admin/felhom-controller
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

v0.321.0 released: REPORT, CONTEXT
gates / gates (push) Successful in 47s
Details

Browse Source 
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
This commit is contained in:
authentik Default Admin
2026-10-16 17:30:31 +02:00
parent 7e791d9b5d
commit 8fe46a1313
2 changed files with 27 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CONTEXT.md
+8 -1
View File
@@ -7,7 +7,14 @@
>
> Ask Claude Code: "Please update CONTEXT.md with what we did today"
Last updated: 2026-10-16 (v0.320.0 — logins and folders: FileBrowser part of the box, one login answer per app, „Fájlok ↗")
Last updated: 2026-10-16 (v0.321.0 — apps burndown: FileBrowser stale password + banners, one backup section, install address)
> **2026-10-16 — v0.321.0 RELEASED by CC; the global floor 0.321.0 / MinAgent 0.158.1.** R-1101: in `generated` the page asks
> FileBrowser whether the stored password still logs in (`stacks.FileBrowserStoredPasswordRefused`, only a 401/403 counts)
> and, refused, offers the reset; no „change it" line for FileBrowser; its config switches off its update banner and
> „Install app" prompt. The Data tab's backup part is one section in plain words. R-1095: `/apps/{slug}/install` of an
> installed app → 302 settings; the installed-only `app_fields.html` branches stay (R-1103). Catalog the same day: RomM's
> saves in a named volume (R-1097), `default_creds` off eight apps (D10 = A). Next: R-1103; R-1067 waits on Tester-2 (0.292.0).
> **2026-10-16 — v0.320.0 RELEASED by CC; the global floor 0.320.0 / MinAgent 0.158.1.** A protected infra stack is
> installed by definition on the app page (`Deployed || Protected`; v0.315.0 had shown FileBrowser „not installed" with
REPORT.md
+19 -43
View File
@@ -1,54 +1,30 @@
# REPORT — v0.320.0: FileBrowser is part of the box again, every app says where its login is, a „Fájlok" button (2026-10-16)
# REPORT — v0.321.0: FileBrowser's stale password and its own banners, one backup section, the install address (2026-10-16)
Written in ASD-STE100 Simplified Technical English. Task: „logins and folders" (operator brief). The full report, with
the decisions taken, the browser check and the rows: felhom.eu `REPORT-logins-folders-2026-10-16.md`. Design read
first: felhom.eu `architecture/02-controller-module-map.md` „The app page" (now with „Logins and folders").
Evidence: felhom.eu `documentation/audits/logins-folders-2026-10-16/`.
Written in ASD-STE100 Simplified Technical English. Task: the apps burndown. Full report (RomM, the catalog, the build
guards, the Pi key, the rows): felhom.eu `REPORT-burndown-apps-2026-10-16.md`. Design: felhom.eu
`architecture/02-controller-module-map.md` „The app page" (v0.321.0 notes). Evidence: felhom.eu
`documentation/audits/burndown-apps-2026-10-16/`.
## 1. Plain words first
- **Why FileBrowser showed „Telepítés":** it has no app.yaml, so the box marks it not deployed. Since v0.315.0 the app
page read only that mark. Now a protected infra stack is installed by definition on the app page. Its login is back.
- **The Install press could have installed the infra stack as an app** (no guard). Refused now, in the API and in
`DeployStack`.
- **„Új jelszó beállítása":** when the box does not know FileBrowser's password, one press sets a new one with
FileBrowser's own CLI (server stopped ~3 s), verifies it, and stores it encrypted. Pressed on demo-hp: it works.
- **Every installed app has „Belépés az alkalmazásba" with one answer;** the catalog's new `app_info.login_kind` picks
the sentence when the box holds no login.
- **„Fájlok ↗"** opens one folder of the app in FileBrowser; the data tab lists each drive's media folders.
- **FileBrowser:** the page no longer says to change its password. If someone changes it in FileBrowser anyway, the page
notices (FileBrowser refuses the stored one) and offers a new one. FileBrowser no longer shows its own „update
available" banner or „Install app" prompt.
- **Data tab:** the backup part is one section with rows and plain words.
- **An installed app's install address** goes to its settings tab.
## 2. Commits and images
`39bf562` (v0.319.0) → `f30a808` (the work) → `1296e7a` (the FileBrowser line's link style, seen in the browser) →
this docs commit. Built from the clean clone with its own `build.sh`: `0.320.0-rc.1`, `rc.2` (demo-hp only), release
**0.320.0** (MinAgent 0.158.1).
`c02c9d8` (v0.320.0) → `7e791d9` (the work) → this docs commit. `0.321.0-rc.1` (demo-hp only), release **0.321.0**,
MinAgent 0.158.1. Floor: per-box for Tester 1, demo-hp, the N100, then the global floor 0.321.0.
## 3. What changed
## 3. Tests and gates
- `web/app_page.go`: `installed = Deployed || Infra`; infra tabs settings/guide/logs; data tab and install page 302
for infra; the settings tab skips the install form for infra and sets `LoginAnswer`.
- `web/handlers.go` (`appCommonData`): `Infra`, `InfraInfo`, the infra subdomain, `FilesLink`;
`appFileBrowserResetHandler`. `web/server.go`: the reset route.
- `web/app_login.go`: `loginAnswerFor`. `web/datapath_card.go`: media folder rows, `drivePresent`, `filesButtonLink`,
a folder with no source is text. `web/inframeta.go`: `infraMetaIn`.
- `stacks/filebrowser_password.go`: `ResetFileBrowserAdminPassword`, `fileBrowserCLISetPassword`.
`stacks/deploy.go` + `api/router.go`: the protected-stack refusal. `stacks/metadata.go`: `AppInfo.LoginKind`,
`EffectiveLoginKind`.
- Templates: `app_settings.html` (one login panel, infra Restart only), `app_shell.html` (infra tagline, „Fájlok ↗"),
`app_data.html` (text rows, the FileBrowser line), `app_guide.html` (infra two lines); `style.css`.
Red-proved: `TestFileBrowserStoredPassword_RefusedOnlyOnA401`, `TestFileBrowserLogin_StoredPasswordRefusedOffersReset`
(two mutations), `TestAppData_OneBackupSection` (two mutations), `TestInstallAddress_InstalledRedirectsToSettings`.
Green gate rc 0; `controller_gates.py --fast` all OK. Fixtures: 13 re-captured, 1 new (named in the CHANGELOG).
## 4. Tests and gates
## 4. Observations
Red-proved: `TestAppPage_InfraAppHasNoInstall`, `_EveryInstalledAppHasOneLoginAnswer`, `_FilesButtonTarget`,
`_UnknownSourceIsTextNotLink`, `TestFileBrowserReset_SetsVerifiesAndStoresEncrypted`, `_FailedVerifyKeepsOperator`,
`_OnlyInOperatorState`, `TestDeployStack_RefusesProtectedStack` (mutations and failures: felhom.eu
`audits/logins-folders-2026-10-16/redproof.txt`). Also `TestFileBrowserResetEndpoint_Refusals`,
`TestEffectiveLoginKind_DefaultAndUnknown`. Green gate `go build/vet/test ./...` rc 0; `controller_gates.py --fast` all
OK. Parity fixtures: 25 re-captured, 6 new (named in the CHANGELOG); every other one byte-identical.
## 5. Observations
1. One sign-in for the dashboard and FileBrowser. FILED: R-1100.
2. FileBrowser's stored password goes stale when changed in FileBrowser. FILED: R-1101.
3. Eight apps say „starts with a known, shared password" about a generated or typed login. FILED: R-1102.
4. The install button could deploy a protected stack. NOT-A-FINDING: small, fixed in this release with a test.
1. The install form keeps branches no page serves since this release; the guard tests pin them. FILED: R-1103
2. No eye icon exists in the dashboard's icon set; adding one to the shared set would change every page. NOT-A-FINDING: the export toggle uses the text every other reveal button uses.