4 Commits

Include renames

Author	SHA1	Message	Date
admin	2d71270858	D48: a restore downloads first — every restore path resolves and pulls every image of the definition that will run before the stop, under the image-work lock held until the restore returns; a failed pull refuses with the app untouched (a deleted version and a busy registry read differently), one operator line. Red-proved. Commit only.	2026-10-25 09:38:28 +01:00
adminandClaude Opus 5.5	1040cfe225	R-35 (D4): dashboard sign-ins survive the controller's own restart; disk holds only a fingerprint ... Sessions are keyed by sha256(cookie) and persisted to dashboard-sessions.json (0600, tmp+fsync+rename) in the data dir: fingerprint, expiry, CSRF token. Loaded in NewServer; expired rows dropped at load and save. Logout and invalidateAllSessions (password change, claim reset) write the file at once. Corrupt/unreadable file = start with no sessions (never fatal). Red-proof: with load/save as no-ops the restart test fails ('the old cookie no longer signs in'); with the raw token as the key the file test fails ('the sessions file holds the cookie value'). Also: TestR650_NoBareDockerExec skips a non-.go file that vanished mid-walk (a parallel stacks test's update-journal.json.tmp raced it in a full run). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-08 14:49:27 +02:00
adminandClaude Opus 5.5	7861bf9dde	v0.294.0: off-site clean-up guard follows the policy's own constants (R-867); no image clean-up while compose pulls (R-863); stderr tail (R-864); move-aside destination logged (R-869) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 07:13:02 +02:00
adminandClaude Opus 5.5	80e6ad8c47	controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true ... R-650: internal/dockerexec — every docker exec routed through it; under go test a real docker is refused (opt-in FELHOM_TEST_REAL_DOCKER=1; a stub under the temp dir is allowed). api/stacks/web tests run under a silent stub (TestMain). TestR650_NoBareDockerExec pins it repo-wide. R-640: a dump without its engine's completion marker is refused before the first mutation (unit + off-site restore) and again before any load. R-499: the Tier-2 page's system-disk sentence has four true branches. R-518: the backup button states the measured ~8 min stop. R-626: measured on 9202, not reproduced. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-09-23 20:25:28 +02:00