ips.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

inbound_node_protocol_update_test.go

fix(inbounds): let a node-adopted inbound keep its own protocol on edit

2026-09-09 00:24:01 +02:00

inbound_node_reconcile_test.go

fix(node): import a newly selected node inbound instead of sweeping it

2026-09-13 22:44:50 +02:00

inbound_node_sweep_log_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

inbound_node.go

fix(traffic): make a client reset reach every counter enforcing its quota

2026-09-28 02:56:53 +02:00

inbound_options_node_address_test.go

fix(panel): use the hosting node address for WireGuard client configs (#5679)

2026-07-03 01:12:32 +02:00

inbound_protocol_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_protocol.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_runtime_depleted_filter_test.go

fix(runtime): drop depleted clients by email, not by stale inbound_id

2026-09-28 02:23:50 +02:00

inbound_settings_clients_test.go

fix(clients): parse only settings.clients across protocols (#5855)

2026-07-08 20:31:00 +02:00

inbound_settings_clients.go

fix(inbounds): accept v2.x client fields on inbound import

2026-09-27 18:28:07 +02:00

inbound_settings_commit.go

fix(inbounds): keep the stored client list and enable on inbound save

2026-09-28 13:23:48 +02:00

inbound_settings_stale_write_test.go

fix(clients): stop client ops from reverting a renewal committed mid-op

2026-09-28 01:59:33 +02:00

inbound_sub_sort_test.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound_sublink.go

feat(inbounds): apply remark template to Export all inbound links

2026-06-27 11:22:45 +02:00

inbound_subsort_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_tgbot_lookup_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_tls_test.go

fix(inbounds): reject missing TLS certificates before saving (#6429)

2026-09-08 18:08:24 +02:00

inbound_traffic_apply.go

fix(traffic): make a client reset reach every counter enforcing its quota

2026-09-28 02:56:53 +02:00

inbound_traffic_global.go

fix(node): push a node only the client IPs it hosts

2026-09-15 16:28:31 +02:00

inbound_traffic_reset_test.go

inbounds: allow custom monthly traffic reset days (#6071)

2026-07-28 23:27:09 +02:00

inbound_traffic.go

fix(mtproto): zero sidecar quotas only for clients whose usage was reset

2026-09-28 13:02:50 +02:00

inbound_tuic.go

fix(runtime): drop depleted clients by email, not by stale inbound_id

2026-09-28 02:23:50 +02:00

inbound_update_stale_form_test.go

fix(inbounds): keep the stored client list and enable on inbound save

2026-09-28 13:23:48 +02:00

inbound_update_tag_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_util_test.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound_util.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound.go

feat(xray): update xray-core to v26.9.30 and adapt panel

2026-10-02 13:54:39 +02:00

key_gen_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

metric_history_test.go

chore: bump deps and modernize test loops

2026-06-26 00:10:30 +02:00

metric_history.go

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

mtproto_fake_test.go

fix(traffic): make a client reset reach every counter enforcing its quota

2026-09-28 02:56:53 +02:00

mtproto_quota_reset_test.go

fix(mtproto): zero sidecar quotas only for clients whose usage was reset

2026-09-28 13:02:50 +02:00

node_admin_fanout_test.go

fix(node): fan out operations that call every node

2026-09-15 20:07:18 +02:00

node_bulk_dispatch_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

node_client_breakdown_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_client_expiry_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_client_renew_sync_test.go

fix(node): start a fresh quota window when a node auto-renews a client

2026-07-07 15:05:23 +02:00

node_client_traffic_sum_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

node_client_weekly_renew_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

node_contract.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_credentials_writeonly_test.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_delete_cleanup_test.go

fix(node): release a deleted node's metric series and HTTP client

2026-09-15 20:39:32 +02:00

node_delete_orphan_test.go

fix(nodes): block node delete while inbounds are still attached (#5394)

2026-06-20 01:09:53 +02:00

node_dirty_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_foreign_client_test.go

fix(node): refuse a node's claim on another inbound's client

2026-09-03 18:06:35 +02:00

node_host_adopt_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_http_fake_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

node_mtls_test.go

fix(nodes): apply a rotated master mTLS certificate without restarting the panel (#6194)

2026-08-15 16:03:42 +02:00

node_mtls.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

node_netmetrics_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

node_origin_guid_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_probe_body_cap_test.go

Update deps and simplify parsing

2026-09-08 14:12:13 +02:00

node_probe_unsampled_test.go

fix(nodes): stop a restarting panel from reporting itself as down

2026-09-18 13:25:24 +03:00

node_push_payload_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

node_reset_queue.go

fix(traffic): make a client reset reach every counter enforcing its quota

2026-09-28 02:56:53 +02:00

node_reset_undelivered_test.go

fix(traffic): make a client reset reach every counter enforcing its quota

2026-09-28 02:56:53 +02:00

node_shared_guid_test.go

fix(nodes): cloned-node attribution, node-hosted client display (online/speed/counts), and sync robustness (#5488)

2026-06-22 20:20:55 +02:00

node_sweep_guard_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_sync_link_churn_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

node_tag_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_test.go

fix(node): adopt a matching deployed inbound instead of recreating it (#6197)

2026-08-14 20:01:35 +02:00

node_token_encryption_test.go

feat(nodes): opt-in encryption at rest for the outbound node API token (#6186)

2026-08-15 16:48:50 +02:00

node_tree_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_tree.go

fix(node): drop online clients and sub-nodes of nodes no longer synced

2026-09-15 19:27:38 +02:00

node_unsynced_online_test.go

fix(node): drop online clients and sub-nodes of nodes no longer synced

2026-09-15 19:27:38 +02:00

node.go

fix(traffic): make a client reset reach every counter enforcing its quota

2026-09-28 02:56:53 +02:00

outbound_hwid_test.go

fix(sub): send panel guid as X-HWID on outbound subscription fetch (#6579)

2026-09-26 21:59:29 +02:00

outbound_subscription_ssrf_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

outbound_subscription_test.go

fix(outbounds): keep subscription tags on their server when reality params rotate

2026-09-15 22:39:59 +02:00

outbound_subscription.go

fix(sub): send panel guid as X-HWID on outbound subscription fetch (#6579)

2026-09-26 21:59:29 +02:00

port_conflict_forwarded_test.go

fix(ports): refuse an inbound on a port an AmneziaWG peer forwards (#6554)

2026-09-15 16:58:21 +03:00

port_conflict_test.go

fix(amneziawg): fall back to a free egress port when 64900 is refused

2026-09-27 16:09:54 +02:00

port_conflict.go

fix(amneziawg): fall back to a free egress port when 64900 is refused

2026-09-27 16:09:54 +02:00

reality_scan_test.go

feat(settings): add setting for Reality scan candidates (#6471)

2026-09-13 14:48:28 +02:00

reality_scan.go

feat(settings): add setting for Reality scan candidates (#6471)

2026-09-13 14:48:28 +02:00

reset_writer_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

scale_helpers_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_cold_status_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_geofile_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_import_sniff_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_import_stage_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_pg_restore_test.go

feat(db): add pgclient command to install or upgrade PostgreSQL client tools

2026-07-06 09:24:18 +02:00

server_public_ip_async_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_vlessenc_test.go

feat(web): vless encryption new modes (#5517)

2026-06-24 21:22:42 +02:00

server_xray_checksum_test.go

fix(xray): verify the release archive checksum before installing (#5396)

2026-06-20 00:37:35 +02:00

server.go

fix(nodes): stop a restarting panel from reporting itself as down

2026-09-18 13:25:24 +03:00

setting_clash_test.go

feat(sub): auto-detect subscription format by User-Agent (Updated) (#5826)

2026-07-14 13:01:40 +02:00

setting_factory_defaults_test.go

feat(discord): add Discord notification bot service (#6486)

2026-09-13 14:04:53 +02:00

setting_happ_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

setting_mtls_bundle_test.go

fix(nodes): say which half of node mTLS failed, and say it as an error (#6565)

2026-09-16 12:30:44 +02:00

setting_mtls_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

setting_mtls.go

fix(nodes): say which half of node mTLS failed, and say it as an error (#6565)

2026-09-16 12:30:44 +02:00

setting_remote_routing_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

setting_security_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

setting_sub_identity_test.go

feat(sub): allow identity tokens on every subscription link (#5935)

2026-07-28 22:12:52 +02:00

setting_sub_info_node_test.go

feat(sub): add dummy info node and status configs for subscriptions (#6412)

2026-09-08 17:14:01 +02:00

setting_sub_json_dns_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00

setting_sub_profile_test.go

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

setting.go

feat(sub): add Incy app-management parameters (#6650)

2026-09-27 01:06:17 +02:00

shadowsocks_client_key_test.go

fix(inbound): regenerate SS-2022 client PSKs on method key-size change

2026-06-17 14:11:35 +02:00

stream_network_alias_test.go

feat(xray): update xray-core to v26.7.11 and adapt panel

2026-07-12 00:30:47 +02:00

sub_balancer_inbound_cleanup_test.go

feat(sub): client-side balancers for the JSON subscription (#6243)

2026-08-23 22:34:20 +02:00

sub_balancer_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

sub_balancer.go

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

sub_uri_base_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

sync_scale_postgres_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

traffic_commit_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

traffic_depletion_node_push_test.go

fix(traffic): push depletion changes to nodes off the serial writer

2026-09-15 19:04:55 +02:00

traffic_poll_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

traffic_runtime_apply_test.go

fix(traffic): push depletion changes to nodes off the serial writer

2026-09-15 19:04:55 +02:00

traffic_writer_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

traffic_writer.go

fix(hwid): serialize the device-limit write with its trim (#6591)

2026-09-26 20:30:22 +02:00

url_safety_test.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

url_safety.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

ws_payload_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_amneziawg_outbound_test.go

fix(amneziawg): fall back to a free egress port when 64900 is refused

2026-09-27 16:09:54 +02:00

xray_amneziawg_outbound.go

feat(amneziawg): add AmneziaWG as an outbound protocol (#6320)

2026-09-10 14:50:48 +02:00

xray_bind_conflict_test.go

fix: allow IPv4 and IPv6 inbounds to share a port (#6603)

2026-09-26 22:02:22 +02:00

xray_bind_conflict.go

fix: allow IPv4 and IPv6 inbounds to share a port (#6603)

2026-09-26 22:02:22 +02:00

xray_config_clients_test.go

style: drop the line comments added with the triage fixes

2026-07-27 14:37:57 +02:00

xray_config_inject_test.go

fix(amneziawg): sniff the relay with routeOnly; scope the v6 egress to IPv6 (#6654)

2026-09-26 22:04:08 +02:00

xray_config_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_drop_clients_test.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

xray_lifecycle_test.go

fix(xray): synchronize lifecycle state (#6138)

2026-07-29 21:00:29 +02:00

xray_log_confine_test.go

fix(xray): confine log paths written under any key case

2026-09-03 18:06:15 +02:00

xray_metrics_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

xray_metrics.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_process_test_seam.go

chore(node): cover the sync tick's online prune from the job package

2026-09-15 20:39:32 +02:00

xray_restart_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

xray_setting_dns_qtype_test.go

fix(xray): stop a lone dns qType 0 from matching every query

2026-09-15 16:00:05 +02:00

xray_setting_dns_routing_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_setting_dns_routing.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_setting_routing_sync_test.go

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

xray_setting_routing_sync.go

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

xray_setting_test.go

fix: gate embedded unencrypted-outbound rejection on running Xray core version (#6028)

2026-07-21 15:51:46 +02:00

xray_setting.go

fix(xray): stop a lone dns qType 0 from matching every query

2026-09-15 16:00:05 +02:00

xray_strip_rules_test.go

Add Enable/Disable Toggle for Xray Routing Rules (#5296)

2026-06-15 00:43:49 +02:00

xray_wireguard_config_test.go

feat(clients): let admins set PersistentKeepalive on tunnel clients (#6377)

2026-09-10 22:32:42 +02:00

xray_xhttp_session_test.go

feat(xhttp): support sessionID* rename + sessionIDTable/Length (xray v26.6.22) (#5506)

2026-06-23 17:38:16 +02:00

xray.go

feat(xray): update xray-core to v26.9.30 and adapt panel

2026-10-02 13:54:39 +02:00