# iTzAYDiN-BOT V6 — Rebecca + 3x-ui 3.6.0

## Rebecca backend

V6 adds Rebecca as a first-class backend instead of treating it as a Marzban alias.

- API-key-first authentication (`Authorization: Bearer ...`) with optional legacy username/password JWT login.
- Service-driven provisioning: ordinary sales create users against a Rebecca Service; raw inbound/proxy selection is not used for new Rebecca users.
- User lifecycle: create, read, update, status change, extend, extra time/traffic, reset traffic, revoke subscription and delete.
- Product-level Rebecca provisioning fields: Service, reset strategy, IP limit, auto-delete, flow, on-hold fields and next plans.
- Service sync/default Service selection and cached snapshots.
- Users, usage, Nodes, node usage/settings, Hosts, Inbounds, system statistics and maintenance diagnostics.
- Live Rebecca OpenAPI discovery and a protected Web console that accepts only operations advertised by the connected Rebecca build. Secrets are redacted unless explicitly revealed for the current response.
- Telegram admin shortcuts for Rebecca inventory/status plus the full Web Rebecca Hub for mutation-heavy operations.

## 3x-ui / Sanaei v3.6.0

- Modern Token mode remains isolated from Legacy username/password mode.
- Telegram-ID client lookup (`/panel/api/clients/get/tg/:tgId`).
- Live subscription information via `?format=info`.
- Raw subscription download tester.
- Custom monthly inbound traffic-reset day (1–31) management.
- Generic token request helper supports GET/POST/PUT/PATCH/DELETE.
- Authenticated OpenAPI discovery is attempted for dynamic tooling; failure is reported instead of assuming the route is public.
- No code relies on reading back node API tokens.
- Existing inbound sync, multi-inbound selection, Auto-Inbound and Repair flows remain intact.

## Compatibility

Database contracts used by existing orders are retained. New Rebecca metadata is additive. Existing 3x-ui Legacy 2.9 profiles are not automatically converted to Token mode.

## Important

Always back up the database and `config.php` before upgrading a live installation. Static validation cannot replace an end-to-end test against your own Rebecca/3x-ui instances and credentials.
