diff --git a/CONTEXT.md b/CONTEXT.md index 1907405..2d77e70 100644 --- a/CONTEXT.md +++ b/CONTEXT.md @@ -7,7 +7,14 @@ > > Ask Claude Code: "Please update CONTEXT.md with what we did today" -Last updated: 2026-10-16 (v0.320.0 — logins and folders: FileBrowser part of the box, one login answer per app, „Fájlok ↗") +Last updated: 2026-10-16 (v0.321.0 — apps burndown: FileBrowser stale password + banners, one backup section, install address) + +> **2026-10-16 — v0.321.0 RELEASED by CC; the global floor 0.321.0 / MinAgent 0.158.1.** R-1101: in `generated` the page asks +> FileBrowser whether the stored password still logs in (`stacks.FileBrowserStoredPasswordRefused`, only a 401/403 counts) +> and, refused, offers the reset; no „change it" line for FileBrowser; its config switches off its update banner and +> „Install app" prompt. The Data tab's backup part is one section in plain words. R-1095: `/apps/{slug}/install` of an +> installed app → 302 settings; the installed-only `app_fields.html` branches stay (R-1103). Catalog the same day: RomM's +> saves in a named volume (R-1097), `default_creds` off eight apps (D10 = A). Next: R-1103; R-1067 waits on Tester-2 (0.292.0). > **2026-10-16 — v0.320.0 RELEASED by CC; the global floor 0.320.0 / MinAgent 0.158.1.** A protected infra stack is > installed by definition on the app page (`Deployed || Protected`; v0.315.0 had shown FileBrowser „not installed" with diff --git a/REPORT.md b/REPORT.md index 42bef1d..69f61c1 100644 --- a/REPORT.md +++ b/REPORT.md @@ -1,54 +1,30 @@ -# REPORT — v0.320.0: FileBrowser is part of the box again, every app says where its login is, a „Fájlok" button (2026-10-16) +# REPORT — v0.321.0: FileBrowser's stale password and its own banners, one backup section, the install address (2026-10-16) -Written in ASD-STE100 Simplified Technical English. Task: „logins and folders" (operator brief). The full report, with -the decisions taken, the browser check and the rows: felhom.eu `REPORT-logins-folders-2026-10-16.md`. Design read -first: felhom.eu `architecture/02-controller-module-map.md` „The app page" (now with „Logins and folders"). -Evidence: felhom.eu `documentation/audits/logins-folders-2026-10-16/`. +Written in ASD-STE100 Simplified Technical English. Task: the apps burndown. Full report (RomM, the catalog, the build +guards, the Pi key, the rows): felhom.eu `REPORT-burndown-apps-2026-10-16.md`. Design: felhom.eu +`architecture/02-controller-module-map.md` „The app page" (v0.321.0 notes). Evidence: felhom.eu +`documentation/audits/burndown-apps-2026-10-16/`. ## 1. Plain words first -- **Why FileBrowser showed „Telepítés":** it has no app.yaml, so the box marks it not deployed. Since v0.315.0 the app - page read only that mark. Now a protected infra stack is installed by definition on the app page. Its login is back. -- **The Install press could have installed the infra stack as an app** (no guard). Refused now, in the API and in - `DeployStack`. -- **„Új jelszó beállítása":** when the box does not know FileBrowser's password, one press sets a new one with - FileBrowser's own CLI (server stopped ~3 s), verifies it, and stores it encrypted. Pressed on demo-hp: it works. -- **Every installed app has „Belépés az alkalmazásba" with one answer;** the catalog's new `app_info.login_kind` picks - the sentence when the box holds no login. -- **„Fájlok ↗"** opens one folder of the app in FileBrowser; the data tab lists each drive's media folders. +- **FileBrowser:** the page no longer says to change its password. If someone changes it in FileBrowser anyway, the page + notices (FileBrowser refuses the stored one) and offers a new one. FileBrowser no longer shows its own „update + available" banner or „Install app" prompt. +- **Data tab:** the backup part is one section with rows and plain words. +- **An installed app's install address** goes to its settings tab. ## 2. Commits and images -`39bf562` (v0.319.0) → `f30a808` (the work) → `1296e7a` (the FileBrowser line's link style, seen in the browser) → -this docs commit. Built from the clean clone with its own `build.sh`: `0.320.0-rc.1`, `rc.2` (demo-hp only), release -**0.320.0** (MinAgent 0.158.1). +`c02c9d8` (v0.320.0) → `7e791d9` (the work) → this docs commit. `0.321.0-rc.1` (demo-hp only), release **0.321.0**, +MinAgent 0.158.1. Floor: per-box for Tester 1, demo-hp, the N100, then the global floor 0.321.0. -## 3. What changed +## 3. Tests and gates -- `web/app_page.go`: `installed = Deployed || Infra`; infra tabs settings/guide/logs; data tab and install page 302 - for infra; the settings tab skips the install form for infra and sets `LoginAnswer`. -- `web/handlers.go` (`appCommonData`): `Infra`, `InfraInfo`, the infra subdomain, `FilesLink`; - `appFileBrowserResetHandler`. `web/server.go`: the reset route. -- `web/app_login.go`: `loginAnswerFor`. `web/datapath_card.go`: media folder rows, `drivePresent`, `filesButtonLink`, - a folder with no source is text. `web/inframeta.go`: `infraMetaIn`. -- `stacks/filebrowser_password.go`: `ResetFileBrowserAdminPassword`, `fileBrowserCLISetPassword`. - `stacks/deploy.go` + `api/router.go`: the protected-stack refusal. `stacks/metadata.go`: `AppInfo.LoginKind`, - `EffectiveLoginKind`. -- Templates: `app_settings.html` (one login panel, infra Restart only), `app_shell.html` (infra tagline, „Fájlok ↗"), - `app_data.html` (text rows, the FileBrowser line), `app_guide.html` (infra two lines); `style.css`. +Red-proved: `TestFileBrowserStoredPassword_RefusedOnlyOnA401`, `TestFileBrowserLogin_StoredPasswordRefusedOffersReset` +(two mutations), `TestAppData_OneBackupSection` (two mutations), `TestInstallAddress_InstalledRedirectsToSettings`. +Green gate rc 0; `controller_gates.py --fast` all OK. Fixtures: 13 re-captured, 1 new (named in the CHANGELOG). -## 4. Tests and gates +## 4. Observations -Red-proved: `TestAppPage_InfraAppHasNoInstall`, `_EveryInstalledAppHasOneLoginAnswer`, `_FilesButtonTarget`, -`_UnknownSourceIsTextNotLink`, `TestFileBrowserReset_SetsVerifiesAndStoresEncrypted`, `_FailedVerifyKeepsOperator`, -`_OnlyInOperatorState`, `TestDeployStack_RefusesProtectedStack` (mutations and failures: felhom.eu -`audits/logins-folders-2026-10-16/redproof.txt`). Also `TestFileBrowserResetEndpoint_Refusals`, -`TestEffectiveLoginKind_DefaultAndUnknown`. Green gate `go build/vet/test ./...` rc 0; `controller_gates.py --fast` all -OK. Parity fixtures: 25 re-captured, 6 new (named in the CHANGELOG); every other one byte-identical. - -## 5. Observations - -1. One sign-in for the dashboard and FileBrowser. FILED: R-1100. -2. FileBrowser's stored password goes stale when changed in FileBrowser. FILED: R-1101. -3. Eight apps say „starts with a known, shared password" about a generated or typed login. FILED: R-1102. -4. The install button could deploy a protected stack. NOT-A-FINDING: small, fixed in this release with a test. +1. The install form keeps branches no page serves since this release; the guard tests pin them. FILED: R-1103 +2. No eye icon exists in the dashboard's icon set; adding one to the shared set would change every page. NOT-A-FINDING: the export toggle uses the text every other reveal button uses.