Claude fddf79b439 fix(install): ship the main's OPENSSL_EXTRA to new load balancers ...

LbInstallFlow::provisionConfig shipped only config.enc. A MAIN set up by
the current installer holds a random config/openssl_extra, so every LB
added with server:install ran on the built-in OPENSSL_EXTRA and rejected
the stream tokens MAIN mints for the redirects it serves (/auth, /vauth,
/tsauth, /thauth, subtitles), and could not decrypt MAIN's hmac_keys.

The new provisionOpensslExtra step removes any config/openssl_extra a
previous MAIN left on the host, then sends the MAIN's file when it holds
a value and makes it 0600. It runs after the config.enc upload and
before config/ is chowned to xc_vm, so php-fpm can read it; a failed
upload marks the server errored (status 4) like a failed config.enc.
When the MAIN has no file it runs on the built-in default, and so does
the LB.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TQHeypQpfAXTdCysmi7b6a

2026-09-25 00:32:46 +00:00

..

M3uParser

style: apply K&R + tab formatting across the codebase (make cs-fix)

2026-09-13 14:14:23 +03:00

PhpM3u8

style: apply K&R + tab formatting across the codebase (make cs-fix)

2026-09-13 14:14:23 +03:00

ActiveCodeActivationTest.php

fix(active-codes): a device-locked code answers only its device, and only one request activates it

2026-09-12 21:43:59 +00:00

ActiveCodePackageRuleTest.php

fix(security): resellers generate activation codes on their own terms only

2026-09-17 08:07:02 +00:00

AdminHelpersTest.php

fix(security): keep post-login redirects on the panel

2026-09-17 07:42:42 +00:00

AdminStreamTokenTest.php

feat(streaming): tamper-proof stream tokens (AES-256-GCM), switched on per panel

2026-09-13 08:49:06 +00:00

ArchitectureTest.php

test: dual-backend TestDb (SQLite + MariaDB) + skip-on-panel guards

2026-09-13 21:17:06 +03:00

AttributionGuardTest.php

feat(integrity): lock panel UI when AGPL attribution is removed

2026-09-18 15:10:43 +03:00

AuthorizationTest.php

test(core): cover Authorization checks and BruteforceGuard flood truncation

2026-09-13 14:42:08 +03:00

AuthRepositoryTest.php

test: dual-backend TestDb (SQLite + MariaDB) + skip-on-panel guards

2026-09-13 21:17:06 +03:00

BootPipelineTest.php

feat(integrity): lock panel UI when AGPL attribution is removed

2026-09-18 15:10:43 +03:00

BootStageTest.php

refactor(bootstrap): replace WebApi's inline RequestGuard with shared boot stages

2026-09-24 19:30:49 +03:00

BootstrapPathsTest.php

fix(views): import migrated classes at top of 5 admin view templates

2026-06-25 20:57:37 +03:00

BouquetMapEntryTest.php

test: add bouquet and admin playback coverage

2026-09-18 09:57:17 +00:00

BouquetServiceTest.php

refactor: apply Rector safe sets + fix the transform's fallout (reviewed)

2026-09-13 17:27:42 +03:00

BruteforceGuardTest.php

test(core): cover Authorization checks and BruteforceGuard flood truncation

2026-09-13 14:42:08 +03:00

CategoryTemplateApplyCustomDataTest.php

feat(category-templates): apply templates on line/mag/enigma & reseller vouchers

2026-09-21 18:37:33 +03:00

CategoryTemplateVisibilityTest.php

feat(category-templates): show templates shared by any ancestor reseller

2026-09-20 20:40:55 +03:00

ChannelServiceTest.php

test(channel): cover ChannelService massEdit / setOrder branches

2026-09-13 21:21:09 +03:00

ClientFilterEnumTest.php

refactor(admin): replace admin_constants globals with reference classes and enums

2026-08-31 20:58:23 +03:00

ComposerDiscoveryTest.php

chore(psr4): phase 3 (Core) — namespace Core/Events

2026-06-24 22:18:52 +03:00

ConnectionTrackerReadConnectionsTest.php

fix(reseller): guard the live-connections Redis batch read

2026-09-22 22:28:46 +03:00

ConsoleDiscoveryTest.php

fix(views): import migrated classes at top of 5 admin view templates

2026-06-25 20:57:37 +03:00

ConstantsInitializerTest.php

feat(build): per-build watermark (RELEASE_ID / XC_VM_BUILD_ID)

2026-09-18 15:45:34 +03:00

CoreEnumTest.php

refactor(bootstrap): route WebApiBootstrap DB init through the shared stages

2026-09-16 17:23:33 +03:00

CounterRateSamplerTest.php

fix(watchdog): pin the heartbeat telemetry fixes with stronger tests

2026-09-25 00:20:41 +00:00

CronProviderTest.php

chore(psr4): phase 3 (Cli) — namespace Cli + switch console.php to FQCN discovery

2026-06-25 19:03:39 +03:00

DatabaseHostTest.php

fix(db): let Database accept a null host again (CLI boot crash)

2026-09-13 16:05:56 +03:00

DatabaseTransactionalTest.php

fix(db): transactional() rolls back on an Error too

2026-09-12 22:40:36 +00:00

DomainResolverTest.php

test(core): cover SettingsManager, DomainResolver, RequestManager, XML streamer

2026-09-13 14:39:43 +03:00

EncryptionTest.php

feat(streaming): tamper-proof stream tokens (AES-256-GCM), switched on per panel

2026-09-13 08:49:06 +00:00

ErrorResponderTest.php

feat(integrity): lock panel UI when AGPL attribution is removed

2026-09-18 15:10:43 +03:00

EventDispatcherTest.php

chore(psr4): phase 3 (Core) — namespace Core/Events

2026-06-24 22:18:52 +03:00

ExceptionHierarchyTest.php

style: apply K&R + tab formatting across the codebase (make cs-fix)

2026-09-13 14:14:23 +03:00

FanoutClientTest.php

feat(fanout): surface the daemon's memory, and let the panel drain a node

2026-09-18 00:45:37 +00:00

FanoutConfigTest.php

feat(fanout): toggle the daemon's debug narration from the panel

2026-09-18 07:40:43 +00:00

FanoutSyncOrphanTest.php

test: silence stdout/error_log noise during the test run

2026-09-13 14:16:29 +03:00

FfmpegPathsTest.php

chore(psr4): phase 3 — namespace Streaming layer

2026-06-25 18:55:35 +03:00

FileCacheTest.php

test(core): cover FileCache and the Translator backfill

2026-09-13 14:45:12 +03:00

GeoIPServiceTest.php

fix(streaming): safeguard GeoIP reader and HOST constant against live white screen

2026-09-21 19:03:39 +03:00

GeoLiteReleaseUpdaterTest.php

test: silence stdout/error_log noise during the test run

2026-09-13 14:16:29 +03:00

GitHubReleasesTest.php

refactor(geoip): generic GitHubReleases client + domain-owned release sync

2026-09-10 16:11:29 +03:00

HlsSequenceTest.php

fix(hls): stop renumbering live playlists whose segments exceed 10 s

2026-09-11 16:19:22 +01:00

HmacTokenTest.php

test: repair the SQLite test harness broken by strict typing

2026-09-13 14:22:55 +03:00

HttpRangeTest.php

fix(delivery): correct byte ranges for VOD and catch-up seeking

2026-09-11 16:19:50 +01:00

ImageUtilsTest.php

fix(player-api): a channel without an icon took down the whole listing

2026-09-18 09:57:17 +00:00

IngestFeederTest.php

feat(fanout): IngestFeeder, a reliable daemon feed for the PHP producers

2026-09-11 16:17:09 +01:00

InputValidatorTest.php

fix(security): confirmIDs returns the integers it checked

2026-09-17 07:45:48 +00:00

InterfaceContractTest.php

refactor(ministra): move Stalker portal from module into core (src/Ministra)

2026-08-11 21:41:11 +03:00

LbInstallFlowOpensslExtraTest.php

fix(install): ship the main's OPENSSL_EXTRA to new load balancers

2026-09-25 00:32:46 +00:00

LicenseGateTest.php

feat(license): fanout licence gate seam (soft, fail-open)

2026-09-18 15:32:50 +03:00

ListensToAttributeTest.php

chore(psr4): phase 3 (Core) — namespace Core/Events

2026-06-24 22:18:52 +03:00

LiveSecondIpConnectionTest.php

fix(stream): move the disallow_2nd_ip_con Redis decision into acceptedLineIP()

2026-09-24 23:46:54 +00:00

LogImportCronJobsTest.php

fix(logs): update only existing lines and bound import batches by size

2026-09-24 23:38:04 +00:00

LoginFloodTest.php

fix(auth): the login flood limit blocks addresses again

2026-09-13 08:34:00 +00:00

LoginSessionFixationTest.php

test: dual-backend TestDb (SQLite + MariaDB) + skip-on-panel guards

2026-09-13 21:17:06 +03:00

MigrationRunnerRollbackTest.php

feat(update): reverse DB migrations on version rollback

2026-09-24 22:12:44 +03:00

ModuleLoaderBootTest.php

feat(reseller): let modules register reseller sidebar entries

2026-09-24 18:04:45 +03:00

ModuleLoaderPriorityTest.php

fix(modules): improve dependency handling and diagnostics for module loading

2026-06-30 22:41:46 +03:00

ModuleLoaderPsr4ResolverTest.php

chore(psr4): phase 3 (Core) — namespace Core/Events

2026-06-24 22:18:52 +03:00

ModuleLoaderTest.php

test(modules): dir convention, legacy migration, loader resilience, install

2026-07-03 20:12:01 +03:00

ModuleManagerMigrationsTest.php

fix(modules): stop a reinstall from switching a disabled module back on

2026-09-22 20:56:43 +03:00

ModuleMigratorTest.php

test(core): cover the DB layer — ModuleMigrator, SettingsRepository, AuthRepository

2026-09-13 14:51:45 +03:00

ModuleRegistriesTest.php

test(core): cover UpdateChannels and the module extension registries

2026-09-13 14:26:46 +03:00

ModuleStateEnumTest.php

chore(psr4): phase 3 (Core) — namespace Core/Enum + Core/Exception

2026-06-24 22:23:42 +03:00

ModuleUpdateCheckerTest.php

feat(modules): resolve module update sources + weekly update-check cron

2026-07-03 20:10:41 +03:00

MonitorCommandTest.php

refactor: apply Rector safe sets + fix the transform's fallout (reviewed)

2026-09-13 17:27:42 +03:00

NavbarProfileMenuTest.php

feat(navbar): make admin profile dropdown registry-driven

2026-07-29 19:37:43 +03:00

NetworkUtilsTest.php

refactor(admin): readable, testable stream entry points (+2 bug fixes)

2026-09-09 22:32:37 +03:00

OnDemandStartLockTest.php

fix(live): viewers arriving together start a stopped on-demand stream once

2026-09-12 21:59:27 +00:00

OpensslExtraTest.php

feat(diagnose): report an OPENSSL_EXTRA mismatch between main and LB

2026-09-25 00:32:16 +00:00

PageAuthorizationPostActionTest.php

fix(security): enforce admin and reseller page permissions again

2026-09-17 07:48:24 +00:00

PhpFpmWorkerPidsTest.php

fix(users): date a remote worker pid by its last write and tell idle pools from unknown

2026-09-25 00:04:16 +00:00

PlaylistGeneratorEncryptedUrlTest.php

feat(stream): implement Encrypt Playlists across live and VOD

2026-09-21 19:11:10 +03:00

ProcessResourceUsageTest.php

fix(streams): the Resources column shows CPU from the first pass, and keeps showing it

2026-09-12 21:27:38 +00:00

QueryHelperTest.php

chore(psr4): phase 3 (Core hubs) — namespace Core/Database

2026-06-24 21:15:06 +03:00

RadioServiceMassEditTest.php

refactor(radio): third Rector batch (reviewed) + decompose massEdit

2026-09-13 18:57:54 +03:00

RadioServiceProcessTest.php

refactor(radio): decompose RadioService::process into tested helpers + flatten

2026-09-13 18:33:02 +03:00

RadioServiceTest.php

refactor(radio): third Rector batch (reviewed) + decompose massEdit

2026-09-13 18:57:54 +03:00

ReferenceDataTest.php

refactor(admin): replace admin_constants globals with reference classes and enums

2026-08-31 20:58:23 +03:00

ReleaseArchiveInspectorTest.php

feat(update): reverse DB migrations on version rollback

2026-09-24 22:12:44 +03:00

RequestManagerTest.php

test(core): cover SettingsManager, DomainResolver, RequestManager, XML streamer

2026-09-13 14:39:43 +03:00

RequestTest.php

test(core): cover the Http\Request input abstraction and sanitizers

2026-09-13 14:29:54 +03:00

ResellerActionEnumTest.php

refactor(admin): replace admin_constants globals with reference classes and enums

2026-08-31 20:58:23 +03:00

ResellerAPIProcessDataTest.php

fix(security): resellers can no longer pair onto or re-trial other lines

2026-09-17 07:45:14 +00:00

ResellerDashboardConnectionMapTest.php

feat(reseller): dashboard location map, live connections and recent media

2026-09-22 22:29:06 +03:00

ResellerNavbarRegistryTest.php

feat(reseller): let modules register reseller sidebar entries

2026-09-24 18:04:45 +03:00

SecretMatchesTest.php

fix(auth): compare shared secrets strictly and in constant time

2026-09-12 22:42:10 +00:00

ServerDiagnoseOpensslExtraTest.php

feat(diagnose): report an OPENSSL_EXTRA mismatch between main and LB

2026-09-25 00:32:16 +00:00

ServerRepositoryPhpPidsTest.php

fix(users): date a remote worker pid by its last write and tell idle pools from unknown

2026-09-25 00:04:16 +00:00

ServerRepositorySimpleTest.php

fix(server): accept null permissions in getStreamingSimple/getProxySimple

2026-09-13 16:10:40 +03:00

ServiceContainerTest.php

chore(psr4): phase 3 (Core) — namespace Core/Container

2026-06-24 22:13:35 +03:00

SessionManagerTest.php

refactor(admin): delete functions.php, consolidate the admin bootstrap

2026-09-18 11:32:15 +03:00

SettingsIdleBufferRatioTest.php

fix(settings): the fanout idle buffer ratio takes a decimal, such as 0.25

2026-09-13 09:02:40 +00:00

SettingsManagerTest.php

test(core): cover SettingsManager, DomainResolver, RequestManager, XML streamer

2026-09-13 14:39:43 +03:00

SettingsRepositoryTest.php

test(core): cover the DB layer — ModuleMigrator, SettingsRepository, AuthRepository

2026-09-13 14:51:45 +03:00

SignalQueueTest.php

refactor(signal): unify deferred-work signals behind SignalQueue

2026-08-09 13:01:57 +03:00

StartupCommandRuntimeFilesTest.php

refactor: apply the Rector stage-2 pass and keep its helpers reachable from tests

2026-09-22 18:19:45 +03:00

StatusBadgeTest.php

refactor(admin): replace admin_constants globals with reference classes and enums

2026-08-31 20:58:23 +03:00

StreamAuthMiddlewareHostTest.php

fix(core,streaming): preserve execution permissions for core scripts and redis self-healing on boot

2026-09-21 19:44:23 +03:00

StreamConfigRepositoryTest.php

chore(psr4): phase 3 — namespace Domain layer

2026-06-25 18:39:28 +03:00

StreamPipelineTest.php

chore(psr4): phase 3 (Core hubs) — namespace Core/Http

2026-06-24 21:32:10 +03:00

StreamProcessBuildLiveTest.php

fix(streaming): feed delayed, LLOD and loopback channels to the daemon

2026-09-11 16:19:02 +01:00

StreamProcessLogoTest.php

refactor(streaming): extract map/scodec/source/HLS/FLV helpers with tests

2026-08-07 19:31:18 +03:00

StreamProcessMovieOutputTest.php

refactor(streaming): extract delay resume helpers from startStream

2026-08-07 21:01:59 +03:00

StreamProcessStopMovieTest.php

fix(security): stop a movie without running shell commands

2026-09-17 08:41:26 +00:00

StreamProcessSubtitleImportTest.php

fix: three crashes from null values and a missing cache file

2026-09-17 07:51:18 +00:00

StreamProcessSubtitleTest.php

fix(streaming): feed delayed, LLOD and loopback channels to the daemon

2026-09-11 16:19:02 +01:00

StreamProcessSupervisionTest.php

fix(streams): a supervised stream must fill stream_info, not only the columns

2026-09-11 11:03:06 +00:00

StreamProducerCountTest.php

fix(watchdog): correct bandwidth totals, rps, producers and fatals

2026-09-25 00:10:15 +00:00

StreamsCronConnectionsTest.php

refactor: apply the Rector stage-2 pass and keep its helpers reachable from tests

2026-09-22 18:19:45 +03:00

StreamServiceParseM3UTest.php

chore(psr4): phase 3 — namespace Domain layer

2026-06-25 18:39:28 +03:00

StreamSorterTest.php

fix(player-api): a channel without an icon took down the whole listing

2026-09-18 09:57:17 +00:00

StreamTokenCallSitesTest.php

test: dual-backend TestDb (SQLite + MariaDB) + skip-on-panel guards

2026-09-13 21:17:06 +03:00

StreamUtilsTest.php

refactor(admin): readable, testable stream entry points (+2 bug fixes)

2026-09-09 22:32:37 +03:00

SystemInfoGuardsTest.php

fix(watchdog): correct bandwidth totals, rps, producers and fatals

2026-09-25 00:10:15 +00:00

SystemInfoNetworkTest.php

fix(watchdog): pin the heartbeat telemetry fixes with stronger tests

2026-09-25 00:20:41 +00:00

SystemInfoNginxStatusTest.php

fix(watchdog): pin the heartbeat telemetry fixes with stronger tests

2026-09-25 00:20:41 +00:00

ThemeEnumTest.php

refactor(admin): replace admin_constants globals with reference classes and enums

2026-08-31 20:58:23 +03:00

TicketVisibilityTest.php

fix(tickets): overhaul ticket lifecycle, visibility and admin interactions

2026-09-22 16:32:39 +03:00

TimeUtilsTest.php

chore(psr4): phase 3 (Core) — namespace remaining Core subdirs

2026-06-24 22:35:33 +03:00

TranslatorIsRtlTest.php

feat(i18n): right-to-left (RTL) UI support and Arabic translation

2026-09-21 21:32:19 +03:00

TranslatorTest.php

test(core): cover FileCache and the Translator backfill

2026-09-13 14:45:12 +03:00

UpdateChannelsTest.php

test(core): cover UpdateChannels and the module extension registries

2026-09-13 14:26:46 +03:00

UserRepositoryTest.php

fix(player-api): tolerate null bouquets and stream icon during player login

2026-09-21 18:55:17 +03:00

UsersCronPhpPidsTest.php

fix(users): date a remote worker pid by its last write and tell idle pools from unknown

2026-09-25 00:04:16 +00:00

XmlStringStreamerTest.php

test(core): cover SettingsManager, DomainResolver, RequestManager, XML streamer

2026-09-13 14:39:43 +03:00