felhom-controller/SESSION-2026-06-13-fixes.md

Session 2026-06-13 — audit-fix + docs-centralize working log

Working/checkpoint file for the unattended fix+docs session. Commit/push after each Part.

Progress log

• Part 1 — controller fixes → deploy: DONE & VERIFIED.

  • Fix 1 CTRL-001 (import path traversal) — appexport/validate.go + UnmarshalManifest guard + join-loop guards + regression test. Commit c20ff56.
  • Fix 2 CTRL-T2-1 + H10 (deploy.go slice) — transitional Deployed:false until compose succeeds; SaveAppConfig fail-closed on encrypt error. Regression tests. Commit 5a80739.
  • Fix 3 M2 (init-only stackProvider, lock removed + documented). Commit 092cbbe.
  • CHANGELOG v0.59.0. Commit 7c45fec. Pushed to main (eea235b..7c45fec).
  • Green gate: go build/vet/test ./... all PASS before each commit.
  • Deploy: built felhom-controller:0.59.0 on 192.168.0.180; deployed to guest 9201 (demo-felhom) via the bootstrap mechanism (/etc/felhom-controller-image + systemctl restart felhom-controller-bootstrap.service). Rollback ref was 0.58.0.
  • Verify: docker ps → 0.59.0 Up (healthy); self-test 6 passed/0 failed; "Controller elindult (0.59.0)"; hub report pushed; public URL https://felhom.demo-felhom.eu/api/health → HTTP 200 {"ok":true}. NO rollback needed.
  • Deploy-target note: CLAUDE.md's /opt/docker compose path is stale (re-platform). Live demo controller runs in LXC guest 9201 on felhom-pve, bootstrap-managed. felhotest (router.abonet.hu:33022) was unreachable (timeout) — skipped.

• Part 2 — agent AGENT-001 fix (branch only): DONE. Branch fix/agent-001-wipe-durable-reresolve @ d96e5bd (agent repo), pushed, NOT merged/deployed. antiRetargetResolve (resolve→re-derive+match→re-inspect, format the re-resolved device); injectable reresolveWipe seam; unit test covers mismatch/gone/blank/empty refusals; existing integration test green via stub. AGENT-001-FIX-NOTES.md on the branch (5-line review checklist). Full agent go build/vet/test ./... green.

• Part 3 — audit/BUGHUNT records: DONE. Audit records → felhom.eu/documentation/audits/{deep-sweep,bughunt-reconcile}-2026-06-13.md with per-finding remediation-status headers (felhom.eu 4320c01). Controller root BUGHUNT.md reconciliation banner (H10 fixed, pointer) — controller 6cd1fc9.

• Part 4 — docs centralize + refresh: DONE. felhom.eu/documentation/ now has: top-level README.md index; controller/ subtree (README, module-map superseding the v0.33 planning map, + 4 code-verified feature docs: deploy/stack-lifecycle, backup-architecture, storage-monitoring-metrics, auth-hub-sync-integrations); REORG-NOTES-2026-06-13.md (rationale + verification ledger + flagged doc-gaps). felhom.eu 21d0e7c/e68fe3e. Controller README.md banner → central docs; CONTEXT.md banner refreshed to v0.59.0; stray controller/mnt/ artifact removed — controller 86a61fb. Agent/hub design-drafts left as-is (flagged drift in REORG-NOTES per the cardinal rule).

Final state

• Controller main: fixes + docs through 86a61fb; v0.59.0 deployed+verified on demo 9201.
• Agent: fix on branch fix/agent-001-wipe-durable-reresolve d96e5bd (PENDING REVIEW).
• felhom.eu main: docs through e68fe3e.

Assumptions

• "The demo node" = guest 9201 (runs the v0.58.0 the task cited; bootstrap-managed). felhotest unreachable, not deployed there.
• M2 included in v0.59.0 (trivial, zero-runtime-change) since Fixes 1-2 were green; no risk signal.