v0.313.0: media apps on every drive, drive events, a real restart, Plex without the race — release notes (MinAgent 0.155.0); golden next (bake → vouch → floor)

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CONTEXT.md

@@ -7,7 +7,17 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-10-04 (v0.293.0 — the Docker-socket self-heal, R-860)
+Last updated: 2026-10-15 (v0.313.0 — media apps on every drive, R-1023)
+
+> **2026-10-15 — v0.313.0, the media build (R-1023 and the rows under it; `09` §3 decisions 245, 247, 248).** Media apps bind
+> every PRESENT drive through an owned `docker-compose.override.yml` (`media_library:` marker in the template); a real
+> restart (force-recreate + start times); the drive wiring (`internal/mediawire`, keys read at use — Plex's own token,
+> decision 248; Jellyfin's key named „felhom"); drive events with the notice, „restart now/later" and a stream check; safe
+> removal keeps the drive; Plex's code asked after the start (`after_start`). Released only with golden 0.313.0 (bake →
+> vouch → floor, decision 247). Traps found on Tester 1 and fixed: qBittorrent 5 logs in with 204; the agent's disk
+> `state` stays „attached" for a pulled registered disk (presence = backing device); the drive gate raced a safe removal.
+> A Plex status probe (`/library/sections`, 401) OPENED an unclaimed Plex while Plex started — removed within the hour;
+> never gate on a status a starting app also returns.
 
 > **2026-10-14 (night) — v0.312.0, https only (R-1033, P1; `09` §3 decision 244).** DECIDED BY CC UNATTENDED — operator
 > may reverse: the redirect lives in traefik on the box (`felhom-https-only` in the `felhom-forwarded` chain), not in