[pavelpikta]

Summary

Closes races and goroutine leaks on the streaming and startup paths, then locks that behavior in with an offline race-test gate. make test is now -race -count=1 for every server/ package except generated Swagger, with a 70% total coverage floor. Benchmarks fail CI if they regress past 200%.

The hot path is unchanged in shape: GET/HEAD /stream and /play still go through Torrent.Stream → torrstor.Reader → the piece cache. Piece slabs and the 64KiB stream copy buffer are pooled so cache turnover stops allocating on every read.

Fixes

• DNS cache: drop expired entries under the write lock and copy addresses before return. ffprobe's probe timer cancels with the request. The MSX start parameter is guarded by a mutex.
• CloseDB clears the process-wide bbolt and JSON handles so the next start does not reuse a closed database. Same-length JSON is compared structurally.
• Reader, cache, and torrent fields that raced under concurrent reads are guarded. cmd, search, and the Telegram bot start and stop through seams instead of exiting the process. DLNA listen failure, the torrent directory watch, and interface lookup stay overridable.
• Shutdown closes the piece-cache watchdog and idle tracker HTTP connections. The Telegram upload queue can start again after Stop.
• Evicted in-memory piece slabs go back to a length-keyed pool. /stream and /play copy from a pooled 64KiB buffer. A closed cache does not recycle slabs, so dropped piece RAM can return to the OS.

Trackers and DHT

• Torrent fork moves from github.com/tsynik/torrent v1.2.34 to github.com/lampac-nextgen/torrent v1.2.35. uTP comes from github.com/lampac-nextgen/utp v0.2.1.
• Tracker URLs are sanitized and merged as one extra tier. DHT bootstrap uses a bounded lookup instead of dht.GlobalBootstrapAddrs.

Tests

• Offline harness in server/torr/offlinetest: temp settings DB, loopback memStore seeder, no public DHT.
• Race and lifecycle coverage for DLNA, settings, FUSE, WebDAV, the web API, MCP, and Telegram (httptest, offline bot).
• Heap ceilings and goroutine audits for piece-cache turnover, torrent churn, aborted streams, and DLNA, Bonjour, and Telegram start/stop.
• Benches for piece-buffer reuse, stream ranges, subs, torrshash, torrfs, and API playlists. The torr reader bench stays out of make bench because it blocks on GotInfo.
• Live checks stay opt-in (LIVE_TORRENT=1, LIVE_INDEXER=1).

Docs

• AGENTS.md is the map of locks, forks, streaming, and test commands. Lock order is dbMigrationLock then settings.mu. ListTorrent and AddTorrent must not run while settings.mu is held. Idle park is 60 seconds.
• UI edits belong in web/src. Locale keys must match across en, ru, ua, bg, fr, ro, and zh. Frontend CI is yarn typecheck, lint, test, i18n:check, test:e2e, and build.
• The architect skill points at that file and does not restate a shorter idle timeout.

Test plan

• make fmt-check
• make lint
• make test (race, coverage profile at server/coverage.out, total ≥ 70%)
• make bench (piece slab and stream copy buffer still pooled on -benchmem)
• CI job "Race Tests & Coverage" green, including the 200% benchmark alert
• Open a torrent, confirm /stream still serves a range and the reader drops after the client disconnects
• Stop and start the process once and confirm settings reopen instead of hitting a closed bbolt handle

[pavelpikta]

Closed: this targeted upstream master and included the whole fork. The branch is 15 commits on lampac-nextgen/TorrServer.