felhom-agent/REPORT.md

REPORT — v0.169.0 released and vouched: „Restart controller" from the hub (2026-10-29, attended)

Plain words first. The operator can now restart a box's controller from the hub's host page. The agent does it, so it works when the controller is stopped or stuck. It uses the supervisor's own guards and brake: 3 restarts in 15 minutes, then presses are refused for 30 minutes. A controller that runs but does not answer now raises an operator alarm (controller_unresponsive); it is not restarted by itself yet — that waits for the night's measurement (R-1344).

Commits

Commit	CI (job id)	What
637c92c	2504, 2507 green	The agent's closed list: restart_controller <vmid> on the host-report reply (ControlEnvelope.OperatorActions), the result on the next host report (OperatorActionResults). Guards: provisioned, running, parked, swap, lock, vzdump. The brake counts operator restarts with the supervisor's (opBrakeUntil). One audit line, one result per id, re-sent until the hub records it; a report is asked for at once. R-1344: 6 unhealthy sweeps → unresponsive_since in the stanza. Tests in internal/localapi/opactions_test.go, supervisor_unresponsive_test.go, opactions_wiring_test.go, each seen failing by its mutation.
db25eb0	2513 green	v0.169.0 CHANGELOG; pinned.day0_agent = 0.169.0 (D50 pin), after the vouch.

Release

• release-agent.sh 0.169.0 from a clean clone: sha256 fc066de640007038ecfaed6a23e4301a27fc486f1d7851c36177acdd26c2df61, bundle 3ca33f9cbab3bdd4c1b7f8ac90aa21e43b64209f1cb45c77ac72b3405956041b, tag v0.169.0, verified by download.
• Signed agent_update to the three test boxes; each committed.
• Vouched by the operator 14:06:09 CET (the page answered 504; the save went through — R-1346).

Live proofs (Tester 1, through the hub endpoint the button posts, CC's cc-hosts token)

• 13:01–13:02 CET on rc builds: press 1 → the controller answered after 9 s; press 2 with the controller stopped by hand → restarted 5 s after the stop; press 3 done; press 4 refused („3 restarts in 15 minutes").
• 14:49 CET on the release builds (agent 0.169.0, controller 0.348.0, hub 0.176.1): one press → „done — restarted; the controller answered after 9 s", on the hub 16 s after the press; the box showed the controller „Up 12 seconds".

Evidence: felhom.eu documentation/audits/release-2026-10-29b/ (p1-restart/, final/).