felhom-controller

after_install_wiring_test.go

v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706

2026-09-28 18:38:30 +02:00

appstop_wiring_test.go

R-1252 (P2): a rejected or absent backup block never deletes second-drive copies — reconcile only on a valid classification; a rejected block is said on the app's status and once a day to the operator (backup_run_failures); kept copies stay kept (H2); Remove drops the kept records it deleted (H9). Commit only.

2026-10-24 20:07:16 +02:00

bootrecon_wiring_test.go

feat(v0.156.0): dead-primary alerting (R-51) + boot desired-state reconciliation (R-52)

2026-07-21 12:27:33 +02:00

bootwindow_test.go

boot window: sample REFRESHES first — a cached fleet made 'settled' meaningless

2026-08-02 20:17:12 +02:00

classify_runstates_test.go

C9-F1 + C9-F2: a restore that restored nothing, and a crash loop nobody saw (v0.183.0)

2026-07-28 18:53:56 +02:00

conversion_wiring_test.go

stacks: the box converts a PostgreSQL major as a guarded-update step (09 6.4 part 10, decisions 35/37/38)

2026-09-25 12:57:03 +02:00

crashloop_classify_test.go

C9-F1 + C9-F2: a restore that restored nothing, and a crash loop nobody saw (v0.183.0)

2026-07-28 18:53:56 +02:00

d28_unhealthy_stop_test.go

controller v0.269.0: whole restore from the second drive; crash loops stopped; exact image digests; steps judged by their own .felhom.yml (decisions 26-28, R-661 R-666 R-667 R-668 R-664 R-665 R-662, 09 6.4 part 6)

2026-09-24 12:18:39 +02:00

deadapp_observable_test.go

F-OBS: the dead-app check gets a positive observable (v0.180.0)

2026-07-28 10:27:28 +02:00

diskjudge_wiring_test.go

v0.317.0: a second copy counts only on a proven different disk; the no-drive install speaks in words (felhom.eu architecture/16, build A)

2026-10-15 21:21:54 +02:00

failed_restart_classify_test.go

C9-F1 + C9-F2: a restore that restored nothing, and a crash loop nobody saw (v0.183.0)

2026-07-28 18:53:56 +02:00

main.go

D48: a restore downloads first — every restore path resolves and pulls every image of the definition that will run before the stop, under the image-work lock held until the restore returns; a failed pull refuses with the app untouched (a deleted version and a busy registry read differently), one operator line. Red-proved. Commit only.

2026-10-25 09:38:28 +01:00

offsite_default_wiring_test.go

v0.283.0: apps go off-site by themselves (decision 50) with a size warning; a Stop holds during a backup (R-721); page slips (R-724/R-725)

2026-09-30 10:31:55 +02:00

opactions_wiring_test.go

Operator actions in the report reply (D1, R-314/R-279/R-177, decision 185)

2026-10-08 14:49:27 +02:00

opactions_wiring.go

Operator actions in the report reply (D1, R-314/R-279/R-177, decision 185)

2026-10-08 14:49:27 +02:00

prefs_sync_wiring_test.go

R-1199 reopened: a box with no list of its own reads the household's from the hub and adopts it, pushes its default once only when no household saved one; every push names its source; an empty saved list stays empty; R-1216 (D28 = A): the install page's swap sentence only when host swap is really short (shared case table); unreleased

2026-10-22 12:13:26 +02:00

prefs_sync_wiring.go

R-1199 reopened: a box with no list of its own reads the household's from the hub and adopts it, pushes its default once only when no household saved one; every push names its source; an empty saved list stays empty; R-1216 (D28 = A): the install page's swap sentence only when host swap is really short (shared case table); unreleased

2026-10-22 12:13:26 +02:00

quiesce_notify_wiring_test.go

R-97: a failing backup is heard, and stops blaming the apps (v0.177.0)

2026-07-27 17:01:41 +02:00

r208_dockerfile_args_test.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

r330_backup_suppression_test.go

R-330: stop the backup alarming about the apps it is holding down (v0.224.0)

2026-08-30 17:58:15 +02:00

r356_deployed_seam_test.go

R-356: the off-site restore refused every app that has no data drive

2026-08-22 13:08:46 +02:00

r359_wiring_test.go

R-585: the last customer-facing producers follow the household's language

2026-10-06 02:01:12 +02:00

r361_classifier_control_test.go

v0.222.0: ask whether a supervised member is DEAD before whether one is UNHEALTHY (R-384), and stop promising an undo copy nobody looked for (R-383)

2026-08-23 07:25:00 +02:00

r363_fillwatch_interval_test.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

r379_hold_gate_test.go

R-379/R-380: put the customer's undo copy back when a database restore fails

2026-08-22 18:03:18 +02:00

r384_dead_db_alarm_test.go

v0.222.0: ask whether a supervised member is DEAD before whether one is UNHEALTHY (R-384), and stop promising an undo copy nobody looked for (R-383)

2026-08-23 07:25:00 +02:00

r386_intent_test.go

v0.223.0: the app-down alarm reached nobody (R-329), and the stop nobody heard (R-386)

2026-08-23 11:21:06 +02:00

r399_no_event_test.go

v0.228.0 — the off-site check reads the data; the debug page stops lying (R-399 + R-400)

2026-08-31 10:24:29 +02:00

r475_wiring_test.go

controller v0.268.0: the undo finds volumes by definition; a held app names only a whole copy; one press = one tested step (R-658, R-659, R-660, R-651; 09 §6.4 part 5)

2026-09-24 08:15:27 +02:00

r521_drive_lost_test.go

R-521: an app a lost drive stopped no longer mails app_start_failed one by one

2026-10-05 21:55:37 +02:00

r521_f7_rootfs_test.go

v0.309.0: the fill warning reaches the household in its own language; the root-filesystem disk event pinned end to end (R-521 F7)

2026-10-12 17:11:53 +02:00

r659_wiring_test.go

controller v0.268.0: the undo finds volumes by definition; a held app names only a whole copy; one press = one tested step (R-658, R-659, R-660, R-651; 09 §6.4 part 5)

2026-09-24 08:15:27 +02:00

r660_held_not_down_test.go

controller v0.268.0: the undo finds volumes by definition; a held app names only a whole copy; one press = one tested step (R-658, R-659, R-660, R-651; 09 §6.4 part 5)

2026-09-24 08:15:27 +02:00

r721_wiring_test.go

v0.283.1: a Stop holds during the volume dump in production and at the crash recovery (R-721, found live on v0.283.0)

2026-09-30 10:52:19 +02:00

r856_wiring_test.go

R-1112: open the family store when the controller starts

2026-10-17 09:56:12 +02:00

r871_catchup_wiring_test.go

v0.295.0: a box that was off at its backup time catches up once (R-871, decision 109); the missed-backup banner (decision 110); a late daily timer after a host suspend is skipped

2026-10-05 09:27:16 +02:00

r970_no_hub_key_door_test.go

R-970: the box's hub key opens no route; Data tab leftovers; R-1103: the install form's dead branches

2026-10-16 18:24:00 +02:00

r1105_dockerfile_restic_test.go

Debian 13 runtime with restic 0.18.1 pinned outside the OS; restic assumptions re-proven; felhom-samba 1.2.0 (R-1105, R-972)

2026-10-16 20:33:57 +02:00

r1176_ack_order_test.go

kept second-drive copies (D25: R-1175, R-1181, R-1179); .fab import keeps the family gate (R-1191); stale restore temp (R-1188 c); the overcommit sentence made true (R-1192); escrow before the floor (R-1176); unreleased

2026-10-21 15:46:10 +02:00

r1189d_wiring_test.go

R-1187 (c): refuse a .fab import over an installed app that is not running (it merged old and bundle data); R-1189 (d): the off-site proof + integrity check run after a catch-up; unreleased

2026-10-22 17:27:56 +02:00

r1253_export_marker_test.go

R-1253 (P2): an export that stops its app refuses while another operation (a restore) holds the app-stop marker — its Undo is never replaced. Commit only.

2026-10-24 20:29:59 +02:00

restore_record_wiring_test.go

R-1251: sync the restore copy's folders before the marker names it (a cut left undo.json as .tmp on Tester 1); the interrupted-restore record says the put-back waits, not 'run it again'. Commit only.

2026-10-24 19:36:32 +02:00

restore_record_wiring.go

R-1251: sync the restore copy's folders before the marker names it (a cut left undo.json as .tmp on Tester 1); the interrupted-restore record says the put-back waits, not 'run it again'. Commit only.

2026-10-24 19:36:32 +02:00

run_record_wiring_test.go

controller v0.296.0: a backup run cut off by a power cut or restart is said on the backup pages (R-519); the whole-system backup text states today's measurement (R-518)

2026-10-05 12:14:54 +02:00

run_record_wiring.go

controller v0.296.0: a backup run cut off by a power cut or restart is said on the backup pages (R-519); the whole-system backup text states today's measurement (R-518)

2026-10-05 12:14:54 +02:00

seam_witnesses.go

seam sweep: move the TieredBackend witness into production code (no version bump)

2026-07-27 18:23:50 +02:00

slice4_wiring_test.go

R-645: the night backup skips an app whose pinned version is not the one it runs (09 decision 142)

2026-10-06 11:39:25 +02:00

straycopy_wiring_test.go

Stray-copy fix: the capped second-drive copy container never outlives the copy — fixed name + label, removed by name on any error (the timeout included), every leftover removed at start before the scheduler and web server; a restore is refused while a copy runs or may still run; --mount (refuses a path the daemon does not see) and the image ID with --pull never (review); red-proved; unreleased

2026-10-22 20:20:35 +02:00

update_events_wiring_test.go

controller v0.265.0: R-634 cause fixed, held apps say so, OOM storm alarm, R-647 leftovers

2026-09-23 17:16:57 +02:00

update_leg_wiring_test.go

controller v0.272.0: the backup page says when a whole-box backup does not fit (R-685); R-671, R-670, R-677

2026-09-25 11:19:27 +02:00

upwatch_wiring_test.go

upwatch: hold a seeding torrent app for one line test, then put its limit back exactly (R-1250)

2026-10-24 13:19:07 +02:00

upwatch_wiring.go

upwatch: hold a seeding torrent app for one line test, then put its limit back exactly (R-1250)

2026-10-24 13:19:07 +02:00