felhom-controller/SESSION-2026-06-13-fixes.md

Session 2026-06-13 — audit-fix + docs-centralize working log

Working/checkpoint file for the unattended fix+docs session. Commit/push after each Part.

Progress log

• Part 1 — controller fixes → deploy: DONE & VERIFIED.

  • Fix 1 CTRL-001 (import path traversal) — appexport/validate.go + UnmarshalManifest guard + join-loop guards + regression test. Commit c20ff56.
  • Fix 2 CTRL-T2-1 + H10 (deploy.go slice) — transitional Deployed:false until compose succeeds; SaveAppConfig fail-closed on encrypt error. Regression tests. Commit 5a80739.
  • Fix 3 M2 (init-only stackProvider, lock removed + documented). Commit 092cbbe.
  • CHANGELOG v0.59.0. Commit 7c45fec. Pushed to main (eea235b..7c45fec).
  • Green gate: go build/vet/test ./... all PASS before each commit.
  • Deploy: built felhom-controller:0.59.0 on 192.168.0.180; deployed to guest 9201 (demo-felhom) via the bootstrap mechanism (/etc/felhom-controller-image + systemctl restart felhom-controller-bootstrap.service). Rollback ref was 0.58.0.
  • Verify: docker ps → 0.59.0 Up (healthy); self-test 6 passed/0 failed; "Controller elindult (0.59.0)"; hub report pushed; public URL https://felhom.demo-felhom.eu/api/health → HTTP 200 {"ok":true}. NO rollback needed.
  • Deploy-target note: CLAUDE.md's /opt/docker compose path is stale (re-platform). Live demo controller runs in LXC guest 9201 on felhom-pve, bootstrap-managed. felhotest (router.abonet.hu:33022) was unreachable (timeout) — skipped.

• Part 2 — agent AGENT-001 fix (branch only): in progress.

• Part 3 — audit/BUGHUNT records: pending.

• Part 4 — docs centralize + refresh: pending.

Assumptions

• "The demo node" = guest 9201 (runs the v0.58.0 the task cited; bootstrap-managed). felhotest unreachable, not deployed there.
• M2 included in v0.59.0 (trivial, zero-runtime-change) since Fixes 1-2 were green; no risk signal.