Claude a2ab38197e feat(cluster): xcvm_core cluster probe, update pin guard and ADR 0004 (Phase 1) ...

- `console.php xcvm_core status` reports the loaded extension and its
  cluster API: the version against the range the panel speaks, whether
  the root is initialised (with its fingerprint), the licence binding kid
  and the clock state.
- The installer rolls back an update whose cluster API falls outside
  ClusterCryptoFactory::API_MIN..API_MAX when the installed one was
  inside it, so an update cannot silently strand enrolled nodes.
  Installing an exact pinned version still needs versioned paths in the
  binaries repo.
- ClusterExtensionIntegrationTest runs the panel facade against a real
  test-hooks build, and skips without one or without a throwaway
  XCVM_CONFIG_DIR. It covers init, token issue, the agent opening its
  token, MAIN's session, BOX both ways, per-node binding of epoch records,
  and signing with record classes. It passes against the 2.2.2 build.
- ADR 0004 records the panel's side of the contract:
  - who owns which part of the wire;
  - the canonical request/response form;
  - fail-closed rules;
  - migration renumbering (the plan's 026–032 ship as 028–034);
  - where the settings live;
  - the measured crypto budget.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Es8UhyPS8MNjuYTagqfGWi

2026-09-25 10:28:53 +00:00

..

M3uParser

style: apply K&R + tab formatting across the codebase (make cs-fix)

2026-09-13 14:14:23 +03:00

PhpM3u8

style: apply K&R + tab formatting across the codebase (make cs-fix)

2026-09-13 14:14:23 +03:00

ActiveCodeActivationTest.php

fix(active-codes): a device-locked code answers only its device, and only one request activates it

2026-09-12 21:43:59 +00:00

ActiveCodePackageRuleTest.php

fix(security): resellers generate activation codes on their own terms only

2026-09-17 08:07:02 +00:00

AdminHelpersTest.php

fix(security): keep post-login redirects on the panel

2026-09-17 07:42:42 +00:00

AdminStreamTokenTest.php

feat(streaming): tamper-proof stream tokens (AES-256-GCM), switched on per panel

2026-09-13 08:49:06 +00:00

ArchitectureTest.php

test: dual-backend TestDb (SQLite + MariaDB) + skip-on-panel guards

2026-09-13 21:17:06 +03:00

AttributionGuardTest.php

feat(integrity): lock panel UI when AGPL attribution is removed

2026-09-18 15:10:43 +03:00

AuthorizationTest.php

test(core): cover Authorization checks and BruteforceGuard flood truncation

2026-09-13 14:42:08 +03:00

AuthRepositoryTest.php

test: dual-backend TestDb (SQLite + MariaDB) + skip-on-panel guards

2026-09-13 21:17:06 +03:00

BootPipelineTest.php

feat(integrity): lock panel UI when AGPL attribution is removed

2026-09-18 15:10:43 +03:00

BootStageTest.php

refactor(bootstrap): replace WebApi's inline RequestGuard with shared boot stages

2026-09-24 19:30:49 +03:00

BootstrapPathsTest.php

fix(views): import migrated classes at top of 5 admin view templates

2026-06-25 20:57:37 +03:00

BouquetMapEntryTest.php

test: add bouquet and admin playback coverage

2026-09-18 09:57:17 +00:00

BouquetServiceTest.php

refactor: apply Rector safe sets + fix the transform's fallout (reviewed)

2026-09-13 17:27:42 +03:00

BruteforceGuardTest.php

test(core): cover Authorization checks and BruteforceGuard flood truncation

2026-09-13 14:42:08 +03:00

CanonicalRequestTest.php

feat(cluster): cluster crypto contract on the panel side (Phase 1)

2026-09-25 10:28:53 +00:00

CategoryTemplateApplyCustomDataTest.php

feat(category-templates): apply templates on line/mag/enigma & reseller vouchers

2026-09-21 18:37:33 +03:00

CategoryTemplateVisibilityTest.php

feat(category-templates): show templates shared by any ancestor reseller

2026-09-20 20:40:55 +03:00

ChannelServiceTest.php

test(channel): cover ChannelService massEdit / setOrder branches

2026-09-13 21:21:09 +03:00

ClientFilterEnumTest.php

refactor(admin): replace admin_constants globals with reference classes and enums

2026-08-31 20:58:23 +03:00

ClusterCryptoBenchTest.php

feat(cluster): cluster crypto contract on the panel side (Phase 1)

2026-09-25 10:28:53 +00:00

ClusterCryptoFailClosedTest.php

feat(cluster): cluster crypto contract on the panel side (Phase 1)

2026-09-25 10:28:53 +00:00

ClusterExtensionIntegrationTest.php

feat(cluster): xcvm_core cluster probe, update pin guard and ADR 0004 (Phase 1)

2026-09-25 10:28:53 +00:00

ClusterSchemaTest.php

feat(db): cluster API schema and settings (Phase 1)

2026-09-25 10:28:53 +00:00

ClusterSettingsTest.php

feat(admin): cluster settings with server-side checks and a Cluster tab (Phase 1)

2026-09-25 10:28:53 +00:00

ClusterTicketsTest.php

feat(cluster): cluster crypto contract on the panel side (Phase 1)

2026-09-25 10:28:53 +00:00

ClusterVectorsTest.php

feat(cluster): cluster crypto contract on the panel side (Phase 1)

2026-09-25 10:28:53 +00:00

ComposerDiscoveryTest.php

chore(psr4): phase 3 (Core) — namespace Core/Events

2026-06-24 22:18:52 +03:00

ConnectAuditTest.php

feat(cluster): trace-only audit of MySQL/Redis connects

2026-09-25 09:26:52 +00:00

ConnectionTrackerReadConnectionsTest.php

fix(reseller): guard the live-connections Redis batch read

2026-09-22 22:28:46 +03:00

ConsoleDiscoveryTest.php

fix(views): import migrated classes at top of 5 admin view templates

2026-06-25 20:57:37 +03:00

ConstantsInitializerTest.php

feat(build): per-build watermark (RELEASE_ID / XC_VM_BUILD_ID)

2026-09-18 15:45:34 +03:00

CoreEnumTest.php

refactor(bootstrap): route WebApiBootstrap DB init through the shared stages

2026-09-16 17:23:33 +03:00

CounterRateSamplerTest.php

fix(watchdog): pin the heartbeat telemetry fixes with stronger tests

2026-09-25 00:20:41 +00:00

CronLockIdStableTest.php

fix(cron): stop deriving cron lock ids from live_streaming_pass

2026-09-25 09:04:26 +00:00

CronProviderTest.php

chore(psr4): phase 3 (Cli) — namespace Cli + switch console.php to FQCN discovery

2026-06-25 19:03:39 +03:00

DatabaseHostTest.php

fix(db): let Database accept a null host again (CLI boot crash)

2026-09-13 16:05:56 +03:00

DatabaseTransactionalTest.php

fix(db): transactional() rolls back on an Error too

2026-09-12 22:40:36 +00:00

DomainResolverTest.php

test(core): cover SettingsManager, DomainResolver, RequestManager, XML streamer

2026-09-13 14:39:43 +03:00

EncryptionPreviousExtraTest.php

fix(servers): harden the OPENSSL_EXTRA repair after review

2026-09-25 00:56:05 +00:00

EncryptionTest.php

feat(streaming): tamper-proof stream tokens (AES-256-GCM), switched on per panel

2026-09-13 08:49:06 +00:00

ErrorResponderTest.php

feat(integrity): lock panel UI when AGPL attribution is removed

2026-09-18 15:10:43 +03:00

EventDispatcherTest.php

chore(psr4): phase 3 (Core) — namespace Core/Events

2026-06-24 22:18:52 +03:00

ExceptionHierarchyTest.php

style: apply K&R + tab formatting across the codebase (make cs-fix)

2026-09-13 14:14:23 +03:00

FanoutClientTest.php

feat(fanout): surface the daemon's memory, and let the panel drain a node

2026-09-18 00:45:37 +00:00

FanoutConfigTest.php

feat(fanout): toggle the daemon's debug narration from the panel

2026-09-18 07:40:43 +00:00

FanoutModeTest.php

feat(fanout): add a master switch that stops the xc_fanout daemon

2026-09-25 10:07:46 +00:00

FanoutSyncOrphanTest.php

test: silence stdout/error_log noise during the test run

2026-09-13 14:16:29 +03:00

FfmpegPathsTest.php

chore(psr4): phase 3 — namespace Streaming layer

2026-06-25 18:55:35 +03:00

FileCacheTest.php

test(core): cover FileCache and the Translator backfill

2026-09-13 14:45:12 +03:00

GeoIPServiceTest.php

fix(streaming): safeguard GeoIP reader and HOST constant against live white screen

2026-09-21 19:03:39 +03:00

GeoLiteReleaseUpdaterTest.php

test: silence stdout/error_log noise during the test run

2026-09-13 14:16:29 +03:00

GitHubReleasesTest.php

refactor(geoip): generic GitHubReleases client + domain-owned release sync

2026-09-10 16:11:29 +03:00

HLSGeneratorLegacyTest.php

feat(streaming): serve live streams the pre-fanout way when fanout is off

2026-09-25 10:07:47 +00:00

HlsSequenceTest.php

fix(hls): stop renumbering live playlists whose segments exceed 10 s

2026-09-11 16:19:22 +01:00

HmacTokenTest.php

test: repair the SQLite test harness broken by strict typing

2026-09-13 14:22:55 +03:00

HttpRangeTest.php

fix(delivery): correct byte ranges for VOD and catch-up seeking

2026-09-11 16:19:50 +01:00

ImageUtilsTest.php

fix(player-api): a channel without an icon took down the whole listing

2026-09-18 09:57:17 +00:00

IngestFeederTest.php

feat(fanout): IngestFeeder, a reliable daemon feed for the PHP producers

2026-09-11 16:17:09 +01:00

InputValidatorTest.php

fix(security): confirmIDs returns the integers it checked

2026-09-17 07:45:48 +00:00

InstallCredentialsTest.php

fix(install): keep SSH credentials off argv and disk; pin the node host key

2026-09-25 09:10:04 +00:00

InterfaceContractTest.php

refactor(ministra): move Stalker portal from module into core (src/Ministra)

2026-08-11 21:41:11 +03:00

LazyDatabaseHandlerTest.php

feat(db): lazy database handle for the streaming endpoints

2026-09-25 10:07:46 +00:00

LbArchiveGateTest.php

fix(build): strip stale LB manifest paths and gate stale/routed entries

2026-09-25 01:14:19 +00:00

LbInstallFlowOpensslExtraTest.php

fix(servers): harden the OPENSSL_EXTRA repair after review

2026-09-25 00:56:05 +00:00

LicenseGateTest.php

feat(license): fanout licence gate seam (soft, fail-open)

2026-09-18 15:32:50 +03:00

ListensToAttributeTest.php

chore(psr4): phase 3 (Core) — namespace Core/Events

2026-06-24 22:18:52 +03:00

LiveSecondIpConnectionTest.php

fix(stream): move the disallow_2nd_ip_con Redis decision into acceptedLineIP()

2026-09-24 23:46:54 +00:00

LogImportCronJobsTest.php

refactor(logs): write node log records through LogSink

2026-09-25 10:07:47 +00:00

LoginFloodTest.php

fix(auth): the login flood limit blocks addresses again

2026-09-13 08:34:00 +00:00

LoginSessionFixationTest.php

test: dual-backend TestDb (SQLite + MariaDB) + skip-on-panel guards

2026-09-13 21:17:06 +03:00

LogSinkTest.php

refactor(logs): write node log records through LogSink

2026-09-25 10:07:47 +00:00

MigrationRunnerRollbackTest.php

feat(update): reverse DB migrations on version rollback

2026-09-24 22:12:44 +03:00

ModuleLoaderBootTest.php

feat(reseller): let modules register reseller sidebar entries

2026-09-24 18:04:45 +03:00

ModuleLoaderPriorityTest.php

fix(modules): improve dependency handling and diagnostics for module loading

2026-06-30 22:41:46 +03:00

ModuleLoaderPsr4ResolverTest.php

chore(psr4): phase 3 (Core) — namespace Core/Events

2026-06-24 22:18:52 +03:00

ModuleLoaderTest.php

test(modules): dir convention, legacy migration, loader resilience, install

2026-07-03 20:12:01 +03:00

ModuleManagerMigrationsTest.php

fix(modules): stop a reinstall from switching a disabled module back on

2026-09-22 20:56:43 +03:00

ModuleMigratorTest.php

test(core): cover the DB layer — ModuleMigrator, SettingsRepository, AuthRepository

2026-09-13 14:51:45 +03:00

ModuleRegistriesTest.php

test(core): cover UpdateChannels and the module extension registries

2026-09-13 14:26:46 +03:00

ModuleStateEnumTest.php

chore(psr4): phase 3 (Core) — namespace Core/Enum + Core/Exception

2026-06-24 22:23:42 +03:00

ModuleUpdateCheckerTest.php

feat(modules): resolve module update sources + weekly update-check cron

2026-07-03 20:10:41 +03:00

MonitorCommandTest.php

refactor: apply Rector safe sets + fix the transform's fallout (reviewed)

2026-09-13 17:27:42 +03:00

NavbarProfileMenuTest.php

feat(navbar): make admin profile dropdown registry-driven

2026-07-29 19:37:43 +03:00

NetworkUtilsTest.php

refactor(admin): readable, testable stream entry points (+2 bug fixes)

2026-09-09 22:32:37 +03:00

NodeRoleTest.php

fix(cron): run cluster-wide cron work on MAIN only

2026-09-25 09:04:26 +00:00

NodeRpcActionsTest.php

refactor(cluster): route MAIN→node calls through NodeRpc and NodeActions

2026-09-25 10:07:47 +00:00

OnDemandStartLockTest.php

fix(live): viewers arriving together start a stopped on-demand stream once

2026-09-12 21:59:27 +00:00

OpensslExtraTest.php

fix(servers): harden the OPENSSL_EXTRA repair after review

2026-09-25 00:56:05 +00:00

PageAuthorizationPostActionTest.php

fix(security): enforce admin and reseller page permissions again

2026-09-17 07:48:24 +00:00

PhpFpmWorkerPidsTest.php

fix(users): date a remote worker pid by its last write and tell idle pools from unknown

2026-09-25 00:04:16 +00:00

PlaylistGeneratorEncryptedUrlTest.php

feat(stream): implement Encrypt Playlists across live and VOD

2026-09-21 19:11:10 +03:00

ProcessResourceUsageTest.php

fix(streams): the Resources column shows CPU from the first pass, and keeps showing it

2026-09-12 21:27:38 +00:00

ProxyIdentityTest.php

fix(proxy): bind proxy_api.php to the reporting proxy's address

2026-09-25 09:05:42 +00:00

QueryHelperTest.php

chore(psr4): phase 3 (Core hubs) — namespace Core/Database

2026-06-24 21:15:06 +03:00

RadioServiceMassEditTest.php

refactor(radio): third Rector batch (reviewed) + decompose massEdit

2026-09-13 18:57:54 +03:00

RadioServiceProcessTest.php

refactor(radio): decompose RadioService::process into tested helpers + flatten

2026-09-13 18:33:02 +03:00

RadioServiceTest.php

refactor(radio): third Rector batch (reviewed) + decompose massEdit

2026-09-13 18:57:54 +03:00

ReferenceDataTest.php

refactor(admin): replace admin_constants globals with reference classes and enums

2026-08-31 20:58:23 +03:00

ReleaseArchiveInspectorTest.php

feat(update): reverse DB migrations on version rollback

2026-09-24 22:12:44 +03:00

RequestManagerTest.php

test(core): cover SettingsManager, DomainResolver, RequestManager, XML streamer

2026-09-13 14:39:43 +03:00

RequestTest.php

test(core): cover the Http\Request input abstraction and sanitizers

2026-09-13 14:29:54 +03:00

ResellerActionEnumTest.php

refactor(admin): replace admin_constants globals with reference classes and enums

2026-08-31 20:58:23 +03:00

ResellerAPIProcessDataTest.php

fix(security): resellers can no longer pair onto or re-trial other lines

2026-09-17 07:45:14 +00:00

ResellerDashboardConnectionMapTest.php

feat(reseller): dashboard location map, live connections and recent media

2026-09-22 22:29:06 +03:00

ResellerNavbarRegistryTest.php

feat(reseller): let modules register reseller sidebar entries

2026-09-24 18:04:45 +03:00

SecretMatchesTest.php

fix(auth): compare shared secrets strictly and in constant time

2026-09-12 22:42:10 +00:00

SegmentReaderTest.php

feat(streaming): serve live streams the pre-fanout way when fanout is off

2026-09-25 10:07:47 +00:00

ServerDiagnoseOpensslExtraTest.php

fix(servers): harden the OPENSSL_EXTRA repair after review

2026-09-25 00:56:05 +00:00

ServerRepositoryPhpPidsTest.php

fix(users): date a remote worker pid by its last write and tell idle pools from unknown

2026-09-25 00:04:16 +00:00

ServerRepositorySimpleTest.php

fix(server): accept null permissions in getStreamingSimple/getProxySimple

2026-09-13 16:10:40 +03:00

ServerSyncOpensslExtraCommandTest.php

fix(servers): harden the OPENSSL_EXTRA repair after review

2026-09-25 00:56:05 +00:00

ServiceContainerTest.php

chore(psr4): phase 3 (Core) — namespace Core/Container

2026-06-24 22:13:35 +03:00

SessionManagerTest.php

refactor(admin): delete functions.php, consolidate the admin bootstrap

2026-09-18 11:32:15 +03:00

SettingsIdleBufferRatioTest.php

fix(settings): the fanout idle buffer ratio takes a decimal, such as 0.25

2026-09-13 09:02:40 +00:00

SettingsManagerTest.php

test(core): cover SettingsManager, DomainResolver, RequestManager, XML streamer

2026-09-13 14:39:43 +03:00

SettingsRepositoryTest.php

test(core): cover the DB layer — ModuleMigrator, SettingsRepository, AuthRepository

2026-09-13 14:51:45 +03:00

SignalDispatcherParityTest.php

refactor(signals): route every signals write through SignalDispatcher

2026-09-25 09:13:51 +00:00

SignalQueueTest.php

refactor(signal): unify deferred-work signals behind SignalQueue

2026-08-09 13:01:57 +03:00

SignalsLoopQueryRateTest.php

fix(daemons): reload the servers list on a 5-second timer

2026-09-25 09:28:03 +00:00

SignTagSeparationTest.php

feat(cluster): cluster crypto contract on the panel side (Phase 1)

2026-09-25 10:28:53 +00:00

StartupCommandRuntimeFilesTest.php

refactor: apply the Rector stage-2 pass and keep its helpers reachable from tests

2026-09-22 18:19:45 +03:00

StatusBadgeTest.php

refactor(admin): replace admin_constants globals with reference classes and enums

2026-08-31 20:58:23 +03:00

StreamAuthMiddlewareHostTest.php

fix(core,streaming): preserve execution permissions for core scripts and redis self-healing on boot

2026-09-21 19:44:23 +03:00

StreamCacheBuilderSourceTest.php

refactor(streams): add StreamSource, StreamRowMerge and StreamCacheBuilder seams

2026-09-25 10:07:47 +00:00

StreamConfigRepositoryTest.php

chore(psr4): phase 3 — namespace Domain layer

2026-06-25 18:39:28 +03:00

StreamPipelineTest.php

chore(psr4): phase 3 (Core hubs) — namespace Core/Http

2026-06-24 21:32:10 +03:00

StreamProcessBuildLiveTest.php

fix(streaming): feed delayed, LLOD and loopback channels to the daemon

2026-09-11 16:19:02 +01:00

StreamProcessLogoTest.php

refactor(streaming): extract map/scodec/source/HLS/FLV helpers with tests

2026-08-07 19:31:18 +03:00

StreamProcessMovieOutputTest.php

refactor(streaming): extract delay resume helpers from startStream

2026-08-07 21:01:59 +03:00

StreamProcessStopMovieTest.php

fix(security): stop a movie without running shell commands

2026-09-17 08:41:26 +00:00

StreamProcessSubtitleImportTest.php

fix: three crashes from null values and a missing cache file

2026-09-17 07:51:18 +00:00

StreamProcessSubtitleTest.php

fix(streaming): feed delayed, LLOD and loopback channels to the daemon

2026-09-11 16:19:02 +01:00

StreamProcessSupervisionTest.php

fix(streams): a supervised stream must fill stream_info, not only the columns

2026-09-11 11:03:06 +00:00

StreamProducerCountTest.php

fix(watchdog): correct bandwidth totals, rps, producers and fatals

2026-09-25 00:10:15 +00:00

StreamRowMergeTest.php

refactor(streams): add StreamSource, StreamRowMerge and StreamCacheBuilder seams

2026-09-25 10:07:47 +00:00

StreamsCronConnectionsTest.php

refactor: apply the Rector stage-2 pass and keep its helpers reachable from tests

2026-09-22 18:19:45 +03:00

StreamServiceParseM3UTest.php

chore(psr4): phase 3 — namespace Domain layer

2026-06-25 18:39:28 +03:00

StreamSorterTest.php

fix(player-api): a channel without an icon took down the whole listing

2026-09-18 09:57:17 +00:00

StreamStateWriterTest.php

refactor(streams): write node runtime state through StreamStateWriter

2026-09-25 10:07:46 +00:00

StreamTokenCallSitesTest.php

test: dual-backend TestDb (SQLite + MariaDB) + skip-on-panel guards

2026-09-13 21:17:06 +03:00

StreamUtilsTest.php

refactor(admin): readable, testable stream entry points (+2 bug fixes)

2026-09-09 22:32:37 +03:00

SystemInfoGuardsTest.php

fix(watchdog): correct bandwidth totals, rps, producers and fatals

2026-09-25 00:10:15 +00:00

SystemInfoNetworkTest.php

fix(watchdog): pin the heartbeat telemetry fixes with stronger tests

2026-09-25 00:20:41 +00:00

SystemInfoNginxStatusTest.php

fix(watchdog): pin the heartbeat telemetry fixes with stronger tests

2026-09-25 00:20:41 +00:00

ThemeEnumTest.php

refactor(admin): replace admin_constants globals with reference classes and enums

2026-08-31 20:58:23 +03:00

TicketVisibilityTest.php

fix(tickets): overhaul ticket lifecycle, visibility and admin interactions

2026-09-22 16:32:39 +03:00

TimeUtilsTest.php

chore(psr4): phase 3 (Core) — namespace remaining Core subdirs

2026-06-24 22:35:33 +03:00

TranslatorIsRtlTest.php

feat(i18n): right-to-left (RTL) UI support and Arabic translation

2026-09-21 21:32:19 +03:00

TranslatorTest.php

test(core): cover FileCache and the Translator backfill

2026-09-13 14:45:12 +03:00

UpdateChannelsTest.php

test(core): cover UpdateChannels and the module extension registries

2026-09-13 14:26:46 +03:00

UserRepositoryTest.php

fix(player-api): tolerate null bouquets and stream icon during player login

2026-09-21 18:55:17 +03:00

UsersCronPhpPidsTest.php

fix(users): date a remote worker pid by its last write and tell idle pools from unknown

2026-09-25 00:04:16 +00:00

XcvmCoreClusterPinTest.php

feat(cluster): xcvm_core cluster probe, update pin guard and ADR 0004 (Phase 1)

2026-09-25 10:28:53 +00:00

XmlStringStreamerTest.php

test(core): cover SettingsManager, DomainResolver, RequestManager, XML streamer

2026-09-13 14:39:43 +03:00