MHSanaei 8bbfda0510 fix(email): cap what one SMTP session reads from the server ...

net/smtp buffers a server reply of any length, so a mail server, or
anyone on the path before STARTTLS, could send a greeting or EHLO reply
that never ends and grow the panel's heap until the 30 s deadline, on
every notification.

Each session now reads at most 1 MiB from the server, below TLS, and
fails with a clear error past it.

2026-11-01 13:18:54 +01:00

..

discord

fix(monitoring): read LXC CPU, swap and uptime from the container (#6920)

2026-10-24 20:24:34 +02:00

email

fix(email): cap what one SMTP session reads from the server

2026-11-01 13:18:54 +01:00

integration

feat(warp): register WARP over MASQUE from the WARP modal

2026-10-11 10:31:01 +02:00

outbound

fix(outbound): dial IPv6 literals correctly in TCP probes (#6850)

2026-10-24 06:09:36 +02:00

panel

fix(server): bound the public-IP lookup and accept only an address

2026-11-01 13:18:01 +01:00

tgbot

perf(tgbot): stop loading the whole inbound per client in usage listings

2026-11-01 09:14:43 +01:00

access_log_parse_test.go

fix(server): keep only the requested tail while reading the access log

2026-11-01 00:31:59 +01:00

api_scale_postgres_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

backup_filename_test.go

feat(backup): prefix backup filenames with date and time (#5606)

2026-06-27 12:08:20 +02:00

bulk_clients_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

bulk_traffic_test.go

fix(clients): re-enable only quota-disabled clients on a traffic reset

2026-11-01 08:31:27 +01:00

calendar_renew_test.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

calendar_renew.go

fix(clients): bound the auto-renew interval at a century

2026-10-31 14:32:31 +01:00

calendar_weekly_bound_test.go

fix(clients): bound the auto-renew interval at a century

2026-10-31 14:32:31 +01:00

calendar_weekly_renew_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_add_dedupe_test.go

fix(node): rewrite a node's settings blob without decoding all of it

2026-10-31 10:39:13 +01:00

client_amneziawg_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_amneziawg.go

fix(wireguard): reject allowedIPs that overlap another client's range

2026-09-27 18:18:50 +02:00

client_apply_field_test.go

fix(clients): set a client's Telegram user on every inbound it is on

2026-11-01 00:51:31 +01:00

client_attach_test.go

fix(amneziawg): let an emptied forwardedPorts withdraw a client's forwards

2026-11-01 08:55:38 +01:00

client_bulk_fanout_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_flow_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_reenable_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_reset_query_count_test.go

perf(clients): batch the client record lookup in bulk operations

2026-09-10 21:07:49 +02:00

client_bulk_reset_reenable_test.go

fix(traffic): re-enable quota-disabled clients on inbound and reset-all resets (#6833)

2026-10-24 04:21:11 +02:00

client_bulk.go

fix(amneziawg): let an emptied forwardedPorts withdraw a client's forwards

2026-11-01 08:55:38 +01:00

client_create_fanout_test.go

fix(clients): collapse repeated inbound ids before fanning a client out

2026-11-01 08:44:16 +01:00

client_create_reuse_test.go

fix(clients): reuse stored credentials when re-adding an existing identity

2026-07-11 22:48:51 +02:00

client_cross_inbound_race_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_crud.go

fix(amneziawg): let an emptied forwardedPorts withdraw a client's forwards

2026-11-01 08:55:38 +01:00

client_delete_continue_test.go

fix(clients): finish deleting from every inbound when one fails

2026-07-11 22:48:57 +02:00

client_delete_node_baseline_test.go

fix(client): clean node_client_traffics rows when deleting a client

2026-07-07 15:05:22 +02:00

client_delete_node_full_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_delete_tombstone_test.go

fix(clients): probe inbound settings with a short literal pattern

2026-10-31 14:24:28 +01:00

client_disable_restart_test.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

client_edit_node_dirty_test.go

fix(node): flag every hosting node before a client edit applies

2026-09-07 01:51:18 +02:00

client_effective_flow_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_email_validation_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

client_external_link_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_external_link.go

Add per-client external link controls (#5650)

2026-08-18 13:55:04 +02:00

client_flow_isolation_test.go

fix(node-sync): write only changed client rows in the node traffic merge

2026-10-14 00:37:00 +02:00

client_group_bulk_test.go

fix(groups): report changed bulk moves without restarting xray (#6199)

2026-08-14 19:50:06 +02:00

client_group_node_sync_test.go

fix(clients): store client group names trimmed

2026-11-01 00:03:48 +01:00

client_group_reset_test.go

fix(traffic): stop adding capped counters in SQL

2026-10-31 14:41:12 +01:00

client_groups.go

fix(traffic): stop adding capped counters in SQL

2026-10-31 14:41:12 +01:00

client_host_binding_test.go

feat(clients): bind host rules to individual clients in subscriptions (#6620)

2026-10-24 12:33:02 +02:00

client_hwid_test.go

fix(hwid): keep a subscription's device limit while its client is disabled

2026-11-01 08:39:50 +01:00

client_hwid_tx_test.go

fix(hwid): re-check the device limit where an unlimited fetch registers

2026-11-01 09:02:15 +01:00

client_hwid.go

fix(hwid): re-check the device limit where an unlimited fetch registers

2026-11-01 09:02:15 +01:00

client_identity_normalized_test.go

fix(clients): match non-ASCII capitals in the shared-email checks

2026-11-01 08:37:01 +01:00

client_inbound_apply_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_inbound_apply.go

perf(tgbot): stop loading the whole inbound per client in usage listings

2026-11-01 09:14:43 +01:00

client_ip_sync_postgres_test.go

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

client_ip_sync_scale_test.go

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

client_ips_prune_test.go

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

client_keepalive_range_test.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

client_keepalive.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

client_link_delta_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_link_postgres_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

client_link.go

fix(amneziawg): let an emptied forwardedPorts withdraw a client's forwards

2026-11-01 08:55:38 +01:00

client_locks_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_locks.go

fix(node): let a node change only the clients it alone hosts

2026-11-01 00:02:12 +01:00

client_lookup_test.go

feat(api): add GET endpoint to look up clients by Telegram ID (#5945)

2026-07-28 22:38:44 +02:00

client_lookup.go

fix(clients): probe inbound settings with a short literal pattern

2026-10-31 14:24:28 +01:00

client_node_push_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_paging_test.go

Fix clients group filter and search for non-ASCII capitals (#6685)

2026-10-03 01:22:28 +02:00

client_paging.go

perf(traffic): skip unchanged global writes between heartbeats (#6931)

2026-10-25 08:44:05 +01:00

client_portable_test.go

feat(clients): preserve traffic counters in portable export/import (#6469)

2026-09-27 02:48:40 +02:00

client_portable.go

feat(clients): preserve traffic counters in portable export/import (#6469)

2026-09-27 02:48:40 +02:00

client_renewal_preview.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_renewal_write_validation_test.go

fix(clients): bound the auto-renew interval at a century

2026-10-31 14:32:31 +01:00

client_reverse_readd_test.go

fix(clients): re-enable only quota-disabled clients on a traffic reset

2026-11-01 08:31:27 +01:00

client_stat_reuse_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_sync_mtproto_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_sync_multiprotocol_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_sync_orphan_test.go

fix(node): don't delete clients when a node reports an empty snapshot (#6734)

2026-10-05 16:12:08 +02:00

client_sync_orphan.go

fix(node): let a node change only the clients it alone hosts

2026-11-01 00:02:12 +01:00

client_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_traffic_cycle_test.go

fix(traffic): stop adding capped counters in SQL

2026-10-31 14:41:12 +01:00

client_traffic_reset_order_test.go

fix(clients): zero traffic before re-enabling a client on reset

2026-09-28 01:59:53 +02:00

client_traffic.go

fix(clients): re-enable only quota-disabled clients on a traffic reset

2026-11-01 08:31:27 +01:00

client_update_allowedips_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_update_enable_test.go

fix(clients): re-enable only quota-disabled clients on a traffic reset

2026-11-01 08:31:27 +01:00

client_update_fanout_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_update_keepalive_test.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

client_update_no_inbound_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_rename_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_tunnel_peers_test.go

fix(clients): keep per-peer keys when a client spans several tunnel inbounds

2026-09-09 00:30:02 +02:00

client_weekly_renew_crud_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_wireguard_crud_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_wireguard_test.go

fix(wireguard): hold /0 allowedIPs to the overlap guard

2026-11-01 00:06:09 +01:00

client_wireguard.go

fix(wireguard): hold /0 allowedIPs to the overlap guard

2026-11-01 00:06:09 +01:00

client.go

feat(clients): preserve traffic counters in portable export/import (#6469)

2026-09-27 02:48:40 +02:00

config.json

fix(xray): place the freedom domain strategy where the core reads it (#6515)

2026-09-14 12:08:38 +02:00

default_template_freedom_test.go

fix(xray): place the freedom domain strategy where the core reads it (#6515)

2026-09-14 12:08:38 +02:00

del_shared_email_runtime_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

depleted_calendar_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

external_hwid.go

fix(sub): send panel guid as X-HWID on outbound subscription fetch (#6579)

2026-09-26 21:59:29 +02:00

fallback.go

fix(fallback): derive a linked fallback's PROXY protocol header from its child (#6880)

2026-10-24 07:30:09 +02:00

finalmask_rand_packet_test.go

fix(xray): reject configs xray-core refuses, and check the fixtures against it

2026-07-28 14:43:55 +02:00

geodata.go

feat(xray): browse geosite/geoip categories from routing rules (#6165)

2026-08-15 17:12:59 +02:00

global_traffic_heartbeat_test.go

perf(traffic): skip unchanged global writes between heartbeats (#6931)

2026-10-25 08:44:05 +01:00

global_traffic_postgres_test.go

perf(traffic): skip unchanged global writes between heartbeats (#6931)

2026-10-25 08:44:05 +01:00

global_traffic_scale_test.go

perf(traffic): skip unchanged global writes between heartbeats (#6931)

2026-10-25 08:44:05 +01:00

global_traffic_test.go

fix(traffic): keep enforcing limits when one inbound's settings are broken

2026-10-31 10:43:40 +01:00

golden_fixtures_xray_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

happ_crypto.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ_local_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

happ.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

host_test.go

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

host.go

fix(node): bound the host groups a node's inbounds may adopt

2026-11-01 01:05:48 +01:00

import_host_settings_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

inbound_amneziawg_relay_window_test.go

fix(amneziawg): refuse a row's own relay port and keep a disabled row's slot reserved (#6544)

2026-09-15 13:31:07 +03:00

inbound_amneziawg_test.go

fix(amneziawg): let an emptied forwardedPorts withdraw a client's forwards

2026-11-01 08:55:38 +01:00

inbound_amneziawg.go

fix(amneziawg): let an emptied forwardedPorts withdraw a client's forwards

2026-11-01 08:55:38 +01:00

inbound_autorenew_calendar_test.go

fix(clients): snap EOM 23:59:59 expiry to billing midnight without renew (#6457)

2026-09-12 11:06:47 +02:00

inbound_autorenew_globaltraffic_test.go

fix(traffic): clear cross-panel rows only for clients actually renewed (#6263)

2026-08-22 23:12:33 +02:00

inbound_autorenew_maxcount_test.go

feat(clients): cap how many times a client may auto-renew (#6238)

2026-08-18 11:53:11 +02:00

inbound_autorenew_shadowsocks_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_autorenew_shared_email_test.go

fix(clients): sync auto-renewal across inbounds (#6339)

2026-09-02 20:39:03 +02:00

inbound_autorenew_test.go

fix(clients): keep a hand-disabled client off through auto-renew

2026-11-01 08:23:48 +01:00

inbound_autorenew_weekly_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

inbound_client_ips_merge_test.go

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

inbound_client_ips.go

fix(node): keep a node's online and IP reports to its own clients

2026-10-31 14:17:43 +01:00

inbound_client_move_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

inbound_client_stats_benchmark_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

inbound_client_stats_postgres_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

inbound_client_stats_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

inbound_client_traffic_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

inbound_clients_stale_uuid_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

inbound_clients_tuic_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

inbound_clients.go

fix(clients): match non-ASCII capitals in the shared-email checks

2026-11-01 08:37:01 +01:00

inbound_create_race_test.go

fix(inbounds): close the port check-and-claim race on the serial writer (#6225)

2026-08-18 11:48:40 +02:00

inbound_disable_flow_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_disable.go

fix(clients): keep a hand-disabled client off through auto-renew

2026-11-01 08:23:48 +01:00

inbound_durable_postgres_test.go

fix(inbounds): reject missing TLS certificates before saving (#6429)

2026-09-08 18:08:24 +02:00

inbound_enable_port_test.go

fix(inbounds): check ports when an inbound is enabled, not only when it is saved (#6549)

2026-09-15 15:29:32 +03:00

inbound_exclude_from_sub_test.go

feat(inbound): excludeFromSub hides links without disabling (#6463)

2026-09-27 12:26:37 +02:00

inbound_fallback_runtime_test.go

fix(fallback): derive a linked fallback's PROXY protocol header from its child (#6880)

2026-10-24 07:30:09 +02:00

inbound_finalmask_reality_test.go

fix(wireguard): check every line of generated client configs

2026-10-24 01:10:09 +02:00

inbound_finalmask_salamander_test.go

fix(finalmask): refuse a salamander password xray-core cannot open

2026-10-11 18:26:45 +02:00

inbound_finalmask_xdns_test.go

fix(finalmask): keep a single udphop mask last in every client finalmask

2026-10-11 18:02:12 +02:00

inbound_finalmask_xmc_test.go

feat(xray): update xray-core to v26.7.28 and adapt panel

2026-07-28 13:14:06 +02:00

inbound_flow_restore_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_flow_restore.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_hysteria_auth_test.go

fix(inbounds): keep the stored client list and enable on inbound save

2026-09-28 13:23:48 +02:00

inbound_import_external_proxy_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_import_legacy_fields_test.go

fix(inbounds): accept v2.x client fields on inbound import

2026-09-27 18:28:07 +02:00

inbound_import_shared_clients_test.go

fix: refresh stale client_traffics row when an inbound-deleted client's email is reused (#6003)

2026-07-21 15:57:55 +02:00

inbound_masque_test.go

fix(clients): refuse a ":" email on a MASQUE inbound

2026-10-11 16:35:20 +02:00

inbound_migration_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_migration.go

fix(traffic): keep lifecycle statements under SQLite's variable limit

2026-10-31 10:34:35 +01:00

inbound_mtproto_apply_test.go

fix(inbounds): keep the stored client list and enable on inbound save

2026-09-28 13:23:48 +02:00

inbound_mtproto_client_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

inbound_mtproto_desired_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_mtproto_test.go

fix(mtproto): stop persisting a vestigial inbound-level secret

2026-07-06 17:55:57 +02:00

inbound_mtproto_txfail_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_mtproto.go

fix(traffic): make a client reset reach every counter enforcing its quota

2026-09-28 02:56:53 +02:00

inbound_node_claims.go

fix(node): let a node take back a client orphaned before the upgrade

2026-11-01 13:13:10 +01:00

inbound_node_ips_test.go

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

inbound_node_ips.go

fix(node): keep a node's online and IP reports to its own clients

2026-10-31 14:17:43 +01:00

inbound_node_protocol_update_test.go

feat(inbounds): deploy AmneziaWG, TUIC and MTProto inbounds to nodes

2026-10-03 00:26:46 +02:00

inbound_node_reconcile_test.go

fix(node): import a newly selected node inbound instead of sweeping it

2026-09-13 22:44:50 +02:00

inbound_node_sidecar_test.go

feat(inbounds): deploy AmneziaWG, TUIC and MTProto inbounds to nodes

2026-10-03 00:26:46 +02:00

inbound_node_sweep_log_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

inbound_node.go

fix(node): keep summing usage across panels for a client the node shares by email

2026-11-01 10:25:14 +01:00

inbound_options_node_address_test.go

fix(panel): use the hosting node address for WireGuard client configs (#5679)

2026-07-03 01:12:32 +02:00

inbound_protocol_masque_test.go

feat(xray): add the MASQUE protocol and transport

2026-10-11 10:28:49 +02:00

inbound_protocol_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

inbound_protocol.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

inbound_push_guard.go

fix(node): keep pushed inbounds off the node host's own resources

2026-10-31 23:30:02 +01:00

inbound_runtime_depleted_filter_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

inbound_settings_clients_test.go

fix(clients): parse only settings.clients across protocols (#5855)

2026-07-08 20:31:00 +02:00

inbound_settings_clients.go

fix(inbounds): accept v2.x client fields on inbound import

2026-09-27 18:28:07 +02:00

inbound_settings_commit.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

inbound_settings_stale_write_test.go

fix(clients): stop client ops from reverting a renewal committed mid-op

2026-09-28 01:59:33 +02:00

inbound_sub_sort_test.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound_sublink.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

inbound_subsort_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_tgbot_lookup_test.go

fix(tgbot): look up a Telegram account's clients through the indexed client table (#6887)

2026-10-24 05:55:19 +02:00

inbound_tls_test.go

fix(node): keep pushed inbounds off the node host's own resources

2026-10-31 23:30:02 +01:00

inbound_traffic_apply.go

fix(node): give each node one push budget per traffic sync

2026-10-31 14:07:08 +01:00

inbound_traffic_global.go

fix(node): bound the panel GUIDs a peer reports

2026-10-31 09:22:24 +00:00

inbound_traffic_reset_test.go

inbounds: allow custom monthly traffic reset days (#6071)

2026-07-28 23:27:09 +02:00

inbound_traffic.go

fix(clients): match non-ASCII capitals in the shared-email checks

2026-11-01 08:37:01 +01:00

inbound_tuic_test.go

fix(tuic): bound the timeout settings at a day

2026-10-31 14:53:20 +01:00

inbound_tuic.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

inbound_update_external_proxy_test.go

fix(hosts): carry an inbound update's externalProxy change onto its imported hosts (#6831)

2026-10-24 04:20:50 +02:00

inbound_update_hot_users_test.go

fix(node): remove a client a pushed inbound disables from the running core

2026-11-01 00:24:29 +01:00

inbound_update_stale_form_test.go

fix(inbounds): keep the stored client list and enable on inbound save

2026-09-28 13:23:48 +02:00

inbound_update_tag_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_util_test.go

fix(service): keep chunk capacity math from overflowing

2026-10-11 22:10:46 +02:00

inbound_util.go

fix(traffic): keep lifecycle statements under SQLite's variable limit

2026-10-31 10:34:35 +01:00

inbound_xdrive_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

inbound.go

perf(tgbot): stop loading the whole inbound per client in usage listings

2026-11-01 09:14:43 +01:00

kernel_client_guard_test.go

fix(amneziawg): let an emptied forwardedPorts withdraw a client's forwards

2026-11-01 08:55:38 +01:00

key_gen_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

metric_history_test.go

chore: bump deps and modernize test loops

2026-06-26 00:10:30 +02:00

metric_history.go

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

mtproto_fake_test.go

fix(traffic): make a client reset reach every counter enforcing its quota

2026-09-28 02:56:53 +02:00

mtproto_quota_reset_test.go

fix(traffic): re-enable quota-disabled clients on inbound and reset-all resets (#6833)

2026-10-24 04:21:11 +02:00

node_admin_fanout_test.go

fix(node): fan out operations that call every node

2026-09-15 20:07:18 +02:00

node_bulk_dispatch_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

node_client_breakdown_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_client_expiry_sync_test.go

fix(node): let a node change only the clients it alone hosts

2026-11-01 00:02:12 +01:00

node_client_renew_sync_test.go

fix(node): start a fresh quota window when a node auto-renews a client

2026-07-07 15:05:23 +02:00

node_client_traffic_sum_test.go

fix(node): let a node change only the clients it alone hosts

2026-11-01 00:02:12 +01:00

node_client_weekly_renew_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

node_contract.go

fix(monitoring): read LXC CPU, swap and uptime from the container (#6920)

2026-10-24 20:24:34 +02:00

node_credentials_writeonly_test.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_degraded_snapshot_test.go

fix(node): don't delete clients when a node reports an empty snapshot (#6734)

2026-10-05 16:12:08 +02:00

node_delete_cleanup_test.go

fix(node): release a deleted node's metric series and HTTP client

2026-09-15 20:39:32 +02:00

node_delete_orphan_test.go

fix(nodes): block node delete while inbounds are still attached (#5394)

2026-06-20 01:09:53 +02:00

node_detached_client_stats_test.go

fix(node): ignore a node's stats for clients detached from the inbound

2026-10-05 20:37:35 +02:00

node_dirty_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_foreign_client_test.go

fix(node): let a node take back a client orphaned before the upgrade

2026-11-01 13:13:10 +01:00

node_host_adopt_test.go

fix(node): bound the host groups a node's inbounds may adopt

2026-11-01 01:05:48 +01:00

node_http_fake_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

node_inbound_replace_test.go

fix(node): keep client traffic history when a node inbound is replaced

2026-10-06 12:35:59 +02:00

node_mtls_test.go

fix(nodes): apply a rotated master mTLS certificate without restarting the panel (#6194)

2026-08-15 16:03:42 +02:00

node_mtls.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

node_netmetrics_test.go

fix(monitoring): read LXC CPU, swap and uptime from the container (#6920)

2026-10-24 20:24:34 +02:00

node_origin_guid_test.go

fix(node): bound the panel GUIDs a peer reports

2026-10-31 09:22:24 +00:00

node_probe_body_cap_test.go

fix(node): bound the panel GUIDs a peer reports

2026-10-31 09:22:24 +00:00

node_probe_unsampled_test.go

fix(nodes): stop a restarting panel from reporting itself as down

2026-09-18 13:25:24 +03:00

node_push_payload_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

node_reset_queue.go

fix(node): settle each queued node reset on its own

2026-10-31 14:01:45 +01:00

node_reset_undelivered_test.go

fix(node): give each node one push budget per traffic sync

2026-10-31 14:07:08 +01:00

node_shared_guid_test.go

fix(node): keep a node's online and IP reports to its own clients

2026-10-31 14:17:43 +01:00

node_sweep_guard_test.go

fix(traffic): keep enforcing limits when one inbound's settings are broken

2026-10-31 10:43:40 +01:00

node_sync_link_churn_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

node_tag_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_test.go

fix(net): stop per-request clients parking connections to remote hosts

2026-10-31 08:32:58 +00:00

node_token_encryption_test.go

feat(nodes): opt-in encryption at rest for the outbound node API token (#6186)

2026-08-15 16:48:50 +02:00

node_tree_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_tree.go

fix(node): drop online clients and sub-nodes of nodes no longer synced

2026-09-15 19:27:38 +02:00

node_unsynced_online_test.go

fix(node): keep a node's online and IP reports to its own clients

2026-10-31 14:17:43 +01:00

node.go

fix(node): bound the panel GUIDs a peer reports

2026-10-31 09:22:24 +00:00

outbound_hwid_test.go

fix(sub): send panel guid as X-HWID on outbound subscription fetch (#6579)

2026-09-26 21:59:29 +02:00

outbound_subscription_ssrf_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

outbound_subscription_test.go

fix(xray): refuse xhttp downloadSettings the core's dialer cannot use

2026-11-01 00:41:37 +01:00

outbound_subscription.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

port_conflict_forwarded_test.go

fix(amneziawg): keep port forwards per inbound and off future relay ports

2026-11-01 01:22:51 +01:00

port_conflict_test.go

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00

port_conflict.go

fix(amneziawg): keep port forwards per inbound and off future relay ports

2026-11-01 01:22:51 +01:00

reality_scan_test.go

feat(settings): add setting for Reality scan candidates (#6471)

2026-09-13 14:48:28 +02:00

reality_scan.go

feat(settings): add setting for Reality scan candidates (#6471)

2026-09-13 14:48:28 +02:00

reset_writer_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

scale_helpers_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

server_cold_status_test.go

fix(monitoring): refresh cached public IP addresses (#6933)

2026-10-25 13:50:29 +01:00

server_geofile_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_import_sniff_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_import_stage_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_pg_restore_test.go

feat(db): add pgclient command to install or upgrade PostgreSQL client tools

2026-07-06 09:24:18 +02:00

server_public_ip_async_test.go

fix(server): bound the public-IP lookup and accept only an address

2026-11-01 13:18:01 +01:00

server_remote_cert_hash_test.go

fix(xray): bound what the in-process config loader is asked to expand

2026-10-31 08:43:30 +00:00

server_scope_test.go

fix(monitoring): refresh cached public IP addresses (#6933)

2026-10-25 13:50:29 +01:00

server_scope.go

fix(monitoring): read LXC CPU, swap and uptime from the container (#6920)

2026-10-24 20:24:34 +02:00

server_syslog_test.go

Bound the panel syslog view with a journalctl timeout (#6689)

2026-10-03 01:21:25 +02:00

server_vlessenc_test.go

feat(web): vless encryption new modes (#5517)

2026-06-24 21:22:42 +02:00

server_xray_checksum_test.go

fix(xray): verify the release archive checksum before installing (#5396)

2026-06-20 00:37:35 +02:00

server.go

fix(server): bound the public-IP lookup and accept only an address

2026-11-01 13:18:01 +01:00

setting_clash_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

setting_factory_defaults_test.go

feat(discord): add Discord notification bot service (#6486)

2026-09-13 14:04:53 +02:00

setting_happ_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

setting_mtls_bundle_test.go

fix(nodes): say which half of node mTLS failed, and say it as an error (#6565)

2026-09-16 12:30:44 +02:00

setting_mtls_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

setting_mtls.go

fix(nodes): say which half of node mTLS failed, and say it as an error (#6565)

2026-09-16 12:30:44 +02:00

setting_remote_routing_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

setting_security_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

setting_sub_identity_test.go

feat(sub): allow identity tokens on every subscription link (#5935)

2026-07-28 22:12:52 +02:00

setting_sub_info_node_test.go

feat(hosts): add drag-and-drop and global subscription ordering (#6895)

2026-10-24 07:27:47 +02:00

setting_sub_json_dns_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00

setting_sub_profile_test.go

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

setting.go

feat(hosts): add drag-and-drop and global subscription ordering (#6895)

2026-10-24 07:27:47 +02:00

shadowsocks_client_key_test.go

fix(inbound): regenerate SS-2022 client PSKs on method key-size change

2026-06-17 14:11:35 +02:00

shadowsocks_server_key_test.go

fix(inbounds): refuse 2022-blake3-chacha20-poly1305 on shadowsocks inbounds

2026-10-11 21:20:07 +02:00

stream_network_alias_test.go

feat(xray): update xray-core to v26.7.11 and adapt panel

2026-07-12 00:30:47 +02:00

sub_balancer_inbound_cleanup_test.go

feat(sub): client-side balancers for the JSON subscription (#6243)

2026-08-23 22:34:20 +02:00

sub_balancer_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

sub_balancer.go

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

sub_data_invalidation.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

sub_uri_base_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

sublink_registry_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

sync_scale_postgres_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

traffic_commit_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

traffic_depletion_node_push_test.go

fix(traffic): push depletion changes to nodes off the serial writer

2026-09-15 19:04:55 +02:00

traffic_poll_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

traffic_runtime_apply_test.go

fix(inbounds): delete an inbound's dependent rows on every delete path

2026-11-01 00:36:45 +01:00

traffic_writer_test.go

fix(service): run inbound deletes and depleted-client purges on the serial traffic writer (#6912)

2026-10-24 05:06:03 +02:00

traffic_writer.go

fix(clients): withdraw delete tombstones for clients any serialized write re-creates

2026-10-23 19:30:13 +02:00

tuic_accounting_identity_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

tuic_relay_apply.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_email_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_isolation_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_lifecycle_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_reconcile.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_routing_gate_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_window_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_settings.go

fix(tuic): bound the timeout settings at a day

2026-10-31 14:53:20 +01:00

tuic_traffic_receipt.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

tuic_user_routing_test.go

test(tuic): retry until one port is free for both TCP and UDP

2026-10-24 07:20:16 +02:00

tx_pool_starvation_test.go

fix(node-sync): keep shared-email lookups on the open transaction

2026-10-11 22:05:24 +02:00

url_safety_test.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

url_safety.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

ws_payload_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_amneziawg_outbound_test.go

fix(amneziawg): fall back to a free egress port when 64900 is refused

2026-09-27 16:09:54 +02:00

xray_amneziawg_outbound.go

feat(amneziawg): add AmneziaWG as an outbound protocol (#6320)

2026-09-10 14:50:48 +02:00

xray_balancer_override_e2e_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

xray_balancer_override_test.go

fix(xray): keep balancer overrides across routing reloads (#6779)

2026-10-12 14:59:26 +02:00

xray_balancer_override.go

fix(xray): keep balancer overrides across routing reloads (#6779)

2026-10-12 14:59:26 +02:00

xray_bind_conflict_test.go

fix: allow IPv4 and IPv6 inbounds to share a port (#6603)

2026-09-26 22:02:22 +02:00

xray_bind_conflict.go

fix: allow IPv4 and IPv6 inbounds to share a port (#6603)

2026-09-26 22:02:22 +02:00

xray_config_clients_test.go

fix(shadowsocks): keep a 2022 inbound with no enabled client locked

2026-11-01 00:30:14 +01:00

xray_config_inject_test.go

fix(xray): block private-range egress in per-peer AmneziaWG IPv6 outbounds

2026-11-01 10:03:17 +01:00

xray_config_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_drop_clients_test.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

xray_hot_apply_persist_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

xray_lifecycle_test.go

fix(xray): synchronize lifecycle state (#6138)

2026-07-29 21:00:29 +02:00

xray_log_confine_test.go

fix(xray): confine log paths written under any key case

2026-09-03 18:06:15 +02:00

xray_metrics_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

xray_metrics.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_process_test_seam.go

chore(node): cover the sync tick's online prune from the job package

2026-09-15 20:39:32 +02:00

xray_restart_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

xray_setting_dns_qtype_test.go

fix(xray): stop a lone dns qType 0 from matching every query

2026-09-15 16:00:05 +02:00

xray_setting_dns_routing_test.go

fix(xray): allow a private DoH server on the port Xray dials (#6918)

2026-10-24 19:40:00 +02:00

xray_setting_dns_routing.go

fix(xray): allow a private DoH server on the port Xray dials (#6918)

2026-10-24 19:40:00 +02:00

xray_setting_routing_sync_test.go

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

xray_setting_routing_sync.go

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

xray_setting_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

xray_setting.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

xray_strip_rules_test.go

Add Enable/Disable Toggle for Xray Routing Rules (#5296)

2026-06-15 00:43:49 +02:00

xray_wireguard_config_test.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

xray_xhttp_session_test.go

feat(xray): update xray-core to v26.10.10 and adapt panel

2026-10-11 07:55:12 +02:00

xray.go

fix(xray): block private-range egress in per-peer AmneziaWG IPv6 outbounds

2026-11-01 10:03:17 +01:00