R-1199: a box whose household never saved its notification choice pushes the default list its page shows at start, so the hub mails by it; unreleased

controller/cmd/controller/main.go

@@ -1891,7 +1891,9 @@ func main() {
 		go func() {
 			prefs := sett.GetNotificationPrefs()
 			// R-922: a household's clear is pushed too, so a clear the hub missed reaches it at the next start.
-			if prefs.SyncOnStartup() {
+			// R-1199: a box whose household never saved its choice pushes the default list its page shows (with no
+			// address — the hub keeps the stored one, its no-clobber guard).
+			if prefsSyncAtStartup(prefs, sett.NotificationPrefsSaved(), logger) {
 				if err := notifier.SyncPreferences(prefs.Email, prefs.EnabledEvents, prefs.CooldownHours, prefs.EmailCleared); err != nil {
 					logger.Printf("[WARN] Failed to sync notification preferences on startup: %v", err)
 				}