4 Commits

Include renames

Author	SHA1	Message	Date
aaaamoooo	5cfc5bebd7	docs(v4): batch report for items 24/25 + notes entries as authored	2026-10-21 13:45:15 +00:00
aaaamoooo	08bf2d08a2	docs: amo v3 batch report + round notes (items 12/15/16/17/20/21/22/23)	2026-10-21 11:08:18 +00:00
aaaamoooo	ad18e16ac6	feat: customer-level credentials shared across all nodes (item 2) ... One credential set per customer (UUID + 32-byte root relay key + shortId) lives on the customer record; node bindings no longer store credentials. SS2022 user keys derive deterministically from the root key by method length (16/24/32-byte prefix), so a single password serves every protocol, matching 3x-ui's per-client credential model. Reality public keys stay a node property and are shown per binding in the credentials pane. - store: load-time convergence — first binding's set wins; a converged password that is not a 32-byte root key is regenerated (uuid/shortId preserved); bindings are stripped; idempotent, covered by tests - deploy: the orchestrator stamps the customer's set onto a build copy; subscriptions resolve the same set; the derivation applies in both the inbound builder and the URI builder (verified live: Alice's N1 link is byte-identical to the pre-change seed expectation, her N2 user key is exactly the root key's 16-byte prefix) - API: GET /api/customers/:id/credentials returns {credentials, bindings}; regenerate is now POST /api/customers/:id/credentials/regenerate and rotates the whole set, rebuilding every deployed node of the customer - UI: credentials pane shows the single shared set plus per-binding node/protocol/Reality-public-key rows - golden subscriptions fixture regenerated under one shared set (RF and SS entries byte-identical to before; five entries audited by hand) - golden baseline re-captured for the new shapes; difftest normalizer now treats a base64 root key's prefix-truncation encodings and the Surge '='-mangled variants as the same secret	2026-10-20 21:21:13 +00:00
aaaamoooo	d576219a27	test(panel-go): freeze Go golden behavior baseline (Node retired, difftest superseded) ... Single-source Go from this round on: golden.mjs replays a fixed API script against a Go panel seeded from the difftest seed DB and diffs every response (learning-normalized) against golden.json. 25 sections: lists, credentials, all subscription formats, deploy job payloads, usage/presence, UI-style node PATCH, /api/system shape, backup, error cases.	2026-10-20 20:45:33 +00:00