Reapply SingboxForPanel integration on upstream stable

protocol/vmess/inbound.go

@@ -4,6 +4,7 @@ import (
 	"context"
 	"net"
 	"os"
+	"sync"
 
 	"github.com/sagernet/sing-box/adapter"
 	"github.com/sagernet/sing-box/adapter/inbound"
@@ -32,7 +33,10 @@ func RegisterInbound(registry *inbound.Registry) {
 	inbound.Register[option.VMessInboundOptions](registry, C.TypeVMess, NewInbound)
 }
 
-var _ adapter.TCPInjectableInbound = (*Inbound)(nil)
+var (
+	_ adapter.TCPInjectableInbound = (*Inbound)(nil)
+	_ adapter.ManagedSSMServer     = (*Inbound)(nil)
+)
 
 type Inbound struct {
 	inbound.Adapter
@@ -44,6 +48,34 @@ type Inbound struct {
 	users     []option.VMessUser
 	tlsConfig tls.ServerConfig
 	transport adapter.V2RayServerTransport
+	tracker   adapter.SSMTracker
+	ssmMutex  sync.RWMutex
+}
+
+func (h *Inbound) SetTracker(tracker adapter.SSMTracker) {
+	h.ssmMutex.Lock()
+	defer h.ssmMutex.Unlock()
+	h.tracker = tracker
+}
+
+func (h *Inbound) UpdateUsers(users []string, uuids []string, flows []string) error {
+	h.ssmMutex.Lock()
+	defer h.ssmMutex.Unlock()
+	newUsers := make([]option.VMessUser, len(users))
+	for i := range users {
+		newUsers[i] = option.VMessUser{
+			Name: users[i],
+			UUID: uuids[i],
+		}
+	}
+	h.users = newUsers
+	return h.service.UpdateUsers(common.MapIndexed(h.users, func(index int, it option.VMessUser) int {
+		return index
+	}), common.Map(h.users, func(it option.VMessUser) string {
+		return it.UUID
+	}), common.Map(h.users, func(it option.VMessUser) int {
+		return it.AlterId
+	}))
 }
 
 func NewInbound(ctx context.Context, router adapter.Router, logger log.ContextLogger, tag string, options option.VMessInboundOptions) (adapter.Inbound, error) {
@@ -163,6 +195,12 @@ func (h *Inbound) NewConnectionEx(ctx context.Context, conn net.Conn, metadata a
 		}
 		conn = tlsConn
 	}
+	h.ssmMutex.RLock()
+	tracker := h.tracker
+	h.ssmMutex.RUnlock()
+	if tracker != nil {
+		conn = tracker.TrackConnection(conn, metadata)
+	}
 	err := h.service.NewConnection(adapter.WithContext(ctx, &metadata), conn, metadata.Source, onClose)
 	if err != nil {
 		N.CloseOnHandshakeFailure(conn, onClose, err)
@@ -178,7 +216,15 @@ func (h *Inbound) newConnectionEx(ctx context.Context, conn net.Conn, metadata a
 		N.CloseOnHandshakeFailure(conn, onClose, os.ErrInvalid)
 		return
 	}
-	user := h.users[userIndex].Name
+	h.ssmMutex.RLock()
+	if userIndex < 0 || userIndex >= len(h.users) {
+		h.ssmMutex.RUnlock()
+		N.CloseOnHandshakeFailure(conn, onClose, os.ErrInvalid)
+		return
+	}
+	userEntry := h.users[userIndex]
+	h.ssmMutex.RUnlock()
+	user := userEntry.Name
 	if user == "" {
 		user = F.ToString(userIndex)
 	} else {
@@ -196,7 +242,16 @@ func (h *Inbound) newPacketConnectionEx(ctx context.Context, conn N.PacketConn,
 		N.CloseOnHandshakeFailure(conn, onClose, os.ErrInvalid)
 		return
 	}
-	user := h.users[userIndex].Name
+	h.ssmMutex.RLock()
+	if userIndex < 0 || userIndex >= len(h.users) {
+		h.ssmMutex.RUnlock()
+		N.CloseOnHandshakeFailure(conn, onClose, os.ErrInvalid)
+		return
+	}
+	userEntry := h.users[userIndex]
+	tracker := h.tracker
+	h.ssmMutex.RUnlock()
+	user := userEntry.Name
 	if user == "" {
 		user = F.ToString(userIndex)
 	} else {
@@ -209,6 +264,9 @@ func (h *Inbound) newPacketConnectionEx(ctx context.Context, conn N.PacketConn,
 	} else {
 		h.logger.InfoContext(ctx, "[", user, "] inbound packet connection to ", metadata.Destination)
 	}
+	if tracker != nil {
+		conn = tracker.TrackPacketConnection(conn, metadata)
+	}
 	h.router.RoutePacketConnectionEx(ctx, conn, metadata, onClose)
 }