Upgrade core engine to v3.0.15

.github/workflows/build-engine.yml

@@ -6,11 +6,11 @@ on:
       telemt_commit:
         description: 'Telemt commit hash to build from'
         required: true
-        default: '1a525f7'
+        default: 'ad1940b'
       version_tag:
-        description: 'Version tag (e.g. 3.0.7-1a525f7)'
+        description: 'Version tag (e.g. 3.0.15-ad1940b)'
         required: true
-        default: '3.0.7-1a525f7'
+        default: '3.0.15-ad1940b'
 
 env:
   REGISTRY: ghcr.io

README.md

@@ -504,6 +504,19 @@ mtproxymax telegram remove              # Remove bot completely
 
 ## 📋 Changelog
 
+### v1.3.0 — Engine v3.0.15
+
+**Engine Upgrade (v3.0.7 → v3.0.15):**
+
+- **ME Connection Hardening** — Better error handling and recovery for lost middle-end connections
+- **Secure Payload Fixes** — Payload length validation and ME protocol hardening
+- **Bounded Backpressure** — Semaphore-based global gate prevents overload, ME buffer reuse for efficiency
+- **TLS Full Certificate** — New TLS fetcher drafts real certificates in ServerHello, with TTL-based refresh
+- **ME Pool Reinit** — Soft-staged reinit without reconcile, plus reinit polishing for smoother reconnects
+- **Desync Forensics** — Full forensics for desync detection and debugging
+- **ME Pool Hardswap** — Hard connection swap with softer fallback for graceful pool rotation
+- **ME Pool Health + Rotation** — Active health checking with automatic rotation of unhealthy connections
+
 ### v1.2.0 — Engine v3.0.7 + Custom IP
 
 **Engine Upgrade (v3.0.4 → v3.0.7):**

mtproxymax.sh

@@ -22,8 +22,8 @@ UPSTREAMS_FILE="${INSTALL_DIR}/upstreams.conf"
 BACKUP_DIR="${INSTALL_DIR}/backups"
 CONTAINER_NAME="mtproxymax"
 DOCKER_IMAGE_BASE="mtproxymax-telemt"
-TELEMT_MIN_VERSION="3.0.7"
-TELEMT_COMMIT="1a525f7"  # Pinned: v3.0.7 — Fake TLS V2, config reload, ME frame fixes
+TELEMT_MIN_VERSION="3.0.15"
+TELEMT_COMMIT="ad1940b"  # Pinned: v3.0.15 — ME Pool Health/Rotation, TLS cert TTL, desync forensics
 GITHUB_REPO="SamNet-dev/MTProxyMax"
 REGISTRY_IMAGE="registry.samnet.dev/samnet-dev/mtproxymax-telemt"