W21 sharing switched on without a password asks for it and says why it waits; W25 failed off-site run shows the household a sentence built from the classifier, raw text only to log and operator; W28 share restore skips the controller's drop-zone share; unreleased

controller/internal/web/sharing_handlers.go

@@ -296,6 +296,16 @@ func (s *Server) sharingEnableHandler(w http.ResponseWriter, r *http.Request) {
 		s.logger.Printf("[WARN] [sharing] could not ensure the import share: %v", err)
 	}
 
+	// W21 (rehearsal 2026-10-20): with no household password the service is never deployed (reconcile
+	// skips it: „deploy skipped — household SMB password not set yet"), yet the flash said the service was
+	// being prepared and the page stayed „áll" for ever. The answer now says it waits for the password, and
+	// the page asks for it (sharing.html, the needs-password alert). Nothing to prepare, so no job.
+	// Pinned by TestW21_SwitchOnWithoutPasswordAsksForItAtOnce.
+	if !s.settings.GetSMBSettings().UserSet {
+		s.logger.Printf("[INFO] [sharing] sharing switched on; the service waits for the household password")
+		sharingRedirect(w, r, "flash.sharing.saved_needs_password")
+		return
+	}
 	// v0.147.0 (4b): the bring-up runs DETACHED and the page polls it. Synchronously it was a form
 	// post that hung for minutes on a first-enable image pull and then flashed „Beállítás mentve."
 	// regardless of whether anything actually came up.