# REPORT — controller v0.243.0: a real file-manager password, a truthful backup page, no stop for a missing tier (2026-09-15)

Task: *before the volunteer — the big night's P1 fixes*, Parts B, C, E.2 (controller half). **MinAgent: 0.131.0.**
Architecture: `07-backup-architecture.md` §6, `02-controller-module-map.md` (settings after install).

## R-513 — FileBrowser password
Measured first (B.1): the config key / env var sets the password but re-applies it on every start (a hand-set password
is overwritten); the API (`PUT /api/users?id=…` + `X-Password: <current>`) changes it once. Shipped the API path for
fresh and existing boxes: probe admin/admin → 200: generate, set, verify new=200 and admin=401, store encrypted →
`generated`; 401 → `operator`; unreachable → nothing recorded. App page shows user `admin` + reveal (R-254 rules).
**Live:** 9202 (default) → generated, reveal 200 (16 chars), revealed=200 / admin=401 / wrong=401. 9201 (hand-set) →
first probe failed on DNS before the network join (retried), then `operator` at 08:52:10Z, untouched. Public
`files.enkisfelhom.hu` admin → 401. *One invalid run first (empty credential read) — marked in the evidence.*

## R-517 / R-518 — backup page and tier skip
Per tier: newest success, failed attempt under it, „nincs beállítva" for absent storage; „Naprakész" and the remote tick
from successes only; a tier with absent storage is skipped before anything stops (`backup_tier_skipped`). Button copy
tells the real downtime. **Live on 9201:** local and PBS rows „✓ … Naprakész", remote tick on a real PBS success. Found
live: the top card printed „0 B" for a size read back from storage → fixed to „–" on `main` (d3eacbb), **unreleased**.
Not live-measured: the absent-storage and failed-PBS states (unit-proven; making them on a demo box means removing its
PBS storage).

## R-514 — OOM visibility
`State.OOMKilled` read for running app containers → dashboard „Memória elfogyott" + `app_oom`. **Not proven live:**
in the LXC guest Docker reported neither a restart-OOM nor a child-process OOM (R-528). The task's tag text
„… — újraindítva" was not used: the controller does not restart the app.

## Red-proofs
PUT removed → admin/admin still logs in; operator branch removed → page does not say who set it; attempt-as-success →
size lost; skip disabled → manual run starts felhom-pbs, scheduled run stops an app; OOM filter inverted → killed worker
hidden; size flag removed → „would print a size it does not know".

## Delivery
Image `felhom-controller:0.243.0` built from `843b319`. Hub floor for **demo-hp only** 0.243.0 + declared MinAgent
0.131.0 → `managed floor SERVED … from declared`; 9201 on 0.243.0 in 19 s. Scratch 9202 set by hand (its disposition).
demo-felhom not moved (its agent is 0.130.0, the floor would hold). Full suite green before each commit.