Commit Graph

  • 477e2548db REPORT: the 2026-10-05 catch-up session main admin 2026-10-05 10:29:08 +02:00
  • 635c33d381 v0.295.0: a box that was off at its backup time catches up once (R-871, decision 109); the missed-backup banner (decision 110); a late daily timer after a host suspend is skipped admin 2026-10-05 09:27:16 +02:00
  • e730a629fd REPORT: the 2026-10-05 night-fixes session admin 2026-10-05 08:25:44 +02:00
  • 7861bf9dde v0.294.0: off-site clean-up guard follows the policy's own constants (R-867); no image clean-up while compose pulls (R-863); stderr tail (R-864); move-aside destination logged (R-869) admin 2026-10-05 07:13:02 +02:00
  • 69e914534f REPORT + CONTEXT: 2026-10-04 night (R-840 / R-860) admin 2026-10-04 20:39:49 +02:00
  • 2a7f6c6c42 v0.293.0: the controller heals itself after the guest's Docker socket is re-created (R-860) admin 2026-10-04 19:48:29 +02:00
  • 09e634de31 v0.292.0: cloudflared readiness health check (R-841) — tunnel --metrics localhost:20241 run + Docker healthcheck on cloudflared's own /ready; the host agent reports running/not_running/unknown from State.Health admin 2026-10-04 13:16:26 +02:00
  • badc9c2a0c CHANGELOG + comment: correct the file-browser claim (the start-up mount sync already moved it); 9202 gaps measured admin 2026-10-04 11:00:54 +02:00
  • fc796dd95e v0.291.0: decision 78 (R-726) — a returning household's first night sets the orphaned copy aside; R-838 — traefik v3.7.13, cloudflared 2026.9.3, filebrowser 1.5.6-stable, a release now moves a running file browser, check-infra-pins.py admin 2026-10-04 10:56:19 +02:00
  • 99a1497560 CONTEXT + REPORT: v0.290.0 (floored, golden 0.290.0 vouched) admin 2026-10-04 07:39:45 +02:00
  • c1a73b24b3 v0.290.0: the clean-up guard skips same-day superseded young snapshots instead of refusing (R-824), refuses above the weekly cap; a due set-aside deletion is handed to the hub's 7-day wait (decision 74, R-823) admin 2026-10-04 07:27:38 +02:00
  • c4bf730637 CONTEXT + REPORT: v0.289.0/v0.289.1 off-site lock (floored 0.289.1, golden 0.289.1 vouched) admin 2026-10-03 21:29:10 +02:00
  • 2a2af2018d v0.289.1: strip the provider rclone notice; an unreadable snapshot count is never a measured zero (found live on demo-felhom) admin 2026-10-03 17:15:10 +02:00
  • 55bb6c3d32 v0.289.0: off-site key cannot delete — append-only rclone transport, box sends only its public key (hub registrar), retention only inside a hub window behind the fake-snapshot guard (decisions 68-69, R-820, R-822) admin 2026-10-03 17:01:36 +02:00
  • 09453325d1 v0.288.0: REPORT + CONTEXT (R-800 live on 9202, floored, golden 0.288.0 vouched) admin 2026-10-02 16:54:36 +02:00
  • 580b656914 v0.288.0: the remove dialog and result name the household's userdata folders, which stay (decision 67, R-800) admin 2026-10-02 14:03:44 +02:00
  • 9821690980 v0.287.0: REPORT + CONTEXT (the family gate live on 9202, floored, golden 0.287.0 vouched) admin 2026-10-02 09:03:51 +02:00
  • c8d5ee204d v0.287.0: CHANGELOG, README, REUSE (the family gate) admin 2026-10-02 07:43:49 +02:00
  • 977665d8c0 The family gate (decisions 63/64, R-780): family members with their own logins, a permanent forwardAuth door per family app, anchored exceptions, min_controller admin 2026-10-02 07:42:47 +02:00
  • a4a753b9e2 CONTEXT + REPORT: v0.286.1 (R-753 visitors apart, R-772, R-773), floored + golden admin 2026-10-01 22:06:02 +02:00
  • a28155f858 v0.286.1: CHANGELOG (R-772 order fix found live; 0.286.0 never floored) admin 2026-10-01 21:41:23 +02:00
  • 79ef715277 R-772 (found live on 9202 with v0.286.0): a stopped probe container is seen on the next tick, not when the last healthy record's 5-minute interval runs out admin 2026-10-01 21:11:22 +02:00
  • d4167420d1 v0.286.0: CHANGELOG + README (R-753 visitors apart, R-772, R-773) admin 2026-10-01 21:04:26 +02:00
  • 1e216d3468 R-773: a removed app restored from its backup gets its sign-up lock back (record opened_by restore + block, before anything starts) admin 2026-10-01 21:01:42 +02:00
  • b53721db34 R-772: a health probe that could not run records not_checked + NOT healthy, is looked at again on the 10 s cycle, and the app page says so admin 2026-10-01 21:01:42 +02:00
  • 1e8d045815 R-753: the box tells visitors apart — cloudflared at a fixed address, traefik trusts only it, the controller reads the hop traefik saw admin 2026-10-01 21:01:42 +02:00
  • c1b123c649 REPORT: v0.285.0 — two controller versions per box, R-751, live results admin 2026-10-01 08:39:51 +02:00
  • ac8ea72025 v0.285.0 — a box keeps two controller versions (decision 56, R-745); the update clean-up's nil-stack crash (R-751) admin 2026-10-01 07:36:26 +02:00
  • a70c398dee v0.284.2 — the image clean-up sees digest-pulled (untagged) images (decision 53, R-736) admin 2026-09-30 23:03:32 +02:00
  • 00fddd3816 v0.284.1 — the image clean-up runs on the household's Remove button too; one summary line per pass (decision 53, R-736) admin 2026-09-30 22:54:15 +02:00
  • 5a3437669f v0.284.0 — a box deletes old app images (decision 53, R-736); an after_install app is held until its known login is replaced (R-741) admin 2026-09-30 22:29:33 +02:00
  • d48da6c7f3 CONTEXT + REPORT: v0.283.0/v0.283.1 admin 2026-09-30 11:00:41 +02:00
  • 29d3c533aa v0.283.1: a Stop holds during the volume dump in production and at the crash recovery (R-721, found live on v0.283.0) admin 2026-09-30 10:52:19 +02:00
  • 6be6c53e29 v0.283.0: apps go off-site by themselves (decision 50) with a size warning; a Stop holds during a backup (R-721); page slips (R-724/R-725) admin 2026-09-30 10:31:55 +02:00
  • 1cfb1244d6 REPORT: v0.282.0 admin 2026-09-29 17:19:37 +02:00
  • 4110da50e9 v0.282.0: after_setup (the app's own sign-up switch), close sign-up now (decision 49), probes read lists + done_status (R-715) admin 2026-09-29 16:19:12 +02:00
  • 6fc3059167 REPORT: v0.281.0 admin 2026-09-29 11:24:58 +02:00
  • 149467c795 v0.281.0: 'Done' asks the probe first; sign-up closed after the first admin (decision 47); R-713 code-bound values refused, ${NAME|base64} admin 2026-09-29 09:57:58 +02:00
  • 3a12c7341a REPORT: v0.280.0 admin 2026-09-29 09:22:53 +02:00
  • 7fa8768cfd v0.280.0: the setup gate (decision 46); R-710 'I changed it' + absent-record window; R-709 password fields off the page; password:N:special generator admin 2026-09-29 08:51:46 +02:00
  • 2548b4c924 REPORT: v0.279.0 admin 2026-09-28 19:02:26 +02:00
  • 0c702f834a v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706 admin 2026-09-28 18:38:30 +02:00
  • 2e9a948cbd REPORT: v0.277.0 + v0.278.0, live off-site proof admin 2026-09-28 15:56:46 +02:00
  • 7cba0bfca7 v0.278.0: a hold left by an earlier install no longer holds the new one (R-704) admin 2026-09-28 15:34:57 +02:00
  • 1ee6dbe184 REPORT: v0.277.0 admin 2026-09-28 11:51:52 +02:00
  • 6479933e8e v0.277.0: kept data loads from the off-site copy too (R-691 (2)) admin 2026-09-28 09:57:11 +02:00
  • 0c1023e503 REPORT + CONTEXT: v0.276.0 released, floor 0.276.0 admin 2026-09-27 18:04:03 +02:00
  • 820e8efde1 v0.276.0: a restore and a drive move keep the app's records (R-697, R-700) admin 2026-09-27 17:59:04 +02:00
  • 54bb4da343 REPORT + CONTEXT: v0.275.0 released, floor 0.275.0 admin 2026-09-27 13:02:06 +02:00
  • 7fcda8f1a4 R-699: a unit that holds no data is never an update-precondition copy (found live on 9202) admin 2026-09-27 12:04:03 +02:00
  • b6810f14ff v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694 admin 2026-09-26 10:35:22 +02:00
  • fb2bcdd5d6 REPORT: v0.273.0 + v0.274.0 admin 2026-09-25 14:39:12 +02:00
  • 64cbefe317 CHANGELOG: v0.274.0 admin 2026-09-25 14:28:57 +02:00
  • 064f23896a kept data: the list names a leftover by the app that binds it through HDD_PATH, never the file browser (R-692, found live on 9202) admin 2026-09-25 13:51:26 +02:00
  • 43e99d160c kept data: the choice at reinstall, the list, the read-only view, the load (09 decision 36); R-690 fixed admin 2026-09-25 13:32:30 +02:00
  • 5a731b45b9 CHANGELOG: v0.273.0 admin 2026-09-25 13:30:50 +02:00
  • 7162f489c9 README + REUSE: the PostgreSQL conversion (v0.273.0) admin 2026-09-25 13:30:08 +02:00
  • 1c5dd07604 stacks: R-687 — an empty leg reports steps [], and a taken files_may_change step names its whole copy admin 2026-09-25 13:24:19 +02:00
  • b6399fdf0b stacks: the recovery line names CONVERTING, not UNDOING, for a restart during the conversion (found live on 9202) admin 2026-09-25 13:18:56 +02:00
  • 2caae38a71 stacks: the box converts a PostgreSQL major as a guarded-update step (09 6.4 part 10, decisions 35/37/38) admin 2026-09-25 12:57:03 +02:00
  • 3d49df1e5a REPORT + CONTEXT: v0.272.0, floor 0.272.0 admin 2026-09-25 11:33:46 +02:00
  • 44ae4dea70 controller v0.272.0: the backup page says when a whole-box backup does not fit (R-685); R-671, R-670, R-677 admin 2026-09-25 11:19:27 +02:00
  • 71accca427 rules: Peti's box retired 2026-09-25 — the fence is DooPlex and ep0 admin 2026-09-25 11:04:55 +02:00
  • cdfc817d5e REPORT + CONTEXT: v0.271.0 (automatic app updates), floor 0.271.0, the demo boxes' first real night admin 2026-09-25 04:55:09 +02:00
  • 9cf13a3add controller v0.271.0: automatic app updates — the update leg after the off-site copy, the backup gate waits, the switch (09 6.4 part 7; R-680, R-678, R-643) admin 2026-09-24 22:07:24 +02:00
  • 1495ca43fb REPORT + CONTEXT: v0.270.0 (floor 0.270.0, both demo boxes arrived) admin 2026-09-24 17:04:48 +02:00
  • 504eae018b v0.270.0: no update for a current app (R-679); an interrupted install is reported (R-681); a restore brings back the pinned version's health check (R-669); R-674 admin 2026-09-24 16:49:43 +02:00
  • 7c6140d95b REPORT + CONTEXT: v0.269.0/v0.269.1 night (floor 0.269.1) admin 2026-09-24 14:53:45 +02:00
  • 5b1b191ffc v0.269.1: an installed app keeps the image digest it runs until a guarded Update moves it admin 2026-09-24 13:01:31 +02:00
  • 3c6b49b31c controller v0.269.0: whole restore from the second drive; crash loops stopped; exact image digests; steps judged by their own .felhom.yml (decisions 26-28, R-661 R-666 R-667 R-668 R-664 R-665 R-662, 09 6.4 part 6) admin 2026-09-24 12:18:39 +02:00
  • 7c3b3a9694 REPORT + CONTEXT: v0.268.0 (2026-09-24) admin 2026-09-24 08:52:55 +02:00
  • 206b0357d1 controller v0.268.0: the undo finds volumes by definition; a held app names only a whole copy; one press = one tested step (R-658, R-659, R-660, R-651; 09 §6.4 part 5) admin 2026-09-24 08:15:27 +02:00
  • 80e6ad8c47 controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true admin 2026-09-23 20:25:28 +02:00
  • 15e630aa02 REPORT: v0.266.0 addendum (R-649) admin 2026-09-23 18:14:42 +02:00
  • 964ae7538f controller v0.266.0: a failed install removes what it started (R-649, operator ruling) admin 2026-09-23 18:06:29 +02:00
  • 411a43f8ef REPORT + CONTEXT: v0.265.0 live proof and floor raise admin 2026-09-23 17:39:48 +02:00
  • 0054d4bd69 controller v0.265.0: R-634 cause fixed, held apps say so, OOM storm alarm, R-647 leftovers admin 2026-09-23 17:16:57 +02:00
  • 0a3026180a REPORT + CONTEXT: v0.264.0 live proof and floor raise admin 2026-09-23 14:39:12 +02:00
  • bc278944a3 controller v0.264.0: the household is told when an update is undone or held, in its language admin 2026-09-23 13:51:21 +02:00
  • c3a2aba0d2 docs: CONTEXT and REPORT for v0.263.0-v0.263.2 (the undo) admin 2026-09-23 12:25:44 +02:00
  • 2cd66663f3 v0.263.2: the undo keeps the probe of the pinned version (R-637) admin 2026-09-23 11:53:53 +02:00
  • 5d38573a1a v0.263.1: the undo asks the old probe even on an app marked unhealthy (R-637) admin 2026-09-23 11:35:25 +02:00
  • 8fc2b4a1a9 v0.263.0: a failed update puts the app back by itself (09 decision 15, R-637) admin 2026-09-23 11:12:49 +02:00
  • b9deec1907 REPORT for v0.262.0 + v0.262.1 admin 2026-09-22 21:49:20 +02:00
  • 3d41758be0 v0.262.1: the busy refusal is a CONFLICT, not a server error (R-633) admin 2026-09-22 21:48:01 +02:00
  • b793638484 v0.262.0: six defects two drill nights found in the update, remove and hold paths admin 2026-09-22 20:45:19 +02:00
  • 93cee16843 CONTEXT + REPORT for v0.261.0 (R-608, R-609) admin 2026-09-21 15:00:29 +02:00
  • 811f75736e v0.261.0 — the controller no longer swaps itself out from under an app update (R-608, R-609) admin 2026-09-21 14:23:59 +02:00
  • d0d431b42b Correct a stale count repeated in four places: 10 floating pins, not 23 admin 2026-09-21 13:02:48 +02:00
  • bdeb1c0d8e REPORT + CONTEXT for v0.260.0 (R-524) admin 2026-09-21 12:59:26 +02:00
  • 8f8a64cad7 v0.260.0 — a box ahead of the catalog reads „Naprakész", and the pin never moves backwards (R-524) admin 2026-09-21 12:48:55 +02:00
  • 19ef0329ab CONTEXT + README: v0.259.0, and the two probe traps that cost the most admin 2026-09-21 08:07:27 +02:00
  • 0fe04bb6d5 v0.259.0 — the claim page and the backup warnings answer in the reader's language (R-596, R-598) admin 2026-09-21 07:45:56 +02:00
  • f6909492cc docs: v0.258.0's report, and what the walk then found admin 2026-09-20 19:27:33 +02:00
  • 7c4a33b6d1 v0.258.0: the last four Hungarian things an English household met admin 2026-09-20 18:10:53 +02:00
  • ecefdf2dc5 docs: the floor is at 0.257.0 and it delivered the feature (R-560) admin 2026-09-20 16:40:07 +02:00
  • eb806f5780 docs: v0.257.0 — README, REPORT, CONTEXT for the catalog read path (R-560) admin 2026-09-20 14:43:52 +02:00
  • 60f0a86bd4 v0.257.0: the app catalog can speak English (R-560, slice 5 Part A) admin 2026-09-20 14:31:52 +02:00
  • e81ad613ae v0.256.1: the push log says whether a household sentence was attached (R-558) admin 2026-09-18 17:06:20 +02:00
  • bef39598d0 v0.256.0: the box sends its own sentence in the household's language (R-558 Part B) admin 2026-09-18 16:54:20 +02:00