admin 15206314ab v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR) ...

Mint a 160-bit capability URL (/s/<token>) serving a standalone read-only guest
launcher: same tiles, opens apps in new tabs, no account, no admin session.
Information only, zero control — every privilege stays behind each app's own auth.

- /s/ pre-auth pass-through (after the claim gate) + session-CSRF exemption; guest
  password POST carries its own pre-auth HMAC CSRF.
- Constant-time token match; empty stored token = disabled = byte-identical mux 404.
- Optional per-share password: separate bcrypt hash + own attempt map; signed cookie
  = HMAC(token|passwordHash) keyed with web.session_secret, so rotate/change invalidates.
- Guest labels ride the v0.164.0 ruling; never expose internal state vocabulary.
- Token redacted in logs (/s/<redacted>); never in CHANGELOG/REPORT/CONTEXT.
- Admin modal: copy-link, QR (go-qrcode), set/clear password, rotate, disable.
- Tests: Groups A-G (14) + 3 red-proofs verified red.

2026-07-24 12:08:43 +02:00

..

static

D0 Part 1: vendored fonts + Lucide sprite + setup CSS fix

2026-07-02 14:05:41 +02:00

templates

v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)

2026-07-24 12:08:43 +02:00

agent_client_reuse_test.go

v0.74.0: fix controller->agent connection leak (reuse one agentapi client)

2026-06-22 17:19:24 +02:00

agent_disk_handlers.go

v0.126.4: edge-safe error statuses + native-alert ban — writeDiskJSON maps 502/504→500 (CF swallows those bodies; the M1 refusal reached the operator as a JSON SyntaxError popup), M1 refusal = typed errLastUsableDrive → 409; all 29 native alert() swept to showAlert + native_confirm_gate now bans alert( (F-11 class complete)

2026-07-13 14:13:05 +02:00

agent_host_metrics_handler_test.go

v0.57.0: stable host-storage list + per-app Tier-2 config panel

2026-06-13 14:23:34 +02:00

agent_host_metrics_handler.go

v0.57.0: stable host-storage list + per-app Tier-2 config panel

2026-06-13 14:23:34 +02:00

alerts.go

controller: fix-3 dead-app alerting + fix-6 ring cap/spill/spam (WIP, pre-build)

2026-07-12 10:07:47 +02:00

app_export_domain_test.go

v0.150.0 — green gate restored + the export link stops leaking the CSRF token

2026-07-20 09:42:24 +02:00

app_row_test.go

Indítópult launcher page + universal app placeholder icon (v0.163.0)

2026-07-24 09:16:28 +02:00

async_restore_test.go

v0.153.0 — R-47: the DB replay no longer races the app, on BOTH restore paths

2026-07-20 17:01:52 +02:00

auth.go

v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)

2026-07-24 12:08:43 +02:00

backup_handlers.go

v0.51.0: offsite-backup UI (felhom-pbs DR) + Model-A double-nest fix

2026-06-12 20:26:52 +02:00

backup_page_state_test.go

controller: backups IA split — four sub-pages (Áttekintés /backups, Távoli mentés /backups/remote, Alkalmazások /backups/apps, Visszaállítás /backups/restore); sections MOVED verbatim (backups_split_move_check.py enforces vs df7ad37); shared data builder extracted; offbox restore-to-verify relocated to the restore page; flash redirects + tier-3 anchors + tier2 back-link retargeted

2026-07-13 09:35:01 +02:00

backup_page_state.go

controller v0.121.0: backups page truth pass — remove dead Részletek card, real Tier-3 off-box state, SQLite-honest DB messaging

2026-07-12 12:26:30 +02:00

backups_remote_hubenabled_test.go

v0.161.0 — R-70: truthful hub-managed offsite empty state (kiépítve/automatikus banner replaces igényelhető + nincs beállítva in the pre-apply window)

2026-07-23 12:54:59 +02:00

backups_split_test.go

v0.154.0 — R-48: one restore entry per app, and the intent is a described choice

2026-07-21 08:30:42 +02:00

capture_layer_test.go

v0.116.0: observability pass — always-on debug ring + leveled sweep + agent tab + self-log pull — MinAgent: 0.81.0

2026-07-11 16:45:57 +02:00

claim_reset_response_test.go

controller: F-15 instant reset codes — reset-request response hash applied via the ACK's generation-guarded ClaimSync (emailed code works immediately; old-hub bare response = no-op)

2026-07-13 08:05:07 +02:00

claim_test.go

controller: customer-claim password gate v0.122.0 (closes DRILL-day0-vm F-4/F-5)

2026-07-12 18:42:39 +02:00

claim.go

feat(report): v0.139.0 — immediate out-of-cycle hub report on user actions (Direction 1)

2026-07-16 19:31:19 +02:00

csrf.go

v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)

2026-07-24 12:08:43 +02:00

dashboard_backup_card_test.go

v0.149.0 — F3: the dashboard backup card tells the truth about the last run

2026-07-20 09:04:11 +02:00

deadapp_alert_test.go

test: io.Discard logger in fix-3 tests

2026-07-12 10:08:39 +02:00

decommission_test.go

controller v0.68.0: storage lifecycle on intermediary model (H2/H3/M1/M3 + boot-id)

2026-06-15 19:26:02 +02:00

edge_safe_status_test.go

v0.126.4: edge-safe error statuses + native-alert ban — writeDiskJSON maps 502/504→500 (CF swallows those bodies; the M1 refusal reached the operator as a JSON SyntaxError popup), M1 refusal = typed errLastUsableDrive → 409; all 29 native alert() swept to showAlert + native_confirm_gate now bans alert( (F-11 class complete)

2026-07-13 14:13:05 +02:00

embed.go

D0 Part 1: vendored fonts + Lucide sprite + setup CSS fix

2026-07-02 14:05:41 +02:00

escrow_handlers.go

feat(report): v0.139.0 — immediate out-of-cycle hub report on user actions (Direction 1)

2026-07-16 19:31:19 +02:00

escrow_wait_state_test.go

feat(escrow): v0.138.0 — "awaiting hub confirmation" waiting state

2026-07-16 18:44:13 +02:00

escrow_wizard_test.go

@

2026-07-14 09:52:11 +02:00

export_download_test.go

controller: .fab browser download — the existing export pipeline staged under the data dir + a guarded streaming exit (estimate-first, io.Copy, post-stream cleanup, 1h TTL sweep); portability framing (decision 3); traversal guard red-proven, export→import round-trip + corrupt-bundle refusal unit-proven

2026-07-13 09:47:10 +02:00

fab_export_test.go

.fab exclusion scoping: classes in the manual export (Task 4, v0.136.0)

2026-07-15 11:28:40 +02:00

filebrowser_gate_test.go

v0.82.0: gate FileBrowser recreate on actual change (F2); drop unused restic binary (F1)

2026-06-24 11:01:18 +02:00

filebrowser_network_test.go

R-67: the NAS share appears in FileBrowser (v0.160.0)

2026-07-22 14:12:43 +02:00

fonts_test.go

D0 Part 4: settings visual pass + remaining pages; grep gate zero

2026-07-02 14:38:51 +02:00

funcmap_test.go

D0 Part 2: design system v2 — tokens, meter/tag/metarow, funcmap remap, dashboard + stacks

2026-07-02 14:22:27 +02:00

funcmap.go

v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)

2026-07-24 12:08:43 +02:00

handler_debug.go

R-66: the box's own address becomes visible (v0.159.0)

2026-07-22 13:49:57 +02:00

handler_export_download.go

.fab exclusion scoping: classes in the manual export (Task 4, v0.136.0)

2026-07-15 11:28:40 +02:00

handler_export_upload_test.go

docs: v0.152.0 REPORT/CONTEXT + fix an async race in TestFabUpload_GCAndIdleTimeout

2026-07-20 13:55:03 +02:00

handler_export_upload.go

v0.128.0: chunked browser .fab upload on /import (tunnel-proof)

2026-07-13 21:09:20 +02:00

handler_export.go

v0.150.0 — green gate restored + the export link stops leaking the CSRF token

2026-07-20 09:42:24 +02:00

handlers.go

v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)

2026-07-24 12:08:43 +02:00

inframeta_test.go

Part B: infra stacks carry identity — curated Hungarian metadata for cloudflared/traefik/filebrowser (v0.126.0)

2026-07-13 11:31:38 +02:00

inframeta.go

Indítópult launcher page + universal app placeholder icon (v0.163.0)

2026-07-24 09:16:28 +02:00

integrationmgr_race_test.go

fix(M25): atomic.Pointer for Server.integrationMgr (constructor-goroutine race)

2026-06-13 22:58:59 +02:00

intermediary_test.go

gate: the boot bind gate honours a customer's Stop (R-55, v0.157.0)

2026-07-21 14:53:11 +02:00

intermediary.go

gate: the boot bind gate honours a customer's Stop (R-55, v0.157.0)

2026-07-21 14:53:11 +02:00

launcher_polish_test.go

Launcher polish: monogram reveal-on-failure + app placeholder on every icon surface (v0.163.1)

2026-07-24 10:14:25 +02:00

launcher_test.go

Indítópult launcher page + universal app placeholder icon (v0.163.0)

2026-07-24 09:16:28 +02:00

levelfilter.go

v0.116.0: observability pass — always-on debug ring + leveled sweep + agent tab + self-log pull — MinAgent: 0.81.0

2026-07-11 16:45:57 +02:00

lifecycle_test.go

fix: lifecycle methods need value receivers - app detail page 500 (v0.158.1)

2026-07-21 16:33:00 +02:00

logbuffer_spill_test.go

test: clean message in fix-6 spill tests

2026-07-12 10:09:22 +02:00

logbuffer.go

fix-6: raise ring display cap to 5000 (viewer + Entries clamp); viewer default limit 1000

2026-07-12 10:21:34 +02:00

metabadge.go

catalog: app lifecycle states - available/hidden/abandoned (v0.158.0)

2026-07-21 16:19:58 +02:00

nav_accordion_test.go

test(nav): pin the v0.146.0 accordion's server-side half

2026-07-18 20:57:39 +02:00

netprobe_linux.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netprobe_other.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netprobe_stub_test.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netprobe.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netstorage_coherence_test.go

controller: F8 share-row stub fusion + F4 mapped_uid range validation (WIP, pre-build)

2026-07-12 09:37:12 +02:00

netstorage_gate_test.go

feat: agent-capability gate for coupled features — typed StatusError + Supports probe/cache + netstorage add gate (option-1)

2026-07-11 13:45:49 +02:00

netstorage_handlers_test.go

controller v0.92.0: NAS network storage Part A2 (registry + UI + per-share health)

2026-06-30 14:40:47 +02:00

netstorage_handlers.go

R-67: the NAS share appears in FileBrowser (v0.160.0)

2026-07-22 14:12:43 +02:00

netstorage_job_test.go

test: pin netProbeFSClass=network in the C5 child-body suite (real statfs on linux correctly refuses tempdir)

2026-07-11 21:15:48 +02:00

netstorage_job.go

R-67: the NAS share appears in FileBrowser (v0.160.0)

2026-07-22 14:12:43 +02:00

netstorage_remove_guard_test.go

C6B-F2: refuse network-share removal while a deployed app binds it

2026-07-14 15:28:24 +02:00

network_card_test.go

R-66: the box's own address becomes visible (v0.159.0)

2026-07-22 13:49:57 +02:00

networkstub_test.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

notifications_guard_test.go

v0.137.0: guard empty-email notification save (prevents alert-delivery wipe)

2026-07-15 19:40:01 +02:00

observability_test.go

v0.116.0: observability pass — always-on debug ring + leveled sweep + agent tab + self-log pull — MinAgent: 0.81.0

2026-07-11 16:45:57 +02:00

offbox_escrow_test.go

v0.142.0: offsite repo continuity — orphaned-repo guard (A) + run-status auto-refresh (C)

2026-07-17 10:47:30 +02:00

offbox_handlers.go

v0.154.0 — R-48: one restore entry per app, and the intent is a described choice

2026-07-21 08:30:42 +02:00

offbox_warning_display_test.go

Part E: the stale zero-toggle line tells the truth (v0.126.0)

2026-07-13 11:37:47 +02:00

ratelimit_ip_test.go

@

2026-07-14 09:52:11 +02:00

report_trigger_seam_test.go

feat(report): v0.139.0 — immediate out-of-cycle hub report on user actions (Direction 1)

2026-07-16 19:31:19 +02:00

restore_wizard_test.go

v0.155.0 — the restore wizard read the wrong "is something running" flag

2026-07-21 09:15:56 +02:00

restore_wizard.go

v0.155.0 — the restore wizard read the wrong "is something running" flag

2026-07-21 09:15:56 +02:00

route_unpublished_test.go

F5 (dashboard): surface 'route unpublished' for unhealthy/restarting deployed apps

2026-06-14 09:56:30 +02:00

samba_ensure_job_test.go

v0.147.0 — feedback slice 1: pressing a button says something

2026-07-19 09:30:30 +02:00

samba_ensure_job.go

v0.151.0 — the Megosztás page stops reloading, and says how to connect

2026-07-20 10:46:21 +02:00

server.go

v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)

2026-07-24 12:08:43 +02:00

settings_split_test.go

ux(storage): hide 'Eltávolítás a listából' on wizard-enrolled drives

2026-07-02 21:29:14 +02:00

share_handlers.go

v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)

2026-07-24 12:08:43 +02:00

share_test.go

v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)

2026-07-24 12:08:43 +02:00

share.go

v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)

2026-07-24 12:08:43 +02:00

sharing_connect_card_test.go

v0.152.0 + felhom-samba 1.1.0 — mDNS for macOS, and the card stops offering a dead form

2026-07-20 13:38:07 +02:00

sharing_handlers_test.go

fix(samba): separate storage-ROOT validation from share-TARGET validation

2026-07-18 11:54:35 +02:00

sharing_handlers.go

R-66: the box's own address becomes visible (v0.159.0)

2026-07-22 13:49:57 +02:00

sharing_status_contract_test.go

v0.151.0 — the Megosztás page stops reloading, and says how to connect

2026-07-20 10:46:21 +02:00

storage_classtag_test.go

v0.128.1: suppress the class hint on USB drives (ruling F5)

2026-07-13 21:40:37 +02:00

storage_handlers_test.go

F6 deeper half: poll agent /disks/format/status on the 15s client timeout (slow USB mkfs runs detached) — agentapi.FormatStatus + awaitAgentFormat; then mount+register. Found on the live leg.

2026-07-17 09:41:50 +02:00

storage_handlers.go

F6 deeper half: poll agent /disks/format/status on the 15s client timeout (slow USB mkfs runs detached) — agentapi.FormatStatus + awaitAgentFormat; then mount+register. Found on the live leg.

2026-07-17 09:41:50 +02:00

storage_init_job.go

v0.141.0: F6 initialize-to-usable (detached crash-safe init job + status poll) + F7 Vissza back-routes

2026-07-17 09:20:59 +02:00

storage_network_template_test.go

feat(ui): agent-outdated banner on the NAS settings page (capability gate, Part 3)

2026-07-11 13:49:29 +02:00

storage_wizard_csrf_test.go

v0.126.3: storage wizard CSRF on claimed boxes — wizard pages rendered via raw render() shipped an EMPTY csrf-meta token, every /api/storage/init|attach POST died with 'token mismatch'; latent until the claim arc (unclaimed boxes skip CsrfProtect); fix = executeTemplate injection + session-backed regression test (red-proven)

2026-07-13 13:51:19 +02:00

system_memory_handlers.go

v0.143.0 — guest RAM resize UI (R-24) — MinAgent: 0.90.0

2026-07-17 19:10:00 +02:00

system_memory_test.go

v0.143.0 — guest RAM resize UI (R-24) — MinAgent: 0.90.0

2026-07-17 19:10:00 +02:00

templates.go

v0.30.2: Report geo-restriction + logo/favicon update + Hub geo auth

2026-02-25 12:42:51 +01:00

tier2_config_handler.go

v0.88.0: app-email SMTP relay (in-process shim + per-app injection)

2026-06-29 08:45:04 +02:00

tier2_restore_handler_test.go

feat(web): C2 Parts 2+3 — POST /backup/tier2/restore + "Fájlok visszaállítása" button

2026-07-05 13:20:56 +02:00

validate_test.go

v0.76.0: campaign-#3 hardening (settings .bak recovery, restore stack_name validation, quiesce marker quarantine)

2026-06-22 23:34:33 +02:00

validate.go

v0.76.0: campaign-#3 hardening (settings .bak recovery, restore stack_name validation, quiesce marker quarantine)

2026-06-22 23:34:33 +02:00