session: Part 1 done — v0.59.0 fixes deployed+verified on demo 9201

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-13 19:19:13 +02:00
parent 7c45fecff3
commit 6b2c71f45c
1 changed files with 23 additions and 0 deletions
@@ -0,0 +1,23 @@
 # Session 2026-06-13 — audit-fix + docs-centralize working log
 Working/checkpoint file for the unattended fix+docs session. Commit/push after each Part.
 ## Progress log
 - **Part 1 — controller fixes → deploy: DONE & VERIFIED.**
  - Fix 1 CTRL-001 (import path traversal) — `appexport/validate.go` + `UnmarshalManifest` guard + join-loop guards + regression test. Commit `c20ff56`.
  - Fix 2 CTRL-T2-1 + H10 (deploy.go slice) — transitional `Deployed:false` until compose succeeds; `SaveAppConfig` fail-closed on encrypt error. Regression tests. Commit `5a80739`.
  - Fix 3 M2 (init-only stackProvider, lock removed + documented). Commit `092cbbe`.
  - CHANGELOG v0.59.0. Commit `7c45fec`. Pushed to main (`eea235b..7c45fec`).
  - Green gate: `go build/vet/test ./...` all PASS before each commit.
  - **Deploy:** built `felhom-controller:0.59.0` on 192.168.0.180; deployed to guest **9201 (demo-felhom)** via the bootstrap mechanism (`/etc/felhom-controller-image` + `systemctl restart felhom-controller-bootstrap.service`). Rollback ref was `0.58.0`.
  - **Verify:** `docker ps` → `0.59.0 Up (healthy)`; self-test 6 passed/0 failed; "Controller elindult (0.59.0)"; hub report pushed; public URL `https://felhom.demo-felhom.eu/api/health` → HTTP 200 `{"ok":true}`. NO rollback needed.
  - Deploy-target note: CLAUDE.md's `/opt/docker` compose path is stale (re-platform). Live demo controller runs in LXC guest 9201 on felhom-pve, bootstrap-managed. felhotest (router.abonet.hu:33022) was unreachable (timeout) — skipped.
 - **Part 2 — agent AGENT-001 fix (branch only): in progress.**
 - **Part 3 — audit/BUGHUNT records: pending.**
 - **Part 4 — docs centralize + refresh: pending.**
 ## Assumptions
 - "The demo node" = guest 9201 (runs the v0.58.0 the task cited; bootstrap-managed). felhotest unreachable, not deployed there.
 - M2 included in v0.59.0 (trivial, zero-runtime-change) since Fixes 1-2 were green; no risk signal.